0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-06 22:40:14 -05:00
Commit graph

2303 commits

Author SHA1 Message Date
Daniel Lockyer
2b7590459d v3.42.9 2022-01-21 18:35:24 +00:00
Daniel Lockyer
cdbab0d5c3 v3.42.8 2021-12-14 09:13:18 +00:00
Daniel Lockyer
5e55e2198b v3.42.7 2021-11-03 09:13:25 +00:00
Daniel Lockyer
64c6a69c1b
v3.42.6 2021-09-23 10:47:54 +01:00
Fabien O'Carroll
b6be89a44f
🔒 Fixed member email change vulnerability
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-65p7-pjj8-ggmr

This updates the signup/signin flow for members to no longer support the
email address change flow - which had missing authentication. It has
been replaced with a dedicated email change flow, and Portal has been
updated to use it.
2021-09-23 10:46:00 +01:00
Daniel Lockyer
beccb65989
v3.42.5 2021-04-16 17:37:33 +01:00
Daniel Lockyer
0d312d3e00
v3.42.4 2021-03-23 17:03:05 +00:00
Daniel Lockyer
9230e1c2a6
v3.42.3 2021-03-18 17:32:33 +00:00
Daniel Lockyer
f71a969083
v3.42.2 2021-03-15 13:00:48 +00:00
Daniel Lockyer
2dcd74afb1
v3.42.1 2021-03-12 11:24:26 +00:00
Daniel Lockyer
560db74bc1
v3.42.0 2021-03-04 12:16:15 +00:00
Sam Lord
cfbb53c738 Update to latest Ghost Ignition 2021-03-04 12:04:38 +00:00
Sam Lord
3d170b2ff0 Add ElasticSearch logging to v3
no issue
Wire up config to the latest ghost-ignition to enable remote logging on Ghost v3
2021-03-03 17:55:36 +00:00
Naz
b22e7fa84c
Fixed truncated worker thread messages
refs 12a1c60424

- The bump contains a bump in bree version, which fixes message truncation problem
2021-03-03 08:24:05 +00:00
Daniel Lockyer
5c1f44d1b3
v3.41.9 2021-03-01 15:43:24 +00:00
Fabien O'Carroll
9434f183d2 🐛 Fixed cancelling subscriptions when deleting members
closes https://github.com/TryGhost/Ghost/issues/12711
refs https://github.com/allouis/Members/commit/0be1ce2c

We were not waiting for the stripeSubscriptions relation to be fetched
from the database before looping through them and deleting them, the
members-api has been updated to correctly wait for the relations to be
fetched, and this bump fixes the issue.
2021-03-01 11:42:11 +00:00
Daniel Lockyer
5f94dab52b
v3.41.8 2021-02-23 11:47:39 +00:00
Fabien O'Carroll
37518a3d5e 🐛 Fixed updating member payment details
closes https://github.com/TryGhost/Team/issues/479
refs https://github.com/TryGhost/Members/commit/efe60a17
refs https://github.com/TryGhost/Portal/commit/a0588e87

This updates the members-api to make sure that members with cancelled
subscriptions, and members with multiple active customers can update
their payment details without error.

We also add the ability to update the payment method for a specific
subscription - which is more explicit and is used by Portal since the
commit referenced
2021-02-23 11:26:17 +00:00
Daniel Lockyer
50f40f3e1c
v3.41.7 2021-02-22 18:37:54 +00:00
Fabien O'Carroll
93290aa9b3 🐛 Fixed comping members w/ active subscription
closes https://github.com/TryGhost/Team/issues/475
refs 2ea1a17919

This version of the members-api contains a fix in the logic for updating
existing subscriptions to be complimentary. We now correctly access and
pass the `subscription_id` property, rather than the internal `id`
2021-02-22 14:17:11 +00:00
Naz
e30a21aa88 Added custom worker message handler
refs https://github.com/TryGhost/Ghost/issues/12496

- Handling logging in the main thread avoids file handle leaks which happen due to leaky implementation of bunyan logger (see referenced issue for more context)
- Bumped job-manager version to allow for `workerMessageHandler` callback funciton
2021-02-22 13:04:18 +00:00
Daniel Lockyer
22f6b44cd2
v3.41.6 2021-02-17 17:22:39 +00:00
Daniel Lockyer
9a4be0007c
🐛 Fixed payment methods not getting attached to subscriptions
no issue

- when a customer updated their card, this wasn't being attached to the
  subscription due to a code issue
- this meant that an expired card may still be the default payment
  method, causing renewals to fail
- this was due to a missing `await` and an incorrect subscription ID
  extraction in the underlying members-api package
- this commit bumps the members-api to fix this
2021-02-17 17:15:33 +00:00
Daniel Lockyer
d284c6469a
v3.41.5 2021-02-11 18:39:15 +00:00
Daniel Lockyer
59af54996a
🐛 Fixed new paid members showing up with status as 'incomplete'
no issue

- webhooks from Stripe may come in out-of-order, with the "created"
  webhook arriving after the "updated" one
- this would cause a subscription record with "active" to then be
  overwritten with "incomplete"
- due to a rewrite in members-api, we weren't re-fetching the Stripe record
  before attempting to update the DB
- this commit bumps members-api, which fixes this issue
2021-02-11 18:30:54 +00:00
Daniel Lockyer
f39d45cdf5
v3.41.4 2021-02-09 11:33:01 +00:00
Daniel Lockyer
8737267001
v3.41.3 2021-02-01 14:40:51 +00:00
renovate[bot]
bc4ed6a614
Update dependency @tryghost/members-api to v0.37.7 (#12586)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-02-01 14:11:53 +05:30
Renovate Bot
9e6be47f51
Update dependency keypair to v1.0.2 2021-02-01 03:05:29 +00:00
Renovate Bot
4a3eaf3ee1
Update Test & linting packages 2021-02-01 00:31:41 +00:00
Daniel Lockyer
8db92b0625
v3.41.2 2021-01-27 15:50:27 +00:00
renovate[bot]
a7524a3676
🐛 Fixed issue opening Stripe Checkout via data-members-plan
Update dependency @tryghost/members-api to v0.37.6 (#12580)

Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-27 15:46:23 +00:00
Renovate Bot
b354456f83
Update dependency ghost-ignition to v4.4.3 2021-01-27 13:48:30 +00:00
Renovate Bot
193e0b20e8
Update dependency sanitize-html to v2.3.2 2021-01-26 22:15:17 +00:00
Daniel Lockyer
93bf807419
v3.41.1 2021-01-26 16:54:30 +00:00
Daniel Lockyer
7f04ca1bda
v3.41.0 2021-01-26 16:03:12 +00:00
renovate[bot]
0e08ce1612
Update dependency @tryghost/members-api to v0.37.5 (#12575)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-26 13:15:02 +00:00
Renovate Bot
380ee8223a Update dependency @tryghost/members-csv to v0.4.2 2021-01-26 09:53:26 +05:30
Renovate Bot
b6c9538e54 Update dependency @tryghost/magic-link to v0.6.4 2021-01-26 09:52:13 +05:30
Renovate Bot
10fcaf8f23 Update dependency @tryghost/members-ssr to v0.8.8 2021-01-26 09:51:43 +05:30
Renovate Bot
fad905d86c
Update dependency supertest to v6.1.3 2021-01-25 21:47:40 +00:00
renovate[bot]
646f63ebdf
Update dependency @tryghost/members-api to v0.37.3 (#12571)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-25 14:27:04 +00:00
renovate[bot]
38647930b1
Update dependency @tryghost/members-api to v0.37.2 (#12561)
Co-authored-by: Renovate Bot <bot@renovateapp.com>
2021-01-25 11:12:15 +00:00
Renovate Bot
01206217f5
Update dependency supertest to v6.1.2 2021-01-25 06:46:03 +00:00
Renovate Bot
8fd3034d3c
Update dependency sinon to v9.2.4 2021-01-25 00:51:49 +00:00
Renovate Bot
f8776c0536
Update dependency sanitize-html to v2.3.1 2021-01-22 20:35:28 +00:00
Renovate Bot
aae58ba4e4
Update dependency ghost-ignition to v4.4.2 2021-01-22 14:21:41 +00:00
Renovate Bot
cbfdf79661
Update dependency ghost-ignition to v4.4.1 2021-01-21 18:16:29 +00:00
Renovate Bot
5fed75d794
Update dependency ghost-ignition to v4.4.0 2021-01-21 15:51:27 +00:00
Renovate Bot
9c3c90a4be
Update dependency nock to v13.0.6 2021-01-20 20:54:25 +00:00