upgrade elasticsearch to 1.3.0, bump 1.1.2

Author: afc163

.gitignore

@@ -22,5 +22,5 @@ node_modules/
 data
 nohup.out
 .spmjspid
-elasticsearch-1.1.1
+elasticsearch-*
 config/base.yaml

History.md

@@ -1,3 +1,9 @@
+1.1.2 / 2014-07-17
+==================
+
+* elasticsearch 升级到 1.3.0，修复命令执行漏洞。http://news.mydrivers.com/1/306/306326.htm
+* github 账户权限修改为只读。#52
+
 1.1.1 / 2014-07-17
 ==================
 

README.md

@@ -47,6 +47,10 @@ Reindex the packages for elastic search.
 $ npm run reindex
 ```
 
+## elasticsearch
+
+Require Java 7 environment : https://github.com/Homebrew/homebrew/issues/29910
+
 ## TODO:
 
 - packages sync server

elastic/elasticsearch.tar.gz

@@ -2,7 +2,7 @@
   "name": "spmjs.io",
   "descrition": "The packaging server for spm@3.x",
   "private": true,
-  "version": "1.1.1",
+  "version": "1.1.2",
   "author": "afc163 <afc163@gmail.com>",
   "keywords": [
     "spm",
@@ -28,7 +28,7 @@
   },
   "scripts": {
     "postinstall": "tar -xzvf elastic/elasticsearch.tar.gz",
-    "start": "./node_modules/forever/bin/forever start app.js && nohup elasticsearch-1.1.1/bin/elasticsearch -p .spmjspid >/dev/null 2>&1 &",
+    "start": "./node_modules/forever/bin/forever start app.js && nohup elasticsearch-1.3.0/bin/elasticsearch -p .spmjspid >/dev/null 2>&1 &",
     "stop": "./node_modules/forever/bin/forever stop app.js && kill -9 `cat .spmjspid`",
     "reindex": "node elastic/reindexPackages.js"
   },
@@ -55,7 +55,7 @@
     "node-yaml-config": "~0.0.2",
     "raw-body": "^1.1.4",
     "request": "^2.36.0",
-    "semver": "^2.3.0",
+    "semver": "^3.0.0",
     "serve-spm": "^0.3.7",
     "serve-static": "^1.2.1",
     "static-favicon": "^1.0.2",