ghost 5.82.12 → 5.83.0

package/core/built/admin/index.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22cdnUrl%22%3A%22%22%2C%22editorUrl%22%3A%22%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.82%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22ember-websockets%22%3A%7B%22socketIO%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%2C%22editorFilename%22%3A%22koenig-lexical.umd.js%22%2C%22editorHash%22%3A%223eace8808c%22%2C%22adminXDemoFilename%22%3A%22admin-x-demo.js%22%2C%22adminXDemoHash%22%3A%226b30648e0d%22%2C%22adminXSettingsFilename%22%3A%22admin-x-settings.js%22%2C%22adminXSettingsHash%22%3A%22d91284430d%22%2C%22adminXActivitypubFilename%22%3A%22admin-x-activitypub.js%22%2C%22adminXActivitypubHash%22%3A%22c4fe53c34a%22%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22cdnUrl%22%3A%22%22%2C%22editorUrl%22%3A%22%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.83%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22ember-websockets%22%3A%7B%22socketIO%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%2C%22editorFilename%22%3A%22koenig-lexical.umd.js%22%2C%22editorHash%22%3A%2206e7453adf%22%2C%22adminXDemoFilename%22%3A%22admin-x-demo.js%22%2C%22adminXDemoHash%22%3A%222de5d3a326%22%2C%22adminXSettingsFilename%22%3A%22admin-x-settings.js%22%2C%22adminXSettingsHash%22%3A%22c56b800c39%22%2C%22adminXActivitypubFilename%22%3A%22admin-x-activitypub.js%22%2C%22adminXActivitypubHash%22%3A%22c4fe53c34a%22%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -37,7 +37,7 @@
     </style>
 
     <link integrity="" rel="stylesheet" href="assets/vendor-0ede59da8efb5e28fa929557f7ff7154.css">
-    <link integrity="" rel="stylesheet" href="assets/ghost-67652794f5902e84ccb0c67948563c1e.css" title="light">
+    <link integrity="" rel="stylesheet" href="assets/ghost-da77ec7395d5e861b94d529e8157ed3f.css" title="light">
 
     
 </head>
@@ -57,8 +57,8 @@
     <div id="ember-basic-dropdown-wormhole"></div>
 
     <script src="assets/vendor-0d51bbe51e0393cca143d7b52d073d8a.js"></script>
-<script src="assets/chunk.300.07bd40373843db34827c.js"></script>
-<script src="assets/chunk.524.d0e760b5fbf40755f861.js"></script>
-    <script src="assets/ghost-6f45467fa855b0c1da51c5f6c31f4744.js"></script>
+<script src="assets/chunk.509.d6d53e741bc279357eaf.js"></script>
+<script src="assets/chunk.524.8204e0b9f49cec9eed57.js"></script>
+    <script src="assets/ghost-d8a21c3ed32505399e33675d8cb7d044.js"></script>
 </body>
 </html>

package/core/server/data/migrations/versions/5.83/2024-05-28-02-20-55-add-show-subhead-column-newsletters.js

@@ -0,0 +1,9 @@
+// For information on writing migrations, see https://www.notion.so/ghost/Database-migrations-eb5b78c435d741d2b34a582d57c24253
+
+const {createAddColumnMigration} = require('../../utils');
+
+module.exports = createAddColumnMigration('newsletters', 'show_subhead', {
+    type: 'boolean',
+    nullable: false,
+    defaultTo: false
+});

package/core/server/data/schema/schema.js

@@ -30,6 +30,7 @@ module.exports = {
         header_image: {type: 'string', maxlength: 2000, nullable: true},
         show_header_icon: {type: 'boolean', nullable: false, defaultTo: true},
         show_header_title: {type: 'boolean', nullable: false, defaultTo: true},
+        show_subhead: {type: 'boolean', nullable: false, defaultTo: false},
         title_font_category: {type: 'string', maxlength: 191, nullable: false, defaultTo: 'sans_serif', validations: {isIn: [['serif', 'sans_serif']]}},
         title_alignment: {type: 'string', maxlength: 191, nullable: false, defaultTo: 'center', validations: {isIn: [['center', 'left']]}},
         show_feature_image: {type: 'boolean', nullable: false, defaultTo: true},

package/core/server/models/newsletter.js

@@ -29,7 +29,8 @@ const Newsletter = ghostBookshelf.Model.extend({
             background_color: 'light',
             border_color: null,
             title_color: null,
-            feedback_enabled: false
+            feedback_enabled: false,
+            show_subhead: false
         };
     },
 

package/core/server/services/members/middleware.js

@@ -47,12 +47,16 @@ const setAccessCookies = function setAccessCookies(member = undefined, res, free
     if (!hmacSecret) {
         return;
     }
+    const hmacSecretBuffer = Buffer.from(hmacSecret, 'base64');
+    if (hmacSecretBuffer.length === 0) {
+        return;
+    }
     const activeSubscription = member.subscriptions?.find(sub => sub.status === 'active');
 
     const cookieTimestamp = Math.floor(Date.now() / 1000); // to mitigate a cookie replay attack
     const memberTier = activeSubscription && activeSubscription.tier.id || freeTier.id;
     const memberTierAndTimestamp = `${memberTier}:${cookieTimestamp}`;
-    const memberTierHmac = crypto.createHmac('sha256', hmacSecret).update(memberTierAndTimestamp).digest('hex');
+    const memberTierHmac = crypto.createHmac('sha256', hmacSecretBuffer).update(memberTierAndTimestamp).digest('hex');
 
     const maxAge = 3600;
     const accessCookie = `ghost-access=${memberTierAndTimestamp}; Max-Age=${maxAge}; Path=/; HttpOnly; SameSite=Strict;`;

package/core/server/web/api/middleware/upload.js

@@ -6,6 +6,7 @@ const errors = require('@tryghost/errors');
 const config = require('../../../../shared/config');
 const tpl = require('@tryghost/tpl');
 const logging = require('@tryghost/logging');
+const {JSDOM} = require('jsdom');
 
 const messages = {
     db: {
@@ -144,14 +145,33 @@ const checkFileExists = (fileData) => {
 
 const checkFileIsValid = (fileData, types, extensions) => {
     const type = fileData.mimetype;
-
     if (types.includes(type) && extensions.includes(fileData.ext)) {
         return true;
     }
-
     return false;
 };
 
+/**
+ * 
+ * @param {String} filepath 
+ * @returns {Boolean}
+ * 
+ * Checks for the presence of <script> tags or 'on' attributes in an SVG file
+ * 
+ */
+const isSvgSafe = (filepath) => {
+    const fileContent = fs.readFileSync(filepath, 'utf8');
+    const document = new JSDOM(fileContent).window.document;
+    document.body.innerHTML = fileContent;
+    const svgEl = document.body.firstElementChild;
+    
+    const attributes = Array.from(svgEl.attributes).map(({name}) => name);
+    const hasScriptAttr = !!attributes.find(attr => attr.startsWith('on'));
+    const scripts = svgEl.getElementsByTagName('script');
+
+    return scripts.length === 0 && !hasScriptAttr ? true : false;
+};
+
 /**
  *
  * @param {Object} options
@@ -190,6 +210,14 @@ const validation = function ({type}) {
             }));
         }
 
+        if (req.file.ext === '.svg') {
+            if (!isSvgSafe(req.file.path)) {
+                return next(new errors.UnsupportedMediaTypeError({
+                    message: 'SVG files cannot contain <script> tags or "on" attributes.'
+                }));
+            }
+        }
+
         next();
     };
 };
@@ -261,5 +289,6 @@ module.exports = {
 // Exports for testing only
 module.exports._test = {
     checkFileExists,
-    checkFileIsValid
+    checkFileIsValid,
+    isSvgSafe
 };

package/core/shared/labs.js

@@ -51,7 +51,10 @@ const ALPHA_FEATURES = [
     'tipsAndDonations',
     'importMemberTier',
     'lexicalIndicators',
-    'adminXDemo'
+    'adminXDemo',
+    'editorSubtitle',
+    'newsletterSubtitle',
+    'internalLinkingAtLinks'
 ];
 
 module.exports.GA_KEYS = [...GA_FEATURES];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghost",
-  "version": "5.82.12",
+  "version": "5.83.0",
   "description": "The professional publishing platform",
   "author": "Ghost Foundation",
   "homepage": "https://ghost.org",
@@ -60,107 +60,107 @@
     "@extractus/oembed-extractor": "3.2.1",
     "@sentry/node": "7.116.0",
     "@tryghost/adapter-base-cache": "0.1.12",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.82.12.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.82.12.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.83.0.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.83.0.tgz",
     "@tryghost/admin-api-schema": "4.5.5",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.82.12.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.82.12.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.82.12.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.82.12.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.83.0.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.83.0.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.83.0.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.83.0.tgz",
     "@tryghost/bookshelf-plugins": "0.6.17",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.82.12.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.82.12.tgz",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.83.0.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.83.0.tgz",
     "@tryghost/color-utils": "0.2.2",
     "@tryghost/config-url-helpers": "1.0.12",
-    "@tryghost/constants": "file:components/tryghost-constants-5.82.12.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.82.12.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.82.12.tgz",
-    "@tryghost/database-info": "0.3.23",
-    "@tryghost/debug": "0.1.29",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.82.12.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.82.12.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.82.12.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.82.12.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.82.12.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.82.12.tgz",
-    "@tryghost/email-mock-receiver": "0.3.5",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.82.12.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.82.12.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.83.0.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.83.0.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.83.0.tgz",
+    "@tryghost/database-info": "0.3.24",
+    "@tryghost/debug": "0.1.30",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.83.0.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.83.0.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.83.0.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.83.0.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.83.0.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.83.0.tgz",
+    "@tryghost/email-mock-receiver": "0.3.6",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.83.0.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.83.0.tgz",
     "@tryghost/errors": "1.3.2",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.82.12.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.82.12.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.82.12.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.83.0.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.83.0.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.83.0.tgz",
     "@tryghost/helpers": "1.1.90",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.82.12.tgz",
-    "@tryghost/http-cache-utils": "0.1.14",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.82.12.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.83.0.tgz",
+    "@tryghost/http-cache-utils": "0.1.15",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.83.0.tgz",
     "@tryghost/image-transform": "1.3.0",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.82.12.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.82.12.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.82.12.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.83.0.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.83.0.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.83.0.tgz",
     "@tryghost/kg-card-factory": "5.0.4",
     "@tryghost/kg-converters": "1.0.4",
     "@tryghost/kg-default-atoms": "5.0.3",
     "@tryghost/kg-default-cards": "10.0.5",
-    "@tryghost/kg-default-nodes": "1.0.16",
-    "@tryghost/kg-html-to-lexical": "1.0.17",
-    "@tryghost/kg-lexical-html-renderer": "1.0.16",
+    "@tryghost/kg-default-nodes": "1.1.0",
+    "@tryghost/kg-html-to-lexical": "1.1.1",
+    "@tryghost/kg-lexical-html-renderer": "1.1.1",
     "@tryghost/kg-mobiledoc-html-renderer": "7.0.4",
     "@tryghost/limit-service": "1.2.14",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.82.12.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.82.12.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.82.12.tgz",
-    "@tryghost/logging": "2.4.14",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.82.12.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.82.12.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.82.12.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.82.12.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.82.12.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.82.12.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.82.12.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.82.12.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.82.12.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.82.12.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.82.12.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.82.12.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.82.12.tgz",
-    "@tryghost/metrics": "1.0.30",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.82.12.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.82.12.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.82.12.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.82.12.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.82.12.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.82.12.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.82.12.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.82.12.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.82.12.tgz",
-    "@tryghost/nodemailer": "0.3.41",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.83.0.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.83.0.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.83.0.tgz",
+    "@tryghost/logging": "2.4.15",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.83.0.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.83.0.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.83.0.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.83.0.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.83.0.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.83.0.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.83.0.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.83.0.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.83.0.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.83.0.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.83.0.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.83.0.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.83.0.tgz",
+    "@tryghost/metrics": "1.0.31",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.83.0.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.83.0.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.83.0.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.83.0.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.83.0.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.83.0.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.83.0.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.83.0.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.83.0.tgz",
+    "@tryghost/nodemailer": "0.3.42",
     "@tryghost/nql": "0.12.3",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.82.12.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.82.12.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.82.12.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.82.12.tgz",
-    "@tryghost/pretty-cli": "1.2.41",
-    "@tryghost/promise": "0.3.9",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.82.12.tgz",
-    "@tryghost/request": "1.0.4",
-    "@tryghost/security": "file:components/tryghost-security-5.82.12.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.82.12.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.82.12.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.82.12.tgz",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.83.0.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.83.0.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.83.0.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.83.0.tgz",
+    "@tryghost/pretty-cli": "1.2.42",
+    "@tryghost/promise": "0.3.10",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.83.0.tgz",
+    "@tryghost/request": "1.0.5",
+    "@tryghost/security": "file:components/tryghost-security-5.83.0.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.83.0.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.83.0.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.83.0.tgz",
     "@tryghost/social-urls": "0.1.43",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.82.12.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.82.12.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.83.0.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.83.0.tgz",
     "@tryghost/string": "0.2.12",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.82.12.tgz",
-    "@tryghost/tpl": "0.1.29",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.82.12.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.83.0.tgz",
+    "@tryghost/tpl": "0.1.30",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.83.0.tgz",
     "@tryghost/url-utils": "4.4.8",
-    "@tryghost/validator": "0.2.10",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.82.12.tgz",
-    "@tryghost/version": "0.1.27",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.82.12.tgz",
-    "@tryghost/zip": "1.1.42",
+    "@tryghost/validator": "0.2.11",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.83.0.tgz",
+    "@tryghost/version": "0.1.28",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.83.0.tgz",
+    "@tryghost/zip": "1.1.43",
     "amperize": "0.6.1",
     "analytics-node": "6.2.0",
     "body-parser": "1.20.2",
@@ -194,7 +194,6 @@
     "intl": "1.2.5",
     "intl-messageformat": "5.4.3",
     "js-yaml": "4.1.0",
-    "jsdom": "22.1.0",
     "json-stable-stringify": "1.1.1",
     "jsonpath": "1.1.1",
     "jsonwebtoken": "8.5.1",
@@ -208,7 +207,7 @@
     "moment": "2.24.0",
     "moment-timezone": "0.5.23",
     "multer": "1.4.4",
-    "mysql2": "3.9.7",
+    "mysql2": "3.10.0",
     "nconf": "0.12.1",
     "node-jose": "2.2.0",
     "path-match": "1.2.4",
@@ -226,14 +225,14 @@
   },
   "optionalDependencies": {
     "@sentry/profiling-node": "7.116.0",
-    "@tryghost/html-to-mobiledoc": "3.0.7",
+    "@tryghost/html-to-mobiledoc": "3.1.0",
     "sqlite3": "5.1.7"
   },
   "devDependencies": {
     "@actions/core": "1.10.1",
     "@playwright/test": "1.38.1",
-    "@tryghost/express-test": "0.13.11",
-    "@tryghost/webhook-mock-receiver": "0.2.11",
+    "@tryghost/express-test": "0.13.12",
+    "@tryghost/webhook-mock-receiver": "0.2.12",
     "@types/common-tags": "1.8.4",
     "c8": "8.0.1",
     "cli-progress": "3.12.0",
@@ -261,89 +260,89 @@
   },
   "resolutions": {
     "@tryghost/errors": "1.3.2",
-    "@tryghost/logging": "2.4.14",
+    "@tryghost/logging": "2.4.15",
     "jackspeak": "2.1.1",
     "moment": "2.24.0",
     "moment-timezone": "0.5.23",
-    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.82.12.tgz",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.82.12.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.82.12.tgz",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.82.12.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.82.12.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.82.12.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.82.12.tgz",
-    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.82.12.tgz",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.82.12.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.82.12.tgz",
-    "@tryghost/constants": "file:components/tryghost-constants-5.82.12.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.82.12.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.82.12.tgz",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.82.12.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.82.12.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.82.12.tgz",
-    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.82.12.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.82.12.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.82.12.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.82.12.tgz",
-    "@tryghost/email-events": "file:components/tryghost-email-events-5.82.12.tgz",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.82.12.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.82.12.tgz",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.82.12.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.82.12.tgz",
-    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.82.12.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.82.12.tgz",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.82.12.tgz",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.82.12.tgz",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.82.12.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.82.12.tgz",
-    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.82.12.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.82.12.tgz",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.82.12.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.82.12.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.82.12.tgz",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.82.12.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.82.12.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.82.12.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.82.12.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.82.12.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.82.12.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.82.12.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.82.12.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.82.12.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.82.12.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.82.12.tgz",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.82.12.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.82.12.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.82.12.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.82.12.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.82.12.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.82.12.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.82.12.tgz",
-    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.82.12.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.82.12.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.82.12.tgz",
-    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.82.12.tgz",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.82.12.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.82.12.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.82.12.tgz",
-    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.82.12.tgz",
-    "@tryghost/post-events": "file:components/tryghost-post-events-5.82.12.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.82.12.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.82.12.tgz",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.82.12.tgz",
-    "@tryghost/referrers": "file:components/tryghost-referrers-5.82.12.tgz",
-    "@tryghost/security": "file:components/tryghost-security-5.82.12.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.82.12.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.82.12.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.82.12.tgz",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.82.12.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.82.12.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.82.12.tgz",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.82.12.tgz",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.82.12.tgz",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.82.12.tgz",
-    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.82.12.tgz",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.82.12.tgz"
+    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.83.0.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.83.0.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.83.0.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.83.0.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.83.0.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.83.0.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.83.0.tgz",
+    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.83.0.tgz",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.83.0.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.83.0.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.83.0.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.83.0.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.83.0.tgz",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.83.0.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.83.0.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.83.0.tgz",
+    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.83.0.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.83.0.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.83.0.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.83.0.tgz",
+    "@tryghost/email-events": "file:components/tryghost-email-events-5.83.0.tgz",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.83.0.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.83.0.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.83.0.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.83.0.tgz",
+    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.83.0.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.83.0.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.83.0.tgz",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.83.0.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.83.0.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.83.0.tgz",
+    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.83.0.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.83.0.tgz",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.83.0.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.83.0.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.83.0.tgz",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.83.0.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.83.0.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.83.0.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.83.0.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.83.0.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.83.0.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.83.0.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.83.0.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.83.0.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.83.0.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.83.0.tgz",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.83.0.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.83.0.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.83.0.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.83.0.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.83.0.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.83.0.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.83.0.tgz",
+    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.83.0.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.83.0.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.83.0.tgz",
+    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.83.0.tgz",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.83.0.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.83.0.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.83.0.tgz",
+    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.83.0.tgz",
+    "@tryghost/post-events": "file:components/tryghost-post-events-5.83.0.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.83.0.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.83.0.tgz",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.83.0.tgz",
+    "@tryghost/referrers": "file:components/tryghost-referrers-5.83.0.tgz",
+    "@tryghost/security": "file:components/tryghost-security-5.83.0.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.83.0.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.83.0.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.83.0.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.83.0.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.83.0.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.83.0.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.83.0.tgz",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.83.0.tgz",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.83.0.tgz",
+    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.83.0.tgz",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.83.0.tgz"
   },
   "nx": {
     "targets": {