ghost 4.22.4 → 4.23.0

package/core/built/assets/{ghost.min-2e3e64eb258cf424c59c3e308b4bc6e6.js → ghost.min-cccc107e881b74c7aaf1a73e1e5e0dee.js}

@@ -3538,7 +3538,7 @@ var r=t.default.extend(n.default,{init(){this.properties=this.properties||["name
 i.default.isLength(t||"",1)||(e.get("errors").add("name","Please enter a name."),e.get("hasValidated").addObject("email"),this.invalidate())},email(e){let t=e.get("email")
 Ember.isBlank(t)?(e.get("errors").add("email","Please enter an email."),this.invalidate()):i.default.isEmail(t)||(e.get("errors").add("email","Invalid Email."),this.invalidate()),e.get("hasValidated").addObject("email")},password(e){this.passwordValidation(e)}})
 e.default=r})),define("ghost-admin/validators/offer",["exports","ghost-admin/validators/base","validator"],(function(e,t,n){Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0
-var i=t.default.create({properties:["name","amount","displayTitle","displayDescription","code","durationInMonths"],name(e){e.name||(e.errors.add("name","Please enter a name."),this.invalidate()),n.default.isLength(e.name||"",0,191)||(e.errors.add("name","Name cannot be longer than 191 characters."),this.invalidate())},amount(e){e.amount||(e.errors.add("amount","Please enter the amount."),this.invalidate())},displayDescription(e){n.default.isLength(e.displayDescription||"",0,191)||(e.errors.add("displayDescription","Display description cannot be longer than 191 characters."),this.invalidate())},durationInMonths(e){"repeating"!==e.duration||e.durationInMonths||(e.errors.add("durationInMonths","Please enter the duration in months."),this.invalidate())},code(e){e.code||(e.errors.add("code","Please enter an offer code."),this.invalidate())}})
+var i=t.default.create({properties:["name","amount","displayTitle","displayDescription","code","durationInMonths"],name(e){e.name||(e.errors.add("name","Please enter a name."),this.invalidate()),n.default.isLength(e.name||"",0,40)||(e.errors.add("name","Name cannot be longer than 40 characters."),this.invalidate())},amount(e){e.amount||(e.errors.add("amount","Please enter the amount."),this.invalidate())},displayDescription(e){n.default.isLength(e.displayDescription||"",0,191)||(e.errors.add("displayDescription","Display description cannot be longer than 191 characters."),this.invalidate())},durationInMonths(e){"repeating"!==e.duration||e.durationInMonths||(e.errors.add("durationInMonths","Please enter the duration in months."),this.invalidate())},code(e){e.code||(e.errors.add("code","Please enter an offer code."),this.invalidate())}})
 e.default=i})),define("ghost-admin/validators/post",["exports","ghost-admin/validators/base","moment","validator"],(function(e,t,n,i){Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0
 var r=t.default.create({properties:["title","authors","customExcerpt","canonicalUrl","codeinjectionHead","codeinjectionFoot","metaTitle","metaDescription","ogtitle","ogDescription","twitterTitle","twitterDescription","publishedAtBlogTime","publishedAtBlogDate","emailSubject","featureImageAlt"],title(e){Ember.isBlank(e.title)&&(e.errors.add("title","You must specify a title for the post."),this.invalidate()),i.default.isLength(e.title||"",0,255)||(e.errors.add("title","Title cannot be longer than 255 characters."),this.invalidate())},authors(e){Ember.isEmpty(e.authors)&&(e.errors.add("authors","At least one author is required."),this.invalidate())},canonicalUrl(e){let t=new RegExp(/^(\/|[a-zA-Z0-9-]+:)/),n=e.canonicalUrl
 Ember.isBlank(n)||(n.match(/\s/)||!i.default.isURL(n,{require_protocol:!0})&&!n.match(t)?(e.errors.add("canonicalUrl","Please enter a valid URL"),this.invalidate()):i.default.isLength(e.canonicalUrl,0,2e3)||(e.errors.add("canonicalUrl","Canonical URL is too long, max 2000 chars"),this.invalidate()))},customExcerpt(e){i.default.isLength(e.customExcerpt||"",0,300)||(e.errors.add("customExcerpt","Excerpt cannot be longer than 300 characters."),this.invalidate())},visibility(e){Ember.isBlank(e.visibility)&&!e.isNew&&(e.errors.add("visibility","Please select at least one tier"),this.invalidate())},visibilityFilter(e){!Ember.isBlank(e.visibilityFilter)||Ember.isBlank(e.visibility)||"filter"!==e.visibility||e.isNew||(e.errors.add("visibilityFilter","Please select at least one tier"),this.invalidate())},codeinjectionFoot(e){i.default.isLength(e.codeinjectionFoot||"",0,65535)||(e.errors.add("codeinjectionFoot","Footer code cannot be longer than 65535 characters."),this.invalidate())},codeinjectionHead(e){i.default.isLength(e.codeinjectionHead||"",0,65535)||(e.errors.add("codeinjectionHead","Header code cannot be longer than 65535 characters."),this.invalidate())},metaTitle(e){i.default.isLength(e.metaTitle||"",0,300)||(e.errors.add("metaTitle","Meta Title cannot be longer than 300 characters."),this.invalidate())},metaDescription(e){i.default.isLength(e.metaDescription||"",0,500)||(e.errors.add("metaDescription","Meta Description cannot be longer than 500 characters."),this.invalidate())},ogTitle(e){i.default.isLength(e.ogTitle||"",0,300)||(e.errors.add("ogTitle","Facebook Title cannot be longer than 300 characters."),this.invalidate())},ogDescription(e){i.default.isLength(e.ogDescription||"",0,500)||(e.errors.add("ogDescription","Facebook Description cannot be longer than 500 characters."),this.invalidate())},twitterTitle(e){i.default.isLength(e.twitterTitle||"",0,300)||(e.errors.add("twitterTitle","Twitter Title cannot be longer than 300 characters."),this.invalidate())},twitterDescription(e){i.default.isLength(e.twitterDescription||"",0,500)||(e.errors.add("twitterDescription","Twitter Description cannot be longer than 500 characters."),this.invalidate())},emailSubject(e){i.default.isLength(e.emailSubject||"",0,300)||(e.errors.add("emailSubject","Email Subject cannot be longer than 300 characters."),this.invalidate())},_shouldValidatePublishedAtBlog:e=>Ember.isPresent(e.publishedAtUTC)||Ember.isPresent(e.publishedAtBlogDate)||Ember.isPresent(e.publishedAtBlogTime),publishedAtBlog(e){this.publishedAtBlogTime(e),this.publishedAtBlogDate(e)},publishedAtBlogTime(e){!/^(([0-1]?[0-9])|([2][0-3])):([0-5][0-9])$/.test(e.publishedAtBlogTime)&&this._shouldValidatePublishedAtBlog(e)&&(e.errors.add("publishedAtBlogTime",'Must be in format: "15:00"'),this.invalidate())},publishedAtBlogDate(e){let t=e.publishedAtBlogDate,i=e.publishedAtBlogTime
@@ -3601,6 +3601,6 @@ var i=t.default.create({properties:["name","event","targetUrl"],name(e){Ember.is
 e.default=i})),define("ghost-admin/views/application",["exports"],(function(e){Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0
 var t=Ember.Component.extend({})
 e.default=t})),define("ghost-admin/config/environment",[],(function(){try{var e="ghost-admin/config/environment",t=document.querySelector('meta[name="'+e+'"]').getAttribute("content"),n={default:JSON.parse(decodeURIComponent(t))}
-return Object.defineProperty(n,"__esModule",{value:!0}),n}catch(i){throw new Error('Could not read config from meta tag with name "'+e+'".')}})),runningTests||require("ghost-admin/app").default.create({version:"4.22",name:"ghost-admin"})
+return Object.defineProperty(n,"__esModule",{value:!0}),n}catch(i){throw new Error('Could not read config from meta tag with name "'+e+'".')}})),runningTests||require("ghost-admin/app").default.create({version:"4.23",name:"ghost-admin"})
 
-//# sourceMappingURL=ghost.min-2e3e64eb258cf424c59c3e308b4bc6e6.map
+//# sourceMappingURL=ghost.min-cccc107e881b74c7aaf1a73e1e5e0dee.map

package/core/server/data/migrations/versions/4.23/01-truncate-offer-names.js

@@ -0,0 +1,58 @@
+const logging = require('@tryghost/logging');
+const {createTransactionalMigration} = require('../../utils');
+
+/**
+ * @param {(val: string) => boolean} exists
+ * @param {string} requested
+ * @param {string} attempt
+ * @param {number} n
+ *
+ * @returns {string}
+ */
+function getUnique(exists, requested, attempt = requested, n = 1) {
+    if (!exists(attempt)) {
+        return attempt;
+    }
+    const newAttempt = requested.slice(0, -n.toString().length) + n;
+    return getUnique(exists, requested, newAttempt, n + 1);
+}
+
+module.exports = createTransactionalMigration(
+    async function up(knex) {
+        const allOffers = await knex
+            .select('id', 'name')
+            .from('offers');
+
+        const offersNeedingTrunctation = allOffers.filter((row) => {
+            return row.name.length >= 40;
+        });
+
+        if (offersNeedingTrunctation.length === 0) {
+            logging.warn('No Offers found needing truncation');
+            return;
+        } else {
+            logging.info(`Found ${offersNeedingTrunctation.length} Offers needing truncation`);
+        }
+
+        const truncatedOffers = offersNeedingTrunctation.reduce((offers, row) => {
+            function exists(name) {
+                return offers.find(offer => offer.name === name) !== undefined;
+            }
+
+            const updatedRow = {
+                id: row.id,
+                name: getUnique(exists, row.name.slice(0, 40))
+            };
+
+            return offers.concat(updatedRow);
+        }, []);
+
+        for (const truncatedOffer of truncatedOffers) {
+            await knex('offers')
+                .update('name', truncatedOffer.name)
+                .where('id', truncatedOffer.id);
+        }
+    },
+    // no-op we've lost the data required to roll this back
+    async function down() {}
+);

package/core/server/services/oembed.js

@@ -63,6 +63,7 @@ class OEmbed {
      */
     constructor({config, externalRequest}) {
         this.config = config;
+
         /** @type {IExternalRequest} */
         this.externalRequest = async (url, requestConfig) => {
             if (this.isIpOrLocalhost(url)) {
@@ -74,6 +75,7 @@ class OEmbed {
             }
             return response;
         };
+
         /** @type {ICustomProvider[]} */
         this.customProviders = [];
     }
@@ -108,27 +110,6 @@ class OEmbed {
         }
     }
 
-    /**
-     * @param {string} url
-     */
-    errorHandler(url) {
-        /**
-         * @param {Error|errors.GhostError} err
-         */
-        return async (err) => {
-            // allow specific validation errors through for better error messages
-            if (errors.utils.isIgnitionError(err) && err.errorType === 'ValidationError') {
-                throw err;
-            }
-
-            // log the real error because we're going to throw a generic "Unknown provider" error
-            logging.error(new errors.GhostError({err}));
-
-            // default to unknown provider to avoid leaking any app specifics
-            return this.unknownProvider(url);
-        };
-    }
-
     async fetchBookmarkData(url) {
         const metascraper = require('metascraper')([
             require('metascraper-url')(),
@@ -300,10 +281,9 @@ class OEmbed {
      * @returns {Promise<Object>}
      */
     async fetchOembedDataFromUrl(url, type) {
-        let data;
-
         try {
             const urlObject = new URL(url);
+
             for (const provider of this.customProviders) {
                 if (await provider.canSupportRequest(urlObject)) {
                     const result = await provider.getOEmbedData(urlObject, this.externalRequest);
@@ -313,23 +293,39 @@ class OEmbed {
                 }
             }
 
+            // fetch only bookmark when explicitly requested
             if (type === 'bookmark') {
                 return this.fetchBookmarkData(url);
             }
 
-            data = await this.fetchOembedData(url);
+            // attempt to fetch oembed
+            let data = await this.fetchOembedData(url);
 
+            // fallback to bookmark when we can't get oembed
             if (!data && !type) {
                 data = await this.fetchBookmarkData(url);
             }
 
+            // couldn't get anything, throw a validation error
             if (!data) {
-                data = await this.unknownProvider(url);
+                return this.unknownProvider(url);
             }
 
             return data;
-        } catch (e) {
-            return this.errorHandler(url);
+        } catch (err) {
+            // allow specific validation errors through for better error messages
+            if (errors.utils.isIgnitionError(err) && err.errorType === 'ValidationError') {
+                throw err;
+            }
+
+            // log the real error because we're going to throw a generic "Unknown provider" error
+            logging.error(new errors.GhostError({
+                message: 'Encountered error when fetching oembed',
+                err
+            }));
+
+            // default to unknown provider to avoid leaking any app specifics
+            return this.unknownProvider(url);
         }
     }
 }

package/core/server/web/admin/views/default-prod.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.22%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.23%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -60,7 +60,7 @@
 
 
                 <script src="assets/vendor.min-c9002845b6c30ac978abdadde9f33d7c.js"></script>
-                <script src="assets/ghost.min-2e3e64eb258cf424c59c3e308b4bc6e6.js"></script>
+                <script src="assets/ghost.min-cccc107e881b74c7aaf1a73e1e5e0dee.js"></script>
             
 </body>
 </html>

package/core/server/web/admin/views/default.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.22%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.23%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -60,7 +60,7 @@
 
 
                 <script src="assets/vendor.min-c9002845b6c30ac978abdadde9f33d7c.js"></script>
-                <script src="assets/ghost.min-2e3e64eb258cf424c59c3e308b4bc6e6.js"></script>
+                <script src="assets/ghost.min-cccc107e881b74c7aaf1a73e1e5e0dee.js"></script>
             
 </body>
 </html>

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghost",
-  "version": "4.22.4",
+  "version": "4.23.0",
   "description": "The professional publishing platform",
   "author": "Ghost Foundation",
   "homepage": "https://ghost.org",
@@ -79,10 +79,10 @@
     "@tryghost/limit-service": "1.0.0",
     "@tryghost/logging": "1.0.1",
     "@tryghost/magic-link": "1.0.14",
-    "@tryghost/members-api": "2.7.4",
+    "@tryghost/members-api": "2.7.5",
     "@tryghost/members-csv": "1.1.8",
     "@tryghost/members-importer": "0.3.4",
-    "@tryghost/members-offers": "0.10.2",
+    "@tryghost/members-offers": "0.10.3",
     "@tryghost/members-ssr": "1.0.15",
     "@tryghost/metrics": "1.0.1",
     "@tryghost/minifier": "0.1.1",
@@ -159,7 +159,7 @@
     "mysql": "2.18.1",
     "nconf": "0.11.3",
     "node-jose": "2.0.0",
-    "oembed-parser": "1.5.2",
+    "oembed-parser": "1.4.9",
     "passport": "0.5.0",
     "passport-google-oauth": "2.0.0",
     "path-match": "1.2.4",

package/yarn.lock

@@ -1866,10 +1866,10 @@
     "@tryghost/domain-events" "^0.1.3"
     "@tryghost/member-events" "^0.3.1"
 
-"@tryghost/members-api@2.7.4":
-  version "2.7.4"
-  resolved "https://registry.yarnpkg.com/@tryghost/members-api/-/members-api-2.7.4.tgz#0941f8d892fb72c15f820947b2ac444bd570cd6d"
-  integrity sha512-C7w/aKRzDwR3Aol0mVborOQAv6mE8cVV4G0J2L757BjhyKuMeVAOb6X+uCYBLNhe0zabiKow6GwN+f1M/qXp4A==
+"@tryghost/members-api@2.7.5":
+  version "2.7.5"
+  resolved "https://registry.yarnpkg.com/@tryghost/members-api/-/members-api-2.7.5.tgz#693aad037697757e8c5f69f267606208bbb9c19f"
+  integrity sha512-KieQlWshDAUG3CxHjN1J8k3IH5tl/oCDEB7SM3nnbZoVV2frSnFInAHXCLFwkjunGx0dpJEdzVUgr/VdNlb9DA==
   dependencies:
     "@tryghost/debug" "^0.1.2"
     "@tryghost/domain-events" "^0.1.3"
@@ -1879,7 +1879,7 @@
     "@tryghost/member-analytics-service" "^0.1.4"
     "@tryghost/member-events" "^0.3.1"
     "@tryghost/members-analytics-ingress" "^0.1.5"
-    "@tryghost/members-payments" "^0.1.4"
+    "@tryghost/members-payments" "^0.1.5"
     "@tryghost/members-stripe-service" "^0.5.0"
     "@tryghost/tpl" "^0.1.2"
     "@types/jsonwebtoken" "^8.5.1"
@@ -1914,21 +1914,21 @@
     "@tryghost/tpl" "^0.1.3"
     moment-timezone "0.5.23"
 
-"@tryghost/members-offers@0.10.2", "@tryghost/members-offers@^0.10.2":
-  version "0.10.2"
-  resolved "https://registry.yarnpkg.com/@tryghost/members-offers/-/members-offers-0.10.2.tgz#5716e9be902ef924c3fb9fad48a7ab38cd58b7c0"
-  integrity sha512-LL+Rrn5VHwGf8cMnIVCFhkkBI6Eg1CkVjLa3qi0/NRncy28IhVn0jjg1aJa6hoicCWZLg1/efT2RhI5RvC4Gzw==
+"@tryghost/members-offers@0.10.3", "@tryghost/members-offers@^0.10.3":
+  version "0.10.3"
+  resolved "https://registry.yarnpkg.com/@tryghost/members-offers/-/members-offers-0.10.3.tgz#759cf2c0650b09309e9295f178aff17990d29d5c"
+  integrity sha512-W0lGfOfJkRrESxBEgkBW5XqQuhW/5Cj+QIzOb2b6nT8u3VCE4dX0VCkLWrc6HJq+Hpgv0potmGOLoj37xvFmEw==
   dependencies:
     "@nexes/mongo-utils" "^0.3.1"
     "@tryghost/string" "^0.1.20"
 
-"@tryghost/members-payments@^0.1.4":
-  version "0.1.4"
-  resolved "https://registry.yarnpkg.com/@tryghost/members-payments/-/members-payments-0.1.4.tgz#613e588b354a3e432f159f9179c946d90388bf85"
-  integrity sha512-0fA0uLRV5zPaZgEl7XuQYqtLZjJWWJVUXZq2xiKNi5jw4/koCPKjVicBOuMtRWBK0Nn5Mma6B9uBvhkMGUMqgw==
+"@tryghost/members-payments@^0.1.5":
+  version "0.1.5"
+  resolved "https://registry.yarnpkg.com/@tryghost/members-payments/-/members-payments-0.1.5.tgz#9d7f7f48e118a836c5825e19403dc4c0611d4976"
+  integrity sha512-iT61ffRqVH89KUOUtzDrXTn7fG38/LUcKFaFgrnWhTwcVdcglKefE2cWAjm25BNcYKM3lHJFxG/3PTVHmcOvTw==
   dependencies:
     "@tryghost/domain-events" "^0.1.3"
-    "@tryghost/members-offers" "^0.10.2"
+    "@tryghost/members-offers" "^0.10.3"
 
 "@tryghost/members-ssr@1.0.15":
   version "1.0.15"
@@ -3757,6 +3757,13 @@ cron-validate@^1.4.1, cron-validate@^1.4.3:
   dependencies:
     yup "0.32.9"
 
+cross-fetch@^3.1.4:
+  version "3.1.4"
+  resolved "https://registry.yarnpkg.com/cross-fetch/-/cross-fetch-3.1.4.tgz#9723f3a3a247bf8b89039f3a380a9244e8fa2f39"
+  integrity sha512-1eAtFWdIubi6T4XPy6ei9iUFoKpUkIF971QLN8lIvvvwueI65+Nw5haMNKUwfJxabqlIIDODJKGrQ66gxC0PbQ==
+  dependencies:
+    node-fetch "2.6.1"
+
 cross-spawn@^6.0.5:
   version "6.0.5"
   resolved "https://registry.yarnpkg.com/cross-spawn/-/cross-spawn-6.0.5.tgz#4a5ec7c64dfae22c3a14124dbacdee846d80cbc4"
@@ -5683,7 +5690,7 @@ got@9.6.0, got@^9.6.0:
     to-readable-stream "^1.0.0"
     url-parse-lax "^3.0.0"
 
-got@^11.8.2, got@~11.8.2:
+got@~11.8.2:
   version "11.8.2"
   resolved "https://registry.yarnpkg.com/got/-/got-11.8.2.tgz#7abb3959ea28c31f3576f1576c1effce23f33599"
   integrity sha512-D0QywKgIe30ODs+fm8wMZiAcZjypcCodPNuMz5H9Mny7RJ+IjJ10BdmGW7OM7fHXP+O7r6ZwapQ/YQmMSvB0UQ==
@@ -8447,6 +8454,11 @@ node-addon-api@^4.2.0:
   resolved "https://registry.yarnpkg.com/node-addon-api/-/node-addon-api-4.2.0.tgz#117cbb5a959dff0992e1c586ae0393573e4d2a87"
   integrity sha512-eazsqzwG2lskuzBqCGPi7Ac2UgOoMz8JVOXVhTvvPDYhthvNpefx8jWD8Np7Gv+2Sz0FlPWZk0nJV0z598Wn8Q==
 
+node-fetch@2.6.1:
+  version "2.6.1"
+  resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.1.tgz#045bd323631f76ed2e2b55573394416b639a0052"
+  integrity sha512-V4aYg89jEoVRxRb2fJdAg8FHvI7cEyYdVAh94HH0UIK8oJxUfkjlDQN9RbMx+bEjP7+ggMiFRprSti032Oipxw==
+
 node-fetch@^2.6.0:
   version "2.6.6"
   resolved "https://registry.yarnpkg.com/node-fetch/-/node-fetch-2.6.6.tgz#1751a7c01834e8e1697758732e9efb6eeadfaf89"
@@ -8758,12 +8770,12 @@ object.pick@^1.2.0, object.pick@^1.3.0:
   dependencies:
     isobject "^3.0.1"
 
-oembed-parser@1.5.2:
-  version "1.5.2"
-  resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.5.2.tgz#a35830793f0cf03519ffedb9a43b815d291f0327"
-  integrity sha512-Um9aqB6fu1+DmxyKawuVcP4TpNv7gw9jmd65mIVxkQxR40+BpEz2jrl/0xaahV67omOl9eGv/OxtK0O7zVh5JQ==
+oembed-parser@1.4.9:
+  version "1.4.9"
+  resolved "https://registry.yarnpkg.com/oembed-parser/-/oembed-parser-1.4.9.tgz#d23127c96185dfa2d998b8567e6c7df164f3d824"
+  integrity sha512-RCOjuv20IMm9XekZB1ZefdYPc+x5qe8IyCeY/xcN71I2z70vQl+L420eI5Mjyy/NQFLv+QPEgj/aYh1vptO83w==
   dependencies:
-    got "^11.8.2"
+    cross-fetch "^3.1.4"
 
 on-finished@^2.3.0, on-finished@~2.3.0:
   version "2.3.0"