tqt
/
Ghost
mirror of https://github.com/TryGhost/Ghost.git
2
1
Fork 0
Code Issues 1 Releases Wiki Activity
11,414 Commits 101 Branches 822 Tags 327 MiB
Commit Graph

1921 Commits

Author SHA1 Message Date
Vikas Potluri 935acfdb88
Updated tests locations and added linting of core/shared (#11872) 
* 🔥 removed duplicate error tests

* add lint:shared package script, and updated lint to run it as well

* moved test/unit/config to test/unit/shared/config
 2020-06-01 22:06:50 +01:00
Renovate Bot a5a57adc54 Update dependency sanitize-html to v1.25.0 2020-06-01 08:42:58 +01:00
Renovate Bot 9b9f8462e7 Update dependency @tryghost/members-api to v0.19.0 2020-05-28 19:06:39 +01:00
Renovate Bot c3e1e559e6
Update dependency @tryghost/vhost-middleware to v1.0.5 2020-05-27 02:23:53 +00:00
Renovate Bot 979a62deea
Update dependency @tryghost/session-service to v0.1.4 2020-05-27 00:23:02 +00:00
Renovate Bot d758f47771
Update dependency @tryghost/mw-session-from-token to v0.1.4 2020-05-26 22:29:49 +00:00
Renovate Bot c0149cf38e
Update dependency @tryghost/image-transform to v0.2.4 2020-05-26 20:20:58 +00:00
Renovate Bot e81ee45bb6
Update dependency @tryghost/adapter-manager to v0.1.6 2020-05-26 18:20:50 +00:00
Renovate Bot bddfc04289
Update dependency @tryghost/zip to v1.1.1 2020-05-26 16:56:41 +00:00
Renovate Bot 4bb413a7c7 Update dependency @tryghost/errors to v0.2.0 2020-05-26 17:51:31 +01:00
Daniel Lockyer 3bdce9686d v3.17.1 2020-05-26 15:55:46 +01:00
Daniel Lockyer 8bf173dc67 v3.17.0 2020-05-26 14:03:34 +01:00
Renovate Bot f205461bbf
Update dependency @tryghost/members-api to v0.18.7 2020-05-26 12:01:35 +00:00
Daniel Lockyer 26dd46a1ed Updated Ignition and @tryghost/errors dependencies 
no issue

- These dependencies needed to be bumped together
 2020-05-26 12:58:52 +01:00
Renovate Bot 0f414725e4 Update dependency eslint to v7 2020-05-26 12:37:15 +01:00
Daniel Lockyer 08b0c03c21 Pinned dependencies 
no issue

- pinned `@tryghost/members-api`
 2020-05-26 12:30:31 +01:00
Renovate Bot cf3ee559c1
Update dependency @tryghost/members-ssr to v0.7.10 2020-05-25 12:19:30 +00:00
Renovate Bot c149b3e9ad
Update dependency eslint-plugin-ghost to v1.5.0 2020-05-25 09:21:05 +00:00
Renovate Bot a345db6e3d
Update dependency mocha to v7.2.0 2020-05-25 00:23:07 +00:00
Renovate Bot caa1244492 Update dependency js-yaml to v3.14.0 2020-05-22 21:59:04 +01:00
Renovate Bot a23def6253 Update dependency sanitize-html to v1.24.0 2020-05-21 07:43:21 +01:00
Renovate Bot 5e5c498493 Update dependency uuid to v8.1.0 2020-05-20 23:09:02 +01:00
Rish 530760cfd0 Bumped @tryghost/members-api to 0.18.5 
refs https://github.com/TryGhost/members.js/issues/26

- Updates magic link token handling to read and update name on member signup
 2020-05-20 16:54:48 +05:30
Renovate Bot 2bd44ebee8
Update dependency @tryghost/members-ssr to v0.7.9 2020-05-20 09:15:55 +00:00
Daniel Lockyer 1f5b031bfa v3.16.1 2020-05-20 07:30:35 +01:00
Renovate Bot efdc230c7d
Update dependency @tryghost/members-ssr to v0.7.8 2020-05-19 16:44:05 +00:00
Rish 96b26d22f2 Bumped @tryghost/members-api to 0.18.4 
refs https://github.com/TryGhost/members.js/issues/20 , https://github.com/TryGhost/members.js/issues/29

- Adds metadata option to stripe checkout session for passing member info like name
- Updates subscription api to allow updating plan by nickname
- Refactored update member method to pick passed fields only and return with subscriptions
 2020-05-19 22:12:50 +05:30
Renovate Bot 3fc5cc021d
Update dependency @tryghost/session-service to v0.1.3 2020-05-18 20:19:28 +00:00
Renovate Bot 48a63dd99e
Update dependency @tryghost/mw-session-from-token to v0.1.3 2020-05-18 18:17:39 +00:00
Renovate Bot d15dce9086
Update dependency @tryghost/image-transform to v0.2.3 2020-05-18 15:16:57 +00:00
Renovate Bot 0cda4de484
Update dependency @tryghost/adapter-manager to v0.1.5 2020-05-18 13:48:01 +00:00
Daniel Lockyer 1da51ea8dc v3.16.0 2020-05-18 14:43:53 +01:00
Renovate Bot 17ee76c013
Update dependency mock-knex to v0.4.9 2020-05-13 17:15:11 +00:00
Renovate Bot 419ffea5cf
Update dependency @lodder/grunt-postcss to v2.0.3 2020-05-12 16:15:37 +00:00
Renovate Bot 399c0e4773
Update dependency eslint-plugin-ghost to v1.4.1 2020-05-11 09:16:31 +00:00
Renovate Bot f2defba264
Update dependency @tryghost/vhost-middleware to v1.0.4 2020-05-08 23:14:16 +00:00
Renovate Bot ddaa289338
Update dependency @tryghost/session-service to v0.1.2 2020-05-08 21:13:24 +00:00
Renovate Bot 803a0b697a
Update dependency @tryghost/mw-session-from-token to v0.1.2 2020-05-08 19:13:26 +00:00
Renovate Bot 9a0aaaa34f
Update dependency @tryghost/image-transform to v0.2.2 2020-05-08 17:15:18 +00:00
Renovate Bot fbad5b199f
Update dependency @tryghost/adapter-manager to v0.1.4 2020-05-08 15:58:44 +00:00
Hannah Wolfe 4af0a127cd Update dependency @tryghost/zip to v1.1.0 
closes #11794

- Update to use the latest version of zip, which has dotfile support
 2020-05-08 16:46:15 +01:00
Daniel Lockyer 11f7834800 v3.15.3 2020-05-08 12:17:18 +01:00
Daniel Lockyer d9bc5e0c16 Reverted oembed-parser dependency to 1.3.7 
no issue

- oember-parser 1.3.8/1.3.9 specify a minimum Node version of `>= 10.14.2`
- a problem with CI allowed this package to be updated, despite not
  matching our allowed minimum supported Node version
- this commit reverts back to the previous version, and this package
  will be bumped when we increase our minimum versions
 2020-05-08 11:28:14 +01:00
Daniel Lockyer 3c5839fa8d Reverted metascraper packages to 5.11.9 
no issue

- metascraper packages >= 5.11.10 have a dependency on got >= 11.0
- this has the minimum node version requirement set to `">=10.19.0"`
- our current minimum required node version is `10.13.0`, breaking installs for versions in between
- this reverts back metascraper packages to `5.11.9` to fix the minimum node version requirement
 2020-05-08 11:28:14 +01:00
Daniel Lockyer 89a56b9fd8 v3.15.2 2020-05-07 21:59:02 +01:00
Daniel Lockyer bcfde580c7 v3.15.1 2020-05-07 10:52:18 +01:00
Renovate Bot 02dd0df371
Update dependency oembed-parser to v1.3.9 2020-05-07 08:14:41 +00:00
Renovate Bot e5cc0cb130
Update dependency eslint-plugin-ghost to v1.4.0 2020-05-06 17:15:42 +00:00
Daniel Lockyer f0348014d7 v3.15.0 2020-05-06 13:43:38 +01:00
Renovate Bot 7b0efa34a4
Update dependency oembed-parser to v1.3.8 2020-05-06 11:16:05 +00:00
Renovate Bot 21f5912c2d
Update dependency metascraper-logo-favicon to v5.11.12 2020-05-04 15:15:40 +00:00
Kevin Ansfield 28b24d2095 Fixed video embed card fallback display across gmail apps 
refs https://github.com/TryGhost/Ghost/issues/11756

- bumped kg-default-cards package to generate fixed html for video embed fallbacks
 2020-05-01 13:22:52 +01:00
Renovate Bot f8c1d5b0e6
Update dependency gscan to v3.5.4 2020-05-01 10:15:50 +00:00
Renovate Bot 549ef7aaa9
Update dependency metascraper-logo-favicon to v5.11.11 2020-04-30 20:14:34 +00:00
Rish 87fa1db0c0 Bumped @tryghost/members-api to 0.18.3 
no issue

- This bump adds ability to pre-fill customer email in stripe checkout session
 2020-04-30 17:56:41 +05:30
Kevin Ansfield 81bf1667fa Fixed video embed card fallback display in Outlook 
refs https://github.com/TryGhost/Ghost/issues/11756

- updates `@tryghost/kg-default-cards` which includes a VML version of video embed card fallbacks
- fixes play button styling for Yahoo Mail
- adds a minimum height to video embeds so they appear more reasonable when images are not loaded
 2020-04-30 12:08:06 +01:00
Renovate Bot f8cecee05d
Update dependency @tryghost/members-ssr to v0.7.7 2020-04-30 10:45:08 +00:00
Renovate Bot cc7bd3992b Update dependency uuid to v8 2020-04-30 09:58:07 +01:00
Daniel Lockyer 182a64dbc5 Reverted "Updated pull request template" 
no issue

- this reverts commit f3bf2237e6
- ensuring regression tests pass should not be the full responsibility
  of the contributor so revert back to the prior advice
 2020-04-30 09:10:40 +01:00
Daniel Lockyer f3bf2237e6 Updated pull request template 
no issue

- adds `yarn test-all` for running the full test-suite and documents
  this in the PR template
 2020-04-30 08:26:17 +01:00
Renovate Bot e6dbf4ce47
Update dependency @tryghost/kg-markdown-html-renderer to v1.0.4 2020-04-29 19:38:11 +00:00
Renovate Bot 1c0db1dc87
Update dependency @tryghost/kg-card-factory to v1.0.3 2020-04-29 16:42:41 +00:00
Kevin Ansfield d255d98bbb ✨ Improved display of video embed cards in member emails 
refs core/server/api/canary/oembed.js

- updated `kg-default-cards` to a version that will render a thumbnail and play button overlay for video embed cards when rendering to an email target
- added styling for video embed play button overlays to members email template
 2020-04-29 16:44:20 +01:00
Renovate Bot a72c4e7905
Update dependency knex-migrator to v3.4.6 2020-04-28 15:55:06 +00:00
Renovate Bot ce48d36a49 Update dependency knex to v0.21.1 2020-04-28 08:48:46 +01:00
Renovate Bot 5161f497e2
Update metascraper to v5.11.10 2020-04-27 22:00:17 +00:00
Renovate Bot f60200fede Update dependency sqlite3 to v4.2.0 2020-04-27 22:59:30 +01:00
Daniel Lockyer 323117fe23 v3.14.0 2020-04-27 13:27:52 +01:00
Renovate Bot 08cfb5719a
Update dependency mocha to v7.1.2 2020-04-27 00:14:48 +00:00
Renovate Bot 97830fda41 Update dependency eslint-plugin-ghost to v1.3.0 2020-04-23 09:32:19 +01:00
Renovate Bot ca0f4635c9
Update dependency gscan to v3.5.3 2020-04-22 17:13:21 +00:00
Renovate Bot 5ed0f13a44
Update dependency @sentry/node to v5.15.5 2020-04-22 08:25:32 +00:00
Renovate Bot c54e50bd11
Update dependency @tryghost/members-ssr to v0.7.6 2020-04-21 12:32:31 +00:00
Renovate Bot 6fd4c65421
Update dependency @tryghost/members-api to v0.18.2 2020-04-21 10:05:23 +00:00
Renovate Bot 0e2147ba74 Update dependency knex to v0.21.0 2020-04-21 08:53:37 +01:00
Renovate Bot f002e62fc4
Update dependency knex-migrator to v3.4.5 2020-04-21 06:40:00 +00:00
Renovate Bot c15945ad23
Update dependency mock-knex to v0.4.8 2020-04-20 21:47:34 +00:00
Renovate Bot e2e18b3448
Update dependency gscan to v3.5.2 2020-04-20 18:18:04 +00:00
Daniel Lockyer ba36333a1f v3.13.4 2020-04-20 16:30:34 +01:00
Renovate Bot 2ea504255c
Update dependency ajv to v6.12.2 2020-04-20 00:15:31 +00:00
Kevin Ansfield 5c12bf3858
Update dependency @tryghost/kg-mobiledoc-html-renderer to v2.0.1 (#11750) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2020-04-17 14:13:15 +01:00
Renovate Bot 7104183c6f
Update dependency @tryghost/kg-default-cards to v1.1.1 2020-04-17 11:23:24 +00:00
Daniel Lockyer 88c11ffbb2 Updated eslint-plugin-ghost 
no issue
 2020-04-17 11:29:33 +01:00
Renovate Bot cdaa1b5dbb
Update dependency express-session to v1.17.1 2020-04-17 05:14:11 +00:00
Renovate Bot ccff9f095b
Update dependency @tryghost/members-ssr to v0.7.5 2020-04-17 03:25:45 +00:00
Renovate Bot 0dab0449c2
Update dependency @tryghost/members-api to v0.18.1 2020-04-17 02:11:58 +00:00
Renovate Bot 0d266bb3bb
Update dependency @tryghost/zip to v1.0.1 2020-04-17 00:18:23 +00:00
Renovate Bot 663400166a
Update dependency @tryghost/vhost-middleware to v1.0.3 2020-04-16 22:15:05 +00:00
Renovate Bot 4ee2be4b19
Update dependency @tryghost/session-service to v0.1.1 2020-04-16 20:15:01 +00:00
Renovate Bot b69684e05e
Update dependency @tryghost/image-transform to v0.2.1 2020-04-16 18:17:13 +00:00
Renovate Bot d68cd44c60
Update dependency @tryghost/mw-session-from-token to v0.1.1 2020-04-16 16:50:40 +00:00
Renovate Bot 9fce5d8ac0
Update dependency @tryghost/errors to v0.1.2 2020-04-16 15:26:26 +00:00
Renovate Bot 0d97a98eba
Update dependency @tryghost/adapter-manager to v0.1.3 2020-04-16 13:44:40 +00:00
Renovate Bot fa1fcd8870
Update dependency knex to v0.20.15 2020-04-15 22:54:22 +00:00
Renovate Bot 9ae5ce0f84
Update dependency @lodder/grunt-postcss to v2.0.2 2020-04-15 14:15:23 +00:00
Daniel Lockyer b018a07357 v3.13.3 2020-04-15 14:06:16 +01:00
Daniel Lockyer c192dcc36d v3.13.2 2020-04-15 11:40:33 +01:00
Renovate Bot 9f27eeab02
Update dependency semver to v7.3.2 2020-04-14 17:47:18 +00:00
Renovate Bot 05c2334898
Update dependency semver to v7.3.1 2020-04-14 16:58:53 +00:00
Renovate Bot 7e910b9c09
Update dependency knex-migrator to v3.4.4 2020-04-14 15:21:50 +00:00
Renovate Bot 531c5a3e6f
Update metascraper to v5.11.9 2020-04-14 10:41:21 +00:00
Renovate Bot af81cabf07 Update dependency semver to v7.3.0 2020-04-14 06:45:03 +01:00
Renovate Bot 9af9f8bed5
Update dependency knex to v0.20.14 2020-04-14 02:32:48 +00:00
Renovate Bot 6fb11a6ccc
Update dependency semver to v7.2.3 2020-04-13 19:29:58 +00:00
Renovate Bot 2216e0be21 Update dependency @tryghost/html-to-mobiledoc to v0.7.0 2020-04-13 20:28:57 +01:00
Renovate Bot 696879dca7 Update dependency jwks-rsa to v1.8.0 2020-04-13 20:28:24 +01:00
Renovate Bot 67d6f2dadb
Update dependency @tryghost/helpers to v1.1.27 2020-04-13 16:21:25 +00:00
Renovate Bot 7409a4247c
Update dependency @tryghost/url-utils to v0.6.18 2020-04-13 03:17:21 +00:00
Renovate Bot d00b91aa15
Update dependency @tryghost/string to v0.1.9 2020-04-13 00:18:05 +00:00
Renovate Bot a34c76d823
Update dependency @tryghost/social-urls to v0.1.9 2020-04-10 22:18:37 +00:00
Renovate Bot 88d36e230a
Update dependency @tryghost/html-to-mobiledoc to v0.6.7 2020-04-10 20:16:30 +00:00
Renovate Bot 6ce5a6c16e
Update dependency @tryghost/helpers to v1.1.26 2020-04-10 18:47:17 +00:00
Renovate Bot 415554c600
Update dependency semver to v7.2.2 2020-04-10 16:03:41 +00:00
Renovate Bot 92cf910b05 Update dependency gscan to v3.5.1 2020-04-10 13:36:58 +01:00
Renovate Bot f3ed965987 Update dependency @tryghost/kg-default-cards to v1.1.0 2020-04-10 10:28:06 +01:00
Kevin Ansfield f3627c5fc3 Update dependency @tryghost/kg-markdown-html-renderer to v2.0.0 
no issue

- `version` integer parameter in the `render` method has been replaced with an `options` object parameter
 2020-04-09 21:10:03 +01:00
Renovate Bot 8f65de87c7 Update dependency sanitize-html to v1.23.0 2020-04-09 21:00:19 +01:00
Renovate Bot 43434e1f7d
Update dependency @tryghost/kg-markdown-html-renderer to v1.0.3 2020-04-08 23:19:18 +00:00
Renovate Bot a49980e767
Update dependency @tryghost/kg-default-cards to v1.0.2 2020-04-08 21:16:46 +00:00
Renovate Bot 30c79555f0
Update dependency @tryghost/kg-card-factory to v1.0.2 2020-04-08 19:50:29 +00:00
Kevin Ansfield b37ac8ef1f Switched to extracted `@tryghost/mobiledoc-dom-renderer` package 
no issue

- moved `mobiledoc.renderers.mobiledocHtmlRenderer` to `mobiledoc.mobiledocHtmlRenderer` so that it's easier for the getter to access the parent objects getters
- removed all tests and dependencies that now live in @tryghost/mobiledoc-dom-renderer
  - kept the `mobiledocHtmlRenderer` test because that's testing that we've correctly wired up our cards and atoms and the output is what we expect
 2020-04-08 18:27:12 +01:00
Renovate Bot 26dfc02d48 Update dependency @tryghost/zip to v1 2020-04-08 16:09:08 +01:00
Kevin Ansfield 294187c41f Switched to extracted `@tryghost/kg-default-atoms` package 
no issue

- removed code that now lives in the external Koenig monorepo
 2020-04-08 14:49:44 +01:00
Renovate Bot b2fa6b9878
Update dependency sinon to v9.0.2 2020-04-08 11:48:38 +00:00
Renovate Bot ac746251e7
Update dependency bookshelf-relations to v1.3.2 2020-04-08 08:16:23 +00:00
Renovate Bot 3b637ce259
Update dependency knex-migrator to v3.4.3 2020-04-08 06:43:10 +00:00
Renovate Bot 1daaf075aa
Update dependency express-jwt to v5.3.3 2020-04-07 15:08:49 +00:00
Daniel Lockyer 5b942fc7e4 v3.13.1 2020-04-07 16:03:38 +01:00
Daniel Lockyer fb955a2a0a Bumped @tryghost/adapter-manager to 0.1.2 
no issue
 2020-04-07 15:43:46 +01:00
Fabien O'Carroll 1fcf82cde3 Bumbed @tryghost/adapter-manager to 0.1.1 
no-issue

This fixes an issue with storage adapters inheriting from an older
version of ghost-storage-base
 2020-04-07 15:32:13 +02:00
Daniel Lockyer bebfe140be v3.13.0 2020-04-07 11:12:53 +01:00
Renovate Bot 3ebae36c0a Update dependency knex to v0.20.13 2020-04-07 10:49:12 +01:00
Daniel Lockyer 29647870f1 Pinned dependencies 
no issue
 2020-04-07 09:36:05 +01:00
Renovate Bot ec49a362b8 Update dependency semver to v7.2.1 2020-04-07 08:27:48 +01:00
Renovate Bot f60b3f5607
Update dependency gscan to v3.4.1 2020-04-06 17:10:36 +00:00
Renovate Bot 4ee0b92eac
Update dependency express-hbs to v2.3.3 2020-04-06 15:42:24 +00:00
Fabien O'Carroll a701ee7023
Added support for token session to /ghost (#11709) 
no-issue

* Added default for getting origin of request

This function is used to attach the origin of the request to the
session, and later check that requests using the session are coming from
the same origin. This protects us against CSRF attacks as requests in
the browser MUST originate from the same origin on which the user
logged in.

Previously, when we could not determine the origin we would return
null, as a "safety" net.

This updates the function to use a secure and sensible default - which
is the origin of the Ghost-Admin application, and if that's not set -
the origin of the Ghost application.

This will make dealing with magic links simpler as you can not always
guaruntee the existence of these headers when visiting via a hyperlink

* Removed init fns and getters from session service

This simplifies the code here, making it easier to read and maintain

* Moved express-session initialisation to own file

This is complex enough that it deserves its own module

* Added createSessionFromToken to session service

* Wired up the createSessionFromToken middleware
 2020-04-06 11:49:14 +02:00
Renovate Bot 12d6b05498
Update metascraper to v5.11.8 2020-04-06 00:17:00 +00:00
Fabien O'Carroll fb942af1db Added adapter-manager service 
no-issue

This services handles the registration and retrieval of adapters,
it normalises the config to look like:

{
    [adapterType]: {
        active: adapterName,
        [adapterName]: adapterConfig
    }
}
 2020-04-05 21:13:47 +02:00
Daniel Lockyer 2d42af8d72 Removed unused release-utils dependency 
no issue

- this is no longer needed because we moved the main release code
  out
 2020-04-03 14:25:28 +01:00
Daniel Lockyer 92aebc21f4 Updated Ghost-SDK packages 
no issue
 2020-04-03 10:43:35 +01:00
Renovate Bot deb1118714
Update dependency @tryghost/helpers to v1.1.25 2020-04-03 08:17:33 +00:00
Fabien O'Carroll 23154f0739
Refactored session service (#11701) 
* Refactored SessionStore to use @tryghost/errors

no-issue

* Updated tests to test exposed API

no-issue

This will make refactoring easier, as we only have the "public" contract to maintain

* Refactored session functionality to SessionService

no-issue

This splits the session logic away from the HTTP responding logic,
which will allows us to decouple session creation/modification from the
API. Eventually this can be used to create sessions based on magiclink
style tokens.

* Instantiated and exported the new SessionService

no-issue

* Refactored session middleware to take session service

no-issue

This removes duplication of code and makes the middleware more explicit
that it's just a wrapper around the session service.

* Updated to use external @tryghost/session-service

no-issue
 2020-04-02 16:27:31 +02:00
Daniel Lockyer 5a748ee5a9 Updated eslint-plugin-ghost dependency 
no issue
 2020-04-02 14:11:33 +01:00
Renovate Bot f8f8a4b597
Update dependency express-hbs to v2.3.2 2020-04-01 18:04:24 +00:00
Daniel Lockyer 5989400df7 Removed unused chalk dependency 
no issue

- left over from removing the stable branch warning from the Gruntfile
- it's not used anywhere else
 2020-04-01 19:02:55 +01:00
Hannah Wolfe e4404f9b9a Removed unnecessary dependency matchdep 
- Don't really need a dependency here, can work without it
- matchdep hasn't been updated in 3 years, and has a web of potentially insecure dependencies
- Unlikely to affect us, but safer to go without
 2020-04-01 17:50:03 +01:00
Hannah Wolfe c3e0e82604 Removed unused grunt-cli dependency 
- this should be installed globally
 2020-04-01 17:50:03 +01:00
Hannah Wolfe 9cf4312ae2 Removed misc unused dependencies 2020-04-01 15:38:26 +01:00
Renovate Bot 36a55eb0a4 Pin dependencies 2020-04-01 15:35:02 +01:00
Daniel Lockyer 02bf8773b9 Automated the release process 
no issue
 2020-04-01 15:17:52 +01:00
Renovate Bot 634b5e83a2
Update dependency uuid to v7.0.3 2020-04-01 12:49:34 +00:00
Hannah Wolfe 25f51056f5 Remove unused dev dependency should-http 2020-04-01 13:30:38 +01:00
Hannah Wolfe a4175ff218 Swapped grunt-cssnano for grunt-postcss+cssnano 
- The grunt-cssnano plugin is old and no longer maintained
- It uses insecure dependencies that don't really impact us, but we want to get rid of warnings
- Swapping for grunt-postcss+cssnano is a more up-to-date way of sorting this out
 2020-04-01 13:17:49 +01:00
Hannah Wolfe 7f1d3ebc07
Move tests from core to root (#11700) 
- move all test files from core/test to test/
- updated all imports and other references
- all code inside of core/ is then application code
- tests are correctly at the root level
- consistent with other repos/projects

Co-authored-by: Kevin Ansfield <kevin@lookingsideways.co.uk>
 2020-03-30 16:26:47 +01:00
Renovate Bot 4c554ae131 Update dependency @tryghost/image-transform to v0.2.0 2020-03-30 10:55:07 +01:00
Daniel Lockyer d35fd96abb Updated grunt-mocha-cli dependency 
no issue
 2020-03-30 10:52:48 +01:00
renovate[bot] f0f22d80b3
Update dependency bookshelf to v0.15.2 (#10982) 
Co-authored-by: Renovate Bot <bot@renovateapp.com>
 2020-03-30 22:42:25 +13:00
Kevin Ansfield b984da9839 🐛 Fixed "Incorrectly eaten value" error if markdown footnote has trailing newline whitespace 
no issue

- update `url-utils` dependency which contains a fixed version of remark footnote parsing
 2020-03-29 20:26:04 +01:00
Renovate Bot 4042a7f952
Update dependency @sentry/node to v5.15.4 2020-03-27 13:49:59 +00:00
Renovate Bot 3a04fd5623
Update dependency @sentry/node to v5.15.3 2020-03-27 10:23:45 +00:00
Renovate Bot 73c8edd03b
Update dependency @tryghost/url-utils to v0.6.15 2020-03-27 04:24:17 +00:00
Renovate Bot 92adad098c
Update dependency @tryghost/string to v0.1.7 2020-03-27 02:16:31 +00:00
Renovate Bot fb5d6e94a8
Update dependency @tryghost/social-urls to v0.1.7 2020-03-27 00:43:20 +00:00
Renovate Bot 9ad7ad22a7
Update dependency @tryghost/html-to-mobiledoc to v0.6.5 2020-03-26 23:17:01 +00:00
Renovate Bot 50f67cf0dd
Update dependency @tryghost/helpers to v1.1.24 2020-03-26 21:30:56 +00:00
Renovate Bot 06df6e5799
Update dependency node-jose to v1.1.4 2020-03-26 19:17:47 +00:00
Renovate Bot ad09d2902a
Update dependency @sentry/node to v5.15.2 2020-03-26 17:29:21 +00:00
Renovate Bot 1f013190f1
Update dependency @tryghost/string to v0.1.6 2020-03-26 16:50:43 +00:00
Daniel Lockyer 120bfe1295 Version bump to 3.12.1 2020-03-26 14:29:12 +00:00
Renovate Bot ded7bbc819
Update dependency @tryghost/errors to v0.1.1 2020-03-26 13:21:21 +00:00
Daniel Lockyer 3722293392 Pinned dependencies 
no issue
 2020-03-26 13:20:23 +00:00
Renovate Bot 5e40078591
Update dependency @sentry/node to v5.15.1 2020-03-26 10:37:54 +00:00
Kevin Ansfield 1ee1e68adf Replaced mobiledoc cards with @tryghost/kg-default-cards 
no issue

- moved card definitions to a new library `@tryghost/kg-default-cards`
- moved `createCard` factory function to a new library `@tryghost/kg-card-factory`
 2020-03-25 19:54:11 +00:00
Renovate Bot a5b14419af
Update dependency eslint-plugin-ghost to v1.0.1 2020-03-25 18:31:55 +00:00
Hannah Wolfe d9dfdd775e
Replaced image manipulation w/ @tryghost/image-transform (#11687) 
- moved image.manipulation lib to a new package called @tryghost/image-transform
- new package has an updated API signature, so the method calls have changed but the underlying code is identical
- removed the optional sharp dependency from Ghost, as this is now optionally required by the image-transform module
 2020-03-25 17:33:03 +00:00
Kevin Ansfield c65c9c1e5e Extracted markdown-html-renderer to @tryghost/kg-markdown-html-renderer 
no issue

- prep for further extraction of mobiledoc cards and renderer
 2020-03-25 13:35:32 +00:00
Hannah Wolfe 72db5a67ca Added new @tryghost/errors package 
- this will replace common.errors throughout the codebase
- allows us to break more pieces of ghost out into modules as it's a common dependency
 2020-03-25 10:26:51 +00:00
Daniel Lockyer 5030be31cf Version bump to 3.12.0 2020-03-23 12:23:44 +00:00
Renovate Bot 98e606260b Update Test & linting packages 2020-03-23 01:16:13 +00:00
Renovate Bot 24f001c8d3 Update dependency sharp to v0.25.2 2020-03-20 23:16:43 +00:00
Renovate Bot e7c9b8b9d8 Update dependency @tryghost/vhost-middleware to v1.0.2 2020-03-20 22:19:18 +00:00
Hannah Wolfe 5ea10b47bd Replaced zip tools with @tryghost/zip 
- Moved zipFolder to a new package
- also exposing extract-zip from the new package
- new package has the API pre-promisified
- also uses @tryghost/extract-zip instead of extract-zip, which has bugfixes
 2020-03-20 21:08:57 +00:00
Renovate Bot 51e382cd0f Update dependency fs-extra to v9 2020-03-20 18:45:10 +00:00
Renovate Bot ba430d989a Update dependency @sentry/node to v5.15.0 2020-03-20 09:43:30 +00:00
Renovate Bot 19aadf100d Update dependency gscan to v3.4.0 2020-03-20 09:43:02 +00:00
Renovate Bot 0507841c9e Update dependency grunt to v1.1.0 2020-03-17 06:46:44 +00:00
Fabien O'Carroll d246a4761e Implemented externally verifiable identity tokens 
no-issue

This adds two new endpoints, one at /ghost/.well-known/jwks.json for exposing
a public key, and one on the canary api /identities, which allows the
Owner user to fetch a JWT.

This token can then be used by external services to verify the domain

* Added ghost_{public,private}_key settings

    This key can be used for generating tokens for communicating with
    external services on behalf of Ghost

* Added .well-known directory to /ghost/.well-known

    We add a jwks.json file to the .well-known directory which exposes a
    public JWK which can be used to verify the signatures of JWT's created
    by Ghost

    This is added to the /ghost/ path so that it can live on the admin
    domain, rather than the frontend. This is because most of its
    uses/functions will be in relation to the admin domain.

* Improved settings model tests

    This removes hardcoded positions in favour of testing that a particular
    event wasn't emitted which is less brittle and more precise about what's
    being tested

* Fixed parent app unit tests for well-known

    This updates the parent app unit tests to check that the well-known
    route is mounted. We all change proxyquire to use `noCallThru` which
    ensures that the ubderlying modules are not required. This stops the
    initialisation logic in ./well-known erroring in tests

https://github.com/thlorenz/proxyquire/issues/215

* Moved jwt signature to a separate 'token' propery

    This structure corresponds to other resources and allows to exptend with
    additional properties in future if needed
 2020-03-16 13:22:04 +01:00
Renovate Bot ccd586ea6e Update dependency rewire to v5 2020-03-16 09:28:32 +00:00
Renovate Bot 784ae3ddf1 Update dependency @tryghost/social-urls to v0.1.6 2020-03-16 08:06:39 +00:00
Renovate Bot 1288dce961 Update dependency @tryghost/url-utils to v0.6.14 2020-03-16 08:06:26 +00:00
Renovate Bot f645e20b92 Update dependency @tryghost/helpers to v1.1.23 2020-03-16 08:06:14 +00:00
Renovate Bot 118c546e8c Update dependency sanitize-html to v1.22.1 2020-03-16 06:54:56 +00:00
Renovate Bot 0372616421 Update dependency @sentry/node to v5.14.2 2020-03-16 06:51:51 +00:00
Kevin Ansfield 531ef01c48 Update dependency @tryghost/html-to-mobiledoc to v0.6.4 
no issue

- includes fixes for html->mobiledoc conversion
  - fixes multiple spaces appearing in text content if source content is indented and has newlines
  - fixes crash if source content has `<li>` elements containing headers
  - fixes crash if source content has non-`<li>` top-level elements inside a list
  - fixes `blockquote>p` markup in source content losing blockquote styling
 2020-03-12 18:57:06 +00:00
Daniel Lockyer 303def2045 Version bump to 3.11.0 2020-03-10 13:02:54 +00:00
Daniel Lockyer 52ccd4648f Version bump to 3.10.0 2020-03-09 10:49:09 +00:00
Renovate Bot 4215cee395 Update dependency sharp to v0.25.1 2020-03-09 07:53:07 +00:00
Renovate Bot 7fcb6c8e8f Update dependency uuid to v7.0.2 2020-03-09 07:33:53 +00:00
Renovate Bot 478a0668e4 Update dependency @sentry/node to v5.13.2 2020-03-09 07:33:32 +00:00