Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
30 KiB
Change Log
11.0.0-6-next.38
Patch Changes
- @verdaccio/core@6.0.0-6-next.68
- @verdaccio/utils@6.0.0-6-next.36
11.0.0-6-next.37
Patch Changes
- Updated dependencies [
16e38df8
]- @verdaccio/core@6.0.0-6-next.67
- @verdaccio/utils@6.0.0-6-next.35
- @verdaccio/file-locking@11.0.0-6-next.7
11.0.0-6-next.36
Patch Changes
- @verdaccio/core@6.0.0-6-next.66
- @verdaccio/file-locking@11.0.0-6-next.7
- @verdaccio/utils@6.0.0-6-next.34
11.0.0-6-next.35
Patch Changes
- Updated dependencies [
a1da1130
]- @verdaccio/core@6.0.0-6-next.65
- @verdaccio/utils@6.0.0-6-next.33
11.0.0-6-next.34
Patch Changes
- Updated dependencies [
974cd8c1
]- @verdaccio/core@6.0.0-6-next.64
- @verdaccio/utils@6.0.0-6-next.32
- @verdaccio/file-locking@11.0.0-6-next.7
11.0.0-6-next.33
Patch Changes
- Updated dependencies [
dc571aab
]- @verdaccio/core@6.0.0-6-next.63
- @verdaccio/utils@6.0.0-6-next.31
- @verdaccio/file-locking@11.0.0-6-next.7
11.0.0-6-next.32
Patch Changes
- Updated dependencies [
378e907d
]- @verdaccio/core@6.0.0-6-next.62
- @verdaccio/file-locking@11.0.0-6-next.7
- @verdaccio/utils@6.0.0-6-next.30
11.0.0-6-next.31
Patch Changes
- @verdaccio/core@6.0.0-6-next.61
- @verdaccio/utils@6.0.0-6-next.29
11.0.0-6-next.30
Patch Changes
- @verdaccio/core@6.0.0-6-next.60
- @verdaccio/file-locking@11.0.0-6-next.7
- @verdaccio/utils@6.0.0-6-next.28
11.0.0-6-next.29
Patch Changes
- @verdaccio/core@6.0.0-6-next.59
- @verdaccio/utils@6.0.0-6-next.27
11.0.0-6-next.28
Patch Changes
- @verdaccio/core@6.0.0-6-next.58
- @verdaccio/utils@6.0.0-6-next.26
11.0.0-6-next.27
Patch Changes
- @verdaccio/core@6.0.0-6-next.57
- @verdaccio/utils@6.0.0-6-next.25
11.0.0-6-next.26
Patch Changes
- Updated dependencies [
a1986e09
]- @verdaccio/utils@6.0.0-6-next.24
- @verdaccio/core@6.0.0-6-next.56
11.0.0-6-next.25
Patch Changes
- Updated dependencies [
9718e033
]- @verdaccio/core@6.0.0-6-next.55
- @verdaccio/utils@6.0.0-6-next.23
11.0.0-6-next.24
Minor Changes
ef88da3b
: feat: improve support for fs promises older nodejs
Patch Changes
- Updated dependencies [
ef88da3b
]- @verdaccio/core@6.0.0-6-next.54
- @verdaccio/file-locking@11.0.0-6-next.7
- @verdaccio/utils@6.0.0-6-next.22
11.0.0-6-next.23
Patch Changes
- @verdaccio/core@6.0.0-6-next.53
- @verdaccio/file-locking@11.0.0-6-next.6
- @verdaccio/utils@6.0.0-6-next.21
11.0.0-6-next.22
Patch Changes
- @verdaccio/core@6.0.0-6-next.52
- @verdaccio/utils@6.0.0-6-next.20
11.0.0-6-next.21
Minor Changes
-
4b29d715
: chore: move improvements from v5 to v6Migrate improvements form v5 to v6:
Patch Changes
- Updated dependencies [
4b29d715
]- @verdaccio/core@6.0.0-6-next.51
- @verdaccio/utils@6.0.0-6-next.19
11.0.0-6-next.20
Patch Changes
- @verdaccio/core@6.0.0-6-next.50
- @verdaccio/utils@6.0.0-6-next.18
11.0.0-6-next.19
Patch Changes
- @verdaccio/core@6.0.0-6-next.49
- @verdaccio/utils@6.0.0-6-next.17
11.0.0-6-next.18
Major Changes
-
9fc2e796
: feat(plugins): improve plugin loaderChanges
- Add scope plugin support to 6.x https://github.com/verdaccio/verdaccio/pull/3227
- Avoid config collisions https://github.com/verdaccio/verdaccio/issues/928
- https://github.com/verdaccio/verdaccio/issues/1394
config.plugins
plugin path validations- Updated algorithm for plugin loader.
- improved documentation (included dev)
Features
- Add scope plugin support to 6.x https://github.com/verdaccio/verdaccio/pull/3227
- Custom prefix:
// config.yaml server: pluginPrefix: mycompany middleware: audit: foo: 1
This configuration will look up for
mycompany-audit
insteadVerdaccio-audit
.Breaking Changes
sinopia plugins
sinopia
fallback support is removed, but can be restored usingpluginPrefix
plugin filter
- method rename
filter_metadata
->filterMetadata
Plugin constructor does not merge configs anymore https://github.com/verdaccio/verdaccio/issues/928
The plugin receives as first argument
config
, which represents the config of the plugin. Example:// config.yaml auth: plugin: foo: 1 bar: 2 export class Plugin<T> { public constructor(config: T, options: PluginOptions) { console.log(config); // {foo:1, bar: 2} } }
Patch Changes
- Updated dependencies [
43f32687
] - Updated dependencies [
62c24b63
]- @verdaccio/core@6.0.0-6-next.48
- @verdaccio/utils@6.0.0-6-next.16
- @verdaccio/file-locking@11.0.0-6-next.6
11.0.0-6-next.17
Patch Changes
- @verdaccio/core@6.0.0-6-next.47
- @verdaccio/utils@6.0.0-6-next.15
11.0.0-6-next.16
Patch Changes
- Updated dependencies [
b849128d
]- @verdaccio/core@6.0.0-6-next.8
- @verdaccio/utils@6.0.0-6-next.14
- @verdaccio/file-locking@11.0.0-6-next.6
11.0.0-6-next.15
Patch Changes
351aeeaa
: fix(deps): @verdaccio/utils should be a prod dep of local-storage- Updated dependencies [
351aeeaa
]- @verdaccio/core@6.0.0-6-next.7
- @verdaccio/file-locking@11.0.0-6-next.6
- @verdaccio/utils@6.0.0-6-next.13
11.0.0-6-next.14
Minor Changes
-
37274e4c
: feat: implement abbreviated manifestEnable abbreviated manifest data by adding the header:
curl -H "Accept: application/vnd.npm.install-v1+json" https://registry.npmjs.org/verdaccio
It returns a filtered manifest, additionally includes the time field by request.
Current support for packages managers:
- npm: yes
- pnpm: yes
- yarn classic: yes
- yarn modern (+2.x): no
Patch Changes
- @verdaccio/core@6.0.0-6-next.6
- @verdaccio/file-locking@11.0.0-6-next.5
11.0.0-6-next.13
Major Changes
-
292c0a37
: feat!: replace deprecated request dependency by gotThis is a big refactoring of the core, fetching dependencies, improve code, more tests and better stability. This is essential for the next release, will take some time but would allow modularize more the core.
Notes
- Remove deprecated
request
by othergot
, retry improved, custom Agent ( got does not include it built-in) - Remove
async
dependency from storage (used by core) it was linked with proxy somehow safe to remove now - Refactor with promises instead callback wherever is possible
Document the API- Improve testing, integration tests
- Bugfix
- Clean up old validations
- Improve performance
💥 Breaking changes
- Plugin API methods were callbacks based are returning promises, this will break current storage plugins, check documentation for upgrade.
- Write Tarball, Read Tarball methods parameters change, a new set of options like
AbortController
signals are being provided to theaddAbortSignal
can be internally used with Streams when a request is aborted. eg:addAbortSignal(signal, fs.createReadStream(pathName));
@verdaccio/streams
stream abort support is legacy is being deprecated removed- Remove AWS and Google Cloud packages for future refactoring #2574.
- Remove deprecated
Patch Changes
- Updated dependencies [
292c0a37
] - Updated dependencies [
a3a209b5
] - Updated dependencies [
00d1d2a1
]- @verdaccio/core@6.0.0-6-next.6
- @verdaccio/file-locking@11.0.0-6-next.5
11.0.0-6-next.12
Major Changes
-
82cb0f2b
: feat!: config.logs throw an error, logging config not longer accept array or logs property💥 Breaking change
This is valid
log: { type: stdout, format: pretty, level: http }
This is invalid
logs: { type: stdout, format: pretty, level: http }
or
logs: - [{ type: stdout, format: pretty, level: http }]
Minor Changes
-
5167bb52
: feat: ui search support for remote, local and private packagesThe command
npm search
search globally and return all matches, with this improvement the user interface is powered with the same capabilities.The UI also tag where is the origin the package with a tag, also provide the latest version and description of the package.
Patch Changes
- Updated dependencies [
82cb0f2b
] - Updated dependencies [
5167bb52
]- @verdaccio/core@6.0.0-6-next.5
- @verdaccio/file-locking@11.0.0-6-next.4
- @verdaccio/streams@11.0.0-6-next.5
11.0.0-6-next.11
Major Changes
-
a828271d
: refactor: download manifest endpoint and integrate fastifyMuch simpler API for fetching a package
const manifest = await storage.getPackageNext({ name, uplinksLook: true, req, version: queryVersion, requestOptions, });
not perfect, the
req
still is being passed to the proxy (this has to be refactored at proxy package) and then removed from here, in proxy we pass the request instance to therequest
library.Details
async/await
sugar for getPackage()- Improve and reuse code between current implementation and new fastify endpoint (add scaffolding for request manifest)
- Improve performance
- Add new tests
Breaking changes
All storage plugins will stop to work since the storage uses
getPackageNext
method which is Promise based, I won't replace this now because will force me to update all plugins, I'll follow up in another PR. Currently will throw http 500
Patch Changes
- Updated dependencies [
24b9be02
]- @verdaccio/core@6.0.0-6-next.4
- @verdaccio/file-locking@11.0.0-6-next.4
- @verdaccio/streams@11.0.0-6-next.5
11.0.0-6-next.10
Patch Changes
- Updated dependencies [
6c1eb021
]- @verdaccio/core@6.0.0-6-next.3
11.0.0-6-next.9
Minor Changes
154b2ecd
: refactor: remove @verdaccio/commons-api in favor @verdaccio/core and remove duplications
Patch Changes
- Updated dependencies [
794af76c
] - Updated dependencies [
154b2ecd
]- @verdaccio/core@6.0.0-6-next.2
- @verdaccio/file-locking@11.0.0-6-next.4
- @verdaccio/streams@11.0.0-6-next.5
11.0.0-6-next.8
Major Changes
-
459b6fa7
: refactor: search v1 endpoint and local-database- refactor search
api v1
endpoint, improve performance - remove usage of
async
dependency https://github.com/verdaccio/verdaccio/issues/1225 - refactor method storage class
- create new module
core
to reduce the ammount of modules with utilities - use
undici
insteadnode-fetch
- use
fastify
insteadexpress
for functional test
Breaking changes
- plugin storage API changes
- remove old search endpoint (return 404)
- filter local private packages at plugin level
The storage api changes for methods
get
,add
,remove
as promise base. Thesearch
methods also changes and recieves aquery
object that contains all query params from the client.export interface IPluginStorage<T> extends IPlugin { add(name: string): Promise<void>; remove(name: string): Promise<void>; get(): Promise<any>; init(): Promise<void>; getSecret(): Promise<string>; setSecret(secret: string): Promise<any>; getPackageStorage(packageInfo: string): IPackageStorage; search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>; saveToken(token: Token): Promise<any>; deleteToken(user: string, tokenKey: string): Promise<any>; readTokens(filter: TokenFilter): Promise<Token[]>; }
- refactor search
Patch Changes
- Updated dependencies [
459b6fa7
]- @verdaccio/commons-api@11.0.0-6-next.4
- @verdaccio/core@6.0.0-6-next.1
- @verdaccio/streams@11.0.0-6-next.4
- @verdaccio/file-locking@11.0.0-alpha.3
11.0.0-6-next.7
Patch Changes
df0da3d6
: Added core-js missing from dependencies though referenced in .js sources
11.0.0-6-next.6
Minor Changes
-
1b217fd3
: Some verdaccio modules depend on 'mkdirp' library which provides recursive directory creation functionality. NodeJS can do this out of the box since v.10.12. The last commit in 'mkdirp' was made in early 2016, and it's mid 2021 now. Time to stick with a built-in library solution!- All 'mkdirp' calls are replaced with appropriate 'fs' calls.
11.0.0-6-next.5
Major Changes
-
cb2281a5
: # async storage plugin bootstrapGives a storage plugin the ability to perform asynchronous tasks on initialization
Breaking change
Plugin must have an init method in which asynchronous tasks can be executed
public async init(): Promise<void> { this.data = await this._fetchLocalPackages(); this._sync(); }
10.0.0-alpha.4
Patch Changes
fecbb9be
: chore: add release step to private regisry on merge changeset pr- Updated dependencies [
fecbb9be
]- @verdaccio/commons-api@10.0.0-alpha.3
- @verdaccio/file-locking@10.0.0-alpha.3
- @verdaccio/streams@10.0.0-alpha.3
10.0.0-alpha.3
Minor Changes
-
54c58d1e
: feat: add server rate limit protection to all requestTo modify custom values, use the server settings property.
server: ## https://www.npmjs.com/package/express-rate-limit#configuration-options rateLimit: windowMs: 1000 max: 10000
The values are intended to be high, if you want to improve security of your server consider using different values.
Patch Changes
- Updated dependencies [
54c58d1e
]- @verdaccio/commons-api@10.0.0-alpha.2
- @verdaccio/file-locking@10.0.0-alpha.2
- @verdaccio/streams@10.0.0-alpha.2
10.0.0-alpha.2
Minor Changes
-
2a327c4b
: feat: remove level dependency by lowdb for npm token cli as storagenew npm token database
There will be a new database located in your storage named
.token-db.json
which will store all references to created tokens, it does not store tokens, just mask of them and related metadata required to reference them.Breaking change
If you were relying on
npm token
experiment. This PR will replace the used database (level) by a json plain based one (lowbd) which does not require Node.js C++ compilation step and has less dependencies. Since was a experiment there is no migration step.
10.0.0-alpha.1
Major Changes
-
d87fa026
: feat!: experiments config renamed to flags- The
experiments
configuration is renamed toflags
. The functionality is exactly the same.
flags: token: false; search: false;
- The
self_path
property from the config file is being removed in favor ofconfig_file
full path. - Refactor
config
module, better types and utilities
- The
-
da1ee9c8
: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv- Introduce environment variables for legacy tokens
Code Improvements
- Add debug library for improve developer experience
Breaking change
- The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
- The secret key must have 32 characters long.
New environment variables
VERDACCIO_LEGACY_ALGORITHM
: Allows to define the specific algorithm for the token signature which by default isaes-256-ctr
VERDACCIO_LEGACY_ENCRYPTION_KEY
: By default, the token stores in the database, but using this variable allows to get it from memory
Minor Changes
-
26b494cb
: feat: add typescript project references settingsReading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
It allows to navigate (IDE) trough the packages without need compile the packages.
Add two
tsconfig
, one using the previous existing configuration that is able to produce declaration files (tsconfig.build
) and a new onetsconfig
which is enables projects references.
Patch Changes
-
b57b4338
: Enable prerelease mode with changesets -
31af0164
: ESLint Warnings FixedRelated to issue #1461
- max-len: most of the sensible max-len errors are fixed
- no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
- @typescript-eslint/no-unused-vars: same as above
-
Updated dependencies [
d87fa026
] -
Updated dependencies [
da1ee9c8
] -
Updated dependencies [
26b494cb
] -
Updated dependencies [
b57b4338
] -
Updated dependencies [
31af0164
]- @verdaccio/commons-api@10.0.0-alpha.1
- @verdaccio/file-locking@10.0.0-alpha.1
- @verdaccio/streams@10.0.0-alpha.1
All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.
9.7.2 (2020-07-20)
Note: Version bump only for package @verdaccio/local-storage
9.7.1 (2020-07-10)
Bug Fixes
9.7.0 (2020-06-24)
Note: Version bump only for package @verdaccio/local-storage
9.6.1 (2020-06-07)
Note: Version bump only for package @verdaccio/local-storage
9.5.1 (2020-06-03)
Bug Fixes
9.5.0 (2020-05-02)
Note: Version bump only for package @verdaccio/local-storage
9.4.0 (2020-03-21)
Note: Version bump only for package @verdaccio/local-storage
9.3.4 (2020-03-11)
Bug Fixes
9.3.2 (2020-03-08)
Bug Fixes
9.3.1 (2020-02-23)
Note: Version bump only for package @verdaccio/local-storage
9.3.0 (2020-01-29)
Note: Version bump only for package @verdaccio/local-storage
9.0.0 (2020-01-07)
Bug Fixes
8.5.2 (2019-12-25)
Note: Version bump only for package @verdaccio/local-storage
8.5.1 (2019-12-24)
Note: Version bump only for package @verdaccio/local-storage
8.5.0 (2019-12-22)
Note: Version bump only for package @verdaccio/local-storage
8.4.2 (2019-11-23)
Note: Version bump only for package @verdaccio/local-storage
8.4.1 (2019-11-22)
Note: Version bump only for package @verdaccio/local-storage
8.4.0 (2019-11-22)
Note: Version bump only for package @verdaccio/local-storage
8.3.0 (2019-10-27)
Note: Version bump only for package @verdaccio/local-storage
8.2.0 (2019-10-23)
Note: Version bump only for package @verdaccio/local-storage
8.2.0-next.0 (2019-10-08)
Bug Fixes
- fixed lint errors (5e677f7)
8.1.2 (2019-09-29)
Note: Version bump only for package @verdaccio/local-storage
8.1.1 (2019-09-26)
Note: Version bump only for package @verdaccio/local-storage
8.1.0 (2019-09-07)
Note: Version bump only for package @verdaccio/local-storage
8.0.1-next.1 (2019-08-29)
Note: Version bump only for package @verdaccio/local-storage
8.0.1-next.0 (2019-08-29)
Note: Version bump only for package @verdaccio/local-storage
8.0.0 (2019-08-22)
Note: Version bump only for package @verdaccio/local-storage
8.0.0-next.4 (2019-08-18)
Note: Version bump only for package @verdaccio/local-storage
8.0.0-next.3 (2019-08-16)
Bug Fixes
- restore closure (32b9d7e)
- build: error on types for fs callback (cc35acb)
- Add DATE and VERSION in search result (e352b75)
- avoid open write stream if resource exist #1191 (f041d3f)
- bug fixing integration (6c75ac8)
- build before publish (cd6c7ff)
- check whether path exist before return result (a4d2af1)
- flow issues (f42a284)
- ignore flow on this one, we need it (c8e0b2b)
- local storage requires package.json file for read, save and create all the time (33c847b)
- migration from main repository merge #306 (8fbe86e)
- missing callback (abfc422)
- missing error code (7121939)
- move to local storage the fs location handler (3b12083)
- mtimeMs is not backward compatible (c6f74eb)
- remove temp file whether is emtpy and fails (655102f)
- remove uncessary async (3e3e3a6)
- remove unused parameters (554e301)
- restore build path (4902042)
- return time as milliseconds (15467ba)
- sync after set secret (2abae4f)
- temp files are written into the storage (89a1dc8)
- unit test (995a27c)
- update @verdaccio/file-locking@1.0.0 (9bd36f0)
- update lodash types (184466c)
Features
- token support with level.js (#168) (ca877ff)
- build: standardize build (33fe090)
- change new db name to verdaccio (#83) (edfca9f)
- drop node v6 support (664f288)
- implement search (2e2bb32)
- migrate to typescript (c439d25)
- update database method with callbacks (ef202a9)
- update minor dependencies (007b026)
Changelog
All notable changes to this project will be documented in this file. See standard-version for commit guidelines.
2.3.0 (2019-08-13)
Bug Fixes
- restore closure (8ec27f2)
Features
2.2.1 (2019-06-30)
Bug Fixes
- build: error on types for fs callback (774d808)
2.2.0 (2019-06-30)
Features
- build: standardize build (eba832e)
2.1.0 (2019-03-29)
Bug Fixes
- remove uncessary async (23a09f3)
Features
- drop node v6 support (ef548e0)
2.0.0 (2019-03-29)
2.0.0-beta.3 (2019-02-24)
Bug Fixes
- update @verdaccio/file-locking@1.0.0 (587245d)
2.0.0-beta.2 (2019-02-24)
Bug Fixes
- avoid open write stream if resource exist #1191 (b13904a)
- package.json to reduce vulnerabilities (97e9dc3)
2.0.0-beta.1 (2019-02-03)
2.0.0-beta.0 (2019-02-01)
Bug Fixes
- deps: update dependency lodash to v4.17.11 (682616a)
Features
BREAKING CHANGES
- we change from boolean value to string within the config file
1.2.0 (2018-08-25)
Features
1.1.3 (2018-07-15)
Bug Fixes
- remove unused parameters (3ce374a)
1.1.2 (2018-06-09)
Bug Fixes
- return time as milliseconds (c98be85)
1.1.1 (2018-06-08)
Bug Fixes
- check whether path exist before return result (cb5d4ef)
1.1.0 (2018-06-08)
Bug Fixes
- deps: update dependency async to v2.6.1 (487b095)
Features
- implement search (f884a24)
0.2.0 (2018-01-17)
Features
- update minor dependencies (92daa81)