Mirror
/
zulip
mirror of https://github.com/zulip/zulip.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
zulip/package.json

89 lines
2.4 KiB
JSON
Raw Normal View History

Install node dependencies using npm. The node packages 'jQuery' and 'jquery' are different--'jQuery' is the legacy support package that is needed for Zulip so the require statements in the tests were updated. Travis uses node 4.0 by default and we are using 0.10, so the command to install the correct version had to be added to the .travis.yml file.
2015-10-26 17:16:26 +01:00
{
"name": "zulip",
"version": "0.0.0",
"license": "Apache-2.0",
"description": "",
"main": "",
npm: Split out production-only dependencies.
2016-08-05 07:10:41 +02:00
"dependencies": {
js: Update minor versions of several node dependencies.
2017-10-15 09:18:05 +02:00
"@types/node": "8.0.34",
typescript: Migrate dict.js to typescript.
2019-02-08 11:56:33 +01:00
"@types/underscore": "1.8.9",
package.json: Realphabetize dependencies. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-04-09 01:12:54 +02:00
"@types/webpack": "4.4.0",
Calculate gravatar hashes on the webapp client. This change prepares us to have the server send avatar_url of None when somebody wants a gravatar avatar (as opposed to a user-uploaded one). Subsequent commits will change behavior on both the server and client to have this happen. So this commit has no-op code for now, but it will soon use the fallback-to-gravatar logic.
2017-11-03 17:25:47 +01:00
"blueimp-md5": "2.10.0",
clipboard: Upgrade clipboard to v2.0.1.
2018-05-20 16:44:28 +02:00
"clipboard": "2.0.1",
webpack: Add css-hot-loader to remove flash on unstyled content. This commit removes the flash on unstyled content while in dev mode that was caused by the use of style-loader. Instead it enables mini-css-extract-plugin in dev in combination with css-hot-loader which enables HMR for development. This is because mini-css-extract-plugin does not currently support HMR out of the box. It also adds a SourceMapDevtoolPlugin to enable sourcemaps with css since mini-css breaks sourcemaps when used in combination with the cheap-module-evel-source-map setting. Related issues: https://github.com/webpack-contrib/mini-css-extract-plugin/issues/34 https://github.com/webpack-contrib/mini-css-extract-plugin/issues/29
2018-05-03 00:16:32 +02:00
"css-hot-loader": "1.3.9",
CSS: Install dependencies for SCSS Integration. This commit installs the dependencies required for SCSS compilation by webpack.
2018-04-25 21:31:22 +02:00
"css-loader": "0.28.11",
emoji: Update `emoji-datasource` packages. This commit updates the `emoji-datasource` packages to version 4.0.4. This update brings following changes to emoji infra: 1: Fix for the bleeding sprite sheets. 2: The category of some emojis has been changed. Categorywise breakup of net gain or loss is as follows: Travel & Places: 58 (gain) Symbols: 47 (loss) Smileys & People: 52 (gain) Objects: 11 (loss) Food & Drink: 3 (gain) Animals and Nature: 46 (gain) Activities: 9 (loss) 3: There were some changes in the image farm of the package which were breaking our old emoji farm. I fixed them by modifying the remapped emoji map. Fixes: #8235.
2018-04-23 07:48:19 +02:00
"emoji-datasource-google": "4.0.4",
build_emoji: Add infrastructure for google-blob and twitter emojisets.
2018-08-25 20:47:56 +02:00
"emoji-datasource-google-blob": "npm:emoji-datasource-google@3.0.0",
"emoji-datasource-twitter": "4.0.4",
logging/errors/webpack: Improve error stack traces with blueslip. This commit improves the output that blueslip produces while showing error stack traces on the front-end. This is done by using a library called error-stack-parser to format the stack traces. This commit also edits the webpack config to use a different devtool setting since the previous one did not support sourcemaps within stack traces. It also removes a plugin that was obviated by this change.
2018-05-22 01:50:25 +02:00
"error-stack-parser": "2.0.1",
webpack: Upgrade webpack version 4.5.0. Upgrade webpack to latest version at the time of authoring. This involves upgrading webpack version and its loaders to compatible versions. It also involved editing tools/webpack to use the executable for webpack-cli instead because of a change in how the webpack package wants you to handle shell execution. It also fixes the confugration for TypeScript in the webpack config as that was previously broken. Including TypeScript files in JS files compiled by webpack now works.
2018-04-17 21:59:17 +02:00
"expose-loader": "0.7.5",
CSS: Install dependencies for SCSS Integration. This commit installs the dependencies required for SCSS compilation by webpack.
2018-04-25 21:31:22 +02:00
"file-loader": "1.1.11",
flatpickr: Upgrade flatpickr to v4.5.0. This new version is a lot ahead that what we now have currently. Reading through the changelog there does not seem to any breaking changes, just that this package have been updated a lot. Ref: https://github.com/flatpickr/flatpickr/releases
2018-05-20 16:22:07 +02:00
"flatpickr": "4.5.0",
third: Use fontawesome NPM package. This removes the need for us to have checked in a copy of fontawesome.
2018-05-16 23:28:28 +02:00
"font-awesome": "4.7.0",
handlebars: Upgrade handlebars to v4.0.11. This version only contains bugfixes. No breaking changes have been introduced. Ref: https://github.com/wycats/handlebars.js/blob/master/release-notes.md#v4011---october-17th-2017
2018-05-20 16:27:04 +02:00
"handlebars": "4.0.11",
node: Update package.json to eliminate vulnerable dependecies.
2017-03-15 02:21:00 +01:00
"i18next": "3.4.4",
webpack: Transition app.js to be compiled by webpack. This commit moves all files previously under the 'app' bundle in the Django pipeline to being compiled by webpack under the 'app' entry point. In the process, it moves assets under the app entry to a file called app.js that consumes all relevant css and js files. This commit also edits the webpack config to be able to expose certain variables for third party libraries that are currently required by some modules. This is bad coding form and should be refactored to requiring whatever dependencies a module may have; we're just deferring that to the future to simplify the series of transitions we need to do here. The variable exposure is done using expose-loader in webpack. The app/index.html template is edited to override the newly introduced 'commonjs' block in the base template. This is done as a temporary measure so as not to disrupt other pages on the app during the transition. It also fixes the value of the 'this' context that was being inferred as window by third party libraries. This is done using imports-loader in the webpack config. This is also messy and probably isn't how we want things to work long term.
2018-05-28 08:09:49 +02:00
"imports-loader": "0.8.0",
Updated jquery to 3.3.1.
2018-03-22 02:21:10 +01:00
"jquery": "3.3.1",
jquery-validation: Upgrade jquery-validation to v1.17.0 Refs: https://github.com/jquery-validation/jquery-validation/releases/tag/1.17.0
2018-05-20 16:48:08 +02:00
"jquery-validation": "1.17.0",
bugdown: Update KaTeX to version 0.8.3 from 0.7.1. Fixes #7480.
2017-11-23 05:52:13 +01:00
"katex": "0.8.3",
dependencies: Add lazysizes npm package.
2018-06-24 22:53:20 +02:00
"lazysizes": "4.1.6",
CSS: Install dependencies for SCSS Integration. This commit installs the dependencies required for SCSS compilation by webpack.
2018-04-25 21:31:22 +02:00
"mini-css-extract-plugin": "0.4.0",
moment: Upgrade moment to v2.22.1. This version since the last version contains bug fixes and locale improvements. Ref: https://github.com/moment/moment/blob/develop/CHANGELOG.md#2221-see-full-changelog
2018-05-20 16:39:49 +02:00
"moment": "2.22.1",
moment-timezone: Upgrade moment-timezone to v0.5.17. Refs: https://github.com/moment/moment-timezone/blob/master/changelog.md
2018-05-20 16:52:07 +02:00
"moment-timezone": "0.5.17",
node-sass: Upgrade node-sass to v4.9.0. This resolves 12 vulnerabilities. Following were the issue with the dependencies of node-sass. hoek - Prototype Pollution Ref: https://nodesecurity.io/advisories/566 tunnle-agent - Memory Exposure issue Ref: https://nodesecurity.io/advisories/598 stringstream - Out-of-bounds read Ref: https://nodesecurity.io/advisories/664
2018-05-20 01:15:36 +02:00
"node-sass": "4.9.0",
ui scrollbar: Update perfect-scrollbar to 1.3.0. Update perfect-scrollbar to fix stutter space-scrolling in #8544. Also reworked deprecated `element.perfectScrollbar` to `new PerfectScrollbar(element)`. Lastly, updated provision version and changed node module path to new path. This also refactors perfect-scrollbar in help.js to work with updated version of perfect-scrollbar. Because the update also changed perfect-scrollbar's css selectors for all scrollbars in zulip, we update those too. Fixes #8544.
2018-03-20 04:10:20 +01:00
"perfect-scrollbar": "1.3.0",
ploty.js: Upgrade ploty.js to v1.37.1. This solves 14 security venrubilities in the ploty.js's dependencies. This was found by using the `npm audit` tool which can analyse dependencies of dependencies issues. static-eval - Sandbox Breakout / Arbitrary Code Execution Ref: https://nodesecurity.io/advisories/548 hoek - Prototype pollution Ref: https://nodesecurity.io/advisories/566 stringstream - Memory Exposure issue Ref: https://nodesecurity.io/advisories/664
2018-05-19 23:43:49 +02:00
"plotly.js": "1.37.1",
CSS: Install dependencies for SCSS Integration. This commit installs the dependencies required for SCSS compilation by webpack.
2018-04-25 21:31:22 +02:00
"sass-loader": "7.0.1",
js: Update minor versions of several node dependencies.
2017-10-15 09:18:05 +02:00
"script-loader": "0.7.2",
dependencies: Upgrade simplebar to 3.1.3. Signed-off-by: Anders Kaseorg <andersk@mit.edu>
2019-03-07 23:55:46 +01:00
"simplebar": "^3.1.3",
third: Add sortablejs library.
2018-06-09 09:37:01 +02:00
"sortablejs": "^1.7.0",
third: Get sorttable package from npm. We didn't have any local changes, so there's no need to have it vendored in the repository.
2018-05-15 17:07:56 +02:00
"sorttable": "1.0.2",
Updated source-map-loader to 0.2.3.
2018-03-22 21:05:00 +01:00
"source-map-loader": "0.2.3",
third: Remove font Source Sans Pro from static/third. We can just get it from NPM instead.
2018-05-15 21:56:51 +02:00
"source-sans-pro": "2.20.2",
String.codePointAt: Upgrade String.codePointAt polyfill to v0.2.1.
2018-05-20 16:55:52 +02:00
"string.prototype.codepointat": "0.2.1",
browser-support: Add string.prototype.endswith polyfill. String.prototype.endsWith is not supported in ie11. Adds string.prototype.endswith package to dependencies and places it at `common` entry point in webpack.assets.json.
2018-04-11 23:14:25 +02:00
"string.prototype.endswith": "0.2.0",
browser-support: Add string.prototype.startsWith polyfill. Fixes #8944. Adds string.prototype.startswith package to dependencies and places it at `common` entry point in webpack.assets.json. As common.js is loaded on all code paths first, there is no need to place this package into other entry points.
2018-04-09 02:08:08 +02:00
"string.prototype.startswith": "0.2.0",
CSS: Install dependencies for SCSS Integration. This commit installs the dependencies required for SCSS compilation by webpack.
2018-04-25 21:31:22 +02:00
"style-loader": "0.21.0",
compose: Preserve links when pasting html. This uses the to-markdown.js library to do all the hard work of parsing HTML and turning it into markdown and not e.g. uploaded files. Tweaked by tabbott to better scope when it activates to just include pastes of HTML content. Fixes #5853.
2017-10-06 10:46:08 +02:00
"to-markdown": "3.1.0",
typescript: Update TS related dependencies.
2019-02-06 07:49:50 +01:00
"ts-loader": "5.3.3",
dependencies: Downgrade ts-node to v7.0.1. The current v8.0.0^ has a slow startup time due to some module resolution issue.
2019-03-19 12:55:23 +01:00
"ts-node": "7.0.1",
typescript: Update TS related dependencies.
2019-02-06 07:49:50 +01:00
"typescript": "3.3.1",
underscore: Upgrade underscore to v1.9.0.
2018-05-20 17:20:09 +02:00
"underscore": "1.9.0",
Generate custom-icon-webfont on each provision or update-prod-static. Fixes #7354.
2017-11-12 10:13:09 +01:00
"webfonts-generator": "0.4.0",
webpack: Upgrade webpack to v4.8.3.
2018-05-20 01:26:52 +02:00
"webpack": "4.8.3",
Updated webpack-bundle-tracker to 0.3.0.
2018-03-22 01:08:03 +01:00
"webpack-bundle-tracker": "0.3.0",
webpack-cli: Upgrade webpack-cli to v2.1.3. This version just contains bugs fixes and regressions covered. Ref: https://github.com/webpack/webpack-cli/releases/tag/2.1.3
2018-05-20 16:06:25 +02:00
"webpack-cli": "2.1.3",
deps: Upgrade and move `winchan.js` from `static/third` to `npm` - Remove `winchan.js` from `static/third` and fetch it from `npm`. - Upgrade `winchan` to 0.2.0. - Bump up the `PROVISION_VERSION` to 4.0. Part of #1709.
2017-01-08 06:24:14 +01:00
"winchan": "0.2.0",
js: Update minor versions of several node dependencies.
2017-10-15 09:18:05 +02:00
"xdate": "0.8.2",
"zxcvbn": "4.4.2"
npm: Split out production-only dependencies.
2016-08-05 07:10:41 +02:00
},
"devDependencies": {
package.json: Realphabetize devDependencies. Signed-off-by: Anders Kaseorg <anders@zulipchat.com>
2019-04-22 23:10:07 +02:00
"@typescript-eslint/eslint-plugin": "1.5.0",
"@typescript-eslint/parser": "1.5.0",
casper: Switch to use a newer casper off master. Newer casper should fix some problems we've had with contenteditable.
2017-11-17 00:50:14 +01:00
"casperjs": "casperjs/casperjs",
Run eslint in tools/lint-all with npm run --silent lint This commit adds a basic eslintrc that emulates jslint defaults. Rules that conflict with our existing code have been switched to warnings instead of errors. Globals have been added to the eslintrc. The bundled js file (generated by webpack) and blueslip.js are ignored with .eslintignore. To display warnings, run npm run lint-loud. This runs eslint without the --quiet option on static/js and frontend_tests. npm run --silent lint is run by tools/lint-all (in addition to jslint). The --silent option is used to suppress the default output from npm run. Fixes #535.
2016-11-04 23:15:18 +01:00
"cssstyle": "0.2.29",
package.json: Move difflib to devDependencies. We introduced this a couple of commits ago (in #7782) for use in the tests only. Putting it here avoids pulling in a new dependency in production which we don't use there.
2017-12-19 04:09:03 +01:00
"difflib": "0.2.4",
typescript: Use ESLint instead of TSLint.
2019-03-24 11:20:43 +01:00
"eslint": "5.15.3",
lint: Replace 'return undefined;' with 'return;'. Also adds a custom rule to eslint. Since the recommended way of extending eslint is to create plugins as standalone npm packages, the separate rule is published as 'eslint-plugins-empty-returns'. Fixes #8669.
2018-03-13 13:04:16 +01:00
"eslint-plugin-empty-returns": "1.0.2",
Run eslint in tools/lint-all with npm run --silent lint This commit adds a basic eslintrc that emulates jslint defaults. Rules that conflict with our existing code have been switched to warnings instead of errors. Globals have been added to the eslintrc. The bundled js file (generated by webpack) and blueslip.js are ignored with .eslintignore. To display warnings, run npm run lint-loud. This runs eslint without the --quiet option on static/js and frontend_tests. npm run --silent lint is run by tools/lint-all (in addition to jslint). The --silent option is used to suppress the default output from npm run. Fixes #535.
2016-11-04 23:15:18 +01:00
"htmlparser2": "3.8.3",
jsdom: Upgrade jsdom to v11.10.0. This also updates node_tests to use new constructor which is uppercase, and some properties that are changed to be more clear now, like jsdom().defaultView which is meant to the window object is now called window. Ref: https://github.com/jsdom/jsdom/blob/master/Changelog.md
2018-05-20 16:35:54 +02:00
"jsdom": "11.10.0",
Install node dependencies using npm. The node packages 'jQuery' and 'jquery' are different--'jQuery' is the legacy support package that is needed for Zulip so the require statements in the tests were updated. Travis uses node 4.0 by default and we are using 0.10, so the command to install the correct version had to be added to the .travis.yml file.
2015-10-26 17:16:26 +01:00
"nwmatcher": "1.3.6",
nyc: Upgrade nyc to v11.8.0. This fixes a one vulnerability with this package's dependency. randomatic - Cryptographically Weak PRNG Ref: https://nodesecurity.io/advisories/157
2018-05-20 01:42:23 +02:00
"nyc": "11.8.0",
phantomjs-prebuilt: Upgrade phantomjs-prebuilt to 2.1.16. This solves 8 vulnerabilities, in its dependencies. conacat-stream - Memory Exposure Ref: https://nodesecurity.io/advisories/597 hoek - Prototype Pollution Ref: https://nodesecurity.io/advisories/566 tunnel-agent - Memory Exposure Ref: https://nodesecurity.io/advisories/598 debug - Regular Expression Denial of Service Ref: https://nodesecurity.io/advisories/534 stringstream - Out-of-bounds Read Ref: https://nodesecurity.io/advisories/664
2018-05-20 01:31:11 +02:00
"phantomjs-prebuilt": "2.1.16",
stylelint: Add stylelint package.
2018-07-25 14:12:57 +02:00
"stylelint": "9.3.0",
svgo: Upgrade svgo to v1.0.5. It also updated all the svg to be optmized per new version. This new version, since the last version contains bug fixes and improvement. Refs: https://github.com/svg/svgo/releases
2018-05-20 17:00:31 +02:00
"svgo": "1.0.5",
lint: Add validation for the Swagger file.
2017-06-02 23:12:26 +02:00
"swagger-parser": "3.4.1",
webpack-dev-server: Upgrade webpack-dev-server to v3.1.4.
2018-05-20 01:39:44 +02:00
"webpack-dev-server": "3.1.4",
xmlhttprequest: Upgrade xmlhttprequest to v1.8.0.
2018-05-20 17:29:12 +02:00
"xmlhttprequest": "1.8.0"
Run eslint in tools/lint-all with npm run --silent lint This commit adds a basic eslintrc that emulates jslint defaults. Rules that conflict with our existing code have been switched to warnings instead of errors. Globals have been added to the eslintrc. The bundled js file (generated by webpack) and blueslip.js are ignored with .eslintignore. To display warnings, run npm run lint-loud. This runs eslint without the --quiet option on static/js and frontend_tests. npm run --silent lint is run by tools/lint-all (in addition to jslint). The --silent option is used to suppress the default output from npm run. Fixes #535.
2016-11-04 23:15:18 +01:00
},
"scripts": {
eslint: add --cache flag for faster linting
2017-12-07 01:56:39 +01:00
"lint": "eslint --quiet --cache",
"lint-fix": "eslint --quiet --fix",
"lint-loud": "eslint static/js frontend_tests --cache"
Install node dependencies using npm. The node packages 'jQuery' and 'jquery' are different--'jQuery' is the legacy support package that is needed for Zulip so the require statements in the tests were updated. Travis uses node 4.0 by default and we are using 0.10, so the command to install the correct version had to be added to the .travis.yml file.
2015-10-26 17:16:26 +01:00
},
"repository": {
"type": "git",
"url": "https://github.com/zulip/zulip.git"
}
}