Releases: nytimes/library
Releases · nytimes/library
v1.5.2
v1.5.1
v1.5.0
This minor release includes a number of security improvements, adds support for arbitrary path prefixes, and deprecates support for versions of Node older than v14.
Breaking Changes ⚠️
- Library no longer supports versions of node older than v14. The default development target and all distributed builds now use Node v18.
Updates
- Update to only support LTS node versions by @afischer in #356
- Support arbitrary path prefix by @smores in #358
This update also includes all security updates made in v1.4.3, which is the last version of Library to support Node <v14.
Changes from v1.4.3
- Bump qs from 6.5.2 to 6.5.3 by @dependabot in #332
- Bump express from 4.17.1 to 4.17.3 by @dependabot in #333
- Bump ejs from 3.1.5 to 3.1.7 by @dependabot in #337
- Bump pathval from 1.1.0 to 1.1.1 by @dependabot in #309
- Bump minimist from 1.2.5 to 1.2.7 by @dependabot in #341
- Set up github actions by @afischer in #345
- Bump http-cache-semantics from 4.1.0 to 4.1.1 by @dependabot in #344
- Bump json-schema and jsprim by @dependabot in #339
- Bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in #331
- Bump json5 from 1.0.1 to 1.0.2 by @dependabot in #335
- Bump cookiejar from 2.1.2 to 2.1.4 by @dependabot in #336
- Bump ajv from 6.12.2 to 6.12.6 by @dependabot in #310
- Bump node-fetch from 2.6.1 to 2.6.9 by @dependabot in #347
- Bump jsdom from 16.4.0 to 16.7.0 by @dependabot in #321
- Bump minimatch from 3.0.4 to 3.0.8 by @dependabot in #342
- Bump moment from 2.27.0 to 2.29.4 by @dependabot in #323
- Bump node-sass from 6.0.1 to 7.0.3 by @afischer in #353
- Bump ansi-regex from 4.1.0 to 4.1.1 by @dependabot in #354
- Bump got and nodemon by @dependabot in #352
Full Changelog: v1.4.3...v1.5.0
v1.4.3
What's Changed
Patch release with a number of package upgrades for increased stability and security.
Dependency & Security Updates
- Bump qs from 6.5.2 to 6.5.3 by @dependabot in #332
- Bump express from 4.17.1 to 4.17.3 by @dependabot in #333
- Bump ejs from 3.1.5 to 3.1.7 by @dependabot in #337
- Bump pathval from 1.1.0 to 1.1.1 by @dependabot in #309
- Bump minimist from 1.2.5 to 1.2.7 by @dependabot in #341
- Set up github actions by @afischer in #345
- Bump http-cache-semantics from 4.1.0 to 4.1.1 by @dependabot in #344
- Bump json-schema and jsprim by @dependabot in #339
- Bump decode-uri-component from 0.2.0 to 0.2.2 by @dependabot in #331
- Bump json5 from 1.0.1 to 1.0.2 by @dependabot in #335
- Bump cookiejar from 2.1.2 to 2.1.4 by @dependabot in #336
- Bump ajv from 6.12.2 to 6.12.6 by @dependabot in #310
- Bump node-fetch from 2.6.1 to 2.6.9 by @dependabot in #347
- Bump jsdom from 16.4.0 to 16.7.0 by @dependabot in #321
- Bump minimatch from 3.0.4 to 3.0.8 by @dependabot in #342
- Bump moment from 2.27.0 to 2.29.4 by @dependabot in #323
- Bump node-sass from 6.0.1 to 7.0.3 by @afischer in #353
- Bump ansi-regex from 4.1.0 to 4.1.1 by @dependabot in #354
- Bump got and nodemon by @dependabot in #352
Full Changelog: v1.4.2...v1.4.3
v1.4.2
What's Changed
Features and Enhancements
- Allow copying of assets from custom repo by @nzben in #293
- Support diacritics in slug by @hopefourie-nyt in #292
- Update install_customizations to prevent warnings by @leranjun in #295
Bug Fixes 🐛
- Image modal fixes by @xvandish in #299
- Change order of code block formatting to prevent removal of backticks by @mtandre in #301
New Contributors
- @nzben made their first contribution in #293
- @hopefourie-nyt made their first contribution in #292
- @leranjun made their first contribution in #295
- @mtandre made their first contribution in #301
Full Changelog: v1.4.1...v1.4.2
v1.4.1
v1.4.0
This release contains a number of new features, security updates, bug fixes, and changes to our CI pipeline.
Feature highlights include Slack OAuth support, JSON response endpoints, and expandable images.
Breaking Changes ⚠️
- Library no longer supports Node 8.x. If you are running Library in an environment with an older version of Node, please consider updating to one of the actively maintained Node releases.
Bug fixes 🐛
- Check for language existence before trying to highlight code (#226, 🙌 @smores)
- Adjust code block regex (#237, 🙌 @isaacwhite)
- Folders inside a team drive are now supported in addition to "standalone" folders (#278, 🙌 @raimohanska)
Features and Enhancements
- Bring back some advanced customization options (#200, 🙌 @isaacwhite)
- Remove md5 dependency, use Crypto instead (#248, 🙌 @afischer)
- Support for Slack OAuth (#245, 🙌 @penina-nyt)
- Add JSON responses to most endpoints for programatic access (#250, 🙌 @tilgovi @smores)
- Add image modals that expand image on click (#283, 🙌 @xvandish)
CI Updates
- Our CI pipeline has been moved from CircleCI to Drone Cloud. The pipeline now builds and deploys Docker images to Dockerhub when a new release is tagged. Special thanks to @penina-nyt and @isaacwhite for this work!
- Update testing pipeline to include Node 14.x and 16.x.
Security Updates
- A number of packages have been updated and patched to newer, more secure versions.
Cache rewrite, syntax highlighting, inline assets, bugfixes
Autocomplete, auth options, code snippet updates
Improvements for large Libraries
- Preserves deep links (via #heading links) from Google Docs that are part of Library. 🙌, @maxine!
- Adds the ability to template the homepage modules by tag and description. Via @isaacwhite.
- Simplify running the app locally so that
npm run watch
always builds first. 🙌, @davegonzalez! - Adds a warning when multiple documents or folders resolve to the same path in Library. 🙌, @jonpo!
- Adds a max height (400px) to folders on the View all Docs page, useful for larger Library sites. 🙌, @jdk27!
Also includes minor updates via npm audit fix
and others.