ghost 4.32.1 → 4.33.1

package/core/server/services/stripe/service.js

@@ -0,0 +1,58 @@
+const _ = require('lodash');
+const StripeService = require('@tryghost/members-stripe-service');
+const logging = require('@tryghost/logging');
+const membersService = require('../members');
+const config = require('../../../shared/config');
+const settings = require('../../../shared/settings-cache');
+const urlUtils = require('../../../shared/url-utils');
+const events = require('../../lib/common/events');
+const models = require('../../models');
+const {getConfig} = require('./config');
+
+async function configureApi() {
+    const cfg = getConfig(settings, config, urlUtils);
+    if (cfg) {
+        await module.exports.configure(cfg);
+        return true;
+    }
+    return false;
+}
+
+const debouncedConfigureApi = _.debounce(() => {
+    configureApi();
+}, 600);
+
+module.exports = new StripeService({
+    membersService,
+    models: _.pick(models, ['Product', 'StripePrice', 'StripeCustomerSubscription', 'StripeProduct', 'MemberStripeCustomer', 'Offer', 'Settings']),
+    StripeWebhook: {
+        async get() {
+            return {
+                webhook_id: settings.get('members_stripe_webhook_id'),
+                secret: settings.get('members_stripe_webhook_secret')
+            };
+        },
+        async save(data) {
+            await models.Settings.edit([{
+                key: 'members_stripe_webhook_id',
+                value: data.webhook_id
+            }, {
+                key: 'members_stripe_webhook_secret',
+                value: data.secret
+            }]);
+        }
+    }
+});
+
+module.exports.init = async function init() {
+    try {
+        await configureApi();
+    } catch (err) {
+        logging.error(err);
+    }
+    events.on('settings.edited', function (model) {
+        if (['stripe_publishable_key', 'stripe_secret_key', 'stripe_connect_publishable_key', 'stripe_connect_secret_key'].includes(model.get('key'))) {
+            debouncedConfigureApi();
+        }
+    });
+};

package/core/server/update-check.js

@@ -4,6 +4,7 @@ const api = require('./api');
 const config = require('../shared/config');
 const urlUtils = require('./../shared/url-utils');
 const jobsService = require('./services/jobs');
+const databaseInfo = require('./data/db/info');
 
 const request = require('@tryghost/request');
 const ghostVersion = require('@tryghost/version');
@@ -44,7 +45,7 @@ module.exports = async () => {
         config: {
             mail: config.get('mail'),
             env: config.get('env'),
-            databaseType: config.get('database').client,
+            databaseType: databaseInfo.getEngine(),
             checkEndpoint: config.get('updateCheck:url'),
             isPrivacyDisabled: config.isPrivacyDisabled('useUpdateCheck'),
             notificationGroups: config.get('notificationGroups'),

package/core/server/web/admin/views/default-prod.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.32%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%2C%22propagation%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.33%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -21,16 +21,13 @@
     <meta name="apple-mobile-web-app-title" content="Ghost" />
 
     <link rel="shortcut icon" href="assets/img/favicon.ico" />
-    <link rel="apple-touch-icon-precomposed" href="assets/img/touch-icon-iphone-d2790931c3477664981061ed9fa5242e.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="76x76" href="assets/img/touch-icon-ipad-3117c0fa950d0fc43c95becef61f4167.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="120x120" href="assets/img/small-42ff134f320b8b5a6eca3781c4e4b2db.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="152x152" href="assets/img/medium-7359075af28d69523987ff4c0e2067c5.png" />
+    <link rel="apple-touch-icon" href="assets/img/apple-touch-icon-74680e326a7e87b159d366c7d4fb3d4b.png" />
 
     <meta name="application-name" content="Ghost" />
-    <meta name="msapplication-TileColor" content="#ffffff" />
-    <meta name="msapplication-square70x70logo" content="assets/img/small-42ff134f320b8b5a6eca3781c4e4b2db.png" />
-    <meta name="msapplication-square150x150logo" content="assets/img/medium-7359075af28d69523987ff4c0e2067c5.png" />
-    <meta name="msapplication-square310x310logo" content="assets/img/large-bf46e150380a4979a7389b45f5bb479d.png" />
+    <meta name="msapplication-TileColor" content="#15171A" />
+    <meta name="msapplication-square70x70logo" content="assets/img/small-b90396925485f17b2ca82c31be42de5f.png" />
+    <meta name="msapplication-square150x150logo" content="assets/img/medium-fef07013cffd5c45a655a250912a0ad7.png" />
+    <meta name="msapplication-square310x310logo" content="assets/img/large-ac90af7c93a4b47e8d956fa9fef31d9d.png" />
 
     <!-- variables that we don't want postcss-custom-properties to remove -->
     <style>
@@ -40,8 +37,8 @@
     </style>
 
     
-                <link rel="stylesheet" href="assets/vendor.min-0e0334a490951ab747706621f9ccd8b6.css">
-                <link rel="stylesheet" href="assets/ghost.min-2d5f48403647d1e11805691cc7ad0835.css" title="light">
+                <link rel="stylesheet" href="assets/vendor.min-2c8ad32b7960bb605ebc20097fee5ebd.css">
+                <link rel="stylesheet" href="assets/ghost.min-1f0218f33e08f8d69b2159977d0c9318.css" title="light">
             
 
     
@@ -59,8 +56,8 @@
 <div id="ember-basic-dropdown-wormhole"></div>
 
 
-                <script src="assets/vendor.min-45e83041aeba4ea7b184f669b20a2b23.js"></script>
-                <script src="assets/ghost.min-7535b70693bcefde1665bdf621087cbe.js"></script>
+                <script src="assets/vendor.min-d43620e98444a46441495445f4c155f8.js"></script>
+                <script src="assets/ghost.min-501554f903f29164473a5dc620caaddb.js"></script>
             
 </body>
 </html>

package/core/server/web/admin/views/default.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.32%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22emberKeyboard%22%3A%7B%22disableInputsInitializer%22%3Atrue%2C%22propagation%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22rootURL%22%3A%22%2F%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%224.33%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22moment%22%3A%7B%22includeTimezone%22%3A%22all%22%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -21,16 +21,13 @@
     <meta name="apple-mobile-web-app-title" content="Ghost" />
 
     <link rel="shortcut icon" href="assets/img/favicon.ico" />
-    <link rel="apple-touch-icon-precomposed" href="assets/img/touch-icon-iphone-d2790931c3477664981061ed9fa5242e.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="76x76" href="assets/img/touch-icon-ipad-3117c0fa950d0fc43c95becef61f4167.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="120x120" href="assets/img/small-42ff134f320b8b5a6eca3781c4e4b2db.png" />
-    <link rel="apple-touch-icon-precomposed" sizes="152x152" href="assets/img/medium-7359075af28d69523987ff4c0e2067c5.png" />
+    <link rel="apple-touch-icon" href="assets/img/apple-touch-icon-74680e326a7e87b159d366c7d4fb3d4b.png" />
 
     <meta name="application-name" content="Ghost" />
-    <meta name="msapplication-TileColor" content="#ffffff" />
-    <meta name="msapplication-square70x70logo" content="assets/img/small-42ff134f320b8b5a6eca3781c4e4b2db.png" />
-    <meta name="msapplication-square150x150logo" content="assets/img/medium-7359075af28d69523987ff4c0e2067c5.png" />
-    <meta name="msapplication-square310x310logo" content="assets/img/large-bf46e150380a4979a7389b45f5bb479d.png" />
+    <meta name="msapplication-TileColor" content="#15171A" />
+    <meta name="msapplication-square70x70logo" content="assets/img/small-b90396925485f17b2ca82c31be42de5f.png" />
+    <meta name="msapplication-square150x150logo" content="assets/img/medium-fef07013cffd5c45a655a250912a0ad7.png" />
+    <meta name="msapplication-square310x310logo" content="assets/img/large-ac90af7c93a4b47e8d956fa9fef31d9d.png" />
 
     <!-- variables that we don't want postcss-custom-properties to remove -->
     <style>
@@ -40,8 +37,8 @@
     </style>
 
     
-                <link rel="stylesheet" href="assets/vendor.min-0e0334a490951ab747706621f9ccd8b6.css">
-                <link rel="stylesheet" href="assets/ghost.min-2d5f48403647d1e11805691cc7ad0835.css" title="light">
+                <link rel="stylesheet" href="assets/vendor.min-2c8ad32b7960bb605ebc20097fee5ebd.css">
+                <link rel="stylesheet" href="assets/ghost.min-1f0218f33e08f8d69b2159977d0c9318.css" title="light">
             
 
     
@@ -59,8 +56,8 @@
 <div id="ember-basic-dropdown-wormhole"></div>
 
 
-                <script src="assets/vendor.min-45e83041aeba4ea7b184f669b20a2b23.js"></script>
-                <script src="assets/ghost.min-7535b70693bcefde1665bdf621087cbe.js"></script>
+                <script src="assets/vendor.min-d43620e98444a46441495445f4c155f8.js"></script>
+                <script src="assets/ghost.min-501554f903f29164473a5dc620caaddb.js"></script>
             
 </body>
 </html>

package/core/server/web/members/app.js

@@ -6,6 +6,7 @@ const express = require('../../../shared/express');
 const urlUtils = require('../../../shared/url-utils');
 const sentry = require('../../../shared/sentry');
 const membersService = require('../../services/members');
+const stripeService = require('../../services/stripe');
 const middleware = membersService.middleware;
 const shared = require('../shared');
 const labs = require('../../../shared/labs');
@@ -28,7 +29,7 @@ module.exports = function setupMembersApp() {
     // Routing
 
     // Webhooks
-    membersApp.post('/webhooks/stripe', middleware.stripeWebhooks);
+    membersApp.post('/webhooks/stripe', bodyParser.raw({type: 'application/json'}), stripeService.webhookController.handle.bind(stripeService.webhookController));
 
     // Initializes members specific routes as well as assigns members specific data to the req/res objects
     // We don't want to add global bodyParser middleware as that interfers with stripe webhook requests on - `/webhooks`.
@@ -38,7 +39,7 @@ module.exports = function setupMembersApp() {
     membersApp.get('/api/session', middleware.getIdentityToken);
     membersApp.get('/api/offers/:id', middleware.getOfferData);
     membersApp.delete('/api/session', middleware.deleteSession);
-    membersApp.get('/api/site', middleware.getMemberSiteData);
+    membersApp.get('/api/site', shared.middleware.cacheControl('public', {maxAge: 30}), middleware.getMemberSiteData);
 
     // NOTE: this is wrapped in a function to ensure we always go via the getter
     membersApp.post('/api/send-magic-link', bodyParser.json(), shared.middleware.brute.membersAuth, (req, res, next) => membersService.api.middleware.sendMagicLink(req, res, next));

package/core/server/web/shared/middleware/cache-control.js

@@ -8,6 +8,11 @@
 
 const isString = require('lodash/isString');
 
+/**
+ * @param {'public'|'private'} profile Use "private" if you do not want caching
+ * @param {object} [options]
+ * @param {number} [options.maxAge] The max-age in seconds to use when profile is "public"
+ */
 const cacheControl = (profile, options = {maxAge: 0}) => {
     const profiles = {
         public: `public, max-age=${options.maxAge}`,
@@ -20,6 +25,13 @@ const cacheControl = (profile, options = {maxAge: 0}) => {
         output = profiles[profile];
     }
 
+    /**
+     * @param {import('express').Request} req
+     * @param {import('express').Response} res
+     * @param {() => void} next
+     *
+     * @returns {void}
+     */
     return function cacheControlHeaders(req, res, next) {
         if (output) {
             res.set({'Cache-Control': output});

package/core/shared/config/defaults.json

@@ -127,8 +127,8 @@
         "emailAnalytics": true
     },
     "portal": {
-        "url": "https://unpkg.com/@tryghost/portal@~1.13.0/umd/portal.min.js",
-        "version": "1.13"
+        "url": "https://unpkg.com/@tryghost/portal@~1.14.0/umd/portal.min.js",
+        "version": "1.14"
     },
     "tenor": {
         "publicReadOnlyApiKey": null,

package/core/shared/labs.js

@@ -30,7 +30,8 @@ const ALPHA_FEATURES = [
     'cardSettingsPanel',
     'urlCache',
     'beforeAfterCard',
-    'tweetGridCard'
+    'tweetGridCard',
+    'membersActivityFeed'
 ];
 
 module.exports.GA_KEYS = [...GA_FEATURES];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghost",
-  "version": "4.32.1",
+  "version": "4.33.1",
   "description": "The professional publishing platform",
   "author": "Ghost Foundation",
   "homepage": "https://ghost.org",
@@ -55,56 +55,58 @@
   "dependencies": {
     "@nexes/nql": "0.6.0",
     "@sentry/node": "6.16.1",
-    "@tryghost/adapter-manager": "0.2.26",
-    "@tryghost/admin-api-schema": "2.6.1",
-    "@tryghost/bookshelf-plugins": "0.3.5",
-    "@tryghost/bootstrap-socket": "0.2.15",
-    "@tryghost/color-utils": "0.1.5",
-    "@tryghost/config-url-helpers": "0.1.3",
-    "@tryghost/constants": "1.0.0",
+    "@tryghost/adapter-manager": "0.2.27",
+    "@tryghost/admin-api-schema": "2.7.0",
+    "@tryghost/bookshelf-plugins": "0.3.6",
+    "@tryghost/bootstrap-socket": "0.2.16",
+    "@tryghost/color-utils": "0.1.6",
+    "@tryghost/config-url-helpers": "0.1.4",
+    "@tryghost/constants": "1.0.1",
     "@tryghost/custom-theme-settings-service": "0.3.1",
-    "@tryghost/debug": "0.1.9",
+    "@tryghost/database-info": "0.1.0",
+    "@tryghost/debug": "0.1.10",
     "@tryghost/email-analytics-provider-mailgun": "1.0.7",
     "@tryghost/email-analytics-service": "1.0.5",
-    "@tryghost/errors": "1.2.0",
-    "@tryghost/express-dynamic-redirects": "0.2.2",
-    "@tryghost/helpers": "1.1.54",
-    "@tryghost/image-transform": "1.0.26",
-    "@tryghost/job-manager": "0.8.17",
-    "@tryghost/kg-card-factory": "3.1.0",
-    "@tryghost/kg-default-atoms": "3.1.0",
-    "@tryghost/kg-default-cards": "5.15.11",
-    "@tryghost/kg-markdown-html-renderer": "5.1.0",
-    "@tryghost/kg-mobiledoc-html-renderer": "5.3.1",
-    "@tryghost/limit-service": "1.0.8",
-    "@tryghost/logging": "2.0.0",
-    "@tryghost/magic-link": "1.0.14",
-    "@tryghost/members-api": "2.8.8",
-    "@tryghost/members-csv": "1.2.0",
-    "@tryghost/members-importer": "0.3.5",
-    "@tryghost/members-offers": "0.10.3",
-    "@tryghost/members-ssr": "1.0.16",
-    "@tryghost/metrics": "1.0.1",
-    "@tryghost/minifier": "0.1.9",
-    "@tryghost/mw-error-handler": "0.1.1",
-    "@tryghost/mw-session-from-token": "0.1.26",
-    "@tryghost/nodemailer": "0.3.8",
-    "@tryghost/package-json": "1.0.14",
-    "@tryghost/promise": "0.1.13",
-    "@tryghost/request": "0.1.10",
-    "@tryghost/root-utils": "0.3.7",
-    "@tryghost/security": "0.2.13",
-    "@tryghost/session-service": "0.1.36",
-    "@tryghost/settings-path-manager": "0.1.2",
-    "@tryghost/social-urls": "0.1.27",
-    "@tryghost/string": "0.1.21",
-    "@tryghost/tpl": "0.1.8",
+    "@tryghost/errors": "1.2.1",
+    "@tryghost/express-dynamic-redirects": "0.2.4",
+    "@tryghost/helpers": "1.1.55",
+    "@tryghost/image-transform": "1.0.27",
+    "@tryghost/job-manager": "0.8.18",
+    "@tryghost/kg-card-factory": "3.1.1",
+    "@tryghost/kg-default-atoms": "3.1.1",
+    "@tryghost/kg-default-cards": "5.15.12",
+    "@tryghost/kg-markdown-html-renderer": "5.1.1",
+    "@tryghost/kg-mobiledoc-html-renderer": "5.3.2",
+    "@tryghost/limit-service": "1.0.9",
+    "@tryghost/logging": "2.0.1",
+    "@tryghost/magic-link": "1.0.17",
+    "@tryghost/members-api": "4.4.1",
+    "@tryghost/members-csv": "1.2.3",
+    "@tryghost/members-importer": "0.4.1",
+    "@tryghost/members-offers": "0.10.5",
+    "@tryghost/members-ssr": "1.0.18",
+    "@tryghost/members-stripe-service": "0.6.4",
+    "@tryghost/metrics": "1.0.2",
+    "@tryghost/minifier": "0.1.10",
+    "@tryghost/mw-error-handler": "0.1.2",
+    "@tryghost/mw-session-from-token": "0.1.27",
+    "@tryghost/nodemailer": "0.3.9",
+    "@tryghost/package-json": "1.0.15",
+    "@tryghost/promise": "0.1.14",
+    "@tryghost/request": "0.1.11",
+    "@tryghost/root-utils": "0.3.8",
+    "@tryghost/security": "0.2.14",
+    "@tryghost/session-service": "0.1.37",
+    "@tryghost/settings-path-manager": "0.1.3",
+    "@tryghost/social-urls": "0.1.28",
+    "@tryghost/string": "0.1.22",
+    "@tryghost/tpl": "0.1.9",
     "@tryghost/update-check-service": "0.3.0",
-    "@tryghost/url-utils": "2.0.4",
-    "@tryghost/validator": "0.1.9",
-    "@tryghost/version": "0.1.7",
-    "@tryghost/vhost-middleware": "1.0.19",
-    "@tryghost/zip": "1.1.18",
+    "@tryghost/url-utils": "2.0.5",
+    "@tryghost/validator": "0.1.10",
+    "@tryghost/version": "0.1.8",
+    "@tryghost/vhost-middleware": "1.0.20",
+    "@tryghost/zip": "1.1.19",
     "amperize": "0.6.1",
     "analytics-node": "6.0.0",
     "bluebird": "3.7.2",
@@ -112,7 +114,7 @@
     "bookshelf": "1.2.0",
     "bookshelf-relations": "2.3.0",
     "brute-knex": "4.0.1",
-    "bson-objectid": "2.0.1",
+    "bson-objectid": "2.0.2",
     "bthreads": "0.5.1",
     "cheerio": "0.22.0",
     "compression": "1.7.4",
@@ -131,9 +133,9 @@
     "ghost-storage-base": "1.0.0",
     "glob": "7.2.0",
     "got": "9.6.0",
-    "gscan": "4.20.2",
+    "gscan": "4.22.0",
     "html-to-text": "5.1.1",
-    "image-size": "1.0.0",
+    "image-size": "1.0.1",
     "intl": "1.2.5",
     "intl-messageformat": "5.4.3",
     "js-yaml": "4.1.0",
@@ -175,7 +177,7 @@
     "xml": "1.0.1"
   },
   "optionalDependencies": {
-    "@tryghost/html-to-mobiledoc": "1.8.2",
+    "@tryghost/html-to-mobiledoc": "1.8.3",
     "sqlite3": "5.0.2"
   },
   "devDependencies": {
@@ -184,9 +186,9 @@
     "c8": "7.11.0",
     "chai": "4.3.4",
     "coffeescript": "2.6.1",
-    "cssnano": "5.0.14",
+    "cssnano": "5.0.15",
     "eslint": "7.32.0",
-    "eslint-plugin-ghost": "2.11.0",
+    "eslint-plugin-ghost": "2.12.0",
     "expect": "27.4.6",
     "grunt": "1.4.1",
     "grunt-bg-shell": "2.3.3",
@@ -200,20 +202,20 @@
     "grunt-subgrunt": "1.3.0",
     "grunt-update-submodules": "0.4.1",
     "jwks-rsa": "2.0.5",
-    "mocha": "9.1.3",
+    "mocha": "9.1.4",
     "mocha-slow-test-reporter": "0.1.2",
     "mock-knex": "0.4.10",
-    "nock": "13.2.1",
+    "nock": "13.2.2",
     "papaparse": "5.3.1",
     "postcss": "8.4.5",
     "rewire": "5.0.0",
     "should": "13.2.3",
     "sinon": "11.1.2",
-    "supertest": "6.1.6",
+    "supertest": "6.2.2",
     "tmp": "0.2.1"
   },
   "resolutions": {
-    "@tryghost/logging": "2.0.0",
+    "@tryghost/logging": "2.0.1",
     "moment": "2.24.0",
     "moment-timezone": "0.5.23"
   }