tqt/Ghost
2
1
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2023-12-13 21:00:40 +01:00
Code Issues 1 Releases Wiki Activity
Ghost/yarn.lock

6525 lines
217 KiB
Text
Raw Normal View History

✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
# yarn lockfile v1
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
"@babel/code-frame@^7.0.0":
version "7.0.0"
resolved "https://registry.yarnpkg.com/@babel/code-frame/-/code-frame-7.0.0.tgz#06e2ab19bdb535385559aabb5ba59729482800f8"
dependencies:
"@babel/highlight" "^7.0.0"
"@babel/highlight@^7.0.0":
version "7.0.0"
resolved "https://registry.yarnpkg.com/@babel/highlight/-/highlight-7.0.0.tgz#f710c38c8d458e6dd9a201afb637fcb781ce99e4"
dependencies:
chalk "^2.0.0"
esutils "^2.0.2"
js-tokens "^4.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
"@babel/polyfill@^7.0.0":
version "7.2.5"
resolved "https://registry.yarnpkg.com/@babel/polyfill/-/polyfill-7.2.5.tgz#6c54b964f71ad27edddc567d065e57e87ed7fa7d"
dependencies:
core-js "^2.5.7"
regenerator-runtime "^0.12.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@nexes/mongo-knex@0.3.0":
version "0.3.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-knex/-/mongo-knex-0.3.0.tgz#e0078f8ddf7fcd4d907fe5cf2390644218753cf0"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
debug "^4.1.0"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
lodash "^4.17.10"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@nexes/mongo-utils@0.2.0":
version "0.2.0"
resolved "https://registry.yarnpkg.com/@nexes/mongo-utils/-/mongo-utils-0.2.0.tgz#28b483e88f2433ee269aa6b91f7339b7ab1e7d45"
dependencies:
bluebird "^3.5.3"
ghost-ignition "^2.9.6"
lodash "^4.17.11"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 13:15:16 +02:00
"@nexes/nql-lang@0.0.1":
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
version "0.0.1"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 13:15:16 +02:00
resolved "https://registry.yarnpkg.com/@nexes/nql-lang/-/nql-lang-0.0.1.tgz#a13c023873f9bc11b9e4e284449c6cfbeccc8011"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@nexes/nql@0.2.1":
version "0.2.1"
resolved "https://registry.yarnpkg.com/@nexes/nql/-/nql-0.2.1.tgz#cc314f77d9fcbb0d321669db3dd74de880b0c694"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@nexes/mongo-knex" "0.3.0"
"@nexes/mongo-utils" "0.2.0"
✨Added advanced filtering to Dynamic Routing (#9757) refs #9601, refs #9742 - Upgraded NQL to 0.1.0 - The new version of NQL supports aliases e.g. `tag: tags.slug`, which makes it possible to define `filter=tag:support` - Furthermore, this allows us to support advanced filtering like tag:[a,b] - In dynamic routing, we use mingo via NQL which has a slightly different feature set to GQL in the API: - AND NOT, OR and other advanced logic combos DO work on joined tables - Counts are not yet supported - The Dynamic Routing beta docs should describe that API filtering and Dynamic Routing filtering is different
2018-08-03 13:15:16 +02:00
"@nexes/nql-lang" "0.0.1"
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
mingo "2.2.2"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
"@segment/loosely-validate-event@^2.0.0":
version "2.0.0"
resolved "https://registry.yarnpkg.com/@segment/loosely-validate-event/-/loosely-validate-event-2.0.0.tgz#87dfc979e5b4e7b82c5f1d8b722dfd5d77644681"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
dependencies:
component-type "^1.2.1"
join-component "^1.1.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
"@sindresorhus/is@^0.7.0":
version "0.7.0"
resolved "https://registry.yarnpkg.com/@sindresorhus/is/-/is-0.7.0.tgz#9a06f4f137ee84d7df0460c1fdb1135ffa6c50fd"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
"@sinonjs/commons@^1.0.2", "@sinonjs/commons@^1.3.0":
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/@sinonjs/commons/-/commons-1.3.0.tgz#50a2754016b6f30a994ceda6d9a0a8c36adda849"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
type-detect "4.0.8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@sinonjs/formatio@^3.1.0":
version "3.1.0"
resolved "https://registry.yarnpkg.com/@sinonjs/formatio/-/formatio-3.1.0.tgz#6ac9d1eb1821984d84c4996726e45d1646d8cce5"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@sinonjs/samsam" "^2 || ^3"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
"@sinonjs/samsam@^2 || ^3", "@sinonjs/samsam@^3.0.2":
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/@sinonjs/samsam/-/samsam-3.0.2.tgz#304fb33bd5585a0b2df8a4c801fcb47fa84d8e43"
dependencies:
"@sinonjs/commons" "^1.0.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
array-from "^2.1.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
lodash.get "^4.4.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
Bump gscan to version 1.4.3 no issue - fixes a bug, that didn't catch errors caused by corrupt zip files - uses a fork of the `extract-zip` dependency with a bug fix for https://github.com/maxogden/extract-zip/issues/65
2018-05-16 04:00:53 +02:00
"@tryghost/extract-zip@1.6.6":
version "1.6.6"
resolved "https://registry.yarnpkg.com/@tryghost/extract-zip/-/extract-zip-1.6.6.tgz#937e0e775fec6dea937ac49d73a068bcafb67f50"
dependencies:
concat-stream "1.6.0"
debug "2.6.9"
mkdirp "0.5.0"
yauzl "2.4.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
"@types/bluebird@^3.5.25":
version "3.5.25"
resolved "https://registry.yarnpkg.com/@types/bluebird/-/bluebird-3.5.25.tgz#59188b871208092e37767e4b3d80c3b3eaae43bd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
JSONSelect@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/JSONSelect/-/JSONSelect-0.4.0.tgz#a08edcc67eb3fcbe99ed630855344a0cf282bb8d"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
abbrev@1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.1.1.tgz#f8f2c887ad10bf67f634f005b6987fed3179aac8"
abbrev@1.0.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.9"
resolved "https://registry.yarnpkg.com/abbrev/-/abbrev-1.0.9.tgz#91b4792588a7738c25f35dd6f63752a2f8776135"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
accepts@~1.3.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.3.5"
resolved "https://registry.yarnpkg.com/accepts/-/accepts-1.3.5.tgz#eb777df6011723a3b14e8a72c0805c8e86746bd2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
mime-types "~2.1.18"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
negotiator "0.6.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
acorn-jsx@^3.0.0:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-3.0.1.tgz#afdf9488fb1ecefc8348f6fb22f464e32a58b36b"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
acorn "^3.0.4"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
acorn-jsx@^5.0.0:
version "5.0.1"
resolved "https://registry.yarnpkg.com/acorn-jsx/-/acorn-jsx-5.0.1.tgz#32a064fd925429216a09b141102bfdd185fae40e"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
acorn@^3.0.4:
version "3.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/acorn/-/acorn-3.3.0.tgz#45e37fb39e8da3f25baee3ff5369e2bb5f22017a"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
acorn@^5.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "5.7.3"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-5.7.3.tgz#67aa231bf8812974b85235a96771eb6bd07ea279"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
acorn@^6.0.2:
version "6.0.5"
resolved "https://registry.yarnpkg.com/acorn/-/acorn-6.0.5.tgz#81730c0815f3f3b34d8efa95cb7430965f4d887a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
addressparser@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/addressparser/-/addressparser-0.3.2.tgz#59873f35e8fcf6c7361c10239261d76e15348bb2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
ajv-keywords@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ajv-keywords/-/ajv-keywords-2.1.1.tgz#617997fc5f60576894c435f940d819e135b80762"
Added JSON Schema validation for /posts endpoint (#10468) refs #10438 - Added validation helper based on JSON schema - Added schema validation for POST/PUT in /posts endpoints - Refactored existing authors validation test suite - Extended test coverage with a minimally required structure of post.add validator
2019-02-08 11:40:58 +01:00
ajv@6.8.1:
version "6.8.1"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.8.1.tgz#0890b93742985ebf8973cd365c5b23920ce3cb20"
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
ajv@^5.2.3, ajv@^5.3.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "5.5.2"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-5.5.2.tgz#73b5eeca3fab653e3d3f9422b341ad42205dc965"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
co "^4.6.0"
fast-deep-equal "^1.0.0"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.3.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
ajv@^6.5.3, ajv@^6.5.5, ajv@^6.6.1:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "6.7.0"
resolved "https://registry.yarnpkg.com/ajv/-/ajv-6.7.0.tgz#e3ce7bb372d6577bb1839f1dfdfcbf5ad2948d96"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
dependencies:
fast-deep-equal "^2.0.1"
fast-json-stable-stringify "^2.0.0"
json-schema-traverse "^0.4.1"
uri-js "^4.2.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
alphanum-sort@^1.0.1, alphanum-sort@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/alphanum-sort/-/alphanum-sort-1.0.2.tgz#97a1119649b211ad33691d9f9f486a8ec9fbe0a3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
amdefine@>=0.0.4:
version "1.0.1"
resolved "https://registry.yarnpkg.com/amdefine/-/amdefine-1.0.1.tgz#4a5282ac164729e93619bcfd3ad151f817ce91f5"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
amperize@0.3.8:
version "0.3.8"
resolved "https://registry.yarnpkg.com/amperize/-/amperize-0.3.8.tgz#d928295ff5ca9bfa4afec24ed70e77382c3181a2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
async "^2.1.4"
emits "^3.0.0"
got "^7.1.0"
htmlparser2 "^3.9.2"
Bump amperize to version 0.3.6 (#9264) no issue New version contains - dependency updates - Node v8 support - Eslint refactoring
2017-11-21 15:00:04 +01:00
image-size "0.6.1"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
lodash "^4.17.4"
Update amperize to version 0.3.4 🚀 (#7964) closes #7864 - manual PR is needed, because master is on amperize 1.0.0 - but 1.0.0 was not published on purpose - the latest release is 0.3.4 * chore: yarn.lock
2017-02-08 19:50:58 +01:00
uuid "^3.0.0"
Bump amperize to version 0.3.6 (#9264) no issue New version contains - dependency updates - Node v8 support - Eslint refactoring
2017-11-21 15:00:04 +01:00
validator "^9.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
analytics-node@3.3.0:
version "3.3.0"
resolved "https://registry.yarnpkg.com/analytics-node/-/analytics-node-3.3.0.tgz#7fb4be288c253d00857e840bf9ef642b64313ac0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
dependencies:
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
"@segment/loosely-validate-event" "^2.0.0"
axios "^0.17.1"
axios-retry "^3.0.2"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
commander "^2.9.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
lodash.isstring "^4.0.1"
md5 "^2.2.1"
ms "^2.0.0"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
remove-trailing-slash "^0.1.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
uuid "^3.2.1"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
ansi-escapes@^3.0.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "3.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/ansi-escapes/-/ansi-escapes-3.1.0.tgz#f73207bb81207d75fd6c83f125af26eea378ca30"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
ansi-regex@^2.0.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-2.1.1.tgz#c3b33ab5ee360d86e0e628f0468ae7ef27d654df"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
ansi-regex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-3.0.0.tgz#ed0317c322064f79466c02966bddb605ab37d998"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
ansi-regex@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/ansi-regex/-/ansi-regex-4.0.0.tgz#70de791edf021404c3fd615aa89118ae0432e5a9"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
ansi-styles@^2.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-2.2.1.tgz#b432dd3358b634cf75e1e4664368240533c1ddbe"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
ansi-styles@^3.2.0, ansi-styles@^3.2.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "3.2.1"
resolved "https://registry.yarnpkg.com/ansi-styles/-/ansi-styles-3.2.1.tgz#41fbb20243e50b12be0f04b8dedbf07520ce841d"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
color-convert "^1.9.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
append-field@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/append-field/-/append-field-1.0.0.tgz#1e3440e915f0b1203d23748e78edd7b9b5b43e56"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
aproba@^1.0.3:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/aproba/-/aproba-1.2.0.tgz#6802e6264efd18c790a1b0d517f0f2627bf2c94a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
archiver-utils@^1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-1.3.0.tgz#e50b4c09c70bf3d680e32ff1b7994e9f9d895174"
dependencies:
glob "^7.0.0"
graceful-fs "^4.1.0"
lazystream "^1.0.0"
lodash "^4.8.0"
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
archiver-utils@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/archiver-utils/-/archiver-utils-2.0.0.tgz#5639818a8b5d89d0ffc51b72c39283cf4fea14a1"
dependencies:
glob "^7.0.0"
graceful-fs "^4.1.0"
lazystream "^1.0.0"
lodash.assign "^4.2.0"
lodash.defaults "^4.2.0"
lodash.difference "^4.5.0"
lodash.flatten "^4.4.0"
lodash.isplainobject "^4.0.6"
lodash.toarray "^4.4.0"
lodash.union "^4.6.0"
normalize-path "^3.0.0"
readable-stream "^2.0.0"
archiver@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/archiver/-/archiver-3.0.0.tgz#50b2628cf032adcbf35d35d111b5324db95bfb69"
dependencies:
archiver-utils "^2.0.0"
async "^2.0.0"
buffer-crc32 "^0.2.1"
glob "^7.0.0"
readable-stream "^2.0.0"
tar-stream "^1.5.0"
zip-stream "^2.0.1"
archiver@^1.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/archiver/-/archiver-1.3.0.tgz#4f2194d6d8f99df3f531e6881f14f15d55faaf22"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
archiver-utils "^1.3.0"
async "^2.0.0"
buffer-crc32 "^0.2.1"
glob "^7.0.0"
lodash "^4.8.0"
readable-stream "^2.0.0"
tar-stream "^1.5.0"
walkdir "^0.0.11"
zip-stream "^1.1.0"
are-we-there-yet@~1.1.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.1.5"
resolved "https://registry.yarnpkg.com/are-we-there-yet/-/are-we-there-yet-1.1.5.tgz#4b35c2944f062a8bfcda66410760350fe9ddfc21"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
delegates "^1.0.0"
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 19:21:47 +02:00
readable-stream "^2.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
argparse@^1.0.2, argparse@^1.0.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.0.10"
resolved "https://registry.yarnpkg.com/argparse/-/argparse-1.0.10.tgz#bcd6791ea5ae09725e17e5ad988134cd40b3d911"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
sprintf-js "~1.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
arr-diff@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/arr-diff/-/arr-diff-4.0.0.tgz#d6461074febfec71e7e15235761a329a5dc7c520"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
arr-flatten@^1.1.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/arr-flatten/-/arr-flatten-1.1.0.tgz#36048bbff4e7b47e136644316c99669ea5ae91f1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
arr-union@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/arr-union/-/arr-union-3.1.0.tgz#e39b09aea9def866a8f206e288af63919bae39c4"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
array-each@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/array-each/-/array-each-1.0.1.tgz#a794af0c05ab1752846ee753a1f211a05ba0c44f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
array-find-index@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/array-find-index/-/array-find-index-1.0.2.tgz#df010aa1287e164bbda6f9723b0a96a1ec4187a1"
array-flatten@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/array-flatten/-/array-flatten-1.1.1.tgz#9a5f699051b1e7073328f2a008968b64ea2955d2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
array-from@^2.1.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/array-from/-/array-from-2.1.1.tgz#cfe9d8c26628b9dc5aecc62a9f5d8f1f352c1195"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
array-slice@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/array-slice/-/array-slice-1.1.0.tgz#e368ea15f89bc7069f7ffb89aec3a6c7d4ac22d4"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
array-uniq@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/array-uniq/-/array-uniq-1.0.3.tgz#af6ac877a25cc7f74e058894753858dfdb24fdb6"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
array-unique@^0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/array-unique/-/array-unique-0.3.2.tgz#a894b75d4bc4f6cd679ef3244a9fd8f46ae2d428"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
asn1@~0.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "0.2.4"
resolved "https://registry.yarnpkg.com/asn1/-/asn1-0.2.4.tgz#8d2475dfab553bb33e77b54e59e880bb8ce23136"
dependencies:
safer-buffer "~2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
assert-plus@1.0.0, assert-plus@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assert-plus/-/assert-plus-1.0.0.tgz#f12e0f3c5d77b0b1cdd9146942e4e96c1e4dd525"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
assertion-error@^1.1.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/assertion-error/-/assertion-error-1.1.0.tgz#e60b6b0e8f301bd97e5375215bda406c85118c0b"
assign-symbols@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/assign-symbols/-/assign-symbols-1.0.0.tgz#59667f41fadd4f20ccbc2bb96b8d4f7f78ec0367"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
astral-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/astral-regex/-/astral-regex-1.0.0.tgz#6c8c3fb827dd43ee3918f27b82782ab7658a6fd9"
async@1.x, async@^1.4.0, async@^1.5.0, async@~1.5.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.5.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
async@^2.0.0, async@^2.1.2, async@^2.1.4, async@^2.5.0, async@^2.6.0, async@^2.6.1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "2.6.1"
resolved "https://registry.yarnpkg.com/async/-/async-2.6.1.tgz#b245a23ca71930044ec53fa46aa00a3e87c6a610"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
lodash "^4.17.10"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
asynckit@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/asynckit/-/asynckit-0.4.0.tgz#c79ed97f7f34cb8f2ba1bc9790bcc366474b4b79"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
atob@^2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/atob/-/atob-2.1.2.tgz#6d9517eb9e030d2436666651e86bd9f6f13533c9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
autoprefixer@^6.3.1:
version "6.7.7"
resolved "https://registry.yarnpkg.com/autoprefixer/-/autoprefixer-6.7.7.tgz#1dbd1c835658e35ce3f9984099db00585c782014"
dependencies:
browserslist "^1.7.6"
caniuse-db "^1.0.30000634"
normalize-range "^0.1.2"
num2fraction "^1.2.2"
postcss "^5.2.16"
postcss-value-parser "^3.2.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
aws-sdk-apis@3.x:
version "3.1.10"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/aws-sdk-apis/-/aws-sdk-apis-3.1.10.tgz#4eed97f590a16cf080fd1b8d8cfdf2472de8ab0e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
aws-sdk@2.0.5:
version "2.0.5"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/aws-sdk/-/aws-sdk-2.0.5.tgz#f3ebb1898d0632b7b6672e8d77728cbbb69f98c6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
aws-sdk-apis "3.x"
xml2js "0.2.6"
xmlbuilder "0.4.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
aws-sign2@~0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/aws-sign2/-/aws-sign2-0.7.0.tgz#b46e890934a9591f2d2f6f86d7e6a9f1b3fe76a8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
aws4@^1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/aws4/-/aws4-1.8.0.tgz#f0e003d9ca9e7f59c7a508945d7b2ef9a04a542f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
axios-retry@^3.0.2:
version "3.1.1"
resolved "https://registry.yarnpkg.com/axios-retry/-/axios-retry-3.1.1.tgz#88d2971f671a9023b21d887c5dcac6c54f332cde"
dependencies:
is-retry-allowed "^1.1.0"
axios@^0.17.1:
version "0.17.1"
resolved "https://registry.yarnpkg.com/axios/-/axios-0.17.1.tgz#2d8e3e5d0bdbd7327f91bc814f5c57660f81824d"
dependencies:
follow-redirects "^1.2.5"
is-buffer "^1.1.5"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
babel-code-frame@^6.22.0:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "6.26.0"
resolved "https://registry.yarnpkg.com/babel-code-frame/-/babel-code-frame-6.26.0.tgz#63fd43f7dc1e3bb7ce35947db8fe369a3f58c74b"
dependencies:
chalk "^1.1.3"
esutils "^2.0.2"
js-tokens "^3.0.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
babel-runtime@^6.26.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "6.26.0"
resolved "https://registry.yarnpkg.com/babel-runtime/-/babel-runtime-6.26.0.tgz#965c7058668e82b55d7bfe04ff2337bc8b5647fe"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
core-js "^2.4.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
regenerator-runtime "^0.11.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
balanced-match@^0.4.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.4.2"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-0.4.2.tgz#cb3f3e3c732dc0f01ee70b403f302e61d7709838"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
balanced-match@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/balanced-match/-/balanced-match-1.0.0.tgz#89b4d199ab2bee49de164ea02b89ce462d71b767"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
base64-js@^1.0.2:
version "1.3.0"
resolved "https://registry.yarnpkg.com/base64-js/-/base64-js-1.3.0.tgz#cab1e6118f051095e58b5281aea8c1cd22bfc0e3"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
base64url@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/base64url/-/base64url-3.0.1.tgz#6399d572e2bc3f90a9a8b22d5dbb0a32d33f788d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
base@^0.11.1:
version "0.11.2"
resolved "https://registry.yarnpkg.com/base/-/base-0.11.2.tgz#7bde5ced145b6d551a90db87f83c558b4eb48a8f"
dependencies:
cache-base "^1.0.1"
class-utils "^0.3.5"
component-emitter "^1.2.1"
define-property "^1.0.0"
isobject "^3.0.1"
mixin-deep "^1.2.0"
pascalcase "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
bcrypt-pbkdf@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz#a4301d389b6a43f9b67ff3ca11a3f6637e360e9e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
tweetnacl "^0.14.3"
Update bcryptjs to version 2.4.3 🚀 (#7949) * chore(package): update bcryptjs to version 2.4.3 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 18:54:16 +01:00
bcryptjs@2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/bcryptjs/-/bcryptjs-2.4.3.tgz#9ab5627b93e60621ff7cdac5da9733027df1d0cb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
bignumber.js@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/bignumber.js/-/bignumber.js-4.1.0.tgz#db6f14067c140bd46624815a7916c92d9b6c24b1"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
bindings@^1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/bindings/-/bindings-1.3.1.tgz#21fc7c6d67c18516ec5aaa2815b145ff77b26ea5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
bl@^1.0.0, bl@^1.0.1:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "1.2.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/bl/-/bl-1.2.2.tgz#a160911717103c07410cef63ef51b397c025af9c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
readable-stream "^2.3.5"
safe-buffer "^5.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
block-stream@*:
version "0.0.9"
resolved "https://registry.yarnpkg.com/block-stream/-/block-stream-0.0.9.tgz#13ebfe778a03205cfe03751481ebb4b3300c126a"
dependencies:
inherits "~2.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
bluebird@3.5.3, bluebird@^3.0.5, bluebird@^3.4.1, bluebird@^3.4.3, bluebird@^3.4.6, bluebird@^3.5.1, bluebird@^3.5.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "3.5.3"
resolved "https://registry.yarnpkg.com/bluebird/-/bluebird-3.5.3.tgz#7d01c6f9616c9a51ab0f8c549a79dfe6ec33efa7"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
body-parser@1.18.3:
version "1.18.3"
resolved "https://registry.yarnpkg.com/body-parser/-/body-parser-1.18.3.tgz#5b292198ffdd553b3a0f20ded0592b956955c8b4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
bytes "3.0.0"
content-type "~1.0.4"
debug "2.6.9"
depd "~1.1.2"
http-errors "~1.6.3"
iconv-lite "0.4.23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
on-finished "~2.3.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
qs "6.5.2"
raw-body "2.3.3"
type-is "~1.6.16"
body@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/body/-/body-5.1.0.tgz#e4ba0ce410a46936323367609ecb4e6553125069"
dependencies:
continuable-cache "^0.3.1"
error "^7.0.0"
raw-body "~1.1.0"
safe-json-parse "~1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Fixed triggering bookshelf event twice no issue - bumped bookshelf-relations - IMO this bug is not critical, because our event listeners should be protected to run twice
2019-02-07 22:10:12 +01:00
bookshelf-relations@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/bookshelf-relations/-/bookshelf-relations-1.1.0.tgz#35c883c569d8bddb334bbe4bed1fdc1e64d6d0ad"
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 14:28:05 +01:00
dependencies:
Introduced model._changed refs #9248 - Bookshelf gives access to ".changed" before the update - Discussion: https://github.com/bookshelf/bookshelf/issues/1943 - We also need to know what has changed after the update to be able to decide if we should trigger events - Furthermore: Bookshelf cannot handle relation updates, it always marks relations as changed even though they did not change - Bumped bookshelf-relations to be able to - know if relations were updated - ensure we unset relations on bookshelf's ".changed"
2019-02-02 10:24:53 +01:00
bluebird "3.5.3"
ghost-ignition "3.0.0"
lodash "4.17.11"
Add bookshelf-relations (#9252) no issue - added https://github.com/TryGhost/bookshelf-relations as dependency - remove existing tag handling --- * Important: Ensure we trigger parent initialize function - otherwise the plugin is unable to listen on model events - important: event order for listeners is Ghost -> Plugin - Ghost should be able to listen on the events as first instance - e.g. be able to modify/validate relationships * Fix tag validation - we detect lower/update case slugs for tags manually - this can't be taken over from the plugin obviously - ensure we update the target model e.g. this.set('tags', ...) * override base fn: `permittedAttributes` - ensure we call the base - put relations on top - each relation is allowed to be passed - the plugin will auto-unset any relations to it does not reach the database * Ensure we run add/edit/delete within a transaction - updating nested relationships requires sql queries - all sql statements have to run in a single transaction to ensure we rollback everything if an error occurs - use es6
2017-11-21 14:28:05 +01:00
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
bookshelf@0.14.2:
version "0.14.2"
resolved "https://registry.yarnpkg.com/bookshelf/-/bookshelf-0.14.2.tgz#4b50b47a1e3d0265a1bfc118fa2036ad6a7493f2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bluebird "^3.4.3"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
colorette "^1.0.7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
create-error "~0.3.1"
inflection "^1.5.1"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
lodash "^4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
boolbase@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/boolbase/-/boolbase-1.0.0.tgz#68dff5fbe60c51eb37725ea9e3ed310dcc1e776e"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
brace-expansion@^1.1.7:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.1.11"
resolved "https://registry.yarnpkg.com/brace-expansion/-/brace-expansion-1.1.11.tgz#3c7fcbf529d87226f3d2f52b966ff5271eb441dd"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
balanced-match "^1.0.0"
concat-map "0.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
braces@^2.3.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.3.2"
resolved "https://registry.yarnpkg.com/braces/-/braces-2.3.2.tgz#5979fd3f14cd531565e5fa2df1abfff1dfaee729"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
arr-flatten "^1.1.0"
array-unique "^0.3.2"
extend-shallow "^2.0.1"
fill-range "^4.0.0"
isobject "^3.0.1"
repeat-element "^1.1.2"
snapdragon "^0.8.1"
snapdragon-node "^2.0.1"
split-string "^3.0.2"
to-regex "^3.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
browser-stdout@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.0.tgz#f351d32969d32fa5d7a5567154263d928ae3bd1f"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
browser-stdout@1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/browser-stdout/-/browser-stdout-1.3.1.tgz#baa559ee14ced73452229bad7326467c61fabd60"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
browserslist@^1.3.6, browserslist@^1.5.2, browserslist@^1.7.6:
version "1.7.7"
resolved "https://registry.yarnpkg.com/browserslist/-/browserslist-1.7.7.tgz#0bd76704258be829b2398bb50e4b62d1a166b0b9"
dependencies:
caniuse-db "^1.0.30000639"
electron-to-chromium "^1.2.7"
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 18:29:40 +01:00
brute-knex@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/brute-knex/-/brute-knex-3.0.1.tgz#c8b82e10e97821a006e878ed81b6ec109931d181"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
express-brute "^1.0.0"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
knex "0.14.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
bson-objectid@1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/bson-objectid/-/bson-objectid-1.2.4.tgz#5932784c407dc033d8e1064c31f2ce3005d5a00b"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
buffer-alloc-unsafe@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/buffer-alloc-unsafe/-/buffer-alloc-unsafe-1.1.0.tgz#bd7dc26ae2972d0eda253be061dba992349c19f0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
buffer-alloc@^1.1.0, buffer-alloc@^1.2.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/buffer-alloc/-/buffer-alloc-1.2.0.tgz#890dd90d923a873e08e10e5fd51a57e5b7cce0ec"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
buffer-alloc-unsafe "^1.1.0"
buffer-fill "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
buffer-crc32@^0.2.1:
version "0.2.13"
resolved "https://registry.yarnpkg.com/buffer-crc32/-/buffer-crc32-0.2.13.tgz#0d333e3f00eac50aa1454abd30ef8c2a5d9a7242"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
buffer-equal-constant-time@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/buffer-equal-constant-time/-/buffer-equal-constant-time-1.0.1.tgz#f8e71132f7ffe6e01a5c9697a4c6f3e48d5cc819"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
buffer-fill@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/buffer-fill/-/buffer-fill-1.0.0.tgz#f8f78b76789888ef39f205cd637f68e702122b2c"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
buffer-from@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/buffer-from/-/buffer-from-1.1.1.tgz#32713bc028f75c02fdb710d7c7bcec1f2c6070ef"
buffer@^5.1.0:
version "5.2.1"
resolved "https://registry.yarnpkg.com/buffer/-/buffer-5.2.1.tgz#dd57fa0f109ac59c602479044dca7b8b3d0b71d6"
dependencies:
base64-js "^1.0.2"
ieee754 "^1.1.4"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
builtin-modules@^1.0.0:
version "1.1.1"
resolved "https://registry.yarnpkg.com/builtin-modules/-/builtin-modules-1.1.1.tgz#270f076c5a72c02f5b65a47df94c5fe3a278892f"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
bunyan-loggly@^1.3.1:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/bunyan-loggly/-/bunyan-loggly-1.4.1.tgz#b6c806fb34bfcde2ce0d98878cf3534620b969e7"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
json-stringify-safe "^5.0.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
node-loggly-bulk "^2.2.4"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
bunyan@1.8.12:
version "1.8.12"
resolved "https://registry.yarnpkg.com/bunyan/-/bunyan-1.8.12.tgz#f150f0f6748abdd72aeae84f04403be2ef113797"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
optionalDependencies:
dtrace-provider "~0.8"
moment "^2.10.6"
mv "~2"
safe-json-stringify "~1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
busboy@^0.2.11:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "0.2.14"
resolved "https://registry.yarnpkg.com/busboy/-/busboy-0.2.14.tgz#6c2a622efcf47c57bbbe1e2a9c37ad36c7925453"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
dicer "0.2.5"
readable-stream "1.1.x"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
bytes@1:
version "1.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-1.0.0.tgz#3569ede8ba34315fab99c3e92cb04c7220de1fa8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
bytes@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/bytes/-/bytes-3.0.0.tgz#d32815404d689699f85a4ea4fa8755dd13a96048"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
cache-base@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/cache-base/-/cache-base-1.0.1.tgz#0a7f46416831c8b662ee36fe4e7c59d76f666ab2"
dependencies:
collection-visit "^1.0.0"
component-emitter "^1.2.1"
get-value "^2.0.6"
has-value "^1.0.0"
isobject "^3.0.1"
set-value "^2.0.0"
to-object-path "^0.3.0"
union-value "^1.0.0"
unset-value "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
cacheable-request@^2.1.1:
version "2.1.4"
resolved "https://registry.yarnpkg.com/cacheable-request/-/cacheable-request-2.1.4.tgz#0d808801b6342ad33c91df9d0b44dc09b91e5c3d"
dependencies:
clone-response "1.0.2"
get-stream "3.0.0"
http-cache-semantics "3.8.1"
keyv "3.0.0"
lowercase-keys "1.0.0"
normalize-url "2.0.1"
responselike "1.0.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
caller-path@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/caller-path/-/caller-path-0.1.0.tgz#94085ef63581ecd3daa92444a8fe94e82577751f"
dependencies:
callsites "^0.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
caller@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/caller/-/caller-1.0.1.tgz#b851860f70e195db3d277395aa1a7e23ea30ecf5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
callsites@^0.2.0:
version "0.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/callsites/-/callsites-0.2.0.tgz#afab96262910a7f33c19a5775825c69f34e350ca"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
callsites@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/callsites/-/callsites-3.0.0.tgz#fb7eb569b72ad7a45812f93fd9430a3e410b3dd3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
camelcase-keys@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/camelcase-keys/-/camelcase-keys-2.1.0.tgz#308beeaffdf28119051efa1d932213c91b8f92e7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
camelcase "^2.0.0"
map-obj "^1.0.0"
camelcase@^2.0.0, camelcase@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/camelcase/-/camelcase-2.1.1.tgz#7c1d16d679a1bbe59ca02cacecfb011e201f5a1f"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
caniuse-api@^1.5.2:
version "1.6.1"
resolved "https://registry.yarnpkg.com/caniuse-api/-/caniuse-api-1.6.1.tgz#b534e7c734c4f81ec5fbe8aca2ad24354b962c6c"
dependencies:
browserslist "^1.3.6"
caniuse-db "^1.0.30000529"
lodash.memoize "^4.1.2"
lodash.uniq "^4.5.0"
caniuse-db@^1.0.30000529, caniuse-db@^1.0.30000634, caniuse-db@^1.0.30000639:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.0.30000929"
resolved "https://registry.yarnpkg.com/caniuse-db/-/caniuse-db-1.0.30000929.tgz#f18c557b9cbf33e2787134c915b82e3ed3331b87"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
caseless@~0.12.0:
version "0.12.0"
resolved "https://registry.yarnpkg.com/caseless/-/caseless-0.12.0.tgz#1b681c21ff84033c826543090689420d187151dc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
chai@^4.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/chai/-/chai-4.2.0.tgz#760aa72cf20e3795e84b12877ce0e83737aa29e5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
assertion-error "^1.1.0"
check-error "^1.0.2"
deep-eql "^3.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
get-func-name "^2.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
pathval "^1.1.0"
type-detect "^4.0.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
chalk@2.3.2:
version "2.3.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.3.2.tgz#250dc96b07491bfd601e648d66ddf5f60c7a5c65"
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
ansi-styles "^3.2.1"
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
escape-string-regexp "^1.0.5"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
supports-color "^5.3.0"
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
chalk@2.4.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.4.1"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.1.tgz#18c49ab16a037b6eb0152cc83e3471338215b66e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
chalk@2.4.2, chalk@^2.0.0, chalk@^2.1.0, chalk@^2.4.1, chalk@^2.4.2, chalk@~2.4.1:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-2.4.2.tgz#cd42541677a54333cf541a49108c1432b44c9424"
dependencies:
ansi-styles "^3.2.1"
escape-string-regexp "^1.0.5"
supports-color "^5.3.0"
Bumped chalk from version 1.1.3 to 2.4.2 refs #9389 - i was not able to find a breaking change, which affects us - https://github.com/chalk/chalk/releases/tag/v2.0.0
2019-01-21 14:21:13 +01:00
chalk@^1.0.0, chalk@^1.1.1, chalk@^1.1.3:
version "1.1.3"
resolved "https://registry.yarnpkg.com/chalk/-/chalk-1.1.3.tgz#a8115c55e4a702fe4d150abd3872822a7e09fc98"
dependencies:
ansi-styles "^2.2.1"
escape-string-regexp "^1.0.2"
has-ansi "^2.0.0"
strip-ansi "^3.0.0"
supports-color "^2.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
chardet@^0.4.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "0.4.2"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.4.2.tgz#b5473b33dc97c424e5d98dc87d55d4d8a29c8bf2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
chardet@^0.7.0:
version "0.7.0"
resolved "https://registry.yarnpkg.com/chardet/-/chardet-0.7.0.tgz#90094849f0937f2eedc2425d0d28a9e5f0cbad9e"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
charenc@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/charenc/-/charenc-0.0.2.tgz#c0a1d2f3a7092e03774bfa83f14c0fc5790a8667"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
check-error@^1.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/check-error/-/check-error-1.0.2.tgz#574d312edd88bb5dd8912e9286dd6c0aed4aac82"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
cheerio@0.22.0:
version "0.22.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/cheerio/-/cheerio-0.22.0.tgz#a9baa860a3f9b595a6b81b1a86873121ed3a269e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
css-select "~1.2.0"
dom-serializer "~0.1.0"
entities "~1.1.1"
htmlparser2 "^3.9.1"
lodash.assignin "^4.0.9"
lodash.bind "^4.1.4"
lodash.defaults "^4.0.1"
lodash.filter "^4.4.0"
lodash.flatten "^4.2.0"
lodash.foreach "^4.3.0"
lodash.map "^4.4.0"
lodash.merge "^4.4.0"
lodash.pick "^4.2.1"
lodash.reduce "^4.4.0"
lodash.reject "^4.4.0"
lodash.some "^4.4.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
chownr@^1.0.1, chownr@^1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/chownr/-/chownr-1.1.1.tgz#54726b8b8fff4df053c42187e801fb4412df1494"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
circular-json@^0.3.1:
version "0.3.3"
resolved "https://registry.yarnpkg.com/circular-json/-/circular-json-0.3.3.tgz#815c99ea84f6809529d2f45791bdf82711352d66"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
cjson@~0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/cjson/-/cjson-0.2.1.tgz#73cd8aad65d9e1505f9af1744d3b79c1527682a5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
clap@^1.0.9:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.2.3"
resolved "https://registry.yarnpkg.com/clap/-/clap-1.2.3.tgz#4f36745b32008492557f46412d66d50cb99bce51"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
chalk "^1.1.3"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
class-utils@^0.3.5:
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
version "0.3.6"
resolved "https://registry.yarnpkg.com/class-utils/-/class-utils-0.3.6.tgz#f93369ae8b9a7ce02fd41faad0ca83033190c463"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
arr-union "^3.1.0"
define-property "^0.2.5"
isobject "^3.0.0"
static-extend "^0.1.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
cli-cursor@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/cli-cursor/-/cli-cursor-2.1.0.tgz#b35dac376479facc3e94747d41d0d0f5238ffcb5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
restore-cursor "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
cli-width@^2.0.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/cli-width/-/cli-width-2.2.0.tgz#ff19ede8a9a5e579324147b0c11f0fbcbabed639"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
cliui@^3.0.3:
version "3.2.0"
resolved "https://registry.yarnpkg.com/cliui/-/cliui-3.2.0.tgz#120601537a916d29940f934da3b48d585a39213d"
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
wrap-ansi "^2.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
clone-response@1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/clone-response/-/clone-response-1.0.2.tgz#d1dc973920314df67fbeb94223b4ee350239e96b"
dependencies:
mimic-response "^1.0.0"
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
clone@^1.0.2:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/clone/-/clone-1.0.4.tgz#da309cc263df15994c688ca902179ca3c7cd7c7e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
co@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/co/-/co-4.6.0.tgz#6ea6bdf3d853ae54ccb8e47bfa0bf3f9031fb184"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
coa@~1.0.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/coa/-/coa-1.0.4.tgz#a9ef153660d6a86a8bdec0289a5c684d217432fd"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
q "^1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
code-point-at@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/code-point-at/-/code-point-at-1.1.0.tgz#0d070b4d043a5bea33a2f1a40e2edb3d9a4ccf77"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
coffeescript@~1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/coffeescript/-/coffeescript-1.10.0.tgz#e7aa8301917ef621b35d8a39f348dcdd1db7e33e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
collection-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/collection-visit/-/collection-visit-1.0.0.tgz#4bc0373c164bc3291b4d368c829cf1a80a59dca0"
dependencies:
map-visit "^1.0.0"
object-visit "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
color-convert@^1.3.0, color-convert@^1.9.0, color-convert@^1.9.1:
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
version "1.9.3"
resolved "https://registry.yarnpkg.com/color-convert/-/color-convert-1.9.3.tgz#bb71850690e1f136567de629d2d5471deda4c1e8"
dependencies:
color-name "1.1.3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
color-name@1.1.3:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.3.tgz#a7d0558bd89c42f795dd42328f740831ca53bc25"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
color-name@^1.0.0:
version "1.1.4"
resolved "https://registry.yarnpkg.com/color-name/-/color-name-1.1.4.tgz#c2a09a87acbde69543de6f63fa3995c826c536a2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
color-string@^0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/color-string/-/color-string-0.3.0.tgz#27d46fb67025c5c2fa25993bfbf579e47841b991"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
color-name "^1.0.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
color-string@^1.5.2:
version "1.5.3"
resolved "https://registry.yarnpkg.com/color-string/-/color-string-1.5.3.tgz#c9bbc5f01b58b5492f3d6857459cb6590ce204cc"
dependencies:
color-name "^1.0.0"
simple-swizzle "^0.2.2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
color@^0.11.0:
version "0.11.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/color/-/color-0.11.4.tgz#6d7b5c74fb65e841cd48792ad1ed5e07b904d764"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
clone "^1.0.2"
color-convert "^1.3.0"
color-string "^0.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
color@^3.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/color/-/color-3.1.0.tgz#d8e9fb096732875774c84bf922815df0308d0ffc"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
dependencies:
color-convert "^1.9.1"
color-string "^1.5.2"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
colorette@^1.0.7:
version "1.0.7"
resolved "https://registry.yarnpkg.com/colorette/-/colorette-1.0.7.tgz#7adf43c445ee63a541b4a4aef7d13f03df1e0cc0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
colormin@^1.0.5:
version "1.1.2"
resolved "https://registry.yarnpkg.com/colormin/-/colormin-1.1.2.tgz#ea2f7420a72b96881a38aae59ec124a6f7298133"
dependencies:
color "^0.11.0"
css-color-names "0.0.4"
has "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
colors@0.5.x:
version "0.5.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/colors/-/colors-0.5.1.tgz#7d0023eaeb154e8ee9fce75dcb923d0ed1667774"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
colors@^1.1.2:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "1.3.3"
resolved "https://registry.yarnpkg.com/colors/-/colors-1.3.3.tgz#39e005d546afe01e01f9c4ca8fa50f686a01205d"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
colors@~1.1.2:
version "1.1.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/colors/-/colors-1.1.2.tgz#168a4701756b6a7f51a12ce0c97bfa28c084ed63"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
combined-stream@^1.0.6, combined-stream@~1.0.6:
version "1.0.7"
resolved "https://registry.yarnpkg.com/combined-stream/-/combined-stream-1.0.7.tgz#2d1d24317afb8abe95d6d2c0b07b57813539d828"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
delayed-stream "~1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
commander@2.11.0:
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
version "2.11.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.11.0.tgz#157152fd1e7a6c8d98a5b715cf376df928004563"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
commander@2.15.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.15.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/commander/-/commander-2.15.1.tgz#df46e867d0fc2aec66a34662b406a9ccafff5b0f"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
commander@^2.15.1, commander@^2.19.0, commander@^2.9.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.19.0"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.19.0.tgz#f6198aa84e5b83c46054b94ddedbfed5ee9ff12a"
commander@~2.17.1:
version "2.17.1"
resolved "https://registry.yarnpkg.com/commander/-/commander-2.17.1.tgz#bd77ab7de6de94205ceacc72f1716d29f20a77bf"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
compare-ver@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/compare-ver/-/compare-ver-2.0.2.tgz#8ecb8eb9dbf23ff2d87c56e74cbbb2cb7ffd9d7a"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
component-emitter@^1.2.0, component-emitter@^1.2.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-emitter/-/component-emitter-1.2.1.tgz#137918d6d78283f7df7a6b7c5a63e140e69425e6"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
component-type@^1.2.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/component-type/-/component-type-1.2.1.tgz#8a47901700238e4fc32269771230226f24b415a9"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
compress-commons@^1.2.0:
version "1.2.2"
resolved "https://registry.yarnpkg.com/compress-commons/-/compress-commons-1.2.2.tgz#524a9f10903f3a813389b0225d27c48bb751890f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
buffer-crc32 "^0.2.1"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
crc32-stream "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
normalize-path "^2.0.0"
readable-stream "^2.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
compressible@~2.0.14:
version "2.0.15"
resolved "https://registry.yarnpkg.com/compressible/-/compressible-2.0.15.tgz#857a9ab0a7e5a07d8d837ed43fe2defff64fe212"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
mime-db ">= 1.36.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
compression@1.7.3:
version "1.7.3"
resolved "https://registry.yarnpkg.com/compression/-/compression-1.7.3.tgz#27e0e176aaf260f7f2c2813c3e440adb9f1993db"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
accepts "~1.3.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
bytes "3.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
compressible "~2.0.14"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
debug "2.6.9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
on-headers "~1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
safe-buffer "5.1.2"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
vary "~1.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
concat-map@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/concat-map/-/concat-map-0.0.1.tgz#d8a96bd77fd68df7793a73036a3ba0d5405d477b"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
concat-stream@1.6.0:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "1.6.0"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.0.tgz#0aac662fd52be78964d5532f694784e70110acf7"
dependencies:
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
concat-stream@1.6.2, concat-stream@^1.5.2, concat-stream@^1.6.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/concat-stream/-/concat-stream-1.6.2.tgz#904bdf194cd3122fc675c77fc4ac3d4ff0fd1a34"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
buffer-from "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
inherits "^2.0.3"
readable-stream "^2.2.2"
typedarray "^0.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
config-chain@~1.1.5:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.12"
resolved "https://registry.yarnpkg.com/config-chain/-/config-chain-1.1.12.tgz#0fde8d091200eb5e808caf25fe618c02f48e4efa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
ini "^1.3.4"
proto-list "~1.2.1"
connect-slashes@1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/connect-slashes/-/connect-slashes-1.3.1.tgz#95d61830d0f9d5853c8688f0b5f43988b186ac37"
console-control-strings@^1.0.0, console-control-strings@~1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/console-control-strings/-/console-control-strings-1.1.0.tgz#3d7cf4464db6446ea644bf4b39507f9851008e8e"
Update express to version 4.14.1 🚀 (#7912) * chore(package): update express to version 4.14.1 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 16:33:15 +01:00
content-disposition@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/content-disposition/-/content-disposition-0.5.2.tgz#0cf68bb9ddf5f2be7961c3a85178cb85dba78cb4"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
content-type@^1.0.2, content-type@~1.0.4:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/content-type/-/content-type-1.0.4.tgz#e138cc75e040c727b1966fe5e5f8c9aee256fe3b"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
continuable-cache@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/continuable-cache/-/continuable-cache-0.3.1.tgz#bd727a7faed77e71ff3985ac93351a912733ad0f"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
cookie-session@1.3.2:
version "1.3.2"
resolved "https://registry.yarnpkg.com/cookie-session/-/cookie-session-1.3.2.tgz#469dba76308c010b529e9a7cf9d87b649be0190b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
cookies "0.7.1"
debug "2.6.9"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
on-headers "~1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
cookie-signature@1.0.6:
version "1.0.6"
resolved "https://registry.yarnpkg.com/cookie-signature/-/cookie-signature-1.0.6.tgz#e303a882b342cc3ee8ca513a79999734dab3ae2c"
cookie@0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/cookie/-/cookie-0.3.1.tgz#e7e0a1f9ef43b4c8ba925c5c5a96e806d16873bb"
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 15:19:07 +01:00
cookiejar@^2.1.0, cookiejar@^2.1.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/cookiejar/-/cookiejar-2.1.2.tgz#dd8a235530752f988f9a0844f3fc589e3111125c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
cookies@0.7.1:
version "0.7.1"
resolved "https://registry.yarnpkg.com/cookies/-/cookies-0.7.1.tgz#7c8a615f5481c61ab9f16c833731bcb8f663b99b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
depd "~1.1.1"
keygrip "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
copy-descriptor@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/copy-descriptor/-/copy-descriptor-0.1.1.tgz#676f6eb3c39997c2ee1ac3a924fd6124748f578d"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
core-js@^2.4.0, core-js@^2.5.7:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "2.6.2"
resolved "https://registry.yarnpkg.com/core-js/-/core-js-2.6.2.tgz#267988d7268323b349e20b4588211655f0e83944"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
core-util-is@1.0.2, core-util-is@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/core-util-is/-/core-util-is-1.0.2.tgz#b5fd54220aa2bc5ab57aab7140c940754503c1a7"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
cors@2.8.5:
version "2.8.5"
resolved "https://registry.yarnpkg.com/cors/-/cors-2.8.5.tgz#eac11da51592dd86b9f06f6e7ac293b3df875d29"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Update cors to version 2.8.3 🚀 (#8240) * chore(package): update cors to version 2.8.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 09:45:42 +02:00
object-assign "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
vary "^1"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
crc32-stream@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/crc32-stream/-/crc32-stream-2.0.0.tgz#e3cdd3b4df3168dd74e3de3fbbcb7b297fe908f4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
crc "^3.4.4"
readable-stream "^2.0.0"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 10:35:23 +02:00
crc@3.4.4:
version "3.4.4"
resolved "https://registry.yarnpkg.com/crc/-/crc-3.4.4.tgz#9da1e980e3bd44fc5c93bf5ab3da3378d85e466b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
crc@^3.4.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/crc/-/crc-3.8.0.tgz#ad60269c2c856f8c299e2c4cc0de4556914056c6"
dependencies:
buffer "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
create-error@~0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/create-error/-/create-error-0.3.1.tgz#69810245a629e654432bf04377360003a5351a23"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
cross-spawn@^5.1.0:
version "5.1.0"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-5.1.0.tgz#e8bd0efee58fcff6f8f94510a0a554bbfa235449"
dependencies:
lru-cache "^4.0.1"
shebang-command "^1.2.0"
which "^1.2.9"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
cross-spawn@^6.0.0, cross-spawn@^6.0.5:
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
version "6.0.5"
resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
dependencies:
nice-try "^1.0.4"
path-key "^2.0.1"
semver "^5.5.0"
shebang-command "^1.2.0"
which "^1.2.9"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
crypt@~0.0.1:
version "0.0.2"
resolved "https://registry.yarnpkg.com/crypt/-/crypt-0.0.2.tgz#88d7ff7ec0dfb86f713dc87bbb42d044d3e6c41b"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
css-color-names@0.0.4:
version "0.0.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/css-color-names/-/css-color-names-0.0.4.tgz#808adc2e79cf84738069b646cb20ec27beb629e0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
css-select@~1.2.0:
version "1.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/css-select/-/css-select-1.2.0.tgz#2b3a110539c5355f1cd8d314623e870b121ec858"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
boolbase "~1.0.0"
css-what "2.1"
domutils "1.5.1"
nth-check "~1.0.1"
css-what@2.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/css-what/-/css-what-2.1.2.tgz#c0876d9d0480927d7d4920dcd72af3595649554d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
cssnano@^3.0.0:
version "3.10.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/cssnano/-/cssnano-3.10.0.tgz#4f38f6cea2b9b17fa01490f23f1dc68ea65c1c38"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
autoprefixer "^6.3.1"
decamelize "^1.1.2"
defined "^1.0.0"
has "^1.0.1"
object-assign "^4.0.1"
postcss "^5.0.14"
postcss-calc "^5.2.0"
postcss-colormin "^2.1.8"
postcss-convert-values "^2.3.4"
postcss-discard-comments "^2.0.4"
postcss-discard-duplicates "^2.0.1"
postcss-discard-empty "^2.0.1"
postcss-discard-overridden "^0.1.1"
postcss-discard-unused "^2.2.1"
postcss-filter-plugins "^2.0.0"
postcss-merge-idents "^2.1.5"
postcss-merge-longhand "^2.0.1"
postcss-merge-rules "^2.0.3"
postcss-minify-font-values "^1.0.2"
postcss-minify-gradients "^1.0.1"
postcss-minify-params "^1.0.4"
postcss-minify-selectors "^2.0.4"
postcss-normalize-charset "^1.1.0"
postcss-normalize-url "^3.0.7"
postcss-ordered-values "^2.1.0"
postcss-reduce-idents "^2.2.2"
postcss-reduce-initial "^1.0.0"
postcss-reduce-transforms "^1.0.3"
postcss-svgo "^2.1.1"
postcss-unique-selectors "^2.0.2"
postcss-value-parser "^3.2.3"
postcss-zindex "^2.0.1"
csso@~2.3.1:
version "2.3.2"
resolved "https://registry.yarnpkg.com/csso/-/csso-2.3.2.tgz#ddd52c587033f49e94b71fc55569f252e8ff5f85"
dependencies:
clap "^1.0.9"
source-map "^0.5.3"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
csv-parser@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/csv-parser/-/csv-parser-2.1.0.tgz#e42b3c1cdc431b60b75fd38d24eb1685e57bf943"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
buffer-alloc "^1.1.0"
buffer-from "^1.0.0"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
execa "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
generate-function "^1.0.1"
generate-object-property "^1.0.0"
minimist "^1.2.0"
ndjson "^1.4.0"
currently-unhandled@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/currently-unhandled/-/currently-unhandled-0.4.1.tgz#988df33feab191ef799a61369dd76c17adf957ea"
dependencies:
array-find-index "^1.0.1"
dashdash@^1.12.0:
version "1.14.1"
resolved "https://registry.yarnpkg.com/dashdash/-/dashdash-1.14.1.tgz#853cfa0f7cbe2fed5de20326b8dd581035f6e2f0"
dependencies:
assert-plus "^1.0.0"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 15:20:53 +01:00
dateformat@~1.0.12:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.12"
resolved "https://registry.yarnpkg.com/dateformat/-/dateformat-1.0.12.tgz#9f124b67594c937ff706932e4a642cca8dbbfee9"
dependencies:
get-stdin "^4.0.1"
meow "^3.3.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
debug@2.6.9, debug@2.x.x, debug@^2.1.2, debug@^2.2.0, debug@^2.3.3, debug@^2.6.9:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
version "2.6.9"
resolved "https://registry.yarnpkg.com/debug/-/debug-2.6.9.tgz#5d128515df134ff327e90a4c93f4e077a536341f"
dependencies:
ms "2.0.0"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
debug@3.1.0, debug@=3.1.0:
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.1.0.tgz#5bb5a0672628b64149566ba16819e61518c67261"
dependencies:
ms "2.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
debug@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.0.tgz#373687bffa678b38b1cd91f861b63850035ddc87"
dependencies:
ms "^2.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
debug@^3.1.0:
version "3.2.6"
resolved "https://registry.yarnpkg.com/debug/-/debug-3.2.6.tgz#e83d17de16d8a7efb7717edbe5fb10135eee629b"
dependencies:
ms "^2.1.1"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
debug@^4.0.1, debug@^4.1.0, debug@^4.1.1:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/debug/-/debug-4.1.1.tgz#3b72260255109c6b589cee050f1d516139664791"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
dependencies:
ms "^2.1.1"
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
decamelize@^1.1.1, decamelize@^1.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/decamelize/-/decamelize-1.2.0.tgz#f6534d15148269b20352e7bee26f501f9a191290"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
decode-uri-component@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/decode-uri-component/-/decode-uri-component-0.2.0.tgz#eb3913333458775cb84cd1a1fae062106bb87545"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
decompress-response@^3.2.0, decompress-response@^3.3.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "3.3.0"
resolved "https://registry.yarnpkg.com/decompress-response/-/decompress-response-3.3.0.tgz#80a4dd323748384bfa248083622aedec982adff3"
dependencies:
mimic-response "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
deep-eql@^3.0.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/deep-eql/-/deep-eql-3.0.1.tgz#dfc9404400ad1c8fe023e7da1df1c147c4b444df"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
type-detect "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
deep-equal@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/deep-equal/-/deep-equal-1.0.1.tgz#f5d260292b660e084eff4cdbc9f08ad3247448b5"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
deep-extend@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/deep-extend/-/deep-extend-0.6.0.tgz#c4fa7c95404a17a9c3e8ca7e1537312b736330ac"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
deep-is@~0.1.3:
version "0.1.3"
resolved "https://registry.yarnpkg.com/deep-is/-/deep-is-0.1.3.tgz#b369d6fb5dbc13eecf524f91b070feedc357cf34"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
define-property@^0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-0.2.5.tgz#c35b1ef918ec3c990f9a5bc57be04aacec5c8116"
dependencies:
is-descriptor "^0.1.0"
define-property@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-1.0.0.tgz#769ebaaf3f4a63aad3af9e8d304c9bbe79bfb0e6"
dependencies:
is-descriptor "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
define-property@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/define-property/-/define-property-2.0.2.tgz#d459689e8d654ba77e02a817f8710d702cb16e9d"
dependencies:
is-descriptor "^1.0.2"
isobject "^3.0.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
defined@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/defined/-/defined-1.0.0.tgz#c98d9bcef75674188e110969151199e39b1fa693"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
delayed-stream@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delayed-stream/-/delayed-stream-1.0.0.tgz#df3ae199acadfb7d440aaae0b29e2272b24ec619"
delegates@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/delegates/-/delegates-1.0.0.tgz#84c6e159b81904fdca59a0ef44cd870d31250f9a"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
depd@~1.1.1, depd@~1.1.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/depd/-/depd-1.1.2.tgz#9bcd52e14c097763e749b274c4346ed2e560b5a9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
destroy@~1.0.4:
version "1.0.4"
resolved "https://registry.yarnpkg.com/destroy/-/destroy-1.0.4.tgz#978857442c44749e4206613e37946205826abd80"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
detect-file@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/detect-file/-/detect-file-1.0.0.tgz#f0d66d03672a825cb1b73bdb3fe62310c8e552b7"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
detect-libc@^0.2.0:
version "0.2.0"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-0.2.0.tgz#47fdf567348a17ec25fcbf0b9e446348a76f9fb5"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
detect-libc@^1.0.2, detect-libc@^1.0.3:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/detect-libc/-/detect-libc-1.0.3.tgz#fa137c4bd698edf55cd5cd02ac559f91a4c4ba9b"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dicer@0.2.5:
version "0.2.5"
resolved "https://registry.yarnpkg.com/dicer/-/dicer-0.2.5.tgz#5996c086bb33218c812c090bddc09cd12facb70f"
dependencies:
readable-stream "1.1.x"
streamsearch "0.1.2"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
diff@3.3.1:
version "3.3.1"
resolved "https://registry.yarnpkg.com/diff/-/diff-3.3.1.tgz#aa8567a6eed03c531fc89d3f711cd0e5259dec75"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 13:33:47 +02:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
diff@3.5.0, diff@^3.5.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "3.5.0"
resolved "https://registry.yarnpkg.com/diff/-/diff-3.5.0.tgz#800c0dd1e0a8bfbc95835c202ad220fe317e5a12"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
directmail@~0.1.7:
version "0.1.8"
resolved "https://registry.yarnpkg.com/directmail/-/directmail-0.1.8.tgz#e4852c8a0c5519bef4904fcd96d760822f42a446"
dependencies:
simplesmtp "~0.3.30"
dkim-signer@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/dkim-signer/-/dkim-signer-0.1.2.tgz#2ff5d61c87d8fbff5a8b131cffc5ec3ba1c25553"
dependencies:
mimelib "~0.2.15"
punycode "~1.2.4"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
doctrine@^2.1.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/doctrine/-/doctrine-2.1.0.tgz#5cd01fc101621b42c4cd7f5d1a66243716d3f39d"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
dependencies:
esutils "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dom-serializer@0, dom-serializer@~0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/dom-serializer/-/dom-serializer-0.1.0.tgz#073c697546ce0780ce23be4a28e293e40bc30c82"
dependencies:
domelementtype "~1.1.1"
entities "~1.1.1"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
domelementtype@1, domelementtype@^1.3.0:
version "1.3.1"
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.3.1.tgz#d048c44b37b0d10a7f2a3d5fee3f4333d790481f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
domelementtype@~1.1.1:
version "1.1.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/domelementtype/-/domelementtype-1.1.3.tgz#bd28773e2642881aec51544924299c5cd822185b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
domhandler@^2.3.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "2.4.2"
resolved "https://registry.yarnpkg.com/domhandler/-/domhandler-2.4.2.tgz#8805097e933d65e85546f726d60f5eb88b44f803"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
domelementtype "1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
domutils@1.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.5.1.tgz#dcd8488a26f563d61079e48c9f7b7e32373682cf"
dependencies:
dom-serializer "0"
domelementtype "1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
domutils@^1.5.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/domutils/-/domutils-1.7.0.tgz#56ea341e834e06e6748af7a1cb25da67ea9f8c2a"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
dom-serializer "0"
domelementtype "1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
downsize@0.0.8:
version "0.0.8"
resolved "https://registry.yarnpkg.com/downsize/-/downsize-0.0.8.tgz#21435a610c8c68220f5cc31474979b4d025f038e"
dependencies:
xregexp "2.0.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
dtrace-provider@~0.8:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "0.8.7"
resolved "https://registry.yarnpkg.com/dtrace-provider/-/dtrace-provider-0.8.7.tgz#dc939b4d3e0620cfe0c1cd803d0d2d7ed04ffd04"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
nan "^2.10.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
duplexer3@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/duplexer3/-/duplexer3-0.1.4.tgz#ee01dd1cac0ed3cbc7fdbea37dc0a8f1ce002ce2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
duplexer@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/duplexer/-/duplexer-0.1.1.tgz#ace6ff808c1ce66b57d1ebf97977acb02334cfc1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
ebnf-parser@~0.1.9:
version "0.1.10"
resolved "https://registry.yarnpkg.com/ebnf-parser/-/ebnf-parser-0.1.10.tgz#cd1f6ba477c5638c40c97ed9b572db5bab5d8331"
ecc-jsbn@~0.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz#3a83a904e54353287874c564b7549386849a98c9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
safer-buffer "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
ecdsa-sig-formatter@1.0.10:
version "1.0.10"
resolved "https://registry.yarnpkg.com/ecdsa-sig-formatter/-/ecdsa-sig-formatter-1.0.10.tgz#1c595000f04a8897dfb85000892a0f4c33af86c3"
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
editorconfig@^0.13.2:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "0.13.3"
resolved "https://registry.yarnpkg.com/editorconfig/-/editorconfig-0.13.3.tgz#e5219e587951d60958fd94ea9a9a008cdeff1b34"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bluebird "^3.0.5"
commander "^2.9.0"
lru-cache "^3.2.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
semver "^5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
sigmund "^1.0.1"
ee-first@1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/ee-first/-/ee-first-1.1.1.tgz#590c61156b0ae2f4f0255732a158b266bc56b21d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
electron-to-chromium@^1.2.7:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.3.103"
resolved "https://registry.yarnpkg.com/electron-to-chromium/-/electron-to-chromium-1.3.103.tgz#a695777efdbc419cad6cbb0e58458251302cd52f"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
ember-rfc176-data@^0.3.5:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "0.3.6"
resolved "https://registry.yarnpkg.com/ember-rfc176-data/-/ember-rfc176-data-0.3.6.tgz#7138db8dfccec39c9a832adfbd4c49d670028907"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
emits@^3.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.0.0"
resolved "https://registry.yarnpkg.com/emits/-/emits-3.0.0.tgz#32752bba95e1707b219562384ab9bb8b1fd62f70"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
encodeurl@~1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/encodeurl/-/encodeurl-1.0.2.tgz#ad3ff4c86ec2d029322f5a02c3a9a606c95b3f59"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
encoding@~0.1.7:
version "0.1.12"
resolved "https://registry.yarnpkg.com/encoding/-/encoding-0.1.12.tgz#538b66f3ee62cd1ab51ec323829d1f9480c74beb"
dependencies:
iconv-lite "~0.4.13"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
end-of-stream@^1.0.0, end-of-stream@^1.1.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/end-of-stream/-/end-of-stream-1.4.1.tgz#ed29634d19baba463b6ce6b80a37213eab71ec43"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
once "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
entities@^1.1.1, entities@~1.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/entities/-/entities-1.1.2.tgz#bdfa735299664dfafd34529ed4f8522a275fea56"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
error-ex@^1.2.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/error-ex/-/error-ex-1.3.2.tgz#b4ac40648107fdcdcfae242f428bea8a14d4f1bf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
is-arrayish "^0.2.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
error@^7.0.0:
version "7.0.2"
resolved "https://registry.yarnpkg.com/error/-/error-7.0.2.tgz#a5f75fff4d9926126ddac0ea5dc38e689153cb02"
dependencies:
string-template "~0.2.1"
xtend "~4.0.0"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
es6-promise@^4.2.5:
version "4.2.5"
resolved "https://registry.yarnpkg.com/es6-promise/-/es6-promise-4.2.5.tgz#da6d0d5692efb461e082c14817fe2427d8f5d054"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
escape-html@~1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/escape-html/-/escape-html-1.0.3.tgz#0258eae4d3d0c0974de1c169188ef0051d1d1988"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 15:20:53 +01:00
escape-string-regexp@1.0.5, escape-string-regexp@^1.0.2, escape-string-regexp@^1.0.5:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz#1b61c0562190a8dff6ae3bb2cf0200ca130b86d4"
escodegen@0.0.21:
version "0.0.21"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-0.0.21.tgz#53d652cfa1030388279458a5266c5ffc709c63c3"
dependencies:
esprima "~1.0.2"
estraverse "~0.0.4"
optionalDependencies:
source-map ">= 0.1.2"
Re-instate mobiledoc dom rendering with bypass of SimpleDOM parsing (#8937) closes #8757 - update the markdown card render method to use SimpleDOM's `createRawHtmlSection`. This avoids SimpleDOM parsing and tokenization of broken or unsupported free-form HTML that markdown allows - replace markdown extraction/render with mobiledoc's renderer in the `Post` model - removes `jsdom` as it's no longer necessary
2017-08-31 12:09:02 +02:00
escodegen@1.8.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.8.1"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.8.1.tgz#5a5b53af4693110bebb0867aa3430dd3b70a1018"
dependencies:
esprima "^2.7.1"
estraverse "^1.9.1"
esutils "^2.0.2"
optionator "^0.8.1"
optionalDependencies:
source-map "~0.2.0"
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
escodegen@^1.8.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.11.0"
resolved "https://registry.yarnpkg.com/escodegen/-/escodegen-1.11.0.tgz#b27a9389481d5bfd5bec76f7bb1eb3f8f4556589"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
esprima "^3.1.3"
estraverse "^4.2.0"
esutils "^2.0.2"
optionator "^0.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optionalDependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
source-map "~0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
eslint-plugin-ember@^5.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "5.4.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-ember/-/eslint-plugin-ember-5.4.0.tgz#2980a4389119b37d0450fff8e82d59c9aab126d0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
ember-rfc176-data "^0.3.5"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
snake-case "^2.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
eslint-plugin-ghost@0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/eslint-plugin-ghost/-/eslint-plugin-ghost-0.1.0.tgz#6f01f7d14b2c14e31d1be5d07bd9e795974e951b"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
dependencies:
eslint-plugin-ember "^5.0.3"
eslint-plugin-sort-imports-es6-autofix "0.2.2"
eslint-plugin-sort-imports-es6-autofix@0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/eslint-plugin-sort-imports-es6-autofix/-/eslint-plugin-sort-imports-es6-autofix-0.2.2.tgz#6d8512bde75142c188a0695db55d442d7f7e011d"
dependencies:
eslint "^4.15.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
eslint-scope@^3.7.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.7.3"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-3.7.3.tgz#bb507200d3d17f60247636160b4826284b108535"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
esrecurse "^4.1.0"
estraverse "^4.1.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
eslint-scope@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/eslint-scope/-/eslint-scope-4.0.0.tgz#50bf3071e9338bcdc43331794a0cb533f0136172"
dependencies:
esrecurse "^4.1.0"
estraverse "^4.1.1"
eslint-utils@^1.3.1:
version "1.3.1"
resolved "https://registry.yarnpkg.com/eslint-utils/-/eslint-utils-1.3.1.tgz#9a851ba89ee7c460346f97cf8939c7298827e512"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
eslint-visitor-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/eslint-visitor-keys/-/eslint-visitor-keys-1.0.0.tgz#3f3180fb2e291017716acb4c9d6d5b5c34a6a81d"
Moved grunt-eslint to npm script executing eslint (#10474) refs #9441 * Updated top-level ids to use const * Removed one layer of indentation * Added .eslintignore files for server and test tasks * Added npm scripts for eslint * Fixed lint command in w/ grunt * Uninstalled grunt-eslint * Added eslint config
2019-02-11 13:26:06 +01:00
eslint@5.12.1:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
version "5.12.1"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-5.12.1.tgz#5ca9931fb9029d04e7be92b03ce3b58edfac7e3b"
dependencies:
"@babel/code-frame" "^7.0.0"
ajv "^6.5.3"
chalk "^2.1.0"
cross-spawn "^6.0.5"
debug "^4.0.1"
doctrine "^2.1.0"
eslint-scope "^4.0.0"
eslint-utils "^1.3.1"
eslint-visitor-keys "^1.0.0"
espree "^5.0.0"
esquery "^1.0.1"
esutils "^2.0.2"
file-entry-cache "^2.0.0"
functional-red-black-tree "^1.0.1"
glob "^7.1.2"
globals "^11.7.0"
ignore "^4.0.6"
import-fresh "^3.0.0"
imurmurhash "^0.1.4"
inquirer "^6.1.0"
js-yaml "^3.12.0"
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
lodash "^4.17.5"
minimatch "^3.0.4"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
optionator "^0.8.2"
path-is-inside "^1.0.2"
pluralize "^7.0.0"
progress "^2.0.0"
regexpp "^2.0.1"
semver "^5.5.1"
strip-ansi "^4.0.0"
strip-json-comments "^2.0.1"
table "^5.0.2"
text-table "^0.2.0"
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 18:29:40 +01:00
eslint@^4.15.0, eslint@^4.19.1:
version "4.19.1"
resolved "https://registry.yarnpkg.com/eslint/-/eslint-4.19.1.tgz#32d1d653e1d90408854bfb296f076ec7e186a300"
dependencies:
ajv "^5.3.0"
babel-code-frame "^6.22.0"
chalk "^2.1.0"
concat-stream "^1.6.0"
cross-spawn "^5.1.0"
debug "^3.1.0"
doctrine "^2.1.0"
eslint-scope "^3.7.1"
eslint-visitor-keys "^1.0.0"
espree "^3.5.4"
esquery "^1.0.0"
esutils "^2.0.2"
file-entry-cache "^2.0.0"
functional-red-black-tree "^1.0.1"
glob "^7.1.2"
globals "^11.0.1"
ignore "^3.3.3"
imurmurhash "^0.1.4"
inquirer "^3.0.6"
is-resolvable "^1.0.0"
js-yaml "^3.9.1"
json-stable-stringify-without-jsonify "^1.0.1"
levn "^0.3.0"
lodash "^4.17.4"
minimatch "^3.0.2"
mkdirp "^0.5.1"
natural-compare "^1.4.0"
optionator "^0.8.2"
path-is-inside "^1.0.2"
pluralize "^7.0.0"
progress "^2.0.0"
regexpp "^1.0.1"
require-uncached "^1.0.3"
semver "^5.3.0"
strip-ansi "^4.0.0"
strip-json-comments "~2.0.1"
table "4.0.2"
text-table "~0.2.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
espree@^3.5.4:
version "3.5.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/espree/-/espree-3.5.4.tgz#b0f447187c8a8bed944b815a660bddf5deb5d1a7"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
acorn "^5.5.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
acorn-jsx "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
espree@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/espree/-/espree-5.0.0.tgz#fc7f984b62b36a0f543b13fb9cd7b9f4a7f5b65c"
dependencies:
acorn "^6.0.2"
acorn-jsx "^5.0.0"
eslint-visitor-keys "^1.0.0"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
esprima@1.0.x, esprima@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-1.0.4.tgz#9f557e08fc3b4d26ece9dd34f8fbf476b62585ad"
esprima@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-1.2.2.tgz#76a0fd66fcfe154fd292667dc264019750b1657b"
esprima@2.7.x, esprima@^2.6.0, esprima@^2.7.1:
version "2.7.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-2.7.3.tgz#96e3b70d5779f6ad49cd032673d1c312767ba581"
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
esprima@^3.1.3:
version "3.1.3"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-3.1.3.tgz#fdca51cee6133895e3c88d535ce49dbff62a4633"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
esprima@^4.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/esprima/-/esprima-4.0.1.tgz#13b04cdb3e6c5d19df91ab6987a8695619b0aa71"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
esquery@^1.0.0, esquery@^1.0.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/esquery/-/esquery-1.0.1.tgz#406c51658b1f5991a5f9b62b1dc25b00e3e5c708"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
estraverse "^4.0.0"
esrecurse@^4.1.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "4.2.1"
resolved "https://registry.yarnpkg.com/esrecurse/-/esrecurse-4.2.1.tgz#007a3b9fdbc2b3bb87e4879ea19c92fdbd3942cf"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
estraverse "^4.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
estraverse@^1.9.1:
version "1.9.3"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-1.9.3.tgz#af67f2dc922582415950926091a4005d29c9bb44"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
estraverse@^4.0.0, estraverse@^4.1.0, estraverse@^4.1.1, estraverse@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-4.2.0.tgz#0dee3fed31fcd469618ce7342099fc1afa0bdb13"
estraverse@~0.0.4:
version "0.0.4"
resolved "https://registry.yarnpkg.com/estraverse/-/estraverse-0.0.4.tgz#01a0932dfee574684a598af5a67c3bf9b6428db2"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 19:07:33 +01:00
esutils@^2.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.0.2"
resolved "https://registry.yarnpkg.com/esutils/-/esutils-2.0.2.tgz#0abf4f1caa5bcb1f7a9d8acc6dea4faaa04bac9b"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
etag@~1.8.1:
version "1.8.1"
resolved "https://registry.yarnpkg.com/etag/-/etag-1.8.1.tgz#41ae2eeb65efa62268aebfea83ac7d79299b0887"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
eventemitter2@~0.4.13:
version "0.4.14"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/eventemitter2/-/eventemitter2-0.4.14.tgz#8f61b75cde012b2e9eb284d4545583b5643b61ab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
execa@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/execa/-/execa-1.0.0.tgz#c6236a5bb4df6d6f15e88e7f017798216749ddd8"
dependencies:
cross-spawn "^6.0.0"
get-stream "^4.0.0"
is-stream "^1.1.0"
npm-run-path "^2.0.0"
p-finally "^1.0.0"
signal-exit "^3.0.0"
strip-eof "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
exit@~0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/exit/-/exit-0.1.2.tgz#0632638f8d877cc82107d30a0fff1a17cba1cd0c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
expand-brackets@^2.1.4:
version "2.1.4"
resolved "https://registry.yarnpkg.com/expand-brackets/-/expand-brackets-2.1.4.tgz#b77735e315ce30f6b6eff0f83b04151a22449622"
dependencies:
debug "^2.3.3"
define-property "^0.2.5"
extend-shallow "^2.0.1"
posix-character-classes "^0.1.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
expand-template@^1.0.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-1.1.1.tgz#981f188c0c3a87d2e28f559bc541426ff94f21dd"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
expand-template@^2.0.3:
version "2.0.3"
resolved "https://registry.yarnpkg.com/expand-template/-/expand-template-2.0.3.tgz#6e14b3fcee0f3a6340ecb57d2e8918692052a47c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
expand-tilde@^2.0.0, expand-tilde@^2.0.2:
version "2.0.2"
resolved "https://registry.yarnpkg.com/expand-tilde/-/expand-tilde-2.0.2.tgz#97e801aa052df02454de46b02bf621642cdc8502"
dependencies:
homedir-polyfill "^1.0.1"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
express-brute@1.0.1, express-brute@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/express-brute/-/express-brute-1.0.1.tgz#9f36d107fe34e40a682593e39bffcc53102b5335"
dependencies:
long-timeout "~0.1.1"
underscore "~1.8.3"
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
express-hbs@1.0.5, express-hbs@^1.0.3:
version "1.0.5"
resolved "https://registry.yarnpkg.com/express-hbs/-/express-hbs-1.0.5.tgz#6553b6bfcc55a965ee6161a6f374837f1eecea1f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
handlebars "4.0.13"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
js-beautify "1.6.8"
readdirp "2.1.0"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
express-jwt@5.3.1:
version "5.3.1"
resolved "https://registry.yarnpkg.com/express-jwt/-/express-jwt-5.3.1.tgz#66f05c7dddb5409c037346a98b88965bb10ea4ae"
dependencies:
async "^1.5.0"
express-unless "^0.3.0"
jsonwebtoken "^8.1.0"
lodash.set "^4.0.0"
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 12:02:39 +02:00
express-query-boolean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/express-query-boolean/-/express-query-boolean-2.0.0.tgz#ea56ac8138e2b95b171b8eee2af88738302941c3"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 10:35:23 +02:00
express-session@1.15.6:
version "1.15.6"
resolved "https://registry.yarnpkg.com/express-session/-/express-session-1.15.6.tgz#47b4160c88f42ab70fe8a508e31cbff76757ab0a"
dependencies:
cookie "0.3.1"
cookie-signature "1.0.6"
crc "3.4.4"
debug "2.6.9"
depd "~1.1.1"
on-headers "~1.0.1"
parseurl "~1.3.2"
uid-safe "~2.1.5"
utils-merge "1.0.1"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
express-unless@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/express-unless/-/express-unless-0.3.1.tgz#2557c146e75beb903e2d247f9b5ba01452696e20"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
express@4.16.4, express@^4.16.2:
version "4.16.4"
resolved "https://registry.yarnpkg.com/express/-/express-4.16.4.tgz#fddef61926109e24c515ea97fd2f1bdbf62df12e"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
accepts "~1.3.5"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
array-flatten "1.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
body-parser "1.18.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
content-disposition "0.5.2"
content-type "~1.0.4"
cookie "0.3.1"
cookie-signature "1.0.6"
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
depd "~1.1.2"
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
escape-html "~1.0.3"
etag "~1.8.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
finalhandler "1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
fresh "0.5.2"
merge-descriptors "1.0.1"
methods "~1.1.2"
on-finished "~2.3.0"
parseurl "~1.3.2"
path-to-regexp "0.1.7"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
proxy-addr "~2.0.4"
qs "6.5.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
range-parser "~1.2.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
safe-buffer "5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
send "0.16.2"
serve-static "1.13.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
setprototypeof "1.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
statuses "~1.4.0"
type-is "~1.6.16"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
utils-merge "1.0.1"
vary "~1.1.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
extend-shallow@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-2.0.1.tgz#51af7d614ad9a9f610ea1bafbb989d6b1c56890f"
dependencies:
is-extendable "^0.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
extend-shallow@^3.0.0, extend-shallow@^3.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend-shallow/-/extend-shallow-3.0.2.tgz#26a71aaf073b39fb2127172746131c2704028db8"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
assign-symbols "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-extendable "^1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
extend@^3.0.0, extend@~3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/extend/-/extend-3.0.2.tgz#f8b1136b4071fbd8eb140aff858b1019ec2915fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
external-editor@^2.0.4:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-2.2.0.tgz#045511cfd8d133f3846673d1047c154e214ad3d5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
chardet "^0.4.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
iconv-lite "^0.4.17"
tmp "^0.0.33"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
external-editor@^3.0.0:
version "3.0.3"
resolved "https://registry.yarnpkg.com/external-editor/-/external-editor-3.0.3.tgz#5866db29a97826dbe4bf3afd24070ead9ea43a27"
dependencies:
chardet "^0.7.0"
iconv-lite "^0.4.24"
tmp "^0.0.33"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
extglob@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/extglob/-/extglob-2.0.4.tgz#ad00fe4dc612a9232e8718711dc5cb5ab0285543"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
array-unique "^0.3.2"
define-property "^1.0.0"
expand-brackets "^2.1.4"
extend-shallow "^2.0.1"
fragment-cache "^0.2.1"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
extract-zip@1.6.7:
version "1.6.7"
resolved "https://registry.yarnpkg.com/extract-zip/-/extract-zip-1.6.7.tgz#a840b4b8af6403264c8db57f4f1a74333ef81fe9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
concat-stream "1.6.2"
Replaced extract-zip-fork by extract-zip no issue - we had to fork the original repository at one point, because of slow maintenance - maintenance is back now - https://github.com/maxogden/extract-zip/pull/52 was merged and released
2017-10-31 12:11:59 +01:00
debug "2.6.9"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
mkdirp "0.5.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
yauzl "2.4.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
extsprintf@1.3.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.3.0.tgz#96918440e3041a7a414f8c52e3c574eb3c3e1e05"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
extsprintf@^1.2.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/extsprintf/-/extsprintf-1.4.0.tgz#e2689f8f356fad62cca65a3a91c5df5f9551692f"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
fast-deep-equal@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-1.1.0.tgz#c053477817c86b51daa853c81e059b733d023614"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
fast-deep-equal@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz#7b05218ddf9667bf7f370bf7fdb2cb15fdd0aa49"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
fast-json-stable-stringify@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz#d5142c0caee6b1189f87d3a76111064f86c8bbf2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
fast-levenshtein@~2.0.4:
version "2.0.6"
resolved "https://registry.yarnpkg.com/fast-levenshtein/-/fast-levenshtein-2.0.6.tgz#3d8a5c66883a16a30ca8643e851f19baa7797917"
faye-websocket@~0.10.0:
version "0.10.0"
resolved "https://registry.yarnpkg.com/faye-websocket/-/faye-websocket-0.10.0.tgz#4e492f8d04dfb6f89003507f6edbf2d501e7c6f4"
dependencies:
websocket-driver ">=0.5.1"
fd-slicer@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/fd-slicer/-/fd-slicer-1.0.1.tgz#8b5bcbd9ec327c5041bf9ab023fd6750f1177e65"
dependencies:
pend "~1.2.0"
figures@^1.0.1:
version "1.7.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-1.7.0.tgz#cbe1e3affcf1cd44b80cadfed28dc793a9701d2e"
dependencies:
escape-string-regexp "^1.0.5"
object-assign "^4.1.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
figures@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/figures/-/figures-2.0.0.tgz#3ab1a2d2a62c8bfb431a0c94cb797a2fce27c962"
dependencies:
escape-string-regexp "^1.0.5"
file-entry-cache@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/file-entry-cache/-/file-entry-cache-2.0.0.tgz#c392990c3e684783d838b8c84a45d8a048458361"
dependencies:
flat-cache "^1.2.1"
object-assign "^4.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
file-sync-cmp@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/file-sync-cmp/-/file-sync-cmp-0.1.1.tgz#a5e7a8ffbfa493b43b923bbd4ca89a53b63b612b"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
fill-keys@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/fill-keys/-/fill-keys-1.0.2.tgz#9a8fa36f4e8ad634e3bf6b4f3c8882551452eb20"
dependencies:
is-object "~1.0.1"
merge-descriptors "~1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
fill-range@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/fill-range/-/fill-range-4.0.0.tgz#d544811d428f98eb06a63dc402d2403c328c38f7"
dependencies:
extend-shallow "^2.0.1"
is-number "^3.0.0"
repeat-string "^1.6.1"
to-regex-range "^2.1.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
finalhandler@1.1.1:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/finalhandler/-/finalhandler-1.1.1.tgz#eebf4ed840079c83f4249038c9d703008301b105"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
escape-html "~1.0.3"
on-finished "~2.3.0"
parseurl "~1.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
statuses "~1.4.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
unpipe "~1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
find-root@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/find-root/-/find-root-1.1.0.tgz#abcfc8ba76f708c42a97b3d685b7e9450bfb9ce4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
find-up@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/find-up/-/find-up-1.1.2.tgz#6b2e9822b1a2ce0a60ab64d610eccad53cb24d0f"
dependencies:
path-exists "^2.0.0"
pinkie-promise "^2.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
findup-sync@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-2.0.0.tgz#9326b1488c22d1a6088650a86901b2d9a90a2cbc"
dependencies:
detect-file "^1.0.0"
is-glob "^3.1.0"
micromatch "^3.0.4"
resolve-dir "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
findup-sync@~0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/findup-sync/-/findup-sync-0.3.0.tgz#37930aa5d816b777c03445e1966cc6790a4c0b16"
dependencies:
glob "~5.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
fined@^1.0.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/fined/-/fined-1.1.1.tgz#95d88ff329123dd1a6950fdfcd321f746271e01f"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
dependencies:
expand-tilde "^2.0.2"
is-plain-object "^2.0.3"
object.defaults "^1.1.0"
object.pick "^1.2.0"
parse-filepath "^1.0.1"
flagged-respawn@^1.0.0:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/flagged-respawn/-/flagged-respawn-1.0.1.tgz#e7de6f1279ddd9ca9aac8a5971d618606b3aab41"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
flat-cache@^1.2.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "1.3.4"
resolved "https://registry.yarnpkg.com/flat-cache/-/flat-cache-1.3.4.tgz#2c2ef77525cc2929007dfffa1dd314aa9c9dee6f"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
circular-json "^0.3.1"
graceful-fs "^4.1.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
rimraf "~2.6.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
write "^0.2.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
flatten@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/flatten/-/flatten-1.0.2.tgz#dae46a9d78fbe25292258cc1e780a41d95c03782"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
follow-redirects@0.0.3:
version "0.0.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-0.0.3.tgz#6ce67a24db1fe13f226c1171a72a7ef2b17b8f65"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
underscore ""
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
follow-redirects@^1.2.5:
version "1.6.1"
resolved "https://registry.yarnpkg.com/follow-redirects/-/follow-redirects-1.6.1.tgz#514973c44b5757368bad8bddfe52f81f015c94cb"
dependencies:
debug "=3.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
for-in@^1.0.1, for-in@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/for-in/-/for-in-1.0.2.tgz#81068d295a8142ec0ac726c6e2200c30fb6d5e80"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
for-own@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/for-own/-/for-own-1.0.0.tgz#c63332f415cedc4b04dbfe70cf836494c53cb44b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
for-in "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
forever-agent@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/forever-agent/-/forever-agent-0.6.1.tgz#fbc71f0c41adeb37f96c577ad1ed42d8fdacca91"
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 15:19:07 +01:00
form-data@^2.3.1, form-data@^2.3.3, form-data@~2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.3.3"
resolved "https://registry.yarnpkg.com/form-data/-/form-data-2.3.3.tgz#dcce52c05f644f298c6a7ab936bd724ceffbf3a6"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
dependencies:
asynckit "^0.4.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
combined-stream "^1.0.6"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
mime-types "^2.1.12"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
formidable@^1.2.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/formidable/-/formidable-1.2.1.tgz#70fb7ca0290ee6ff961090415f4b3df3d2082659"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
forwarded@~0.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/forwarded/-/forwarded-0.1.2.tgz#98c23dab1175657b8c0573e8ceccd91b0ff18c84"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
fragment-cache@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/fragment-cache/-/fragment-cache-0.2.1.tgz#4290fad27f13e89be7f33799c6bc5a0abfff0d19"
dependencies:
map-cache "^0.2.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
fresh@0.5.2:
version "0.5.2"
resolved "https://registry.yarnpkg.com/fresh/-/fresh-0.5.2.tgz#3d8cadd90d976569fa835ab1f8e4b23a105605a7"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
from2@^2.1.1:
version "2.3.0"
resolved "https://registry.yarnpkg.com/from2/-/from2-2.3.0.tgz#8bfb5502bde4a4d36cfdeea007fcca21d7e382af"
dependencies:
inherits "^2.0.1"
readable-stream "^2.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
fs-constants@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs-constants/-/fs-constants-1.0.0.tgz#6be0de9be998ce16af8afc24497b9ee9b7ccd9ad"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
fs-copy-file-sync@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/fs-copy-file-sync/-/fs-copy-file-sync-1.1.1.tgz#11bf32c096c10d126e5f6b36d06eece776062918"
✨ Custom Post Excerpt Feature (#8792) closes #8793 - 1.3 post excerpt migration - add 1.3 migration to add `excerpt` to post schema NOTE: - knex-migrator relies on the package.json safe version - so right now Ghost is on 1.2 - the migration script is for 1.3 - if you pull down the PR (or if we merge this PR into master), you have to run `knex-migrator migrate --v 1.3 --force` - knex-migrator will tell you what you have todo - Bump dependencies - knex-migrator@2.1.3 - Soft limit for custom_excerpt - Extended {{excerpt}} to use custom excerpt - when a `custom_excerpt` field exists, the `{{excerpt}}` helper will output this and fall back to autogenerated excerpt if not. - Refactored behaviour of (meta) description - html tag `<meta name="description" />` for posts, tags and author doesn't get rendered if not provided. - fallback for `author.bio` removed - fallback for `tag.description` removed - structured data and schema.org for `post` context takes the following order to render description fields: 1. custom excerpt 2. meta description 3. automated excerpt (50 words) - updated and added tests to reflect the changes
2017-08-01 10:39:34 +02:00
fs-extra@3.0.1, fs-extra@^3.0.1:
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-3.0.1.tgz#3794f378c58b342ea7dbbb23095109c4b3b62291"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
graceful-fs "^4.1.2"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
jsonfile "^3.0.0"
universalify "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
fs-extra@^0.26.2:
version "0.26.7"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/fs-extra/-/fs-extra-0.26.7.tgz#9ae1fdd94897798edab76d0918cf42d0c3184fa9"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
dependencies:
graceful-fs "^4.1.2"
jsonfile "^2.1.0"
klaw "^1.0.0"
path-is-absolute "^1.0.0"
rimraf "^2.2.8"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
fs-minipass@^1.2.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.2.5"
resolved "https://registry.yarnpkg.com/fs-minipass/-/fs-minipass-1.2.5.tgz#06c277218454ec288df77ada54a03b8702aacb9d"
dependencies:
minipass "^2.2.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
fs.realpath@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/fs.realpath/-/fs.realpath-1.0.0.tgz#1504ad2523158caa40db4a2787cb01411994ea4f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
fstream@^1.0.0, fstream@^1.0.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "1.0.11"
resolved "https://registry.yarnpkg.com/fstream/-/fstream-1.0.11.tgz#5c1fb1f117477114f0632a0eb4b71b3cb0fd3171"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
graceful-fs "^4.1.2"
inherits "~2.0.0"
mkdirp ">=0.5 0"
rimraf "2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
function-bind@^1.1.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/function-bind/-/function-bind-1.1.1.tgz#a56899d3ea3c9bab874bb9773b7c5ede92f4895d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
functional-red-black-tree@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/functional-red-black-tree/-/functional-red-black-tree-1.0.1.tgz#1b0ab3bd553b2a0d6399d29c0e3ea0b252078327"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
gauge@~2.7.3:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 19:21:47 +02:00
version "2.7.4"
resolved "https://registry.yarnpkg.com/gauge/-/gauge-2.7.4.tgz#2c03405c7538c39d7eb37b317022e325fb018bf7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
aproba "^1.0.3"
console-control-strings "^1.0.0"
has-unicode "^2.0.0"
object-assign "^4.1.0"
signal-exit "^3.0.0"
string-width "^1.0.1"
strip-ansi "^3.0.1"
wide-align "^1.1.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
gaze@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/gaze/-/gaze-1.1.3.tgz#c441733e13b927ac8c0ff0b4c3b033f28812924a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
globule "^1.0.0"
generate-function@^1.0.1:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/generate-function/-/generate-function-1.1.0.tgz#54c21b080192b16d9877779c5bb81666e772365f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
generate-object-property@^1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/generate-object-property/-/generate-object-property-1.2.0.tgz#9c0e1c40308ce804f4783618b937fa88f99d50d0"
dependencies:
is-property "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
get-func-name@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/get-func-name/-/get-func-name-2.0.0.tgz#ead774abee72e20409433a066366023dd6887a41"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
get-stdin@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/get-stdin/-/get-stdin-4.0.1.tgz#b968c6b0a04384324902e8bf1a5df32579a450fe"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
get-stream@3.0.0, get-stream@^3.0.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "3.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-3.0.0.tgz#8e943d1358dc37555054ecbe2edb05aa174ede14"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
get-stream@^4.0.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/get-stream/-/get-stream-4.1.0.tgz#c1b255575f3dc21d59bfc79cd3d2b46b1c3a54b5"
dependencies:
pump "^3.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
get-value@^2.0.3, get-value@^2.0.6:
version "2.0.6"
resolved "https://registry.yarnpkg.com/get-value/-/get-value-2.0.6.tgz#dc15ca1c672387ca76bd37ac0a395ba2042a2c28"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
getobject@~0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/getobject/-/getobject-0.1.0.tgz#047a449789fa160d018f5486ed91320b6ec7885c"
getpass@^0.1.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "0.1.7"
resolved "https://registry.yarnpkg.com/getpass/-/getpass-0.1.7.tgz#5eff8e3e684d569ae4cb2b1282604e8ba62149fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
assert-plus "^1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
ghost-ignition@2.9.2:
version "2.9.2"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-2.9.2.tgz#e68de88fa4a20fc09c833fe3278bdc20dca6d525"
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-24 22:50:20 +01:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
bunyan "1.8.12"
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-24 22:50:20 +01:00
bunyan-loggly "^1.3.1"
caller "1.0.1"
debug "^2.6.9"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
find-root "1.1.0"
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-24 22:50:20 +01:00
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
🐛 Fixed error for missing sharp install (#10423) closes #10421 refs #10181 This bumbs the ghost-ignition dep, so that the code passed to errors takes priority over any code the error is inheriting from.
2019-01-28 12:37:27 +01:00
ghost-ignition@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-3.0.0.tgz#fed40b40cc71f83ed1ea74429ac8071df38fdf68"
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
debug "^2.6.9"
find-root "1.1.0"
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Bumped ghost-ignition version no issue
2019-02-11 13:18:29 +01:00
ghost-ignition@3.0.2:
version "3.0.2"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-3.0.2.tgz#a74480c337b917c9350ed0c34dfbd13cac24accd"
integrity sha512-plTyR1tTxv0uGzRkkyatsuhK/eYJaDlRAISd7DMc8l675yc0FH/A9ji6jjCtpP+00+Av5geKee6zpCVtH0uW8Q==
🐛 Fixed errors for missing sharp install closes #10421
2019-02-05 10:13:54 +01:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
debug "^2.6.9"
find-root "1.1.0"
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
🐛 Fixed error for missing sharp install (#10423) closes #10421 refs #10181 This bumbs the ghost-ignition dep, so that the code passed to errors takes priority over any code the error is inheriting from.
2019-01-28 12:37:27 +01:00
ghost-ignition@^2.9.6:
Bumped ghost-ignition to version 2.9.6
2018-09-25 11:41:37 +02:00
version "2.9.6"
resolved "https://registry.yarnpkg.com/ghost-ignition/-/ghost-ignition-2.9.6.tgz#cc8358f0a356bae490e5abeca3c3bda8383352fe"
Bump dependencies no issue - ghost-ignition@2.9.3 - simple-html-tokenizer@0.5.3
2018-06-06 14:00:43 +02:00
dependencies:
bunyan "1.8.12"
bunyan-loggly "^1.3.1"
caller "1.0.1"
debug "^2.6.9"
find-root "1.1.0"
fs-extra "^3.0.1"
json-stringify-safe "^5.0.1"
lodash "^4.16.4"
moment "^2.15.2"
nconf "^0.10.0"
prettyjson "^1.1.3"
uuid "^3.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
ghost-storage-base@0.0.3:
version "0.0.3"
resolved "https://registry.yarnpkg.com/ghost-storage-base/-/ghost-storage-base-0.0.3.tgz#854b23f67816c16827a6e25b7e51915e236f691d"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 16:10:34 +02:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
moment "^2.19.3"
😱 🎨 Refactor storage adapter (#8229) refs #7687 There are four main changes in this PR: we have outsourced the base storage adapter to npm, because for storage developers it's annoying to inherit from a script within Ghost we hacked theme storage handling into the default local storage adapter - this was reverted, instead we have added a static theme storage here use classes instead of prototyping optimise the storage adapter in general - everything is explained in each commit ---- * rename local-file-store to LocalFileStorage I would like to keep the name pattern i have used for scheduling. If a file is a class, the file name reflects the class name. We can discuss this, if concerns are raised. * Transform LocalFileStorage to class and inherit from new base - inherit from npm ghost-storage-base - rewrite to class - no further refactoring, happens later * Rename core/test/unit/storage/local-file-store_spec.js -> core/test/unit/storage/LocalFileStorage_spec.js * Fix wrong require in core/test/unit/storage/LocalFileStorage_spec.js * remove base storage and test - see https://github.com/kirrg001/Ghost-Storage-Base - the test has moved to this repo as well * Use npm ghost-storage-base in storage/index.js * remove the concept of getStorage('themes') This concept was added when we added themes as a feature. Back then, we have changed the local storage adapter to support images and themes. This has added some hacks into the local storage adapters. We want to revert this change and add a simple static theme storage. Will adapt the api/themes layer in the next commits. * Revert LocalFileStorage - revert serve - revert delete * add storagePath as property to LocalFileStorage - define one property which holds the storage path - could be considered to pass from outside, but found that not helpful, as other storage adapters do not need this property - IMPORTANT: save has no longer a targetDir option, because this was used to pass the alternative theme storage path - IMPORTANT: exists has now an alternative targetDir, this makes sense, because - you can either ask the storage exists('my-file') and it will look in the base storage path - or you pass a specific path where to look exists('my-file', /path/to/dir) * LocalFileStorage: get rid of store pattern - getUniqueFileName(THIS) - this doesn't make sense, instances always have access to this by default * Add static theme storage - inherits from the local file storage, because they both operate on the file system - IMPORTANT: added a TODO to consider a merge of themes/loader and themes/storage - but will be definitely not part of this PR * Use new static theme storage in api/themes - storage functions are simplified! * Add https://github.com/kirrg001/Ghost-Storage-Base as dependency - tarball for now, as i am still testing - will release if PR review get's accepted * Adapt tests and jscs/jshint * 🐛 fix storage.read in favicon utility - wrong implementation of error handling * 🎨 optimise error messages for custom storage adapter errors * little renaming in the storage utlity - purpose is to have access to the custom storage instance and to the custom storage class - see next commit why * optimise instanceof base storage - instanceof is always tricky in javascript - if multiple modules exist, it can happen that instanceof is false * fix getTargetDir - the importer uses the `targetDir` option to ensure that images land in the correct folder * ghost-storage-base@0.0.1 package.json dependency
2017-04-05 16:10:34 +02:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
github-from-package@0.0.0:
version "0.0.0"
resolved "https://registry.yarnpkg.com/github-from-package/-/github-from-package-0.0.0.tgz#97fb5d96bfde8973313f20e8288ef9a167fa64ce"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
glob@5.0.15, glob@^5.0.15, glob@~5.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "5.0.15"
resolved "https://registry.yarnpkg.com/glob/-/glob-5.0.15.tgz#1bc936b9e02f4a603fcc222ecf7633d30b8b93b1"
dependencies:
inflight "^1.0.4"
inherits "2"
minimatch "2 || 3"
once "^1.3.0"
path-is-absolute "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
glob@7.1.2:
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
version "7.1.2"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.2.tgz#c19c9df9a028702d678612384a6552404c636d15"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 13:33:47 +02:00
fs.realpath "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
inflight "^1.0.4"
inherits "2"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
minimatch "^3.0.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 13:33:47 +02:00
glob@^6.0.1:
version "6.0.4"
resolved "https://registry.yarnpkg.com/glob/-/glob-6.0.4.tgz#0f08860f6a155127b2fadd4f9ce24b1aab6e4d22"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
inflight "^1.0.4"
inherits "2"
Update mocha to version 3.3.0 🚀 (#8376) * chore(package): update mocha to version 3.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-05-02 13:33:47 +02:00
minimatch "2 || 3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
once "^1.3.0"
path-is-absolute "^1.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
glob@^7.0.0, glob@^7.0.3, glob@^7.0.5, glob@^7.1.2, glob@^7.1.3, glob@~7.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "7.1.3"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.1.3.tgz#3960832d3f1574108342dafd3a67b332c0969df1"
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.4"
once "^1.3.0"
path-is-absolute "^1.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
glob@~7.0.0:
version "7.0.6"
resolved "https://registry.yarnpkg.com/glob/-/glob-7.0.6.tgz#211bafaf49e525b8cd93260d14ab136152b3f57a"
dependencies:
fs.realpath "^1.0.0"
inflight "^1.0.4"
inherits "2"
minimatch "^3.0.2"
once "^1.3.0"
path-is-absolute "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
global-modules@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/global-modules/-/global-modules-1.0.0.tgz#6d770f0eb523ac78164d72b5e71a8877265cc3ea"
dependencies:
global-prefix "^1.0.1"
is-windows "^1.0.1"
resolve-dir "^1.0.0"
global-prefix@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/global-prefix/-/global-prefix-1.0.2.tgz#dbf743c6c14992593c655568cb66ed32c0122ebe"
dependencies:
expand-tilde "^2.0.2"
homedir-polyfill "^1.0.1"
ini "^1.3.4"
is-windows "^1.0.1"
which "^1.2.14"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
globals@^11.0.1, globals@^11.7.0:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "11.10.0"
resolved "https://registry.yarnpkg.com/globals/-/globals-11.10.0.tgz#1e09776dffda5e01816b3bb4077c8b59c24eaa50"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
globule@^1.0.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/globule/-/globule-1.2.1.tgz#5dffb1b191f22d20797a9369b49eab4e9839696d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
glob "~7.1.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
minimatch "~3.0.2"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
got@8.3.2:
version "8.3.2"
resolved "https://registry.yarnpkg.com/got/-/got-8.3.2.tgz#1d23f64390e97f776cac52e5b936e5f514d2e937"
dependencies:
"@sindresorhus/is" "^0.7.0"
cacheable-request "^2.1.1"
decompress-response "^3.3.0"
duplexer3 "^0.1.4"
get-stream "^3.0.0"
into-stream "^3.1.0"
is-retry-allowed "^1.1.0"
isurl "^1.0.0-alpha5"
lowercase-keys "^1.0.0"
mimic-response "^1.0.0"
p-cancelable "^0.4.0"
p-timeout "^2.0.1"
pify "^3.0.0"
safe-buffer "^5.1.1"
timed-out "^4.0.1"
url-parse-lax "^3.0.0"
url-to-options "^1.0.1"
got@^7.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "7.1.0"
resolved "https://registry.yarnpkg.com/got/-/got-7.1.0.tgz#05450fd84094e6bbea56f451a43a9c289166385a"
dependencies:
decompress-response "^3.2.0"
duplexer3 "^0.1.4"
get-stream "^3.0.0"
is-plain-obj "^1.1.0"
is-retry-allowed "^1.0.0"
is-stream "^1.0.0"
isurl "^1.0.0-alpha5"
lowercase-keys "^1.0.0"
p-cancelable "^0.3.0"
p-timeout "^1.1.1"
safe-buffer "^5.0.1"
timed-out "^4.0.0"
url-parse-lax "^1.0.0"
url-to-options "^1.0.1"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 19:07:33 +01:00
graceful-fs@^4.1.0, graceful-fs@^4.1.2, graceful-fs@^4.1.6, graceful-fs@^4.1.9:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "4.1.15"
resolved "https://registry.yarnpkg.com/graceful-fs/-/graceful-fs-4.1.15.tgz#ffb703e1066e8a0eeaa4c8b80ba9253eeefbfb00"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
growl@1.10.3:
version "1.10.3"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.3.tgz#1926ba90cf3edfe2adb4927f5880bc22c66c790f"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
growl@1.10.5:
version "1.10.5"
resolved "https://registry.yarnpkg.com/growl/-/growl-1.10.5.tgz#f2735dc2283674fa67478b10181059355c369e5e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
grunt-bg-shell@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/grunt-bg-shell/-/grunt-bg-shell-2.3.3.tgz#139ae8f9c76f68a0db4ee9dbbd4ec825b9227fff"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
grunt-cli@1.3.2:
version "1.3.2"
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.3.2.tgz#60f12d12c1b5aae94ae3469c6b5fe24e960014e8"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
dependencies:
grunt-known-options "~1.1.0"
interpret "~1.1.0"
liftoff "~2.5.0"
nopt "~4.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
v8flags "~3.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
grunt-cli@~1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/grunt-cli/-/grunt-cli-1.2.0.tgz#562b119ebb069ddb464ace2845501be97b35b6a8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
findup-sync "~0.3.0"
grunt-known-options "~1.1.0"
nopt "~3.0.6"
resolve "~1.1.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
grunt-contrib-clean@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-clean/-/grunt-contrib-clean-2.0.0.tgz#3be7ca480da4b740aa5e9d863e2f7e8b24f8a68b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
async "^2.6.1"
rimraf "^2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
grunt-contrib-compress@1.4.3:
version "1.4.3"
resolved "https://registry.yarnpkg.com/grunt-contrib-compress/-/grunt-contrib-compress-1.4.3.tgz#01ceffb9c637f52e7081f463750983d0a3b0fa73"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
archiver "^1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
chalk "^1.1.1"
lodash "^4.7.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
pretty-bytes "^4.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
stream-buffers "^2.1.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
optionalDependencies:
iltorb "^1.0.13"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
grunt-contrib-copy@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-copy/-/grunt-contrib-copy-1.0.0.tgz#7060c6581e904b8ab0d00f076e0a8f6e3e7c3573"
dependencies:
chalk "^1.1.1"
file-sync-cmp "^0.1.0"
✨ Added pre-commit hook to handle submodules (#8302) refs #8235 Usage: - for existing development setups: `grunt symlink` (will create the pre-commit symlink) - for fresh development setups: `npm run init` (symlinking happens as part of the typical set up) - ✨ Added pre-commit hook to handle submodules - Checks to see if there are any submodules about to be committed - Output matches closely to `git st` to make it easy to read - Requires interaction from the committer to accept that this really should be committed - ✨ Use grunt symlink to register githooks - Grunt symlink will make a link to the pre-commit hook - It ONLY does this if there isn't already a pre-commit hook, so won't overwrite anything - It does this as part of npm run init, not grunt init, because a release repo would NEVER want this - This is a dev tool, that configures the repo for development
2017-04-13 09:26:48 +02:00
grunt-contrib-symlink@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-symlink/-/grunt-contrib-symlink-1.0.0.tgz#c83616c035711a6c0062a2810cf1c77ffc6bed2b"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
grunt-contrib-uglify@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-uglify/-/grunt-contrib-uglify-4.0.0.tgz#50aa36568cbf5f9532b35fe8b3dacf99210c909c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
chalk "^2.4.1"
maxmin "^2.1.0"
uglify-js "~3.4.8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
uri-path "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-contrib-watch@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/grunt-contrib-watch/-/grunt-contrib-watch-1.1.0.tgz#c143ca5b824b288a024b856639a5345aedb78ed4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
async "^2.6.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
gaze "^1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
lodash "^4.17.10"
tiny-lr "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
grunt-cssnano@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/grunt-cssnano/-/grunt-cssnano-2.1.0.tgz#e564f7d5a88bef409e46431dacabafd5c71fbd87"
dependencies:
cssnano "^3.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
grunt-express-server@0.5.4:
version "0.5.4"
resolved "https://registry.yarnpkg.com/grunt-express-server/-/grunt-express-server-0.5.4.tgz#8ce79c335c6cbb9ef50ee1dfaa61942028f43aeb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
grunt-known-options@~1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-known-options/-/grunt-known-options-1.1.1.tgz#6cc088107bd0219dc5d3e57d91923f469059804d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-legacy-log-utils@~2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-log-utils/-/grunt-legacy-log-utils-2.0.1.tgz#d2f442c7c0150065d9004b08fd7410d37519194e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
chalk "~2.4.1"
lodash "~4.17.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-legacy-log@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/grunt-legacy-log/-/grunt-legacy-log-2.0.0.tgz#c8cd2c6c81a4465b9bbf2d874d963fef7a59ffb9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
colors "~1.1.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-legacy-log-utils "~2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
hooker "~0.2.3"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
lodash "~4.17.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-legacy-util@~1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/grunt-legacy-util/-/grunt-legacy-util-1.1.1.tgz#e10624e7c86034e5b870c8a8616743f0a0845e42"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
async "~1.5.2"
exit "~0.1.1"
getobject "~0.1.0"
hooker "~0.2.3"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
lodash "~4.17.10"
underscore.string "~3.3.4"
which "~1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
grunt-mocha-cli@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/grunt-mocha-cli/-/grunt-mocha-cli-4.0.0.tgz#d71d6500c7385af3e2d8fd046c72453c113baa71"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
mocha "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
grunt-mocha-istanbul@5.0.2:
version "5.0.2"
resolved "https://registry.yarnpkg.com/grunt-mocha-istanbul/-/grunt-mocha-istanbul-5.0.2.tgz#23929a8b3f45a66c5fab1f6146e62b58418b7882"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
grunt-shell@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/grunt-shell/-/grunt-shell-3.0.1.tgz#24e783901543c7269980d534902bedfb94e7ec9f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
chalk "^2.4.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 19:45:29 +01:00
npm-run-path "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
strip-ansi "^5.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
grunt-subgrunt@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/grunt-subgrunt/-/grunt-subgrunt-1.3.0.tgz#0b77c057a7b22ba15ef5977b7c5992a75f5e4181"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
async "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
glob "^7.0.0"
grunt-update-submodules@0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/grunt-update-submodules/-/grunt-update-submodules-0.4.1.tgz#46c485fe6413cc0bdd6988aa2803c4e7d997c366"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt@1.0.3:
version "1.0.3"
resolved "https://registry.yarnpkg.com/grunt/-/grunt-1.0.3.tgz#b3c99260c51d1b42835766e796527b60f7bba374"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
coffeescript "~1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dateformat "~1.0.12"
eventemitter2 "~0.4.13"
exit "~0.1.1"
findup-sync "~0.3.0"
glob "~7.0.0"
grunt-cli "~1.2.0"
grunt-known-options "~1.1.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
grunt-legacy-log "~2.0.0"
grunt-legacy-util "~1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
iconv-lite "~0.4.13"
js-yaml "~3.5.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
minimatch "~3.0.2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
mkdirp "~0.5.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
nopt "~3.0.6"
path-is-absolute "~1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
rimraf "~2.6.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump gscan to version 2.2.1 closes #9851
2018-09-06 12:24:17 +02:00
gscan@2.2.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/gscan/-/gscan-2.2.1.tgz#38bc8597f7579ab0a0b5b023cf59f71b43f567b0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump gscan to version 1.4.3 no issue - fixes a bug, that didn't catch errors caused by corrupt zip files - uses a fork of the `extract-zip` dependency with a bug fix for https://github.com/maxogden/extract-zip/issues/65
2018-05-16 04:00:53 +02:00
"@tryghost/extract-zip" "1.6.6"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
bluebird "^3.4.6"
chalk "^1.1.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
commander "2.15.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
express "^4.16.2"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
express-hbs "^1.0.3"
fs-extra "^0.26.2"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
ghost-ignition "2.9.2"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
glob "^7.0.5"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
lodash "4.17.10"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
multer "^1.1.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
require-dir "^0.3.2"
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 18:42:42 +02:00
semver "^5.3.0"
Update gscan to version 0.2.3 🚀 (#8344) * chore(package): update gscan to version 0.2.3 https://greenkeeper.io/ * chore: yarn.lock
2017-04-17 16:04:31 +02:00
uuid "^3.0.0"
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 18:42:42 +02:00
validator "^6.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
gzip-size@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/gzip-size/-/gzip-size-3.0.0.tgz#546188e9bdc337f673772f81660464b389dce520"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
duplexer "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
handlebars@4.0.13:
version "4.0.13"
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.0.13.tgz#89fc17bf26f46fd7f6f99d341d92efaae64f997d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
async "^2.5.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optimist "^0.6.1"
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
source-map "^0.6.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optionalDependencies:
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
uglify-js "^3.1.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
handlebars@^4.0.1:
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.1.0.tgz#0d6a6f34ff1f63cecec8423aa4169827bf787c3a"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
async "^2.5.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
optimist "^0.6.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
source-map "^0.6.1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
optionalDependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
uglify-js "^3.1.4"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
har-schema@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/har-schema/-/har-schema-2.0.0.tgz#a94c2224ebcac04782a0d9035521f24735b7ec92"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
har-validator@~5.1.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "5.1.3"
resolved "https://registry.yarnpkg.com/har-validator/-/har-validator-5.1.3.tgz#1ef89ebd3e4996557675eed9893110dc350fa080"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
ajv "^6.5.5"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
har-schema "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
has-ansi@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-ansi/-/has-ansi-2.0.0.tgz#34f5049ce1ecdf2b0649af3ef24e45ed35416d91"
dependencies:
ansi-regex "^2.0.0"
has-flag@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-1.0.0.tgz#9d9e793165ce017a00f00418c43f942a7b1d11fa"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
has-flag@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-2.0.0.tgz#e8207af1cc7b30d446cc70b734b5e8be18f88d51"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
has-flag@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/has-flag/-/has-flag-3.0.0.tgz#b5d454dc2199ae225699f3467e5a07f3b955bafd"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
has-symbol-support-x@^1.4.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.4.2"
resolved "https://registry.yarnpkg.com/has-symbol-support-x/-/has-symbol-support-x-1.4.2.tgz#1409f98bc00247da45da67cee0a36f282ff26455"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
has-to-string-tag-x@^1.2.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/has-to-string-tag-x/-/has-to-string-tag-x-1.4.1.tgz#a045ab383d7b4b2012a00148ab0aa5f290044d4d"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
has-symbol-support-x "^1.4.1"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
has-unicode@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/has-unicode/-/has-unicode-2.0.1.tgz#e0e6fe6a28cf51138855e086d1691e771de2a8b9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
has-value@^0.3.1:
version "0.3.1"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-0.3.1.tgz#7b1f58bada62ca827ec0a2078025654845995e1f"
dependencies:
get-value "^2.0.3"
has-values "^0.1.4"
isobject "^2.0.0"
has-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-value/-/has-value-1.0.0.tgz#18b281da585b1c5c51def24c930ed29a0be6b177"
dependencies:
get-value "^2.0.6"
has-values "^1.0.0"
isobject "^3.0.0"
has-values@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-0.1.4.tgz#6d61de95d91dfca9b9a02089ad384bff8f62b771"
has-values@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/has-values/-/has-values-1.0.0.tgz#95b0b63fec2146619a6fe57fe75628d5a39efe4f"
dependencies:
is-number "^3.0.0"
kind-of "^4.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
has@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/has/-/has-1.0.3.tgz#722d7cbfc1f6aa8241f16dd814e011e1f41e8796"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
function-bind "^1.1.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
he@1.1.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/he/-/he-1.1.1.tgz#93410fd21b009735151f8868c2f271f3427e23fd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
he@^1.0.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/he/-/he-1.2.0.tgz#84ae65fa7eafb165fddb61566ae14baf05664f0f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
he@~0.3.6:
version "0.3.6"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/he/-/he-0.3.6.tgz#9d7bc446e77963933301dd602d5731cb861135e0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
hijackresponse@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/hijackresponse/-/hijackresponse-2.0.1.tgz#45f5e0c9b87d73bad858f66021bec377c736b8b3"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
homedir-polyfill@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/homedir-polyfill/-/homedir-polyfill-1.0.1.tgz#4c2bbc8a758998feebf5ed68580f76d46768b4bc"
dependencies:
parse-passwd "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
hooker@~0.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.2.3"
resolved "https://registry.yarnpkg.com/hooker/-/hooker-0.2.3.tgz#b834f723cc4a242aa65963459df6d984c5d3d959"
hosted-git-info@^2.1.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.7.1"
resolved "https://registry.yarnpkg.com/hosted-git-info/-/hosted-git-info-2.7.1.tgz#97f236977bd6e125408930ff6de3eec6281ec047"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
html-comment-regex@^1.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/html-comment-regex/-/html-comment-regex-1.1.2.tgz#97d4688aeb5c81886a364faa0cad1dda14d433a7"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 15:02:52 +01:00
html-to-text@4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/html-to-text/-/html-to-text-4.0.0.tgz#c1f4e100d74e9feab5b152d7b6b3be3c1c6412b0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
he "^1.0.0"
htmlparser2 "^3.9.2"
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 15:02:52 +01:00
lodash "^4.17.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optimist "^0.6.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
htmlparser2@^3.10.0, htmlparser2@^3.8.3, htmlparser2@^3.9.1, htmlparser2@^3.9.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.10.0"
resolved "https://registry.yarnpkg.com/htmlparser2/-/htmlparser2-3.10.0.tgz#5f5e422dcf6119c0d983ed36260ce9ded0bee464"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
domelementtype "^1.3.0"
domhandler "^2.3.0"
domutils "^1.5.1"
entities "^1.1.1"
inherits "^2.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
readable-stream "^3.0.6"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
http-cache-semantics@3.8.1:
version "3.8.1"
resolved "https://registry.yarnpkg.com/http-cache-semantics/-/http-cache-semantics-3.8.1.tgz#39b0e16add9b605bf0a9ef3d9daaf4843b4cacd2"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
http-errors@1.6.3, http-errors@~1.6.2, http-errors@~1.6.3:
version "1.6.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.6.3.tgz#8b55680bb4be283a0b5bf4ea2e38580be1d9320d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
depd "~1.1.2"
inherits "2.0.3"
setprototypeof "1.1.0"
statuses ">= 1.4.0 < 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
http-errors@~1.4.0:
version "1.4.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/http-errors/-/http-errors-1.4.0.tgz#6c0242dea6b3df7afda153c71089b31c6e82aabf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
inherits "2.0.1"
statuses ">= 1.2.1 < 2"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
http-parser-js@>=0.4.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "0.5.0"
resolved "https://registry.yarnpkg.com/http-parser-js/-/http-parser-js-0.5.0.tgz#d65edbede84349d0dc30320815a15d39cc3cbbd8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
http-signature@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/http-signature/-/http-signature-1.2.0.tgz#9aecd925114772f3d95b65a60abb8f7c18fbace1"
dependencies:
assert-plus "^1.0.0"
jsprim "^1.2.2"
sshpk "^1.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
iconv-lite@0.4.23:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "0.4.23"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.23.tgz#297871f63be507adcfbfca715d0cd0eed84e9a63"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
safer-buffer ">= 2.1.2 < 3"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
iconv-lite@^0.4.17, iconv-lite@^0.4.24, iconv-lite@^0.4.4, iconv-lite@~0.4.13:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "0.4.24"
resolved "https://registry.yarnpkg.com/iconv-lite/-/iconv-lite-0.4.24.tgz#2022b4b25fbddc21d2f524974a474aafe733908b"
dependencies:
safer-buffer ">= 2.1.2 < 3"
ieee754@^1.1.4:
version "1.1.12"
resolved "https://registry.yarnpkg.com/ieee754/-/ieee754-1.1.12.tgz#50bf24e5b9c8bb98af4964c941cdb0918da7b60b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
ignore-walk@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/ignore-walk/-/ignore-walk-3.0.1.tgz#a83e62e7d272ac0e3b551aaa82831a19b69f82f8"
dependencies:
minimatch "^3.0.4"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
ignore@^3.3.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.3.10"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-3.3.10.tgz#0a97fb876986e8081c631160f8f9f389157f0043"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
ignore@^4.0.6:
version "4.0.6"
resolved "https://registry.yarnpkg.com/ignore/-/ignore-4.0.6.tgz#750e3db5862087b4737ebac8207ffd1ef27b25fc"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
iltorb@^1.0.13:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.3.10"
resolved "https://registry.yarnpkg.com/iltorb/-/iltorb-1.3.10.tgz#a0d9e4e7d52bf510741442236cbe0cc4230fc9f8"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
detect-libc "^0.2.0"
nan "^2.6.2"
node-gyp "^3.6.2"
prebuild-install "^2.3.0"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
image-size@0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.6.1.tgz#98122a562d59dcc097ef1b2c8191866eb8f5d663"
Update image-size to version 0.5.2 🚀 (#8446) * chore(package): update image-size to version 0.5.2 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:46:54 +02:00
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 18:43:08 +02:00
image-size@0.6.3:
version "0.6.3"
resolved "https://registry.yarnpkg.com/image-size/-/image-size-0.6.3.tgz#e7e5c65bb534bd7cdcedd6cb5166272a85f75fb2"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
import-fresh@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/import-fresh/-/import-fresh-3.0.0.tgz#a3d897f420cab0e671236897f75bc14b4885c390"
dependencies:
parent-module "^1.0.0"
resolve-from "^4.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
imurmurhash@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/imurmurhash/-/imurmurhash-0.1.4.tgz#9218b9b2b928a238b13dc4fb6b6d576f231453ea"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
indent-string@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/indent-string/-/indent-string-2.1.0.tgz#8e2d48348742121b4a8218b7a137e9a52049dc80"
dependencies:
repeating "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
indexes-of@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/indexes-of/-/indexes-of-1.0.1.tgz#f30f716c8e2bd346c7b67d3df3915566a7c05607"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
inflection@^1.5.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "1.12.0"
resolved "https://registry.yarnpkg.com/inflection/-/inflection-1.12.0.tgz#a200935656d6f5f6bc4dc7502e1aecb703228416"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
inflight@^1.0.4:
version "1.0.6"
resolved "https://registry.yarnpkg.com/inflight/-/inflight-1.0.6.tgz#49bd6331d7d02d0c09bc910a1075ba8165b56df9"
dependencies:
once "^1.3.0"
wrappy "1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
inherits@2, inherits@2.0.3, inherits@^2.0.1, inherits@^2.0.3, inherits@~2.0.0, inherits@~2.0.1, inherits@~2.0.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.3.tgz#633c2c83e3da42a502f52466022480f4208261de"
inherits@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/inherits/-/inherits-2.0.1.tgz#b17d08d326b4423e568eff719f91b0b1cbdf69f1"
ini@^1.3.0, ini@^1.3.4, ini@~1.3.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.3.5"
resolved "https://registry.yarnpkg.com/ini/-/ini-1.3.5.tgz#eee25f56db1c9ec6085e0c22778083f596abf927"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
inquirer@^3.0.6:
version "3.3.0"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-3.3.0.tgz#9dd2f2ad765dcab1ff0443b491442a20ba227dc9"
dependencies:
ansi-escapes "^3.0.0"
chalk "^2.0.0"
cli-cursor "^2.1.0"
cli-width "^2.0.0"
external-editor "^2.0.4"
figures "^2.0.0"
lodash "^4.3.0"
mute-stream "0.0.7"
run-async "^2.2.0"
rx-lite "^4.0.8"
rx-lite-aggregates "^4.0.8"
string-width "^2.1.0"
strip-ansi "^4.0.0"
through "^2.3.6"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
inquirer@^6.1.0:
version "6.2.1"
resolved "https://registry.yarnpkg.com/inquirer/-/inquirer-6.2.1.tgz#9943fc4882161bdb0b0c9276769c75b32dbfcd52"
dependencies:
ansi-escapes "^3.0.0"
chalk "^2.0.0"
cli-cursor "^2.1.0"
cli-width "^2.0.0"
external-editor "^3.0.0"
figures "^2.0.0"
lodash "^4.17.10"
mute-stream "0.0.7"
run-async "^2.2.0"
rxjs "^6.1.0"
string-width "^2.1.0"
strip-ansi "^5.0.0"
through "^2.3.6"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
interpret@^1.1.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.2.0.tgz#d5061a6224be58e8083985f5014d844359576296"
interpret@~1.1.0:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/interpret/-/interpret-1.1.0.tgz#7ed1b1410c6a0e0f78cf95d3b8440c63f78b8614"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
intl-messageformat-parser@1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/intl-messageformat-parser/-/intl-messageformat-parser-1.2.0.tgz#5906b7f953ab7470e0dc8549097b648b991892ff"
intl-messageformat@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/intl-messageformat/-/intl-messageformat-1.3.0.tgz#f7d926aded7a3ab19b2dc601efd54e99a4bd4eae"
dependencies:
intl-messageformat-parser "1.2.0"
intl@1.2.5:
version "1.2.5"
resolved "https://registry.yarnpkg.com/intl/-/intl-1.2.5.tgz#82244a2190c4e419f8371f5aa34daa3420e2abde"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
into-stream@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/into-stream/-/into-stream-3.1.0.tgz#96fb0a936c12babd6ff1752a17d05616abd094c6"
dependencies:
from2 "^2.1.1"
p-is-promise "^1.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
invert-kv@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/invert-kv/-/invert-kv-1.0.0.tgz#104a8e4aaca6d3d8cd157a8ef8bfab2d7a3ffdb6"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
ipaddr.js@1.8.0:
version "1.8.0"
resolved "https://registry.yarnpkg.com/ipaddr.js/-/ipaddr.js-1.8.0.tgz#eaa33d6ddd7ace8f7f6fe0c9ca0440e706738b1e"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
is-absolute-url@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-absolute-url/-/is-absolute-url-2.1.0.tgz#50530dfb84fcc9aa7dbe7852e83a37b93b9f2aa6"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
is-absolute@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-absolute/-/is-absolute-1.0.0.tgz#395e1ae84b11f26ad1795e73c17378e48a301576"
dependencies:
is-relative "^1.0.0"
is-windows "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-accessor-descriptor@^0.1.6:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-0.1.6.tgz#a9e12cb3ae8d876727eeef3843f8a0897b5c98d6"
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
is-accessor-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-accessor-descriptor/-/is-accessor-descriptor-1.0.0.tgz#169c2f6d3df1f992618072365c9b0ea1f6878656"
dependencies:
kind-of "^6.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-arrayish@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.2.1.tgz#77c99840527aa8ecb1a8ba697b80645a7a926a9d"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
is-arrayish@^0.3.1:
version "0.3.2"
resolved "https://registry.yarnpkg.com/is-arrayish/-/is-arrayish-0.3.2.tgz#4574a2ae56f7ab206896fb431eaeed066fdf8f03"
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
is-buffer@^1.1.5, is-buffer@~1.1.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.1.6"
resolved "https://registry.yarnpkg.com/is-buffer/-/is-buffer-1.1.6.tgz#efaa2ea9daa0d7ab2ea13a97b2b8ad51fefbe8be"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-builtin-module@^1.0.0:
version "1.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/is-builtin-module/-/is-builtin-module-1.0.0.tgz#540572d34f7ac3119f8f76c30cbc1b1e037affbe"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
builtin-modules "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-data-descriptor@^0.1.4:
version "0.1.4"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-0.1.4.tgz#0b5ee648388e2c860282e793f1856fec3f301b56"
dependencies:
kind-of "^3.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
is-data-descriptor@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-data-descriptor/-/is-data-descriptor-1.0.0.tgz#d84876321d0e7add03990406abbbbd36ba9268c7"
dependencies:
kind-of "^6.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-descriptor@^0.1.0:
version "0.1.6"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-0.1.6.tgz#366d8240dde487ca51823b1ab9f07a10a78251ca"
dependencies:
is-accessor-descriptor "^0.1.6"
is-data-descriptor "^0.1.4"
kind-of "^5.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
is-descriptor@^1.0.0, is-descriptor@^1.0.2:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-descriptor/-/is-descriptor-1.0.2.tgz#3b159746a66604b04f8c81524ba365c5f14d86ec"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
is-accessor-descriptor "^1.0.0"
is-data-descriptor "^1.0.0"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-extendable@^0.1.0, is-extendable@^0.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-0.1.1.tgz#62b110e289a471418e3ec36a617d472e301dfc89"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-extendable@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-extendable/-/is-extendable-1.0.1.tgz#a7470f9e426733d81bd81e1155264e3a3507cab4"
dependencies:
is-plain-object "^2.0.4"
is-extglob@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/is-extglob/-/is-extglob-2.1.1.tgz#a88c02535791f02ed37c76a1b9ea9773c833f8c2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-finite@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-finite/-/is-finite-1.0.2.tgz#cc6677695602be550ef11e8b4aa6305342b6d0aa"
dependencies:
number-is-nan "^1.0.0"
is-fullwidth-code-point@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-1.0.0.tgz#ef9e31386f031a7f0d643af82fde50c457ef00cb"
dependencies:
number-is-nan "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
is-fullwidth-code-point@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz#a3b30a5c4f199183167aaab93beefae3ddfb654f"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-glob@^3.1.0:
version "3.1.0"
resolved "https://registry.yarnpkg.com/is-glob/-/is-glob-3.1.0.tgz#7ba5ae24217804ac70707b96922567486cc3e84a"
dependencies:
is-extglob "^2.1.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
is-number@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/is-number/-/is-number-3.0.0.tgz#24fd6201a4782cf50561c810276afc7d12d71195"
dependencies:
kind-of "^3.0.2"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
is-object@^1.0.1, is-object@~1.0.1:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/is-object/-/is-object-1.0.1.tgz#8952688c5ec2ffd6b03ecc85e769e02903083470"
is-plain-obj@^1.0.0, is-plain-obj@^1.1.0:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-plain-obj/-/is-plain-obj-1.1.0.tgz#71a50c8429dfca773c92a390a4a03b39fcd51d3e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
is-plain-object@^2.0.1, is-plain-object@^2.0.3, is-plain-object@^2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/is-plain-object/-/is-plain-object-2.0.4.tgz#2c163b3fafb1b606d9d17928f05c2a1c38e07677"
dependencies:
isobject "^3.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
is-promise@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-promise/-/is-promise-2.1.0.tgz#79a2a9ece7f096e80f36d2b2f3bc16c1ff4bf3fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-property@^1.0.0:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-property/-/is-property-1.0.2.tgz#57fe1c4e48474edd65b09911f26b1cd4095dda84"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
is-relative@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-relative/-/is-relative-1.0.0.tgz#a1bb6935ce8c5dba1e8b9754b9b2dcc020e2260d"
dependencies:
is-unc-path "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
is-resolvable@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-resolvable/-/is-resolvable-1.1.0.tgz#fb18f87ce1feb925169c9a407c19318a3206ed88"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
is-retry-allowed@^1.0.0, is-retry-allowed@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-retry-allowed/-/is-retry-allowed-1.1.0.tgz#11a060568b67339444033d0125a61a20d564fb34"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
is-stream@^1.0.0, is-stream@^1.1.0:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/is-stream/-/is-stream-1.1.0.tgz#12d4a3dd4e68e0b79ceb8dbc84173ae80d91ca44"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
is-svg@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/is-svg/-/is-svg-2.1.0.tgz#cf61090da0d9efbcab8722deba6f032208dbb0e9"
dependencies:
html-comment-regex "^1.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-typedarray@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-typedarray/-/is-typedarray-1.0.0.tgz#e479c80858df0c1b11ddda6940f96011fcda4a9a"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
is-unc-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/is-unc-path/-/is-unc-path-1.0.0.tgz#d731e8898ed090a12c352ad2eaed5095ad322c9d"
dependencies:
unc-path-regex "^0.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
is-utf8@^0.2.0:
version "0.2.1"
resolved "https://registry.yarnpkg.com/is-utf8/-/is-utf8-0.2.1.tgz#4b0da1442104d1b336340e80797e865cf39f7d72"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
is-windows@^1.0.1, is-windows@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/is-windows/-/is-windows-1.0.2.tgz#d1850eb9791ecd18e6182ce12a30f396634bb19d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
isarray@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-0.0.1.tgz#8a18acfca9a8f4177e09abfc6038939b05d1eedf"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
isarray@1.0.0, isarray@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.0"
resolved "https://registry.yarnpkg.com/isarray/-/isarray-1.0.0.tgz#bb935d48582cba168c06834957a54a3e07124f11"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
isexe@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/isexe/-/isexe-2.0.0.tgz#e8fbf374dc556ff8947a10dcb0572d633f2cfa10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
isobject@^2.0.0, isobject@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-2.1.0.tgz#f065561096a3f1da2ef46272f815c840d87e0c89"
dependencies:
isarray "1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
isobject@^3.0.0, isobject@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/isobject/-/isobject-3.0.1.tgz#4e431e92b11a9731636aa1f9c8d1ccbcfdab78df"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
isstream@~0.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/isstream/-/isstream-0.1.2.tgz#47e63f7af55afa6f92e1500e690eb8b8529c099a"
istanbul@0.4.5:
version "0.4.5"
resolved "https://registry.yarnpkg.com/istanbul/-/istanbul-0.4.5.tgz#65c7d73d4c4da84d4f3ac310b918fb0b8033733b"
dependencies:
abbrev "1.0.x"
async "1.x"
escodegen "1.8.x"
esprima "2.7.x"
glob "^5.0.15"
handlebars "^4.0.1"
js-yaml "3.x"
mkdirp "0.5.x"
nopt "3.x"
once "1.x"
resolve "1.1.x"
supports-color "^3.1.0"
which "^1.1.1"
wordwrap "^1.0.0"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
isurl@^1.0.0-alpha5:
version "1.0.0"
resolved "https://registry.yarnpkg.com/isurl/-/isurl-1.0.0.tgz#b27f4f49f3cdaa3ea44a0a5b7f3462e6edc39d67"
dependencies:
has-to-string-tag-x "^1.2.0"
is-object "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
jison-lex@0.2.x:
version "0.2.1"
resolved "https://registry.yarnpkg.com/jison-lex/-/jison-lex-0.2.1.tgz#ac4b815e8cce5132eb12b5dfcfe8d707b8844dfe"
dependencies:
lex-parser "0.1.x"
nomnom "1.5.2"
jison@0.4.13:
version "0.4.13"
resolved "https://registry.yarnpkg.com/jison/-/jison-0.4.13.tgz#9041707d62241367f58834532b9f19c2c36fac78"
dependencies:
JSONSelect "0.4.0"
cjson "~0.2.1"
ebnf-parser "~0.1.9"
escodegen "0.0.21"
esprima "1.0.x"
jison-lex "0.2.x"
lex-parser "~0.1.3"
nomnom "1.5.2"
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
join-component@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/join-component/-/join-component-1.1.0.tgz#b8417b750661a392bee2c2537c68b2a9d4977cd5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
js-base64@^2.1.9:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/js-base64/-/js-base64-2.5.1.tgz#1efa39ef2c5f7980bb1784ade4a8af2de3291121"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
js-beautify@1.6.8:
version "1.6.8"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/js-beautify/-/js-beautify-1.6.8.tgz#da1146d34431145309c89be7f69ed16e8e0ff07e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
config-chain "~1.1.5"
editorconfig "^0.13.2"
mkdirp "~0.5.0"
nopt "~3.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
js-tokens@^3.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-3.0.2.tgz#9866df395102130e38f7f996bceb65443209c25b"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
js-tokens@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/js-tokens/-/js-tokens-4.0.0.tgz#19203fb59991df98e3a287050d4647cdeaf32499"
js-yaml@3.12.1, js-yaml@3.x, js-yaml@^3.12.0, js-yaml@^3.9.1:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "3.12.1"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.12.1.tgz#295c8632a18a23e054cf5c9d3cecafe678167600"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
argparse "^1.0.7"
esprima "^4.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
js-yaml@~3.5.2:
version "3.5.5"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.5.5.tgz#0377c38017cabc7322b0d1fbcd25a491641f2fbe"
dependencies:
argparse "^1.0.2"
esprima "^2.6.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
js-yaml@~3.7.0:
version "3.7.0"
resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-3.7.0.tgz#5c967ddd837a9bfdca5f2de84253abe8a1c03b80"
dependencies:
argparse "^1.0.7"
esprima "^2.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
jsbn@~0.1.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "0.1.1"
resolved "https://registry.yarnpkg.com/jsbn/-/jsbn-0.1.1.tgz#a5e654c2e5a2deb5f201d96cefbca80c0ef2f513"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
json-buffer@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/json-buffer/-/json-buffer-3.0.0.tgz#5b1f397afc75d677bde8bcfc0e47e1f9a3d9a898"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
json-schema-traverse@^0.3.0:
version "0.3.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.3.1.tgz#349a6d44c53a51de89b40805c5d5e59b417d3340"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
json-schema-traverse@^0.4.1:
version "0.4.1"
resolved "https://registry.yarnpkg.com/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz#69f6a87d9513ab8bb8fe63bdb0979c448e684660"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
json-schema@0.2.3:
version "0.2.3"
resolved "https://registry.yarnpkg.com/json-schema/-/json-schema-0.2.3.tgz#b480c892e59a2f05954ce727bd3f2a4e882f9e13"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
json-stable-stringify-without-jsonify@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz#9db7b59496ad3f3cfef30a75142d2d930ad72651"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
json-stringify-safe@5.0.x, json-stringify-safe@^5.0.1, json-stringify-safe@~5.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "5.0.1"
resolved "https://registry.yarnpkg.com/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz#1296a2d58fd45f19a0f6ce01d65701e2c735b6eb"
jsonfile@^2.1.0:
version "2.4.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-2.4.0.tgz#3736a2b428b87bbda0cc83b53fa3d633a35c2ae8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optionalDependencies:
graceful-fs "^4.1.6"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
jsonfile@^3.0.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "3.0.1"
resolved "https://registry.yarnpkg.com/jsonfile/-/jsonfile-3.0.1.tgz#a5ecc6f65f53f662c4415c7675a0331d0992ec66"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
optionalDependencies:
graceful-fs "^4.1.6"
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
jsonpath@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/jsonpath/-/jsonpath-1.0.0.tgz#45cd9d4c4d0d6825d90bd7e40f83f1182b13dd07"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
esprima "1.2.2"
jison "0.4.13"
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
static-eval "2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
underscore "1.7.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
jsonwebtoken@8.4.0, jsonwebtoken@^8.1.0:
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
version "8.4.0"
resolved "https://registry.yarnpkg.com/jsonwebtoken/-/jsonwebtoken-8.4.0.tgz#8757f7b4cb7440d86d5e2f3becefa70536c8e46a"
dependencies:
jws "^3.1.5"
lodash.includes "^4.3.0"
lodash.isboolean "^3.0.3"
lodash.isinteger "^4.0.4"
lodash.isnumber "^3.0.3"
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
lodash.once "^4.0.0"
ms "^2.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
jsprim@^1.2.2:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/jsprim/-/jsprim-1.4.1.tgz#313e66bc1e5cc06e438bc1b7499c2e5c56acb6a2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
assert-plus "1.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
extsprintf "1.3.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
json-schema "0.2.3"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
verror "1.10.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
just-extend@^4.0.2:
version "4.0.2"
resolved "https://registry.yarnpkg.com/just-extend/-/just-extend-4.0.2.tgz#f3f47f7dfca0f989c55410a7ebc8854b07108afc"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
Added API Key auth middleware to v2 Admin API (#10006) refs #9865 - Added `auth.authenticate.authenticateAdminApiKey` middleware - accepts signed JWT in an `Authorization: Ghost [token]` header - sets `req.api_key` if the token is valid - Updated `authenticatePrivate` middleware stack for v2 admin routes
2019-01-18 13:45:06 +01:00
jwa@^1.1.5:
version "1.1.6"
resolved "https://registry.yarnpkg.com/jwa/-/jwa-1.1.6.tgz#87240e76c9808dbde18783cf2264ef4929ee50e6"
dependencies:
buffer-equal-constant-time "1.0.1"
ecdsa-sig-formatter "1.0.10"
safe-buffer "^5.0.1"
jws@^3.1.5:
version "3.1.5"
resolved "https://registry.yarnpkg.com/jws/-/jws-3.1.5.tgz#80d12d05b293d1e841e7cb8b4e69e561adcf834f"
dependencies:
jwa "^1.1.5"
safe-buffer "^5.0.1"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
keygrip@~1.0.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/keygrip/-/keygrip-1.0.3.tgz#399d709f0aed2bab0a059e0cdd3a5023a053e1dc"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
keypair@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/keypair/-/keypair-1.0.1.tgz#7603719270afb6564ed38a22087a06fc9aa4ea1b"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
keyv@3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/keyv/-/keyv-3.0.0.tgz#44923ba39e68b12a7cec7df6c3268c031f2ef373"
dependencies:
json-buffer "3.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
kind-of@^3.0.2, kind-of@^3.0.3, kind-of@^3.2.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "3.2.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-3.2.2.tgz#31ea21a734bab9bbb0f32466d893aea51e4a3c64"
dependencies:
is-buffer "^1.1.5"
kind-of@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-4.0.0.tgz#20813df3d712928b207378691a45066fae72dd57"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
is-buffer "^1.1.5"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
kind-of@^5.0.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
version "5.1.0"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-5.1.0.tgz#729c91e2d857b7a419a1f9aa65685c4c33f5845d"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
kind-of@^6.0.0, kind-of@^6.0.2:
version "6.0.2"
resolved "https://registry.yarnpkg.com/kind-of/-/kind-of-6.0.2.tgz#01146b36a6218e64e58f3a8d66de5d7fc6f6d051"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
klaw@^1.0.0:
version "1.3.1"
resolved "https://registry.yarnpkg.com/klaw/-/klaw-1.3.1.tgz#4088433b46b3b1ba259d78785d8e96f73ba02439"
optionalDependencies:
graceful-fs "^4.1.9"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
knex-migrator@3.2.5:
version "3.2.5"
resolved "https://registry.yarnpkg.com/knex-migrator/-/knex-migrator-3.2.5.tgz#bf5649f5b3ca55d50d0dd634027863c9e10e408d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
bluebird "^3.5.3"
commander "^2.19.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
compare-ver "^2.0.2"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
debug "^4.1.1"
ghost-ignition "^2.9.6"
knex "^0.16.3"
lodash "^4.17.11"
moment "^2.23.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
nconf "^0.10.0"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
resolve "^1.9.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
optionalDependencies:
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
mysql "^2.16.0"
sqlite3 "^4.0.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump knex-migrator to version 3.2.3 no issue
2018-08-15 02:40:46 +02:00
knex@0.14.6:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
version "0.14.6"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/knex/-/knex-0.14.6.tgz#ad57c4ef8fa1b51ebc8c37c2c9b483f6fb34e41e"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
dependencies:
babel-runtime "^6.26.0"
bluebird "^3.5.1"
chalk "2.3.2"
commander "^2.15.1"
debug "3.1.0"
inherits "~2.0.3"
interpret "^1.1.0"
liftoff "2.5.0"
lodash "^4.17.5"
minimist "1.2.0"
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
readable-stream "2.3.6"
safe-buffer "^5.1.1"
tarn "^1.1.4"
tildify "1.2.0"
uuid "^3.2.1"
v8flags "^3.0.2"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
knex@^0.16.2, knex@^0.16.3:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "0.16.3"
resolved "https://registry.yarnpkg.com/knex/-/knex-0.16.3.tgz#ca9effd4973655f42b42132b9019b0bc6bd20644"
dependencies:
"@babel/polyfill" "^7.0.0"
"@types/bluebird" "^3.5.25"
bluebird "^3.5.3"
chalk "2.4.1"
commander "^2.19.0"
debug "4.1.0"
inherits "~2.0.3"
interpret "^1.1.0"
liftoff "2.5.0"
lodash "^4.17.11"
minimist "1.2.0"
mkdirp "^0.5.1"
pg-connection-string "2.0.0"
tarn "^1.1.4"
tildify "1.2.0"
uuid "^3.3.2"
v8flags "^3.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lazystream@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lazystream/-/lazystream-1.0.0.tgz#f6995fe0f820392f61396be89462407bb77168e4"
dependencies:
readable-stream "^2.0.5"
lcid@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lcid/-/lcid-1.0.0.tgz#308accafa0bc483a3867b4b6f2b9506251d1b835"
dependencies:
invert-kv "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
levn@^0.3.0, levn@~0.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.3.0"
resolved "https://registry.yarnpkg.com/levn/-/levn-0.3.0.tgz#3b09924edf9f083c0490fdd4c0bc4421e04764ee"
dependencies:
prelude-ls "~1.1.2"
type-check "~0.3.2"
lex-parser@0.1.x, lex-parser@~0.1.3:
version "0.1.4"
resolved "https://registry.yarnpkg.com/lex-parser/-/lex-parser-0.1.4.tgz#64c4f025f17fd53bfb45763faeb16f015a747550"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
liftoff@2.5.0, liftoff@~2.5.0:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
version "2.5.0"
resolved "https://registry.yarnpkg.com/liftoff/-/liftoff-2.5.0.tgz#2009291bb31cea861bbf10a7c15a28caf75c31ec"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
dependencies:
extend "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
findup-sync "^2.0.0"
fined "^1.0.1"
flagged-respawn "^1.0.0"
is-plain-object "^2.0.4"
object.map "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
rechoir "^0.6.2"
resolve "^1.1.7"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
linkify-it@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "2.1.0"
resolved "https://registry.yarnpkg.com/linkify-it/-/linkify-it-2.1.0.tgz#c4caf38a6cd7ac2212ef3c7d2bde30a91561f9db"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
dependencies:
uc.micro "^1.0.1"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
livereload-js@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/livereload-js/-/livereload-js-2.4.0.tgz#447c31cf1ea9ab52fc20db615c5ddf678f78009c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
load-json-file@^1.0.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/load-json-file/-/load-json-file-1.1.0.tgz#956905708d58b4bab4c2261b04f59f31c99374c0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
graceful-fs "^4.1.2"
parse-json "^2.2.0"
pify "^2.0.0"
pinkie-promise "^2.0.0"
strip-bom "^2.0.0"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.assign@^4.2.0:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.assign/-/lodash.assign-4.2.0.tgz#0d99f3ccd7a6d261d19bdaeb9245005d285808e7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash.assignin@^4.0.9:
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.assignin/-/lodash.assignin-4.2.0.tgz#ba8df5fb841eb0a3e8044232b0e263a8dc6a28a2"
lodash.bind@^4.1.4:
version "4.2.1"
resolved "https://registry.yarnpkg.com/lodash.bind/-/lodash.bind-4.2.1.tgz#7ae3017e939622ac31b7d7d7dcb1b34db1690d35"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.clone@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.clone/-/lodash.clone-4.5.0.tgz#195870450f5a13192478df4bc3d23d2dea1907b6"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
lodash.clonedeep@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.clonedeep/-/lodash.clonedeep-4.5.0.tgz#e23f3f9c4f8fbdde872529c1071857a086e5ccef"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
lodash.defaults@^4.0.0, lodash.defaults@^4.0.1, lodash.defaults@^4.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.2.0"
resolved "https://registry.yarnpkg.com/lodash.defaults/-/lodash.defaults-4.2.0.tgz#d09178716ffea4dde9e5fb7b37f6f0802274580c"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
lodash.difference@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.difference/-/lodash.difference-4.5.0.tgz#9ccb4e505d486b91651345772885a2df27fd017c"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
lodash.escaperegexp@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.escaperegexp/-/lodash.escaperegexp-4.1.2.tgz#64762c48618082518ac3df4ccf5d5886dae20347"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.fill@^3.4.0:
version "3.4.0"
resolved "https://registry.yarnpkg.com/lodash.fill/-/lodash.fill-3.4.0.tgz#a3c74ae640d053adf0dc2079f8720788e8bfef85"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash.filter@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.filter/-/lodash.filter-4.6.0.tgz#668b1d4981603ae1cc5a6fa760143e480b4c4ace"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.flatten@^4.2.0, lodash.flatten@^4.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.flatten/-/lodash.flatten-4.4.0.tgz#f31c22225a9632d2bbf8e4addbef240aa765a61f"
lodash.foreach@^4.3.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.foreach/-/lodash.foreach-4.5.0.tgz#1a6a35eace401280c7f06dddec35165ab27e3e53"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
lodash.get@^4.4.2:
version "4.4.2"
resolved "https://registry.yarnpkg.com/lodash.get/-/lodash.get-4.4.2.tgz#2d177f652fa31e939b4438d5341499dfa3825e99"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
lodash.includes@^4.3.0:
version "4.3.0"
resolved "https://registry.yarnpkg.com/lodash.includes/-/lodash.includes-4.3.0.tgz#60bb98a87cb923c68ca1e51325483314849f553f"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.intersection@^4.4.0:
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.intersection/-/lodash.intersection-4.4.0.tgz#0a11ba631d0e95c23c7f2f4cbb9a692ed178e705"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
lodash.isboolean@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isboolean/-/lodash.isboolean-3.0.3.tgz#6c2e171db2a257cd96802fd43b01b20d5f5870f6"
lodash.isinteger@^4.0.4:
version "4.0.4"
resolved "https://registry.yarnpkg.com/lodash.isinteger/-/lodash.isinteger-4.0.4.tgz#619c0af3d03f8b04c31f5882840b77b11cd68343"
lodash.isnumber@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/lodash.isnumber/-/lodash.isnumber-3.0.3.tgz#3ce76810c5928d03352301ac287317f11c0b1ffc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
lodash.isplainobject@^4.0.6:
version "4.0.6"
resolved "https://registry.yarnpkg.com/lodash.isplainobject/-/lodash.isplainobject-4.0.6.tgz#7c526a52d89b45c45cc690b88163be0497f550cb"
lodash.isstring@^4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.isstring/-/lodash.isstring-4.0.1.tgz#d527dfb5456eca7cc9bb95d5daeaf88ba54a5451"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash.map@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.map/-/lodash.map-4.6.0.tgz#771ec7839e3473d9c4cde28b19394c3562f4f6d3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
lodash.memoize@^4.1.2:
version "4.1.2"
resolved "https://registry.yarnpkg.com/lodash.memoize/-/lodash.memoize-4.1.2.tgz#bcc6c49a42a2840ed997f323eada5ecd182e0bfe"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.merge@^4.4.0, lodash.merge@^4.6.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "4.6.1"
resolved "https://registry.yarnpkg.com/lodash.merge/-/lodash.merge-4.6.1.tgz#adc25d9cb99b9391c59624f379fbba60d7111d54"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
lodash.mergewith@^4.6.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "4.6.1"
resolved "https://registry.yarnpkg.com/lodash.mergewith/-/lodash.mergewith-4.6.1.tgz#639057e726c3afbdb3e7d42741caa8d6e4335927"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.omit@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.omit/-/lodash.omit-4.5.0.tgz#6eb19ae5a1ee1dd9df0b969e66ce0b7fa30b5e60"
➕ Installed jsonwebtoken@8.3.0
2018-11-07 11:07:28 +01:00
lodash.once@^4.0.0:
version "4.1.1"
resolved "https://registry.yarnpkg.com/lodash.once/-/lodash.once-4.1.1.tgz#0dd3971213c7c56df880977d504c88fb471a97ac"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.partialright@^4.2.1:
version "4.2.1"
resolved "https://registry.yarnpkg.com/lodash.partialright/-/lodash.partialright-4.2.1.tgz#0130d80e83363264d40074f329b8a3e7a8a1cc4b"
lodash.pick@^4.2.1, lodash.pick@^4.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.pick/-/lodash.pick-4.4.0.tgz#52f05610fff9ded422611441ed1fc123a03001b3"
lodash.reduce@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reduce/-/lodash.reduce-4.6.0.tgz#f1ab6b839299ad48f784abbf476596f03b914d3b"
lodash.reject@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.reject/-/lodash.reject-4.6.0.tgz#80d6492dc1470864bbf583533b651f42a9f52415"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
lodash.set@^4.0.0:
version "4.3.2"
resolved "https://registry.yarnpkg.com/lodash.set/-/lodash.set-4.3.2.tgz#d8757b1da807dde24816b0d6a84bea1a76230b23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash.some@^4.4.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.some/-/lodash.some-4.6.0.tgz#1bb9f314ef6b8baded13b549169b2a945eb68e4d"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
lodash.toarray@^4.4.0:
version "4.4.0"
resolved "https://registry.yarnpkg.com/lodash.toarray/-/lodash.toarray-4.4.0.tgz#24c4bfcd6b2fba38bfd0594db1179d8e9b656561"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash.unescape@^4.0.0:
version "4.0.1"
resolved "https://registry.yarnpkg.com/lodash.unescape/-/lodash.unescape-4.0.1.tgz#bf2249886ce514cda112fae9218cdc065211fc9c"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
lodash.union@^4.6.0:
version "4.6.0"
resolved "https://registry.yarnpkg.com/lodash.union/-/lodash.union-4.6.0.tgz#48bb5088409f16f1821666641c44dd1aaae3cd88"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
lodash.uniq@^4.5.0:
version "4.5.0"
resolved "https://registry.yarnpkg.com/lodash.uniq/-/lodash.uniq-4.5.0.tgz#d0225373aeb652adc1bc82e4945339a842754773"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
lodash@4.17.10:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "4.17.10"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.10.tgz#1b7793cf7259ea38fb3661d4d38b3260af8ae4e7"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
lodash@4.17.11, lodash@^4.14.2, lodash@^4.16.4, lodash@^4.17.10, lodash@^4.17.11, lodash@^4.17.4, lodash@^4.17.5, lodash@^4.3.0, lodash@^4.7.0, lodash@^4.8.0, lodash@~4.17.10, lodash@~4.17.5:
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 22:13:52 +02:00
version "4.17.11"
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.11.tgz#b39ea6229ef607ecd89e2c8df12536891cac9b8d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
lolex@^2.3.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.7.5"
resolved "https://registry.yarnpkg.com/lolex/-/lolex-2.7.5.tgz#113001d56bfc7e02d56e36291cc5c413d1aa0733"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
lolex@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/lolex/-/lolex-3.0.0.tgz#f04ee1a8aa13f60f1abd7b0e8f4213ec72ec193e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
long-timeout@~0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/long-timeout/-/long-timeout-0.1.1.tgz#9721d788b47e0bcb5a24c2e2bee1a0da55dab514"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
long@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/long/-/long-4.0.0.tgz#9a7b71cfb7d361a194ea555241c92f7468d5bf28"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
loud-rejection@^1.0.0:
version "1.6.0"
resolved "https://registry.yarnpkg.com/loud-rejection/-/loud-rejection-1.6.0.tgz#5b46f80147edee578870f086d04821cf998e551f"
dependencies:
currently-unhandled "^0.4.1"
signal-exit "^3.0.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
lower-case@^1.1.1:
version "1.1.4"
resolved "https://registry.yarnpkg.com/lower-case/-/lower-case-1.1.4.tgz#9a2cabd1b9e8e0ae993a4bf7d5875c39c42e8eac"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
lowercase-keys@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.0.tgz#4e3366b39e7f5457e35f1324bdf6f88d0bfc7306"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
lowercase-keys@^1.0.0:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/lowercase-keys/-/lowercase-keys-1.0.1.tgz#6f9e30b47084d971a7c820ff15a6c5167b74c26f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lru-cache@^3.2.0:
version "3.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-3.2.0.tgz#71789b3b7f5399bec8565dda38aa30d2a097efee"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
pseudomap "^1.0.1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
lru-cache@^4.0.0, lru-cache@^4.0.1:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "4.1.5"
resolved "https://registry.yarnpkg.com/lru-cache/-/lru-cache-4.1.5.tgz#8bbe50ea85bed59bc9e33dcab8235ee9bcf443cd"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
pseudomap "^1.0.2"
yallist "^2.1.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mailcomposer@~0.2.10:
version "0.2.12"
resolved "https://registry.yarnpkg.com/mailcomposer/-/mailcomposer-0.2.12.tgz#4d02a604616adcb45fb36d37513f4c1bd0b75681"
dependencies:
dkim-signer "~0.1.1"
follow-redirects "0.0.3"
he "~0.3.6"
mime "~1.2.11"
mimelib "~0.2.15"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
make-iterator@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/make-iterator/-/make-iterator-1.0.1.tgz#29b33f312aa8f547c4a5e490f56afcec99133ad6"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
dependencies:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
kind-of "^6.0.2"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
map-cache@^0.2.0, map-cache@^0.2.2:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
version "0.2.2"
resolved "https://registry.yarnpkg.com/map-cache/-/map-cache-0.2.2.tgz#c32abd0bd6525d9b051645bb4f26ac5dc98a0dbf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
map-obj@^1.0.0, map-obj@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/map-obj/-/map-obj-1.0.1.tgz#d933ceb9205d82bdcf4886f6742bdc2b4dea146d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
map-visit@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/map-visit/-/map-visit-1.0.0.tgz#ecdca8f13144e660f1b5bd41f12f3479d98dfb8f"
dependencies:
object-visit "^1.0.0"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
markdown-it-footnote@3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/markdown-it-footnote/-/markdown-it-footnote-3.0.1.tgz#7f3730747cacc86e2fe0bf8a17a710f34791517a"
markdown-it-lazy-headers@0.1.3:
version "0.1.3"
resolved "https://registry.yarnpkg.com/markdown-it-lazy-headers/-/markdown-it-lazy-headers-0.1.3.tgz#e70dd4da79c87a9ce82ca4701b8b7c0e2d72297b"
markdown-it-mark@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/markdown-it-mark/-/markdown-it-mark-2.0.0.tgz#46a1aa947105aed8188978e0a016179e404f42c7"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
markdown-it@8.4.2:
version "8.4.2"
resolved "https://registry.yarnpkg.com/markdown-it/-/markdown-it-8.4.2.tgz#386f98998dc15a37722aa7722084f4020bdd9b54"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
dependencies:
argparse "^1.0.7"
entities "~1.1.1"
linkify-it "^2.0.0"
mdurl "^1.0.1"
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 10:03:24 +01:00
uc.micro "^1.0.5"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
matchdep@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/matchdep/-/matchdep-2.0.0.tgz#c6f34834a0d8dbc3b37c27ee8bbcb27c7775582e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
findup-sync "^2.0.0"
micromatch "^3.0.4"
resolve "^1.4.0"
stack-trace "0.0.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
math-expression-evaluator@^1.2.14:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.2.17"
resolved "https://registry.yarnpkg.com/math-expression-evaluator/-/math-expression-evaluator-1.2.17.tgz#de819fdbcd84dccd8fae59c6aeb79615b9d266ac"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
maxmin@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/maxmin/-/maxmin-2.1.0.tgz#4d3b220903d95eee7eb7ac7fa864e72dc09a3166"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
chalk "^1.0.0"
figures "^1.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
gzip-size "^3.0.0"
pretty-bytes "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
md5@^2.2.1:
version "2.2.1"
resolved "https://registry.yarnpkg.com/md5/-/md5-2.2.1.tgz#53ab38d5fe3c8891ba465329ea23fac0540126f9"
dependencies:
charenc "~0.0.1"
crypt "~0.0.1"
is-buffer "~1.1.1"
replace custom showdown fork with markdown-it (#8451) refs https://github.com/TryGhost/Ghost-Admin/pull/690, closes #1501, closes #2093, closes #4592, closes #4627, closes #4659, closes #5039, closes #5237, closes #5587, closes #5625, closes #5632, closes #5822, closes #5939, closes #6840, closes #7183, closes #7536 - replace custom showdown fork with markdown-it - swaps showdown for markdown-it when rendering markdown - match existing header ID behaviour - allow headers without a space after the #s - add duplicate header ID handling - remove legacy markdown spec - move markdown-it setup into markdown-converter util - update mobiledoc specs to match markdown-it newline behaviour - update data-generator HTML to match markdown-it newline behaviour - fix Post "converts html to plaintext" test - update rss spec to match markdown-it newline behaviour - close almost all related showdown bugs
2017-05-15 18:48:14 +02:00
mdurl@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/mdurl/-/mdurl-1.0.1.tgz#fe85b2ec75a59037f2adfec100fd6c601761152e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
media-typer@0.3.0:
version "0.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/media-typer/-/media-typer-0.3.0.tgz#8710d7af0aa626f8fffa1ce00168545263255748"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
meow@^3.3.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.7.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/meow/-/meow-3.7.0.tgz#72cb668b425228290abbfa856892587308a801fb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
camelcase-keys "^2.0.0"
decamelize "^1.1.2"
loud-rejection "^1.0.0"
map-obj "^1.0.1"
minimist "^1.1.3"
normalize-package-data "^2.3.4"
object-assign "^4.0.1"
read-pkg-up "^1.0.1"
redent "^1.0.0"
trim-newlines "^1.0.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
merge-descriptors@1.0.1, merge-descriptors@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/merge-descriptors/-/merge-descriptors-1.0.1.tgz#b00aaa556dd8b44568150ec9d1b953f3f90cbb61"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
methods@^1.1.1, methods@^1.1.2, methods@~1.1.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/methods/-/methods-1.1.2.tgz#5529a4d67654134edcc5266656835b0f851afcee"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
micromatch@^3.0.4:
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
version "3.1.10"
resolved "https://registry.yarnpkg.com/micromatch/-/micromatch-3.1.10.tgz#70859bc95c9840952f359a068a3fc49f9ecfac23"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
braces "^2.3.1"
define-property "^2.0.2"
extend-shallow "^3.0.2"
extglob "^2.0.4"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
kind-of "^6.0.2"
nanomatch "^1.2.9"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
to-regex "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
"mime-db@>= 1.36.0 < 2", mime-db@~1.37.0:
version "1.37.0"
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.37.0.tgz#0b6a0ce6fdbe9576e25f1f2d2fde8830dc0ad0d8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mime-db@~1.25.0:
version "1.25.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/mime-db/-/mime-db-1.25.0.tgz#c18dbd7c73a5dbf6f44a024dc0d165a1e7b1c392"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
Update moment-timezone to version 0.5.13 🚀 (#8272) * chore(package): update moment-timezone to version 0.5.13 https://greenkeeper.io/ * chore: yarn.lock
2017-04-05 09:56:39 +02:00
mime-types@2.1.13:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.1.13"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.13.tgz#e07aaa9c6c6b9a7ca3012c69003ad25a39e92a88"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
mime-db "~1.25.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
mime-types@^2.1.12, mime-types@~2.1.18, mime-types@~2.1.19:
version "2.1.21"
resolved "https://registry.yarnpkg.com/mime-types/-/mime-types-2.1.21.tgz#28995aa1ecb770742fe6ae7e58f9181c744b3f96"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
mime-db "~1.37.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
mime@1.4.1:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "1.4.1"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.4.1.tgz#121f9ebc49e3766f311a76e1fa1c8003c4b03aa6"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
mime@^1.4.1:
version "1.6.0"
resolved "https://registry.yarnpkg.com/mime/-/mime-1.6.0.tgz#32cd9e5c64553bd58d19a568af452acff04981b1"
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 15:19:07 +01:00
mime@^2.4.0:
version "2.4.0"
resolved "https://registry.yarnpkg.com/mime/-/mime-2.4.0.tgz#e051fd881358585f3279df333fe694da0bcffdd6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mime@~1.2.11:
version "1.2.11"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/mime/-/mime-1.2.11.tgz#58203eed86e3a5ef17aed2b7d9ebd47f0a60dd10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mimelib@~0.2.15:
version "0.2.19"
resolved "https://registry.yarnpkg.com/mimelib/-/mimelib-0.2.19.tgz#37ec90a6ac7d00954851d0b2c31618f0a49da0ee"
dependencies:
addressparser "~0.3.2"
encoding "~0.1.7"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
mimic-fn@^1.0.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/mimic-fn/-/mimic-fn-1.2.0.tgz#820c86a39334640e99516928bd03fca88057d022"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
mimic-response@^1.0.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/mimic-response/-/mimic-response-1.0.1.tgz#4923538878eef42063cb8a3e3b0798781487ab1b"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
Dynamic Routing Beta: Filter collections with NQL (#9704) refs #9601 - replace jsonpath with [NQL](https://github.com/NexesJS/NQL) - jsonpath was just a temporary solution (a short-term fix) - with NQL we are able to filter collections more powerful in the near future - NQL is not feature complete - we still support `featured:true` for collections
2018-06-26 01:54:51 +02:00
mingo@2.2.2:
version "2.2.2"
resolved "https://registry.yarnpkg.com/mingo/-/mingo-2.2.2.tgz#be69d486ae6e0ac54b979dc5f4412db21851f693"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
"minimatch@2 || 3", minimatch@3.0.4, minimatch@^3.0.2, minimatch@^3.0.4, minimatch@~3.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/minimatch/-/minimatch-3.0.4.tgz#5166e286457f03306064be5497e8dbb0c3d32083"
dependencies:
brace-expansion "^1.1.7"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
minimist@0.0.8:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.0.8"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.8.tgz#857fcabfc3397d2625b8228262e86aa7a011b05d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
minimist@1.2.0, minimist@^1.1.3, minimist@^1.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-1.2.0.tgz#a35008b20f41383eec1fb914f4cd5df79a264284"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
minimist@~0.0.1:
version "0.0.10"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/minimist/-/minimist-0.0.10.tgz#de3f98543dbf96082be48ad1a0c7cda836301dcf"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
minipass@^2.2.1, minipass@^2.3.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.3.5"
resolved "https://registry.yarnpkg.com/minipass/-/minipass-2.3.5.tgz#cacebe492022497f656b0f0f51e2682a9ed2d848"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
yallist "^3.0.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
minizlib@^1.1.1:
version "1.2.1"
resolved "https://registry.yarnpkg.com/minizlib/-/minizlib-1.2.1.tgz#dd27ea6136243c7c880684e8672bb3a45fd9b614"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
minipass "^2.2.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
mixin-deep@^1.2.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.3.1"
resolved "https://registry.yarnpkg.com/mixin-deep/-/mixin-deep-1.3.1.tgz#a49e7268dce1a0d9698e45326c5626df3543d0fe"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
for-in "^1.0.2"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
is-extendable "^1.0.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
mkdirp@0.5.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.5.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.0.tgz#1d73076a6df986cd9344e15e71fcc05a4c9abf12"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
minimist "0.0.8"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
mkdirp@0.5.1, mkdirp@0.5.x, "mkdirp@>=0.5 0", mkdirp@^0.5.0, mkdirp@^0.5.1, mkdirp@~0.5.0, mkdirp@~0.5.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.5.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/mkdirp/-/mkdirp-0.5.1.tgz#30057438eac6cf7f8c4767f38648d6697d75c903"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
minimist "0.0.8"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 19:07:33 +01:00
mobiledoc-dom-renderer@0.6.5:
version "0.6.5"
resolved "https://registry.yarnpkg.com/mobiledoc-dom-renderer/-/mobiledoc-dom-renderer-0.6.5.tgz#56c0302c4f9c30840ab5b9b20dfe905aed1e437b"
Update ghost-editor to version 0.1.9 🚀 (#8019) * chore(package): update ghost-editor to version 0.1.9 https://greenkeeper.io/ * chore: yarn.lock
2017-02-17 15:31:28 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
mocha@5.2.0:
version "5.2.0"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-5.2.0.tgz#6d8ae508f59167f940f2b5b3c4a612ae50c90ae6"
dependencies:
browser-stdout "1.3.1"
commander "2.15.1"
debug "3.1.0"
diff "3.5.0"
escape-string-regexp "1.0.5"
glob "7.1.2"
growl "1.10.5"
he "1.1.1"
minimatch "3.0.4"
mkdirp "0.5.1"
supports-color "5.4.0"
mocha@^4.0.0:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
version "4.1.0"
resolved "https://registry.yarnpkg.com/mocha/-/mocha-4.1.0.tgz#7d86cfbcf35cb829e2754c32e17355ec05338794"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
browser-stdout "1.3.0"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
commander "2.11.0"
debug "3.1.0"
diff "3.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
escape-string-regexp "1.0.5"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
glob "7.1.2"
growl "1.10.3"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
he "1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mkdirp "0.5.1"
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
supports-color "4.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
mock-knex@0.4.3:
version "0.4.3"
resolved "https://registry.yarnpkg.com/mock-knex/-/mock-knex-0.4.3.tgz#52c4a11c4d91398154c577da228b90685a1d407d"
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 22:13:52 +02:00
dependencies:
bluebird "^3.4.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
knex "^0.16.2"
Removed api integration tests (#9940) refs #9866 - moved the tests either to unit tests or routing tests - or removed test case (a lot) - this commit is very big 🤪, it was not rly possible to create clean commits for this - it only changes the test env, no real code is touched Next steps: - optimise folder structure + make v2 testing possible - reduce some more tests from routing and model integeration tests
2018-10-06 22:13:52 +02:00
lodash "^4.14.2"
semver "^5.3.0"
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
module-not-found-error@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/module-not-found-error/-/module-not-found-error-1.0.1.tgz#cf8b4ff4f29640674d6cdd02b0e3bc523c2bbdc0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
moment-timezone@0.5.23:
version "0.5.23"
resolved "https://registry.yarnpkg.com/moment-timezone/-/moment-timezone-0.5.23.tgz#7cbb00db2c14c71b19303cb47b0fb0a6d8651463"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Update moment-timezone to version 0.5.12 🚀 (#8247) * chore(package): update moment-timezone to version 0.5.12 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 09:37:25 +02:00
moment ">= 2.9.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped moment to version 2.24.0 no issue
2019-01-22 09:11:57 +01:00
moment@2.24.0, "moment@>= 2.9.0", moment@^2.10.6, moment@^2.15.2, moment@^2.18.1, moment@^2.19.3, moment@^2.23.0:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
version "2.24.0"
resolved "https://registry.yarnpkg.com/moment/-/moment-2.24.0.tgz#0d055d53f5052aa653c9f6eb68bb5d12bf5c2b5b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
⬆️ bump dependencies no issue - gscan@1.1.2 - body-parser@1.17.2 - debug@2.6.8 - express@4.15.3 - html-to-text@3.3.0 - image-size@0.5.5 - uuid@3.1.0
2017-06-22 19:40:56 +02:00
ms@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.0.0.tgz#5608aeadfc00be6c2901df5f9861788de0d597c8"
Update debug to version 2.6.4 🚀 (#8367) * chore(package): update debug to version 2.6.4 https://greenkeeper.io/ * chore: yarn.lock
2017-04-24 16:37:02 +02:00
Bumped analytics-node from version 2.4.1 to 3.3.0 refs #9389 - breaking changes do not affect us - https://github.com/segmentio/analytics-node/releases/tag/v3.0.0
2019-01-21 13:36:46 +01:00
ms@^2.0.0, ms@^2.1.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/ms/-/ms-2.1.1.tgz#30a5864eb3ebb0a66f2ebe6d727af06a09d86e0a"
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 12:28:30 +02:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
multer@1.4.1, multer@^1.1.0:
version "1.4.1"
resolved "https://registry.yarnpkg.com/multer/-/multer-1.4.1.tgz#24b12a416a22fec2ade810539184bf138720159e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
append-field "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
busboy "^0.2.11"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
concat-stream "^1.5.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
object-assign "^4.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
on-finished "^2.3.0"
type-is "^1.6.4"
xtend "^4.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
mute-stream@0.0.7:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.0.7"
resolved "https://registry.yarnpkg.com/mute-stream/-/mute-stream-0.0.7.tgz#3075ce93bc21b8fab43e1bc4da7e8115ed1e7bab"
mv@~2:
version "2.1.1"
resolved "https://registry.yarnpkg.com/mv/-/mv-2.1.1.tgz#ae6ce0d6f6d5e0a4f7d893798d03c1ea9559b6a2"
dependencies:
mkdirp "~0.5.1"
ncp "~2.0.0"
rimraf "~2.4.0"
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
mysql@2.16.0, mysql@^2.16.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.16.0"
resolved "https://registry.yarnpkg.com/mysql/-/mysql-2.16.0.tgz#b23b22ab5de44fc2d5d32bd4f5af6653fc45e2ba"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
bignumber.js "4.1.0"
readable-stream "2.3.6"
safe-buffer "5.1.2"
sqlstring "2.3.1"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
nan@^2.10.0, nan@^2.12.1, nan@^2.6.2:
version "2.12.1"
resolved "https://registry.yarnpkg.com/nan/-/nan-2.12.1.tgz#7b1aa193e9aa86057e3c7bbd0ac448e770925552"
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
nan@~2.10.0:
version "2.10.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/nan/-/nan-2.10.0.tgz#96d0cd610ebd58d4b4de9cc0c6828cda99c7548f"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
nanomatch@^1.2.9:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.2.13"
resolved "https://registry.yarnpkg.com/nanomatch/-/nanomatch-1.2.13.tgz#b87a8aa4fc0de8fe6be88895b38983ff265bd119"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
arr-diff "^4.0.0"
array-unique "^0.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
fragment-cache "^0.2.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
is-windows "^1.0.2"
kind-of "^6.0.2"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
object.pick "^1.3.0"
regex-not "^1.0.0"
snapdragon "^0.8.1"
to-regex "^3.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
napi-build-utils@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/napi-build-utils/-/napi-build-utils-1.0.1.tgz#1381a0f92c39d66bf19852e7873432fc2123e508"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
natural-compare@^1.4.0:
version "1.4.0"
resolved "https://registry.yarnpkg.com/natural-compare/-/natural-compare-1.4.0.tgz#4abebfeed7541f2c27acfb29bdbbd15c8d5ba4f7"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9421) no issue - bookshelf-relations@0.1.5 - ghost-ignition@2.8.18 - sanitize-html@1.17.0 - semver@5.5.0 - uuid@3.2.1 - eslint@4.16.0 - should@13.2.1 - sinon@4.2.1
2018-01-24 22:50:20 +01:00
nconf@0.10.0, nconf@^0.10.0:
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
version "0.10.0"
resolved "https://registry.yarnpkg.com/nconf/-/nconf-0.10.0.tgz#da1285ee95d0a922ca6cee75adcf861f48205ad2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
async "^1.4.0"
ini "^1.3.0"
secure-keys "^1.0.0"
yargs "^3.19.0"
ncp@~2.0.0:
version "2.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/ncp/-/ncp-2.0.0.tgz#195a21d6c46e361d2fb1281ba38b91e9df7bdbb3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
ndjson@^1.4.0:
version "1.5.0"
resolved "https://registry.yarnpkg.com/ndjson/-/ndjson-1.5.0.tgz#ae603b36b134bcec347b452422b0bf98d5832ec8"
dependencies:
json-stringify-safe "^5.0.1"
minimist "^1.2.0"
split2 "^2.1.0"
through2 "^2.0.3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
needle@^2.2.1:
version "2.2.4"
resolved "https://registry.yarnpkg.com/needle/-/needle-2.2.4.tgz#51931bff82533b1928b7d1d69e01f1b00ffd2a4e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
debug "^2.1.2"
iconv-lite "^0.4.4"
sax "^1.2.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
negotiator@0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.1.tgz#2b327184e8992101177b28563fb5e7102acd0ca9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
netjet@1.3.0:
version "1.3.0"
resolved "https://registry.yarnpkg.com/netjet/-/netjet-1.3.0.tgz#7e082b49354a30a5b84ffd14fb7f3aa5874a7ce4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bl "^1.0.1"
hijackresponse "^2.0.0"
lodash.defaults "^4.0.0"
lodash.unescape "^4.0.0"
lru-cache "^4.0.0"
posthtml "^0.9.0"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
nice-try@^1.0.4:
version "1.0.5"
resolved "https://registry.yarnpkg.com/nice-try/-/nice-try-1.0.5.tgz#a3378a7696ce7d223e88fc9b764bd7ef1089e366"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
nise@^1.4.8:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.4.8"
resolved "https://registry.yarnpkg.com/nise/-/nise-1.4.8.tgz#ce91c31e86cf9b2c4cac49d7fcd7f56779bfd6b0"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
"@sinonjs/formatio" "^3.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
just-extend "^4.0.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
lolex "^2.3.2"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
path-to-regexp "^1.7.0"
text-encoding "^0.6.4"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
no-case@^2.2.0:
version "2.3.2"
resolved "https://registry.yarnpkg.com/no-case/-/no-case-2.3.2.tgz#60b813396be39b3f1288a4c1ed5d1e7d28b464ac"
dependencies:
lower-case "^1.1.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
nock@10.0.6:
version "10.0.6"
resolved "https://registry.yarnpkg.com/nock/-/nock-10.0.6.tgz#e6d90ee7a68b8cfc2ab7f6127e7d99aa7d13d111"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
chai "^4.1.2"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
debug "^4.1.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
deep-equal "^1.0.0"
json-stringify-safe "^5.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
lodash "^4.17.5"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
mkdirp "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
propagate "^1.0.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
qs "^6.5.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
semver "^5.5.0"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
node-abi@^2.2.0:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "2.5.1"
resolved "https://registry.yarnpkg.com/node-abi/-/node-abi-2.5.1.tgz#bb17288fc3b2f68fea0ed9897c66979fd754ed47"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
semver "^5.4.1"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 13:13:20 +01:00
node-fetch@^2.3.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "2.3.0"
resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.3.0.tgz#1a1d940bbfb916a1d3e0219f037e89e71f8c5fa5"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 13:13:20 +01:00
integrity sha512-MOd8pV3fxENbryESLgVIeaGKrdl+uaYhCSSVkjeOb/31/njTpcis5aWfdqgNlHIrKOLRbMnfPINPOML2CIFeXA==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 16:49:23 +02:00
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
node-forge@^0.7.6:
version "0.7.6"
resolved "https://registry.yarnpkg.com/node-forge/-/node-forge-0.7.6.tgz#fdf3b418aee1f94f0ef642cd63486c77ca9724ac"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
node-gyp@^3.6.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.8.0"
resolved "https://registry.yarnpkg.com/node-gyp/-/node-gyp-3.8.0.tgz#540304261c330e80d0d5edce253a68cb3964218c"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
fstream "^1.0.0"
glob "^7.0.3"
graceful-fs "^4.1.2"
mkdirp "^0.5.0"
nopt "2 || 3"
npmlog "0 || 1 || 2 || 3 || 4"
osenv "0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
request "^2.87.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
rimraf "2"
semver "~5.3.0"
tar "^2.0.0"
which "1"
Installed deps required for members refs #10213
2018-12-10 10:24:42 +01:00
node-jose@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/node-jose/-/node-jose-1.1.0.tgz#15b0808ed7cf40cc6114c95c1a4d7394051c472a"
dependencies:
base64url "^3.0.0"
es6-promise "^4.2.5"
lodash.assign "^4.2.0"
lodash.clone "^4.5.0"
lodash.fill "^3.4.0"
lodash.flatten "^4.4.0"
lodash.intersection "^4.4.0"
lodash.merge "^4.6.1"
lodash.omit "^4.5.0"
lodash.partialright "^4.2.1"
lodash.pick "^4.4.0"
lodash.uniq "^4.5.0"
long "^4.0.0"
node-forge "^0.7.6"
uuid "^3.3.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
node-loggly-bulk@^2.2.4:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.2.4"
resolved "https://registry.yarnpkg.com/node-loggly-bulk/-/node-loggly-bulk-2.2.4.tgz#bdd8638d97c43ecf1e1831ca98b250968fa6dee9"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
json-stringify-safe "5.0.x"
moment "^2.18.1"
request ">=2.76.0 <3.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
node-pre-gyp@^0.11.0:
version "0.11.0"
resolved "https://registry.yarnpkg.com/node-pre-gyp/-/node-pre-gyp-0.11.0.tgz#db1f33215272f692cd38f03238e3e9b47c5dd054"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 18:43:08 +02:00
dependencies:
detect-libc "^1.0.2"
mkdirp "^0.5.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
needle "^2.2.1"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 18:43:08 +02:00
nopt "^4.0.1"
npm-packlist "^1.1.6"
npmlog "^4.0.2"
rc "^1.2.7"
rimraf "^2.6.1"
semver "^5.3.0"
tar "^4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
nodemailer@0.7.1:
version "0.7.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/nodemailer/-/nodemailer-0.7.1.tgz#1ec819e243622300a00abe746cb5d3389c0f316c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
aws-sdk "2.0.5"
directmail "~0.1.7"
he "~0.3.6"
mailcomposer "~0.2.10"
public-address "~0.1.1"
simplesmtp "~0.2 || ~0.3.30"
optionalDependencies:
readable-stream "~1.1.9"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
nomnom@1.5.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.5.2"
resolved "https://registry.yarnpkg.com/nomnom/-/nomnom-1.5.2.tgz#f4345448a853cfbd5c0d26320f2477ab0526fe2f"
dependencies:
colors "0.5.x"
underscore "1.1.x"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
noop-logger@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/noop-logger/-/noop-logger-0.1.1.tgz#94a2b1633c4f1317553007d8966fd0e841b6a4c2"
"nopt@2 || 3", nopt@3.x, nopt@~3.0.1, nopt@~3.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.0.6"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-3.0.6.tgz#c6465dbf08abcd4db359317f79ac68a646b28ff9"
dependencies:
abbrev "1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
nopt@^4.0.1, nopt@~4.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/nopt/-/nopt-4.0.1.tgz#d0d4685afd5415193c8c7505602d0d17cd64474d"
dependencies:
abbrev "1"
osenv "^0.1.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
normalize-package-data@^2.3.2, normalize-package-data@^2.3.4:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "2.4.0"
resolved "https://registry.yarnpkg.com/normalize-package-data/-/normalize-package-data-2.4.0.tgz#12f95a307d58352075a04907b84ac8be98ac012f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
hosted-git-info "^2.1.4"
is-builtin-module "^1.0.0"
semver "2 || 3 || 4 || 5"
validate-npm-package-license "^3.0.1"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
normalize-path@^2.0.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-2.1.1.tgz#1ab28b556e198363a8c1a6f7e6fa20137fe6aed9"
dependencies:
remove-trailing-separator "^1.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
normalize-path@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/normalize-path/-/normalize-path-3.0.0.tgz#0dcd69ff23a1c9b11fd0978316644a0388216a65"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
normalize-range@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/normalize-range/-/normalize-range-0.1.2.tgz#2d10c06bdfd312ea9777695a4d28439456b75942"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
normalize-url@2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-2.0.1.tgz#835a9da1551fa26f70e92329069a23aa6574d7e6"
dependencies:
prepend-http "^2.0.0"
query-string "^5.0.1"
sort-keys "^2.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
normalize-url@^1.4.0:
version "1.9.1"
resolved "https://registry.yarnpkg.com/normalize-url/-/normalize-url-1.9.1.tgz#2cc0d66b31ea23036458436e3620d85954c66c3c"
dependencies:
object-assign "^4.0.1"
prepend-http "^1.0.0"
query-string "^4.1.0"
sort-keys "^1.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
npm-bundled@^1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/npm-bundled/-/npm-bundled-1.0.5.tgz#3c1732b7ba936b3a10325aef616467c0ccbcc979"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
npm-packlist@^1.1.6:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/npm-packlist/-/npm-packlist-1.2.0.tgz#55a60e793e272f00862c7089274439a4cc31fc7f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
ignore-walk "^3.0.1"
npm-bundled "^1.0.1"
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 19:45:29 +01:00
npm-run-path@^2.0.0:
version "2.0.2"
resolved "https://registry.yarnpkg.com/npm-run-path/-/npm-run-path-2.0.2.tgz#35a9232dfa35d7067b4cb2ddf2357b1871536c5f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 19:45:29 +01:00
path-key "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
"npmlog@0 || 1 || 2 || 3 || 4", npmlog@^4.0.1, npmlog@^4.0.2, npmlog@^4.1.2:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "4.1.2"
resolved "https://registry.yarnpkg.com/npmlog/-/npmlog-4.1.2.tgz#08a7f2a8bf734604779a9efa4ad5cc717abb954b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
are-we-there-yet "~1.1.2"
console-control-strings "~1.1.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
gauge "~2.7.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
set-blocking "~2.0.0"
nth-check@~1.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/nth-check/-/nth-check-1.0.2.tgz#b2bd295c37e3dd58a3bf0700376663ba4d9cf05c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
boolbase "~1.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
num2fraction@^1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/num2fraction/-/num2fraction-1.2.2.tgz#6f682b6a027a4e9ddfa4564cd2589d1d4e669ede"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
number-is-nan@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/number-is-nan/-/number-is-nan-1.0.1.tgz#097b602b53422a522c1afb8790318336941a011d"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
oauth-sign@~0.9.0:
version "0.9.0"
resolved "https://registry.yarnpkg.com/oauth-sign/-/oauth-sign-0.9.0.tgz#47a7b016baa68b5fa0ecf3dee08a85c679ac6455"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - bluebird@3.5.1 - csv-parser@1.12.0 - gscan@1.2.2 - moment@2.19.2 - nconf@0.9.1 - oauth2orize@1.11.0 - superagent@3.8.1 - eslint@4.11.0 - nock@9.1.0
2017-11-17 16:29:21 +01:00
oauth2orize@1.11.0:
version "1.11.0"
resolved "https://registry.yarnpkg.com/oauth2orize/-/oauth2orize-1.11.0.tgz#793cef251d45ebdeac32ae40a8b6814faab1d483"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
debug "2.x.x"
uid2 "0.0.x"
utils-merge "1.x.x"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
object-assign@^4, object-assign@^4.0.1, object-assign@^4.1.0, object-assign@^4.1.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.1.1"
resolved "https://registry.yarnpkg.com/object-assign/-/object-assign-4.1.1.tgz#2109adc7965887cfc05cbbd442cac8bfbb360863"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
object-copy@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/object-copy/-/object-copy-0.1.0.tgz#7e7d858b781bd7c991a41ba975ed3812754e998c"
dependencies:
copy-descriptor "^0.1.0"
define-property "^0.2.5"
kind-of "^3.0.3"
object-visit@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object-visit/-/object-visit-1.0.1.tgz#f79c4493af0c5377b59fe39d395e41042dd045bb"
dependencies:
isobject "^3.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
object.defaults@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/object.defaults/-/object.defaults-1.1.0.tgz#3a7f868334b407dea06da16d88d5cd29e435fecf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
array-each "^1.0.1"
array-slice "^1.0.0"
for-own "^1.0.0"
isobject "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
object.map@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/object.map/-/object.map-1.0.1.tgz#cf83e59dc8fcc0ad5f4250e1f78b3b81bd801d37"
dependencies:
for-own "^1.0.0"
make-iterator "^1.0.0"
object.pick@^1.2.0, object.pick@^1.3.0:
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
version "1.3.0"
resolved "https://registry.yarnpkg.com/object.pick/-/object.pick-1.3.0.tgz#87a10ac4c1694bd2e1cbf53591a66141fb5dd747"
dependencies:
isobject "^3.0.1"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 13:13:20 +01:00
oembed-parser@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.2.2.tgz#0ababb60eb6bef0538878b690eb71ecb7fdfb4d1"
integrity sha512-dFsRPQZTUvIG5EA0Gq9kWCfxxdt+hBk0D9xvYkrGq1lh0NyzJTMWkrJWFXGu7P/9MiP7t2VHvlRFsC4I3SuGPw==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 16:49:23 +02:00
dependencies:
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 13:13:20 +01:00
node-fetch "^2.3.0"
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 16:49:23 +02:00
promise-wtf "^1.2.4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
on-finished@^2.3.0, on-finished@~2.3.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/on-finished/-/on-finished-2.3.0.tgz#20f1336481b083cd75337992a16971aa2d906947"
dependencies:
ee-first "1.1.1"
⬆️ Bump dependencies no issue - cookie-session@1.3.0 - ghost-ignition@2.8.13 - gscan@1.1.7 - image-size@0.6.1 - markdown-it@8.3.2 - mysql@2.14.1 - mocha@3.5.0 - nock@9.0.14
2017-08-08 14:57:10 +02:00
on-headers@~1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/on-headers/-/on-headers-1.0.1.tgz#928f5d0f470d49342651ea6794b0857c100693f7"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
once@1.x, once@^1.3.0, once@^1.3.1, once@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/once/-/once-1.4.0.tgz#583b1aa775961d4b113ac17d9c50baef9dd76bd1"
dependencies:
wrappy "1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
onetime@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/onetime/-/onetime-2.0.1.tgz#067428230fd67443b2794b22bba528b6867962d4"
dependencies:
mimic-fn "^1.0.0"
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 18:42:42 +02:00
optimist@^0.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.6.1"
resolved "https://registry.yarnpkg.com/optimist/-/optimist-0.6.1.tgz#da3ea74686fa21a19a111c326e90eb15a0196686"
dependencies:
minimist "~0.0.1"
wordwrap "~0.0.2"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
optionator@^0.8.1, optionator@^0.8.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/optionator/-/optionator-0.8.2.tgz#364c5e409d3f4d6301d6c0b4c05bba50180aeb64"
dependencies:
deep-is "~0.1.3"
fast-levenshtein "~2.0.4"
levn "~0.3.0"
prelude-ls "~1.1.2"
type-check "~0.3.2"
wordwrap "~1.0.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
os-homedir@^1.0.0, os-homedir@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/os-homedir/-/os-homedir-1.0.2.tgz#ffbc4988336e0e833de0c168c7ef152121aa7fb3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
os-locale@^1.4.0:
version "1.4.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/os-locale/-/os-locale-1.4.0.tgz#20f9f17ae29ed345e8bde583b13d2009803c14d9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
lcid "^1.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
os-tmpdir@^1.0.0, os-tmpdir@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/os-tmpdir/-/os-tmpdir-1.0.2.tgz#bbe67406c79aa85c5cfec766fe5734555dfa1274"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
osenv@0, osenv@^0.1.4:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "0.1.5"
resolved "https://registry.yarnpkg.com/osenv/-/osenv-0.1.5.tgz#85cdfafaeb28e8677f416e287592b5f3f49ea410"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
dependencies:
os-homedir "^1.0.0"
os-tmpdir "^1.0.0"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
p-cancelable@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-0.3.0.tgz#b9e123800bcebb7ac13a479be195b507b98d30fa"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
p-cancelable@^0.4.0:
version "0.4.1"
resolved "https://registry.yarnpkg.com/p-cancelable/-/p-cancelable-0.4.1.tgz#35f363d67d52081c8d9585e37bcceb7e0bbcb2a0"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
p-finally@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/p-finally/-/p-finally-1.0.0.tgz#3fbcfb15b899a44123b34b6dcc18b724336a2cae"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
p-is-promise@^1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/p-is-promise/-/p-is-promise-1.1.0.tgz#9c9456989e9f6588017b0434d56097675c3da05e"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
p-timeout@^1.1.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.2.1"
resolved "https://registry.yarnpkg.com/p-timeout/-/p-timeout-1.2.1.tgz#5eb3b353b7fce99f101a1038880bb054ebbea386"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
dependencies:
p-finally "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
p-timeout@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/p-timeout/-/p-timeout-2.0.1.tgz#d8dd1979595d2dc0139e1fe46b8b646cb3cdf038"
dependencies:
p-finally "^1.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
parent-module@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parent-module/-/parent-module-1.0.0.tgz#df250bdc5391f4a085fb589dad761f5ad6b865b5"
dependencies:
callsites "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
parse-filepath@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/parse-filepath/-/parse-filepath-1.0.2.tgz#a632127f53aaf3d15876f5872f3ffac763d6c891"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
is-absolute "^1.0.0"
map-cache "^0.2.0"
path-root "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
parse-json@^2.2.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/parse-json/-/parse-json-2.2.0.tgz#f480f40434ef80741f8469099f8dea18f55a4dc9"
dependencies:
error-ex "^1.2.0"
parse-passwd@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/parse-passwd/-/parse-passwd-1.0.0.tgz#6d5b934a456993b23d37f40a382d6f1666a8e5c6"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
parseurl@~1.3.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "1.3.2"
resolved "https://registry.yarnpkg.com/parseurl/-/parseurl-1.3.2.tgz#fc289d4ed8993119460c156253262cdc8de65bf3"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
pascalcase@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/pascalcase/-/pascalcase-0.1.1.tgz#b363e55e8006ca6fe21784d2db22bd15d7917f14"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
passport-http-bearer@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/passport-http-bearer/-/passport-http-bearer-1.0.1.tgz#147469ea3669e2a84c6167ef99dbb77e1f0098a8"
dependencies:
passport-strategy "1.x.x"
passport-oauth2-client-password@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/passport-oauth2-client-password/-/passport-oauth2-client-password-0.1.2.tgz#4f378b678b92d16dbbd233a6c706520093e561ba"
dependencies:
passport-strategy "1.x.x"
passport-strategy@1.x.x:
version "1.0.0"
resolved "https://registry.yarnpkg.com/passport-strategy/-/passport-strategy-1.0.0.tgz#b5539aa8fc225a3d1ad179476ddf236b440f52e4"
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
passport@0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/passport/-/passport-0.4.0.tgz#c5095691347bd5ad3b5e180238c3914d16f05811"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
passport-strategy "1.x.x"
pause "0.0.1"
path-exists@^2.0.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/path-exists/-/path-exists-2.1.0.tgz#0feb6c64f0fc518d9a754dd5efb62c7022761f4b"
dependencies:
pinkie-promise "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
path-is-absolute@^1.0.0, path-is-absolute@~1.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/path-is-absolute/-/path-is-absolute-1.0.1.tgz#174b9268735534ffbc7ace6bf53a5a9e1b5c5f5f"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
path-is-inside@^1.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/path-is-inside/-/path-is-inside-1.0.2.tgz#365417dede44430d1c11af61027facf074bdfc53"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
path-key@^2.0.0, path-key@^2.0.1:
Bump grunt-shell to version 2.1.0 no issue - no major changes to adapt - https://github.com/sindresorhus/grunt-shell/commit/3b379e718abaa7757b449dde295b094205385aae
2017-11-28 19:45:29 +01:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/path-key/-/path-key-2.0.1.tgz#411cadb574c5a140d3a4b1910d40d80cc9f40b40"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
path-match@1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/path-match/-/path-match-1.2.4.tgz#a62747f3c7e0c2514762697f24443585b09100ea"
dependencies:
http-errors "~1.4.0"
path-to-regexp "^1.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
path-parse@^1.0.5, path-parse@^1.0.6:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.0.6"
resolved "https://registry.yarnpkg.com/path-parse/-/path-parse-1.0.6.tgz#d62dbb5679405d72c4737ec58600e9ddcf06d24c"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
path-root-regex@^0.1.0:
version "0.1.2"
resolved "https://registry.yarnpkg.com/path-root-regex/-/path-root-regex-0.1.2.tgz#bfccdc8df5b12dc52c8b43ec38d18d72c04ba96d"
path-root@^0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/path-root/-/path-root-0.1.1.tgz#9a4a6814cac1c0cd73360a95f32083c8ea4745b7"
dependencies:
path-root-regex "^0.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
path-to-regexp@0.1.7:
version "0.1.7"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-0.1.7.tgz#df604178005f522f15eb4490e7247a1bfaa67f8c"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
path-to-regexp@^1.0.0, path-to-regexp@^1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.7.0"
resolved "https://registry.yarnpkg.com/path-to-regexp/-/path-to-regexp-1.7.0.tgz#59fde0f435badacba103a84e9d3bc64e96b9937d"
dependencies:
isarray "0.0.1"
path-type@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/path-type/-/path-type-1.1.0.tgz#59c44f7ee491da704da415da5a4070ba4f8fe441"
dependencies:
graceful-fs "^4.1.2"
pify "^2.0.0"
pinkie-promise "^2.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
pathval@^1.1.0:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/pathval/-/pathval-1.1.0.tgz#b942e6d4bde653005ef6b71361def8727d0645e0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
pause@0.0.1:
version "0.0.1"
resolved "https://registry.yarnpkg.com/pause/-/pause-0.0.1.tgz#1d408b3fdb76923b9543d96fb4c9dfd535d9cb5d"
pend@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/pend/-/pend-1.2.0.tgz#7a57eb550a6783f9115331fcf4663d5c8e007a50"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
performance-now@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/performance-now/-/performance-now-2.1.0.tgz#6309f4e0e5fa913ec1c69307ae364b4b377c9e7b"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
pg-connection-string@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/pg-connection-string/-/pg-connection-string-2.0.0.tgz#3eefe5997e06d94821e4d502e42b6a1c73f8df82"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
pify@^2.0.0:
version "2.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/pify/-/pify-2.3.0.tgz#ed141a6ac043a849ea588498e7dca8b15330e90c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
pify@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pify/-/pify-3.0.0.tgz#e5a4acd2c101fdf3d9a4d07f0dbc4db49dd28176"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
pinkie-promise@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/pinkie-promise/-/pinkie-promise-2.0.1.tgz#2135d6dfa7a358c069ac9b178776288228450ffa"
dependencies:
pinkie "^2.0.0"
pinkie@^2.0.0:
version "2.0.4"
resolved "https://registry.yarnpkg.com/pinkie/-/pinkie-2.0.4.tgz#72556b80cfa0d48a974e80e77248e80ed4f7f870"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
pluralize@^7.0.0:
version "7.0.0"
resolved "https://registry.yarnpkg.com/pluralize/-/pluralize-7.0.0.tgz#298b89df8b93b0221dbf421ad2b1b1ea23fc6777"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
posix-character-classes@^0.1.0:
version "0.1.1"
resolved "https://registry.yarnpkg.com/posix-character-classes/-/posix-character-classes-0.1.1.tgz#01eac0fe3b5af71a2a6c02feabb8c1fef7e00eab"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
postcss-calc@^5.2.0:
version "5.3.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-calc/-/postcss-calc-5.3.1.tgz#77bae7ca928ad85716e2fda42f261bf7c1d65b5e"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.2"
postcss-message-helpers "^2.0.0"
reduce-css-calc "^1.2.6"
postcss-colormin@^2.1.8:
version "2.2.2"
resolved "https://registry.yarnpkg.com/postcss-colormin/-/postcss-colormin-2.2.2.tgz#6631417d5f0e909a3d7ec26b24c8a8d1e4f96e4b"
dependencies:
colormin "^1.0.5"
postcss "^5.0.13"
postcss-value-parser "^3.2.3"
postcss-convert-values@^2.3.4:
version "2.6.1"
resolved "https://registry.yarnpkg.com/postcss-convert-values/-/postcss-convert-values-2.6.1.tgz#bbd8593c5c1fd2e3d1c322bb925dcae8dae4d62d"
dependencies:
postcss "^5.0.11"
postcss-value-parser "^3.1.2"
postcss-discard-comments@^2.0.4:
version "2.0.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-discard-comments/-/postcss-discard-comments-2.0.4.tgz#befe89fafd5b3dace5ccce51b76b81514be00e3d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.14"
postcss-discard-duplicates@^2.0.1:
version "2.1.0"
resolved "https://registry.yarnpkg.com/postcss-discard-duplicates/-/postcss-discard-duplicates-2.1.0.tgz#b9abf27b88ac188158a5eb12abcae20263b91932"
dependencies:
postcss "^5.0.4"
postcss-discard-empty@^2.0.1:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-discard-empty/-/postcss-discard-empty-2.1.0.tgz#d2b4bd9d5ced5ebd8dcade7640c7d7cd7f4f92b5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.14"
postcss-discard-overridden@^0.1.1:
version "0.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-discard-overridden/-/postcss-discard-overridden-0.1.1.tgz#8b1eaf554f686fb288cd874c55667b0aa3668d58"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.16"
postcss-discard-unused@^2.2.1:
version "2.2.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-discard-unused/-/postcss-discard-unused-2.2.3.tgz#bce30b2cc591ffc634322b5fb3464b6d934f4433"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.14"
uniqs "^2.0.0"
postcss-filter-plugins@^2.0.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/postcss-filter-plugins/-/postcss-filter-plugins-2.0.3.tgz#82245fdf82337041645e477114d8e593aa18b8ec"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.4"
postcss-merge-idents@^2.1.5:
version "2.1.7"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-merge-idents/-/postcss-merge-idents-2.1.7.tgz#4c5530313c08e1d5b3bbf3d2bbc747e278eea270"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
has "^1.0.1"
postcss "^5.0.10"
postcss-value-parser "^3.1.1"
postcss-merge-longhand@^2.0.1:
version "2.0.2"
resolved "https://registry.yarnpkg.com/postcss-merge-longhand/-/postcss-merge-longhand-2.0.2.tgz#23d90cd127b0a77994915332739034a1a4f3d658"
dependencies:
postcss "^5.0.4"
postcss-merge-rules@^2.0.3:
version "2.1.2"
resolved "https://registry.yarnpkg.com/postcss-merge-rules/-/postcss-merge-rules-2.1.2.tgz#d1df5dfaa7b1acc3be553f0e9e10e87c61b5f721"
dependencies:
browserslist "^1.5.2"
caniuse-api "^1.5.2"
postcss "^5.0.4"
postcss-selector-parser "^2.2.2"
vendors "^1.0.0"
postcss-message-helpers@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/postcss-message-helpers/-/postcss-message-helpers-2.0.0.tgz#a4f2f4fab6e4fe002f0aed000478cdf52f9ba60e"
postcss-minify-font-values@^1.0.2:
version "1.0.5"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-minify-font-values/-/postcss-minify-font-values-1.0.5.tgz#4b58edb56641eba7c8474ab3526cafd7bbdecb69"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
object-assign "^4.0.1"
postcss "^5.0.4"
postcss-value-parser "^3.0.2"
postcss-minify-gradients@^1.0.1:
version "1.0.5"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-minify-gradients/-/postcss-minify-gradients-1.0.5.tgz#5dbda11373703f83cfb4a3ea3881d8d75ff5e6e1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.12"
postcss-value-parser "^3.3.0"
postcss-minify-params@^1.0.4:
version "1.2.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-minify-params/-/postcss-minify-params-1.2.2.tgz#ad2ce071373b943b3d930a3fa59a358c28d6f1f3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
alphanum-sort "^1.0.1"
postcss "^5.0.2"
postcss-value-parser "^3.0.2"
uniqs "^2.0.0"
postcss-minify-selectors@^2.0.4:
version "2.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-minify-selectors/-/postcss-minify-selectors-2.1.1.tgz#b2c6a98c0072cf91b932d1a496508114311735bf"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
alphanum-sort "^1.0.2"
has "^1.0.1"
postcss "^5.0.14"
postcss-selector-parser "^2.0.0"
postcss-normalize-charset@^1.1.0:
version "1.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-normalize-charset/-/postcss-normalize-charset-1.1.1.tgz#ef9ee71212d7fe759c78ed162f61ed62b5cb93f1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.5"
postcss-normalize-url@^3.0.7:
version "3.0.8"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-normalize-url/-/postcss-normalize-url-3.0.8.tgz#108f74b3f2fcdaf891a2ffa3ea4592279fc78222"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
is-absolute-url "^2.0.0"
normalize-url "^1.4.0"
postcss "^5.0.14"
postcss-value-parser "^3.2.3"
postcss-ordered-values@^2.1.0:
version "2.2.3"
resolved "https://registry.yarnpkg.com/postcss-ordered-values/-/postcss-ordered-values-2.2.3.tgz#eec6c2a67b6c412a8db2042e77fe8da43f95c11d"
dependencies:
postcss "^5.0.4"
postcss-value-parser "^3.0.1"
postcss-reduce-idents@^2.2.2:
version "2.4.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-reduce-idents/-/postcss-reduce-idents-2.4.0.tgz#c2c6d20cc958284f6abfbe63f7609bf409059ad3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.4"
postcss-value-parser "^3.0.2"
postcss-reduce-initial@^1.0.0:
version "1.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-reduce-initial/-/postcss-reduce-initial-1.0.1.tgz#68f80695f045d08263a879ad240df8dd64f644ea"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
postcss "^5.0.4"
postcss-reduce-transforms@^1.0.3:
version "1.0.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-reduce-transforms/-/postcss-reduce-transforms-1.0.4.tgz#ff76f4d8212437b31c298a42d2e1444025771ae1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
has "^1.0.1"
postcss "^5.0.8"
postcss-value-parser "^3.0.1"
postcss-selector-parser@^2.0.0, postcss-selector-parser@^2.2.2:
version "2.2.3"
resolved "https://registry.yarnpkg.com/postcss-selector-parser/-/postcss-selector-parser-2.2.3.tgz#f9437788606c3c9acee16ffe8d8b16297f27bb90"
dependencies:
flatten "^1.0.2"
indexes-of "^1.0.1"
uniq "^1.0.1"
postcss-svgo@^2.1.1:
version "2.1.6"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-svgo/-/postcss-svgo-2.1.6.tgz#b6df18aa613b666e133f08adb5219c2684ac108d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
is-svg "^2.0.0"
postcss "^5.0.14"
postcss-value-parser "^3.2.3"
svgo "^0.7.0"
postcss-unique-selectors@^2.0.2:
version "2.0.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-unique-selectors/-/postcss-unique-selectors-2.0.2.tgz#981d57d29ddcb33e7b1dfe1fd43b8649f933ca1d"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
alphanum-sort "^1.0.1"
postcss "^5.0.4"
uniqs "^2.0.0"
postcss-value-parser@^3.0.1, postcss-value-parser@^3.0.2, postcss-value-parser@^3.1.1, postcss-value-parser@^3.1.2, postcss-value-parser@^3.2.3, postcss-value-parser@^3.3.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.3.1"
resolved "https://registry.yarnpkg.com/postcss-value-parser/-/postcss-value-parser-3.3.1.tgz#9ff822547e2893213cf1c30efa51ac5fd1ba8281"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
postcss-zindex@^2.0.1:
version "2.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/postcss-zindex/-/postcss-zindex-2.2.0.tgz#d2109ddc055b91af67fc4cb3b025946639d2af22"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
has "^1.0.1"
postcss "^5.0.4"
uniqs "^2.0.0"
postcss@^5.0.10, postcss@^5.0.11, postcss@^5.0.12, postcss@^5.0.13, postcss@^5.0.14, postcss@^5.0.16, postcss@^5.0.2, postcss@^5.0.4, postcss@^5.0.5, postcss@^5.0.8, postcss@^5.2.16:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "5.2.18"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-5.2.18.tgz#badfa1497d46244f6390f58b319830d9107853c5"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
chalk "^1.1.3"
js-base64 "^2.1.9"
source-map "^0.5.6"
supports-color "^3.2.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
postcss@^7.0.5:
version "7.0.13"
resolved "https://registry.yarnpkg.com/postcss/-/postcss-7.0.13.tgz#42bf716413e8f1c786ab71dc6e722b3671b16708"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
dependencies:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
chalk "^2.4.2"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
source-map "^0.6.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
supports-color "^6.1.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
posthtml-parser@^0.2.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "0.2.1"
resolved "https://registry.yarnpkg.com/posthtml-parser/-/posthtml-parser-0.2.1.tgz#35d530de386740c2ba24ff2eb2faf39ccdf271dd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
htmlparser2 "^3.8.3"
isobject "^2.1.0"
posthtml-render@^1.0.5:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/posthtml-render/-/posthtml-render-1.1.4.tgz#95dac09892f4f183fad5ac823f08f42c0256551e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
posthtml@^0.9.0:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "0.9.2"
resolved "https://registry.yarnpkg.com/posthtml/-/posthtml-0.9.2.tgz#f4c06db9f67b61fd17c4e256e7e3d9515bf726fd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
posthtml-parser "^0.2.0"
posthtml-render "^1.0.5"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
prebuild-install@^2.3.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.5.3"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-2.5.3.tgz#9f65f242782d370296353710e9bc843490c19f69"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
detect-libc "^1.0.3"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
expand-template "^1.0.2"
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
node-abi "^2.2.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
noop-logger "^0.1.1"
npmlog "^4.0.1"
os-homedir "^1.0.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
pump "^2.0.1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
rc "^1.1.6"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
simple-get "^2.7.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
tar-fs "^1.13.0"
tunnel-agent "^0.6.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
which-pm-runs "^1.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
prebuild-install@^5.2.2:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "5.2.2"
resolved "https://registry.yarnpkg.com/prebuild-install/-/prebuild-install-5.2.2.tgz#237888f21bfda441d0ee5f5612484390bccd4046"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
dependencies:
detect-libc "^1.0.3"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
expand-template "^2.0.3"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
github-from-package "0.0.0"
minimist "^1.2.0"
mkdirp "^0.5.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
napi-build-utils "^1.0.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
node-abi "^2.2.0"
noop-logger "^0.1.1"
npmlog "^4.0.1"
os-homedir "^1.0.1"
pump "^2.0.1"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
rc "^1.2.7"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
simple-get "^2.7.0"
tar-fs "^1.13.0"
tunnel-agent "^0.6.0"
which-pm-runs "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
prelude-ls@~1.1.2:
version "1.1.2"
resolved "https://registry.yarnpkg.com/prelude-ls/-/prelude-ls-1.1.2.tgz#21932a549f5e52ffd9a827f570e04be62a97da54"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
prepend-http@^1.0.0, prepend-http@^1.0.1:
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
version "1.0.4"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-1.0.4.tgz#d4f4562b0ce3696e41ac52d0e002e57a635dc6dc"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
prepend-http@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/prepend-http/-/prepend-http-2.0.0.tgz#e92434bfa5ea8c19f41cdfd401d741a3c819d897"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
pretty-bytes@^3.0.0:
version "3.0.1"
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-3.0.1.tgz#27d0008d778063a0b4811bb35c79f1bd5d5fbccf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
number-is-nan "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
⬆️ bump dependencies no issue - gscan@1.1.3 - grunt-contrib-clean@1.1.0 - grunt-contrib-compress@1.4.3 - grunt-contrib-jshint@1.1.0 - jshint@2.9.5 - mocha@3.4.2
2017-07-10 20:56:05 +02:00
pretty-bytes@^4.0.2:
version "4.0.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/pretty-bytes/-/pretty-bytes-4.0.2.tgz#b2bf82e7350d65c6c33aa95aaa5a4f6327f61cd9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
prettyjson@^1.1.3:
version "1.2.1"
resolved "https://registry.yarnpkg.com/prettyjson/-/prettyjson-1.2.1.tgz#fcffab41d19cab4dfae5e575e64246619b12d289"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
colors "^1.1.2"
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
minimist "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
process-nextick-args@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/process-nextick-args/-/process-nextick-args-2.0.0.tgz#a37d732f4271b4ab1ad070d35508e8290788ffaa"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
progress@^2.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "2.0.3"
resolved "https://registry.yarnpkg.com/progress/-/progress-2.0.3.tgz#7e8cf8d8f5b8f239c1bc68beb4eb78567d572ef8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 16:49:23 +02:00
promise-wtf@^1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/promise-wtf/-/promise-wtf-1.2.4.tgz#8cbdd31ea10dee074fbb6387cbc96e413993376c"
Updated oembed providers list no issue - switch away from forked version of `oembed-parser` - our changes are merged upstream - latest `oembed-parser` has a newer version of the providers list
2019-02-11 13:13:20 +01:00
integrity sha512-wOZ+ZUG0/Lsk+muOElLtteIteyvF5B1bNcVLhmlv6PDKcAAQGa5Bf0maN3rj73FWyjJE840MzeQyNE6KOKpgrg==
Added /oembed API endpoint refs https://github.com/TryGhost/Ghost/issues/9623 - add `oembed-parser` module for checking provider availability for a url and fetching data from the provider - require it in the `overrides.js` file before the general Promise override so that the `promise-wrt` sub-dependency doesn't attempt to extend the Bluebird promise implementation - add `/oembed` authenticated endpoint - takes `?url=` query parameter to match against known providers - adds safeguard against oembed-parser's providers list not recognising http+https and www+non-www - responds with `ValidationError` if no provider is found - responds with oembed response from matched provider's oembed endpoint if match is found
2018-06-05 16:49:23 +02:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
propagate@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/propagate/-/propagate-1.0.0.tgz#00c2daeedda20e87e3782b344adba1cddd6ad709"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
proto-list@~1.2.1:
version "1.2.4"
resolved "https://registry.yarnpkg.com/proto-list/-/proto-list-1.2.4.tgz#212d5bfe1318306a420f6402b8e26ff39647a849"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
proxy-addr@~2.0.4:
version "2.0.4"
resolved "https://registry.yarnpkg.com/proxy-addr/-/proxy-addr-2.0.4.tgz#ecfc733bf22ff8c6f407fa275327b9ab67e48b93"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
forwarded "~0.1.2"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
ipaddr.js "1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
proxyquire@2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/proxyquire/-/proxyquire-2.1.0.tgz#c2263a38bf0725f2ae950facc130e27510edce8d"
dependencies:
fill-keys "^1.0.2"
module-not-found-error "^1.0.0"
resolve "~1.8.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
pseudomap@^1.0.1, pseudomap@^1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/pseudomap/-/pseudomap-1.0.2.tgz#f052a28da70e618917ef0a8ac34c1ae5a68286b3"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
psl@^1.1.24:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.1.31"
resolved "https://registry.yarnpkg.com/psl/-/psl-1.1.31.tgz#e9aa86d0101b5b105cbe93ac6b784cd547276184"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
public-address@~0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/public-address/-/public-address-0.1.2.tgz#f95f3e0cf28b89f965b0f188fd1267ac0856552f"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
pump@^1.0.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.0.3"
resolved "https://registry.yarnpkg.com/pump/-/pump-1.0.3.tgz#5dfe8311c33bbf6fc18261f9f34702c47c08a954"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
pump@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/pump/-/pump-2.0.1.tgz#12399add6e4cf7526d973cbc8b5ce2e2908b3909"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
pump@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/pump/-/pump-3.0.0.tgz#b4a2116815bde2f4e1ea602354e8c75565107a64"
dependencies:
end-of-stream "^1.1.0"
once "^1.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
punycode@^1.4.1:
version "1.4.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.4.1.tgz#c0d5a63b2718800ad8e1eb0fa5269c84dd41845e"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
punycode@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-2.1.1.tgz#b58b010ac40c22c5657616c8d2c2c02c7bf479ec"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
punycode@~1.2.4:
version "1.2.4"
resolved "https://registry.yarnpkg.com/punycode/-/punycode-1.2.4.tgz#54008ac972aec74175def9cba6df7fa9d3918740"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
q@^1.1.2:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.5.1"
resolved "https://registry.yarnpkg.com/q/-/q-1.5.1.tgz#7e32f75b41381291d04611f1bf14109ac00651d7"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 10:41:39 +01:00
qs@6.5.2, qs@~6.5.1, qs@~6.5.2:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "6.5.2"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.5.2.tgz#cb3ae806e8740444584ef154ce8ee98d403f3e36"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 15:19:07 +01:00
qs@^6.4.0, qs@^6.5.1, qs@^6.6.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "6.6.0"
resolved "https://registry.yarnpkg.com/qs/-/qs-6.6.0.tgz#a99c0f69a8d26bf7ef012f871cdabb0aee4424c2"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
query-string@^4.1.0:
🙀 Image field naming & new img_url helper (#8364) * 🙀 change database schema for images - rename user/post/tag images - contains all the required changes from the schema change * Refactor helper/meta data - rename cover to cover_image - also rename default settings to match the pattern - rename image to profile_image for user - rename image to feature_image for tags/posts * {{image}} >>> {{img_url}} - rename - change the functionality - attr is required - e.g. {{img_url feature_image}} * gscan 1.0.0 - update yarn.lock * Update casper reference: 1.0-changes - see https://github.com/TryGhost/Casper/commit/5487b4da8d2ad7c6a6d003a3a0ee1a860e0de34d
2017-04-24 19:21:47 +02:00
version "4.3.4"
resolved "https://registry.yarnpkg.com/query-string/-/query-string-4.3.4.tgz#bbb693b9ca915c232515b228b1a02b609043dbeb"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
object-assign "^4.1.0"
strict-uri-encode "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
query-string@^5.0.1:
version "5.1.1"
resolved "https://registry.yarnpkg.com/query-string/-/query-string-5.1.1.tgz#a78c012b71c17e05f2e3fa2319dd330682efb3cb"
dependencies:
decode-uri-component "^0.2.0"
object-assign "^4.1.0"
strict-uri-encode "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
rai@~0.1.11:
version "0.1.12"
resolved "https://registry.yarnpkg.com/rai/-/rai-0.1.12.tgz#8ccfd014d0f9608630dd73c19b8e4b057754a6a6"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 10:35:23 +02:00
random-bytes@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/random-bytes/-/random-bytes-1.0.0.tgz#4f68a1dc0ae58bd3fb95848c30324db75d64360b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
range-parser@~1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/range-parser/-/range-parser-1.2.0.tgz#f49be6b487894ddc40dcc94a322f611092e00d5e"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
raw-body@2.3.3:
version "2.3.3"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-2.3.3.tgz#1b324ece6b5706e153855bc1148c65bb7f6ea0c3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
bytes "3.0.0"
http-errors "1.6.3"
iconv-lite "0.4.23"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
unpipe "1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
raw-body@~1.1.0:
version "1.1.7"
resolved "https://registry.yarnpkg.com/raw-body/-/raw-body-1.1.7.tgz#1d027c2bfa116acc6623bca8f00016572a87d425"
dependencies:
bytes "1"
string_decoder "0.10"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
rc@^1.1.6, rc@^1.2.7:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.2.8"
resolved "https://registry.yarnpkg.com/rc/-/rc-1.2.8.tgz#cd924bf5200a075b83c188cd6b9e211b7fc0d3ed"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
deep-extend "^0.6.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
ini "~1.3.0"
minimist "^1.2.0"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
strip-json-comments "~2.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
read-pkg-up@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/read-pkg-up/-/read-pkg-up-1.0.1.tgz#9d63c13276c065918d57f002a57f40a1b643fb02"
dependencies:
find-up "^1.0.0"
read-pkg "^1.0.0"
read-pkg@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/read-pkg/-/read-pkg-1.1.0.tgz#f5ffaa5ecd29cb31c0474bca7d756b6bb29e3f28"
dependencies:
load-json-file "^1.0.0"
normalize-package-data "^2.3.2"
path-type "^1.0.0"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
readable-stream@1.1.x, readable-stream@~1.1.9:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.1.14"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-1.1.14.tgz#7cf4c54ef648e3813084c636dd2079e166c081d9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.1"
isarray "0.0.1"
string_decoder "~0.10.x"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
readable-stream@2.3.6, readable-stream@^2.0.0, readable-stream@^2.0.2, readable-stream@^2.0.5, readable-stream@^2.0.6, readable-stream@^2.2.2, readable-stream@^2.3.0, readable-stream@^2.3.5, readable-stream@~2.3.6:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
version "2.3.6"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-2.3.6.tgz#b11c27d88b8ff1fbe070643cf94b0c79ae1b0aaf"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
dependencies:
core-util-is "~1.0.0"
inherits "~2.0.3"
isarray "~1.0.0"
process-nextick-args "~2.0.0"
safe-buffer "~5.1.1"
string_decoder "~1.1.1"
util-deprecate "~1.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
readable-stream@^3.0.6:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/readable-stream/-/readable-stream-3.1.1.tgz#ed6bbc6c5ba58b090039ff18ce670515795aeb06"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
dependencies:
inherits "^2.0.3"
string_decoder "^1.1.1"
util-deprecate "^1.0.1"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 15:20:53 +01:00
readdirp@2.1.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/readdirp/-/readdirp-2.1.0.tgz#4ed0ad060df3073300c48440373f72d1cc642d78"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
graceful-fs "^4.1.2"
minimatch "^3.0.2"
readable-stream "^2.0.2"
set-immediate-shim "^1.0.1"
rechoir@^0.6.2:
version "0.6.2"
resolved "https://registry.yarnpkg.com/rechoir/-/rechoir-0.6.2.tgz#85204b54dba82d5742e28c96756ef43af50e3384"
dependencies:
resolve "^1.1.6"
redent@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/redent/-/redent-1.0.0.tgz#cf916ab1fd5f1f16dfb20822dd6ec7f730c2afde"
dependencies:
indent-string "^2.1.0"
strip-indent "^1.0.1"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
reduce-css-calc@^1.2.6:
version "1.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/reduce-css-calc/-/reduce-css-calc-1.3.0.tgz#747c914e049614a4c9cfbba629871ad1d2927716"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
dependencies:
balanced-match "^0.4.2"
math-expression-evaluator "^1.2.14"
reduce-function-call "^1.0.1"
reduce-function-call@^1.0.1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/reduce-function-call/-/reduce-function-call-1.0.2.tgz#5a200bf92e0e37751752fe45b0ab330fd4b6be99"
dependencies:
balanced-match "^0.4.2"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
regenerator-runtime@^0.11.0:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "0.11.1"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.11.1.tgz#be05ad7f9bf7d22e056f9726cee5017fbf19e2e9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
regenerator-runtime@^0.12.0:
version "0.12.1"
resolved "https://registry.yarnpkg.com/regenerator-runtime/-/regenerator-runtime-0.12.1.tgz#fa1a71544764c036f8c49b13a08b2594c9f8a0de"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
regex-not@^1.0.0, regex-not@^1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/regex-not/-/regex-not-1.0.2.tgz#1f4ece27e00b0b65e0247a6810e6a85d83a5752c"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
extend-shallow "^3.0.2"
safe-regex "^1.1.0"
regexpp@^1.0.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-1.1.0.tgz#0e3516dd0b7904f413d2d4193dce4618c3a689ab"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
regexpp@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/regexpp/-/regexpp-2.0.1.tgz#8d19d31cf632482b589049f8281f93dbcba4d07f"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
remove-trailing-separator@^1.0.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz#c24bce2a283adad5bc3f58e0d48249b92379d8ef"
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
Add segment analytics for blog data (#8912) no issue - adds data to track such as post published - adds ability to add custom data and event prefix via config file
2017-08-22 13:23:23 +02:00
remove-trailing-slash@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/remove-trailing-slash/-/remove-trailing-slash-0.1.0.tgz#1498e5df0984c27e49b76ebf06887ca2d01150d2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
repeat-element@^1.1.2:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/repeat-element/-/repeat-element-1.1.3.tgz#782e0d825c0c5a3bb39731f84efee6b742e6b1ce"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
repeat-string@^1.6.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.6.1"
resolved "https://registry.yarnpkg.com/repeat-string/-/repeat-string-1.6.1.tgz#8dcae470e1c88abc2d600fff4a776286da75e637"
repeating@^2.0.0:
version "2.0.1"
resolved "https://registry.yarnpkg.com/repeating/-/repeating-2.0.1.tgz#5214c53a926d3552707527fbab415dbc08d06dda"
dependencies:
is-finite "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
"request@>=2.76.0 <3.0.0", request@^2.87.0:
version "2.88.0"
resolved "https://registry.yarnpkg.com/request/-/request-2.88.0.tgz#9c2fca4f7d35b592efe57c7f0a55e81052124fef"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
dependencies:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
aws-sign2 "~0.7.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
aws4 "^1.8.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
caseless "~0.12.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
combined-stream "~1.0.6"
extend "~3.0.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
forever-agent "~0.6.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
form-data "~2.3.2"
har-validator "~5.1.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
http-signature "~1.2.0"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
is-typedarray "~1.0.0"
isstream "~0.1.2"
json-stringify-safe "~5.0.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
mime-types "~2.1.19"
oauth-sign "~0.9.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
performance-now "^2.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
qs "~6.5.2"
safe-buffer "^5.1.2"
tough-cookie "~2.4.3"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
tunnel-agent "^0.6.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
uuid "^3.3.2"
sync yarn.lock file (#7876) no issue - between https://github.com/TryGhost/Ghost/pull/7853 being committed and being merged there were changes in `package.json` meaning that the `yarn.lock` file was out of date
2017-01-24 12:07:06 +01:00
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
require-dir@^0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/require-dir/-/require-dir-0.3.2.tgz#c1d5c75e9fbffde9f2e6b33e383db4f594b5a6a9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
require-uncached@^1.0.3:
version "1.0.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/require-uncached/-/require-uncached-1.0.3.tgz#4e0d56d6c9662fd31e43011c4b95aa49955421d3"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
caller-path "^0.1.0"
resolve-from "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
resolve-dir@^1.0.0, resolve-dir@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-dir/-/resolve-dir-1.0.1.tgz#79a40644c362be82f26effe739c9bb5382046f43"
dependencies:
expand-tilde "^2.0.0"
global-modules "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
resolve-from@^1.0.0:
version "1.0.1"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-1.0.1.tgz#26cbfe935d1aeeeabb29bc3fe5aeb01e93d44226"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
resolve-from@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/resolve-from/-/resolve-from-4.0.0.tgz#4abcd852ad32dd7baabfe9b40e00a36db5f392e6"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
resolve-url@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/resolve-url/-/resolve-url-0.2.1.tgz#2c637fe77c893afd2a663fe21aa9080068e2052a"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
resolve@1.1.x, resolve@~1.1.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.1.7"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.1.7.tgz#203114d82ad2c5ed9e8e0411b3932875e889e97b"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
resolve@^1.1.6, resolve@^1.1.7, resolve@^1.4.0, resolve@^1.9.0:
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
version "1.10.0"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.10.0.tgz#3bdaaeaf45cc07f375656dfd2e54ed0810b101ba"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
dependencies:
path-parse "^1.0.6"
resolve@~1.8.1:
Added v2 api endpoints (#9874) refs #9866 - Registered Content API under /ghost/api/v2/content/ - Registered Admin API under /ghost/api/v2/admin/ - Moved API v0.1 implementation to web/api/v0.1 - Created web/api/v2 for the new api endpoints - Started with reducing the implementation for the new Content API (the Content api does not serve admin api endpoints, that's why it was reducible) - Covered parent-app module with basic test checking correct applications/routes are being mounted - Added a readme file, which contains a warning using v2, because it's under active development! - This PR does only make the new endpoints available, we have not: - optimised the web folder (e.g. res.isAdmin) - started with different API controllers - reason: we want to do more preparation tasks before we copy the api controllers
2018-09-18 15:59:06 +02:00
version "1.8.1"
resolved "https://registry.yarnpkg.com/resolve/-/resolve-1.8.1.tgz#82f1ec19a423ac1fbd080b0bab06ba36e84a7a26"
dependencies:
path-parse "^1.0.5"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
responselike@1.0.2:
version "1.0.2"
resolved "https://registry.yarnpkg.com/responselike/-/responselike-1.0.2.tgz#918720ef3b631c5642be068f15ade5a46f4ba1e7"
dependencies:
lowercase-keys "^1.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
restore-cursor@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/restore-cursor/-/restore-cursor-2.0.0.tgz#9f7ee287f82fd326d4fd162923d62129eee0dfaf"
dependencies:
onetime "^2.0.0"
signal-exit "^3.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
ret@~0.1.10:
version "0.1.15"
resolved "https://registry.yarnpkg.com/ret/-/ret-0.1.15.tgz#b8a4825d5bdb1fc3f6f53c2bc33f81388681c7bc"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
rewire@4.0.1:
version "4.0.1"
resolved "https://registry.yarnpkg.com/rewire/-/rewire-4.0.1.tgz#ba1100d400a9da759fe599fc6e0233f0879ed6da"
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 19:22:29 +01:00
dependencies:
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
eslint "^4.19.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
rimraf@2, rimraf@^2.2.8, rimraf@^2.6.1, rimraf@^2.6.2, rimraf@~2.6.2:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "2.6.3"
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.6.3.tgz#b2d104fe0d8fb27cf9e0a1cda8262dd3833c6cab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
glob "^7.1.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
rimraf@~2.4.0:
version "2.4.5"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/rimraf/-/rimraf-2.4.5.tgz#ee710ce5d93a8fdb856fb5ea8ff0e2d75934b2da"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
glob "^6.0.1"
rss@1.2.2:
version "1.2.2"
resolved "https://registry.yarnpkg.com/rss/-/rss-1.2.2.tgz#50a1698876138133a74f9a05d2bdc8db8d27a921"
dependencies:
mime-types "2.1.13"
xml "1.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
run-async@^2.2.0:
version "2.3.0"
resolved "https://registry.yarnpkg.com/run-async/-/run-async-2.3.0.tgz#0371ab4ae0bdd720d4166d7dfda64ff7a445a6c0"
dependencies:
is-promise "^2.1.0"
rx-lite-aggregates@^4.0.8:
version "4.0.8"
resolved "https://registry.yarnpkg.com/rx-lite-aggregates/-/rx-lite-aggregates-4.0.8.tgz#753b87a89a11c95467c4ac1626c4efc4e05c67be"
dependencies:
rx-lite "*"
rx-lite@*, rx-lite@^4.0.8:
version "4.0.8"
resolved "https://registry.yarnpkg.com/rx-lite/-/rx-lite-4.0.8.tgz#0b1e11af8bc44836f04a6407e92da42467b79444"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
rxjs@^6.1.0:
version "6.3.3"
resolved "https://registry.yarnpkg.com/rxjs/-/rxjs-6.3.3.tgz#3c6a7fa420e844a81390fb1158a9ec614f4bad55"
dependencies:
tslib "^1.9.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
safe-buffer@5.1.2, safe-buffer@^5.0.1, safe-buffer@^5.1.1, safe-buffer@^5.1.2, safe-buffer@~5.1.0, safe-buffer@~5.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "5.1.2"
resolved "https://registry.yarnpkg.com/safe-buffer/-/safe-buffer-5.1.2.tgz#991ec69d296e0313747d59bdfd2b745c35f8828d"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
safe-json-parse@~1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/safe-json-parse/-/safe-json-parse-1.0.1.tgz#3e76723e38dfdda13c9b1d29a1e07ffee4b30b57"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
safe-json-stringify@~1:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/safe-json-stringify/-/safe-json-stringify-1.2.0.tgz#356e44bc98f1f93ce45df14bcd7c01cda86e0afd"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
safe-regex@^1.1.0:
version "1.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/safe-regex/-/safe-regex-1.1.0.tgz#40a3669f3b077d1e943d44629e157dd48023bf2e"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
dependencies:
ret "~0.1.10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
"safer-buffer@>= 2.1.2 < 3", safer-buffer@^2.0.2, safer-buffer@^2.1.0, safer-buffer@~2.1.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/safer-buffer/-/safer-buffer-2.1.2.tgz#44fa161b0187b9549dd84bb91802f9bd8385cd6a"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
sanitize-html@1.20.0:
version "1.20.0"
resolved "https://registry.yarnpkg.com/sanitize-html/-/sanitize-html-1.20.0.tgz#9a602beb1c9faf960fb31f9890f61911cc4d9156"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
chalk "^2.4.1"
htmlparser2 "^3.10.0"
Bump dependencies no issue - gscan@1.2.3 - sanitize-html@1.16.1 - eslint@4.12.0 - nock@9.1.3 - sqlite3@3.1.13
2017-11-28 14:02:47 +01:00
lodash.clonedeep "^4.5.0"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
lodash.escaperegexp "^4.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
lodash.isplainobject "^4.0.6"
lodash.isstring "^4.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
lodash.mergewith "^4.6.1"
postcss "^7.0.5"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
srcset "^1.0.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
xtend "^4.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
sax@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/sax/-/sax-0.4.2.tgz#39f3b601733d6bec97105b242a2a40fd6978ac3c"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
sax@^1.2.4, sax@~1.2.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.2.4"
resolved "https://registry.yarnpkg.com/sax/-/sax-1.2.4.tgz#2816234e2378bddc4e5354fab5caa895df7100d9"
Update yarn.lock
2017-01-26 19:04:09 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
secure-keys@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/secure-keys/-/secure-keys-1.0.0.tgz#f0c82d98a3b139a8776a8808050b824431087fca"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
"semver@2 || 3 || 4 || 5", semver@5.6.0, semver@^5.1.0, semver@^5.3.0, semver@^5.4.1, semver@^5.5.0, semver@^5.5.1, semver@^5.6.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "5.6.0"
resolved "https://registry.yarnpkg.com/semver/-/semver-5.6.0.tgz#7e74256fbaa49c75aa7c7a205cc22799cac80004"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
semver@~5.3.0:
version "5.3.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/semver/-/semver-5.3.0.tgz#9b2ce5d3de02d17c6012ad326aa6b4d0cf54f94f"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
send@0.16.2:
version "0.16.2"
resolved "https://registry.yarnpkg.com/send/-/send-0.16.2.tgz#6ecca1e0f8c156d141597559848df64730a6bbc1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
debug "2.6.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
depd "~1.1.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
destroy "~1.0.4"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
escape-html "~1.0.3"
etag "~1.8.1"
fresh "0.5.2"
http-errors "~1.6.2"
mime "1.4.1"
ms "2.0.0"
on-finished "~2.3.0"
range-parser "~1.2.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
statuses "~1.4.0"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
serve-static@1.13.2:
version "1.13.2"
resolved "https://registry.yarnpkg.com/serve-static/-/serve-static-1.13.2.tgz#095e8472fd5b46237db50ce486a43f4b86c6cec1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
encodeurl "~1.0.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
escape-html "~1.0.3"
parseurl "~1.3.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
send "0.16.2"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
set-blocking@~2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-blocking/-/set-blocking-2.0.0.tgz#045f9782d011ae9a6803ddd382b24392b3d890f7"
set-immediate-shim@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/set-immediate-shim/-/set-immediate-shim-1.0.1.tgz#4b2b1b27eb808a9f8dcc481a58e5e56f599f3f61"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
set-value@^0.4.3:
version "0.4.3"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-0.4.3.tgz#7db08f9d3d22dc7f78e53af3c3bf4666ecdfccf1"
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.1"
to-object-path "^0.3.0"
set-value@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/set-value/-/set-value-2.0.0.tgz#71ae4a88f0feefbbf52d1ea604f3fb315ebb6274"
dependencies:
extend-shallow "^2.0.1"
is-extendable "^0.1.1"
is-plain-object "^2.0.3"
split-string "^3.0.1"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
setprototypeof@1.1.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/setprototypeof/-/setprototypeof-1.1.0.tgz#d0bd85536887b6fe7c0d818cb962d9d91c54e656"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
sharp@0.21.3:
version "0.21.3"
resolved "https://registry.yarnpkg.com/sharp/-/sharp-0.21.3.tgz#381937de66c123687f2ac7186f85921c6bb19cdd"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
dependencies:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
bindings "^1.3.1"
color "^3.1.0"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
detect-libc "^1.0.3"
fs-copy-file-sync "^1.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
nan "^2.12.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
npmlog "^4.1.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
prebuild-install "^5.2.2"
semver "^5.6.0"
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
simple-get "^3.0.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
tar "^4.4.8"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
tunnel-agent "^0.6.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
shebang-command@^1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/shebang-command/-/shebang-command-1.2.0.tgz#44aac65b695b03398968c39f363fee5deafdf1ea"
dependencies:
shebang-regex "^1.0.0"
shebang-regex@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/shebang-regex/-/shebang-regex-1.0.0.tgz#da42f49740c0b42db2ca9728571cb190c98efea3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 19:41:16 +01:00
should-equal@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/should-equal/-/should-equal-2.0.0.tgz#6072cf83047360867e68e98b09d71143d04ee0c3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 19:41:16 +01:00
should-type "^1.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 19:41:16 +01:00
should-format@^3.0.3:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/should-format/-/should-format-3.0.3.tgz#9bfc8f74fa39205c53d38c34d717303e277124f1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
should-type "^1.3.0"
should-type-adaptors "^1.0.1"
Update should-http to version 0.1.1 🚀 (#8209) * chore(package): update should-http to version 0.1.1 https://greenkeeper.io/ * chore: yarn.lock
2017-04-04 10:12:37 +02:00
should-http@0.1.1:
version "0.1.1"
resolved "https://registry.yarnpkg.com/should-http/-/should-http-0.1.1.tgz#9b793843f4024885781eb6abacc4030e1e9f21f0"
Update should-http to version 0.1.0 🚀 (#7944) * chore(package): update should-http to version 0.1.0 https://greenkeeper.io/ * chore: yarn.lock
2017-02-08 20:14:49 +01:00
dependencies:
content-type "^1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
should-type-adaptors@^1.0.1:
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
version "1.1.0"
resolved "https://registry.yarnpkg.com/should-type-adaptors/-/should-type-adaptors-1.1.0.tgz#401e7f33b5533033944d5cd8bf2b65027792e27a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
should-type "^1.3.0"
should-util "^1.0.0"
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 19:41:16 +01:00
should-type@^1.3.0, should-type@^1.4.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/should-type/-/should-type-1.4.0.tgz#0756d8ce846dfd09843a6947719dfa0d4cff5cf3"
should-util@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/should-util/-/should-util-1.0.0.tgz#c98cda374aa6b190df8ba87c9889c2b4db620063"
🐛 Fixed eslint installation error when using node version < 8.10 and < 6.14 closes #10420 - bumped brute-knex > error eslint@5.12.1: The engine “node” is incompatible with this module. Expected version “^6.14.0 || ^8.10.0 || >=9.10.0”. Got “8.9.1”
2019-01-27 18:29:40 +01:00
should@13.2.3:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "13.2.3"
resolved "https://registry.yarnpkg.com/should/-/should-13.2.3.tgz#96d8e5acf3e97b49d89b51feaa5ae8d07ef58f10"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump should to version 13.1.3 (#9284) refs https://github.com/TryGhost/Ghost/issues/9178 - adapt major changes - see https://github.com/shouldjs/should.js/blob/master/History.md - should.have.enumerable was removed
2017-11-28 19:41:16 +01:00
should-equal "^2.0.0"
should-format "^3.0.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
should-type "^1.4.0"
should-type-adaptors "^1.0.1"
should-util "^1.0.0"
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
sigmund@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/sigmund/-/sigmund-1.0.1.tgz#3ff21f198cad2175f9f3b781853fd94d0d19b590"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
signal-exit@^3.0.0, signal-exit@^3.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/signal-exit/-/signal-exit-3.0.2.tgz#b5fdc08f1287ea1178628e415e25132b73646c6d"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
simple-concat@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/simple-concat/-/simple-concat-1.0.0.tgz#7344cbb8b6e26fb27d66b2fc86f9f6d5997521c6"
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 19:07:33 +01:00
simple-dom@0.3.2:
version "0.3.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/simple-dom/-/simple-dom-0.3.2.tgz#0663d10f1556f1500551d518f56e3aba0871371d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
simple-get@^2.7.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "2.8.1"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-2.8.1.tgz#0e22e91d4575d87620620bc91308d57a77f44b5d"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
decompress-response "^3.3.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
once "^1.3.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
simple-concat "^1.0.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
🐛 Fixed image optimisation for input image being smaller than optimized one closes #10144 - When the input image is well optimized and has smaller byte size than the processed one it's still being used - Bumped sharp version to have access to `size` property
2018-11-12 18:52:36 +01:00
simple-get@^3.0.3:
version "3.0.3"
resolved "https://registry.yarnpkg.com/simple-get/-/simple-get-3.0.3.tgz#924528ac3f9d7718ce5e9ec1b1a69c0be4d62efa"
dependencies:
decompress-response "^3.3.0"
once "^1.3.1"
simple-concat "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
simple-html-tokenizer@0.5.7:
version "0.5.7"
resolved "https://registry.yarnpkg.com/simple-html-tokenizer/-/simple-html-tokenizer-0.5.7.tgz#8eca336ecfbe2b3c6166cbb31b2682088de79f40"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
simple-swizzle@^0.2.2:
version "0.2.2"
resolved "https://registry.yarnpkg.com/simple-swizzle/-/simple-swizzle-0.2.2.tgz#a4da6b635ffcccca33f70d17cb92592de95e557a"
dependencies:
is-arrayish "^0.3.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
"simplesmtp@~0.2 || ~0.3.30", simplesmtp@~0.3.30:
version "0.3.35"
resolved "https://registry.yarnpkg.com/simplesmtp/-/simplesmtp-0.3.35.tgz#017b1eb8b26317ac36d2a2a8a932631880736a03"
dependencies:
rai "~0.1.11"
xoauth2 "~0.1.8"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
sinon@7.2.3:
version "7.2.3"
resolved "https://registry.yarnpkg.com/sinon/-/sinon-7.2.3.tgz#f8bfd956df32ddf592f8c102fd46982366412d8e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
"@sinonjs/commons" "^1.3.0"
"@sinonjs/formatio" "^3.1.0"
"@sinonjs/samsam" "^3.0.2"
diff "^3.5.0"
lolex "^3.0.0"
nise "^1.4.8"
supports-color "^5.5.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
slice-ansi@1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-1.0.0.tgz#044f1a49d8842ff307aad6b505ed178bd950134d"
dependencies:
is-fullwidth-code-point "^2.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
slice-ansi@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/slice-ansi/-/slice-ansi-2.0.0.tgz#5373bdb8559b45676e8541c66916cdd6251612e7"
dependencies:
ansi-styles "^3.2.0"
astral-regex "^1.0.0"
is-fullwidth-code-point "^2.0.0"
Switched to eslint-plugin-ghost (#9835) refs #9834 - @TODO: the test env eslint needs to use the plugin, not part of this PR
2018-09-17 20:49:30 +02:00
snake-case@^2.1.0:
version "2.1.0"
resolved "https://registry.yarnpkg.com/snake-case/-/snake-case-2.1.0.tgz#41bdb1b73f30ec66a04d4e2cad1b76387d4d6d9f"
dependencies:
no-case "^2.2.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
snapdragon-node@^2.0.1:
version "2.1.1"
resolved "https://registry.yarnpkg.com/snapdragon-node/-/snapdragon-node-2.1.1.tgz#6c175f86ff14bdb0724563e8f3c1b021a286853b"
dependencies:
define-property "^1.0.0"
isobject "^3.0.0"
snapdragon-util "^3.0.1"
snapdragon-util@^3.0.1:
version "3.0.1"
resolved "https://registry.yarnpkg.com/snapdragon-util/-/snapdragon-util-3.0.1.tgz#f956479486f2acd79700693f6f7b805e45ab56e2"
dependencies:
kind-of "^3.2.0"
snapdragon@^0.8.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "0.8.2"
resolved "https://registry.yarnpkg.com/snapdragon/-/snapdragon-0.8.2.tgz#64922e7c565b0e14204ba1aa7d6964278d25182d"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
base "^0.11.1"
debug "^2.2.0"
define-property "^0.2.5"
extend-shallow "^2.0.1"
map-cache "^0.2.2"
source-map "^0.5.6"
source-map-resolve "^0.5.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
use "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
sort-keys@^1.0.0:
version "1.1.2"
resolved "https://registry.yarnpkg.com/sort-keys/-/sort-keys-1.1.2.tgz#441b6d4d346798f1b4e49e8920adfba0e543f9ad"
dependencies:
is-plain-obj "^1.0.0"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
sort-keys@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/sort-keys/-/sort-keys-2.0.0.tgz#658535584861ec97d730d6cf41822e1f56684128"
dependencies:
is-plain-obj "^1.0.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
source-map-resolve@^0.5.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "0.5.2"
resolved "https://registry.yarnpkg.com/source-map-resolve/-/source-map-resolve-0.5.2.tgz#72e2cc34095543e43b2c62b2c4c10d4a9054f259"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
atob "^2.1.1"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
decode-uri-component "^0.2.0"
resolve-url "^0.2.1"
source-map-url "^0.4.0"
urix "^0.1.0"
source-map-url@^0.4.0:
version "0.4.0"
resolved "https://registry.yarnpkg.com/source-map-url/-/source-map-url-0.4.0.tgz#3e935d7ddd73631b97659956d55128e87b5084a3"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
"source-map@>= 0.1.2":
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "0.7.3"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.7.3.tgz#5302f8169031735226544092e64981f751750383"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped express-hbs dependency no issue - express-hbs has been updated to depend on handlebars@4.0.13 which protects against a potential RCE - Ghost itself was not vulnerable to the RCE due to protection by gscan which does not allow themes using unknown helpers to be installed/activated
2019-02-07 15:16:37 +01:00
source-map@^0.5.3, source-map@^0.5.6:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "0.5.7"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.5.7.tgz#8a039d2d1021d22d1ea14c80d8ea468ba2ef3fcc"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
source-map@^0.6.1, source-map@~0.6.1:
version "0.6.1"
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.6.1.tgz#74722af32e9614e9c287a8d0bbde48b5e2f1a263"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
source-map@~0.2.0:
version "0.2.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/source-map/-/source-map-0.2.0.tgz#dab73fbcfc2ba819b4de03bd6f6eaa48164b3f9d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
amdefine ">=0.0.4"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
spdx-correct@^3.0.0:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "3.1.0"
resolved "https://registry.yarnpkg.com/spdx-correct/-/spdx-correct-3.1.0.tgz#fb83e504445268f154b074e218c87c003cd31df4"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
spdx-expression-parse "^3.0.0"
spdx-license-ids "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
spdx-exceptions@^2.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz#2ea450aee74f2a89bfb94519c07fcd6f41322977"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
spdx-expression-parse@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz#99e119b7a5da00e05491c9fa338b7904823b41d0"
dependencies:
spdx-exceptions "^2.1.0"
spdx-license-ids "^3.0.0"
spdx-license-ids@^3.0.0:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/spdx-license-ids/-/spdx-license-ids-3.0.3.tgz#81c0ce8f21474756148bbb5f3bfc0f36bf15d76e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
split-string@^3.0.1, split-string@^3.0.2:
version "3.1.0"
resolved "https://registry.yarnpkg.com/split-string/-/split-string-3.1.0.tgz#7cb09dda3a86585705c64b39a6466038682e8fe2"
dependencies:
extend-shallow "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
split2@^2.1.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "2.2.0"
resolved "https://registry.yarnpkg.com/split2/-/split2-2.2.0.tgz#186b2575bcf83e85b7d18465756238ee4ee42493"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
through2 "^2.0.2"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
sprintf-js@^1.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.1.2.tgz#da1765262bf8c0f571749f2ad6c26300207ae673"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
sprintf-js@~1.0.2:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/sprintf-js/-/sprintf-js-1.0.3.tgz#04e6926f662895354f3dd015203633b857297e2c"
Bump dependencies no issue - image-size@0.6.3 - moment-timezone@0.5.21 - oembed-parser@1.1.1 - simple-html-tokenizer@0.5.5 - nock@9.3.3 - sqlite3@4.0.1
2018-06-25 18:43:08 +02:00
Bumped knex & bookshelf dependencies (#10404) refs #9389, refs #9248 - https://github.com/bookshelf/bookshelf/releases/tag/0.14.0 - Bookshelf has fixed it's previous attr handling, see https://github.com/bookshelf/bookshelf/pull/1848 - SQlite3 double slashes was merged into knex and released 👻tgriesser/knex@c746dea
2019-01-21 21:53:11 +01:00
sqlite3@4.0.6, sqlite3@^4.0.6:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "4.0.6"
resolved "https://registry.yarnpkg.com/sqlite3/-/sqlite3-4.0.6.tgz#e587b583b5acc6cb38d4437dedb2572359c080ad"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
dependencies:
nan "~2.10.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
node-pre-gyp "^0.11.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
request "^2.87.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
sqlstring@2.3.1:
version "2.3.1"
resolved "https://registry.yarnpkg.com/sqlstring/-/sqlstring-2.3.1.tgz#475393ff9e91479aea62dcaf0ca3d14983a7fb40"
Bump dependencies no issue - bson-objectid@1.2.1 - compression@1.7.1 - express@4.16.2 - moment-timezone@0.5.14 - mysql@2.15.0 - nconf@0.8.5 - sanitize-html@1.15.0 - simple-html-tokenizer@0.4.3 - superagent@3.8.0 IMPORTANT: - we are unable to bump moment and bluebird at the moment, because in both releases there is a bug which breaks our tests - i didn't investigate a lot, but there is https://github.com/petkaantonov/bluebird/issues/1468 - and for moment, a couple of reports came in for .19 regarding a wrong date behaviour
2017-10-31 11:53:16 +01:00
srcset@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/srcset/-/srcset-1.0.0.tgz#a5669de12b42f3b1d5e83ed03c71046fc48f41ef"
dependencies:
array-uniq "^1.0.2"
number-is-nan "^1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
sshpk@^1.7.0:
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
version "1.16.0"
resolved "https://registry.yarnpkg.com/sshpk/-/sshpk-1.16.0.tgz#1d4963a2fbffe58050aa9084ca20be81741c07de"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
asn1 "~0.2.3"
assert-plus "^1.0.0"
bcrypt-pbkdf "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
dashdash "^1.12.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
ecc-jsbn "~0.1.1"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
getpass "^0.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
jsbn "~0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
safer-buffer "^2.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
tweetnacl "~0.14.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
stack-trace@0.0.10:
version "0.0.10"
resolved "https://registry.yarnpkg.com/stack-trace/-/stack-trace-0.0.10.tgz#547c70b347e8d32b4e108ea1a2a159e5fdde19c0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
static-eval@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/static-eval/-/static-eval-2.0.0.tgz#0e821f8926847def7b4b50cda5d55c04a9b13864"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump jsonpath to version 1.0.0 no issue - major bump - we only use jsonpath inside the `get` helper - the functionality still works as expected - includes security fix, see https://github.com/dchester/jsonpath/commit/98464aa5fea65bad09564a5632bad72e31736244
2017-10-31 12:21:48 +01:00
escodegen "^1.8.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
static-extend@^0.1.1:
version "0.1.2"
resolved "https://registry.yarnpkg.com/static-extend/-/static-extend-0.1.2.tgz#60809c39cbff55337226fd5e0b520f341f1fb5c6"
dependencies:
define-property "^0.2.5"
object-copy "^0.1.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
"statuses@>= 1.2.1 < 2", "statuses@>= 1.4.0 < 2":
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.5.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.5.0.tgz#161c7dac177659fd9811f43771fa99381478628c"
statuses@~1.4.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.4.0"
resolved "https://registry.yarnpkg.com/statuses/-/statuses-1.4.0.tgz#bb73d446da2796106efcc1b601a253d6c46bd087"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
stream-buffers@^2.1.0:
version "2.2.0"
resolved "https://registry.yarnpkg.com/stream-buffers/-/stream-buffers-2.2.0.tgz#91d5f5130d1cef96dcfa7f726945188741d09ee4"
streamsearch@0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/streamsearch/-/streamsearch-0.1.2.tgz#808b9d0e56fc273d809ba57338e929919a1a9f1a"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
strict-uri-encode@^1.0.0:
version "1.1.0"
resolved "https://registry.yarnpkg.com/strict-uri-encode/-/strict-uri-encode-1.1.0.tgz#279b225df1d582b1f54e65addd4352e18faa0713"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
string-template@~0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/string-template/-/string-template-0.2.1.tgz#42932e598a352d01fc22ec3367d9d84eec6c9add"
string-width@^1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-1.0.2.tgz#118bdf5b8cdc51a2a7e70d211e07e2b0b9b107d3"
dependencies:
code-point-at "^1.0.0"
is-fullwidth-code-point "^1.0.0"
strip-ansi "^3.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
"string-width@^1.0.2 || 2", string-width@^2.1.0, string-width@^2.1.1:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "2.1.1"
resolved "https://registry.yarnpkg.com/string-width/-/string-width-2.1.1.tgz#ab93f27a8dc13d28cac815c462143a6d9012ae9e"
dependencies:
is-fullwidth-code-point "^2.0.0"
strip-ansi "^4.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
string_decoder@0.10, string_decoder@~0.10.x:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.10.31"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-0.10.31.tgz#62e203bc41766c6c28c9fc84301dab1c5310fa94"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
string_decoder@^1.1.1:
version "1.2.0"
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.2.0.tgz#fe86e738b19544afe70469243b2a1ee9240eae8d"
dependencies:
safe-buffer "~5.1.0"
string_decoder@~1.1.1:
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
version "1.1.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/string_decoder/-/string_decoder-1.1.1.tgz#9cf1611ba62685d7030ae9e4ba34149c3af03fc8"
Bump brute-knex to version 3.0.0 no issue - drop node 4 support - i finally got full access to brute-knex - see https://github.com/llambda/brute-knex
2018-04-30 21:11:46 +02:00
dependencies:
safe-buffer "~5.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
strip-ansi@^3.0.0, strip-ansi@^3.0.1:
version "3.0.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-3.0.1.tgz#6a385fb8853d952d5ff05d0e8aaf94278dc63dcf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
ansi-regex "^2.0.0"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
strip-ansi@^4.0.0:
version "4.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-4.0.0.tgz#a8479022eb1ac368a871389b635262c505ee368f"
dependencies:
ansi-regex "^3.0.0"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
strip-ansi@^5.0.0:
version "5.0.0"
resolved "https://registry.yarnpkg.com/strip-ansi/-/strip-ansi-5.0.0.tgz#f78f68b5d0866c20b2c9b8c61b5298508dc8756f"
dependencies:
ansi-regex "^4.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
strip-bom@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/strip-bom/-/strip-bom-2.0.0.tgz#6219a85616520491f35788bdbf1447a99c7e6b0e"
dependencies:
is-utf8 "^0.2.0"
Bumped csv-parser from 1.12.1 to 2.1.0 refs #9389 - breaking change does not affect use - https://github.com/mafintosh/csv-parser/releases/tag/v2.0.0
2019-01-21 14:40:30 +01:00
strip-eof@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/strip-eof/-/strip-eof-1.0.0.tgz#bb43ff5598a6eb05d89b59fcd129c983313606bf"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
strip-indent@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/strip-indent/-/strip-indent-1.0.1.tgz#0c7962a6adefa7bbd4ac366460a638552ae1a0a2"
dependencies:
get-stdin "^4.0.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
strip-json-comments@^2.0.1, strip-json-comments@~2.0.1:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "2.0.1"
resolved "https://registry.yarnpkg.com/strip-json-comments/-/strip-json-comments-2.0.1.tgz#3c531942e908c2697c0ec344858c286c7ca0a60a"
Added initial subscription support with stripe to Members API (#10460) These changes introduce a new "service" to the members api, which handles getting and creating subscriptions. This is wired up to get subscription information when creating tokens, and attaching information to the token, so that the Content API can allow/deny access. Behind the subscription service we have a Stripe "payment processor", this holds the logic for creating subscriptions etc... in Stripe. The logic for getting items out of stripe uses a hash of the relevant data as the id to search for, this allows us to forgo keeping stripe data in a db, so that this feature can get out quicker.
2019-02-07 10:41:39 +01:00
stripe@^6.22.0:
version "6.22.0"
resolved "https://registry.yarnpkg.com/stripe/-/stripe-6.22.0.tgz#8c1956b04bbbaa736581ff56987feafabd8deff1"
dependencies:
lodash.isplainobject "^4.0.6"
qs "~6.5.1"
safe-buffer "^5.1.1"
Bumped superagent from 3.8.3 to 4.1.0 refs #9389 - https://github.com/visionmedia/superagent/blob/master/History.md#400-2018-11-17 - breaking changes don't really affect us - .end(…) returns undefined instead of the request. If you need the request object after calling .end() (and you probably don't), save it in a variable and call request.end(…). Consider not using .end() at all, and migrating to promises by calling .then() instead. - this could be changed, but it's not required
2019-01-21 15:19:07 +01:00
superagent@4.1.0:
version "4.1.0"
resolved "https://registry.yarnpkg.com/superagent/-/superagent-4.1.0.tgz#c465c2de41df2b8d05c165cbe403e280790cdfd5"
dependencies:
component-emitter "^1.2.0"
cookiejar "^2.1.2"
debug "^4.1.0"
form-data "^2.3.3"
formidable "^1.2.0"
methods "^1.1.1"
mime "^2.4.0"
qs "^6.6.0"
readable-stream "^3.0.6"
superagent@^3.8.3:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "3.8.3"
resolved "https://registry.yarnpkg.com/superagent/-/superagent-3.8.3.tgz#460ea0dbdb7d5b11bc4f78deba565f86a178e128"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
dependencies:
component-emitter "^1.2.0"
cookiejar "^2.1.0"
debug "^3.1.0"
extend "^3.0.0"
form-data "^2.3.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
formidable "^1.2.0"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
methods "^1.1.1"
mime "^1.4.1"
qs "^6.5.1"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
readable-stream "^2.3.5"
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 12:08:32 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
supertest@3.4.1:
version "3.4.1"
resolved "https://registry.yarnpkg.com/supertest/-/supertest-3.4.1.tgz#91b19ea34804c205769d0ff5ad947aff3eb2731d"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
methods "^1.1.2"
superagent "^3.8.3"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
supports-color@4.4.0:
version "4.4.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-4.4.0.tgz#883f7ddabc165142b2a61427f3352ded195d1a3e"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump mocha to version 4.0.1 no issue - https://github.com/mochajs/mocha/blob/master/CHANGELOG.md#400--2017-10-02 - the new `--exit` flag might be interesting at some point > In Mocha v3.0.0 and newer, returning a Promise and calling done() will result in an exception. - adapt teardown/setup test utility - adapt other mixed usages of callback && Promise usage
2017-11-28 19:32:03 +01:00
has-flag "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
supports-color@5.4.0:
version "5.4.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.4.0.tgz#1c6b337402c2137605efe19f10fec390f6faab54"
dependencies:
has-flag "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
supports-color@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-2.0.0.tgz#535d045ce6b6363fa40117084629995e9df324c7"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
supports-color@^3.1.0, supports-color@^3.2.3:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.2.3"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-3.2.3.tgz#65ac0504b3954171d8a64946b2ae3cbb8a5f54f6"
dependencies:
has-flag "^1.0.0"
Bumped sinon from 4.4.6 to 7.3.2 (#10400) refs #9389 - https://github.com/sinonjs/sinon/blob/master/CHANGELOG.md Breaking changes for Ghost: - no need to create a sandbox anymore, each file get's it's own sandbox - just require sinon and use this sandbox - you can still create separate sandboxes with .createSandbox - reset single stubs: use .resetHistory instead of .reset This is a global replace for any sandbox creation. --- From https://sinonjs.org/releases/v7.2.3/sandbox/ > Default sandbox > Since sinon@5.0.0, the sinon object is a default sandbox. Unless you have a very advanced setup or need a special configuration, you probably want to just use that one.
2019-01-21 17:53:44 +01:00
supports-color@^5.3.0, supports-color@^5.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "5.5.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-5.5.0.tgz#e2e69a44ac8772f78a1ec0b35b689df6530efc8f"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
has-flag "^3.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
supports-color@^6.1.0:
version "6.1.0"
resolved "https://registry.yarnpkg.com/supports-color/-/supports-color-6.1.0.tgz#0764abc69c63d5ac842dd4867e8d025e880df8f3"
dependencies:
has-flag "^3.0.0"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
svgo@^0.7.0:
version "0.7.2"
resolved "https://registry.yarnpkg.com/svgo/-/svgo-0.7.2.tgz#9f5772413952135c6fefbf40afe6a4faa88b4bb5"
dependencies:
coa "~1.0.1"
colors "~1.1.2"
csso "~2.3.1"
js-yaml "~3.7.0"
mkdirp "~0.5.1"
sax "~1.2.1"
whet.extend "~0.9.9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
table@4.0.2:
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
version "4.0.2"
resolved "https://registry.yarnpkg.com/table/-/table-4.0.2.tgz#a33447375391e766ad34d3486e6e2aedc84d2e36"
dependencies:
ajv "^5.2.3"
ajv-keywords "^2.1.0"
chalk "^2.1.0"
lodash "^4.17.4"
slice-ansi "1.0.0"
string-width "^2.1.1"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
table@^5.0.2:
version "5.2.1"
resolved "https://registry.yarnpkg.com/table/-/table-5.2.1.tgz#e78463702b1be9f7131c39860bcfb1b81114c2a1"
dependencies:
ajv "^6.6.1"
lodash "^4.17.11"
slice-ansi "2.0.0"
string-width "^2.1.1"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
tar-fs@^1.13.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.16.3"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-1.16.3.tgz#966a628841da2c4010406a82167cbd5e0c72d509"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
dependencies:
chownr "^1.0.1"
mkdirp "^0.5.1"
pump "^1.0.0"
tar-stream "^1.1.2"
tar-stream@^1.1.2, tar-stream@^1.5.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "1.6.2"
resolved "https://registry.yarnpkg.com/tar-stream/-/tar-stream-1.6.2.tgz#8ea55dab37972253d9a9af90fdcd559ae435c555"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
bl "^1.0.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
buffer-alloc "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
end-of-stream "^1.0.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
fs-constants "^1.0.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
readable-stream "^2.3.0"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
to-buffer "^1.1.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
xtend "^4.0.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
tar@^2.0.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "2.2.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/tar/-/tar-2.2.1.tgz#8e4d2a256c0e2185c6b18ad694aec968b83cb1d1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
block-stream "*"
fstream "^1.0.2"
inherits "2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
tar@^4, tar@^4.4.8:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "4.4.8"
resolved "https://registry.yarnpkg.com/tar/-/tar-4.4.8.tgz#b19eec3fde2a96e64666df9fdb40c5ca1bc3747d"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
chownr "^1.1.1"
✨Added ability to resize and compress images on upload (#9837) refs #4453 * On by default * Added config to disable resizing * Added basic image optimization processing * Added dep: sharp (optional dep) * Added resize middleware * Take care of rotation based on EXIF information * Removed all meta data from optimised image * Added handling if sharp could not get installed * Do not read ext twice - optimisation * Do not call sharp if config is disabled * Do not remove the original image which was uploaded (store 2 images) * Support of `req.files` for internal logic * Disabled cache to enable file removal on Windows
2018-08-30 18:30:36 +02:00
fs-minipass "^1.2.5"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
minipass "^2.3.4"
minizlib "^1.1.1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
mkdirp "^0.5.0"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
safe-buffer "^5.1.2"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
yallist "^3.0.2"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
tarn@^1.1.4:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
version "1.1.4"
resolved "https://registry.yarnpkg.com/tarn/-/tarn-1.1.4.tgz#aeeb85964b1afa0bbf381359c1167df237c27b6a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
text-encoding@^0.6.4:
version "0.6.4"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/text-encoding/-/text-encoding-0.6.4.tgz#e399a982257a276dae428bb92845cb71bdc26d19"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
text-table@^0.2.0, text-table@~0.2.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.2.0"
resolved "https://registry.yarnpkg.com/text-table/-/text-table-0.2.0.tgz#7f5ee823ae805207c00af2df4a84ec3fcfa570b4"
Removed run-sequence dev dependency no issue - not used
2017-11-28 19:34:43 +01:00
through2@^2.0.2, through2@^2.0.3:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "2.0.5"
resolved "https://registry.yarnpkg.com/through2/-/through2-2.0.5.tgz#01c1e39eb31d07cb7d03a96a70823260b23132cd"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
readable-stream "~2.3.6"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
xtend "~4.0.1"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
through@^2.3.6:
version "2.3.8"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/through/-/through-2.3.8.tgz#0dd4c9ffaabc357960b1b724115d7e0e86a2e1f5"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
tildify@1.2.0:
version "1.2.0"
resolved "https://registry.yarnpkg.com/tildify/-/tildify-1.2.0.tgz#dcec03f55dca9b7aa3e5b04f21817eb56e63588a"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
os-homedir "^1.0.0"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
timed-out@^4.0.0, timed-out@^4.0.1:
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/timed-out/-/timed-out-4.0.1.tgz#f32eacac5a175bea25d7fab565ab3ed8741ef56f"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
tiny-lr@^1.1.1:
version "1.1.1"
resolved "https://registry.yarnpkg.com/tiny-lr/-/tiny-lr-1.1.1.tgz#9fa547412f238fedb068ee295af8b682c98b2aab"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
body "^5.1.0"
debug "^3.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
faye-websocket "~0.10.0"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
livereload-js "^2.3.0"
object-assign "^4.1.0"
qs "^6.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
tmp@0.0.33, tmp@^0.0.33:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
version "0.0.33"
resolved "https://registry.yarnpkg.com/tmp/-/tmp-0.0.33.tgz#6d34335889768d21b2bcda0aa277ced3b1bfadf9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9050) no issue - body-parser@1.18.2 - cookie-session@1.3.2 - knex-migrator@2.1.6 - markdown-it@8.4.0 - netjet@1.1.4 - oauth2orize@1.10.0 - passport@0.4.0 - superagent@3.6.0 - mocha@3.5.3 - nock@9.0.20 - tmp@0.0.33
2017-09-25 14:27:14 +02:00
os-tmpdir "~1.0.2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
to-buffer@^1.1.1:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.1.1"
resolved "https://registry.yarnpkg.com/to-buffer/-/to-buffer-1.1.1.tgz#493bd48f62d7c43fcded313a03dcadb2e1213a80"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
to-object-path@^0.3.0:
version "0.3.0"
resolved "https://registry.yarnpkg.com/to-object-path/-/to-object-path-0.3.0.tgz#297588b7b0e7e0ac08e04e672f85c1f4999e17af"
dependencies:
kind-of "^3.0.2"
to-regex-range@^2.1.0:
version "2.1.1"
resolved "https://registry.yarnpkg.com/to-regex-range/-/to-regex-range-2.1.1.tgz#7c80c17b9dfebe599e27367e0d4dd5590141db38"
dependencies:
is-number "^3.0.0"
repeat-string "^1.6.1"
✨ Multiple authors (#9426) no issue This PR adds the server side logic for multiple authors. This adds the ability to add multiple authors per post. We keep and support single authors (maybe till the next major - this is still in discussion) ### key notes - `authors` are not fetched by default, only if we need them - the migration script iterates over all posts and figures out if an author_id is valid and exists (in master we can add invalid author_id's) and then adds the relation (falls back to owner if invalid) - ~~i had to push a fork of bookshelf to npm because we currently can't bump bookshelf + the two bugs i discovered are anyway not yet merged (https://github.com/kirrg001/bookshelf/commits/master)~~ replaced by new bookshelf release - the implementation of single & multiple authors lives in a single place (introduction of a new concept: model relation) - if you destroy an author, we keep the behaviour for now -> remove all posts where the primary author id matches. furthermore, remove all relations in posts_authors (e.g. secondary author) - we make re-use of the `excludeAttrs` concept which was invented in the contributors PR (to protect editing authors as author/contributor role) -> i've added a clear todo that we need a logic to make a diff of the target relation -> both for tags and authors - `authors` helper available (same as `tags` helper) - `primary_author` computed field available - `primary_author` functionality available (same as `primary_tag` e.g. permalinks, prev/next helper etc)
2018-03-27 16:16:15 +02:00
to-regex@^3.0.1, to-regex@^3.0.2:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "3.0.2"
resolved "https://registry.yarnpkg.com/to-regex/-/to-regex-3.0.2.tgz#13cfdd9b336552f30b51f33a8ae1b42a7a7599ce"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
define-property "^2.0.2"
extend-shallow "^3.0.2"
regex-not "^1.0.2"
safe-regex "^1.1.0"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
tough-cookie@~2.4.3:
version "2.4.3"
resolved "https://registry.yarnpkg.com/tough-cookie/-/tough-cookie-2.4.3.tgz#53f36da3f47783b0925afa06ff9f3b165280f781"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
dependencies:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
psl "^1.1.24"
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
punycode "^1.4.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
trim-newlines@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/trim-newlines/-/trim-newlines-1.0.0.tgz#5887966bb582a4503a41eb524f7d35011815a613"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
tslib@^1.9.0:
version "1.9.3"
resolved "https://registry.yarnpkg.com/tslib/-/tslib-1.9.3.tgz#d7e4dd79245d85428c4d7e4822a79917954ca286"
Bump rewire to version 3.0.2 no issue - nothing to adapt for the major jump
2017-11-28 19:22:29 +01:00
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
tunnel-agent@^0.6.0:
version "0.6.0"
resolved "https://registry.yarnpkg.com/tunnel-agent/-/tunnel-agent-0.6.0.tgz#27a5dea06b36b04a0a9966774b290868f0fc40fd"
dependencies:
safe-buffer "^5.0.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
tweetnacl@^0.14.3, tweetnacl@~0.14.0:
version "0.14.5"
resolved "https://registry.yarnpkg.com/tweetnacl/-/tweetnacl-0.14.5.tgz#5ae68177f192d4456269d108afa93ff8743f4f64"
type-check@~0.3.2:
version "0.3.2"
resolved "https://registry.yarnpkg.com/type-check/-/type-check-0.3.2.tgz#5884cab512cf1d355e3fb784f30804b2b520db72"
dependencies:
prelude-ls "~1.1.2"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
type-detect@4.0.8, type-detect@^4.0.0, type-detect@^4.0.5:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "4.0.8"
resolved "https://registry.yarnpkg.com/type-detect/-/type-detect-4.0.8.tgz#7646fb5f18871cfbb7749e69bd39a6388eb7450c"
Bump sinon to version 4.1.2 (#9283) refs #9178 - adapt major changes
2017-11-28 18:19:23 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
type-is@^1.6.4, type-is@~1.6.16:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "1.6.16"
resolved "https://registry.yarnpkg.com/type-is/-/type-is-1.6.16.tgz#f89ce341541c672b25ee7ae3c73dee3b2be50194"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
media-typer "0.3.0"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
mime-types "~2.1.18"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
typedarray@^0.0.6:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.0.6"
resolved "https://registry.yarnpkg.com/typedarray/-/typedarray-0.0.6.tgz#867ac74e3864187b1d3d47d996a78ec5c8830777"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
uc.micro@^1.0.1, uc.micro@^1.0.5:
Bump markdown-it to version 8.4.1 (#9484) no issue - which bumps the sub-dependency "uc.micro" to 1.0.5 - this version is now MIT licensed
2018-03-05 10:03:24 +01:00
version "1.0.5"
resolved "https://registry.yarnpkg.com/uc.micro/-/uc.micro-1.0.5.tgz#0c65f15f815aa08b560a61ce8b4db7ffc3f45376"
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 18:28:44 +01:00
uglify-js@^3.1.4, uglify-js@~3.4.8:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.4.9"
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.4.9.tgz#af02f180c1207d76432e473ed24a28f4a782bae3"
dependencies:
commander "~2.17.1"
source-map "~0.6.1"
Session auth service (#9910) refs #9865 * This service handles the session store and exporting middleware to be used for creating and managing sessions * Updates the auth service index.js file in line with how we do things elsewhere * After wrapping the exports in a getter, the usage of rewire had broken the authenticate tests, this commit _removes_ rewire from the tests, calls `init` on the models before the tests (needed because rewire isn't there) and also cleans up the use of var.
2018-10-02 10:35:23 +02:00
uid-safe@~2.1.5:
version "2.1.5"
resolved "https://registry.yarnpkg.com/uid-safe/-/uid-safe-2.1.5.tgz#2b3d5c7240e8fc2e58f8aa269e5ee49c0857bd3a"
dependencies:
random-bytes "~1.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
uid2@0.0.x:
version "0.0.3"
resolved "https://registry.yarnpkg.com/uid2/-/uid2-0.0.3.tgz#483126e11774df2f71b8b639dcd799c376162b82"
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
unc-path-regex@^0.1.2:
version "0.1.2"
resolved "https://registry.yarnpkg.com/unc-path-regex/-/unc-path-regex-0.1.2.tgz#e73dd3d7b0d7c5ed86fbac6b0ae7d8c6a69d50fa"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bumped html-to-text from 3.3.0 to 4.0.0 refs #9389 - https://github.com/werk85/node-html-to-text/blob/master/CHANGELOG.md#version-400 - breaking change does not affect us
2019-01-21 15:02:52 +01:00
underscore.string@~3.3.4:
version "3.3.5"
resolved "https://registry.yarnpkg.com/underscore.string/-/underscore.string-3.3.5.tgz#fc2ad255b8bd309e239cbc5816fd23a9b7ea4023"
dependencies:
sprintf-js "^1.0.3"
util-deprecate "^1.0.2"
underscore@:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.9.1"
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.9.1.tgz#06dce34a0e68a7babc29b365b8e74b8925203961"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
underscore@1.1.x:
version "1.1.7"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.1.7.tgz#40bab84bad19d230096e8d6ef628bff055d83db0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Respected peer dependency for bookshelf no issue - need to use knex 0.14.x for now - Bookshelf already bumped the peer dependency in master, but was not released yet
2019-01-22 08:58:28 +01:00
underscore@1.7.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.7.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.7.0.tgz#6bbaf0877500d36be34ecaa584e0db9fef035209"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
underscore@~1.8.3:
version "1.8.3"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/underscore/-/underscore-1.8.3.tgz#4f3fb53b106e6097fcf9cb4109f2a5e9bdfa5022"
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
unidecode@0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/unidecode/-/unidecode-0.1.8.tgz#efbb301538bc45246a9ac8c559d72f015305053e"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
union-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/union-value/-/union-value-1.0.0.tgz#5c71c34cb5bad5dcebe3ea0cd08207ba5aa1aea4"
dependencies:
arr-union "^3.1.0"
get-value "^2.0.6"
is-extendable "^0.1.1"
set-value "^0.4.3"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
uniq@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/uniq/-/uniq-1.0.1.tgz#b31c5ae8254844a3a8281541ce2b04b865a734ff"
uniqs@^2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/uniqs/-/uniqs-2.0.0.tgz#ffede4b36b25290696e6e165d4a59edb998e6b02"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
universalify@^0.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "0.1.2"
resolved "https://registry.yarnpkg.com/universalify/-/universalify-0.1.2.tgz#b646f69be3942dabcecc9d6639c80dc105efaa66"
Update fs-extra to version 3.0.1 🚀 (#8440) * chore(package): update fs-extra to version 3.0.1 https://greenkeeper.io/ * chore: yarn.lock
2017-05-10 09:51:54 +02:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
unpipe@1.0.0, unpipe@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unpipe/-/unpipe-1.0.0.tgz#b2bf4ee8514aae6165b4817829d21b2ef49904ec"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
unset-value@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/unset-value/-/unset-value-1.0.0.tgz#8376873f7d2335179ffb1e6fc3a8ed0dfc8ab559"
dependencies:
has-value "^0.3.1"
isobject "^3.0.0"
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
uri-js@^4.2.2:
version "4.2.2"
resolved "https://registry.yarnpkg.com/uri-js/-/uri-js-4.2.2.tgz#94c540e1ff772956e2299507c010aea6c8838eb0"
dependencies:
punycode "^2.1.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
uri-path@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/uri-path/-/uri-path-1.0.0.tgz#9747f018358933c31de0fccfd82d138e67262e32"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
urix@^0.1.0:
version "0.1.0"
resolved "https://registry.yarnpkg.com/urix/-/urix-0.1.0.tgz#da937f7a62e21fec1fd18d49b35c2935067a6c72"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
url-parse-lax@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/url-parse-lax/-/url-parse-lax-1.0.0.tgz#7af8f303645e9bd79a272e7a14ac68bc0609da73"
dependencies:
prepend-http "^1.0.1"
🐛 Fixed uncaught exceptions from image fetches closes #10383 - Upgrades got to 8.3.2, which contains better error handling and resolves the issue with uncaught exceptions - Note: Got 9.x stream doesn't support Node v6 - Requires us to hardcode http:// for xmlrpc because there is a breaking change where got now defaults to https instead of http
2019-01-15 21:35:46 +01:00
url-parse-lax@^3.0.0:
version "3.0.0"
resolved "https://registry.yarnpkg.com/url-parse-lax/-/url-parse-lax-3.0.0.tgz#16b5cafc07dbe3676c1b1999177823d6503acb0c"
dependencies:
prepend-http "^2.0.0"
Used `got` to handle requests for image-size (#8892) refs #8589, refs #8868 - swap `request` with `got` in `getImageSizeFromUrl` util - less handling for request cases e.g. timeouts, follow redirects
2017-08-31 11:39:37 +02:00
url-to-options@^1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/url-to-options/-/url-to-options-1.0.1.tgz#1505a03a289a48cbd7a434efbaeec5055f5633a9"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
use@^3.1.0:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.1.1"
resolved "https://registry.yarnpkg.com/use/-/use-3.1.1.tgz#d50c8cac79a19fbc20f2911f56eb973f4e10070f"
Bump matchdep to version 2.0.0 no issue - no major changes to adapt
2017-11-28 19:43:33 +01:00
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
util-deprecate@^1.0.1, util-deprecate@^1.0.2, util-deprecate@~1.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/util-deprecate/-/util-deprecate-1.0.2.tgz#450d4dc9fa70de732762fbd2d4a28981419a0ccf"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
utils-merge@1.0.1, utils-merge@1.x.x:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "1.0.1"
resolved "https://registry.yarnpkg.com/utils-merge/-/utils-merge-1.0.1.tgz#9f95710f50a267947b2ccc124741c1028427e713"
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
uuid@3.3.2, uuid@^3.0.0, uuid@^3.2.1, uuid@^3.3.2:
Bump dependencies no issue - ghost-ignition@2.9.4 - fixed log rotation (https://github.com/TryGhost/Ignition/commit/c8f256430a5d03c6bce7872910eecc5576fd4b55) - multer@1.3.1 - uuid@3.3.2 - nock@9.4.0
2018-07-02 12:28:30 +02:00
version "3.3.2"
resolved "https://registry.yarnpkg.com/uuid/-/uuid-3.3.2.tgz#1b4af4955eb3077c501c23872fc6513811587131"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
v8flags@^3.0.2, v8flags@^3.1.1, v8flags@~3.1.1:
version "3.1.2"
resolved "https://registry.yarnpkg.com/v8flags/-/v8flags-3.1.2.tgz#fc5cd0c227428181e6c29b2992e4f8f1da5e0c9f"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
dependencies:
Bump dependencies (#9513) no issue - knex@0.14.4 - bookshelf@0.13.0 - knex-migrator@3.1.4 - brute-knex@https://github.com/cobbspur/brute-knex/tarball/4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - bookshelf-relations@0.2.0 ### Fixes for Bookshelf 0.13 - they introduced some breaking changes - https://github.com/bookshelf/bookshelf/blob/master/CHANGELOG.md#breaking-changes - adapt event handling in Ghost and in bookshelf-relations
2018-03-19 16:27:06 +01:00
homedir-polyfill "^1.0.1"
Bump dependencies (#9391) no issue - bookshelf@0.12.1 - knex@0.14.2 - moment@2.20.1 - eslint@4.15.0 - nock@9.1.6 - sinon@4.1.4
2018-01-11 21:19:34 +01:00
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
validate-npm-package-license@^3.0.1:
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 09:45:51 +01:00
version "3.0.4"
resolved "https://registry.yarnpkg.com/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz#fc91f6b9c7ba15c857f4cb2c5defeec39d4f410a"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
spdx-correct "^3.0.0"
spdx-expression-parse "^3.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🎨 gscan 1.1.0 & optimisations refs #8222 - differentiate between errors and fatal errors - use gscan errors in theme middleware - Adds a new `error()` method to `currentActiveTheme` constructor which will return the errors we receive from gscan - In middleware, if a theme couldn't be activated because it's invalid, we'll fetch the erros and send them to our error handler. We also use a new property `hideStack` to control, if the stack (in dev mode and if available) should be shown or the gscan errors (in prod mode, or in dev if no stack error) - In our error handler we use this conditional to send a new property `gscan` to our error theme - In `error.hbs` we'll iterate through possible `gscan` error objects and render them. - remove stack printing - stack for theme developers in development mode doesn't make sense - stack in production doesn't make sense - the stack is usually hard to read - if you are developer you can read the error stack on the server log - utils.packages: transform native error into Ghost error - use `onlyFatalErrors` for gscan format and differeniate fatal errors vo.2 - optimise bootstrap error handling - transform theme is missing into an error - add new translation key - show html tags for error.hbs template: rule
2017-05-31 18:42:42 +02:00
validator@6.3.0, validator@^6.3.0:
Update validator to version 6.3.0 🚀 (#8049) * chore(package): update validator to version 6.3.0 https://greenkeeper.io/ * chore: yarn.lock
2017-03-03 15:04:38 +01:00
version "6.3.0"
resolved "https://registry.yarnpkg.com/validator/-/validator-6.3.0.tgz#47ce23ed8d4eaddfa9d4b8ef0071b6cf1078d7c8"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Bump amperize to version 0.3.6 (#9264) no issue New version contains - dependency updates - Node v8 support - Eslint refactoring
2017-11-21 15:00:04 +01:00
validator@^9.1.1:
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
version "9.4.1"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/validator/-/validator-9.4.1.tgz#abf466d398b561cd243050112c6ff1de6cc12663"
Bump Amperize to version 0.3.5 (#9087) no issue - bump `amperize` to 0.3.5 which fixes issues with images-size requests not following redirects, and image-size requests that caused errors leading to stop transforming the rest of the passed HTML.
2017-10-04 11:12:03 +02:00
Bump dependencies no issue - brute-knex@4feff38ad2e4ccd8d9de05f04a2ad7a5eb3e0ac1 - knex-migrator@3.1.4 - ghost-ignition@2.8.17
2018-01-11 22:59:22 +01:00
vary@^1, vary@~1.1.2:
Support for Node v8 (#9183) no issue - bump dependencies because of failing tests - added package-lock.json to gitignore, because we use yarn - run v8 on travis - support v8 engine in package.json
2017-10-26 12:37:58 +02:00
version "1.1.2"
resolved "https://registry.yarnpkg.com/vary/-/vary-1.1.2.tgz#2299f02c6ded30d4a5961b0b9f74524a18f634fc"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
vendors@^1.0.0:
Bump dependencies no issue bookshelf-relations@0.2.1, bson-objectid@1.2.3, csv-parser@1.12.1, ghost-gql@0.0.10, ghost-ignition@2.9.2, ghost-storage-base@0.0.3, gscan@1.4.2, knex@0.14.6, knex-mig rator@3.1.6, lodash@4.17.10, moment@2.22.1, moment-timezone@0.5.16, simple-html-tokenizer@0.5.1, superagent@3.8.3, eslint@4.19.1, grunt-contrib-watch@1.0.1, nock@9.2.5
2018-04-30 21:13:01 +02:00
version "1.0.2"
resolved "https://registry.yarnpkg.com/vendors/-/vendors-1.0.2.tgz#7fcb5eef9f5623b156bcea89ec37d63676f21801"
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
verror@1.10.0:
version "1.10.0"
resolved "https://registry.yarnpkg.com/verror/-/verror-1.10.0.tgz#3a105ca17053af55d6e270c1f8288682e18da400"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
assert-plus "^1.0.0"
core-util-is "1.0.2"
extsprintf "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
walkdir@^0.0.11:
version "0.0.11"
resolved "https://registry.yarnpkg.com/walkdir/-/walkdir-0.0.11.tgz#a16d025eb931bd03b52f308caed0f40fcebe9532"
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 15:20:53 +01:00
websocket-driver@>=0.5.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "0.7.0"
resolved "https://registry.yarnpkg.com/websocket-driver/-/websocket-driver-0.7.0.tgz#0caf9d2d755d93aee049d4bdd0d3fe2cca2a24eb"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
http-parser-js ">=0.4.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
websocket-extensions ">=0.1.1"
websocket-extensions@>=0.1.1:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "0.1.3"
resolved "https://registry.yarnpkg.com/websocket-extensions/-/websocket-extensions-0.1.3.tgz#5d2ff22977003ec687a4b87073dfbbac146ccf29"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Asset amends (#8294) refs #8221 🔥 Remove ghost=true concept from asset url helper ✨ 💯 Introduce CSS minification with cssnano - add new grunt-cssnano dependency - wire up grunt task to minify public/ghost.css 🎨 Rename minification config & hash params - Change minifyInProduction -> hasMinFile - this means this asset should have a .min file available - Change minifyAssets -> useMinFiles - this means that in this env we want to serve .min files if available 🎨 Update public/ghost.css to serve .min for prod - add the new `hasMinFile` property 🎨 Move minified asset handling to asset_url util - this logic should be in the util, not the asset helper - updated tests 📖 Error handler always needs asset helper - this removes the TODO and adds a more sensible comment - we also need to update our theme documentation around error templates 🔥 Don't use asset helper in ghost head - use getAssetUrl util instead! - removed TODO 📖 Update proxy docs 🎨 Simplify asset helper & add tests - this refactor is a step prior to moving this from metadata to being a url util - needed to skip some new tests 🐛 Add missing handler for css file
2017-04-10 11:30:21 +02:00
whet.extend@~0.9.9:
version "0.9.9"
resolved "https://registry.yarnpkg.com/whet.extend/-/whet.extend-0.9.9.tgz#f877d5bf648c97e5aa542fadc16d6a259b9c11a1"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
which-pm-runs@^1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/which-pm-runs/-/which-pm-runs-1.0.0.tgz#670b3afbc552e0b55df6b7780ca74615f23ad1cb"
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
which@1, which@^1.1.1, which@^1.2.14, which@^1.2.9, which@~1.3.0:
version "1.3.1"
resolved "https://registry.yarnpkg.com/which/-/which-1.3.1.tgz#a45043d54f5805316da8d62f9f50918d3da70b0a"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
dependencies:
isexe "^2.0.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
wide-align@^1.1.0:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
version "1.1.3"
resolved "https://registry.yarnpkg.com/wide-align/-/wide-align-1.1.3.tgz#ae074e6bdc0c14a431e804e624549c633b000457"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 15:47:33 +02:00
string-width "^1.0.2 || 2"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
Removed ghost editor dependency (#8137) refs #7429 - ☢️ 👷🏻‍♀️ This PR removes the dependency on Ghost-Editor and replaces it with the Mobiledoc DOM renderer. It includes new DOM based default cards and atoms.
2017-03-14 19:07:33 +01:00
window-size@^0.1.4:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "0.1.4"
resolved "https://registry.yarnpkg.com/window-size/-/window-size-0.1.4.tgz#f8e1aa1ee5a53ec5bf151ffa09742a6ad7697876"
wordwrap@^1.0.0, wordwrap@~1.0.0:
version "1.0.0"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-1.0.0.tgz#27584810891456a4171c8d0226441ade90cbcaeb"
wordwrap@~0.0.2:
version "0.0.3"
resolved "https://registry.yarnpkg.com/wordwrap/-/wordwrap-0.0.3.tgz#a3d5da6cd5c0bc0008d37234bbaf1bed63059107"
wrap-ansi@^2.0.0:
version "2.1.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/wrap-ansi/-/wrap-ansi-2.1.0.tgz#d8fc3d284dd05794fe84973caecdd1cf824fdd85"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
string-width "^1.0.1"
strip-ansi "^3.0.1"
wrappy@1:
version "1.0.2"
resolved "https://registry.yarnpkg.com/wrappy/-/wrappy-1.0.2.tgz#b5243d8f3ec1aa35f1364605bc0d1036e30ab69f"
Switch to Eslint (#9197) refs #9178 * Add eslint deps, remove old lint deps * Add eslint config, remove old lint configs * Config for server and tests are different * Tweaked rules to suit us * Fix linting in codebase - lots of indent changes. * Fix a real broken test
2017-11-01 14:44:54 +01:00
write@^0.2.1:
version "0.2.1"
resolved "https://registry.yarnpkg.com/write/-/write-0.2.1.tgz#5fc03828e264cea3fe91455476f7a3c566cb0757"
dependencies:
mkdirp "^0.5.1"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
xml2js@0.2.6:
version "0.2.6"
resolved "https://registry.yarnpkg.com/xml2js/-/xml2js-0.2.6.tgz#d209c4e4dda1fc9c452141ef41c077f5adfdf6c4"
dependencies:
sax "0.4.2"
xml@1.0.1:
version "1.0.1"
resolved "https://registry.yarnpkg.com/xml/-/xml-1.0.1.tgz#78ba72020029c5bc87b8a81a3cfcd74b4a2fc1e5"
xmlbuilder@0.4.2:
version "0.4.2"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/xmlbuilder/-/xmlbuilder-0.4.2.tgz#1776d65f3fdbad470a08d8604cdeb1c4e540ff83"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
xoauth2@~0.1.8:
version "0.1.8"
resolved "https://registry.yarnpkg.com/xoauth2/-/xoauth2-0.1.8.tgz#b916ff10ecfb54320f16f24a3e975120653ab0d2"
xregexp@2.0.0:
version "2.0.0"
resolved "https://registry.yarnpkg.com/xregexp/-/xregexp-2.0.0.tgz#52a63e56ca0b84a7f3a5f3d61872f126ad7a5943"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
xtend@^4.0.0, xtend@^4.0.1, xtend@~4.0.0, xtend@~4.0.1:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "4.0.1"
resolved "https://registry.yarnpkg.com/xtend/-/xtend-4.0.1.tgz#a5c6d532be656e23db820efb943a1f04998d63af"
y18n@^3.2.0:
version "3.2.1"
resolved "https://registry.yarnpkg.com/y18n/-/y18n-3.2.1.tgz#6d15fba884c08679c0d77e88e7759e811e07fa41"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
yallist@^2.1.2:
bump yarn.lock sub-dependencies no issue - run `yarn upgrade` to bump sub-dependencies
2017-04-04 14:13:26 +02:00
version "2.1.2"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-2.1.2.tgz#1c11f9218f076089a47dd512f93c6699a6a81d52"
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 18:49:42 +01:00
yallist@^3.0.0, yallist@^3.0.2:
🐛 Fixed all known filter limitations (#10159) refs #10105, closes #10108, closes https://github.com/TryGhost/Ghost/issues/9950, refs https://github.com/TryGhost/Ghost/issues/9923, refs https://github.com/TryGhost/Ghost/issues/9916, refs https://github.com/TryGhost/Ghost/issues/9574, refs https://github.com/TryGhost/Ghost/issues/6345, refs https://github.com/TryGhost/Ghost/issues/6309, refs https://github.com/TryGhost/Ghost/issues/6158, refs https://github.com/TryGhost/GQL/issues/16 - removed GQL dependency - replaced GQL with our brand new NQL implementation - fixed all known filter limitations - GQL suffered from some underlying filter bugs, which NQL tried to fix - the bugs were mostly in how we query the database for relation filtering - the underlying problem was caused by a too simple implementation of querying the relations - mongo-knex has implemented a more robust and complex filtering mechanism for relations - replaced logic in our bookshelf filter plugin - we pass the custom, default and override filters from Ghost to NQL, which then are getting parsed and merged into a mongo JSON object. The mongo JSON is getting attached by mongo-knex. NQL: https://github.com/NexesJS/NQL mongo-knex: https://github.com/NexesJS/mongo-knex
2018-12-11 11:53:40 +01:00
version "3.0.3"
resolved "https://registry.yarnpkg.com/yallist/-/yallist-3.0.3.tgz#b4b049e314be545e3ce802236d6cd22cd91c3de9"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
🔥 remove gulp (#8159) * remove gulpfile * remove gulp dependencies * Update README.md
2017-03-14 15:20:53 +01:00
yargs@^3.19.0:
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
version "3.32.0"
Bumped dependencies no issue
2019-01-21 13:33:20 +01:00
resolved "https://registry.yarnpkg.com/yargs/-/yargs-3.32.0.tgz#03088e9ebf9e756b69751611d2a5ef591482c995"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
camelcase "^2.0.1"
cliui "^3.0.3"
decamelize "^1.1.1"
os-locale "^1.4.0"
string-width "^1.0.1"
window-size "^0.1.4"
y18n "^3.2.0"
yauzl@2.4.1:
version "2.4.1"
resolved "https://registry.yarnpkg.com/yauzl/-/yauzl-2.4.1.tgz#9528f442dab1b2284e58b4379bb194e22e0c4005"
dependencies:
fd-slicer "~1.0.1"
zip-stream@^1.1.0:
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
version "1.2.0"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-1.2.0.tgz#a8bc45f4c1b49699c6b90198baacaacdbcd4ba04"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
dependencies:
archiver-utils "^1.3.0"
Optimised dependency tree no issue
2017-11-17 16:13:42 +01:00
compress-commons "^1.2.0"
✨add yarn.lock file and cleanup .travis.yml (#7853) no issue - add yarn.lock with latest dependencies - remove unused travis cache lines and install deps via yarn
2017-01-23 16:32:49 +01:00
lodash "^4.8.0"
readable-stream "^2.0.0"
Bumped archiver from version 1.3.0 to 3.0.0 refs #9389 - i wasn't able to find a breaking change which affect us - https://github.com/archiverjs/node-archiver/blob/master/CHANGELOG.md - we use it for downloading themes. this feature still works
2019-01-21 14:06:46 +01:00
zip-stream@^2.0.1:
version "2.0.1"
resolved "https://registry.yarnpkg.com/zip-stream/-/zip-stream-2.0.1.tgz#48a062488afe91dda42f823700fae589753ccd34"
dependencies:
archiver-utils "^2.0.0"
compress-commons "^1.2.0"
readable-stream "^2.0.0"
Reference in a new issue Copy permalink