sa6anw/hedgedoc-hedgeagent
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,611 Commits 1 Branch 0 Tags
7281876763f2a385d2f3762c157058734c4abdaf
Commit Graph

295 Commits

Author SHA1 Message Date
David Mehren
7281876763 Merge pull request #578 from hedgedoc/renovate/i18n-0.x 
Update dependency i18n to ^0.13.0
 2020-11-17 15:38:58 +01:00
David Mehren
2507ecb938 Merge pull request #579 from hedgedoc/renovate/mini-css-extract-plugin-0.x 
Update dependency mini-css-extract-plugin to v0.12.0
 2020-11-17 15:37:40 +01:00
Renovate Bot
531ac457ab Update dependency mini-css-extract-plugin to v0.12.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2020-11-17 14:07:18 +00:00
David Mehren
2eba521d81 Merge pull request #577 from hedgedoc/renovate/cookie-0.x 
Update dependency cookie to ^0.4.0
 2020-11-17 15:07:10 +01:00
Renovate Bot
cfd11d22d7 Update dependency i18n to ^0.13.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2020-11-17 14:06:58 +00:00
Renovate Bot
4f1eaf9d94 Update dependency cookie to ^0.4.0 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2020-11-17 13:55:56 +00:00
Renovate Bot
74db870fe3 Pin dependencies 
Signed-off-by: Renovate Bot <bot@renovateapp.com>
 2020-11-17 13:55:35 +00:00
Tilman Vatteroth
6689be4581 Replace slogan 
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
 2020-11-14 22:23:18 +01:00
Erik Michelson
b28839484d Replace CodiMD with HedgeDoc 
Signed-off-by: Erik Michelson <github@erik.michelson.eu>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in public/views

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in README

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in SECURITY.md

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in LICENSE

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in docs/configuration.md

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in bin/setup

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in docs/guides

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in docs/dev

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in docs/guides/auth

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in docs/setup

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update various links in code to the new GitHub org.

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: codiMDVersion.js is now hedgeDocVersion.js

Signed-off-by: David Mehren <git@herrmehren.de>
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: References in docs/setup/yunohost

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rebrand to HedgeDoc: Add banner and logo

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Update links in docs/guides/migrate-etherpad

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Remove note in docs/guides/auth/github

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Replace links in public/docs/features

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Add todo placeholder in docs/history

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Replace github link in public/views/index/body

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Replace github link in README

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Add logo to README

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Rename to HedgeDoc: Add note about the renaming to the front page

Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>

Removed Travis from README.md and change CodiMD to HedgeDoc in some places

Signed-off-by: Yannick Bungers <git@innay.de>

Some more renaming to HedgeDoc
- Fixed capitalization of HedgeDoc
- Added renaming for etherpad migration doc

Signed-off-by: Yannick Bungers <git@innay.de>

Changed Repo name to hedgedoc

Signed-off-by: Yannick Bungers <git@innay.de>
 2020-11-14 21:18:36 +01:00
David Mehren
788292e1fd Upgrade archiver to v5 
Breaking changes only include dropping node <8 and glob patterns.

Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
David Mehren
74f38fab50 Upgrade meta-marked 
Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
David Mehren
37c2b12166 Use npm-release of raphael 
Other dependencies already depend on npm-releases of this, so it does not seem to make sense to get this via Git.

Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
David Mehren
9f756604fd Always use ~ to allow minor upgrades of dependencies 
Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
David Mehren
c5fb4c67a5 Remove unneeded style-loader dependency 
Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
David Mehren
56e82364f0 Set minimum required Node version to 10.13 
This was computed based on our dependencies using `installed-check`.
Node 10 is supported until April 2021.

Signed-off-by: David Mehren <git@herrmehren.de>
Co-authored-by: Yannick Bungers <git@innay.de>
 2020-11-10 22:56:00 +01:00
Tilman Vatteroth
0ec180de71 Adjust webpack config to new code mirror version 
Signed-off-by: Tilman Vatteroth <tilman.vatteroth@tu-dortmund.de>
 2020-10-31 21:43:04 +01:00
David Mehren
f7fea81c32 Update copy-webpack-plugin, css-loader, html-webpack-plugin, style-loader, webpack and webpack-cli 
Signed-off-by: David Mehren <git@herrmehren.de>
 2020-08-19 19:40:17 +02:00
snyk-bot
456ca592dc fix: package.json & yarn.lock to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-590103
 2020-08-17 05:34:56 +00:00
snyk-bot
402d5f2f3c fix: package.json & yarn.lock to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-PRISMJS-597628
 2020-08-10 05:34:26 +00:00
David Mehren
3db8b0df43 Merge pull request #410 from oupala/feature/markdown-linting 2020-07-10 19:59:32 +02:00
snyk-bot
09d210e70b fix: package.json & yarn.lock to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-LODASH-567746
 2020-07-10 05:35:53 +00:00
oupala
3d0cdc914c feat: add remark-lint dependencies and script 
Add remark-lint dependencies as dev dependencies, and an npm script alias to launch markdown linting with `npm run markdownlint`.

Signed-off-by: oupala <oupala@users.noreply.github.com>
 2020-07-02 11:55:44 +02:00
Sheogorath
d6ce60c86e Upgrade pg to fix node version 14 compatibility 
As @davidmehren figured out, the problem that NodeJS version 14 gets
stuck while CodiMD is starting, was due to the outdated postgres
dependency. The old pg version doesn't work with node version 14 due to
an undocumented API change in the `readyState` in the socket API.

This patch updates the required dependency and this way resolves the
issue.

Reference:
https://github.com/sequelize/sequelize/issues/12158
149f482324

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-06-09 20:26:51 +02:00
Nick Hahn
ae7772a3f3 Update to mermaid 8.5.1 
Signed-off-by: Nick Hahn <nick.hahn@posteo.de>
 2020-05-27 14:06:03 +02:00
Sheogorath
a9fea54db0 Upgrade jquery to 3.5.1 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-05-26 16:16:49 +02:00
snyk-bot
dae60e784d fix: package.json & yarn.lock to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-JQUERY-565129
 2020-04-14 05:36:30 +00:00
Sheogorath
8ce7b28563 Release version 1.6.0 
Thanks for all contributions, this community is awesome.
 2020-02-18 00:17:48 +01:00
Antoine Aflalo
85e1eb4b90 Update mermaid 
Signed-off-by: Antoine Aflalo <antoine@warrantymaster.com>
 2020-02-10 17:12:31 +00:00
Sheogorath
b3d4cdbceb Update RevealJS to version 3.9.2 
This update of revealJS helps us to get rid of the headjs depedency
integration using webpack. It updates reveal.js to 3.9.2 and updates the
csp hash accordingly for using the slide mode.

Background for this update is the critical security vulnerability
described by snyk in their disclosure:
https://snyk.io/vuln/SNYK-JS-REVEALJS-543841

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-01 12:53:15 +01:00
David Mehren
3e218e2983 Upgrade webpack & plugins 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-11-23 18:11:17 +01:00
snyk-bot
5dbfb82b7f fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-534478
 2019-11-16 05:35:27 +00:00
Sheogorath
01bff246b0 Merge pull request #210 from davidmehren/mathjax_fix 
Fix compatibility with MathJax 2.7.6
 2019-10-29 14:18:38 +01:00
Sheogorath
68ee654c16 Merge pull request #212 from davidmehren/webpack_cleanup 
Remove unused webpack plugins from package.json
 2019-10-29 14:17:41 +01:00
Sheogorath
402dc7095e Upgrade all ORM/database related packages 
This patch provides some major upgrades to all database backend library.
It also fixes an issues that appears since the change from sequelize v3
to v5 where mariadb was originally handled by mysql2 and is now handled
by an own mariadb library.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-10-28 01:43:22 +01:00
David Mehren
17f2a11310 Remove unused webpack plugins from package.json 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-10-25 21:54:09 +02:00
David Mehren
88b855beb2 Fix compatibility with MathJax 2.7.6 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2019-10-25 21:50:48 +02:00
snyk-bot
72f74b1b23 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MARKDOWNIT-459438
 2019-10-10 05:32:44 +00:00
snyk-bot
511873e58a fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HELMETCSP-469436
 2019-09-30 05:32:48 +00:00
snyk-bot
0185add27f fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-469063
 2019-09-26 05:32:43 +00:00
Tobias Kremer
ea3c824978 Move sequelize-cli from devDependencies to dependencies, because it is needed to run migrations at run-time 
Signed-off-by: Tobias Kremer <tobias.kremer@gmail.com>
 2019-09-06 10:42:30 +02:00
snyk-test
47d2b99582 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-AUTOLINKER-73494
- https://snyk.io/vuln/SNYK-JS-SEQUELIZE-459751
 2019-08-20 05:32:45 +00:00
Sheogorath
9c1665ae5b Release version 1.5.0 2019-08-15 23:30:37 +02:00
Sheogorath
e574ae7588 Switch mysql library to mysql2 
The recent sequelize upgrade introduced some other dependencies, this is
one of them. This patch replaces the old `mysql` library with `mysql2`.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-08-15 23:14:53 +02:00
Sheogorath
c4053ea7ce Update meta-marked to latest version 
Meta-marked 0.4.4 which we used from our git repository contains a
RegexDOS attack in the marked dependency. The dependency was already
updated in our meta-marked repository, but not updated in yarn.

This made us still vulnerable to this ReDOS which was able to cause a
DOS attack on the server when updating a note.

For Details:

https://github.com/markedjs/marked/releases/tag/v0.7.0
https://github.com/markedjs/marked/pull/1515

What is a ReDOS?

A ReDOS attack is a DOS attack where an attacker targets a
not-well-written Regular Expression. Regular expressions try to build a
tree of all possibilities it can match in order to figure out if the
given statement is valid or not. A ReDOS attack abuses this concept by
providing a statement that doesn't match but causes extremly huge trees
that simply lead to exhausting CPU usage.

For more details see: https://www.owasp.org/index.php/Regular_expression_Denial_of_Service_-_ReDoS

Credit:

Huge thanks to @bitinerant for finding this and handling it with a
responsible disclosure.

Also thanks to the `marked`-team for fixing things already.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-08-15 23:14:48 +02:00
snyk-test
6f588826e0 fix: package.json to reduce vulnerabilities 
The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-MERMAID-174698
 2019-07-24 05:32:45 +00:00
Sheogorath
0d5923d61c Update sequelize to latest version 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-06-22 16:29:09 +02:00
BoHong Li
63c96e7359 fix: upgrade sequelize to latest version to fix CVE 
Signed-off-by: BoHong Li <a60814billy@gmail.com>
 2019-06-11 00:41:50 +02:00
Sheogorath
6462968e84 Merge pull request #97 from SISheogorath/fix/linting 
Fix eslint warnings
 2019-06-04 16:09:46 +02:00
Sheogorath
51d69d993c Release version 1.4.0 
Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-05-31 01:08:45 +02:00
Sheogorath
4da68597f7 Fix eslint warnings 
Since we are about to release it's time to finally fix our linting. This
patch basically runs eslint --fix and does some further manual fixes.
Also it sets up eslint to fail on every warning on order to make
warnings visable in the CI process.

There should no functional change be introduced.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2019-05-31 00:30:29 +02:00