a blogging platform built on [matrix]
Remove yarn.lock to avoid referring to a version of set-value (2.0.0) that had a vulnerability. This was a dependency used in development - not shipped with the journal deployment.
This updates a few dependencies that needed updating but doesn't update a couple because they included breaking changes.
Following my decision to stop maintaining journal, I'm not going to keep updating dependencies.
See https://github.com/lukebarnard1/journal/issues/118 for details.
Updates js-yaml to prevent running of code injected via yaml.
For more details see https://github.com/lukebarnard1/journal/pull/81
This only affects anyone giving third-party control of yaml blog content. journal does not do this itself.
This release contains the blog-hosting component. Integration with Matrix is an outstanding task.
See https://github.com/lukebarnard1/journal/issues/70 for up-to-date details.