0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2024-12-30 22:34:01 -05:00
Commit graph

4516 commits

Author SHA1 Message Date
renovate[bot]
e7144db5c3
Update dependency mailgun.js to v10.4.0 (#21957)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mailgun.js](https://redirect.github.com/mailgun/mailgun.js) |
[`10.3.0` ->
`10.4.0`](https://renovatebot.com/diffs/npm/mailgun.js/10.3.0/10.4.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mailgun.js/10.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mailgun.js/10.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mailgun.js/10.3.0/10.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mailgun.js/10.3.0/10.4.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mailgun/mailgun.js (mailgun.js)</summary>

###
[`v10.4.0`](https://redirect.github.com/mailgun/mailgun.js/blob/HEAD/CHANGELOG.md#1040-2024-12-30)

[Compare
Source](https://redirect.github.com/mailgun/mailgun.js/compare/v10.3.0...ffb37a53371756c36abdfdadac27309051f3cebf)

##### Features

- Add support for metrics
([de16ccd](de16ccd9b8))

##### Other changes

- Add tests
([78f9990](78f9990fe6))
- Update readme
([a724689](a7246892a2))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44NS4wIiwidXBkYXRlZEluVmVyIjoiMzkuODUuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-30 10:41:04 +00:00
renovate[bot]
706aaa65c2
Update dependency tailwind-merge to ^2.6.0 (#21950)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [tailwind-merge](https://redirect.github.com/dcastil/tailwind-merge) |
[`^2.5.5` ->
`^2.6.0`](https://renovatebot.com/diffs/npm/tailwind-merge/2.5.5/2.6.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/tailwind-merge/2.6.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/tailwind-merge/2.6.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/tailwind-merge/2.5.5/2.6.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/tailwind-merge/2.5.5/2.6.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>dcastil/tailwind-merge (tailwind-merge)</summary>

###
[`v2.6.0`](https://redirect.github.com/dcastil/tailwind-merge/releases/tag/v2.6.0)

[Compare
Source](https://redirect.github.com/dcastil/tailwind-merge/compare/v2.5.5...v2.6.0)

##### New Features

- Export ConfigExtension type from package by
[@&#8203;dcastil](https://redirect.github.com/dcastil) in
[https://github.com/dcastil/tailwind-merge/pull/505](https://redirect.github.com/dcastil/tailwind-merge/pull/505)

**Full Changelog**:
https://github.com/dcastil/tailwind-merge/compare/v2.5.5...v2.6.0

Thanks to
[@&#8203;brandonmcconnell](https://redirect.github.com/brandonmcconnell),
[@&#8203;manavm1990](https://redirect.github.com/manavm1990),
[@&#8203;langy](https://redirect.github.com/langy),
[@&#8203;jamesreaco](https://redirect.github.com/jamesreaco),
[@&#8203;roboflow](https://redirect.github.com/roboflow),
[@&#8203;syntaxfm](https://redirect.github.com/syntaxfm),
[@&#8203;getsentry](https://redirect.github.com/getsentry),
[@&#8203;codecov](https://redirect.github.com/codecov),
[@&#8203;sourcegraph](https://redirect.github.com/sourcegraph), a
private sponsor and more via
[@&#8203;thnxdev](https://redirect.github.com/thnxdev) for sponsoring
tailwind-merge! ❤️

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 17:50:32 +00:00
renovate[bot]
a4baf50463
Update dependency mailgun.js to v10.3.0 (#21949)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mailgun.js](https://redirect.github.com/mailgun/mailgun.js) |
[`10.2.4` ->
`10.3.0`](https://renovatebot.com/diffs/npm/mailgun.js/10.2.4/10.3.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mailgun.js/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mailgun.js/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mailgun.js/10.2.4/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mailgun.js/10.2.4/10.3.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mailgun/mailgun.js (mailgun.js)</summary>

###
[`v10.3.0`](https://redirect.github.com/mailgun/mailgun.js/blob/HEAD/CHANGELOG.md#1030-2024-12-23)

[Compare
Source](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.4...v10.3.0)

##### Features

- Add support for Inbox Placements
([5450a4b](5450a4b37c))

#####
[10.2.4](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.3...v10.2.4)
(2024-11-21)

##### Bug Fixes

- **deps-dev:** bump webpack from 5.76.0 to 5.94.0
([166f27c](166f27ca06))
- **deps:** bump axios from 1.7.2 to 1.7.4
([22ae183](22ae18375e))
- Fix vulnarable dependency
([039866b](039866bc05))

##### Other changes

- Add tests coverage thresholds
([bfca371](bfca3710da))

#####
[10.2.3](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.2...v10.2.3)
(2024-07-18)

#####
[10.2.2](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.1...v10.2.2)
(2024-07-17)

##### Bug Fixes

- Update dependencies
([0d810fb](0d810fb40d))

#####
[10.2.1](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.0...v10.2.1)
(2024-02-16)

##### Bug Fixes

- Source.on is not a function for t:variables
([e647143](e64714326b))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 17:50:15 +00:00
renovate[bot]
3223b92226
Update dependency mysql2 to v3.12.0 (#21947)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mysql2](https://sidorares.github.io/node-mysql2/docs)
([source](https://redirect.github.com/sidorares/node-mysql2)) |
[`3.11.5` ->
`3.12.0`](https://renovatebot.com/diffs/npm/mysql2/3.11.5/3.12.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mysql2/3.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mysql2/3.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mysql2/3.11.5/3.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mysql2/3.11.5/3.12.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>sidorares/node-mysql2 (mysql2)</summary>

###
[`v3.12.0`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3120-2024-12-23)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.11.5...v3.12.0)

##### Features

- **PoolCluster:** `restoreNodeTimeout` implementation
([#&#8203;3218](https://redirect.github.com/sidorares/node-mysql2/issues/3218))
([9a38601](9a3860186c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 10:43:26 +00:00
renovate[bot]
1e792fd205
Update dependency fastq to v1.18.0 (#21946)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [fastq](https://redirect.github.com/mcollina/fastq) | [`1.17.1` ->
`1.18.0`](https://renovatebot.com/diffs/npm/fastq/1.17.1/1.18.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/fastq/1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/fastq/1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/fastq/1.17.1/1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/fastq/1.17.1/1.18.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mcollina/fastq (fastq)</summary>

###
[`v1.18.0`](https://redirect.github.com/mcollina/fastq/releases/tag/v1.18.0)

[Compare
Source](https://redirect.github.com/mcollina/fastq/compare/v1.17.1...v1.18.0)

#### What's Changed

- fix: ensure drained() resolves after async tasks complete by
[@&#8203;todoroff](https://redirect.github.com/todoroff) in
[https://github.com/mcollina/fastq/pull/89](https://redirect.github.com/mcollina/fastq/pull/89)

#### New Contributors

- [@&#8203;todoroff](https://redirect.github.com/todoroff) made their
first contribution in
[https://github.com/mcollina/fastq/pull/89](https://redirect.github.com/mcollina/fastq/pull/89)

**Full Changelog**:
https://github.com/mcollina/fastq/compare/v1.17.1...v1.18.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 10:43:08 +00:00
renovate[bot]
0bd0c46b3d
Update dependency image-size to v1.2.0 (#21944)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [image-size](https://redirect.github.com/image-size/image-size) |
[`1.1.1` ->
`1.2.0`](https://renovatebot.com/diffs/npm/image-size/1.1.1/1.2.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/image-size/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/image-size/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/image-size/1.1.1/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/image-size/1.1.1/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>image-size/image-size (image-size)</summary>

###
[`v1.2.0`](https://redirect.github.com/image-size/image-size/releases/tag/v1.2.0)

[Compare
Source](https://redirect.github.com/image-size/image-size/compare/v1.1.1...v1.2.0)

This release adds support for JPEG-XL (
[#&#8203;409](https://redirect.github.com/image-size/image-size/issues/409)
)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 00:34:32 +00:00
renovate[bot]
801e72e77e
Update dependency ua-parser-js to v1.0.40 (#21942)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [ua-parser-js](https://uaparser.dev)
([source](https://redirect.github.com/faisalman/ua-parser-js)) |
[`1.0.39` ->
`1.0.40`](https://renovatebot.com/diffs/npm/ua-parser-js/1.0.39/1.0.40)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/ua-parser-js/1.0.40?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/ua-parser-js/1.0.40?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/ua-parser-js/1.0.39/1.0.40?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/ua-parser-js/1.0.39/1.0.40?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>faisalman/ua-parser-js (ua-parser-js)</summary>

###
[`v1.0.40`](https://redirect.github.com/faisalman/ua-parser-js/compare/1.0.39...1.0.40)

[Compare
Source](https://redirect.github.com/faisalman/ua-parser-js/compare/1.0.39...1.0.40)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS44MC4wIiwidXBkYXRlZEluVmVyIjoiMzkuODAuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-23 00:34:12 +00:00
Peter Zimon
252918b70c
Adding Posts analytics React app (#21878)
ref https://linear.app/ghost/issue/DES-1021/create-posts-app

Part of establishing React patterns in Ghost is to build a well-defined
and fairly self-encapsulated app through which we can test assumptions
and define best practices. Our guinea pig is Post analytics for this
purpose. This PR creates a new React app (posts) using Shade (the new
design system).
2024-12-19 12:01:08 +01:00
renovate[bot]
eafdcd041d
Update dependency sanitize-html to v2.14.0 (#21918)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[sanitize-html](https://redirect.github.com/apostrophecms/sanitize-html)
| [`2.13.1` ->
`2.14.0`](https://renovatebot.com/diffs/npm/sanitize-html/2.13.1/2.14.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/sanitize-html/2.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/sanitize-html/2.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/sanitize-html/2.13.1/2.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/sanitize-html/2.13.1/2.14.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>apostrophecms/sanitize-html (sanitize-html)</summary>

###
[`v2.14.0`](https://redirect.github.com/apostrophecms/sanitize-html/blob/HEAD/CHANGELOG.md#2140-2024-12-18)

[Compare
Source](https://redirect.github.com/apostrophecms/sanitize-html/compare/2.13.1...2.14.0)

- Fix adding text with `transformTags` in cases where it originally had
no text child elements. Thanks to [f0x](https://cthu.lu).

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS43Mi41IiwidXBkYXRlZEluVmVyIjoiMzkuNzIuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-18 19:08:16 +00:00
renovate[bot]
3bac33ffff
Update dependency json-stable-stringify to v1.2.0 (#21908)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
|
[json-stable-stringify](https://redirect.github.com/ljharb/json-stable-stringify)
| [`1.1.1` ->
`1.2.0`](https://renovatebot.com/diffs/npm/json-stable-stringify/1.1.1/1.2.0)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/json-stable-stringify/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/json-stable-stringify/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/json-stable-stringify/1.1.1/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/json-stable-stringify/1.1.1/1.2.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>ljharb/json-stable-stringify (json-stable-stringify)</summary>

###
[`v1.2.0`](https://redirect.github.com/ljharb/json-stable-stringify/blob/HEAD/CHANGELOG.md#v120---2024-12-17)

[Compare
Source](https://redirect.github.com/ljharb/json-stable-stringify/compare/v1.1.1...v1.2.0)

##### Fixed

- \[readme] remove dead badges
[`#14`](https://redirect.github.com/ljharb/json-stable-stringify/issues/14)

##### Commits

- \[New] add types
[`5dbd6c8`](5dbd6c802f)
- \[eslint] clean up formatting
[`21e95e5`](21e95e57ea)
- \[meta] sort package.json
[`a9f44d5`](a9f44d5e53)
- \[actions] split out node 10-20, and 20+
[`74551e4`](74551e4cc7)
- \[Tests] add test coverage for options provided directly on a cmp
function
[`0a50205`](0a502052b9)
- \[Robustness] cache more builtins
[`d390c99`](d390c99889)
- \[Dev Deps] update `@ljharb/eslint-config`, `auto-changelog`, `tape`
[`03686a0`](03686a0af2)
- \[Tests] key ordering is reversed in node 11+
[`7034a17`](7034a176d0)
- \[Dev Deps] update `npmignore`, `tape`
[`ba8d519`](ba8d519505)
- \[Refactor] use `call-bound` directly
[`850b24c`](850b24c5b3)
- \[Tests] replace `aud` with `npm audit`
[`22fb720`](22fb720610)
- \[Deps] update `call-bind`
[`adc30b0`](adc30b0746)
- \[Deps] update `call-bind`
[`a280582`](a280582e6b)
- \[Dev Deps] add missing peer dep
[`3bb517c`](3bb517cc17)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS43Mi4yIiwidXBkYXRlZEluVmVyIjoiMzkuNzIuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-18 00:29:44 +00:00
renovate[bot]
011f6a71ed
Update dependency @uiw/react-codemirror to v4.23.7 (#21888)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@uiw/react-codemirror](https://uiwjs.github.io/react-codemirror)
([source](https://redirect.github.com/uiwjs/react-codemirror)) |
[`4.23.6` ->
`4.23.7`](https://renovatebot.com/diffs/npm/@uiw%2freact-codemirror/4.23.6/4.23.7)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@uiw%2freact-codemirror/4.23.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@uiw%2freact-codemirror/4.23.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@uiw%2freact-codemirror/4.23.6/4.23.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@uiw%2freact-codemirror/4.23.6/4.23.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>uiwjs/react-codemirror (@&#8203;uiw/react-codemirror)</summary>

###
[`v4.23.7`](https://redirect.github.com/uiwjs/react-codemirror/releases/tag/v4.23.7)

[Compare
Source](https://redirect.github.com/uiwjs/react-codemirror/compare/v4.23.6...v4.23.7)

[![Buy me a
coffee](https://img.shields.io/badge/Buy%20me%20a%20coffee-048754?logo=buymeacoffee)](https://jaywcjlove.github.io/#/sponsor)
[![](https://img.shields.io/badge/Open%20in-unpkg-blue)](https://uiwjs.github.io/npm-unpkg/#/pkg/@&#8203;uiw/react-codemirror@4.23.7/file/README.md)

Documentation v4.23.7:
https://raw.githack.com/uiwjs/react-codemirror/5b16350/index.html\
Comparing Changes:
https://github.com/uiwjs/react-codemirror/compare/v4.23.6...v4.23.7

```shell
npm i @&#8203;uiw/react-codemirror@4.23.7
```

- 💄 chore: update nextjs example.
[#&#8203;677](https://redirect.github.com/uiwjs/react-codemirror/issues/677)
[`ab89f28`](https://redirect.github.com/uiwjs/react-codemirror/commit/ab89f28)
[@&#8203;jaywcjlove](https://redirect.github.com/jaywcjlove)
- 🐞 fix(theme): implement 'exports' field in themes/theme/package.json
([#&#8203;708](https://redirect.github.com/uiwjs/react-codemirror/issues/708))
[`4edca1d`](https://redirect.github.com/uiwjs/react-codemirror/commit/4edca1d)
[@&#8203;aspiers](https://redirect.github.com/aspiers)
- 🐞 fix(theme): implement 'exports' field in themes/\*/package.json
[#&#8203;708](https://redirect.github.com/uiwjs/react-codemirror/issues/708)
[#&#8203;613](https://redirect.github.com/uiwjs/react-codemirror/issues/613)
[#&#8203;680](https://redirect.github.com/uiwjs/react-codemirror/issues/680)
[`ced0b1a`](https://redirect.github.com/uiwjs/react-codemirror/commit/ced0b1a)
[@&#8203;jaywcjlove](https://redirect.github.com/jaywcjlove)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS41OC4xIiwidXBkYXRlZEluVmVyIjoiMzkuNTguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-16 03:20:35 +00:00
Peter Zimon
fbbf34e1d0
Added Shade fundamentals (#21812)
ref
https://linear.app/ghost/issue/DES-1020/create-new-react-app-for-shade

Shade is our new design system that follows React best practices and
leverages third-party libraries extensively. It's built on ShadCN/UI
which is one of the most popular React UI libraries today. This commit
adds an (almost) empty React app, set up to be the a starting point of
Shade.
2024-12-11 15:55:58 +01:00
renovate[bot]
c2c9ef71e7 Update dependency express to v4.21.2 2024-12-10 10:48:47 +01:00
renovate[bot]
c38e83d50d
Update dependency express-jwt to v8.5.1 (#21843)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [express-jwt](https://redirect.github.com/auth0/express-jwt) |
[`8.5.0` ->
`8.5.1`](https://renovatebot.com/diffs/npm/express-jwt/8.5.0/8.5.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/express-jwt/8.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express-jwt/8.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express-jwt/8.5.0/8.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express-jwt/8.5.0/8.5.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>auth0/express-jwt (express-jwt)</summary>

###
[`v8.5.1`](c028e7098e...0dfe63b9a7)

[Compare
Source](c028e7098e...0dfe63b9a7)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-09 19:17:00 +00:00
renovate[bot]
140e11bd76
Update dependency express-jwt to v8.5.0 (#21840)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [express-jwt](https://redirect.github.com/auth0/express-jwt) |
[`8.4.1` ->
`8.5.0`](https://renovatebot.com/diffs/npm/express-jwt/8.4.1/8.5.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/express-jwt/8.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/express-jwt/8.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/express-jwt/8.4.1/8.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/express-jwt/8.4.1/8.5.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>auth0/express-jwt (express-jwt)</summary>

###
[`v8.5.0`](https://redirect.github.com/auth0/express-jwt/compare/v8.4.1...c028e7098ea3dbdd4684f6e4960564e38fccdb96)

[Compare
Source](https://redirect.github.com/auth0/express-jwt/compare/v8.4.1...c028e7098ea3dbdd4684f6e4960564e38fccdb96)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-09 16:52:18 +00:00
renovate[bot]
75cece4da7
Update dependency dompurify to v3.2.3 (#21835)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [dompurify](https://redirect.github.com/cure53/DOMPurify) | [`3.2.2`
-> `3.2.3`](https://renovatebot.com/diffs/npm/dompurify/3.2.2/3.2.3) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/dompurify/3.2.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/dompurify/3.2.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/dompurify/3.2.2/3.2.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/dompurify/3.2.2/3.2.3?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>cure53/DOMPurify (dompurify)</summary>

###
[`v3.2.3`](https://redirect.github.com/cure53/DOMPurify/releases/tag/3.2.3):
DOMPurify 3.2.3

[Compare
Source](https://redirect.github.com/cure53/DOMPurify/compare/3.2.2...3.2.3)

- Fixed two conditional sanitizer bypasses discovered by
[@&#8203;parrot409](https://redirect.github.com/parrot409) and
[@&#8203;Slonser](https://x.com/slonser\_)
- Updated the attribute clobbering checks to prevent future bypasses,
thanks [@&#8203;parrot409](https://redirect.github.com/parrot409)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-09 10:08:05 +00:00
renovate[bot]
820018ec29
Update dependency @slack/webhook to v7.0.4 (#21825)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [@slack/webhook](https://slack.dev/node-slack-sdk/webhook)
([source](https://redirect.github.com/slackapi/node-slack-sdk)) |
[`7.0.3` ->
`7.0.4`](https://renovatebot.com/diffs/npm/@slack%2fwebhook/7.0.3/7.0.4)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@slack%2fwebhook/7.0.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/@slack%2fwebhook/7.0.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/@slack%2fwebhook/7.0.3/7.0.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@slack%2fwebhook/7.0.3/7.0.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>slackapi/node-slack-sdk (@&#8203;slack/webhook)</summary>

###
[`v7.0.4`](https://redirect.github.com/slackapi/node-slack-sdk/releases/tag/%40slack/web-api%407.0.4):
@&#8203;slack/web-api@7.04

[Compare
Source](https://redirect.github.com/slackapi/node-slack-sdk/compare/@slack/webhook@7.0.3...@slack/webhook@7.0.4)

### What's Changed

We released a fix for the `oauth.v2.exchange` method argument type;
previously it did not require a `token`, which was incorrect. It now
requires a `token` parameter, which matches the expectations of this API
method.

### Full Changelog


[`ae755dc`](https://redirect.github.com/slackapi/node-slack-sdk/commit/ae755dc4)
web-api(fix): `oauth.v2.exchange` method requires a `token` parameter
([#&#8203;1779](https://redirect.github.com/slackapi/node-slack-sdk/issues/1779))
- thanks for reporting
[@&#8203;iggyray](https://redirect.github.com/iggyray)!

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-06 23:01:09 +00:00
Steve Larson
428eebeaf8
Added custom font support for themes (#21817)
ref [DES-949](https://linear.app/tryghost/issue/DES-949/

177e604501

This adds custom fonts feature allowing users to select heading and body
fonts for their themes from a curated list. This allows publishers to
have more control over their brand, and allows themes to have a wider
range of styles to appeal to different audiences.

Without custom fonts support, themes will continue to work as normal,
but users won't be able to customize their typography. As for the
official themes, all of them will support custom fonts.
2024-12-05 16:39:41 +00:00
renovate[bot]
4a91c08328
Update dependency webpack to v5.97.1 (#21814)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [webpack](https://redirect.github.com/webpack/webpack) | [`5.97.0` ->
`5.97.1`](https://renovatebot.com/diffs/npm/webpack/5.97.0/5.97.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.97.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/webpack/5.97.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/webpack/5.97.0/5.97.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.97.0/5.97.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>webpack/webpack (webpack)</summary>

###
[`v5.97.1`](https://redirect.github.com/webpack/webpack/releases/tag/v5.97.1)

[Compare
Source](https://redirect.github.com/webpack/webpack/compare/v5.97.0...v5.97.1)

##### Bug Fixes

-   Performance regression
-   Sub define key should't be renamed when it's a defined variable

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-05 14:41:39 +00:00
renovate[bot]
bd9fd1587c
Pin dependency dompurify to 3.2.2 (#21808)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [dompurify](https://redirect.github.com/cure53/DOMPurify) |
dependencies | pin | [`^3.2.2` ->
`3.2.2`](https://renovatebot.com/diffs/npm/dompurify/3.2.2/3.2.2) |

Add the preset `:preserveSemverRanges` to your config if you don't want
to pin your dependencies.

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-05 09:50:39 +00:00
Sag
a686d64029
🔒 Fixed SVG sanitization for staff profile pictures (#21798)
closes https://linear.app/ghost/issue/ENG-1506

- when uploading a SVG image as staff profile picture, we previously had
a validation against malicious `<script>` tags or `on*` attributes
- this has proven to be unsufficient, as malicious scripts can be added
via other tags (e.g. `<foreignObject>`) and other attributes (e.g.
`xlink:href`)
- we now satinize SVGs using the DOMPurify library during validation
- if the file is invalid and cannot be sanitized, we show an error to
the user
- also added support for sanitizing `.svgz` files
2024-12-05 17:36:04 +08:00
renovate[bot]
6677214eaa
Update dependency webpack to v5.97.0 (#21791)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [webpack](https://redirect.github.com/webpack/webpack) | [`5.96.1` ->
`5.97.0`](https://renovatebot.com/diffs/npm/webpack/5.96.1/5.97.0) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.97.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/webpack/5.97.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/webpack/5.96.1/5.97.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.96.1/5.97.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>webpack/webpack (webpack)</summary>

###
[`v5.97.0`](https://redirect.github.com/webpack/webpack/compare/v5.96.1...644f1d12716ba8f3c96d2efa279262560dd8c7fb)

[Compare
Source](https://redirect.github.com/webpack/webpack/compare/v5.96.1...644f1d12716ba8f3c96d2efa279262560dd8c7fb)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "* * * * 1-5" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS40Mi40IiwidXBkYXRlZEluVmVyIjoiMzkuNDIuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-12-03 13:53:10 +00:00
renovate[bot]
a065ada196
Update dependency mysql2 to v3.11.5 (#21763)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mysql2](https://sidorares.github.io/node-mysql2/docs)
([source](https://redirect.github.com/sidorares/node-mysql2)) |
[`3.11.4` ->
`3.11.5`](https://renovatebot.com/diffs/npm/mysql2/3.11.4/3.11.5) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mysql2/3.11.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mysql2/3.11.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mysql2/3.11.4/3.11.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mysql2/3.11.4/3.11.5?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>sidorares/node-mysql2 (mysql2)</summary>

###
[`v3.11.5`](https://redirect.github.com/sidorares/node-mysql2/blob/HEAD/Changelog.md#3115-2024-11-28)

[Compare
Source](https://redirect.github.com/sidorares/node-mysql2/compare/v3.11.4...v3.11.5)

##### Bug Fixes

- 1040 datetime fields returned without time part when time is 00:00:00
([#&#8203;3204](https://redirect.github.com/sidorares/node-mysql2/issues/3204))
([bded498](bded498006))
- circular dependencies
([#&#8203;3081](https://redirect.github.com/sidorares/node-mysql2/issues/3081))
([d5a76e6](d5a76e6c49))
- Deno `v2` requires `commonjs` type explicitly
([#&#8203;3209](https://redirect.github.com/sidorares/node-mysql2/issues/3209))
([cdc9415](cdc9415c7c))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-28 21:39:55 +00:00
Daniel Lockyer
f6d774ee93 Removed Lexical multiplayer experiment
fix https://linear.app/ghost/issue/ENG-1804/remove-lexicalmultiplayer-code

- this experiment never went anywhere and we'll probably change our plan
  in the future, so this commit cleans up all the relevant code in this
  repo for the feature, in order to cut down on the code we have
2024-11-28 16:00:10 +01:00
renovate[bot]
3aefb8951c
Update dependency @tryghost/koenig-lexical to v1.3.32 (#21745)
ref TryGhost/Koenig@5652bc6

This revert an issue that caused an extra tag in certain conditions in the rendering.
2024-11-28 09:25:18 +00:00
Steve Larson
48839c80ae
Added updated lock file for timezones bump (#21690)
ref c046bbda91
2024-11-21 20:04:08 +00:00
renovate[bot]
b098fb69be
Update dependency mailgun.js to v10.2.4 (#21685)
This PR contains the following updates:

| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [mailgun.js](https://redirect.github.com/mailgun/mailgun.js) |
[`10.2.3` ->
`10.2.4`](https://renovatebot.com/diffs/npm/mailgun.js/10.2.3/10.2.4) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/mailgun.js/10.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/npm/mailgun.js/10.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/npm/mailgun.js/10.2.3/10.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/mailgun.js/10.2.3/10.2.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>mailgun/mailgun.js (mailgun.js)</summary>

###
[`v10.2.4`](https://redirect.github.com/mailgun/mailgun.js/blob/HEAD/CHANGELOG.md#1024-2024-11-21)

[Compare
Source](https://redirect.github.com/mailgun/mailgun.js/compare/v10.2.3...9ab89f6f6e00a9bac87a987410b810d6c9d3a5d4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekday" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS4xOS4wIiwidXBkYXRlZEluVmVyIjoiMzkuMTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-11-21 16:54:50 +00:00
Steve Larson
600b3c66ed
Bumped Koenig (#21672)
no ref
2024-11-20 21:03:11 +00:00
Steve Larson
2447f37a14
Reverted custom fonts flag (#21645)
ref https://ghost.slack.com/archives/C025584CA/p1731950126867179

- moved custom fonts functionality back to a labs flag
- reverted gscan version to 4.45 which doesn't include the custom fonts
checks/warnings
2024-11-18 17:45:03 +00:00
renovate[bot]
0aae3bb1fc
Update dependency gscan to v4.46.0 (#21617) 2024-11-14 20:10:03 +08:00
renovate[bot]
ead408ed20
Updated Koenig packages (#21606)
ref https://linear.app/ghost/issue/ENG-1751

- changelog: 9ed048c5ff
2024-11-13 15:09:35 +08:00
renovate[bot]
a7a4b96aff Update Koenig packages 2024-11-12 13:26:04 +00:00
Chris Raible
85408d10b7
Added connection pool metrics to prometheus client (#21576)
ref
https://linear.app/ghost/issue/ENG-1592/start-monitoring-connection-pool-utilization-in-ghost

- This commit adds prometheus metrics to the connection pool so we can
start to track connection pool utilization, number of pending acquires,
and also adds some basic SQL query summary metrics like queries per
minute and query duration percentiles.
- The connection pool has now been theorized to be a main constraint of
Ghost for some time, but it's been challenging to get actual visibility
into the state of the connection pool. With this change, we should be
able to directly observe, monitor and alert on the connection pool.
- Updated grafana version to fix a bug in the query editor that was
fixed in 8.3, even though this is a couple versions ahead of production
2024-11-07 23:01:34 -08:00
Chris Raible
2eb1fdf7cd
Removed nodemon in favor of node --watch (#21572)
no issue

- We had reintroduced nodemon in
af0f26c75f (diff-bf18f8caf848e17b35e266db04bcaeaad05a3e5d069846615d2b1260482396e1)
for the docker setup, but it has since caused some issues with the `yarn
dev` script.
- In particular, it was causing a restart while migrations were running
in development, which left a migration lock on and prevented Ghost from
starting.
- This commit removes nodemon and replaces it with node --watch, which
we had been using in the past without issues.
2024-11-07 12:25:22 -08:00
Fabien 'egg' O'Carroll
d6cedaae06
Initialised ActivityPub integration on boot (#21558)
refs https://linear.app/ghost/issue/AP-500

We've got a new @tryghost/activitypub package, which is gonna handle all
of the wiring between Ghost and ActivityPub. Currently that is just the
configuration of webhooks for the internal ActivityPub integration.

All this logic is run on the boot of Ghost, though notably in a
non-blocking manner, it's initialised as part of the background services
so it should not have an effect on the time to serving requests. having
said that - it needs to be defensive against errors, which is why the
entire network request is in a try/catch, as well as lookups for the
integration able to handle missing data.

Unit tests use an in-memory sqlite instance, which means we're testing a
full flow, ideally there would be a way to get the schema from Ghost for
this, but for now this is acceptable IMO.
2024-11-07 13:55:51 +00:00
Fabien 'egg' O'Carroll
6dc2e7f3fe
Refactored identity token generation into separate service
refs https://linear.app/ghost/issue/AP-500

The logic for generating identity tokens, whilst small, is something
that we don't want to duplicate - as it concerns security & access - so
can easily break interactions between different services. We're gonna
need to use identity tokens as part of the initialisation of the
activitypub service, so this is pulling it out preemptively for that use
case

We shouldn't have logic inside of the endpoint controllers anyway, so
this is kinda general cleanup.
2024-11-07 13:16:33 +07:00
Chris Raible
7efbc60e1e
Improved error log output for prometheus pushgateway requests (#21556)
ref
https://linear.app/ghost/issue/ENG-1746/enable-ghost-to-push-metrics-to-a-pushgateway

- Trying to get Ghost working with the prometheus pushgateway in
staging, but it's logging an error each time it tries to push the
metrics. The error output is pretty useless for debugging, so this
commit improves the error messages to make it easier to debug.
2024-11-06 15:03:10 -08:00
Chris Raible
a26f63dc11
Configured local prometheus and pushgateway in docker-compose (#21538)
ref
https://linear.app/ghost/issue/ENG-1746/enable-ghost-to-push-metrics-to-a-pushgateway

- Added prometheus job to scrape the pushgateway
- Updated grafana dashboard to use the metrics from the pushgateway
- Added some logging to prometheus client to log errors when pushing
metrics to pushgateway
2024-11-06 11:36:37 -08:00
renovate[bot]
7a7e77f054 Pin dependency prom-client to 15.1.3 2024-11-06 04:37:08 +00:00
Chris Raible
190ebcd684
Added ability to push prometheus metrics to a pushgateway (#21526)
ref
https://linear.app/ghost/issue/ENG-1746/enable-ghost-to-push-metrics-to-a-pushgateway

- We'd like to use prometheus to expose metrics from Ghost, but the
"standard" approach of having prometheus scrape the `/metrics` endpoint
adds some complexity and additional challenges on Pro.
- A suggested simpler alternative is to use a pushgateway, to have Ghost
_push_ metrics to prometheus, rather than have prometheus scrape the
running instances.
- This PR introduces this functionality behind a configuration. 
- It also includes a refactor to the current metrics-server
implementation so all the related code for prometheus is colocated, and
the configuration is a bit more organized. `@tryghost/metrics-server`
has been renamed to `@tryghost/prometheus-metrics`, and it now includes
the metrics server and prometheus-client code itself (including the
pushgateway code)
- To enable the prometheus client alone, `prometheus:enabled` must be
true. This will _not_ enable the metrics server or the pushgateway — it
will essentially collect the metrics, but not do anything with them.
- To enable the metrics server, set `prometheus:metrics_server:enabled`
to true. You can also configure the host and port that the metrics
server should export the `/metrics` endpoint on in the
`prometheus:metrics_server` block.
- To enable the pushgateway, set `prometheus:pushgateway:enabled` to
true. You can also configure the pushgateway's `url`, the `interval` it
should push metrics in (in milliseconds) and the `jobName` in the
`prometheus:pushgateway` block.
2024-11-05 11:50:39 -08:00
renovate[bot]
b6f1ecc149 Update dependency mysql2 to v3.11.4 2024-11-05 18:22:17 +00:00
renovate[bot]
514a9487d9 Pin dependency workerpool to 9.1.3 2024-11-05 02:45:38 +00:00
Steve Larson
88db66a74c
Added experimental background job queue (#20985)
ref https://linear.app/tryghost/issue/ENG-1556/
- added background job queue behind config flags
- when enabled, is only used for the member email analytics updates in
order to speed up the parent job, and take load off of the main process
that is serving requests

The intent here is to decouple certain code paths from the main process where it is unnecessary, or worse, where it's part of the request. Primary use cases are email analytics (particularly the member stats [open rate]) which are not particularly helpful in the period immediately following an email send, while the click traffic and delivered/opened events are.

Related, the email link clicks themselves send off a cascade of events that are quite a burden on the main process currently and are somewhat tied to the request response when they needn't be. We'll be looking to tackle that after some initial testing with the email analytics job.
2024-11-04 10:13:15 -06:00
renovate[bot]
03f65afebb Update dependency webpack to v5.96.1 2024-11-01 12:28:55 +00:00
renovate[bot]
8541e8501c Update dependency webpack to v5.96.0 2024-10-31 23:50:19 +00:00
renovate[bot]
4c79887b79 Update dependency compression to v1.7.5 2024-10-31 16:49:11 +00:00
renovate[bot]
085afdeb74 Pin dependency clsx to 2.1.1 2024-10-31 11:02:29 +00:00
Djordje Vlaisavljevic
45711e197c
AP design bugs (#21395)
- Fixed links in profile description
- Stripped post content
- Fixed grey bg in Avatars
- Installed `clsx`

---------

Co-authored-by: Michael Barrett <mike@ghost.org>
2024-10-31 10:50:51 +00:00
renovate[bot]
4f4662490f
Update Koenig packages (#21480) 2024-10-31 10:11:27 +00:00
renovate[bot]
7589b36944 Update dependency nodemailer to v6.9.16 2024-10-28 11:17:18 +00:00