ComputerSurge/shields
3
0
Fork 0
Code Pull Requests 1 Activity
2,250 Commits 55 Branches 65 Tags
4f83015732acd23dadf72c8a5daa31dbd36628bc
Commit Graph
233 Commits
Author SHA1 Message Date
dependabot[bot]andchris48s 4f83015732 Bump fast-xml-parser from 3.12.9 to 3.12.10 (#2442) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 3.12.9 to 3.12.10.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-12-03 21:01:04 +00:00
Paul MelnikowandGitHub 54a36e9474 Refactor cache-header handling and config, create NonMemoryCachingBaseService, rewrite [flip] (#2360) 
There's a lot going on in this PR, though it's all interdependent, so the only way I can see to break it up into smaller pieces would be serially.

1. I completely refactored the functions for managing cache headers. These have been added to `services/cache-headers.js`, and in some ways set the stage for the rest of this PR.

    - There are ample higher-level test of the functionality via `request-handler`. Refactoring these tests was deferred. Cache headers were previously dealt with in three places:
        - `request-handler.js`, for the dynamic badges. This function now calls `setCacheHeaders`.
        - `base-static.js`, for the static badges. This method now calls the wordy `serverHasBeenUpSinceResourceCached` and `setCacheHeadersForStaticResource`.
        - The bitFlip badge in `server.js`. 👈 This is what set all this in motion. This badge has been refactored to a new-style service based on a new `NoncachingBaseService` which does not use the Shields in-memory cache that the dynamic badges user.
    - I'm open to clearer names for `NoncachingBaseService`, which is kind of terrible. Absent alternatives, I wrote a short essay of clarification in the docstring. 😝 

2. In the process of writing `NoncachingBaseService`, I discovered it takes several lines of code to instantiate and invoke a service. These would be duplicated in three or four places in production code, and in lots and lots of tests. I kept the line that goes from regex to namedParams (for reasons) and moved the rest into a static method called `invoke()`, which instantiates and invokes the service. This _replaced_ the instance method `invokeHandler`.
    - I gently reworked the unit tests to use `invoke` instead of `invokeHandler`– generally for the better.
    - I made a small change to `BaseStatic`. Now it invokes `handle()` async as the dynamic badges do. This way it could use `BaseService.invoke()`.

3. There was logic in `request-handler` for processing environment variables, validating them, and setting defaults. This could have been lifted whole-hog to `services/cache-headers.js`, though I didn't do that. Instead I moved it to `server-config.js`. Ideally `server-config` is the only module that should access `process.env`. This puts the defaults and config validation in one place, decouples the config schema from the entire rest of the application, and significantly simplifies our ability to test different configs, particularly on small units of code. (We were doing this well enough before in `request-handler.spec`, though it required mutating the environment, which was kludgy.) Some of the `request-handler` tests could be rewritten at a higher level, with lower-level data-driven tests directly against `cache-headers`.
 2018-12-01 13:57:34 -05:00
dependabot[bot]andPierre-Yves B 18b95cba5a Bump snap-shot-it from 6.2.5 to 6.2.7 (#2421) 
Bumps [snap-shot-it](https://github.com/bahmutov/snap-shot-it) from 6.2.5 to 6.2.7.
- [Release notes](https://github.com/bahmutov/snap-shot-it/releases)
- [Commits](https://github.com/bahmutov/snap-shot-it/compare/v6.2.5...v6.2.7)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-12-01 14:50:09 +00:00
dependabot[bot]andPierre-Yves B 41b05b3320 Bump prettier from 1.15.2 to 1.15.3 (#2433) 
Bumps [prettier](https://github.com/prettier/prettier) from 1.15.2 to 1.15.3.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/1.15.2...1.15.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-12-01 14:40:30 +00:00
dependabot[bot]andchris48s 24c0b9c7e7 Bump danger from 6.1.5 to 6.1.8 (#2416) 
Bumps [danger](https://github.com/danger/danger-js) from 6.1.5 to 6.1.8.
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/compare/6.1.5...6.1.8)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-29 22:29:31 +00:00
dependabot[bot]andchris48s 4da2fa3aa9 Bump fast-xml-parser from 3.12.8 to 3.12.9 (#2395) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 3.12.8 to 3.12.9.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-29 22:26:51 +00:00
dependabot[bot]andPaul Melnikow 1cebdd4bb1 Bump sinon-chai from 3.2.0 to 3.3.0 (#2408) 
Bumps [sinon-chai](https://github.com/domenic/sinon-chai) from 3.2.0 to 3.3.0.
- [Release notes](https://github.com/domenic/sinon-chai/releases)
- [Commits](https://github.com/domenic/sinon-chai/compare/v3.2.0...3.3.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-27 10:44:35 -05:00
dependabot[bot]andchris48s a524658e74 Bump lint-staged from 8.0.5 to 8.1.0 (#2384) 
Bumps [lint-staged](https://github.com/okonet/lint-staged) from 8.0.5 to 8.1.0.
- [Release notes](https://github.com/okonet/lint-staged/releases)
- [Commits](https://github.com/okonet/lint-staged/compare/v8.0.5...v8.1.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-25 21:29:04 +00:00
dependabot[bot]andchris48s aed2320d5a Bump joi from 14.0.6 to 14.3.0 (#2393) 
Bumps [joi](https://github.com/hapijs/joi) from 14.0.6 to 14.3.0.
- [Release notes](https://github.com/hapijs/joi/releases)
- [Changelog](https://github.com/hapijs/joi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hapijs/joi/compare/v14.0.6...v14.3.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-25 21:20:47 +00:00
dependabot[bot]andchris48s 08546544c8 Bump husky from 1.1.4 to 1.2.0 (#2381) 
Bumps [husky](https://github.com/typicode/husky) from 1.1.4 to 1.2.0.
- [Release notes](https://github.com/typicode/husky/releases)
- [Changelog](https://github.com/typicode/husky/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typicode/husky/compare/v1.1.4...v1.2.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-25 21:14:10 +00:00
dependabot[bot]andPaul Melnikow abec14812c Bump react-dom from 16.6.1 to 16.6.3 (#2374) 
Bumps [react-dom](https://github.com/facebook/react) from 16.6.1 to 16.6.3.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/compare/v16.6.1...v16.6.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-24 13:18:26 -05:00
dependabot[bot]andPierre-Yves B 1a75790078 Bump fast-xml-parser from 3.12.7 to 3.12.8 (#2385) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 3.12.7 to 3.12.8.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-24 09:40:42 +00:00
dependabot[bot]andPierre-Yves B a35d528395 Bump danger from 6.1.4 to 6.1.5 (#2380) 
Bumps [danger](https://github.com/danger/danger-js) from 6.1.4 to 6.1.5.
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/compare/6.1.4...6.1.5)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-24 09:35:53 +00:00
dependabot[bot]andDanial bef82d092f Bump simple-icons from 1.9.13 to 1.9.14 (#2383) 
Bumps [simple-icons](https://github.com/simple-icons/simple-icons) from 1.9.13 to 1.9.14.
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](https://github.com/simple-icons/simple-icons/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-23 12:19:46 +13:00
Paul MelnikowandGitHub da0bf8c57c Remove unused chai-as-promised dependency (#2359) 2018-11-21 17:10:09 -05:00
dependabot[bot]andPaul Melnikow 5a367efe11 Bump eslint-plugin-node from 7.0.1 to 8.0.0 (#2225) 
* Bump eslint-plugin-node from 7.0.1 to 8.0.0

Bumps [eslint-plugin-node](https://github.com/mysticatea/eslint-plugin-node) from 7.0.1 to 8.0.0.
- [Release notes](https://github.com/mysticatea/eslint-plugin-node/releases)
- [Commits](https://github.com/mysticatea/eslint-plugin-node/compare/v7.0.1...v8.0.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>

* Update lockfile

* Temporarily ignore…
 2018-11-19 16:15:47 -05:00
dependabot[bot]andPaul Melnikow 7fa8f9dbca Bump react from 16.5.2 to 16.6.3 (#2319) 
* Bump react from 16.5.2 to 16.6.3

Bumps [react](https://github.com/facebook/react) from 16.5.2 to 16.6.3.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/compare/v16.5.2...v16.6.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>

* Bump react-dom from 16.5.2 to 16.6.1

Bumps [react-dom](https://github.com/facebook/react) from 16.5.2 to 16.6.1.
- [Release notes](https://github.com/facebook/react/releases)
- [Changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md)
- [Commits](https://github.com/facebook/react/compare/v16.5.2...v16.6.1)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 16:11:10 -05:00
dependabot[bot]andPaul Melnikow fcd33fec1e Bump @babel/core from 7.1.2 to 7.1.6 (#2318) 
Bumps [@babel/core](https://github.com/babel/babel) from 7.1.2 to 7.1.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.1.2...v7.1.6)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 16:05:00 -05:00
dependabot[bot]andPaul Melnikow d9f132d865 Bump @babel/preset-env from 7.1.0 to 7.1.6 (#2315) 
* Bump @babel/preset-env from 7.1.0 to 7.1.6

Bumps [@babel/preset-env](https://github.com/babel/babel) from 7.1.0 to 7.1.6.
- [Release notes](https://github.com/babel/babel/releases)
- [Changelog](https://github.com/babel/babel/blob/master/CHANGELOG.md)
- [Commits](https://github.com/babel/babel/compare/v7.1.0...v7.1.6)

Signed-off-by: dependabot[bot] <support@dependabot.com>

* Update lockfile
 2018-11-19 16:02:45 -05:00
dependabot[bot]andchris48s c9057266ea Bump concurrently from 4.0.1 to 4.1.0 (#2365) 
Bumps [concurrently](https://github.com/kimmobrunfeldt/concurrently) from 4.0.1 to 4.1.0.
- [Release notes](https://github.com/kimmobrunfeldt/concurrently/releases)
- [Commits](https://github.com/kimmobrunfeldt/concurrently/compare/v4.0.1...v4.1.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 19:35:23 +00:00
dependabot[bot]andchris48s 5bbac67869 Bump lint-staged from 7.3.0 to 8.0.5 (#2363) 
Bumps [lint-staged](https://github.com/okonet/lint-staged) from 7.3.0 to 8.0.5.
- [Release notes](https://github.com/okonet/lint-staged/releases)
- [Commits](https://github.com/okonet/lint-staged/compare/v7.3.0...v8.0.5)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 19:27:27 +00:00
dependabot[bot]andchris48s c4076063d3 Bump joi from 14.0.4 to 14.0.6 (#2361) 
Bumps [joi](https://github.com/hapijs/joi) from 14.0.4 to 14.0.6.
- [Release notes](https://github.com/hapijs/joi/releases)
- [Changelog](https://github.com/hapijs/joi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hapijs/joi/compare/v14.0.4...v14.0.6)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 19:22:16 +00:00
dependabot[bot]andPaul Melnikow 6305c59a25 Bump snap-shot-it from 6.2.3 to 6.2.5 (#2364) 
Bumps [snap-shot-it](https://github.com/bahmutov/snap-shot-it) from 6.2.3 to 6.2.5.
- [Release notes](https://github.com/bahmutov/snap-shot-it/releases)
- [Commits](https://github.com/bahmutov/snap-shot-it/compare/v6.2.3...v6.2.5)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 00:48:07 -05:00
dependabot[bot]andPaul Melnikow cd856ef1e2 Bump husky from 1.1.3 to 1.1.4 (#2362) 
Bumps [husky](https://github.com/typicode/husky) from 1.1.3 to 1.1.4.
- [Release notes](https://github.com/typicode/husky/releases)
- [Changelog](https://github.com/typicode/husky/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typicode/husky/compare/v1.1.3...v1.1.4)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-19 00:35:34 -05:00
chris48sandGitHub d3c454e0dd remove dependency on pdfkit (#2337) 2018-11-17 19:19:01 +00:00
dependabot[bot]andGitHub 765dfacf72 Bump prom-client from 11.1.2 to 11.2.0 (#2316) 2018-11-17 16:31:34 +00:00
dependabot[bot]andchris48s 921adc9939 Bump eslint from 5.7.0 to 5.9.0 (#2329) 
Bumps [eslint](https://github.com/eslint/eslint) from 5.7.0 to 5.9.0.
- [Release notes](https://github.com/eslint/eslint/releases)
- [Changelog](https://github.com/eslint/eslint/blob/master/CHANGELOG.md)
- [Commits](https://github.com/eslint/eslint/compare/v5.7.0...v5.9.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-16 22:00:50 +00:00
dependabot[bot]andchris48s 4c2494f20a Bump danger from 6.0.5 to 6.1.4 (#2324) 
Bumps [danger](https://github.com/danger/danger-js) from 6.0.5 to 6.1.4.
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/compare/6.0.5...6.1.4)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-16 21:52:49 +00:00
dependabot[bot]andchris48s 0bf8ebea3a Bump fast-xml-parser from 3.12.5 to 3.12.7 (#2322) 
Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 3.12.5 to 3.12.7.
- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)
- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)
- [Commits](https://github.com/NaturalIntelligence/fast-xml-parser/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-16 21:47:08 +00:00
dependabot[bot]andPaul Melnikow 3f0ac63ca7 Bump node-fetch from 2.2.1 to 2.3.0 (#2323) 
Bumps [node-fetch](https://github.com/bitinn/node-fetch) from 2.2.1 to 2.3.0.
- [Release notes](https://github.com/bitinn/node-fetch/releases)
- [Changelog](https://github.com/bitinn/node-fetch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.2.1...v2.3.0)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-15 18:06:57 -05:00
Paul MelnikowandGitHub 51897b3c7e Precompute text width using a lookup table (#2311) 
This simplifies and further optimizes text-width computation by computing the entire width table in advance, and serializing it in the style of QuickTextMeasurer (#1390). This entirely removes the need for PDFKit at runtime. This has the advantage of fixing #1305 – more generally: producing the same result everywhere – without having to deploy a copy of Verdana.

The lifting is delegated to these three libraries, which are housed in a monorepo: https://github.com/metabolize/anafanafo

I'd be happy to move it into the badges org if folks want to collaborate on maintaining them.

QuickTextMeasurer took kerning pairs into account, whereas this implementation does not. I was thinking kerning would be a necessary refinement, though this seems to work well enough.

I dropped in a binary-search package to traverse the data structure, in part to conserve space. This causes a moderate performance regression, though there is ample room for improving on that: https://github.com/badges/shields/pull/2311#issuecomment-439182704
 2018-11-15 17:27:21 -05:00
chris48sandGitHub b68ac16092 Move NPM package files out of /lib ; affects [resharper nuget myget dub chocolatey github] (#2300) 
* move gh-badges files out of /lib

As far as possible, this is just moving files
around and updating paths however there are 2
functional changes in this commit:
- remove use of lib/register-chai-plugins.spec
  in badge-cli.spec.js
- remove use of starRating()
  in text-measurer.spec.js

* update service tests that use colorscheme.json

* split package.json in two

* clean up import

* don't hard-code path

* start a changelog

* put a license file in the package dir

* re-organise documentation 📚

* don't pack test files

* remove favicon from Makefile

* give package its own test command

* link the docs better in README
 2018-11-15 18:48:01 +00:00
dependabot[bot]andPaul Melnikow 83e44b7e7d Bump prettier from 1.15.1 to 1.15.2 (#2321) 
* Bump prettier from 1.15.1 to 1.15.2

Bumps [prettier](https://github.com/prettier/prettier) from 1.15.1 to 1.15.2.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/1.15.1...1.15.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>

* Run prettier
 2018-11-15 09:50:48 -05:00
dependabot[bot]andGitHub 17716953f2 Bump eslint-config-prettier from 3.1.0 to 3.3.0 (#2304) 2018-11-15 00:44:59 +00:00
dependabot[bot]andGitHub 81691c5bb3 Bump opn-cli from 3.1.0 to 4.0.0 (#2303) 2018-11-15 00:30:53 +00:00
dependabot[bot]andPaul Melnikow e46a6fbde1 Bump snap-shot-it from 6.1.10 to 6.2.3 (#2301) 
Bumps [snap-shot-it](https://github.com/bahmutov/snap-shot-it) from 6.1.10 to 6.2.3.
- [Release notes](https://github.com/bahmutov/snap-shot-it/releases)
- [Commits](https://github.com/bahmutov/snap-shot-it/compare/v6.1.10...v6.2.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-14 19:19:36 -05:00
Marcin MielnickiandGitHub a039fffe79 Refactor [Jetbrains] service; affects [eclipse-marketplace] (#2232) 
* Refactor Jetbrains

* Test that custom parser options are provided

* Code refactoring

* Code refactoring

* url -> route

* package-lock.json updated
 2018-11-10 16:05:00 +01:00
Paul MelnikowandGitHub 3eac8ebbfb Rework GitHub acceptor and move to its own module (#2021) 
Continue to merge the work from #1205.
 2018-11-09 15:14:01 -05:00
dependabot[bot]andchris48s ec65291a11 Bump simple-icons from 1.9.12 to 1.9.13 (#2294) 
Bumps [simple-icons](https://github.com/simple-icons/simple-icons) from 1.9.12 to 1.9.13.
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](https://github.com/simple-icons/simple-icons/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-09 17:54:41 +00:00
dependabot[bot]andchris48s 804c4e4a6f Bump danger from 4.4.8 to 6.0.5 (#2291) 
Bumps [danger](https://github.com/danger/danger-js) from 4.4.8 to 6.0.5.
- [Release notes](https://github.com/danger/danger-js/releases)
- [Changelog](https://github.com/danger/danger-js/blob/master/CHANGELOG.md)
- [Commits](https://github.com/danger/danger-js/compare/4.4.8...6.0.5)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-09 16:35:26 +00:00
Paul MelnikowandGitHub 291f35d4ad Reduce duplication in badge regex/url patterns (#2279) 
This reduces duplication in badge regex/url patterns, and reduces the need to understand regexes in order to create badges.

Ref: #2050
 2018-11-08 15:05:44 -05:00
dependabot[bot]andPaul Melnikow e240409033 Bump prettier from 1.14.3 to 1.15.1 (#2289) 
* Bump prettier from 1.14.3 to 1.15.1

Bumps [prettier](https://github.com/prettier/prettier) from 1.14.3 to 1.15.1.
- [Release notes](https://github.com/prettier/prettier/releases)
- [Changelog](https://github.com/prettier/prettier/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prettier/prettier/compare/1.14.3...1.15.1)

Signed-off-by: dependabot[bot] <support@dependabot.com>

* Run prettier
 2018-11-08 14:39:00 -05:00
dependabot[bot]andPierre-Yves B 57e4d82a90 Bump joi from 14.0.3 to 14.0.4 (#2267) 
Bumps [joi](https://github.com/hapijs/joi) from 14.0.3 to 14.0.4.
- [Release notes](https://github.com/hapijs/joi/releases)
- [Changelog](https://github.com/hapijs/joi/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hapijs/joi/compare/v14.0.3...v14.0.4)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-08 19:31:25 +00:00
dependabot[bot]andPierre-Yves B c600bf4800 Bump node-fetch from 2.2.0 to 2.2.1 (#2276) 
Bumps [node-fetch](https://github.com/bitinn/node-fetch) from 2.2.0 to 2.2.1.
- [Release notes](https://github.com/bitinn/node-fetch/releases)
- [Changelog](https://github.com/bitinn/node-fetch/blob/master/CHANGELOG.md)
- [Commits](https://github.com/bitinn/node-fetch/compare/v2.2.0...v2.2.1)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-08 19:02:42 +00:00
dependabot[bot]andDanial 88402dd7a8 Bump simple-icons from 1.9.10 to 1.9.12 (#2273) 
Bumps [simple-icons](https://github.com/simple-icons/simple-icons) from 1.9.10 to 1.9.12.
- [Release notes](https://github.com/simple-icons/simple-icons/releases)
- [Commits](https://github.com/simple-icons/simple-icons/commits)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-06 12:00:09 +13:00
dependabot[bot]andPaul Melnikow c8ce4fabb4 Bump nock from 10.0.1 to 10.0.2 (#2266) 
Bumps [nock](https://github.com/nock/nock) from 10.0.1 to 10.0.2.
- [Release notes](https://github.com/nock/nock/releases)
- [Changelog](https://github.com/nock/nock/blob/master/CHANGELOG.md)
- [Commits](https://github.com/nock/nock/compare/v10.0.1...v10.0.2)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-05 16:58:19 -05:00
Marcin MielnickiandGitHub bc4bd79e90 Metrics with Prometheus (#2069) 
* Basic process metrics

* Enable Prometheus by an environment variable

* Code formatting

* Documentation for Prometheus metrics

* Link from README to documentation of Prometheus

* Link from README to documentation of Prometheus

* Link from README to documentation of Prometheus

* Separate module for metrics + tests

* Metrics limited by IP

* Metrics are forbidded for all requets by default

* Code refactoring

* allowedIps passed as a string to PrometheusMetrics

* Handle missing config

* METRICS_PROMETHEUS_ALLOWED_IPS added to documentation

* Log info about enabled metrics

* Unused code removed

* package-lock.json updated

* prom-client updated to 11.1.2

* Code refactoring

* Do not read IP address from X-Forwarder-For header
 2018-11-04 18:54:43 +01:00
Thaddée Tylandchris48s 1460855d6b Upgrade to camp 17.2.2 (#2260) 
This fixes remaining vulnerabilities raised by `npm audit`.

Follow-up to https://github.com/badges/shields/pull/2258.

Related issues from dependencies:

- camp upgrade: https://github.com/espadrine/sc/issues/64
- socket.io vulnerability: https://github.com/get/parsejson/issues/4
 2018-11-04 12:00:28 +00:00
Paul MelnikowandGitHub 72768d32d9 Fix some npm audit warnings (bump debug) (#2258) 
The only remaining vulnerabilites are in scoutcamp: espadrine/sc#64.
 2018-11-04 00:23:37 -04:00
dependabot[bot]andMarcin Mielnicki 4a298cbcb0 Bump husky from 1.1.2 to 1.1.3 (#2254) 
Bumps [husky](https://github.com/typicode/husky) from 1.1.2 to 1.1.3.
- [Release notes](https://github.com/typicode/husky/releases)
- [Changelog](https://github.com/typicode/husky/blob/master/CHANGELOG.md)
- [Commits](https://github.com/typicode/husky/compare/v1.1.2...v1.1.3)

Signed-off-by: dependabot[bot] <support@dependabot.com>
 2018-11-02 20:39:38 +01:00