security upgrade --deny-symlinks

This patch includes a requested security feature for denying symlinks. Enable, using --deny-symlinks flag and symlinks will receive a "Forbidden" response for all files that are symlinks.

Node Security Advisory
https://www.npmjs.com/advisories/816

HackerOne Reprot
https://hackerone.com/reports/530289

security patch [Unauthorized File Access]

Patch release that fixes unauthorized file access via encoded underscore.

Node Security Advisory
https://www.npmjs.com/advisories/807

HackerOne Reprot
https://hackerone.com/reports/453820

Detailed tests added in [email protected]
sintaxi/terraform@b193487

Basic harp test added...
6547336

node v8.x ready

• tested on node v8.x
• updates node-sass to latest
• updates jade
• updates coffeescript mime type

patch release (server & compile)

• fixes address error when starting server #549 (problem introduced in v0.20.2)
• fixes range error when compiling #538 (fixes https://github.com/angular/angular.io compile issue)

node v4.x compatability

v0.18.0

node v4.x compat

Implicit Autoprefixing

Harp v0.14.0 – Implicit Autoprefixing

A new release of Harp is available today. Harp now takes care of vendor prefixing for you, via the fantastic Autoprefixer.

Create any .sass, .scss, .less, or .styl file…

// main.scss
h1 {
  font-feature-settings: "liga";
  transition: color 0.25s;
}

…and it will be preprocessed and prefixed automatically.

/* main.css */
h1 {
  -webkit-font-feature-settings: "liga";
  -moz-font-feature-settings: "liga";
  font-feature-settings: "liga";
  -webkit-transition: color 0.25s;
  transition: color 0.25s
}

Get started

You shouldn’t have to think about vendor prefixing or configuring your preprossors while building static sites and apps. To get this taken care of for you, install the latest version of Harp:

npm install -g harp

Note you may need to preface this with sudo depending on your setup.

You can read the rest of the release notes on the Harp blog.

Sass Indented Syntax Support

A new release of Harp is available today. We’re happily adding one of Harp’s most-requested features: built-in preprocessing of Sass’ indented syntax.

Now, you can write .sass files and they will be implicitly preprocessed as .css files, without any configuration necessary. This works exactly the same as with .scss, .styl, and .less files.

Read the rest of the release notes on the Harp blog.

basic auth support

Additions

Basic Auth support (takes an array in _harp.jsonfile)

{
  "basicAuth": ["batman:darkknight", "superman:supersecret"]
}

OR just takes a single user cred as a string

{
  "basicAuth": "foo:bar"
}

Fixes

• changes !!! to doctype in init to prepare for jade v1
• CLI impovements

API Breakage

none

Sass support

• adds sass support
• cleanup CLI output
• minor bug fixes

v0.10.1

Patch release with just LESS updated. Nothing else changed.

Preprocessor updates

• LESS updated to v1.5.1