Infrastructure/verdaccio
0
Fork 0
mirror of https://github.com/verdaccio/verdaccio.git synced 2024-12-16 21:56:25 -05:00
Code Issues Activity
verdaccio/packages/web/CHANGELOG.md
github-actions[bot] e676d1bf1c chore: update versions (alpha) (#2057)
2021-04-09 17:54:35 +02:00

6.4 KiB
Raw Blame History

@verdaccio/web

5.0.0-alpha.5

Patch Changes

  • Updated dependencies [f8a50baa]
    • @verdaccio/auth@5.0.0-alpha.4
    • @verdaccio/middleware@5.0.0-alpha.4

5.0.0-alpha.4

Patch Changes

  • fecbb9be: chore: add release step to private regisry on merge changeset pr
  • Updated dependencies [fecbb9be]
    • @verdaccio/auth@5.0.0-alpha.3
    • @verdaccio/config@5.0.0-alpha.3
    • @verdaccio/commons-api@10.0.0-alpha.3
    • @verdaccio/readme@10.0.0-alpha.3
    • @verdaccio/loaders@5.0.0-alpha.3
    • @verdaccio/logger@5.0.0-alpha.3
    • @verdaccio/middleware@5.0.0-alpha.3
    • @verdaccio/store@5.0.0-alpha.4
    • @verdaccio/utils@5.0.0-alpha.3

5.0.0-alpha.3

Minor Changes

  • 54c58d1e: feat: add server rate limit protection to all request

    To modify custom values, use the server settings property.

    server:

## https://www.npmjs.com/package/express-rate-limit#configuration-options

rateLimit:
windowMs: 1000
max: 10000

    The values are intended to be high, if you want to improve security of your server consider using different values.

Patch Changes

  • Updated dependencies [54c58d1e]
    • @verdaccio/auth@5.0.0-alpha.2
    • @verdaccio/config@5.0.0-alpha.2
    • @verdaccio/commons-api@10.0.0-alpha.2
    • @verdaccio/readme@10.0.0-alpha.2
    • @verdaccio/loaders@5.0.0-alpha.2
    • @verdaccio/logger@5.0.0-alpha.2
    • @verdaccio/middleware@5.0.0-alpha.2
    • @verdaccio/store@5.0.0-alpha.3
    • @verdaccio/utils@5.0.0-alpha.2

5.0.0-alpha.2

Patch Changes

  • @verdaccio/store@5.0.0-alpha.2

5.0.0-alpha.1

Major Changes

  • d87fa026: feat!: experiments config renamed to flags

    • The experiments configuration is renamed to flags. The functionality is exactly the same.
    flags: token: false;
search: false;
    • The self_path property from the config file is being removed in favor of config_file full path.
    • Refactor config module, better types and utilities

  • da1ee9c8: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv

    • Introduce environment variables for legacy tokens

    Code Improvements

    • Add debug library for improve developer experience

    Breaking change

    • The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
    • The secret key must have 32 characters long.

    New environment variables

    • VERDACCIO_LEGACY_ALGORITHM: Allows to define the specific algorithm for the token signature which by default is aes-256-ctr
    • VERDACCIO_LEGACY_ENCRYPTION_KEY: By default, the token stores in the database, but using this variable allows to get it from memory

Minor Changes

Patch Changes

  • 42024c34: Remove @ts-ignore and any in packages/web/src/endpoint/package.ts
  • b57b4338: Enable prerelease mode with changesets
  • Updated dependencies [d87fa026]
  • Updated dependencies [42024c34]
  • Updated dependencies [da1ee9c8]
  • Updated dependencies [26b494cb]
  • Updated dependencies [b57b4338]
  • Updated dependencies [add778d5]
  • Updated dependencies [31af0164]
    • @verdaccio/auth@5.0.0-alpha.1
    • @verdaccio/config@5.0.0-alpha.1
    • @verdaccio/commons-api@10.0.0-alpha.1
    • @verdaccio/readme@10.0.0-alpha.1
    • @verdaccio/loaders@5.0.0-alpha.1
    • @verdaccio/logger@5.0.0-alpha.1
    • @verdaccio/middleware@5.0.0-alpha.1
    • @verdaccio/store@5.0.0-alpha.1
    • @verdaccio/utils@5.0.0-alpha.1

5.0.0-alpha.1

Major Changes

  • d87fa0268: feat!: experiments config renamed to flags

    • The experiments configuration is renamed to flags. The functionality is exactly the same.
    flags: token: false;
search: false;
    • The self_path property from the config file is being removed in favor of config_file full path.
    • Refactor config module, better types and utilities

  • da1ee9c82: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv

    • Introduce environment variables for legacy tokens

    Code Improvements

    • Add debug library for improve developer experience

    Breaking change

    • The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
    • The secret key must have 32 characters long.

    New environment variables

    • VERDACCIO_LEGACY_ALGORITHM: Allows to define the specific algorithm for the token signature which by default is aes-256-ctr
    • VERDACCIO_LEGACY_ENCRYPTION_KEY: By default, the token stores in the database, but using this variable allows to get it from memory

Minor Changes

Patch Changes

  • 42024c346: Remove @ts-ignore and any in packages/web/src/endpoint/package.ts
  • b57b43388: Enable prerelease mode with changesets
  • Updated dependencies [d87fa0268]
  • Updated dependencies [42024c346]
  • Updated dependencies [da1ee9c82]
  • Updated dependencies [26b494cbd]
  • Updated dependencies [b57b43388]
  • Updated dependencies [add778d55]
  • Updated dependencies [31af01641]
    • @verdaccio/auth@5.0.0-alpha.1
    • @verdaccio/config@5.0.0-alpha.1
    • @verdaccio/commons-api@10.0.0-alpha.0
    • @verdaccio/readme@10.0.0-alpha.0
    • @verdaccio/loaders@5.0.0-alpha.1
    • @verdaccio/logger@5.0.0-alpha.1
    • @verdaccio/middleware@5.0.0-alpha.1
    • @verdaccio/store@5.0.0-alpha.1
    • @verdaccio/utils@5.0.0-alpha.1