This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
|
[@types/node](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node)
([source](https://redirect.github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node))
| [`22.17.0` ->
`22.17.1`](https://renovatebot.com/diffs/npm/@types%2fnode/22.17.0/22.17.1)
|
[![age](https://developer.mend.io/api/mc/badges/age/npm/@types%2fnode/22.17.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/@types%2fnode/22.17.0/22.17.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Between 05:00 PM and 11:59 PM, only on Friday ( * 17-23 * *
5 ), Only on Sunday and Saturday ( * * * * 0,6, ), Between 12:00 AM and
12:59 PM, only on Monday ( * 0-12 * * 1 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
| [inquirer](https://redirect.github.com/SBoudrias/Inquirer.js) |
[`8.2.6` ->
`8.2.7`](https://renovatebot.com/diffs/npm/inquirer/8.2.6/8.2.7) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/inquirer/8.2.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/inquirer/8.2.6/8.2.7?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>SBoudrias/Inquirer.js (inquirer)</summary>

###
[`v8.2.7`](https://redirect.github.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.6...9c5259a889d37205829c2255171ef74c6336f7f3)

[Compare
Source](https://redirect.github.com/SBoudrias/Inquirer.js/compare/inquirer@8.2.6...9c5259a889d37205829c2255171ef74c6336f7f3)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Between 05:00 PM and 11:59 PM, only on Friday ( * 17-23 * *
5 ), Only on Sunday and Saturday ( * * * * 0,6, ), Between 12:00 AM and
12:59 PM, only on Monday ( * 0-12 * * 1 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

ref #23361

closes https://linear.app/ghost/issue/PROD-2391/

- the members list uses `<GhLoadingSpinner />` which creates an element that covers it's parent in order to position in the middle, however it also has a white background so will cover anything that isn't sitting above it in the stacking context, this was resulting in the search and filter disappearing each time you made a change whilst the list refreshes
- added `z-index` to the header content so it has it's own stacking context and sits above the loading spinner

This reverts commit 78c143c.

- broke members filter browser test that wasn't caught in PR

no issue

- added pre-condition checks to `createDropNullableMigration` and `createSetNullableMigration` migration utils that skips expensive `ALTER TABLE` queries when the database is already in the correct state

…d with underscore ("_") (#24541)

no issue

- updates the instagram validation to accept handles with underscores at the end

no issue

- the `urlUtils.restore()` test util calls `configUtils.restore()` which returns a promise but it was not awaiting or returning it meaning tests that stubbed `urlUtils` multiple times would have very confusing/incorrect test behaviour if the timing was just right
- changed `urlUtils.restore()` to be an async method that correctly awaits the config restore and updated all uses to match
- added missing `urlUtils.restore()` to the newsletters service unit test that was found after it was preventing a new unit test in a different PR from passing because it caused a double-wrapped stub

…4644)

ref PROD-2402

- Distinguished between different causes of 403 errors
- Removed misleading "account suspended" message for non-infrastructure
403s
- Added specific error messages for site configuration issues

…RL (#24653)

ref
https://linear.app/ghost/issue/ENG-2506/its-possible-to-bypass-paywall-on-a-post-by-constructing-a-preview

There was a bug in the post preview route that bypassed the normal
redirect to the published post. The preview route should only be
accessible for posts that are not published. This was caused by the
post's status being stripped in some cases, which bypassed the logic to
redirect to the published post's normal URL, and instead allowed the
preview content to render in its entirety.

… API issues early (#24647)

* added playwright request and response logging, so that we can debug
locally or remote issues through these logs
* logging will help us identify issues with resource loading faster
* it can be used with something like: `E2E_DEBUG_LOGS=1 yarn test`

This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
| [webpack](https://redirect.github.com/webpack/webpack) | [`5.101.0` ->
`5.101.1`](https://renovatebot.com/diffs/npm/webpack/5.101.0/5.101.1) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/webpack/5.101.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/webpack/5.101.0/5.101.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>webpack/webpack (webpack)</summary>

###
[`v5.101.1`](https://redirect.github.com/webpack/webpack/releases/tag/v5.101.1)

[Compare
Source](https://redirect.github.com/webpack/webpack/compare/v5.101.0...v5.101.1)

##### Fixes

- Filter deleted assets in `processAdditionalAssets` hook
- HMR failure in defer module
- Emit assets even if invalidation occurs again
- Export types for serialization and deserialization in plugins and
export the `ModuleFactory` class
- Fixed the failure export of internal function for ES module chunk
format
- Fixed `GetChunkFilename` failure caused by `dependOn` entry
- Fixed the import of missing dependency chunks
- Fixed when entry chunk depends on the runtime chunk hash
- Fixed `module.exports` bundle to ESM library
- Adjusted the time of adding a group depending on the fragment of
execution time
- Fixed circle dependencies when require `RawModule` and condition of
`isDeferred`
- Tree-shakable module library should align preconditions of
`allowInlineStartup`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Between 05:00 PM and 11:59 PM, only on Friday ( * 17-23 * *
5 ), Only on Sunday and Saturday ( * * * * 0,6, ), Between 12:00 AM and
12:59 PM, only on Monday ( * 0-12 * * 1 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS42MC40IiwidXBkYXRlZEluVmVyIjoiNDEuNjAuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

This PR contains the following updates:

| Package | Change | Age | Confidence |
|---|---|---|---|
| [tsx](https://tsx.is)
([source](https://redirect.github.com/privatenumber/tsx)) | [`4.20.3` ->
`4.20.4`](https://renovatebot.com/diffs/npm/tsx/4.20.3/4.20.4) |
[![age](https://developer.mend.io/api/mc/badges/age/npm/tsx/4.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/tsx/4.20.3/4.20.4?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>privatenumber/tsx (tsx)</summary>

###
[`v4.20.4`](https://redirect.github.com/privatenumber/tsx/compare/v4.20.3...a639836fad4e60dbda6498b7851b6890e0c60a08)

[Compare
Source](https://redirect.github.com/privatenumber/tsx/compare/v4.20.3...v4.20.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - Between 05:00 PM and 11:59 PM, only on Friday ( * 17-23 * *
5 ), Only on Sunday and Saturday ( * * * * 0,6, ), Between 12:00 AM and
12:59 PM, only on Monday ( * 0-12 * * 1 ) (UTC).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Never, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/TryGhost/Ghost).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS42MC40IiwidXBkYXRlZEluVmVyIjoiNDEuNjAuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

no issue

- codifying our patches purpose and how to update patches as needed

Co-authored-by: Ghost CI <41898282+github-actions[bot]@users.noreply.github.com>

…min setup (#24630)

ref https://linear.app/ghost/issue/PROD-2429/

- ActivityPub assumes it can fetch `{site url}/ghost/api/admin/site/` but for self-hosters with separated front-end/admin domain setups that endpoint would 404 because `/ghost/*` routes are only served by the admin app which lives at `{admin url}/ghost/`
- updated the `redirectGhostToAdmin` middleware used by the frontend app so it now redirects `{site}/ghost/*` instead of just `{site}/ghost/`, fixing the 404 that ActivityPub was receiving when hitting the front-end

---------

Co-authored-by: Steve Larson <9larsons@gmail.com>