2020-08-19 13:27:35 -05:00
# Change Log
2021-10-15 16:13:06 -05:00
## 11.0.0-6-next.4
### Major Changes
- 794af76c: Remove Node 12 support
- We need move to the new `undici` and does not support Node.js 12
2021-01-10 13:32:01 -05:00
## 10.0.0-alpha.3
### Patch Changes
- fecbb9be: chore: add release step to private regisry on merge changeset pr
2021-01-09 01:43:17 -05:00
## 10.0.0-alpha.2
### Minor Changes
- 54c58d1e: feat: add server rate limit protection to all request
To modify custom values, use the server settings property.
```markdown
server:
## https://www.npmjs.com/package/express-rate-limit#configuration-options
rateLimit:
windowMs: 1000
max: 10000
```
The values are intended to be high, if you want to improve security of your server consider
using different values.
2020-11-15 09:04:55 -05:00
## 10.0.0-alpha.1
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Major Changes
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- d87fa026: feat!: experiments config renamed to flags
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- The `experiments` configuration is renamed to `flags` . The functionality is exactly the same.
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
```js
flags: token: false;
search: false;
```
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- The `self_path` property from the config file is being removed in favor of `config_file` full path.
- Refactor `config` module, better types and utilities
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- Introduce environment variables for legacy tokens
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Code Improvements
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- Add debug library for improve developer experience
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Breaking change
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
- The secret key must have 32 characters long.
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### New environment variables
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- `VERDACCIO_LEGACY_ALGORITHM` : Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
- `VERDACCIO_LEGACY_ENCRYPTION_KEY` : By default, the token stores in the database, but using this variable allows to get it from memory
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Minor Changes
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- 26b494cb: feat: add typescript project references settings
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
It allows to navigate (IDE) trough the packages without need compile the packages.
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
Add two `tsconfig` , one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_ ](https://www.typescriptlang.org/docs/handbook/project-references.html ).
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Patch Changes
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- b57b4338: Enable prerelease mode with **changesets**
- 31af0164: ESLint Warnings Fixed
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
Related to issue #1461
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- max-len: most of the sensible max-len errors are fixed
- no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
- @typescript -eslint/no-unused-vars: same as above
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
All notable changes to this project will be documented in this file.
See [Conventional Commits ](https://conventionalcommits.org ) for commit guidelines.
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
## [9.7.3](https://github.com/verdaccio/monorepo/compare/v9.7.2...v9.7.3) (2020-07-30)
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Bug Fixes
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- update marked / request security vulnerability ([#378](https://github.com/verdaccio/monorepo/issues/378)) ([4188e08](https://github.com/verdaccio/monorepo/commit/4188e088f42d0f6e090c948b869312ba1f30cd79))
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
## [9.7.2](https://github.com/verdaccio/monorepo/compare/v9.7.1...v9.7.2) (2020-07-20)
2020-08-19 13:27:35 -05:00
**Note:** Version bump only for package @verdaccio/readme
2020-11-15 09:04:55 -05:00
## [9.7.1](https://github.com/verdaccio/monorepo/compare/v9.7.0...v9.7.1) (2020-07-10)
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
**Note:** Version bump only for package @verdaccio/readme
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
# [9.7.0](https://github.com/verdaccio/monorepo/compare/v9.6.1...v9.7.0) (2020-06-24)
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
**Note:** Version bump only for package @verdaccio/readme
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
## [9.6.1](https://github.com/verdaccio/monorepo/compare/v9.6.0...v9.6.1) (2020-06-07)
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
**Note:** Version bump only for package @verdaccio/readme
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
## [9.5.1](https://github.com/verdaccio/monorepo/compare/v9.5.0...v9.5.1) (2020-06-03)
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
### Bug Fixes
2020-08-19 13:27:35 -05:00
2020-11-15 09:04:55 -05:00
- restore Node v8 support ([#361](https://github.com/verdaccio/monorepo/issues/361)) ([9be55a1](https://github.com/verdaccio/monorepo/commit/9be55a1deebe954e8eef9edc59af9fd16e29daed))
2020-08-19 13:27:35 -05:00
# [9.5.0](https://github.com/verdaccio/monorepo/compare/v9.4.1...v9.5.0) (2020-05-02)
**Note:** Version bump only for package @verdaccio/readme
# [9.4.0](https://github.com/verdaccio/monorepo/compare/v9.3.4...v9.4.0) (2020-03-21)
**Note:** Version bump only for package @verdaccio/readme
## [9.3.3](https://github.com/verdaccio/monorepo/compare/v9.3.2...v9.3.3) (2020-03-11)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- update jsdom@16.2.1 ([#340](https://github.com/verdaccio/monorepo/issues/340)) ([6060769](https://github.com/verdaccio/monorepo/commit/6060769d52f796337dda9f1a54f149c5fb22ca17))
2020-08-19 13:27:35 -05:00
## [9.3.2](https://github.com/verdaccio/monorepo/compare/v9.3.1...v9.3.2) (2020-03-08)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- security dependency jsdom@16.2.0 update ([#338](https://github.com/verdaccio/monorepo/issues/338)) ([0599f3e](https://github.com/verdaccio/monorepo/commit/0599f3e16fd1de993494943e2e7464d10b62d6be))
- update dependencies ([#332](https://github.com/verdaccio/monorepo/issues/332)) ([b6165ae](https://github.com/verdaccio/monorepo/commit/b6165aea9b7e4012477081eae68bfa7159c58f56))
2020-08-19 13:27:35 -05:00
## [9.3.1](https://github.com/verdaccio/monorepo/compare/v9.3.0...v9.3.1) (2020-02-23)
**Note:** Version bump only for package @verdaccio/readme
# [9.3.0](https://github.com/verdaccio/monorepo/compare/v9.2.0...v9.3.0) (2020-01-29)
**Note:** Version bump only for package @verdaccio/readme
# [9.0.0](https://github.com/verdaccio/monorepo/compare/v8.5.3...v9.0.0) (2020-01-07)
**Note:** Version bump only for package @verdaccio/readme
## [8.5.2](https://github.com/verdaccio/monorepo/compare/v8.5.1...v8.5.2) (2019-12-25)
**Note:** Version bump only for package @verdaccio/readme
## [8.5.1](https://github.com/verdaccio/monorepo/compare/v8.5.0...v8.5.1) (2019-12-24)
**Note:** Version bump only for package @verdaccio/readme
# [8.5.0](https://github.com/verdaccio/monorepo/compare/v8.4.2...v8.5.0) (2019-12-22)
**Note:** Version bump only for package @verdaccio/readme
## [8.4.2](https://github.com/verdaccio/monorepo/compare/v8.4.1...v8.4.2) (2019-11-23)
**Note:** Version bump only for package @verdaccio/readme
## [8.4.1](https://github.com/verdaccio/monorepo/compare/v8.4.0...v8.4.1) (2019-11-22)
**Note:** Version bump only for package @verdaccio/readme
# [8.4.0](https://github.com/verdaccio/monorepo/compare/v8.3.0...v8.4.0) (2019-11-22)
**Note:** Version bump only for package @verdaccio/readme
# [8.3.0](https://github.com/verdaccio/monorepo/compare/v8.2.0...v8.3.0) (2019-10-27)
**Note:** Version bump only for package @verdaccio/readme
# [8.2.0](https://github.com/verdaccio/monorepo/compare/v8.2.0-next.0...v8.2.0) (2019-10-23)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- core/readme/package.json to reduce vulnerabilities ([#216](https://github.com/verdaccio/monorepo/issues/216)) ([40299ab](https://github.com/verdaccio/monorepo/commit/40299ab))
2020-08-19 13:27:35 -05:00
# [8.2.0-next.0](https://github.com/verdaccio/monorepo/compare/v8.1.4...v8.2.0-next.0) (2019-10-08)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- fixed lint errors ([5e677f7](https://github.com/verdaccio/monorepo/commit/5e677f7))
- fixed lint errors ([c80e915](https://github.com/verdaccio/monorepo/commit/c80e915))
- quotes should be single ([ae9aa44](https://github.com/verdaccio/monorepo/commit/ae9aa44))
2020-08-19 13:27:35 -05:00
## [8.1.2](https://github.com/verdaccio/monorepo/compare/v8.1.1...v8.1.2) (2019-09-29)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- **readme:** security vulnerabilities in marked dep ([ee604b1](https://github.com/verdaccio/monorepo/commit/ee604b1))
2020-08-19 13:27:35 -05:00
## [8.1.1](https://github.com/verdaccio/monorepo/compare/v8.1.0...v8.1.1) (2019-09-26)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- **security:** Cross-site Scripting (XSS) for readme ([7b53e1b](https://github.com/verdaccio/monorepo/commit/7b53e1b))
2020-08-19 13:27:35 -05:00
# [8.1.0](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.1...v8.1.0) (2019-09-07)
**Note:** Version bump only for package @verdaccio/readme
## [8.0.1-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.1-next.0...v8.0.1-next.1) (2019-08-29)
**Note:** Version bump only for package @verdaccio/readme
## [8.0.1-next.0](https://github.com/verdaccio/monorepo/compare/v8.0.0...v8.0.1-next.0) (2019-08-29)
**Note:** Version bump only for package @verdaccio/readme
# [8.0.0](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.4...v8.0.0) (2019-08-22)
**Note:** Version bump only for package @verdaccio/readme
# [8.0.0-next.4](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.3...v8.0.0-next.4) (2019-08-18)
**Note:** Version bump only for package @verdaccio/readme
# [8.0.0-next.2](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.1...v8.0.0-next.2) (2019-08-03)
**Note:** Version bump only for package @verdaccio/readme
# [8.0.0-next.1](https://github.com/verdaccio/monorepo/compare/v8.0.0-next.0...v8.0.0-next.1) (2019-08-01)
**Note:** Version bump only for package @verdaccio/readme
# [8.0.0-next.0](https://github.com/verdaccio/monorepo/compare/v2.0.0...v8.0.0-next.0) (2019-08-01)
### Features
2020-11-15 09:04:55 -05:00
- **readme:** import readme package ([f4bbf3a](https://github.com/verdaccio/monorepo/commit/f4bbf3a))
- **readme:** modernize project ([0d8f963](https://github.com/verdaccio/monorepo/commit/0d8f963))
2020-08-19 13:27:35 -05:00
# Changelog
All notable changes to this project will be documented in this file. See [standard-version ](https://github.com/conventional-changelog/standard-version ) for commit guidelines.
### [1.0.4](https://github.com/verdaccio/readme/compare/v1.0.3...v1.0.4) (2019-06-22)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- update dependencies ([3316ccf](https://github.com/verdaccio/readme/commit/3316ccf))
2020-08-19 13:27:35 -05:00
### [1.0.3](https://github.com/verdaccio/readme/compare/v1.0.2...v1.0.3) (2019-05-15)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- **build:** lib folder as main ([e1ac882](https://github.com/verdaccio/readme/commit/e1ac882))
2020-08-19 13:27:35 -05:00
### [1.0.2](https://github.com/verdaccio/readme/compare/v1.0.1...v1.0.2) (2019-05-15)
### Bug Fixes
2020-11-15 09:04:55 -05:00
- **build:** remove publish script ([9b36d5f](https://github.com/verdaccio/readme/commit/9b36d5f))
2020-08-19 13:27:35 -05:00
### 1.0.1 (2019-05-15)
### Tests
2020-11-15 09:04:55 -05:00
- add basic test ([774a54d](https://github.com/verdaccio/readme/commit/774a54d))
- add image test ([8c4639e](https://github.com/verdaccio/readme/commit/8c4639e))
- add xss scenarios ([81e43e8](https://github.com/verdaccio/readme/commit/81e43e8))
- add xss scenarios ([b211b97](https://github.com/verdaccio/readme/commit/b211b97))