apostrophe 2.227.4 → 2.227.6

package/.github/workflows/main.yml

@@ -0,0 +1,43 @@
+name: Tests
+
+# Controls when the action will run.
+on:
+  push:
+    branches: ["main"]
+  pull_request:
+    branches: ["*"]
+
+  # Allows you to run this workflow manually from the Actions tab
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  build:
+    # The type of runner that the job will run on
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [18, 20]
+        mongodb-version: [4.4, 5.0, 6.0, 7.0]
+
+    # Steps represent a sequence of tasks that will be executed as part of the job
+    steps:
+      - name: Git checkout
+        uses: actions/checkout@v2
+
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v1
+        with:
+          node-version: ${{ matrix.node-version }}
+
+      - name: Start MongoDB
+        uses: supercharge/mongodb-github-action@1.3.0
+        with:
+          mongodb-version: ${{ matrix.mongodb-version }}
+
+      - run: npm install
+
+      - run: npm test
+        env:
+          CI: true

package/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## 2.227.6 (2024-04-29)
+
+### Changes
+
+* Replace `autocomplete="off"`, which modern browsers ignore, with `autocomplete="new-password"`
+so that (1) admin user's password is not stuffed into password fields when editing an entirely
+different user and (2) the admin user's username is not stuffed into the text field preceding
+it. Browser autocomplete is quite aggressive in 2024.
+
+## 2.227.5 (2024-04-18)
+
+### Changes
+
+* Update `emulate-mongo-2-driver`dependency to keep supporting `mongodb@2.x` queries while using `mongodb@6.x`.
+
 ## 2.227.4 2023-09-27
 
 ### Fixes

package/lib/modules/apostrophe-schemas/views/macros.html

@@ -87,7 +87,7 @@
 {%- endmacro -%}
 
 {%- macro passwordBody(field, options) -%}
-  <input id="{{ options.id }}" class="apos-field-input apos-field-input-text{% if options.fieldClasses %} {{ options.fieldClasses }}{% endif %}" name="{{ field.name }}" autocomplete="off" type="password"{% if field.readOnly %} disabled{% endif %}{% if options.fieldAttributes %} {{ options.fieldAttributes }}{% endif %}>
+  <input id="{{ options.id }}" class="apos-field-input apos-field-input-text{% if options.fieldClasses %} {{ options.fieldClasses }}{% endif %}" name="{{ field.name }}" autocomplete="new-password" type="password"{% if field.readOnly %} disabled{% endif %}{% if options.fieldAttributes %} {{ options.fieldAttributes }}{% endif %}>
 {%- endmacro -%}
 
 {%- macro tags(field) -%}

package/package.json

@@ -1,10 +1,10 @@
 {
   "name": "apostrophe",
-  "version": "2.227.4",
+  "version": "2.227.6",
   "description": "The Apostrophe Content Management System.",
   "main": "index.js",
   "scripts": {
-    "test": "npm run build-test-package-json && npm run lint && npm run audit && mocha --timeout 50000",
+    "test": "npm run build-test-package-json && npm run lint && mocha --timeout 50000",
     "audit": "npm audit --production",
     "lint": "eslint .",
     "build-test-package-json": "node ./test-lib/build-test-package-json.js"
@@ -39,7 +39,7 @@
     "credentials": "^3.0.2",
     "cuid": "^1.3.8",
     "diff": "^4.0.1",
-    "emulate-mongo-2-driver": "^1.2.3",
+    "emulate-mongo-2-driver": "^1.3.3",
     "express": "^4.17.1",
     "express-session": "^1.17.0",
     "glob": "^5.0.15",

package/test/base-url-env-var.js

@@ -13,6 +13,12 @@ describe('APOS_BASE_URL environment variable', function() {
     apos = require('../index.js')({
       root: module,
       shortName: 'test',
+      modules: {
+        'apostrophe-express': {
+          secret: 'xxx',
+          port: 7900
+        }
+      },
       afterInit: function(callback) {
         // In tests this will be the name of the test file,
         // so override that in order to get apostrophe to