Infrastructure/ghost
0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-06 22:40:14 -05:00
Code Issues Activity
ghost/package.json

227 lines
8.5 KiB
JSON
Raw Normal View History

Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 10:29:23 -05:00
{
Add editorconfig
2015-05-05 18:54:23 -05:00
"name": "ghost",
v4.41.3
2022-03-25 11:00:32 -05:00
"version": "4.41.3",
Site description fixture update (#8763) No issue
2017-07-27 03:26:31 -05:00
"description": "The professional publishing platform",
Add editorconfig
2015-05-05 18:54:23 -05:00
"author": "Ghost Foundation",
Changed http to https links no issue - use https - replace broken links e.g. docs.ghost.org/themes
2018-07-20 16:42:39 -05:00
"homepage": "https://ghost.org",
Add editorconfig
2015-05-05 18:54:23 -05:00
"keywords": [
"ghost",
"blog",
Updated npm keywords (#10217) no issue
2018-12-03 06:04:05 -05:00
"cms",
"headless",
"content",
"markdown"
Add editorconfig
2015-05-05 18:54:23 -05:00
],
"repository": {
"type": "git",
"url": "git://github.com/TryGhost/Ghost.git"
},
"bugs": "https://github.com/TryGhost/Ghost/issues",
"contributors": "https://github.com/TryGhost/Ghost/graphs/contributors",
Update to use SPDX idetifier Per https://docs.npmjs.com/files/package.json#license. Removes warning on install.
2015-05-25 23:00:32 -05:00
"license": "MIT",
Add editorconfig
2015-05-05 18:54:23 -05:00
"scripts": {
"start": "node index",
Fixed yarn dev refs: https://github.com/TryGhost/Ghost/commit/7e6800b2b88d20942b0a3058a3d16cbab5f9bca7 - I kept flip-flopping on making grunt dev into grunt and removing it so we have to remember to use `yarn dev` and fucked it up entirely - Do the simple thing for now - and think about how we can make grunt dev better overall
2021-07-06 02:22:25 -05:00
"dev": "grunt dev",
"dev:debug": "DEBUG=ghost:* grunt dev",
🐛 Fixed installation on windows #10890 (#12096) closes #10890 - use platform agnostic `exit 0` to allow `yarn setup` to work on windows - requires powershell to be run as admin
2020-08-03 14:15:58 -05:00
"setup": "yarn install && knex-migrator init && grunt symlink && grunt init || (exit 0)",
Improved dev tooling (#13118) This commit achieves a few things: - ☑️ No longer having to remember whether a command is yarn something or grunt something - ☑️ Simplification of tools hopefully making them easier to remember and use - ☑️ Complete removal of the need for grunt from our test tooling Several of the tools still use grunt under the hood, but the **entrypoint** should aways be `yarn xxx`. - `grunt main` -> `yarn main` - `grunt dev` -> `yarn dev` - `grunt build` -> `yarn build` - `grunt test:file-or-folder` -> `yarn test file-or-folder` - `grunt test-unit` -> `yarn test:unit` - `grunt test-acceptance` -> `yarn test:acceptance` - `grunt test-regression` -> `yarn test:regression` - `grunt validate` -> removed due to lack of use There is now also `yarn test:all` to run all 3 classes of tests This PR also reorders & restructures the Gruntfile extensively so that: - The remaining useful commands are all at the top of the file - Config and other blah happens after all the useful commands - All release-only config happens in the release task at the very end of the file --- DONE: * Removed all references to npm/bower * Removed all references to lint / deprecated command * Moved debug to yarn dev:debug * Removed all references to travis * Removed broken help task + useless comment * Removed unused knex-migrator and clean:test setup tasks * Added new test commands, removed grunt validate * Moved stubClientFiles to test utility and use in the few tests that need it * Used mocha in yarn directly except grunt test:x * Swapped grunt test for yarn test * extensive cleanup and reshuffling
2021-07-05 14:02:22 -05:00
"main": "grunt shell:main && grunt subgrunt:init",
"build": "grunt build",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js --timeout=60000",
Added integration test config & moved db-driven tests - some tests are necessarily driven from the db - these are like unit tests, except they only make sense if using the db - else you have to stub too much to make them worthwhile - for these rare but important cases, we have the clear concept of integration tests
2021-10-06 07:39:23 -05:00
"test:all": "yarn test:unit && yarn test:integration && yarn test:e2e && yarn lint",
Changed to use debug not console in acceptance tests - In an ideal world, our acceptance tests would be much, much faster - ATM we output how much time is spent on reloading Ghost for each suite, but this is output with console - Changed this to use DEBUG, so we don't clutter the UI normally - Added further debug statements, and a cumulative time, so we can see where time is spent/wasted - Added a DEBUG command for running acceptance tests with this output - This shows us that reloading Ghost accounts for 50% of the test time
2021-07-06 13:36:30 -05:00
"test:debug": "DEBUG=ghost:test* yarn test",
Configured CI to only calculate coverage for recommended Node version - we seem to be getting some odd numbers when running c8 on Node 12, and it's causing our CI checks to fail - even when we're adding tests, the coverage value goes down - this is disrupting the team from shipping, so we need to change that - this commit alters the setup to run unit tests w/ c8 for Node 16 unit tests, and without c8 for other versions - `yarn test:unit` is kept the same for everyday use
2022-03-07 08:38:45 -05:00
"test:unit": "c8 yarn test:unit:base",
"test:unit:base": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/unit' --timeout=2000",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test:integration": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/integration' --timeout=5000",
"test:e2e": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/e2e-api' './test/e2e-frontend' './test/e2e-server' --timeout=10000",
"test:regression": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000",
Added demo E2E browser test refs https://github.com/TryGhost/Toolbox/issues/207 - we want to start writing some E2E tests that involve automated pointing and clicking around the frontend of Ghost to test that members of Ghost sites can still do what we expect - we've decided to look in to Playwright for this - it looks __really__ nice - this is a VERY basic first test - it'll check for a 200 on the homepage of whatever we provide as the TEST_URL env variable, or default to a (manually-run) Ghost instance on port 2368 - also adds a `yarn test:browser` command to run the tests using the Playwright CLI, and a sample GitHub Action workflow which we can manually run with a site URL - there's a lot more to add here in terms of test framework but this gets us started
2022-02-17 05:31:54 -05:00
"test:browser": "playwright test --browser=all test/e2e-browser",
Added `yarn test:ci` command refs https://github.com/TryGhost/Toolbox/issues/208 - we currently run all test commands separately in CI and this can make it harder to replicate any issues we see in CI because we have to manually go and copy the order of the tests - it's also nicer if there's just one command that runs so we can make changes globally to CI - this commit adds a test:ci yarn command which will run the tests in order of speed/importance, with the -b AKA fail-fast flag so we don't have to wait for all tests to run before finding out about issues - this also cleans up running unit tests in the DB matrix
2022-02-16 12:54:12 -05:00
"test:ci": "yarn test:e2e -b && yarn test:integration -b && yarn test:regression -b",
Added integration test config & moved db-driven tests - some tests are necessarily driven from the db - these are like unit tests, except they only make sense if using the db - else you have to stub too much to make them worthwhile - for these rare but important cases, we have the clear concept of integration tests
2021-10-06 07:39:23 -05:00
"test:unit:slow": "yarn test:unit --reporter=mocha-slow-test-reporter",
"test:int:slow": "yarn test:integration --reporter=mocha-slow-test-reporter",
"test:e2e:slow": "yarn test:e2e --reporter=mocha-slow-test-reporter",
Revert "Added global setup to reset DB before test run" This reverts commit d50fb7c92205cfc18f3dd912e9c47db9be31d0e2.
2022-03-16 16:10:49 -05:00
"test:reg:slow": "mocha --require=./test/utils/overrides.js --exit --trace-warnings --recursive --extension=test.js './test/regression' --timeout=60000 --reporter=mocha-slow-test-reporter",
Moved grunt-eslint to npm script executing eslint (#10474) refs #9441 * Updated top-level ids to use const * Removed one layer of indentation * Added .eslintignore files for server and test tasks * Added npm scripts for eslint * Fixed lint command in w/ grunt * Uninstalled grunt-eslint * Added eslint config
2019-02-11 07:26:06 -05:00
"lint:server": "eslint --ignore-path .eslintignore 'core/server/**/*.js' 'core/*.js' '*.js'",
Updated tests locations and added linting of core/shared (#11872) * :fire: removed duplicate error tests * add lint:shared package script, and updated lint to run it as well * moved test/unit/config to test/unit/shared/config
2020-06-01 16:06:50 -05:00
"lint:shared": "eslint --ignore-path .eslintignore 'core/shared/**/*.js'",
Added frontend lint comand in package.json no issue - The command was a missing bit for changes introduced in e10e71cc26ae62a2e22b785c214457b687dbac3d
2019-08-08 08:01:00 -05:00
"lint:frontend": "eslint --ignore-path .eslintignore 'core/frontend/**/*.js'",
Fixed path to eslint file for tests refs: https://github.com/TryGhost/Ghost/commit/d2c683813332a8a22c32a315405859dae15ecf26 - Changed the file type but neglected to update the config filepath for tests
2021-05-07 06:13:06 -05:00
"lint:test": "eslint -c test/.eslintrc.js --ignore-path test/.eslintignore 'test/**/*.js'",
Added new lint command for code only - allows for linting just code files, not the tests because the tests take a really long time to lint - I want to make eslint do more heavy lifting in terms of code style, so this will be useful as the warnings start to pile up
2021-04-27 04:34:52 -05:00
"lint:code": "yarn lint:server && yarn lint:shared && yarn lint:frontend",
Updated tests locations and added linting of core/shared (#11872) * :fire: removed duplicate error tests * add lint:shared package script, and updated lint to run it as well * moved test/unit/config to test/unit/shared/config
2020-06-01 16:06:50 -05:00
"lint": "yarn lint:server && yarn lint:shared && yarn lint:frontend && yarn lint:test",
Added quick commands for resetting yarn - We keep having test issues caused by yarn, these fix commands help quickly check it's not a yarn problem - Have renamed fixmodulenotrequired to fix:client to make a nice consistent naming pattern that's easy to remember and type
2021-06-23 10:08:12 -05:00
"fix:client": "yarn cache clean && cd core/client && rm -rf node_modules tmp dist && yarn && cd ../../",
"fix:server": "yarn cache clean && rm -rf node_modules && yarn",
"fix": "yarn fix:client && yarn fix:server"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"engines": {
🔥 Added support for Node 16 refs https://github.com/TryGhost/Toolbox/issues/71 - Node 16 is now LTS so we're adding support in Ghost - we're also bumping the minimum Node 14 version to 14.17.0 so we can merge dependencies who have higher Node 14 requirements than current - this commit adds Node 16 to the `package.json` engines and to CI - also bumps all dependencies that needed new versions to add Node 16 support
2021-10-26 14:12:37 -05:00
"node": "^12.22.1 || ^14.17.0 || ^16.13.0",
⚙️ Bumped required Ghost-CLI version to 1.17.0 refs https://github.com/TryGhost/Team/issues/658 - Ghost-CLI 1.17.0 displays warnings when users are on an unsupported version of Node, or are running a Ghost version that is EOL - by bumping this here, we can force users to update to CLI 1.17.0 to get these features
2021-05-05 08:40:28 -05:00
"cli": "^1.17.0"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"dependencies": {
Update dependency @sentry/node to v6.19.3
2022-03-29 22:05:17 -05:00
"@sentry/node": "6.19.3",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/adapter-manager": "0.2.28",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/admin-api-schema": "2.12.1",
"@tryghost/bookshelf-plugins": "0.3.14",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/bootstrap-socket": "0.2.17",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/color-utils": "0.1.12",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/config-url-helpers": "0.1.5",
"@tryghost/constants": "1.0.2",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/custom-theme-settings-service": "0.3.2",
Update dependency @tryghost/database-info to v0.3.0
2022-03-28 10:29:34 -05:00
"@tryghost/database-info": "0.3.0",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/debug": "0.1.14",
🐛 Fixed two issues with offers refs https://github.com/TryGhost/Team/issues/1437 - The discount was no longer showing up on the account page when the member had an active discount. - The redemption counter on the offers page was not incrementing. - The root cause was that messages sent on the internal bus were not reaching the internal bus listener, due to the unexpected duplication of the internal bus.
2022-03-23 05:53:12 -05:00
"@tryghost/domain-events": "0.1.9",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/email-analytics-provider-mailgun": "1.0.8",
"@tryghost/email-analytics-service": "1.0.6",
"@tryghost/errors": "1.2.7",
"@tryghost/express-dynamic-redirects": "0.2.7",
"@tryghost/helpers": "1.1.62",
Update dependency @tryghost/image-transform to v1.0.29
2022-03-28 08:31:23 -05:00
"@tryghost/image-transform": "1.0.29",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/job-manager": "0.8.21",
🐛 Fixed header cards not being linkable with #header-title refs https://github.com/TryGhost/Team/issues/1316 Updates header card renderer so the `<h2>` and `<h3>` elements have slugified titles set on their `id` attributes to allow in-page and external #header-title anchor links. - bumps `@tryghost/kg-default-cards` including the header card id fix - bumps other `@tryghost/kg-*` packages that were released simultaneously - contains dependency updates and switch to `slugify()` from `@tryghost/kg-utils`
2022-02-07 13:52:18 -05:00
"@tryghost/kg-card-factory": "3.1.2",
Update dependency @tryghost/kg-default-atoms to v3.1.1 (#13934) Co-authored-by: Renovate Bot <bot@renovateapp.com>
2022-01-10 04:46:19 -05:00
"@tryghost/kg-default-atoms": "3.1.1",
🐛 Fixed "Invalid mobiledoc structure" errors the could occur when saving posts with header cards refs https://github.com/TryGhost/Team/issues/1377 - bumped all packages that have a dependency on `@tryghost/kg-utils` to fix a bug in the `slugify()` utility that was throwing errors when the header or subheader was left blank in a header card
2022-02-16 09:44:33 -05:00
"@tryghost/kg-default-cards": "5.16.1",
"@tryghost/kg-markdown-html-renderer": "5.1.4",
"@tryghost/kg-mobiledoc-html-renderer": "5.3.4",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/limit-service": "1.0.10",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/logging": "2.1.1",
Added the `MemberCancelEvent` model to MembersApi (#14313) refs https://github.com/TryGhost/Team/issues/1302 - Added the `MemberCancelEvent` model to MembersApi - Triggered when a subscription is canceled by an admin or by the member - Updated shared dependencies Co-authored-by: Simon Backx <simon@ghost.org>
2022-03-18 08:25:35 -05:00
"@tryghost/magic-link": "1.0.21",
Update dependency @tryghost/member-events to v0.4.1
2022-03-24 07:04:38 -05:00
"@tryghost/member-events": "0.4.1",
🐛 Fixed two issues with offers refs https://github.com/TryGhost/Team/issues/1437 - The discount was no longer showing up on the account page when the member had an active discount. - The redemption counter on the offers page was not incrementing. - The root cause was that messages sent on the internal bus were not reaching the internal bus listener, due to the unexpected duplication of the internal bus.
2022-03-23 05:53:12 -05:00
"@tryghost/members-api": "5.4.1",
Update dependency @tryghost/members-events-service to v0.3.2
2022-03-24 07:05:00 -05:00
"@tryghost/members-events-service": "0.3.2",
🐛 Fixed two issues with offers refs https://github.com/TryGhost/Team/issues/1437 - The discount was no longer showing up on the account page when the member had an active discount. - The redemption counter on the offers page was not incrementing. - The root cause was that messages sent on the internal bus were not reaching the internal bus listener, due to the unexpected duplication of the internal bus.
2022-03-23 05:53:12 -05:00
"@tryghost/members-importer": "0.5.6",
Added the `MemberCancelEvent` model to MembersApi (#14313) refs https://github.com/TryGhost/Team/issues/1302 - Added the `MemberCancelEvent` model to MembersApi - Triggered when a subscription is canceled by an admin or by the member - Updated shared dependencies Co-authored-by: Simon Backx <simon@ghost.org>
2022-03-18 08:25:35 -05:00
"@tryghost/members-offers": "0.10.9",
Update dependency @tryghost/members-ssr to v1.0.23
2022-03-24 07:05:23 -05:00
"@tryghost/members-ssr": "1.0.23",
🐛 Fixed two issues with offers refs https://github.com/TryGhost/Team/issues/1437 - The discount was no longer showing up on the account page when the member had an active discount. - The redemption counter on the offers page was not incrementing. - The root cause was that messages sent on the internal bus were not reaching the internal bus listener, due to the unexpected duplication of the internal bus.
2022-03-23 05:53:12 -05:00
"@tryghost/members-stripe-service": "0.9.2",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/metrics": "1.0.8",
"@tryghost/minifier": "0.1.12",
"@tryghost/mw-error-handler": "0.1.7",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/mw-session-from-token": "0.1.28",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/nodemailer": "0.3.17",
✨ Added "contains" operator support to ?filter= query params (#14286) refs https://github.com/TryGhost/Team/issues/1408 - switched from `@nexes/nql` to `@tryghost/nql` and bumped `@tryghost/bookshelf-plugins` to get access to the latest NQL version across the app - adds "contains" operator support - `:~'string'` - contains - `:-~'string'` - does not contain - `:~^'string'` - starts with - `:-~^'string'` - does not start with - `:~$'string'` - ends with - `:-~$'string'` - does not end with - enables `'` escaping in strings, eg `'O\'Nolan'`
2022-03-09 08:02:17 -05:00
"@tryghost/nql": "0.9.0",
Update dependency @tryghost/package-json to v1.0.17
2022-03-28 08:31:44 -05:00
"@tryghost/package-json": "1.0.17",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/promise": "0.1.15",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/request": "0.1.20",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/root-utils": "0.3.12",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/security": "0.2.15",
"@tryghost/session-service": "0.1.38",
"@tryghost/settings-path-manager": "0.1.4",
"@tryghost/social-urls": "0.1.29",
"@tryghost/string": "0.1.23",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/tpl": "0.1.13",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/update-check-service": "0.3.2",
Update dependency @tryghost/url-utils to v2.0.8
2022-03-04 05:05:22 -05:00
"@tryghost/url-utils": "2.0.8",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/validator": "0.1.18",
Updated internal packages - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 05:14:27 -05:00
"@tryghost/verification-trigger": "0.1.6",
"@tryghost/version": "0.1.12",
Updated all `@tryghost` dependencies - I recently went across every repo and made sure our c8 config was correct, but this resulted in us having to publish patch versions of a bunch of packages - given these don't contain any code changes, we can just bump them all at once
2022-03-03 08:37:25 -05:00
"@tryghost/vhost-middleware": "1.0.22",
Update dependency @tryghost/zip to v1.1.22
2022-03-28 10:29:11 -05:00
"@tryghost/zip": "1.1.22",
Update dependency amperize to v0.6.1
2020-03-01 19:20:46 -05:00
"amperize": "0.6.1",
Update dependency analytics-node to v6
2021-11-22 01:48:04 -05:00
"analytics-node": "6.0.0",
Update dependency bluebird to v3.7.2
2019-12-01 19:24:08 -05:00
"bluebird": "3.7.2",
Update dependency body-parser to v1.19.2
2022-02-16 00:19:22 -05:00
"body-parser": "1.19.2",
Updated bookshelf dependency to 1.2.0
2020-08-03 14:36:53 -05:00
"bookshelf": "1.2.0",
Update dependency bookshelf-relations to v2.4.0
2022-03-07 15:53:10 -05:00
"bookshelf-relations": "2.4.0",
Update dependency brute-knex to v4.0.1
2020-11-02 12:07:12 -05:00
"brute-knex": "4.0.1",
Update dependency bson-objectid to v2.0.3
2022-03-13 20:38:03 -05:00
"bson-objectid": "2.0.3",
Added support for graceful job shutdown and worker threads refs #12402 - With bumped version of job-manager it offloads job procesing into separate worker thread. Having jobs run out of main Ghost process even loop allows for safe job execution, which does not block Ghost from serving requests or performing other functions without a delay - Added experimental data access to 'testmode' jobs. This should serve as an illustration of how to access data from the job layer
2020-11-22 23:17:49 -05:00
"bthreads": "0.5.1",
chore(package): update cheerio to version 0.22.0 (#7260) https://greenkeeper.io/
2016-09-19 06:32:40 -05:00
"cheerio": "0.22.0",
Update dependency compression to v1.7.4
2019-07-01 19:36:16 -05:00
"compression": "1.7.4",
Update dependency connect-slashes to v1.4.0
2019-07-02 05:03:51 -05:00
"connect-slashes": "1.4.0",
Update dependency cookie-session to v2
2022-03-24 07:37:31 -05:00
"cookie-session": "2.0.0",
Bumped dependencies no issue
2019-01-21 07:33:20 -05:00
"cors": "2.8.5",
Add editorconfig
2015-05-05 18:54:23 -05:00
"downsize": "0.0.8",
Update dependency express to v4.17.3
2022-02-16 23:02:30 -05:00
"express": "4.17.3",
Replace memory spam prevention with brute-express (#7579) no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging
2016-11-08 06:33:19 -05:00
"express-brute": "1.0.1",
Update dependency express-hbs to v2.4.0
2021-04-22 11:36:14 -05:00
"express-hbs": "2.4.0",
Update dependency express-jwt to v6.1.1
2022-02-21 12:23:30 -05:00
"express-jwt": "6.1.1",
⚡ Improved Ghost boot time and memory usage by lazy loading routes no issue - right now, we mount all API endpoints (v2, v3 and canary), alongside some other routes, when Ghost is booting. This is wasteful because we don't necessarily need any of the endpoints to get Ghost up and running - even when Admin is used, it uses `canary` so `v2` and `v3` sit in memory - the better approach here is to lazy load these endpoints, so they only get mounted when needed - this commit adds the `lazyUse` function into our Express lib, which takes a mount path and a module function to execute down the line. This gets passed to the wonderful `express-lazy-router` lib which detects when we're calling an unmounted module and will mount it for us - from local testing, this speeds up boot time by about 18% and reduces initial memory usage by about 6% 🚀
2021-10-11 05:06:03 -05:00
"express-lazy-router": "1.0.4",
🎨Added `absolute_url` flag to public api (#9833) closes #9832 The API _should_ be returning absolute URLs for everything, 3rd party applications require absolute urls to read and display ghost data correctly. Currently they have to concat the blog url and the resource url, which is very uncomfortable. Changing the public api like this would be considered a breaking change however so we've opted to put it behind a query parameter named `absolute_urls`.
2018-08-31 05:02:39 -05:00
"express-query-boolean": "2.0.0",
Update dependency express-session to v1.17.2
2021-05-19 15:47:30 -05:00
"express-session": "1.17.2",
Update dependency fs-extra to v10.0.1
2022-02-22 14:57:01 -05:00
"fs-extra": "10.0.1",
🐛 Fixed extention missmatching .mp4 as invalid refs https://github.com/TryGhost/Toolbox/issues/120 - When a file name with an .mp4 extension was passed in it was mistakenly taken as an invalid extension. It is pretty valid! - Fixing this bug allows for for duplicate file detection when uploading valid valies with extensions containing numbers - Extensions that consiste only from numbers are still treated as invalid
2021-11-09 06:18:28 -05:00
"ghost-storage-base": "1.0.0",
Update dependency glob to v7.2.0
2021-09-22 20:03:51 -05:00
"glob": "7.2.0",
Update dependency got to v9 (#10861) no issue - The underlying issue is the change in retry behavior in 'got' (https://github.com/sindresorhus/got/commit/a3e77de2876c2594af797cba250090b70735c8db) - Now 500 responses trigger 2 default retries - Renamed retries -> retry. As mentioned in https://github.com/sindresorhus/got/releases/v9.0.0 - Added response body error check
2019-07-04 03:36:51 -05:00
"got": "9.6.0",
Added {{products}} deprecation warning refs https://github.com/TryGhost/Toolbox/issues/226 refs https://github.com/TryGhost/gscan/issues/179 - The bump added multiple new theme deprecation warning and removed one outdated notice. - Added a theme warning for use of {{products}}, {{@product}}, and {{@products}} helpers - Removed an outdated notice for use of {{id}} helper
2022-03-29 01:32:15 -05:00
"gscan": "4.25.3",
Update dependency html-to-text to v5
2019-07-01 19:43:18 -05:00
"html-to-text": "5.1.1",
Update dependency image-size to v1.0.1
2022-01-11 03:32:11 -05:00
"image-size": "1.0.1",
chore(package): update intl to version 1.2.5 (#7411) https://greenkeeper.io/
2016-09-26 04:13:38 -05:00
"intl": "1.2.5",
Update dependency intl-messageformat to v5.4.3
2019-07-29 01:34:47 -05:00
"intl-messageformat": "5.4.3",
Update dependency js-yaml to v4.1.0
2021-04-14 16:51:55 -05:00
"js-yaml": "4.1.0",
Update dependency jsonpath to v1.1.1
2021-04-01 15:00:01 -05:00
"jsonpath": "1.1.1",
Update dependency jsonwebtoken to v8.5.1
2019-07-01 19:41:06 -05:00
"jsonwebtoken": "8.5.1",
Update dependency juice to v8
2021-05-26 03:23:00 -05:00
"juice": "8.0.0",
Update dependency keypair to v1.0.4
2021-10-11 16:11:01 -05:00
"keypair": "1.0.4",
Updated `knex` dependency refs https://github.com/TryGhost/Toolbox/issues/213 - our `knex` dependency has been out of date for a while so my aim was to bring it up to date - this required also switching `sqlite3` to `@vscode/sqlite3` because knex switched the default sqlite driver - this commit also bumps knex-migrator and switches to a mock-knex fork until Knex 1.0 support has been merged - also updates an error message to handle a new code in SQLite
2022-03-29 05:21:58 -05:00
"knex": "1.0.4",
"knex-migrator": "4.2.5",
Update dependency lodash to v4.17.21
2021-02-22 16:53:57 -05:00
"lodash": "4.17.21",
Update dependency luxon to v2.3.1
2022-02-23 15:51:21 -05:00
"luxon": "2.3.1",
Installed mailgun-js@0.22.0 no-issue
2019-11-07 03:26:17 -05:00
"mailgun-js": "0.22.0",
Update metascraper
2022-03-27 19:57:30 -05:00
"metascraper": "5.28.2",
"metascraper-author": "5.28.2",
"metascraper-description": "5.28.2",
"metascraper-image": "5.28.2",
"metascraper-logo": "5.28.2",
Update dependency metascraper-logo-favicon to v5.28.5
2022-03-30 05:35:01 -05:00
"metascraper-logo-favicon": "5.28.5",
Update metascraper
2022-03-27 19:57:30 -05:00
"metascraper-publisher": "5.28.2",
"metascraper-title": "5.28.2",
"metascraper-url": "5.28.2",
Revert "Update dependency moment to v2.26.0" This reverts commit dfb1f9aeae10cc129affe73def436c19df0599b1.
2020-06-11 08:20:08 -05:00
"moment": "2.24.0",
Reverted moment-timezone bump back to 0.5.23 refs #10870 - Added moment-timezone to Renovate's ignore list - Described reasoning in https://github.com/TryGhost/Ghost/issues/10870
2019-07-04 06:56:13 -05:00
"moment-timezone": "0.5.23",
Update dependency multer to v1.4.4
2021-12-07 12:04:32 -05:00
"multer": "1.4.4",
Switched to `mysql2` library refs https://github.com/TryGhost/Toolbox/issues/174 - this commit switches Ghost from using the `mysql` library to the `mysql2` one - we've done this for several reasons: - `mysql2` is more actively maintained - `mysql2` natively supports the default auth plugin on MySQL 8 - `mysql2` is fasterrrr - there have been various other commits refactoring the groundwork for this commit but this commit should be short and sweet: - alias `mysql` to `mysql2` client so we maintain backwards compatibility with all configs who use `"client": "mysql"` - enabled `decimalNumbers` so we maintain the same functionality as `mysql` - replaced the dependencies and updated `knex-migrator` - hardcoded the newer authentication plugin in MySQL 8 CI. Before switching to `mysql2`, this would break because it didn't support this
2022-03-02 10:13:03 -05:00
"mysql2": "2.3.3",
Update dependency nconf to v0.11.3
2021-06-21 06:17:14 -05:00
"nconf": "0.11.3",
Update dependency node-jose to v2.1.1
2022-03-30 16:57:56 -05:00
"node-jose": "2.1.1",
🐛 Fixed intermittent failures with embedding refs https://github.com/TryGhost/Team/issues/1235 - we are seeing `oembed-parser` 1.5.2 have intermittent issues when fetching oembed data - we're not sure of the reason but reverting the dependency to 1.4.9 seems to fix the issue - this commit reverted the bump in Ghost and adds it to Renovate's ignore list so it isn't automatically bumped in the future
2021-11-25 05:40:23 -05:00
"oembed-parser": "1.4.9",
Update dependency passport to v0.5.2
2021-12-16 15:58:04 -05:00
"passport": "0.5.2",
Pin dependencies
2021-04-22 03:53:38 -05:00
"passport-google-oauth": "2.0.0",
deps: path-match@1.2.4
2016-04-21 04:44:58 -05:00
"path-match": "1.2.4",
Update dependency probe-image-size to v7.2.3
2022-03-09 15:44:38 -05:00
"probe-image-size": "7.2.3",
chore(package): update rss to version 1.2.2 (#7841) https://greenkeeper.io/
2017-01-11 14:42:13 -05:00
"rss": "1.2.2",
Update dependency sanitize-html to v2.7.0
2022-02-04 12:45:26 -05:00
"sanitize-html": "2.7.0",
Update dependency semver to v7.3.5
2021-03-23 04:15:11 -05:00
"semver": "7.3.5",
Added stoppable for graceful shutdown of requests - stopppable is a dependency that handles closing connections properly, which server.close does not - active connections are allowed to complete what they are doing - idle connections are closed - no new connections are allowed - we call stoppable in stop() instead of server.close so that idle connections don't hold the server open - calling await stop() from shutdown then ensures that we have a consistent experience of stop - all together this allows ghost to shutdown gracefully when there are long-running requests - @TODO: handle graceful shutdown of long-running processes - @TODO: consider do we need to send 503s whilst the server is shutting down?
2020-08-10 05:42:31 -05:00
"stoppable": "1.1.0",
🐛 Fixed embed/bookmark retrieval for sites that require cookies during redirects no issue - known failing case was Medium. Some *.medium.com articles triggered redirects but without cookies being stored/sent across the redirect requests it would cause an infinite redirect loop and we'd abort after 10 redirects - use `got`'s [cookie support](https://github.com/sindresorhus/got/tree/v9.6.0#cookies) via `tough-cookie` so that we can create bookmark cards for medium.com and other sites with similar problems
2020-06-17 04:03:36 -05:00
"tough-cookie": "4.0.0",
Update dependency uuid to v8.3.2
2020-12-08 16:23:14 -05:00
"uuid": "8.3.2",
deps: xml@1.0.1
2016-02-08 16:30:57 -05:00
"xml": "1.0.1"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"optionalDependencies": {
Update dependency @tryghost/html-to-mobiledoc to v1.8.5
2022-02-16 09:46:16 -05:00
"@tryghost/html-to-mobiledoc": "1.8.5",
Updated `knex` dependency refs https://github.com/TryGhost/Toolbox/issues/213 - our `knex` dependency has been out of date for a while so my aim was to bring it up to date - this required also switching `sqlite3` to `@vscode/sqlite3` because knex switched the default sqlite driver - this commit also bumps knex-migrator and switches to a mock-knex fork until Knex 1.0 support has been merged - also updates an error message to handle a new code in SQLite
2022-03-29 05:21:58 -05:00
"@vscode/sqlite3": "5.0.8"
Add editorconfig
2015-05-05 18:54:23 -05:00
},
"devDependencies": {
Update dependency @lodder/grunt-postcss to v3.1.1
2021-11-03 13:01:52 -05:00
"@lodder/grunt-postcss": "3.1.1",
Update dependency @playwright/test to v1.20.1
2022-03-23 18:27:48 -05:00
"@playwright/test": "1.20.1",
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/express-test": "0.7.1",
Update dependency c8 to v7.11.0
2021-12-30 11:40:28 -05:00
"c8": "7.11.0",
Update dependency coffeescript to v2.6.1
2021-10-05 02:36:55 -05:00
"coffeescript": "2.6.1",
Update dependency cssnano to v5.1.5
2022-03-21 16:04:03 -05:00
"cssnano": "5.1.5",
Update dependency eslint to v8.12.0
2022-03-25 18:38:56 -05:00
"eslint": "8.12.0",
Updated eslint-plugin-ghost & fixed resulting failures - I recently added a bunch of strict rules to our eslint plugin around returns: https://github.com/TryGhost/eslint-plugin-ghost/commit/ca9af37866bde8f9b55160fee039e9af13e60048 - These mostly are issues that occur whilst writing code, that you spot and fix as you're developing, but they're annoying to notice/find and eslint can be used to flag them quickly - There are of course, edge cases where you don't need to return from array fns, but this rule also suggests better patterns might be available - For our excert helper and new assertEvent helper, I've updated the code to use simpler patterns that are easier to read, so as to avoid the warnings - For our old API I've simply disabled the rule as we're about to delete this code
2022-02-21 07:18:02 -05:00
"eslint-plugin-ghost": "2.13.0",
Update dependency grunt to v1.4.1
2021-05-24 20:40:38 -05:00
"grunt": "1.4.1",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 15:07:55 -05:00
"grunt-bg-shell": "2.3.3",
Bumped major test dependencies (#10403) refs #9389 - eslint@5.12.1, eslint-plugin-ghost@0.1.0, grunt-contrib-clean@2.0.0, grunt-contrib-uglify@4.0.0, grunt-eslint@21.0.0, grunt-mocha-cli@4.0.0, grunt-shell@3.0.1, mocha@5.2 .0, nock@10.0.6, rewire@4.0.1 All of them dropped Node v4. I was not able to find any other big breaking changes, which affect us right now.
2019-01-21 12:28:44 -05:00
"grunt-contrib-clean": "2.0.0",
Updated dependency grunt-contrib-compress to v2 - this reverts commit 4be4af9c18cd651da57fc2b397d5ffb2aad92ec9 because we have now dropped Node 10
2021-05-05 09:46:02 -05:00
"grunt-contrib-compress": "2.0.0",
deps: grunt@1.0.1 + related updates - Gets all grunt dependencies in line with the grunt 1.0 release. - deps: grunt-cli@1.2.0. - deps: grunt-bg-shell@2.3.3. - deps: grunt-contrib-clean@1.0.0. - deps: grunt-contrib-compress@1.2.0. - deps: grunt-contrib-copy@1.0.0. - deps: grunt-contrib-jshint@1.0.0. - deps: grunt-contrib-watch@1.0.0. - deps: grunt-docker@0.0.11. - deps: grunt-express-server@0.5.3. - deps: grunt-jscs@2.8.0. - deps: grunt-mocha-cli@2.1.0. - deps: grunt-mocha-istanbul@4.0.2. - deps: grunt-shell@1.3.0. - deps: istanbul@0.4.3.
2016-04-06 15:07:55 -05:00
"grunt-contrib-copy": "1.0.0",
Pin dependency grunt-contrib-symlink to 1.0.0
2019-07-02 04:05:35 -05:00
"grunt-contrib-symlink": "1.0.0",
Bump dependencies no issue - body-parser@1.18.3 - extract-zip@1.6.7 - js-yaml@3.12.0 - moment@2.22.2 - moment-timezone@0.5.17 - grunt@1.0.3 - grunt-contrib-watch@1.1.0 - nock@9.3.0 - supertest@3.1.0
2018-06-04 08:47:33 -05:00
"grunt-contrib-watch": "1.1.0",
Bump dependencies (#9516) no issue - compression@1.7.2 - express@4.16.3 - ghost-ignition@2.9.0 - gscan@1.3.4 - knex-migrator@3.1.5 - lodash@4.17.5 - moment@2.21.0 - netjet@1.3.0 - sanitize-html@1.18.2 - sqlite@4.0.0 - eslint@4.19.0 - grunt@1.0.2 - sinon@4.4.6 - nock@9.2.3 - grunt-express-server@0.5.4 This commit resolves https://hackerone.com/reports/310439.
2018-03-21 12:49:42 -05:00
"grunt-express-server": "0.5.4",
Update dependency grunt-shell to v4
2022-03-24 07:06:09 -05:00
"grunt-shell": "4.0.0",
Bump dependencies no issue - bson-objectid@1.2.2 - image-size@0.6.2 - knex-migrator@3.1.3 - nconf@0.10.0 - sanitize-html@1.16.3 - superagent@3.8.2 - eslint@4.14.0 - grunt-contrib-uglify@3.3.0 - grunt-subgrunt@1.3.0 - mocha@4.1.0 - nock@9.1.5 - should@13.2.0 - sinon@4.1.3
2018-01-02 06:08:32 -05:00
"grunt-subgrunt": "1.3.0",
Misc grunt /dev updates - Updated all dev dependencies in the root package.json - Added `--colors` to mocha when called from grunt test:... so that works better - Removed non-unit tests from coverage, because they're just not useful - Updated docker config to generate useful docs again - as a statement of intent, I also updated docs in key files - Setup grunt watch-docs task for documentation writing easyness
2015-05-28 10:16:09 -05:00
"grunt-update-submodules": "0.4.1",
Update dependency jwks-rsa to v2.0.5
2021-10-15 15:38:58 -05:00
"jwks-rsa": "2.0.5",
Update Test & linting packages
2022-03-11 18:34:53 -05:00
"mocha": "9.2.2",
Pin dependency mocha-slow-test-reporter to 0.1.2
2021-07-05 04:53:57 -05:00
"mocha-slow-test-reporter": "0.1.2",
Updated `knex` dependency refs https://github.com/TryGhost/Toolbox/issues/213 - our `knex` dependency has been out of date for a while so my aim was to bring it up to date - this required also switching `sqlite3` to `@vscode/sqlite3` because knex switched the default sqlite driver - this commit also bumps knex-migrator and switches to a mock-knex fork until Knex 1.0 support has been merged - also updates an error message to handle a new code in SQLite
2022-03-29 05:21:58 -05:00
"mock-knex": "TryGhost/mock-knex#master",
Update dependency nock to v13.2.4
2022-02-04 14:55:19 -05:00
"nock": "13.2.4",
Update dependency papaparse to v5.3.2
2022-03-21 04:22:10 -05:00
"papaparse": "5.3.2",
Update CSS preprocessors
2022-03-16 06:01:51 -05:00
"postcss": "8.4.12",
Update Test & linting packages
2022-02-07 07:00:37 -05:00
"rewire": "6.0.0",
Added Node v10 Support (#10058) * Added Node v10 Support no issue Signed-off-by: kirrg001 <katharina.irrgang@googlemail.com> * Bump amperize to version 0.3.8 no issue * Bump mysql to version 2.16.0 no issue - mysql 2.15.0 uses a deprecated notation for timers - e.g. timers.unenroll() * Bump sub dependencies no issue - e.g. knex-migrator used mysql 2.15.0 * Bump dependencies no issue * Replaced `new Buffer` with `Buffer.from` no issue - Buffer() is deprecated due to security and usability issues. - https://nodejs.org/en/docs/guides/buffer-constructor-deprecation/
2018-10-30 03:45:51 -05:00
"should": "13.2.3",
Update Test & linting packages
2022-02-07 07:00:37 -05:00
"sinon": "13.0.1",
Update dependency supertest to v6.2.2
2022-01-18 17:50:03 -05:00
"supertest": "6.2.2",
Updated `tmp` dependency to v0.2.1 no issue - `tmp` 0.1.0 was broken and I added `tmp` to the Renovate ignore list to stop it creating PRs - https://github.com/TryGhost/Ghost/commit/082160106ae4fbedcf7de99b671d42e001ca2a89 - 0.2.1 is fixed again so we can merge the update and remove it from the list
2021-04-19 08:48:57 -05:00
"tmp": "0.2.1"
Added resolution for moment-timezone version refs #10870 - `moment-timezone` was bumped to `0.5.26` inadvertently as a result of bump to `url-utils` in https://github.com/TryGhost/Ghost/commit/6cb0f800c8220d371f007830344d376dbb07f094 - Added resolution makes sure we use `0.5.23` for `moment-timezone` till tests are updated to work with latest version
2019-07-30 08:06:26 -05:00
},
"resolutions": {
Updated internal packages v2 - these packages are owned by us but these bumps don't contain any code changes - usually just dependency bumps - this commit bumps all those packages
2022-03-24 06:49:19 -05:00
"@tryghost/logging": "2.1.1",
Added moment package resolution to pin 2.24.0 refs https://github.com/TryGhost/Ghost/commit/1a17f8069bd126df786795c8a9407ac69e54795b - sub-dependency update bumped moment versions to 2.27.0 which caused timezone problems again with dates not being written to the database in UTC - added a resolution in package.json to pin all moment sub-dependencies to the same version we specify in our top-level dependencies
2020-07-28 11:55:23 -05:00
"moment": "2.24.0",
Added resolution for moment-timezone version refs #10870 - `moment-timezone` was bumped to `0.5.26` inadvertently as a result of bump to `url-utils` in https://github.com/TryGhost/Ghost/commit/6cb0f800c8220d371f007830344d376dbb07f094 - Added resolution makes sure we use `0.5.23` for `moment-timezone` till tests are updated to work with latest version
2019-07-30 08:06:26 -05:00
"moment-timezone": "0.5.23"
Add editorconfig
2015-05-05 18:54:23 -05:00
}
Updated package.json to conform to npm standards fixes #1053 - fleshed out script object - added test and install package.json - updated contributing guide - updates travis.yml to leverage new npm start
2014-02-09 10:29:23 -05:00
}
Reference in a new issue Copy permalink