@verdaccio/test-helper 4.1.3 → 4.1.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +28 -0
- package/package.json +7 -7
package/CHANGELOG.md
CHANGED
|
@@ -1,5 +1,33 @@
|
|
|
1
1
|
# Change Log
|
|
2
2
|
|
|
3
|
+
## 4.1.5
|
|
4
|
+
|
|
5
|
+
### Patch Changes
|
|
6
|
+
|
|
7
|
+
- Updated dependencies [76550c1]
|
|
8
|
+
- Updated dependencies [b2ba1f1]
|
|
9
|
+
- Updated dependencies [9623b1b]
|
|
10
|
+
- @verdaccio/core@8.3.1
|
|
11
|
+
- @verdaccio/auth@8.1.4
|
|
12
|
+
- @verdaccio/config@8.3.1
|
|
13
|
+
- @verdaccio/middleware@8.1.5
|
|
14
|
+
- @verdaccio/logger@8.1.4
|
|
15
|
+
|
|
16
|
+
## 4.1.4
|
|
17
|
+
|
|
18
|
+
### Patch Changes
|
|
19
|
+
|
|
20
|
+
- 437767b: Update express to 4.22.3 so these packages resolve qs 6.16.0, closing several
|
|
21
|
+
denial-of-service advisories in query-string handling that `pnpm audit` reports against
|
|
22
|
+
the previous qs 6.15.x: a remotely triggerable crash in `qs.stringify` (TypeError on
|
|
23
|
+
crafted input), an `arrayLimit` bypass through bracket-key comma parsing that allows
|
|
24
|
+
memory exhaustion, and a DoS via an attacker-controlled `isBuffer` check
|
|
25
|
+
(GHSA-4mjr-xmp4-gh2g). Request parsing behaviour is otherwise unchanged and operators
|
|
26
|
+
need no configuration change; verdaccio 6.x picks the fix up when it bumps these
|
|
27
|
+
dependencies.
|
|
28
|
+
- Updated dependencies [437767b]
|
|
29
|
+
- @verdaccio/middleware@8.1.4
|
|
30
|
+
|
|
3
31
|
## 4.1.3
|
|
4
32
|
|
|
5
33
|
### Patch Changes
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@verdaccio/test-helper",
|
|
3
|
-
"version": "4.1.
|
|
3
|
+
"version": "4.1.5",
|
|
4
4
|
"description": "Verdaccio Test Helpers",
|
|
5
5
|
"homepage": "https://verdaccio.org",
|
|
6
6
|
"bugs": {
|
|
@@ -34,15 +34,15 @@
|
|
|
34
34
|
"./build/*": "./build/*"
|
|
35
35
|
},
|
|
36
36
|
"dependencies": {
|
|
37
|
-
"@verdaccio/auth": "8.1.
|
|
38
|
-
"@verdaccio/config": "8.3.
|
|
39
|
-
"@verdaccio/core": "8.3.
|
|
40
|
-
"@verdaccio/logger": "8.1.
|
|
41
|
-
"@verdaccio/middleware": "8.1.
|
|
37
|
+
"@verdaccio/auth": "8.1.4",
|
|
38
|
+
"@verdaccio/config": "8.3.1",
|
|
39
|
+
"@verdaccio/core": "8.3.1",
|
|
40
|
+
"@verdaccio/logger": "8.1.4",
|
|
41
|
+
"@verdaccio/middleware": "8.1.5",
|
|
42
42
|
"@verdaccio/types": "13.0.6",
|
|
43
43
|
"body-parser": "1.20.6",
|
|
44
44
|
"debug": "4.4.3",
|
|
45
|
-
"express": "4.22.
|
|
45
|
+
"express": "4.22.3",
|
|
46
46
|
"fs-extra": "11.2.0",
|
|
47
47
|
"supertest": "7.1.4"
|
|
48
48
|
},
|