ghost 5.87.0 → 5.87.1

package/core/built/admin/index.html

@@ -8,7 +8,7 @@
     <title>Ghost Admin</title>
 
     
-<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22cdnUrl%22%3A%22%22%2C%22editorUrl%22%3A%22%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.87%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22ember-websockets%22%3A%7B%22socketIO%22%3Atrue%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%2C%22editorFilename%22%3A%22koenig-lexical.umd.js%22%2C%22editorHash%22%3A%228266664e32%22%2C%22adminXDemoFilename%22%3A%22admin-x-demo.js%22%2C%22adminXDemoHash%22%3A%224245030234%22%2C%22adminXSettingsFilename%22%3A%22admin-x-settings.js%22%2C%22adminXSettingsHash%22%3A%2265275a5bdb%22%2C%22adminXActivitypubFilename%22%3A%22admin-x-activitypub.js%22%2C%22adminXActivitypubHash%22%3A%22c9a754a9f6%22%7D" />
+<meta name="ghost-admin/config/environment" content="%7B%22modulePrefix%22%3A%22ghost-admin%22%2C%22environment%22%3A%22production%22%2C%22cdnUrl%22%3A%22%22%2C%22editorUrl%22%3A%22%22%2C%22rootURL%22%3A%22%22%2C%22locationType%22%3A%22trailing-hash%22%2C%22EmberENV%22%3A%7B%22FEATURES%22%3A%7B%7D%2C%22EXTEND_PROTOTYPES%22%3A%7B%22Date%22%3Afalse%2C%22Array%22%3Atrue%2C%22String%22%3Atrue%2C%22Function%22%3Afalse%7D%2C%22_APPLICATION_TEMPLATE_WRAPPER%22%3Afalse%2C%22_JQUERY_INTEGRATION%22%3Atrue%2C%22_TEMPLATE_ONLY_GLIMMER_COMPONENTS%22%3Atrue%7D%2C%22APP%22%3A%7B%22version%22%3A%225.87%22%2C%22name%22%3A%22ghost-admin%22%7D%2C%22ember-simple-auth%22%3A%7B%7D%2C%22%40sentry%2Fember%22%3A%7B%22disablePerformance%22%3Atrue%2C%22sentry%22%3A%7B%7D%7D%2C%22ember-cli-mirage%22%3A%7B%22usingProxy%22%3Afalse%2C%22useDefaultPassthroughs%22%3Atrue%7D%2C%22exportApplicationGlobal%22%3Afalse%2C%22ember-load%22%3A%7B%22loadingIndicatorClass%22%3A%22ember-load-indicator%22%7D%2C%22editorFilename%22%3A%22koenig-lexical.umd.js%22%2C%22editorHash%22%3A%2247bfbf88f0%22%2C%22adminXDemoFilename%22%3A%22admin-x-demo.js%22%2C%22adminXDemoHash%22%3A%229c49d06c68%22%2C%22adminXSettingsFilename%22%3A%22admin-x-settings.js%22%2C%22adminXSettingsHash%22%3A%2236ec618662%22%2C%22adminXActivitypubFilename%22%3A%22admin-x-activitypub.js%22%2C%22adminXActivitypubHash%22%3A%22b147b1abae%22%7D" />
 
     <meta name="HandheldFriendly" content="True" />
     <meta name="MobileOptimized" content="320" />
@@ -37,7 +37,7 @@
     </style>
 
     <link integrity="" rel="stylesheet" href="assets/vendor-0ede59da8efb5e28fa929557f7ff7154.css">
-    <link integrity="" rel="stylesheet" href="assets/ghost-ce50e3eb300a8e297d8b1f8b372c25d6.css" title="light">
+    <link integrity="" rel="stylesheet" href="assets/ghost-cc31d867156dbb76ec96cdd93bd39d36.css" title="light">
 
     
 </head>
@@ -56,9 +56,9 @@
 
     <div id="ember-basic-dropdown-wormhole"></div>
 
-    <script src="assets/vendor-104fd33edb243021ce2f1a3797d513ef.js"></script>
-<script src="assets/chunk.216.1641331b33471771559d.js"></script>
-<script src="assets/chunk.524.d2e0fcb8c19f3c1a3b30.js"></script>
-    <script src="assets/ghost-7cd5e5705abfd8aa74248fc44aec54b5.js"></script>
+    <script src="assets/vendor-4e0f92ca2b1c0850606b912c70852e32.js"></script>
+<script src="assets/chunk.42.167fc5e3f3a1c1088f2e.js"></script>
+<script src="assets/chunk.524.a032fbf6d6bbe20b0eb3.js"></script>
+    <script src="assets/ghost-b645099f33022aa37d96a2be8d8ddad1.js"></script>
 </body>
 </html>

package/core/server/api/endpoints/utils/serializers/output/authentication.js

@@ -4,7 +4,7 @@ const debug = require('@tryghost/debug')('api:endpoints:utils:serializers:output
 
 const messages = {
     checkEmailForInstructions: 'Check your email for further instructions.',
-    passwordChanged: 'Password changed successfully.',
+    passwordChanged: 'Password updated',
     invitationAccepted: 'Invitation accepted.'
 };
 

package/core/server/services/custom-redirects/validation.js

@@ -1,6 +1,7 @@
 const _ = require('lodash');
 const tpl = require('@tryghost/tpl');
 const errors = require('@tryghost/errors');
+const {isSafePattern} = require('redos-detector');
 
 const messages = {
     redirectsWrongFormat: 'Incorrect redirects file format.',
@@ -33,18 +34,35 @@ const validate = (redirects) => {
         if (!redirect.from || !redirect.to) {
             throw new errors.ValidationError({
                 message: tpl(messages.redirectsWrongFormat),
-                context: redirect,
                 help: tpl(messages.redirectsHelp)
             });
         }
 
+        // Ensure valid regex
         try {
-            // each 'from' property should be a valid RegExp string
             new RegExp(redirect.from);
         } catch (error) {
             throw new errors.ValidationError({
                 message: tpl(messages.invalidRedirectsFromRegex),
-                context: redirect,
+                errorDetails: {
+                    redirect,
+                    invalid: true
+                },
+                help: tpl(messages.redirectsHelp)
+            });
+        }
+
+        // Ensure safe regex
+        const analysis = isSafePattern(redirect.from);
+
+        if (analysis.safe === false) {
+            throw new errors.ValidationError({
+                message: tpl(messages.invalidRedirectsFromRegex),
+                errorDetails: {
+                    redirect,
+                    unsafe: true,
+                    reason: analysis.error
+                },
                 help: tpl(messages.redirectsHelp)
             });
         }

package/core/server/services/webhooks/WebhookTrigger.js

@@ -87,6 +87,7 @@ class WebhookTrigger {
             const reqPayload = JSON.stringify(hookPayload);
             const url = webhook.get('target_url');
             const secret = webhook.get('secret') || '';
+            const ts = Date.now();
 
             const headers = {
                 'Content-Length': Buffer.byteLength(reqPayload),
@@ -95,7 +96,7 @@ class WebhookTrigger {
             };
 
             if (secret !== '') {
-                headers['X-Ghost-Signature'] = `sha256=${crypto.createHmac('sha256', secret).update(reqPayload).digest('hex')}, t=${Date.now()}`;
+                headers['X-Ghost-Signature'] = `sha256=${crypto.createHmac('sha256', secret).update(`${reqPayload}${ts}`).digest('hex')}, t=${ts}`;
             }
 
             const opts = {

package/core/shared/labs.js

@@ -24,8 +24,6 @@ const GA_FEATURES = [
     'listUnsubscribeHeader',
     'filterEmailDisabled',
     'newEmailAddresses',
-    'portalImprovements',
-    'newsletterExcerpt',
     'internalLinking'
 ];
 
@@ -45,7 +43,6 @@ const ALPHA_FEATURES = [
     'NestPlayground',
     'urlCache',
     'lexicalMultiplayer',
-    'websockets',
     'emailCustomization',
     'mailEvents',
     'collectionsCard',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghost",
-  "version": "5.87.0",
+  "version": "5.87.1",
   "description": "The professional publishing platform",
   "author": "Ghost Foundation",
   "homepage": "https://ghost.org",
@@ -69,109 +69,108 @@
     "@opentelemetry/sdk-trace-node": "1.25.1",
     "@sentry/node": "7.118.0",
     "@tryghost/adapter-base-cache": "0.1.12",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.87.0.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.87.0.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.87.1.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.87.1.tgz",
     "@tryghost/admin-api-schema": "4.5.5",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.87.0.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.87.0.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.87.0.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.87.0.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.87.1.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.87.1.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.87.1.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.87.1.tgz",
     "@tryghost/bookshelf-plugins": "0.6.19",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.87.0.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.87.0.tgz",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.87.1.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.87.1.tgz",
     "@tryghost/color-utils": "0.2.2",
     "@tryghost/config-url-helpers": "1.0.12",
-    "@tryghost/constants": "file:components/tryghost-constants-5.87.0.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.87.0.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.87.0.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.87.1.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.87.1.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.87.1.tgz",
     "@tryghost/database-info": "0.3.24",
     "@tryghost/debug": "0.1.30",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.87.0.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.87.0.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.87.0.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.87.0.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.87.0.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.87.0.tgz",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.87.1.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.87.1.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.87.1.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.87.1.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.87.1.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.87.1.tgz",
     "@tryghost/email-mock-receiver": "0.3.6",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.87.0.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.87.0.tgz",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.87.1.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.87.1.tgz",
     "@tryghost/errors": "1.3.2",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.87.0.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.87.0.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.87.0.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.87.1.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.87.1.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.87.1.tgz",
     "@tryghost/helpers": "1.1.90",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.87.0.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.87.1.tgz",
     "@tryghost/http-cache-utils": "0.1.15",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.87.0.tgz",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.87.1.tgz",
     "@tryghost/image-transform": "1.3.0",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.87.0.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.87.0.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.87.0.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.87.1.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.87.1.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.87.1.tgz",
     "@tryghost/kg-card-factory": "5.0.4",
     "@tryghost/kg-converters": "1.0.5",
     "@tryghost/kg-default-atoms": "5.0.3",
     "@tryghost/kg-default-cards": "10.0.6",
-    "@tryghost/kg-default-nodes": "1.1.4",
-    "@tryghost/kg-html-to-lexical": "1.1.5",
-    "@tryghost/kg-lexical-html-renderer": "1.1.5",
+    "@tryghost/kg-default-nodes": "1.1.5",
+    "@tryghost/kg-html-to-lexical": "1.1.6",
+    "@tryghost/kg-lexical-html-renderer": "1.1.6",
     "@tryghost/kg-mobiledoc-html-renderer": "7.0.4",
     "@tryghost/limit-service": "1.2.14",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.87.0.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.87.0.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.87.0.tgz",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.87.1.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.87.1.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.87.1.tgz",
     "@tryghost/logging": "2.4.15",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.87.0.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.87.0.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.87.0.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.87.0.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.87.0.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.87.0.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.87.0.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.87.0.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.87.0.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.87.0.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.87.0.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.87.0.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.87.0.tgz",
-    "@tryghost/metrics": "1.0.31",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.87.0.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.87.0.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.87.0.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.87.0.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.87.0.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.87.0.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.87.0.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.87.0.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.87.0.tgz",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.87.1.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.87.1.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.87.1.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.87.1.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.87.1.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.87.1.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.87.1.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.87.1.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.87.1.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.87.1.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.87.1.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.87.1.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.87.1.tgz",
+    "@tryghost/metrics": "1.0.34",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.87.1.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.87.1.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.87.1.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.87.1.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.87.1.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.87.1.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.87.1.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.87.1.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.87.1.tgz",
     "@tryghost/nodemailer": "0.3.42",
     "@tryghost/nql": "0.12.3",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.87.0.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.87.0.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.87.0.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.87.0.tgz",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.87.1.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.87.1.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.87.1.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.87.1.tgz",
     "@tryghost/pretty-cli": "1.2.42",
     "@tryghost/promise": "0.3.10",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.87.0.tgz",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.87.1.tgz",
     "@tryghost/request": "1.0.5",
-    "@tryghost/security": "file:components/tryghost-security-5.87.0.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.87.0.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.87.0.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.87.0.tgz",
+    "@tryghost/security": "file:components/tryghost-security-5.87.1.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.87.1.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.87.1.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.87.1.tgz",
     "@tryghost/social-urls": "0.1.43",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.87.0.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.87.0.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.87.1.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.87.1.tgz",
     "@tryghost/string": "0.2.12",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.87.0.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.87.1.tgz",
     "@tryghost/tpl": "0.1.30",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.87.0.tgz",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.87.1.tgz",
     "@tryghost/url-utils": "4.4.8",
     "@tryghost/validator": "0.2.11",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.87.0.tgz",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.87.1.tgz",
     "@tryghost/version": "0.1.28",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.87.0.tgz",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.87.1.tgz",
     "@tryghost/zip": "1.1.43",
     "amperize": "0.6.1",
-    "analytics-node": "6.2.0",
     "body-parser": "1.20.2",
     "bookshelf": "1.2.0",
     "bookshelf-relations": "2.7.0",
@@ -206,35 +205,34 @@
     "json-stable-stringify": "1.1.1",
     "jsonpath": "1.1.1",
     "jsonwebtoken": "8.5.1",
-    "juice": "9.1.0",
     "keypair": "1.0.4",
     "knex": "2.4.2",
     "knex-migrator": "5.2.1",
-    "lib0": "0.2.88",
+    "lib0": "0.2.94",
     "lodash": "4.17.21",
     "luxon": "3.4.4",
     "moment": "2.24.0",
     "moment-timezone": "0.5.23",
     "multer": "1.4.4",
-    "mysql2": "3.10.1",
+    "mysql2": "3.10.2",
     "nconf": "0.12.1",
     "node-jose": "2.2.0",
     "path-match": "1.2.4",
     "probe-image-size": "7.2.3",
+    "redos-detector": "5.1.0",
     "rss": "1.2.2",
     "sanitize-html": "2.13.0",
     "semver": "7.6.2",
-    "socket.io": "4.7.5",
     "stoppable": "1.1.0",
     "uuid": "9.0.1",
-    "ws": "8.17.1",
+    "ws": "8.18.0",
     "xml": "1.0.1",
     "y-protocols": "1.0.6",
     "yjs": "13.6.18"
   },
   "optionalDependencies": {
     "@sentry/profiling-node": "7.118.0",
-    "@tryghost/html-to-mobiledoc": "3.1.0",
+    "@tryghost/html-to-mobiledoc": "3.1.2",
     "sqlite3": "5.1.7"
   },
   "devDependencies": {
@@ -258,7 +256,7 @@
     "mock-knex": "TryGhost/mock-knex#d8b93b1c20d4820323477f2c60db016ab3e73192",
     "nock": "13.3.3",
     "papaparse": "5.3.2",
-    "postcss": "8.4.38",
+    "postcss": "8.4.39",
     "postcss-cli": "11.0.0",
     "rewire": "6.0.0",
     "should": "13.2.3",
@@ -273,85 +271,85 @@
     "jackspeak": "2.1.1",
     "moment": "2.24.0",
     "moment-timezone": "0.5.23",
-    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.87.0.tgz",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.87.0.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.87.0.tgz",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.87.0.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.87.0.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.87.0.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.87.0.tgz",
-    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.87.0.tgz",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.87.0.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.87.0.tgz",
-    "@tryghost/constants": "file:components/tryghost-constants-5.87.0.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.87.0.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.87.0.tgz",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.87.0.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.87.0.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.87.0.tgz",
-    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.87.0.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.87.0.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.87.0.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.87.0.tgz",
-    "@tryghost/email-events": "file:components/tryghost-email-events-5.87.0.tgz",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.87.0.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.87.0.tgz",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.87.0.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.87.0.tgz",
-    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.87.0.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.87.0.tgz",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.87.0.tgz",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.87.0.tgz",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.87.0.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.87.0.tgz",
-    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.87.0.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.87.0.tgz",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.87.0.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.87.0.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.87.0.tgz",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.87.0.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.87.0.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.87.0.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.87.0.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.87.0.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.87.0.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.87.0.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.87.0.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.87.0.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.87.0.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.87.0.tgz",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.87.0.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.87.0.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.87.0.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.87.0.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.87.0.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.87.0.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.87.0.tgz",
-    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.87.0.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.87.0.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.87.0.tgz",
-    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.87.0.tgz",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.87.0.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.87.0.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.87.0.tgz",
-    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.87.0.tgz",
-    "@tryghost/post-events": "file:components/tryghost-post-events-5.87.0.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.87.0.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.87.0.tgz",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.87.0.tgz",
-    "@tryghost/referrers": "file:components/tryghost-referrers-5.87.0.tgz",
-    "@tryghost/security": "file:components/tryghost-security-5.87.0.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.87.0.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.87.0.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.87.0.tgz",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.87.0.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.87.0.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.87.0.tgz",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.87.0.tgz",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.87.0.tgz",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.87.0.tgz",
-    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.87.0.tgz",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.87.0.tgz"
+    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.87.1.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.87.1.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.87.1.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.87.1.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.87.1.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.87.1.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.87.1.tgz",
+    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.87.1.tgz",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.87.1.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.87.1.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.87.1.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.87.1.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.87.1.tgz",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.87.1.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.87.1.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.87.1.tgz",
+    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.87.1.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.87.1.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.87.1.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.87.1.tgz",
+    "@tryghost/email-events": "file:components/tryghost-email-events-5.87.1.tgz",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.87.1.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.87.1.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.87.1.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.87.1.tgz",
+    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.87.1.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.87.1.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.87.1.tgz",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.87.1.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.87.1.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.87.1.tgz",
+    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.87.1.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.87.1.tgz",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.87.1.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.87.1.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.87.1.tgz",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.87.1.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.87.1.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.87.1.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.87.1.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.87.1.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.87.1.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.87.1.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.87.1.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.87.1.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.87.1.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.87.1.tgz",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.87.1.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.87.1.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.87.1.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.87.1.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.87.1.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.87.1.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.87.1.tgz",
+    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.87.1.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.87.1.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.87.1.tgz",
+    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.87.1.tgz",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.87.1.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.87.1.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.87.1.tgz",
+    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.87.1.tgz",
+    "@tryghost/post-events": "file:components/tryghost-post-events-5.87.1.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.87.1.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.87.1.tgz",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.87.1.tgz",
+    "@tryghost/referrers": "file:components/tryghost-referrers-5.87.1.tgz",
+    "@tryghost/security": "file:components/tryghost-security-5.87.1.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.87.1.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.87.1.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.87.1.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.87.1.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.87.1.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.87.1.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.87.1.tgz",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.87.1.tgz",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.87.1.tgz",
+    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.87.1.tgz",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.87.1.tgz"
   },
   "nx": {
     "targets": {