verdaccio 5.13.1 → 5.14.0

package/CHANGELOG.md

@@ -2,6 +2,37 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [5.14.0](https://github.com/verdaccio/verdaccio/compare/v5.13.3...v5.14.0) (2022-07-29)
+
+
+### Features
+
+* allow express 'trust proxy' to be set for ip resolution behind proxies and load-balancers ([#3274](https://github.com/verdaccio/verdaccio/issues/3274)) ([0bc26e3](https://github.com/verdaccio/verdaccio/commit/0bc26e395a9fa348da52793526e3f13e614900ab))
+
+
+### Bug Fixes
+
+* **deps:** update dependency @verdaccio/readme to v10.4.1 ([#3267](https://github.com/verdaccio/verdaccio/issues/3267)) ([080bd45](https://github.com/verdaccio/verdaccio/commit/080bd4578f27481a0681914e1e77e7e85cd4bbe6))
+* **deps:** update dependency lru-cache to v7.13.1 ([#3268](https://github.com/verdaccio/verdaccio/issues/3268)) ([d995cc5](https://github.com/verdaccio/verdaccio/commit/d995cc516e012295dae56aa6a62b97d60c2f4da6))
+
+### [5.13.3](https://github.com/verdaccio/verdaccio/compare/v5.13.2...v5.13.3) (2022-07-13)
+
+
+### Bug Fixes
+
+* **deps:** update dependency @verdaccio/readme to v10.4.0 ([#3265](https://github.com/verdaccio/verdaccio/issues/3265)) ([531f468](https://github.com/verdaccio/verdaccio/commit/531f4685abe37e5d7487f665c9d480e0d085df5f))
+* **deps:** update dependency kleur to v4.1.5 ([#3263](https://github.com/verdaccio/verdaccio/issues/3263)) ([cc1c2a5](https://github.com/verdaccio/verdaccio/commit/cc1c2a5e50ca7e0e6bade2f8f18ec31c35b3fb53))
+* **deps:** update dependency lru-cache to v7.13.0 ([#3266](https://github.com/verdaccio/verdaccio/issues/3266)) ([0a611c0](https://github.com/verdaccio/verdaccio/commit/0a611c0b7df404c6ea66e104eb9ec80ffd7c49f3))
+* **deps:** update dependency marked to v4.0.18 ([#3264](https://github.com/verdaccio/verdaccio/issues/3264)) ([b3f964d](https://github.com/verdaccio/verdaccio/commit/b3f964d93aa15334b685c9b66fe44912c1aa5447))
+
+### [5.13.2](https://github.com/verdaccio/verdaccio/compare/v5.13.1...v5.13.2) (2022-07-12)
+
+
+### Bug Fixes
+
+* **deps:** update dependency @verdaccio/ui-theme to v6.0.0-6-next.25 ([#3258](https://github.com/verdaccio/verdaccio/issues/3258)) ([af9cc6d](https://github.com/verdaccio/verdaccio/commit/af9cc6d4f993d07e396a0391f3a964b0c7d36268))
+* update nodejs to 14.20.0 to fix CVE-2022-32212 ([#3262](https://github.com/verdaccio/verdaccio/issues/3262)) ([5f83dc2](https://github.com/verdaccio/verdaccio/commit/5f83dc294e763d578b5d9f95cfee00e44fa6fd6e))
+
 ### [5.13.1](https://github.com/verdaccio/verdaccio/compare/v5.13.0...v5.13.1) (2022-06-23)
 
 

package/build/api/index.js

@@ -40,11 +40,19 @@ var _api = _interopRequireDefault(require("./web/api"));
 function _interopRequireDefault(obj) { return obj && obj.__esModule ? obj : { default: obj }; }
 
 const defineAPI = function (config, storage) {
+  var _config$server;
+
   const auth = new _auth.default(config);
   const app = (0, _express.default)(); // run in production mode by default, just in case
   // it shouldn't make any difference anyway
 
-  app.set('env', process.env.NODE_ENV || 'production');
+  app.set('env', process.env.NODE_ENV || 'production'); // Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer
+  // See: https://expressjs.com/en/guide/behind-proxies.html
+
+  if ((_config$server = config.server) !== null && _config$server !== void 0 && _config$server.trustProxy) {
+    app.set('trust proxy', config.server.trustProxy);
+  }
+
   app.use((0, _cors.default)()); // Router setup
 
   app.use((0, _middleware.log)(config));
@@ -131,4 +139,4 @@ var _default = async function _default(configHash) {
 };
 
 exports.default = _default;
-//# sourceMappingURL=data:application/json;charset=utf-8;base64,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
+//# sourceMappingURL=data:application/json;charset=utf-8;base64,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

package/conf/default.yaml

@@ -103,6 +103,9 @@ packages:
 # WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
 server:
   keepAliveTimeout: 60
+  # Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer
+  # See: https://expressjs.com/en/guide/behind-proxies.html
+  # trustProxy: '127.0.0.1'
 
 # https://verdaccio.org/docs/configuration#offline-publish
 # publish:

package/conf/docker.yaml

@@ -107,6 +107,9 @@ packages:
 # WORKAROUND: Through given configuration you can workaround following issue https://github.com/verdaccio/verdaccio/issues/301. Set to 0 in case 60 is not enough.
 server:
   keepAliveTimeout: 60
+  # Allow `req.ip` to resolve properly when Verdaccio is behind a proxy or load-balancer
+  # See: https://expressjs.com/en/guide/behind-proxies.html
+  # trustProxy: '127.0.0.1'
 
 # https://verdaccio.org/docs/configuration#offline-publish
 # publish:

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio",
-  "version": "5.13.1",
+  "version": "5.14.0",
   "description": "A lightweight private npm proxy registry",
   "author": {
     "name": "Verdaccio Maintainers",
@@ -20,9 +20,9 @@
   "dependencies": {
     "@verdaccio/commons-api": "10.2.0",
     "@verdaccio/local-storage": "10.3.1",
-    "@verdaccio/readme": "10.3.4",
+    "@verdaccio/readme": "10.4.1",
     "@verdaccio/streams": "10.2.0",
-    "@verdaccio/ui-theme": "6.0.0-6-next.24",
+    "@verdaccio/ui-theme": "6.0.0-6-next.25",
     "JSONStream": "1.3.5",
     "async": "3.2.4",
     "body-parser": "1.20.0",
@@ -41,11 +41,11 @@
     "http-errors": "2.0.0",
     "js-yaml": "4.1.0",
     "jsonwebtoken": "8.5.1",
-    "kleur": "4.1.4",
+    "kleur": "4.1.5",
     "lodash": "4.17.21",
-    "lru-cache": "7.10.1",
+    "lru-cache": "7.13.1",
     "lunr-mutable-indexes": "2.3.2",
-    "marked": "4.0.17",
+    "marked": "4.0.18",
     "memoizee": "0.4.15",
     "mime": "3.0.0",
     "minimatch": "5.1.0",
@@ -62,29 +62,29 @@
     "verdaccio-htpasswd": "10.5.0"
   },
   "devDependencies": {
-    "@babel/cli": "7.17.10",
-    "@babel/core": "7.17.12",
-    "@babel/node": "7.17.10",
-    "@babel/plugin-proposal-class-properties": "7.17.12",
-    "@babel/plugin-proposal-decorators": "7.17.12",
-    "@babel/plugin-proposal-export-namespace-from": "7.17.12",
-    "@babel/plugin-proposal-function-sent": "7.17.12",
-    "@babel/plugin-proposal-json-strings": "7.17.12",
-    "@babel/plugin-proposal-nullish-coalescing-operator": "7.17.12",
-    "@babel/plugin-proposal-numeric-separator": "7.16.7",
-    "@babel/plugin-proposal-object-rest-spread": "7.17.12",
-    "@babel/plugin-proposal-optional-chaining": "7.17.12",
-    "@babel/plugin-proposal-throw-expressions": "7.16.7",
+    "@babel/cli": "7.18.6",
+    "@babel/core": "7.18.6",
+    "@babel/node": "7.18.6",
+    "@babel/plugin-proposal-class-properties": "7.18.6",
+    "@babel/plugin-proposal-decorators": "7.18.6",
+    "@babel/plugin-proposal-export-namespace-from": "7.18.6",
+    "@babel/plugin-proposal-function-sent": "7.18.6",
+    "@babel/plugin-proposal-json-strings": "7.18.6",
+    "@babel/plugin-proposal-nullish-coalescing-operator": "7.18.6",
+    "@babel/plugin-proposal-numeric-separator": "7.18.6",
+    "@babel/plugin-proposal-object-rest-spread": "7.18.6",
+    "@babel/plugin-proposal-optional-chaining": "7.18.6",
+    "@babel/plugin-proposal-throw-expressions": "7.18.6",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
-    "@babel/plugin-transform-async-to-generator": "7.17.12",
-    "@babel/plugin-transform-classes": "7.17.12",
-    "@babel/plugin-transform-runtime": "7.17.12",
+    "@babel/plugin-transform-async-to-generator": "7.18.6",
+    "@babel/plugin-transform-classes": "7.18.8",
+    "@babel/plugin-transform-runtime": "7.18.6",
     "@babel/polyfill": "^7.12.1",
-    "@babel/preset-env": "7.17.12",
-    "@babel/preset-typescript": "7.17.12",
-    "@babel/register": "7.17.7",
-    "@babel/runtime": "7.17.9",
+    "@babel/preset-env": "7.18.6",
+    "@babel/preset-typescript": "7.18.6",
+    "@babel/register": "7.18.6",
+    "@babel/runtime": "7.18.6",
     "@commitlint/cli": "12.1.4",
     "@commitlint/config-conventional": "12.1.4",
     "@octokit/rest": "18.12.0",
@@ -106,7 +106,7 @@
     "@typescript-eslint/parser": "5.22.0",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "@verdaccio/eslint-config": "^10.0.0",
-    "@verdaccio/types": "10.5.1",
+    "@verdaccio/types": "10.5.2",
     "all-contributors-cli": "6.20.0",
     "babel-eslint": "10.1.0",
     "babel-jest": "26.6.3",