ghost 5.96.0 → 5.96.1

package/core/server/models/member.js

@@ -2,7 +2,6 @@ const ghostBookshelf = require('./base');
 const crypto = require('crypto');
 const _ = require('lodash');
 const config = require('../../shared/config');
-const {gravatar} = require('../lib/image');
 
 const Member = ghostBookshelf.Model.extend({
     tableName: 'members',
@@ -397,6 +396,7 @@ const Member = ghostBookshelf.Model.extend({
         // Will not use gravatar if privacy.useGravatar is false in config
         attrs.avatar_image = null;
         if (attrs.email && !config.isPrivacyDisabled('useGravatar')) {
+            const {gravatar} = require('../lib/image');
             attrs.avatar_image = gravatar.url(attrs.email, {size: 250, default: 'blank'});
         }
 

package/core/server/models/post.js

@@ -742,7 +742,7 @@ Post = ghostBookshelf.Model.extend({
             )
         ) {
             try {
-                this.set('html', mobiledocLib.mobiledocHtmlRenderer.render(JSON.parse(this.get('mobiledoc'))));
+                this.set('html', mobiledocLib.render(JSON.parse(this.get('mobiledoc'))));
             } catch (err) {
                 throw new errors.ValidationError({
                     message: tpl(messages.invalidMobiledocStructure),

package/core/server/services/email-service/EmailServiceWrapper.js

@@ -59,7 +59,7 @@ class EmailServiceWrapper {
             settingsCache,
             settingsHelpers,
             renderers: {
-                mobiledoc: mobiledocLib.mobiledocHtmlRenderer,
+                mobiledoc: mobiledocLib,
                 lexical: lexicalLib
             },
             imageSize,

package/core/server/services/themes/activate.js

@@ -14,14 +14,14 @@ const messages = {
     themeCannotBeActivated: '{themeName} cannot be activated because it was not found in the theme directory.'
 };
 
-module.exports.loadAndActivate = async (themeName) => {
+module.exports.loadAndActivate = async (themeName, options = {}) => {
     debug('loadAndActivate', themeName);
     try {
         // Just read the active theme for now
         const loadedTheme = await themeLoader.loadOneTheme(themeName);
         // Validate
         // @NOTE: this is now the only usage of check, rather than checkSafe...
-        const checkedTheme = await validate.check(themeName, loadedTheme);
+        const checkedTheme = await validate.check(themeName, loadedTheme, {skipChecks: options.skipChecks});
 
         if (!validate.canActivate(checkedTheme)) {
             logging.error(validate.getThemeValidationError('activeThemeHasFatalErrors', themeName, checkedTheme));

package/core/server/services/themes/index.js

@@ -5,6 +5,7 @@ const getJSON = require('./to-json');
 const installer = require('./installer');
 const validate = require('./validate');
 const settingsCache = require('../../../shared/settings-cache');
+const config = require('../../../shared/config');
 
 module.exports = {
     /*
@@ -13,8 +14,10 @@ module.exports = {
     init: async () => {
         validate.init();
 
+        const skipChecks = config.get('optimization:themes:skipBootChecks') || false;
+
         const themeName = settingsCache.get('active_theme');
-        return activate.loadAndActivate(themeName);
+        return activate.loadAndActivate(themeName, {skipChecks});
     },
     /**
      * Load all inactive themes

package/core/server/services/themes/validate.js

@@ -44,25 +44,27 @@ const getErrorsFromCheckedTheme = function getErrorsFromCheckedTheme(checkedThem
     };
 };
 
-const check = async function check(themeName, theme, isZip) {
+const check = async function check(themeName, theme, options = {}) {
     debug('Begin: Check');
     // gscan can slow down boot time if we require on boot, for now nest the require.
     const gscan = require('gscan');
     const checkedVersion = 'v5';
     let checkedTheme;
 
-    if (isZip) {
+    if (options.isZip === true) {
         debug('zip mode');
         checkedTheme = await gscan.checkZip(theme, {
             keepExtractedDir: true,
             checkVersion: checkedVersion,
-            labs: labs.getAll()
+            labs: labs.getAll(),
+            skipChecks: options.skipChecks || false
         });
     } else {
         debug('non-zip mode');
         checkedTheme = await gscan.check(theme.path, {
             checkVersion: checkedVersion,
-            labs: labs.getAll()
+            labs: labs.getAll(),
+            skipChecks: options.skipChecks || false
         });
     }
 
@@ -119,7 +121,7 @@ const getThemeErrors = async function getThemeErrors(themeName) {
 };
 
 const checkSafe = async function checkSafe(themeName, theme, isZip) {
-    const checkedTheme = await check(themeName, theme, isZip);
+    const checkedTheme = await check(themeName, theme, {isZip});
 
     if (canActivate(checkedTheme)) {
         return checkedTheme;

package/core/server/views/maintenance.html

@@ -4,7 +4,7 @@
 <meta charset="utf-8">
 <meta http-equiv="X-UA-Compatible" content="IE=edge">
 <meta name="viewport" content="width=device-width, initial-scale=1.0">
-<title>We'll be right back</title>
+<title>We’ll be right back</title>
 <style type="text/css">
 * {
     box-sizing: border-box;
@@ -80,8 +80,8 @@ img {
 </head>
 <body>
 <div class="content">
-    <h1>We'll be right back.</h1>
-    <p>We're busy updating our site to give you the best experience, and will be back soon.</p>
+    <h1>We’ll be right back.</h1>
+    <p>We’re busy updating our site to give you the best experience, and will be back soon.</p>
 </div>
 </body>
 </html>

package/core/server/web/admin/app.js

@@ -9,6 +9,7 @@ const shared = require('../shared');
 const errorHandler = require('@tryghost/mw-error-handler');
 const sentry = require('../../../shared/sentry');
 const redirectAdminUrls = require('./middleware/redirect-admin-urls');
+const bridge = require('../../../bridge');
 
 /**
  *
@@ -38,7 +39,7 @@ module.exports = function setupAdminApp() {
     // request to the Admin API /users/me/ endpoint to check if the user is logged in.
     //
     // Used by comments-ui to add moderation options to front-end comments when logged in.
-    adminApp.use('/auth-frame', function authFrameMw(req, res, next) {
+    adminApp.use('/auth-frame', bridge.ensureAdminAuthAssetsMiddleware(), function authFrameMw(req, res, next) {
         // only render content when we have an Admin session cookie,
         // otherwise return a 204 to avoid JS and API requests being made unnecessarily
         try {

package/core/shared/config/defaults.json

@@ -164,6 +164,9 @@
                 "threshold": 200,
                 "level": "warn"
             }
+        },
+        "themes": {
+            "skipBootChecks": false
         }
     },
     "imageOptimization": {

package/core/shared/config/helpers.js

@@ -1,7 +1,10 @@
 const path = require('path');
-const escapeRegExp = require('lodash/escapeRegExp');
 const {URL} = require('url');
 
+function escapeRegExp(string) {
+    return string.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+}
+
 const DEFAULT_HOST_ARG = /.*/;
 
 const getHostInfo = (config) => {

package/core/shared/config/utils.js

@@ -1,6 +1,5 @@
 const path = require('path');
-const fs = require('fs-extra');
-const _ = require('lodash');
+const fs = require('fs');
 
 /**
  * transform all relative paths to absolute paths
@@ -11,11 +10,11 @@ const _ = require('lodash');
  * Path can be a "." to re-present current folder
  */
 const makePathsAbsolute = function makePathsAbsolute(nconf, obj, parent) {
-    _.each(obj, function (configValue, pathsKey) {
-        if (_.isObject(configValue)) {
+    Object.entries(obj).forEach(([pathsKey, configValue]) => {
+        if (configValue && typeof configValue === 'object') {
             makePathsAbsolute(nconf, configValue, parent + ':' + pathsKey);
         } else if (
-            _.isString(configValue) &&
+            typeof configValue === 'string' &&
             (configValue.match(/\/+|\\+/) || configValue === '.') &&
             !path.isAbsolute(configValue)
         ) {
@@ -25,7 +24,7 @@ const makePathsAbsolute = function makePathsAbsolute(nconf, obj, parent) {
 };
 
 const doesContentPathExist = function doesContentPathExist(contentPath) {
-    if (!fs.pathExistsSync(contentPath)) {
+    if (!fs.existsSync(contentPath)) {
         // new Error is allowed here, as we do not want config to depend on @tryghost/error
         // @TODO: revisit this decision when @tryghost/error is no longer dependent on all of ghost-ignition
         // eslint-disable-next-line ghost/ghost-custom/no-native-error

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ghost",
-  "version": "5.96.0",
+  "version": "5.96.1",
   "description": "The professional publishing platform",
   "author": "Ghost Foundation",
   "homepage": "https://ghost.org",
@@ -61,44 +61,44 @@
     "@sentry/node": "7.119.0",
     "@slack/webhook": "7.0.3",
     "@tryghost/adapter-base-cache": "0.1.12",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.96.0.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.96.0.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.96.1.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.96.1.tgz",
     "@tryghost/admin-api-schema": "4.5.5",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.96.0.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.96.0.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.96.0.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.96.0.tgz",
-    "@tryghost/bookshelf-plugins": "0.6.24",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.96.0.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.96.0.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.96.1.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.96.1.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.96.1.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.96.1.tgz",
+    "@tryghost/bookshelf-plugins": "0.6.25",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.96.1.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.96.1.tgz",
     "@tryghost/color-utils": "0.2.2",
     "@tryghost/config-url-helpers": "1.0.12",
-    "@tryghost/constants": "file:components/tryghost-constants-5.96.0.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.96.0.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.96.0.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.96.1.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.96.1.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.96.1.tgz",
     "@tryghost/database-info": "0.3.27",
     "@tryghost/debug": "0.1.32",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.96.0.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.96.0.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.96.0.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.96.0.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.96.0.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.96.0.tgz",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.96.1.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.96.1.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.96.1.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.96.1.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.96.1.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.96.1.tgz",
     "@tryghost/email-mock-receiver": "0.3.8",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.96.0.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.96.0.tgz",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.96.1.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.96.1.tgz",
     "@tryghost/errors": "1.3.5",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.96.0.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.96.0.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.96.0.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.96.1.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.96.1.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.96.1.tgz",
     "@tryghost/helpers": "1.1.90",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.96.0.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.96.1.tgz",
     "@tryghost/http-cache-utils": "0.1.17",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.96.0.tgz",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.96.1.tgz",
     "@tryghost/image-transform": "1.3.0",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.96.0.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.96.0.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.96.0.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.96.1.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.96.1.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.96.1.tgz",
     "@tryghost/kg-card-factory": "5.0.5",
     "@tryghost/kg-converters": "1.0.7",
     "@tryghost/kg-default-atoms": "5.0.3",
@@ -108,59 +108,59 @@
     "@tryghost/kg-lexical-html-renderer": "1.1.21",
     "@tryghost/kg-mobiledoc-html-renderer": "7.0.6",
     "@tryghost/limit-service": "1.2.14",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.96.0.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.96.0.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.96.0.tgz",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.96.1.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.96.1.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.96.1.tgz",
     "@tryghost/logging": "2.4.18",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.96.0.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.96.0.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.96.0.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.96.0.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.96.0.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.96.0.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.96.0.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.96.0.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.96.0.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.96.0.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.96.0.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.96.0.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.96.0.tgz",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.96.1.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.96.1.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.96.1.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.96.1.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.96.1.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.96.1.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.96.1.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.96.1.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.96.1.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.96.1.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.96.1.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.96.1.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.96.1.tgz",
     "@tryghost/metrics": "1.0.34",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.96.0.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.96.0.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.96.0.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.96.0.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.96.0.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.96.0.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.96.0.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.96.0.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.96.0.tgz",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.96.1.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.96.1.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.96.1.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.96.1.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.96.1.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.96.1.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.96.1.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.96.1.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.96.1.tgz",
     "@tryghost/nodemailer": "0.3.45",
-    "@tryghost/nql": "0.12.5",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.96.0.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.96.0.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.96.0.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.96.0.tgz",
+    "@tryghost/nql": "0.12.6",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.96.1.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.96.1.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.96.1.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.96.1.tgz",
     "@tryghost/pretty-cli": "1.2.44",
     "@tryghost/promise": "0.3.12",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.96.0.tgz",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.96.1.tgz",
     "@tryghost/request": "1.0.8",
-    "@tryghost/security": "file:components/tryghost-security-5.96.0.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.96.0.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.96.0.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.96.0.tgz",
+    "@tryghost/security": "file:components/tryghost-security-5.96.1.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.96.1.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.96.1.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.96.1.tgz",
     "@tryghost/social-urls": "0.1.43",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.96.0.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.96.0.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.96.1.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.96.1.tgz",
     "@tryghost/string": "0.2.12",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.96.0.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.96.1.tgz",
     "@tryghost/tpl": "0.1.32",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.96.0.tgz",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.96.1.tgz",
     "@tryghost/url-utils": "4.4.8",
     "@tryghost/validator": "0.2.14",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.96.0.tgz",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.96.1.tgz",
     "@tryghost/version": "0.1.30",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.96.0.tgz",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.96.1.tgz",
     "@tryghost/zip": "1.1.46",
     "amperize": "0.6.1",
     "body-parser": "1.20.3",
@@ -176,19 +176,19 @@
     "cookie-session": "2.1.0",
     "cors": "2.8.5",
     "downsize": "0.0.8",
-    "express": "4.21.0",
+    "express": "4.21.1",
     "express-brute": "1.0.1",
     "express-hbs": "2.5.0",
     "express-jwt": "8.4.1",
     "express-lazy-router": "1.0.6",
     "express-query-boolean": "2.0.0",
     "express-queue": "0.0.13",
-    "express-session": "1.18.0",
+    "express-session": "1.18.1",
     "fs-extra": "11.2.0",
     "ghost-storage-base": "1.0.0",
     "glob": "8.1.0",
     "got": "11.8.6",
-    "gscan": "4.43.5",
+    "gscan": "4.44.0",
     "human-number": "2.0.4",
     "image-size": "1.1.1",
     "intl": "1.2.5",
@@ -265,86 +265,86 @@
     "jackspeak": "2.1.1",
     "moment": "2.24.0",
     "moment-timezone": "0.5.45",
-    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.96.0.tgz",
-    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.96.0.tgz",
-    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.96.0.tgz",
-    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.96.0.tgz",
-    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.96.0.tgz",
-    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.96.0.tgz",
-    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.96.0.tgz",
-    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.96.0.tgz",
-    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.96.0.tgz",
-    "@tryghost/collections": "file:components/tryghost-collections-5.96.0.tgz",
-    "@tryghost/constants": "file:components/tryghost-constants-5.96.0.tgz",
-    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.96.0.tgz",
-    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.96.0.tgz",
-    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.96.0.tgz",
-    "@tryghost/donations": "file:components/tryghost-donations-5.96.0.tgz",
-    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.96.0.tgz",
-    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.96.0.tgz",
-    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.96.0.tgz",
-    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.96.0.tgz",
-    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.96.0.tgz",
-    "@tryghost/email-events": "file:components/tryghost-email-events-5.96.0.tgz",
-    "@tryghost/email-service": "file:components/tryghost-email-service-5.96.0.tgz",
-    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.96.0.tgz",
-    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.96.0.tgz",
-    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.96.0.tgz",
-    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.96.0.tgz",
-    "@tryghost/ghost": "file:components/tryghost-ghost-5.96.0.tgz",
-    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.96.0.tgz",
-    "@tryghost/i18n": "file:components/tryghost-i18n-5.96.0.tgz",
-    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.96.0.tgz",
-    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.96.0.tgz",
-    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.96.0.tgz",
-    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.96.0.tgz",
-    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.96.0.tgz",
-    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.96.0.tgz",
-    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.96.0.tgz",
-    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.96.0.tgz",
-    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.96.0.tgz",
-    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.96.0.tgz",
-    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.96.0.tgz",
-    "@tryghost/member-events": "file:components/tryghost-member-events-5.96.0.tgz",
-    "@tryghost/members-api": "file:components/tryghost-members-api-5.96.0.tgz",
-    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.96.0.tgz",
-    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.96.0.tgz",
-    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.96.0.tgz",
-    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.96.0.tgz",
-    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.96.0.tgz",
-    "@tryghost/metrics-server": "file:components/tryghost-metrics-server-5.96.0.tgz",
-    "@tryghost/milestones": "file:components/tryghost-milestones-5.96.0.tgz",
-    "@tryghost/minifier": "file:components/tryghost-minifier-5.96.0.tgz",
-    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.96.0.tgz",
-    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.96.0.tgz",
-    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.96.0.tgz",
-    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.96.0.tgz",
-    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.96.0.tgz",
-    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.96.0.tgz",
-    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.96.0.tgz",
-    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.96.0.tgz",
-    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.96.0.tgz",
-    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.96.0.tgz",
-    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.96.0.tgz",
-    "@tryghost/package-json": "file:components/tryghost-package-json-5.96.0.tgz",
-    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.96.0.tgz",
-    "@tryghost/post-events": "file:components/tryghost-post-events-5.96.0.tgz",
-    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.96.0.tgz",
-    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.96.0.tgz",
-    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.96.0.tgz",
-    "@tryghost/referrers": "file:components/tryghost-referrers-5.96.0.tgz",
-    "@tryghost/security": "file:components/tryghost-security-5.96.0.tgz",
-    "@tryghost/session-service": "file:components/tryghost-session-service-5.96.0.tgz",
-    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.96.0.tgz",
-    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.96.0.tgz",
-    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.96.0.tgz",
-    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.96.0.tgz",
-    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.96.0.tgz",
-    "@tryghost/tiers": "file:components/tryghost-tiers-5.96.0.tgz",
-    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.96.0.tgz",
-    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.96.0.tgz",
-    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.96.0.tgz",
-    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.96.0.tgz"
+    "@tryghost/adapter-cache-memory-ttl": "file:components/tryghost-adapter-cache-memory-ttl-5.96.1.tgz",
+    "@tryghost/adapter-cache-redis": "file:components/tryghost-adapter-cache-redis-5.96.1.tgz",
+    "@tryghost/adapter-manager": "file:components/tryghost-adapter-manager-5.96.1.tgz",
+    "@tryghost/announcement-bar-settings": "file:components/tryghost-announcement-bar-settings-5.96.1.tgz",
+    "@tryghost/api-framework": "file:components/tryghost-api-framework-5.96.1.tgz",
+    "@tryghost/api-version-compatibility-service": "file:components/tryghost-api-version-compatibility-service-5.96.1.tgz",
+    "@tryghost/audience-feedback": "file:components/tryghost-audience-feedback-5.96.1.tgz",
+    "@tryghost/bookshelf-repository": "file:components/tryghost-bookshelf-repository-5.96.1.tgz",
+    "@tryghost/bootstrap-socket": "file:components/tryghost-bootstrap-socket-5.96.1.tgz",
+    "@tryghost/collections": "file:components/tryghost-collections-5.96.1.tgz",
+    "@tryghost/constants": "file:components/tryghost-constants-5.96.1.tgz",
+    "@tryghost/custom-theme-settings-service": "file:components/tryghost-custom-theme-settings-service-5.96.1.tgz",
+    "@tryghost/data-generator": "file:components/tryghost-data-generator-5.96.1.tgz",
+    "@tryghost/domain-events": "file:components/tryghost-domain-events-5.96.1.tgz",
+    "@tryghost/donations": "file:components/tryghost-donations-5.96.1.tgz",
+    "@tryghost/dynamic-routing-events": "file:components/tryghost-dynamic-routing-events-5.96.1.tgz",
+    "@tryghost/email-addresses": "file:components/tryghost-email-addresses-5.96.1.tgz",
+    "@tryghost/email-analytics-provider-mailgun": "file:components/tryghost-email-analytics-provider-mailgun-5.96.1.tgz",
+    "@tryghost/email-analytics-service": "file:components/tryghost-email-analytics-service-5.96.1.tgz",
+    "@tryghost/email-content-generator": "file:components/tryghost-email-content-generator-5.96.1.tgz",
+    "@tryghost/email-events": "file:components/tryghost-email-events-5.96.1.tgz",
+    "@tryghost/email-service": "file:components/tryghost-email-service-5.96.1.tgz",
+    "@tryghost/email-suppression-list": "file:components/tryghost-email-suppression-list-5.96.1.tgz",
+    "@tryghost/express-dynamic-redirects": "file:components/tryghost-express-dynamic-redirects-5.96.1.tgz",
+    "@tryghost/external-media-inliner": "file:components/tryghost-external-media-inliner-5.96.1.tgz",
+    "@tryghost/extract-api-key": "file:components/tryghost-extract-api-key-5.96.1.tgz",
+    "@tryghost/ghost": "file:components/tryghost-ghost-5.96.1.tgz",
+    "@tryghost/html-to-plaintext": "file:components/tryghost-html-to-plaintext-5.96.1.tgz",
+    "@tryghost/i18n": "file:components/tryghost-i18n-5.96.1.tgz",
+    "@tryghost/importer-handler-content-files": "file:components/tryghost-importer-handler-content-files-5.96.1.tgz",
+    "@tryghost/importer-revue": "file:components/tryghost-importer-revue-5.96.1.tgz",
+    "@tryghost/in-memory-repository": "file:components/tryghost-in-memory-repository-5.96.1.tgz",
+    "@tryghost/job-manager": "file:components/tryghost-job-manager-5.96.1.tgz",
+    "@tryghost/link-redirects": "file:components/tryghost-link-redirects-5.96.1.tgz",
+    "@tryghost/link-replacer": "file:components/tryghost-link-replacer-5.96.1.tgz",
+    "@tryghost/link-tracking": "file:components/tryghost-link-tracking-5.96.1.tgz",
+    "@tryghost/magic-link": "file:components/tryghost-magic-link-5.96.1.tgz",
+    "@tryghost/mail-events": "file:components/tryghost-mail-events-5.96.1.tgz",
+    "@tryghost/mailgun-client": "file:components/tryghost-mailgun-client-5.96.1.tgz",
+    "@tryghost/member-attribution": "file:components/tryghost-member-attribution-5.96.1.tgz",
+    "@tryghost/member-events": "file:components/tryghost-member-events-5.96.1.tgz",
+    "@tryghost/members-api": "file:components/tryghost-members-api-5.96.1.tgz",
+    "@tryghost/members-csv": "file:components/tryghost-members-csv-5.96.1.tgz",
+    "@tryghost/members-events-service": "file:components/tryghost-members-events-service-5.96.1.tgz",
+    "@tryghost/members-importer": "file:components/tryghost-members-importer-5.96.1.tgz",
+    "@tryghost/members-ssr": "file:components/tryghost-members-ssr-5.96.1.tgz",
+    "@tryghost/mentions-email-report": "file:components/tryghost-mentions-email-report-5.96.1.tgz",
+    "@tryghost/metrics-server": "file:components/tryghost-metrics-server-5.96.1.tgz",
+    "@tryghost/milestones": "file:components/tryghost-milestones-5.96.1.tgz",
+    "@tryghost/minifier": "file:components/tryghost-minifier-5.96.1.tgz",
+    "@tryghost/model-to-domain-event-interceptor": "file:components/tryghost-model-to-domain-event-interceptor-5.96.1.tgz",
+    "@tryghost/mw-api-version-mismatch": "file:components/tryghost-mw-api-version-mismatch-5.96.1.tgz",
+    "@tryghost/mw-cache-control": "file:components/tryghost-mw-cache-control-5.96.1.tgz",
+    "@tryghost/mw-error-handler": "file:components/tryghost-mw-error-handler-5.96.1.tgz",
+    "@tryghost/mw-session-from-token": "file:components/tryghost-mw-session-from-token-5.96.1.tgz",
+    "@tryghost/mw-update-user-last-seen": "file:components/tryghost-mw-update-user-last-seen-5.96.1.tgz",
+    "@tryghost/mw-version-match": "file:components/tryghost-mw-version-match-5.96.1.tgz",
+    "@tryghost/mw-vhost": "file:components/tryghost-mw-vhost-5.96.1.tgz",
+    "@tryghost/nql-filter-expansions": "file:components/tryghost-nql-filter-expansions-5.96.1.tgz",
+    "@tryghost/oembed-service": "file:components/tryghost-oembed-service-5.96.1.tgz",
+    "@tryghost/members-offers": "file:components/tryghost-members-offers-5.96.1.tgz",
+    "@tryghost/package-json": "file:components/tryghost-package-json-5.96.1.tgz",
+    "@tryghost/members-payments": "file:components/tryghost-members-payments-5.96.1.tgz",
+    "@tryghost/post-events": "file:components/tryghost-post-events-5.96.1.tgz",
+    "@tryghost/post-revisions": "file:components/tryghost-post-revisions-5.96.1.tgz",
+    "@tryghost/posts-service": "file:components/tryghost-posts-service-5.96.1.tgz",
+    "@tryghost/recommendations": "file:components/tryghost-recommendations-5.96.1.tgz",
+    "@tryghost/referrers": "file:components/tryghost-referrers-5.96.1.tgz",
+    "@tryghost/security": "file:components/tryghost-security-5.96.1.tgz",
+    "@tryghost/session-service": "file:components/tryghost-session-service-5.96.1.tgz",
+    "@tryghost/settings-path-manager": "file:components/tryghost-settings-path-manager-5.96.1.tgz",
+    "@tryghost/slack-notifications": "file:components/tryghost-slack-notifications-5.96.1.tgz",
+    "@tryghost/staff-service": "file:components/tryghost-staff-service-5.96.1.tgz",
+    "@tryghost/stats-service": "file:components/tryghost-stats-service-5.96.1.tgz",
+    "@tryghost/members-stripe-service": "file:components/tryghost-members-stripe-service-5.96.1.tgz",
+    "@tryghost/tiers": "file:components/tryghost-tiers-5.96.1.tgz",
+    "@tryghost/update-check-service": "file:components/tryghost-update-check-service-5.96.1.tgz",
+    "@tryghost/verification-trigger": "file:components/tryghost-verification-trigger-5.96.1.tgz",
+    "@tryghost/version-notifications-data-service": "file:components/tryghost-version-notifications-data-service-5.96.1.tgz",
+    "@tryghost/webmentions": "file:components/tryghost-webmentions-5.96.1.tgz"
   },
   "nx": {
     "targets": {