You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Dalibor Marković 4b0456f545 upgrade: dependency updates across phases 1-3 ... Phase 1 - Security: - lodash 4.17.21 -> 4.18.1 (CVE fix) - dompurify 3.3.1 -> 3.4.10 (XSS fixes) - passport 0.4.1 -> 0.7.0 (security fixes) - remove deprecated request/request-promise, use native fetch instead - update semver, simple-git, winston, nodemailer Phase 2 - Light upgrades: - sass 1.27.0 -> 1.101.0 - chokidar 3.5.3 -> 4.0.3 - mysql2 3.16.0 -> 3.22.5 - pg 8.16.3 -> 8.21.0 - cors, cross-env updates Phase 3 - Medium risk: - js-yaml 3.14.0 -> 4.2.0 (safeLoad -> load across 11 files) - markdown-it 11.0.1 -> 14.2.0 (+7 plugin updates) - luxon 1.25.0 -> 3.7.2 - fs-extra 9.0.1 -> 11.3.5 - cheerio 1.0.0-rc.5 -> 1.2.0 - highlight.js 10.3.1 -> 11.11.1 18 files changed, 67 insertions, 79 deletions		2 months ago
..
app	fix: set securityTrustProxy to false by default	3 years ago
controllers	fix: validate loginRedirect cookie to prevent open redirect (#7923)	6 months ago
core	upgrade: dependency updates across phases 1-3	2 months ago
db	fix: force lowercase for email on local auth	6 years ago
graph	upgrade: dependency updates across phases 1-3	2 months ago
helpers	fix: add cookie secure flag when site is using https	7 months ago
jobs	fix: sanitize SVG uploads	5 years ago
locales	…
middlewares	fix: remove unused middleware	5 years ago
models	upgrade: dependency updates across phases 1-3	2 months ago
modules	upgrade: dependency updates across phases 1-3	2 months ago
templates	feat: password reset	6 years ago
test/helpers	refactor: server code (#2545)	6 years ago
themes/default	…
views	fix: disable template compilation in source view	3 years ago
index.js	fix: remove upper range node.js version check	2 years ago
master.js	fix: handle empty ToC position value	4 years ago
setup.js	upgrade: dependency updates across phases 1-3	2 months ago