Pull Request Explorer

Summary

Update actions/github-script action to v9

This PR updates the GitHub Actions script action to the latest major version, ensuring compatibility with new features and breaking changes.

Health Assessment

• • Fast merge with minimal changes, typical dependency bump.

Summary

Update dependency tmp to v0.2.6 [SECURITY]

This PR updates the tmp package to address a critical path traversal vulnerability, ensuring the application remains secure.

Health Assessment

• • The PR was merged after a long cycle time with no review or comments, indicating a straightforward dependency bump.

Summary

Moved get helper deduplication behind a labs flag

Enables per-site toggling of get helper deduplication via a labs flag, allowing controlled rollout of the feature without a separate config setting.

Health Assessment

• • Quick single-commit PR with minimal changes and no review delays, indicating low complexity and risk.

Summary

Fix design preview raw markdown issue

Previews now request HTML instead of markdown, ensuring correct rendering for Ghost users when llms.txt is enabled.

Health Assessment

• • Quick fix with minimal changes, resolved in under 2 hours, indicating efficient review and low complexity.

Summary

Fix 403 leak for disabled llms.txt

Prevents unauthorized markdown access when llms.txt feature is disabled, ensuring consistent redirect behavior.

Health Assessment

• • Fast turnaround with minimal code changes, no review required, low risk to production.

Summary

Update dependency express to v4.22.2

This PR updates the Express framework to the latest patch version, incorporating security fixes and bug improvements to keep the application secure and stable.

Health Assessment

• • Automated dependency bump, quick review, minimal risk, merged after ~3 days.

Summary

Update dependency nx to v22.7.4

Bumps the nx build tool to the latest patch, ensuring compatibility and security fixes.

Health Assessment

• • Quick dependency update merged within 2 days, minimal friction.

Summary

Add llms.txt toggle behind labs flag

Adds a UI toggle to enable structured data for LLMs, giving admins control over the feature and improving AI search engine compatibility.

Health Assessment

• • Quick merge with minimal changes, no review needed, indicating low complexity.

Summary

Fix Mastodon field input mangling during typing

Prevents premature canonicalization of Mastodon handles, improving user experience in social account settings.

Health Assessment

• • Resolved in under 2 hours with minimal changes, indicating efficient review and low complexity.

Summary

Fixed type for member repository subscription link

Corrects the type definition for the member repository subscription link, making the offerId parameter optional to improve type safety.

Health Assessment

• • Quick type correction with minimal changes, merged within minutes.

Summary

Consolidate member repository test helpers

This change consolidates test helpers for member repositories, improving maintainability without affecting user-facing functionality.

Health Assessment

• • Quick review and merge with minimal changes, indicating a straightforward cleanup.

Summary

Fixed future filter date selection

The date picker now allows selecting dates beyond the current year, enabling accurate member report filtering for future billing periods. This resolves an issue where future dates were inaccessible via the UI.

Health Assessment

• • Quick fix with minimal changes, resolved a UI limitation affecting future date selection.

Summary

Cleaned theme editor limit gate and fixed orphan

Improves user experience by removing unnecessary comments and ensuring modal text displays cleanly, preventing visual glitches.

Health Assessment

• • Quick turnaround with minimal changes, indicating straightforward bug fix and clean code maintenance.

Summary

Add defaults version validation to app bump check

Ensures public app releases reference the correct CDN version by validating defaults.json major/minor alignment, reducing runtime errors and improving reliability.

Health Assessment

• • Quick review and minimal rework; PR merged within 2 days with AI-assisted review comments.

Summary

Fix back navigation in post analytics member filter

This fix ensures users can navigate back from filtered member views to post analytics without extra steps, improving user experience and reducing confusion.

Health Assessment

• • Quick fix with minimal changes, reviewed by AI, merged within 30 minutes.

Summary

Removed theme editor review modal

This PR removes the hidden review modal from the theme editor, simplifying the user experience by keeping only the inline modified‑files indicator and revert controls.

Health Assessment

• • Merged within 1.2 hours with minimal review, indicating a low‑complexity cleanup.

Summary

Fix theme editor launch gate for limited plans

Ensures users on limited plans can edit themes without encountering generic errors, improving user experience and reducing support tickets.

Health Assessment

• • The PR took nearly 10 days to merge, indicating a slow review cycle, but the change is small and straightforward, keeping risk low.

Summary

Add permissions block to migration-review workflow

Adds explicit permissions to the migration review workflow, preventing 403 errors and tightening security. This ensures the workflow can add labels and comments without exposing broader repository access.

Health Assessment

• • Single small change to workflow permissions, minimal risk, quick resolution after runtime failures.

Summary

Add admin-toolbar to CI publish pipeline

Ensures @tryghost/admin-toolbar is published to npm and served via jsDelivr, fixing 404 errors in production. This update aligns the toolbar with other public apps and improves reliability.

Health Assessment

• • Fast cycle time and minimal rework indicate smooth integration.

Summary

Update dependency jwks-rsa to v3.2.2

This PR updates the jwks-rsa library to v3.2.2, aligning Ghost with the latest security and Node.js compatibility, and preparing for future Node.js releases.

Health Assessment

• • Fast dependency update with minimal changes, merged quickly with no review friction.

Summary

Update dependency @doist/react-interpolate to v2.2.2

This PR bumps the @doist/react-interpolate package to v2.2.2, ensuring the latest fixes and compatibility for the Ghost UI components.

Health Assessment

• • Automated dependency update with minimal code changes, merged within a day.

Summary

Fixed type error in member repo

Resolves a type error in the member repository, improving code reliability.

Health Assessment

• • Quick fix with minimal changes, no review needed.

Summary

Migrate staff email templates to TypeScript

Migrates staff email templates from plain text to TypeScript for improved type safety and maintainability, with no direct user-facing impact.

Health Assessment

• • Fast merge with minimal review, indicating straightforward refactor with low complexity.

Summary

Convert importer email template to TypeScript

Migrates the importer email template from JavaScript to TypeScript, improving type safety without affecting user‑facing functionality.

Health Assessment

• • Quick 1.8‑hour cycle with minimal changes and no user impact indicates a low‑risk refactor.

Summary

Switched to ES Modules for automations API exports

This change updates the automations API to use ES module syntax, improving compatibility with future refactors and aligning with modern JavaScript standards. It has no immediate user impact.

Health Assessment

• • Quick refactor with minimal scope and fast review, indicating low risk and efficient process.

Summary

Updated @tryghost/domain-events to latest version

Updated dependency to latest version with no user impact.

Health Assessment

• • Quick dependency bump with minimal changes and no user impact.

Summary

Fix production builds with unpinned dependencies

Ensures production installs use the same dependency graph as source, preventing version drift and build failures.

Health Assessment

• • Quick fix with minimal changes, resolved build issue promptly.

Summary

Fix post analytics missing first-day traffic

Ensures publish‑day traffic is always included in post analytics, improving accuracy of traffic reports.

Health Assessment

• • Quick fix with minimal changes, AI‑assisted review streamlined the process.

Summary

Convert slugify util to TypeScript

Migrated the slugify utility from JavaScript to TypeScript to improve type safety and maintainability.

Health Assessment

• • Quick refactor with minimal changes, merged within 1.4 hours, indicating smooth review and low risk.

Summary

Updated Renovate quiet-hours schedule

Adjusts Renovate dependency update schedule to reduce core hours impact while maintaining throughput.

Health Assessment

• • Fast review and merge with minimal changes indicates low complexity and risk.

Summary

Converted Koenig DOM cleaner to TypeScript

No user impact; converts the cleanDOM function to TypeScript, fixing type errors.

Health Assessment

• • Quick refactor with minimal code changes and no user-facing impact.

Summary

TypeScriptified `og:type` helper

Adds TypeScript typing to the Open Graph type helper, improving code quality without affecting user-facing behavior.

Health Assessment

• • Quick review with a single AI-generated comment, minimal changes, and a fast merge within 16 hours.

Summary

Simplify value checks in fake automations

Simplifies internal automation logic by reducing required parameters, easing future updates and maintenance.

Health Assessment

• • Quick, single-file refactor with no functional impact, merged within a day.

Summary

Removed duplicate entry in lockfile

Fixes build failures caused by duplicate lockfile entries, ensuring reliable dependency resolution.

Health Assessment

• • Quick fix with minimal review, resolved build issue promptly.

Summary

Updated Vietnamese translations

Adds and refines Vietnamese translations for new and existing strings, improving clarity for Vietnamese users.

Health Assessment

• • Fast review turnaround and AI‑assisted review comments kept the PR cycle short with minimal friction.

Summary

Health Assessment

Summary

Update TryGhost runtime packages

This PR updates runtime packages to newer versions, ensuring compatibility and security for the Ghost platform.

Health Assessment

• • Automated dependency update via Renovate, minimal code changes, quick cycle time, low risk.

Summary

Update dependency mysql2 to v3.22.3

This PR updates the mysql2 library to the latest patch, incorporating bug fixes and performance improvements for database interactions.

Health Assessment

• • Merged quickly with no review, minimal code changes, low risk.

Summary

Update TryGhost admin support packages

This PR updates several admin support packages to newer versions, ensuring compatibility and security.

Health Assessment

• • Fast merge with minimal changes, no review friction.

Summary

Update dependency globals to v17.6.0

This PR bumps the globals package to the latest version, applying security and compatibility fixes for the Ghost admin interface.

Health Assessment

• • Automated dependency update merged quickly with minimal review, typical for routine maintenance.

Summary

Update dependency flexsearch to v0.8.212

This PR updates the flexsearch library to the latest version, ensuring improved search performance and bug fixes.

Health Assessment

• • Fast merge with minimal changes, typical dependency bump.

Summary

Update dependency countries-and-timezones to v3.9.0

Bumps the countries-and-timezones library to v3.9.0, incorporating the latest IANA time‑zone database and adding support for Heard Island and McDonald Islands, ensuring accurate regional data for the application.

Health Assessment

• • Automated dependency bump merged quickly with minimal code changes, indicating a low‑risk, routine maintenance update.

Summary

Update tinybirdco/tinybird-local:latest Docker digest to e9f78aa

Updates the Docker image digest for the tinybirdco/tinybird-local service to the latest version, ensuring the local analytics service uses an up-to-date image.

Health Assessment

• • Quick dependency update with minimal changes, merged within 44 hours, indicating a smooth review process.

Summary

Update i18next-parser dependency to v9.4.0

Bumps the i18next-parser library to the latest patch, ensuring improved translation parsing and addressing any security or bug fixes that may impact internationalization features.

Health Assessment

• • Fast merge with minimal changes, typical dependency bump with no review friction.

Summary

Update dependency knip to v6.14.2

This PR updates the knip dependency to the latest version, ensuring compatibility and security improvements.

Health Assessment

• • Fast merge with minimal changes, typical dependency bump.

Summary

Update dependency probe-image-size to v7.3.0

This PR updates the probe-image-size library to the latest patch, fixing several image parsing bugs and improving format handling, ensuring more reliable image processing for the Ghost platform.

Health Assessment

• • Quick dependency bump with minimal code changes, merged within 14.5 hours, indicating a smooth and low-risk update process.

Summary

Added stateless llms.txt service with dependency injection

Enables stateless, compute‑on‑request generation of llms.txt and per‑entry markdown, with dependency injection and private labs gating, improving scalability and flexibility.

Health Assessment

• • PR required extensive rework after initial review, with nine commits addressing feedback and performance issues, indicating moderate review friction but ultimately delivering a complex feature.

Summary

Fixed Renovate security update matching

Corrects Renovate’s vulnerability alert detection to prevent unnecessary release‑age exceptions, ensuring timely security patches.

Health Assessment

• • Merged within minutes with a single small change, indicating low complexity and minimal review friction.

Summary

Update mysql Docker tag to v8.4.9

Updates the MySQL Docker image to the latest patch version, improving security and stability for the Ghost application.

Health Assessment

• • Dependency update with minimal changes, merged quickly with automated tooling, indicating low risk and high confidence in stability.

Summary

Update Docker tag to v1.0.244

Updates the ghost/traffic-analytics Docker tag to the latest version, improving the application's functionality and security.

Health Assessment

• • This PR was automatically generated by Mend Renovate and was merged after a short review period, indicating a smooth and efficient update process.