Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-06 22:40:14 -05:00
Code Issues Activity
ghost/package.json

234 lines
8.8 KiB
JSON
Raw Normal View History

Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 10:29:23 -05:00
{
Add editorconfig
2015-05-05 18:54:23 -05:00
"name": "ghost",
v5.2.2
2022-06-03 11:50:37 -05:00
"version": "5.2.2",
Site description fixture update (#8763) No issue
2017-07-27 03:26:31 -05:00
"description": "The professional publishing platform",
Add editorconfig
2015-05-05 18:54:23 -05:00
"author": "Ghost Foundation",
Changed http to https links no issue - use https - replace broken links e.g. docs.ghost.org/themes
2018-07-20 16:42:39 -05:00
"homepage": "https://ghost.org",
Add editorconfig
2015-05-05 18:54:23 -05:00
"keywords": [
"ghost",
"blog",
Updated npm keywords (#10217) no issue
2018-12-03 06:04:05 -05:00
"cms",
"headless",
"content",
"markdown"
Add editorconfig
2015-05-05 18:54:23 -05:00
],
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"bugs": "https://github.com/TryGhost/Ghost/issues",
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
Update to use SPDX idetifier Per https://docs.npmjs.com/files/package.json#license. Removes warning on install.
2015-05-25 23:00:32 -05:00
"license": "MIT",
Add editorconfig
2015-05-05 18:54:23 -05:00
"scripts": {
"start": "node index",
Fixed yarn dev refs: https://github.com/TryGhost/Ghost/commit/7e6800b2b88d20942b0a3058a3d16cbab5f9bca7 - I kept flip-flopping on making grunt dev into grunt and removing it so we have to remember to use `yarn dev` and fucked it up entirely - Do the simple thing for now - and think about how we can make grunt dev better overall
2021-07-06 02:22:25 -05:00
"dev": "grunt dev",
"dev:debug": "DEBUG=ghost:* grunt dev",
🐛 Fixed installation on windows #10890 (#12096) closes #10890 - use platform agnostic `exit 0` to allow `yarn setup` to work on windows - requires powershell to be run as admin
2020-08-03 14:15:58 -05:00
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || (exit 0)",
Improved dev tooling (#13118) This commit achieves a few things: - ☑️ No longer having to remember whether a command is yarn something or grunt something - ☑️ Simplification of tools hopefully making them easier to remember and use - ☑️ Complete removal of the need for grunt from our test tooling Several of the tools still use grunt under the hood, but the **entrypoint** should aways be `yarn xxx`. - `grunt main` -> `yarn main` - `grunt dev` -> `yarn dev` - `grunt build` -> `yarn build` - `grunt test:file-or-folder` -> `yarn test file-or-folder` - `grunt test-unit` -> `yarn test:unit` - `grunt test-acceptance` -> `yarn test:acceptance` - `grunt test-regression` -> `yarn test:regression` - `grunt validate` -> removed due to lack of use There is now also `yarn test:all` to run all 3 classes of tests This PR also reorders & restructures the Gruntfile extensively so that: - The remaining useful commands are all at the top of the file - Config and other blah happens after all the useful commands - All release-only config happens in the release task at the very end of the file --- DONE: * Removed all references to npm/bower * Removed all references to lint / deprecated command * Moved debug to yarn dev:debug * Removed all references to travis * Removed broken help task + useless comment * Removed unused knex-migrator and clean:test setup tasks * Added new test commands, removed grunt validate * Moved stubClientFiles to test utility and use in the few tests that need it * Used mocha in yarn directly except grunt test:x * Swapped grunt test for yarn test * extensive cleanup and reshuffling
2021-07-05 14:02:22 -05:00
"main": "grunt shell:main && grunt subgrunt:init",
"build": "grunt build",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js --timeout=60000",
Added integration test config & moved db-driven tests - some tests are necessarily driven from the db - these are like unit tests, except they only make sense if using the db - else you have to stub too much to make them worthwhile - for these rare but important cases, we have the clear concept of integration tests
2021-10-06 07:39:23 -05:00
"test:all": "yarn test:unit && yarn test:integration && yarn test:e2e && yarn lint",
Changed to use debug not console in acceptance tests - In an ideal world, our acceptance tests would be much, much faster - ATM we output how much time is spent on reloading Ghost for each suite, but this is output with console - Changed this to use DEBUG, so we don't clutter the UI normally - Added further debug statements, and a cumulative time, so we can see where time is spent/wasted - Added a DEBUG command for running acceptance tests with this output - This shows us that reloading Ghost accounts for 50% of the test time
2021-07-06 13:36:30 -05:00
"test:debug": "DEBUG=ghost:test* yarn test",
Configured CI to only calculate coverage for recommended Node version - we seem to be getting some odd numbers when running c8 on Node 12, and it's causing our CI checks to fail - even when we're adding tests, the coverage value goes down - this is disrupting the team from shipping, so we need to change that - this commit alters the setup to run unit tests w/ c8 for Node 16 unit tests, and without c8 for other versions - `yarn test:unit` is kept the same for everyday use
2022-03-07 08:38:45 -05:00
"test:unit": "c8 yarn test:unit:base",
"test:unit:base": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/unit' --timeout=2000",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test:integration": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/integration' --timeout=5000",
Added webhooks tests to test:e2e command refs https://github.com/TryGhost/Toolbox/issues/320 - Webhook tests are becoming a special type of tests and needed their own "home" to live in. Adding them to be a part of the e2e test command, so they are run the same way as the rest of e2e test suites
2022-05-30 02:51:45 -05:00
"test:e2e": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/e2e-api' './test/e2e-frontend' './test/e2e-server' './test/e2e-webhooks' --timeout=10000",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test:regression": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000",
Added demo E2E browser test refs https://github.com/TryGhost/Toolbox/issues/207 - we want to start writing some E2E tests that involve automated pointing and clicking around the frontend of Ghost to test that members of Ghost sites can still do what we expect - we've decided to look in to Playwright for this - it looks __really__ nice - this is a VERY basic first test - it'll check for a 200 on the homepage of whatever we provide as the TEST_URL env variable, or default to a (manually-run) Ghost instance on port 2368 - also adds a `yarn test:browser` command to run the tests using the Playwright CLI, and a sample GitHub Action workflow which we can manually run with a site URL - there's a lot more to add here in terms of test framework but this gets us started
2022-02-17 05:31:54 -05:00
"test:browser": "playwright test --browser=all test/e2e-browser",
Added `yarn test:ci` command refs https://github.com/TryGhost/Toolbox/issues/208 - we currently run all test commands separately in CI and this can make it harder to replicate any issues we see in CI because we have to manually go and copy the order of the tests - it's also nicer if there's just one command that runs so we can make changes globally to CI - this commit adds a test:ci yarn command which will run the tests in order of speed/importance, with the -b AKA fail-fast flag so we don't have to wait for all tests to run before finding out about issues - this also cleans up running unit tests in the DB matrix
2022-02-16 12:54:12 -05:00
"test:ci": "yarn test:e2e -b && yarn test:integration -b && yarn test:regression -b",
Added integration test config & moved db-driven tests - some tests are necessarily driven from the db - these are like unit tests, except they only make sense if using the db - else you have to stub too much to make them worthwhile - for these rare but important cases, we have the clear concept of integration tests
2021-10-06 07:39:23 -05:00
"test:unit:slow": "yarn test:unit --reporter=mocha-slow-test-reporter",
"test:int:slow": "yarn test:integration --reporter=mocha-slow-test-reporter",
"test:e2e:slow": "yarn test:e2e --reporter=mocha-slow-test-reporter",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test:reg:slow": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000 --reporter=mocha-slow-test-reporter",
Moved grunt-eslint to npm script executing eslint (#10474) refs #9441 * Updated top-level ids to use const * Removed one layer of indentation * Added .eslintignore files for server and test tasks * Added npm scripts for eslint * Fixed lint command in w/ grunt * Uninstalled grunt-eslint * Added eslint config
2019-02-11 07:26:06 -05:00
"lint:server": "eslint --ignore-path .eslintignore 'core/server/**/*.js' 'core/*.js' '*.js'",
Updated tests locations and added linting of core/shared (#11872) * :fire: removed duplicate error tests * add lint:shared package script, and updated lint to run it as well * moved test/unit/config to test/unit/shared/config
2020-06-01 16:06:50 -05:00
"lint:shared": "eslint --ignore-path .eslintignore 'core/shared/**/*.js'",
Added frontend lint comand in package.json no issue - The command was a missing bit for changes introduced in e10e71cc26ae62a2e22b785c214457b687dbac3d
2019-08-08 08:01:00 -05:00
"lint:frontend": "eslint --ignore-path .eslintignore 'core/frontend/**/*.js'",
Fixed path to eslint file for tests refs: https://github.com/TryGhost/Ghost/commit/d2c683813332a8a22c32a315405859dae15ecf26 - Changed the file type but neglected to update the config filepath for tests
2021-05-07 06:13:06 -05:00
"lint:test": "eslint -c test/.eslintrc.js --ignore-path test/.eslintignore 'test/**/*.js'",
Added new lint command for code only - allows for linting just code files, not the tests because the tests take a really long time to lint - I want to make eslint do more heavy lifting in terms of code style, so this will be useful as the warnings start to pile up
2021-04-27 04:34:52 -05:00
"lint:code": "yarn lint:server && yarn lint:shared && yarn lint:frontend",
Updated tests locations and added linting of core/shared (#11872) * :fire: removed duplicate error tests * add lint:shared package script, and updated lint to run it as well * moved test/unit/config to test/unit/shared/config
2020-06-01 16:06:50 -05:00
"lint": "yarn lint:server && yarn lint:shared && yarn lint:frontend && yarn lint:test",
Renamed "client" references to "admin" refs: https://github.com/TryGhost/Toolbox/issues/299 - renamed lots of things that reference Ghost admin as "client" - these things make even less sense in a post core/client world
2022-05-17 03:05:44 -05:00
"fix:admin": "yarn cache clean && cd core/admin && rm -rf node_modules tmp dist && yarn && cd ../../",
Added quick commands for resetting yarn - We keep having test issues caused by yarn, these fix commands help quickly check it's not a yarn problem - Have renamed fixmodulenotrequired to fix:client to make a nice consistent naming pattern that's easy to remember and type
2021-06-23 10:08:12 -05:00
"fix:server": "yarn cache clean && rm -rf node_modules && yarn",
Renamed "client" references to "admin" refs: https://github.com/TryGhost/Toolbox/issues/299 - renamed lots of things that reference Ghost admin as "client" - these things make even less sense in a post core/client world
2022-05-17 03:05:44 -05:00
"fix": "yarn fix:admin && yarn fix:server"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"engines": {
🔥 Dropped support for Node 12 refs https://github.com/TryGhost/Toolbox/issues/267 - Node 12 becomes EOL on April 30th so we're going to be dropping support for it in Ghost - this commit updates the Node engine ranges so CLI can pick this up, and drops 12.22.1 from the CI matrix
2022-04-19 09:53:44 -05:00
"node": "^14.17.0 || ^16.13.0",
⚙️ Bumped required Ghost-CLI version to 1.17.0 refs https://github.com/TryGhost/Team/issues/658 - Ghost-CLI 1.17.0 displays warnings when users are on an unsupported version of Node, or are running a Ghost version that is EOL - by bumping this here, we can force users to update to CLI 1.17.0 to get these features
2021-05-05 08:40:28 -05:00
"cli": "^1.17.0"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"dependencies": {
Update dependency @sentry/node to v6.19.7
2022-04-26 11:27:46 -05:00
"@sentry/node": "6.19.7",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/adapter-manager": "0.2.32",
Updated Tiers API data structure (#14795) refs https://github.com/TryGhost/Team/issues/1575 - Updates the admin-api-schema to reflect new data structure - Updates members-api to allow Portal to use new data structure - Data is only mapped at the serialised level to avoid changing the underlying implementation - Ensure only one version of domain-events present in yarn.lock
2022-05-16 13:47:18 -05:00
"@tryghost/admin-api-schema": "4.0.0",
Fixed typo in API version email notifications
2022-05-24 10:39:15 -05:00
"@tryghost/api-version-compatibility-service": "0.4.3",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/bookshelf-plugins": "0.4.3",
"@tryghost/bootstrap-socket": "0.2.21",
"@tryghost/color-utils": "0.1.19",
"@tryghost/config-url-helpers": "1.0.1",
"@tryghost/constants": "1.0.6",
Updated all `@tryghost` packages - these packages have had minor code changes or dependency updates but needed to be published to please Lerna
2022-05-12 10:50:18 -05:00
"@tryghost/custom-theme-settings-service": "0.3.3",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/database-info": "0.3.7",
"@tryghost/debug": "0.1.17",
Updated Tiers API data structure (#14795) refs https://github.com/TryGhost/Team/issues/1575 - Updates the admin-api-schema to reflect new data structure - Updates members-api to allow Portal to use new data structure - Data is only mapped at the serialised level to avoid changing the underlying implementation - Ensure only one version of domain-events present in yarn.lock
2022-05-16 13:47:18 -05:00
"@tryghost/domain-events": "0.1.14",
Updated all `@tryghost` packages - these packages have had minor code changes or dependency updates but needed to be published to please Lerna
2022-05-12 10:50:18 -05:00
"@tryghost/email-analytics-provider-mailgun": "1.0.9",
"@tryghost/email-analytics-service": "1.0.7",
Fixed typo in API version email notifications
2022-05-24 10:39:15 -05:00
"@tryghost/email-content-generator": "0.1.3",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/errors": "1.2.14",
Updated @tryghost packages - these packages contain small code changes or dependency updates that we've been forced to publish because of Lerna
2022-05-17 03:17:11 -05:00
"@tryghost/express-dynamic-redirects": "0.2.13",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/helpers": "1.1.71",
🎨 Reduced favicon requirements and added image formatting (#14918) fixes https://github.com/TryGhost/Team/issues/1652 fixes https://github.com/TryGhost/Ghost/issues/13319 **Image formatting** Added support for changing the format of images via the `handle-image-sizes` middleware (e.g. format SVG to png, jpeg, webp) This change was required: - Not all browsers support SVG favicons, so we need to convert them to PNGs - We can't fit image resizing and formatting in the `serve-favicon` middleware: we need to store the resized image to avoid resizing on every request. This system was already present in the `handle-image-sizes` middleware. To format an uploaded image: - Original URL: https://localhost/blog/content/images/2022/05/giphy.gif - To resize: https://localhost/blog/content/images/size/w256h256/2022/05/giphy.gif (already supported) - To resize and format to webp: https://localhost/blog/content/images/size/w256h256/format/webp/2022/05/giphy.gif - Animations are preserved when converting Gifs to Webp and in reverse, and also when only resizing (https://github.com/TryGhost/Ghost/issues/13319) **Favicons** - Custom favicons are no longer served via `/favicon.png` or `/favicon.ico` (only for default favicon), but use their full path - Added support for uploading more image extensions in Ghost as a favicon: .jpg, .jpeg, .gif, .webp and .svg are now supported (already supported .png and .ico). - File extensions other than jpg/jpeg, png, or ico will always get transformed to the image/png format to guarantee browser support (webp and svg images are not yet supported as favicons by all browsers). For all image formats, other than .ico files: - Allowed to upload images larger than 1000px in width and height, they will get cropped to 256x256px. - Allowed uploading favicons that are not square. They will get cropped automatically. - Allowed to upload larger files, up to 20MB (will get served at a lower file size after being resized) For .svg files: - The minimum size of 60x60px is no longer required. For .ico files: - The file size limit is increased to 200kb (coming from 100kb)
2022-05-27 09:36:53 -05:00
"@tryghost/image-transform": "1.1.0",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/job-manager": "0.8.25",
Update dependency @tryghost/kg-card-factory to v3.1.3 (#14396) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-01 03:24:53 -05:00
"@tryghost/kg-card-factory": "3.1.3",
Update dependency @tryghost/kg-default-atoms to v3.1.2 (#14397) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-01 04:42:51 -05:00
"@tryghost/kg-default-atoms": "3.1.2",
Fixed unquoted src and href attributes in product cards leading to missing __GHOST_URL__ transforms (#14398) closes https://github.com/TryGhost/Ghost/issues/14344 - Update dependency @tryghost/kg-default-cards to v5.16.2 - contains fix for unquoted `src` and `href` attributes in product cards that are not handled by our URL transform functions Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-01 03:23:40 -05:00
"@tryghost/kg-default-cards": "5.16.2",
Update dependency @tryghost/kg-markdown-html-renderer to v5.1.5 (#14399) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-01 03:25:35 -05:00
"@tryghost/kg-markdown-html-renderer": "5.1.5",
Update dependency @tryghost/kg-mobiledoc-html-renderer to v5.3.5 (#14400) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-04-01 04:43:02 -05:00
"@tryghost/kg-mobiledoc-html-renderer": "5.3.5",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/limit-service": "1.2.1",
"@tryghost/logging": "2.2.3",
Updated @tryghost packages - these packages contain small code changes or dependency updates that we've been forced to publish because of Lerna
2022-05-17 03:17:11 -05:00
"@tryghost/magic-link": "1.0.26",
"@tryghost/member-events": "0.4.6",
🐛 Fixed Stripe Checkout for Members w/ existing subscriptions (#14953) refs https://github.com/TryGhost/Team/issues/1526 This adds a check for existing subscriptions for a member associated with the email addressed used for Stripe Checkout, if any are found the Checkout Session creation fails and responds with a 403. We've also updated the error handling for the create-stripe-checkout-session endpoint so that it follows the existing Ghost API patterns.
2022-06-01 09:53:05 -05:00
"@tryghost/members-api": "8.1.3",
Updated Tiers API data structure (#14795) refs https://github.com/TryGhost/Team/issues/1575 - Updates the admin-api-schema to reflect new data structure - Updates members-api to allow Portal to use new data structure - Data is only mapped at the serialised level to avoid changing the underlying implementation - Ensure only one version of domain-events present in yarn.lock
2022-05-16 13:47:18 -05:00
"@tryghost/members-events-service": "0.4.3",
Removed GA feature flags (#14915) refs https://github.com/TryGhost/Team/issues/1616 - Removed all GA feature flags - Removed `tweetGridCard` alpha flag - Changes to `members-api` and `members-importer` packages: https://github.com/TryGhost/Members/compare/%40tryghost/members-api%408.1.1...%40tryghost/members-api%408.1.2
2022-05-26 02:54:30 -05:00
"@tryghost/members-importer": "0.5.16",
Updated @tryghost packages - these packages contain small code changes or dependency updates that we've been forced to publish because of Lerna
2022-05-17 03:17:11 -05:00
"@tryghost/members-offers": "0.11.6",
"@tryghost/members-ssr": "1.0.28",
Updated Tiers API data structure (#14795) refs https://github.com/TryGhost/Team/issues/1575 - Updates the admin-api-schema to reflect new data structure - Updates members-api to allow Portal to use new data structure - Data is only mapped at the serialised level to avoid changing the underlying implementation - Ensure only one version of domain-events present in yarn.lock
2022-05-16 13:47:18 -05:00
"@tryghost/members-stripe-service": "0.10.5",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/metrics": "1.0.14",
"@tryghost/minifier": "0.1.16",
"@tryghost/mw-api-version-mismatch": "0.2.2",
"@tryghost/mw-error-handler": "1.0.3",
"@tryghost/mw-session-from-token": "0.1.33",
"@tryghost/nodemailer": "0.3.24",
Fixed `date-fns` missing as a dependency declaration refs https://github.com/TryGhost/NQL/commit/fccee0614f3315096dc93b69639f1716512747b1 - `@tryghost/nql-lang` had `date-fns` declared as a devDependency but it was used within the library itself - the referenced commit moved it to `dependencies` and this commit bumps the packages in Ghost
2022-04-22 05:41:28 -05:00
"@tryghost/nql": "0.9.2",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/package-json": "1.0.22",
"@tryghost/pretty-cli": "1.2.28",
"@tryghost/promise": "0.1.19",
"@tryghost/request": "0.1.28",
"@tryghost/root-utils": "0.3.15",
"@tryghost/security": "0.3.2",
"@tryghost/session-service": "0.1.43",
"@tryghost/settings-path-manager": "0.1.8",
Updated @tryghost packages - these packages contain small code changes or dependency updates that we've been forced to publish because of Lerna
2022-05-17 03:17:11 -05:00
"@tryghost/social-urls": "0.1.32",
Fixed missing subscription deltas for reactivated subscriptions
2022-05-19 11:07:00 -05:00
"@tryghost/stats-service": "0.2.2",
Updated @tryghost packages - these packages contain small code changes or dependency updates that we've been forced to publish because of Lerna
2022-05-17 03:17:11 -05:00
"@tryghost/string": "0.1.26",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/tpl": "0.1.17",
Updated all `@tryghost` packages - these packages have had minor code changes or dependency updates but needed to be published to please Lerna
2022-05-12 10:50:18 -05:00
"@tryghost/update-check-service": "0.3.4",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/url-utils": "4.0.2",
"@tryghost/validator": "0.1.26",
Updated Tiers API data structure (#14795) refs https://github.com/TryGhost/Team/issues/1575 - Updates the admin-api-schema to reflect new data structure - Updates members-api to allow Portal to use new data structure - Data is only mapped at the serialised level to avoid changing the underlying implementation - Ensure only one version of domain-events present in yarn.lock
2022-05-16 13:47:18 -05:00
"@tryghost/verification-trigger": "0.2.5",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/version": "0.1.15",
"@tryghost/vhost-middleware": "1.0.26",
"@tryghost/zip": "1.1.26",
Update dependency amperize to v0.6.1
2020-03-01 19:20:46 -05:00
"amperize": "0.6.1",
Update dependency analytics-node to v6
2021-11-22 01:48:04 -05:00
"analytics-node": "6.0.0",
Update dependency bluebird to v3.7.2
2019-12-01 19:24:08 -05:00
"bluebird": "3.7.2",
Update dependency body-parser to v1.20.0
2022-04-04 08:19:42 -05:00
"body-parser": "1.20.0",
Updated bookshelf dependency to 1.2.0
2020-08-03 14:36:53 -05:00
"bookshelf": "1.2.0",
Update dependency bookshelf-relations to v2.4.0
2022-03-07 15:53:10 -05:00
"bookshelf-relations": "2.4.0",
Update dependency brute-knex to v4.0.1
2020-11-02 12:07:12 -05:00
"brute-knex": "4.0.1",
Update dependency bson-objectid to v2.0.3
2022-03-13 20:38:03 -05:00
"bson-objectid": "2.0.3",
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-22 23:17:49 -05:00
"bthreads": "0.5.1",
Added CLI command structure (#14821) Added CLI commands for REPL and timetravel functionality - Added TimeTravel command for updating test data with a date offset - Added REPL command for access to models and knex in development - Added pattern for creating new CLI commands, including - User input - Output - Validation of `NODE_ENV` - TimeTravel command is in the main Ghost repo because it requires the schema
2022-05-17 09:40:12 -05:00
"chalk": "4.1.2",
chore(package): update cheerio to version 0.22.0 (#7260) https://greenkeeper.io/
2016-09-19 06:32:40 -05:00
"cheerio": "0.22.0",
Update dependency compression to v1.7.4
2019-07-01 19:36:16 -05:00
"compression": "1.7.4",
Update dependency connect-slashes to v1.4.0
2019-07-02 05:03:51 -05:00
"connect-slashes": "1.4.0",
Update dependency cookie-session to v2
2022-03-24 07:37:31 -05:00
"cookie-session": "2.0.0",
Bumped dependencies no issue
2019-01-21 07:33:20 -05:00
"cors": "2.8.5",
Add editorconfig
2015-05-05 18:54:23 -05:00
"downsize": "0.0.8",
Update dependency express to v4.18.1
2022-04-29 16:07:20 -05:00
"express": "4.18.1",
Replace memory spam prevention with brute-express (#7579) no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging
2016-11-08 06:33:19 -05:00
"express-brute": "1.0.1",
Update dependency express-hbs to v2.4.0
2021-04-22 11:36:14 -05:00
"express-hbs": "2.4.0",
Update dependency express-jwt to v7.7.5
2022-05-31 16:02:21 -05:00
"express-jwt": "7.7.5",
⚡ Improved Ghost boot time and memory usage by lazy loading routes no issue - right now, we mount all API endpoints (v2, v3 and canary), alongside some other routes, when Ghost is booting. This is wasteful because we don't necessarily need any of the endpoints to get Ghost up and running - even when Admin is used, it uses `canary` so `v2` and `v3` sit in memory - the better approach here is to lazy load these endpoints, so they only get mounted when needed - this commit adds the `lazyUse` function into our Express lib, which takes a mount path and a module function to execute down the line. This gets passed to the wonderful `express-lazy-router` lib which detects when we're calling an unmounted module and will mount it for us - from local testing, this speeds up boot time by about 18% and reduces initial memory usage by about 6% 🚀
2021-10-11 05:06:03 -05:00
"express-lazy-router": "1.0.4",
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 05:02:39 -05:00
"express-query-boolean": "2.0.0",
Update dependency express-session to v1.17.3
2022-05-12 09:54:28 -05:00
"express-session": "1.17.3",
Update dependency fs-extra to v10.1.0
2022-04-18 10:32:12 -05:00
"fs-extra": "10.1.0",
🐛 Fixed extention missmatching .mp4 as invalid refs https://github.com/TryGhost/Toolbox/issues/120 - When a file name with an .mp4 extension was passed in it was mistakenly taken as an invalid extension. It is pretty valid! - Fixing this bug allows for for duplicate file detection when uploading valid valies with extensions containing numbers - Extensions that consiste only from numbers are still treated as invalid
2021-11-09 06:18:28 -05:00
"ghost-storage-base": "1.0.0",
Update dependency glob to v8.0.3
2022-05-13 18:55:59 -05:00
"glob": "8.0.3",
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 03:36:51 -05:00
"got": "9.6.0",
Updated gscan
2022-06-03 10:09:34 -05:00
"gscan": "4.31.2",
Update dependency html-to-text to v8 refs: https://github.com/TryGhost/Ghost/pull/13035 refs: https://github.com/TryGhost/Team/issues/1609 - Upgraded to the latest html-to-text - Matched the options to what we had as close as we can - The output changes slightly, but in most cases those are bugfixes - We are going to tune this output more soon, so accept the changes for now
2022-05-13 05:16:01 -05:00
"html-to-text": "8.2.0",
Update dependency image-size to v1.0.1
2022-01-11 03:32:11 -05:00
"image-size": "1.0.1",
chore(package): update intl to version 1.2.5 (#7411) https://greenkeeper.io/
2016-09-26 04:13:38 -05:00
"intl": "1.2.5",
Update dependency intl-messageformat to v5.4.3
2019-07-29 01:34:47 -05:00
"intl-messageformat": "5.4.3",
Update dependency js-yaml to v4.1.0
2021-04-14 16:51:55 -05:00
"js-yaml": "4.1.0",
Update dependency jsonpath to v1.1.1
2021-04-01 15:00:01 -05:00
"jsonpath": "1.1.1",
Update dependency jsonwebtoken to v8.5.1
2019-07-01 19:41:06 -05:00
"jsonwebtoken": "8.5.1",
Update dependency juice to v8
2021-05-26 03:23:00 -05:00
"juice": "8.0.0",
Update dependency keypair to v1.0.4
2021-10-11 16:11:01 -05:00
"keypair": "1.0.4",
Update dependency knex to v2.1.0
2022-05-26 11:37:11 -05:00
"knex": "2.1.0",
Updated packages
2022-06-01 09:44:02 -05:00
"knex-migrator": "5.0.0",
Update dependency lodash to v4.17.21
2021-02-22 16:53:57 -05:00
"lodash": "4.17.21",
Update dependency luxon to v2.4.0
2022-05-08 22:40:41 -05:00
"luxon": "2.4.0",
Installed mailgun-js@0.22.0 no-issue
2019-11-07 03:26:17 -05:00
"mailgun-js": "0.22.0",
Update metascraper
2022-05-29 20:34:06 -05:00
"metascraper": "5.29.8",
"metascraper-author": "5.29.7",
"metascraper-description": "5.29.7",
"metascraper-image": "5.29.7",
"metascraper-logo": "5.29.7",
"metascraper-logo-favicon": "5.29.7",
"metascraper-publisher": "5.29.7",
"metascraper-title": "5.29.7",
"metascraper-url": "5.29.7",
Revert "Update dependency moment to v2.26.0" This reverts commit dfb1f9aeae10cc129affe73def436c19df0599b1.
2020-06-11 08:20:08 -05:00
"moment": "2.24.0",
Reverted moment-timezone bump back to 0.5.23 refs #10870 - Added moment-timezone to Renovate's ignore list - Described reasoning in https://github.com/TryGhost/Ghost/issues/10870
2019-07-04 06:56:13 -05:00
"moment-timezone": "0.5.23",
Update dependency multer to v1.4.4
2021-12-07 12:04:32 -05:00
"multer": "1.4.4",
Switched to `mysql2` library refs https://github.com/TryGhost/Toolbox/issues/174 - this commit switches Ghost from using the `mysql` library to the `mysql2` one - we've done this for several reasons: - `mysql2` is more actively maintained - `mysql2` natively supports the default auth plugin on MySQL 8 - `mysql2` is fasterrrr - there have been various other commits refactoring the groundwork for this commit but this commit should be short and sweet: - alias `mysql` to `mysql2` client so we maintain backwards compatibility with all configs who use `"client": "mysql"` - enabled `decimalNumbers` so we maintain the same functionality as `mysql` - replaced the dependencies and updated `knex-migrator` - hardcoded the newer authentication plugin in MySQL 8 CI. Before switching to `mysql2`, this would break because it didn't support this
2022-03-02 10:13:03 -05:00
"mysql2": "2.3.3",
Update dependency nconf to v0.12.0
2022-04-14 23:37:47 -05:00
"nconf": "0.12.0",
Update dependency node-jose to v2.1.1
2022-03-30 16:57:56 -05:00
"node-jose": "2.1.1",
🐛 Fixed intermittent failures with embedding refs https://github.com/TryGhost/Team/issues/1235 - we are seeing `oembed-parser` 1.5.2 have intermittent issues when fetching oembed data - we're not sure of the reason but reverting the dependency to 1.4.9 seems to fix the issue - this commit reverted the bump in Ghost and adds it to Renovate's ignore list so it isn't automatically bumped in the future
2021-11-25 05:40:23 -05:00
"oembed-parser": "1.4.9",
deps: path-match@1.2.4
2016-04-21 04:44:58 -05:00
"path-match": "1.2.4",
Update dependency probe-image-size to v7.2.3
2022-03-09 15:44:38 -05:00
"probe-image-size": "7.2.3",
chore(package): update rss to version 1.2.2 (#7841) https://greenkeeper.io/
2017-01-11 14:42:13 -05:00
"rss": "1.2.2",
Update dependency sanitize-html to v2.7.0
2022-02-04 12:45:26 -05:00
"sanitize-html": "2.7.0",
Update dependency semver to v7.3.7
2022-04-13 04:46:32 -05:00
"semver": "7.3.7",
Added stoppable for graceful shutdown of requests - stopppable is a dependency that handles closing connections properly, which server.close does not - active connections are allowed to complete what they are doing - idle connections are closed - no new connections are allowed - we call stoppable in stop() instead of server.close so that idle connections don't hold the server open - calling await stop() from shutdown then ensures that we have a consistent experience of stop - all together this allows ghost to shutdown gracefully when there are long-running requests - @TODO: handle graceful shutdown of long-running processes - @TODO: consider do we need to send 503s whilst the server is shutting down?
2020-08-10 05:42:31 -05:00
"stoppable": "1.1.0",
🐛 Fixed embed/bookmark retrieval for sites that require cookies during redirects no issue - known failing case was Medium. Some *.medium.com articles triggered redirects but without cookies being stored/sent across the redirect requests it would cause an infinite redirect loop and we'd abort after 10 redirects - use `got`'s [cookie support](https://github.com/sindresorhus/got/tree/v9.6.0#cookies) via `tough-cookie` so that we can create bookmark cards for medium.com and other sites with similar problems
2020-06-17 04:03:36 -05:00
"tough-cookie": "4.0.0",
Update dependency uuid to v8.3.2
2020-12-08 16:23:14 -05:00
"uuid": "8.3.2",
deps: xml@1.0.1
2016-02-08 16:30:57 -05:00
"xml": "1.0.1"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"optionalDependencies": {
Updated all internal packages - these packages have had minor dependency bumps but we've been force to publish them because of Lerna - this commit updates all pending TryGhost packages ahead of release
2022-04-01 08:57:04 -05:00
"@tryghost/html-to-mobiledoc": "1.8.6",
Update dependency sqlite3 to v5.0.8
2022-05-06 07:52:08 -05:00
"sqlite3": "5.0.8"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"devDependencies": {
Update dependency @lodder/grunt-postcss to v3.1.1
2021-11-03 13:01:52 -05:00
"@lodder/grunt-postcss": "3.1.1",
Update dependency @playwright/test to v1.22.2
2022-05-22 21:17:49 -05:00
"@playwright/test": "1.22.2",
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/express-test": "0.11.1",
Fixed webhook snapshot test error output refs https://github.com/TryGhost/Toolbox/issues/320 - When the snapshot test failed a misleading error was showing up. The bump fixed that bug.
2022-05-30 02:54:56 -05:00
"@tryghost/webhook-mock-receiver": "0.1.1",
Update dependency c8 to v7.11.3
2022-05-16 19:26:57 -05:00
"c8": "7.11.3",
Update dependency cli-progress to v3.11.1
2022-05-17 09:41:10 -05:00
"cli-progress": "3.11.1",
Update dependency coffeescript to v2.7.0
2022-04-24 22:13:23 -05:00
"coffeescript": "2.7.0",
Updated packages
2022-06-01 09:44:02 -05:00
"cssnano": "5.1.10",
Update Test & linting packages
2022-06-05 22:00:14 -05:00
"eslint": "8.17.0",
Update dependency eslint-plugin-ghost to v2.14.0
2022-05-13 03:53:30 -05:00
"eslint-plugin-ghost": "2.14.0",
Update dependency grunt to v1.5.3
2022-05-10 08:45:55 -05:00
"grunt": "1.5.3",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 15:07:55 -05:00
"grunt-bg-shell": "2.3.3",
Update dependency grunt-contrib-clean to v2.0.1
2022-04-20 18:12:19 -05:00
"grunt-contrib-clean": "2.0.1",
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 09:46:02 -05:00
"grunt-contrib-compress": "2.0.0",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 15:07:55 -05:00
"grunt-contrib-copy": "1.0.0",
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 04:05:35 -05:00
"grunt-contrib-symlink": "1.0.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 08:47:33 -05:00
"grunt-contrib-watch": "1.1.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 12:49:42 -05:00
"grunt-express-server": "0.5.4",
Update dependency grunt-shell to v4
2022-03-24 07:06:09 -05:00
"grunt-shell": "4.0.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 06:08:32 -05:00
"grunt-subgrunt": "1.3.0",
Misc grunt /dev updates - Updated all dev dependencies in the root package.json - Added `--colors` to mocha when called from grunt test:... so that works better - Removed non-unit tests from coverage, because they're just not useful - Updated docker config to generate useful docs again - as a statement of intent, I also updated docs in key files - Setup grunt watch-docs task for documentation writing easyness
2015-05-28 10:16:09 -05:00
"grunt-update-submodules": "0.4.1",
Added CLI command structure (#14821) Added CLI commands for REPL and timetravel functionality - Added TimeTravel command for updating test data with a date offset - Added REPL command for access to models and knex in development - Added pattern for creating new CLI commands, including - User input - Output - Validation of `NODE_ENV` - TimeTravel command is in the main Ghost repo because it requires the schema
2022-05-17 09:40:12 -05:00
"inquirer": "8.2.4",
Update dependency jwks-rsa to v2.1.3
2022-05-20 06:42:30 -05:00
"jwks-rsa": "2.1.3",
Update dependency mocha to v10
2022-05-01 20:29:26 -05:00
"mocha": "10.0.0",
Pin dependency mocha-slow-test-reporter to 0.1.2
2021-07-05 04:53:57 -05:00
"mocha-slow-test-reporter": "0.1.2",
Switched to commit hash for TryGhost/mock-knex - I had to fork this dependency to add support for Knex 2.0 but yarn is weird and won't bump it if we use `master` because "nothing changed" - Using a hash should force yarn to pull the changes if the hash gets updated
2022-04-22 06:24:02 -05:00
"mock-knex": "TryGhost/mock-knex#8ecb8c227bf463c991c3d820d33f59efc3ab9682",
Update Test & linting packages
2022-06-05 22:00:14 -05:00
"nock": "13.2.6",
Update dependency papaparse to v5.3.2
2022-03-21 04:22:10 -05:00
"papaparse": "5.3.2",
Update dependency postcss to v8.4.14
2022-05-18 13:33:45 -05:00
"postcss": "8.4.14",
Update Test & linting packages
2022-02-07 07:00:37 -05:00
"rewire": "6.0.0",
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 03:45:51 -05:00
"should": "13.2.3",
Update dependency sinon to v14
2022-05-09 14:14:13 -05:00
"sinon": "14.0.0",
Update dependency supertest to v6.2.3
2022-04-26 21:05:34 -05:00
"supertest": "6.2.3",
Updated `tmp` dependency to v0.2.1 no issue - `tmp` 0.1.0 was broken and I added `tmp` to the Renovate ignore list to stop it creating PRs - https://github.com/TryGhost/Ghost/commit/082160106ae4fbedcf7de99b671d42e001ca2a89 - 0.2.1 is fixed again so we can merge the update and remove it from the list
2021-04-19 08:48:57 -05:00
"tmp": "0.2.1"
Added resolution for moment-timezone version refs #10870 - `moment-timezone` was bumped to `0.5.26` inadvertently as a result of bump to `url-utils` in https://github.com/TryGhost/Ghost/commit/6cb0f800c8220d371f007830344d376dbb07f094 - Added resolution makes sure we use `0.5.23` for `moment-timezone` till tests are updated to work with latest version
2019-07-30 08:06:26 -05:00
},
"resolutions": {
Updated packages
2022-06-01 09:44:02 -05:00
"@tryghost/logging": "2.2.3",
Added moment package resolution to pin 2.24.0 refs https://github.com/TryGhost/Ghost/commit/1a17f8069bd126df786795c8a9407ac69e54795b - sub-dependency update bumped moment versions to 2.27.0 which caused timezone problems again with dates not being written to the database in UTC - added a resolution in package.json to pin all moment sub-dependencies to the same version we specify in our top-level dependencies
2020-07-28 11:55:23 -05:00
"moment": "2.24.0",
Added resolution for moment-timezone version refs #10870 - `moment-timezone` was bumped to `0.5.26` inadvertently as a result of bump to `url-utils` in https://github.com/TryGhost/Ghost/commit/6cb0f800c8220d371f007830344d376dbb07f094 - Added resolution makes sure we use `0.5.23` for `moment-timezone` till tests are updated to work with latest version
2019-07-30 08:06:26 -05:00
"moment-timezone": "0.5.23"
Add editorconfig
2015-05-05 18:54:23 -05:00
}
Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 10:29:23 -05:00
}
Reference in a new issue Copy permalink