Ghost Release: 1.0.0-alpha.3

TL;DR

Ghost 1.0.0-alpha.3: OAuth Authentication, Improved Tooling, and Enhanced Editor

This third weekly alpha build introduces Ghost's centralized OAuth authentication system, significant improvements to the Gulp tooling with better task management, and enhancements to the Ghost Editor including responsive toolbars and an HTML card implementation. This release continues to build toward the Ghost 1.0.0 milestone with important infrastructure improvements and developer experience enhancements.

Remember: This alpha release is strictly for development and testing purposes only and should not be used in production environments.

Highlight of the Release

• Introduction of Ghost OAuth authentication system for centralized login
• Significant improvements to Gulp tooling with new commands and better documentation
• Enhanced Ghost Editor with responsive toolbars and HTML card implementation
• Fixed asset hash refresh on theme activation (3-year old bug)
• Added debug module integration for improved troubleshooting

Migration Guide

Migration Notes for 1.0.0-alpha.3

Database Changes

• The OAuth authentication system implementation requires a fresh database setup
• References to 'patronus' have been changed to 'GhostAuth', requiring database reset for testers

Development Environment

• New Gulp commands are available - run gulp help to see all options
• Default development command is now gulp dev
• For PR testing, add fetch = +refs/pull/*/head:refs/remotes/upstream/pr/* to your .git/config file for each repository

Theme Development

• Asset hash refresh has been fixed, which may affect theme behavior if you were working around this bug

Remember that this is an alpha release and should not be used in production environments. For testing purposes, it's recommended to start with a fresh installation rather than upgrading from previous versions.

Upgrade Recommendations

As this is an alpha release (1.0.0-alpha.3), it is strictly for development and testing purposes only. Do not use this version for production blogs.

For developers and testers:

• A clean installation is recommended rather than upgrading from previous alpha versions
• Database reset is required due to OAuth authentication system changes
• Use the new Gulp commands (gulp help for details) to improve your development workflow

If you're currently running a production Ghost blog, you should continue using the stable v0.11.x LTS release. More information about the LTS version and v1.0 plans can be found in the LTS blog post.

For those interested in testing this alpha, please refer to the alpha page for additional information and guidance.

Bug Fixes

• Fixed circular dependency in new bootUp script (closes #7440)
• Fixed asset hash refresh on theme activation (closes #7423)
  • Asset hashes were not being refreshed properly for 3 years
  • This bug was hidden by Ghost(Pro)'s one-theme limitation
• Improved database population with transaction support (refs #6574, #7432)
  • Creates transaction for table creation
  • Rolls back transaction if an error occurs or container is destroyed before completion
• Fixed issues with Gulp tasks when built/dist directories don't exist
• Improved error handling and exit process when Node crashes

New Features

Ghost OAuth Authentication

• Implemented centralized OAuth2 authentication with Ghost.org
• Support for both OAuth and local login methods
• Authentication flows for blog setup, user invites, and normal login
• Renamed from internal 'patronus' to 'GhostAuth' for consistency

Enhanced Ghost Editor

• Updated to Ghost Editor 0.0.8
• Added responsive toolbars for better mobile editing
• Implemented both Ember and plain JavaScript cards
• Added embedded HTML card for more flexible content creation
• Improved overall writing experience

Improved Gulp Tooling

• Added gulp help command with detailed task descriptions and available options
• Created gulp lint task with subtasks for jshint, jscs, and json validation
• Added default task as gulp dev for quicker startup
• Implemented abbreviations for repository flags (--ghost -> -g, etc.)
• Added dependency installation option with --deps or -d flag
• Better sequential task handling and improved logging messages

Debug Integration

• Added [email protected] module for improved troubleshooting
• Wired up debugging across key parts of the boot process
• Integrated debugging throughout middleware loading
• Added debug points for requests and key route rendering

Security Updates

No specific security fixes were included in this release.

Performance Improvements

• Database population now runs in transactions for better reliability and performance
• Improved Gulp task execution with better sequential handling
• Reduced unnecessary logging by setting verbose option in nodemon to false by default
• More efficient submodule handling with conditional updates

Impact Summary

This alpha release represents significant progress toward Ghost 1.0.0 with three major areas of improvement:

1. Authentication Infrastructure: The introduction of Ghost OAuth lays the foundation for centralized authentication with Ghost.org, improving the login experience and setting the stage for future integrations.

2. Developer Experience: The enhanced Gulp tooling with better documentation, task handling, and debugging capabilities significantly improves the development workflow, making it easier to contribute to and customize Ghost.

3. Content Creation: Updates to the Ghost Editor with responsive toolbars and the new HTML card implementation continue to evolve Ghost's writing experience, providing more flexibility for content creators.

The fix for the asset hash refresh bug, which had been present for three years, demonstrates the team's commitment to addressing long-standing issues as part of the 1.0.0 release cycle.

While this alpha release introduces important features and improvements, it remains a development version intended for testing purposes only. The weekly alpha release cadence shows steady progress toward the final 1.0.0 release, with each build adding critical functionality and refinements.

Full Release Notes