@verdaccio/proxy 6.0.0-6-next.54 → 7.0.0-next.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/CHANGELOG.md +241 -0
  2. package/package.json +6 -6
package/CHANGELOG.md CHANGED
@@ -1,5 +1,246 @@
1
1
  # @verdaccio/proxy
2
2
 
3
+ ## 7.0.0-next.1
4
+
5
+ ### Patch Changes
6
+
7
+ - @verdaccio/core@7.0.0-next.1
8
+ - @verdaccio/config@7.0.0-next.1
9
+ - @verdaccio/utils@7.0.0-next.1
10
+
11
+ ## 7.0.0-next.0
12
+
13
+ ### Major Changes
14
+
15
+ - feat!: bump to v7
16
+
17
+ ### Patch Changes
18
+
19
+ - Updated dependencies
20
+ - @verdaccio/config@7.0.0-next.0
21
+ - @verdaccio/core@7.0.0-next.0
22
+ - @verdaccio/utils@7.0.0-next.0
23
+
24
+ ## 6.0.0
25
+
26
+ ### Major Changes
27
+
28
+ - 292c0a37f: feat!: replace deprecated request dependency by got
29
+
30
+ This is a big refactoring of the core, fetching dependencies, improve code, more tests and better stability. This is essential for the next release, will take some time but would allow modularize more the core.
31
+
32
+ ## Notes
33
+
34
+ - Remove deprecated `request` by other `got`, retry improved, custom Agent ( got does not include it built-in)
35
+ - Remove `async` dependency from storage (used by core) it was linked with proxy somehow safe to remove now
36
+ - Refactor with promises instead callback wherever is possible
37
+ - ~Document the API~
38
+ - Improve testing, integration tests
39
+ - Bugfix
40
+ - Clean up old validations
41
+ - Improve performance
42
+
43
+ ## 💥 Breaking changes
44
+
45
+ - Plugin API methods were callbacks based are returning promises, this will break current storage plugins, check documentation for upgrade.
46
+ - Write Tarball, Read Tarball methods parameters change, a new set of options like `AbortController` signals are being provided to the `addAbortSignal` can be internally used with Streams when a request is aborted. eg: `addAbortSignal(signal, fs.createReadStream(pathName));`
47
+ - `@verdaccio/streams` stream abort support is legacy is being deprecated removed
48
+ - Remove AWS and Google Cloud packages for future refactoring [#2574](https://github.com/verdaccio/verdaccio/pull/2574).
49
+
50
+ - 459b6fa72: refactor: search v1 endpoint and local-database
51
+
52
+ - refactor search `api v1` endpoint, improve performance
53
+ - remove usage of `async` dependency https://github.com/verdaccio/verdaccio/issues/1225
54
+ - refactor method storage class
55
+ - create new module `core` to reduce the ammount of modules with utilities
56
+ - use `undici` instead `node-fetch`
57
+ - use `fastify` instead `express` for functional test
58
+
59
+ ### Breaking changes
60
+
61
+ - plugin storage API changes
62
+ - remove old search endpoint (return 404)
63
+ - filter local private packages at plugin level
64
+
65
+ The storage api changes for methods `get`, `add`, `remove` as promise base. The `search` methods also changes and recieves a `query` object that contains all query params from the client.
66
+
67
+ ```ts
68
+ export interface IPluginStorage<T> extends IPlugin {
69
+ add(name: string): Promise<void>;
70
+ remove(name: string): Promise<void>;
71
+ get(): Promise<any>;
72
+ init(): Promise<void>;
73
+ getSecret(): Promise<string>;
74
+ setSecret(secret: string): Promise<any>;
75
+ getPackageStorage(packageInfo: string): IPackageStorage;
76
+ search(query: searchUtils.SearchQuery): Promise<searchUtils.SearchItem[]>;
77
+ saveToken(token: Token): Promise<any>;
78
+ deleteToken(user: string, tokenKey: string): Promise<any>;
79
+ readTokens(filter: TokenFilter): Promise<Token[]>;
80
+ }
81
+ ```
82
+
83
+ - 10aeb4f13: feat!: experiments config renamed to flags
84
+
85
+ - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
86
+
87
+ ```js
88
+ flags: token: false;
89
+ search: false;
90
+ ```
91
+
92
+ - The `self_path` property from the config file is being removed in favor of `config_file` full path.
93
+ - Refactor `config` module, better types and utilities
94
+
95
+ - e367c3f1e: - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
96
+
97
+ - Introduce environment variables for legacy tokens
98
+
99
+ ### Code Improvements
100
+
101
+ - Add debug library for improve developer experience
102
+
103
+ ### Breaking change
104
+
105
+ - The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
106
+ - The secret key must have 32 characters long.
107
+
108
+ ### New environment variables
109
+
110
+ - `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
111
+ - `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
112
+
113
+ - 82cb0f2bf: feat!: config.logs throw an error, logging config not longer accept array or logs property
114
+
115
+ ### 💥 Breaking change
116
+
117
+ This is valid
118
+
119
+ ```yaml
120
+ log: { type: stdout, format: pretty, level: http }
121
+ ```
122
+
123
+ This is invalid
124
+
125
+ ```yaml
126
+ logs: { type: stdout, format: pretty, level: http }
127
+ ```
128
+
129
+ or
130
+
131
+ ```yaml
132
+ logs:
133
+ - [{ type: stdout, format: pretty, level: http }]
134
+ ```
135
+
136
+ ### Minor Changes
137
+
138
+ - 631abe1ac: feat: refactor logger
139
+ - b702ea363: abort search request support for proxy
140
+ - b61f762d6: feat: add server rate limit protection to all request
141
+
142
+ To modify custom values, use the server settings property.
143
+
144
+ ```markdown
145
+ server:
146
+
147
+ ## https://www.npmjs.com/package/express-rate-limit#configuration-options
148
+
149
+ rateLimit:
150
+ windowMs: 1000
151
+ max: 10000
152
+ ```
153
+
154
+ The values are intended to be high, if you want to improve security of your server consider
155
+ using different values.
156
+
157
+ - 154b2ecd3: refactor: remove @verdaccio/commons-api in favor @verdaccio/core and remove duplications
158
+ - aa763baec: feat: add typescript project references settings
159
+
160
+ Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
161
+
162
+ It allows to navigate (IDE) trough the packages without need compile the packages.
163
+
164
+ Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).
165
+
166
+ - 0a6412ca9: feat: refactor proxy with got v12
167
+ - 5167bb528: feat: ui search support for remote, local and private packages
168
+
169
+ The command `npm search` search globally and return all matches, with this improvement the user interface
170
+ is powered with the same capabilities.
171
+
172
+ The UI also tag where is the origin the package with a tag, also provide the latest version and description of the package.
173
+
174
+ - 45c03819e: refactor: render html middleware
175
+
176
+ ### Patch Changes
177
+
178
+ - 351aeeaa8: fix(deps): @verdaccio/utils should be a prod dep of local-storage
179
+ - a610ef26b: chore: add release step to private regisry on merge changeset pr
180
+ - 65cb26cf3: refactor: migrate request to node-fetch at hooks package
181
+ - e381e4845: fix: improve legacy nodejs support
182
+ - 34f0f1101: Enable prerelease mode with **changesets**
183
+ - 0a6412ca9: refactor: got instead undici
184
+ - 68ea21214: ESLint Warnings Fixed
185
+
186
+ Related to issue #1461
187
+
188
+ - max-len: most of the sensible max-len errors are fixed
189
+ - no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
190
+ - @typescript-eslint/no-unused-vars: same as above
191
+
192
+ - Updated dependencies [292c0a37f]
193
+ - Updated dependencies [a1986e098]
194
+ - Updated dependencies [974cd8c19]
195
+ - Updated dependencies [a828271d6]
196
+ - Updated dependencies [ef88da3b4]
197
+ - Updated dependencies [43f32687c]
198
+ - Updated dependencies [679c19c1b]
199
+ - Updated dependencies [a3a209b5e]
200
+ - Updated dependencies [459b6fa72]
201
+ - Updated dependencies [9fc2e7961]
202
+ - Updated dependencies [24b9be020]
203
+ - Updated dependencies [794af76c5]
204
+ - Updated dependencies [351aeeaa8]
205
+ - Updated dependencies [10aeb4f13]
206
+ - Updated dependencies [9718e0330]
207
+ - Updated dependencies [1b217fd34]
208
+ - Updated dependencies [e367c3f1e]
209
+ - Updated dependencies [a1da11308]
210
+ - Updated dependencies [d167f92e1]
211
+ - Updated dependencies [d2c65da9c]
212
+ - Updated dependencies [00d1d2a17]
213
+ - Updated dependencies [1810ed0d8]
214
+ - Updated dependencies [a610ef26b]
215
+ - Updated dependencies [ddb6a2239]
216
+ - Updated dependencies [648575aa4]
217
+ - Updated dependencies [b61f762d6]
218
+ - Updated dependencies [d43894e8f]
219
+ - Updated dependencies [154b2ecd3]
220
+ - Updated dependencies [aa763baec]
221
+ - Updated dependencies [378e907d5]
222
+ - Updated dependencies [16e38df8a]
223
+ - Updated dependencies [34f0f1101]
224
+ - Updated dependencies [82cb0f2bf]
225
+ - Updated dependencies [dc571aabd]
226
+ - Updated dependencies [f859d2b1a]
227
+ - Updated dependencies [6c1eb021b]
228
+ - Updated dependencies [62c24b632]
229
+ - Updated dependencies [0a6412ca9]
230
+ - Updated dependencies [d08fe29d9]
231
+ - Updated dependencies [5167bb528]
232
+ - Updated dependencies [f86c31ed0]
233
+ - Updated dependencies [c9d1af0e5]
234
+ - Updated dependencies [4b29d715b]
235
+ - Updated dependencies [b13a3fefd]
236
+ - Updated dependencies [68ea21214]
237
+ - Updated dependencies [8f43bf17d]
238
+ - Updated dependencies [45c03819e]
239
+ - Updated dependencies [b849128de]
240
+ - @verdaccio/config@6.0.0
241
+ - @verdaccio/core@6.0.0
242
+ - @verdaccio/utils@6.0.0
243
+
3
244
  ## 6.0.0-6-next.54
4
245
 
5
246
  ### Patch Changes
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@verdaccio/proxy",
3
- "version": "6.0.0-6-next.54",
3
+ "version": "7.0.0-next.1",
4
4
  "description": "verdaccio proxy fetcher",
5
5
  "main": "./build/index.js",
6
6
  "types": "build/index.d.ts",
@@ -29,9 +29,9 @@
29
29
  "node": ">=12"
30
30
  },
31
31
  "dependencies": {
32
- "@verdaccio/config": "6.0.0-6-next.76",
33
- "@verdaccio/core": "6.0.0-6-next.76",
34
- "@verdaccio/utils": "6.0.0-6-next.44",
32
+ "@verdaccio/config": "7.0.0-next.1",
33
+ "@verdaccio/core": "7.0.0-next.1",
34
+ "@verdaccio/utils": "7.0.0-next.1",
35
35
  "JSONStream": "1.3.5",
36
36
  "debug": "4.3.4",
37
37
  "got-cjs": "12.5.4",
@@ -39,8 +39,8 @@
39
39
  "lodash": "4.17.21"
40
40
  },
41
41
  "devDependencies": {
42
- "@verdaccio/types": "11.0.0-6-next.25",
43
- "@verdaccio/logger": "6.0.0-6-next.44",
42
+ "@verdaccio/types": "12.0.0-next.0",
43
+ "@verdaccio/logger": "7.0.0-next.1",
44
44
  "get-stream": "^6.0.1",
45
45
  "nock": "13.2.9",
46
46
  "node-mocks-http": "1.13.0",