Update verdaccio/verdaccio Docker tag to v6 #13

Update notes, no considerable changes on this major release, for npm.js users only dropping Node.js, 14 and 16 support, minimum now is Node.js 18 and no changes for Docker users.

Bug Fixes

deps: update dependency debug to v4.3.7 (#4838) (cdf7810)
deps: update dependency envinfo to v7.14.0 (#4843) (c36d87f)

6.0.0-rc.1 (2024-09-15)

⚠ BREAKING CHANGES

drop Node.js 16 (#4835)

Features

drop Node.js 16 (#4835) (78b759c)

`v5.33.0`

Compare Source

ℹ️ℹ️ℹ️ℹ️ℹ️ℹ️

There will be no more updates for version 5.x. Please upgrade to version 6.x. Aside from requiring Node.js 18 as a minimum, there are no breaking changes.

ℹ️ℹ️ℹ️ℹ️ℹ️ℹ️

Bug Fixes

deps: update dependency @cypress/request to v3.0.5 (#4830) (5e16f89)
deps: update dependency async to v3.2.6 (#4831) (3ce57aa)
update dependencies 5.x (#4964) (fd7fd2f)

`v5.32.2`

Compare Source

5.32.2 (2024-09-12)

Bug Fixes

deps: update core verdaccio dependencies (5.x) (#4825) (f17b5a9) (prepare for release v6)
deps: update dependency express to v4.21.0 (#4815) (f8e5395)

`v5.32.1`

Compare Source

5.32.1 (2024-08-02)

Bug Fixes

deps: update core verdaccio dependencies (#4752) (960924b)
- fix(middleware): link to favicon in template https://github.com/verdaccio/verdaccio/pull/4744 by @mbtools fix #4736

`v5.32.0`

Compare Source

🚧 pending add details of each update

Features

update core deps (#4726) (6dc8e91)

Bug Fixes

deps: update core verdaccio dependencies (#4737) (e062a02)
deps: update core verdaccio dependencies (5.x) (#4708) (301deca)

`v5.31.1`

Compare Source

5.31.1 (2024-06-06)

Bug Fixes

deps: update core verdaccio dependencies (#4668) (9e3a79d)
- patch(core/url): Throw if VERDACCIO_FORWARDED_PROTO resolves to an array https://github.com/verdaccio/verdaccio/pull/4613. by @Tobbe
- fix: log spacing depending on the FORMAT and COLORS options #4631 by @somethingSTRANGE
deps: update node.js to v20.14.0 (#4663) (6591927)
set engine to 14.21.3 (6cf6064)
set engine to Node.js 14 (9a6d5b3)

`v5.31.0`

Compare Source

(🗞️ hey (renovate/dependabot/other bots) users, read this)

ℹ️ Important changes added to the .verdaccio-db.json and token signature for users that run on Node.js 22 or higher (in the future 🙃 ) please read
https://verdaccio.org/docs/configuration/#.verdaccio-db

TLDR:

Enforced for users that runs verdaccio via npmjs, for all Docker image isuers, verdaccio uses Node.js LTS 21 and the secret migration is voluntary until next major release.
For Node.js 21 or lower a new deprecation will appear [VERWAR007] VerdaccioDeprecation: the secret length is too lon... to remove it please read the link above
For Node.js 22 if you have already a storage with .verdaccio-db.json and the token inside does not complies with the length (read link above) the application startup will fail with fatal error (Error: Invalid storage secret key length, must be 32 characters long but is....)

In both cases by updating the secret all previously tokens will get invalid, in your benefit a new legacy signature will be applied and is more secure than the old one (generating tokens with salt).

For existing installations that have no issues by invalidating tokens is recommended to add to the config.yaml the following setup, this will automatically generate a new the secret once is started, could be removed aftewards, if all went succesfull the [VERWAR007] deprecation will not be displayed anymore.

security:
  api:
    migrateToSecureLegacySignature: true

Any new installation should not worry about this, new token signature and secret (32 characters) is applied by default.

Features

add property forceMigrateToSecureLegacySignature (#4625) (2941522) https://github.com/verdaccio/verdaccio/issues/4601

Bug Fixes

deps: update dependency express to v4.19.2 (#4596) (4123dbc)

`v5.30.3`

Compare Source

5.30.3 (2024-04-06)

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Bug Fixes

upgrade docker file base image to v20.12.1 (#4576) (513b10d)

`v5.30.2`

Compare Source

5.30.2 (2024-03-24)

Same as https://github.com/verdaccio/verdaccio/releases/tag/v5.30.0

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Bug Fixes

update @verdaccio/search-indexer engine restrictions ([1ceb9f9] https://github.com/verdaccio/verdaccio/pull/4560 (verdaccio/verdaccio@1ceb9f9)) (remove engine strict message in older Node.js versions)

`v5.30.1`

Compare Source

5.30.1 (2024-03-24)

Same as https://github.com/verdaccio/verdaccio/releases/tag/v5.30.0

Bug Fixes

remove search dependency (dependency requires Node.js 18 and is not used) (#4560) (a9cfae5)

`v5.30.0`

Compare Source

🎉 3 new contributors

Be warned, if you are using (or cannot upgrade to major) Node.js 12 (only if you install from npmjs) please do not upgrade to this version, the minimum is now Node.js 14 (due dependency reasons are out my hand), the recommendation is always go for LTS releases anyway which at this moment is Node.js 20. For context if you are using the Docker image ignore this warning, the Dockerfile uses Node.js 20 as base image.

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Features

On the versions view there is a new filter that allows semantic versioning filtering (feedback is welcome)

deps: update core verdaccio dependencies (5.x) (#4558) (72c3ab7)

Versions filter by semver range

Bug Fixes

fix multiple user interface issues in dark mode (css styles)
newline after version command (#4543) (c478324) by @aseerkt
deps: update core verdaccio dependencies (#4530) (7206f84)
- fix config builder erroring when passed partial config https://github.com/verdaccio/verdaccio/pull/4552 by @ItamarGronich
- Avoid displaying "prettify pipeline error" if there is no error https://github.com/verdaccio/verdaccio/pull/4551 by @divdavem
deps: update core verdaccio dependencies (5.x) (#4539) (da50302)
deps: update dependency envinfo to v7.11.1 (#4527) (c2604e7)
deps: update dependency express to v4.18.3 (#4528) (e07c352)
deps: update dependency semver to v7.6.0 (#4529) (43d3c5e)

`v5.29.2`

Compare Source

5.29.2 (2024-02-21)

Bug Fixes

deps: update core verdaccio dependencies (5.x) (#4516) (11f3309)
bug: fix: ui dialog break pages on open due remark error https://github.com/verdaccio/verdaccio/pull/4514 (regression from v5.29.1)

`v5.29.1`

Compare Source

5.29.1 (2024-02-17)

Bug Fixes

Powered by @mbtools 💯

deps: update core verdaccio dependencies (#4389) (f64b395)
deps: update core verdaccio dependencies (#4428) (30af49f)
deps: update core verdaccio dependencies (#4499) (e10b381)
deps: update core verdaccio dependencies (#4508) (23afe22)
deps: update core verdaccio dependencies (5.x) (#4352) (b41f6c9)
deps: update dependency cookies to v0.9.0 (#4341) (0bdc10e)
deps: update dependency cookies to v0.9.1 (#4371) (c96468a)
deps: update dependency verdaccio-audit to v12.0.0-next.5 (#4353) (11421c0)
deps: update dependency verdaccio-htpasswd to v12.0.0-next.5 (#4355) (03d8bb4)

`v5.29.0`

Compare Source

Features

replace request with @cypress/request (#4234) (e11d95d) by @legobeat

`v5.28.0`

Compare Source

Features

update docker base image to node20 (#4231) (adf6927)

Bug Fixes

restore search all endpoint (#4233) (591ad20)

`v5.27.1`

Compare Source

5.27.1 (2023-12-02)

Bug Fixes

reuse middleware reporting layer (#4114) (6a317f8)
update several dependencies

`v5.27.0`

Compare Source

Features

update core dependencies (#4073) (257d46a)
- #4071 by @juanpicado
- #4051 by @mbtools (💯 extra kudos 🥇)

User Interface updates in detail

download progress indicator:

https://github.com/verdaccio/verdaccio/discussions/4068

A new indicator was added on the detail page action button and the packages view (small icon to download)

fix dark mode and readme css support

The README was not on sync with the darkMode settings displaying a white box when the dark mode was enabled.

fix global for `yarn` packages and add version to the packages on copy

yarn -g xxx@xxx is not a valid syntax, has been replaced by yarn global
Added yarn modern syntax, since global is not valid on yarn >2.x the global is ignored

feat: hide deprecated versions option

npm deprecate is a valuable command, but is not enough visible on the UI whenever a package has been deprecated, also could be many packages are deprecated and should not be longer visible (later in the future a filter will be added to display then), the new option hide all those version from the UI.

web:
  hideDeprecatedVersions: true

fix: improve deprecated package style

The deprecated banner was not on sync with the material-ui components.

feat: display deprecated versions

Deprecated versions display a badge, thus is clearly visible which packages are already deprecated.

`v5.26.3`

Compare Source

5.26.3 (2023-09-24)

Bug Fixes

fix: ui expired token by @Ku3mi41 https://github.com/verdaccio/verdaccio/pull/4007
- https://github.com/verdaccio/verdaccio/issues/3163
- https://github.com/verdaccio/verdaccio/issues/3980
update core dependencies (#4035) (bd0d029)

`v5.26.2`

Compare Source

5.26.2 (2023-08-26)

Bug Fixes

deps: update dependency validator to v13.11.0 (#3967) (f61cfda)
update core depepedencies 5.x (#3991) (528a902), closes [#3988] (https://github.com/verdaccio/verdaccio/issues/3988) #3989 by @moglerdev

`v5.26.1`

Compare Source

Bug Fixes

add missing token auth middleware (#3944) (5e9637d)

`v5.26.0`

Compare Source

Features

refactor middleware and bufixes (#3922) (43de79d)

Bug Fixes

fix: official package "-" cannot be synced https://github.com/verdaccio/verdaccio/issues/3915
deps: update core verdaccio dependencies (#3873) (f0bb451)
deps: update dependency clipanion to v3.2.1 (#3874) (b39c01f)
deps: update dependency semver to v7.5.2 (#3895) (a699787)
deps: update dependency verdaccio-audit to v11.0.0-6-next.35 (#3877) (a84d178)
docker update v18.16.1 (#3923) (c671faa)
remove req.host deprecation warning (#3921) (4be19db)
update dependencies (971d500)

`v5.25.0`

Compare Source

Features

replace internal web search indexer @orama/orama (#3818) (770cd27)

Bug Fixes

deps: update core verdaccio dependencies (#3822) (2d6dbc7)
deps: update dependency @babel/eslint-parser to v7.21.8 (#3807) (271f918)
deps: update dependency semver to v7.5.1 (#3816) (373c584)
deps: update dependency verdaccio-audit to v11.0.0-6-next.33 (#3824) (a7a2d5f)
docker: remove yarn symlinks (#3840) (1a5d5b4), closes /github.com/nodejs/docker-node/blob/02a64a08a98a472c6141cd583d2e9fc47bcd9bfd/18/alpine3.16/Dockerfile#L91-L92
deps: verdaccio 6.x dependencies (#3853) (99d06e5) (shared functionality with 5.x and 6.x alpha)
- Update dependencies
- [UI new setting](feat: ui set global package on sidebar setting) #3826 by @juanpicado
- UI improve core functions
- fix(config): respect the changePassword configuration flag #3849 by @gkalpak

UI set global package on sidebar setting

Set a package as global on the side bar installation view.

`v5.24.1`

Compare Source

5.24.1 (2023-04-24)

Bug Fixes

fixed an issue where logger.info in allow_action always output undefined (#3763) (268c5e7) by @cmKangkang

`v5.24.0`

Compare Source

Features

update docker base image v18.16.0 (#3751) (d3bb520)
upgrade plugin htpassw major (#3712) (e939ca2)

Bug Fixes

deps: update dependency semver to v7.5.0 (#3733) (dcd530b)
deps: update dependency verdaccio-htpasswd to v10.5.5 (#3749) (b3ea816) (overrided by #3712)
bug: file count: undefined https://github.com/verdaccio/verdaccio/issues/3758

`v5.23.2`

Compare Source

5.23.2 (2023-04-04)

Bug Fixes

deps: update dependency @verdaccio/config to v6.0.0-6-next.67 (#3716) (8e79e5f)
ui package search (#3713) (1029d7a) solves https://github.com/verdaccio/verdaccio/issues/3709 by @jzhangdev

`v5.23.1`

Compare Source

5.23.1 (2023-03-23)

Bug Fixes

package.json main field (#3700) (5d83c52) kudos to @pieh

`v5.23.0`

Compare Source

Features

update docker image base to v18.15.0 (fd78ca9) Thank u anonymous reporter for the heads up 🥇

Bug Fixes

add missing version on footer #3671 (b85ba99) https://github.com/verdaccio/verdaccio/issues/3671
update core dependencies (c95ab88)
update core dependencies (#3688) (2a6fc98)

`v5.22.1`

Compare Source

5.22.1 (2023-03-07)

⚠️ Using at the config.yaml he property logs will show a deprecation warning and the property should be renamed to log to get rid of the warning, the property logs still backward compatible. Please start renaming to log, this is one less migration step to do for future v6 release.
ℹ️ The new installations won't see this warning because the default yaml file already uses log.

Docs

(node:56648) [VERWAR002] VerdaccioWarning: The configuration property "logs" has been deprecated, please rename to "log" for future compatibility
(Use `node --trace-warnings ...` to show where the warning was created)

Bug Fixes

#3666 experiments config fail on startup (#3668) (f6c22d3) by @juanpicado

Docs

Added logger to configuration page logger by @osher

`v5.22.0`

Compare Source

⚠️ Known issues:

🐞 using experiments flag fails on start up https://github.com/verdaccio/verdaccio/issues/3666 (🚧 ) workaround: comment out experiments config.yaml or keep on <=5.21.x fixed at https://github.com/verdaccio/verdaccio/releases/tag/v5.22.1

Refactor

⚠️ Refactors can causes issues, please report and if give you problems stay on the version you were

This release only refactor internal code, reuse configuration parsing and token signature from v6.

improved configuration parsing and token signature (#3658) (e50d4d9)

the next major will include an enhancedLegacySignature property to be able get rid of [DEP0106] DeprecationWarning: crypto.createDecipher is deprecated. and improve legacy token signature.

Bugs

Logger level configuration was being ignored (#3658) (e50d4d9) regresion at v5.20.0

`v5.21.2`

Compare Source

5.21.2 (2023-02-25)

Bug Fixes

avoid setting body for GET requests (#3643) (e4573c7), closes #3601 #3601 by @melodyVoid
update dependencies (#3649) ([ed80a25] (verdaccio/verdaccio@ed80a25)) fix #3612 @juanpicado

`v5.21.1`

Compare Source

5.21.1 (2023-02-14)

⚠️ This PR introduce issue on custom Icon, read if you are using custom icons wait for a patch.

Bug Fixes

😊 I've updated the old UI theme without noticed, does not break anything but this version fix that.

Read the previous minor v5.21.0 release here

restore @verdaccio/ui-theme version (4105fec)

`v5.21.0`

Compare Source

One more step to Verdaccio 5 migration to v6 silently, refactored and better tested modules replace internals without migration required, the idea is help move to verdaccio 6 smoothly as possible without users do much in the near future. You are already using v6 😉 or parts of it.

Noticeable improvements:

Update logger library Pinojs 6 -> 7
Internals HTML render engine, same as v6 improved
Express.js middlewares improved
The first plugin migrated verdaccio-audit improved, not longer use request and refactored from v6

Some dependencies are limited due verdaccio@5 still supports Node.js 12 (but probably not many users are actually using it and is not recommended)

Features

refactor render middleware and audit plugin (#3602) (f9f269e)
replace middleware and logger core (#3586) (bf9ed26)

`v5.20.1`

Compare Source

Bug Fixes

🐞 (previous build failures) pushed wrong types library and broken build (45d7c95)

5.20.0 (2023-01-29) (⚠️ Never published on npmjs by mistake)

Since 5.20.0 some internals are new, modules from the next major v6 but backward compatible, if causes any troubles please report. Future releases from now on might benefit of fixes, compatible features on v6 alpha into any new v5 version.

Please check E2E test on this repo, includes all package managers, docker images and plugins.

Features

refactor test and use verdaccio 6 core modules (#3569) (bae430f)

Bug Fixes

update dependencies (#3567) (d151922)
update docker base to 18.13.0 (#3579) (3320b4d)

`v5.20.0`

Compare Source

`v5.19.1`

Compare Source

5.19.1 (2023-01-07)

ℹ️ TS types were added in v5.18.0 but weren't included in the package, this change might be a minor in some cases, if you have troubles report it.

Bug Fixes

include ts types and systemd into the published package (#3556) (a774e29) ref https://github.com/verdaccio/verdaccio/issues/3544

`v5.19.0`

Compare Source

Features

security: update dependencies (#3540) (99a39d5)

Bug Fixes

update core dependencies (#3519) (9353b3e)

`v5.18.0`

Compare Source

Features

ℹ️ There were no types before, not expecting breaking changes but if you are using TS with verdaccio programatically might have some impact here.

export module types (TypeScript types) (#3508) (0a0b772)

Bug Fixes

add hasInstallScript calculation (#3509) (0b49566) solves https://github.com/verdaccio/verdaccio/issues/3366

`v5.17.0`

Compare Source

Features

Upgrade to React 18 + react dependencies
highlight readme source code (#3506) (8715a5c)

Bug Fixes

sec: update base image to v18.12.1-alpine (#3489) (07144c9)

`v5.16.3`

Compare Source

Same as v5.16.0 https://github.com/verdaccio/verdaccio/releases/tag/v5.16.0

⚠️ I broke the release ^_^ so I had to release 5.16.1, 5.16.2 and 5.16.3. The 5.16.1, 5.16.2 are broken, don't use please. Consequences I moved E2E to https://github.com/verdaccio/e2e-5.x for 5.x release to simplify the maintenance (but it came with a cost).

`v5.16.2`

Compare Source

`v5.16.1`

Compare Source

`v5.16.0`

Compare Source

😊 due some package manager migration I broke the release, so the latest [email protected] is literally same version as v5.16.0, sorry

Features

Docker refactoring

docker image refactor a new internal binary run (#3475) (ebaaf3f)

Big changes on the docker image, while until version v5.15.4 has been using yarn as a runner, since this minor should not use yarn at all, it is just used at the builder phase and then it is just run verdaccio natively as a Node.js module installed globally at the image.
Improved documentation for using plugins here with the image 5.x

If the new docker image causes any troubles, please report it ! or just use verdaccio/verdaccio:5.15.4 as a workaround to stick the old one. The new Docker 6.x image will follow same approach very soon.

Docker base moves from TLS v14 -> v18

update to docker base image to node v18.12.0 (#3469) (644938c)

Bug Fixes

deps: update dependency body-parser to v1.20.1 (#3438) (b3b44f6)
deps: update dependency dayjs to v1.11.6 (#3459) (106e00a)
deps: update dependency express to v4.18.2 (#3435) (128ab21)
deps: update dependency marked to v4.1.1 (#3439) ([

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot force-pushed the renovate/verdaccio-verdaccio-6.x branch from c4d73aa to 0c4418e Compare October 16, 2024 20:49

renovate bot force-pushed the renovate/verdaccio-verdaccio-6.x branch from 0c4418e to 99383b2 Compare November 17, 2024 16:43

renovate bot force-pushed the renovate/verdaccio-verdaccio-6.x branch 2 times, most recently from 90bf798 to fc1e1ff Compare December 17, 2024 10:03

Update verdaccio/verdaccio Docker tag to v6

14ea053

renovate bot force-pushed the renovate/verdaccio-verdaccio-6.x branch from fc1e1ff to 14ea053 Compare December 21, 2024 11:08

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update verdaccio/verdaccio Docker tag to v6 #13

Update verdaccio/verdaccio Docker tag to v6 #13

renovate bot commented Sep 20, 2024 •

edited

Loading

Update verdaccio/verdaccio Docker tag to v6 #13

Are you sure you want to change the base?

Update verdaccio/verdaccio Docker tag to v6 #13

Conversation

renovate bot commented Sep 20, 2024 • edited Loading

Release Notes

What's Changed

v6.0.4

What's Changed

What's Changed

6.0.2 (2024-11-17)

What's Changed

6.0.1 (2024-10-16)

Bug Fixes

Bug Fixes

6.0.0-rc.1 (2024-09-15)

⚠ BREAKING CHANGES

Features

Bug Fixes

5.32.2 (2024-09-12)

Bug Fixes

5.32.1 (2024-08-02)

Bug Fixes

Features

Bug Fixes

5.31.1 (2024-06-06)

Bug Fixes

Features

Bug Fixes

5.30.3 (2024-04-06)

Bug Fixes

5.30.2 (2024-03-24)

Bug Fixes

5.30.1 (2024-03-24)

Bug Fixes

Features

Versions filter by semver range

Bug Fixes

5.29.2 (2024-02-21)

Bug Fixes

5.29.1 (2024-02-17)

Bug Fixes

Features

Features

Bug Fixes

5.27.1 (2023-12-02)

Bug Fixes

Features

User Interface updates in detail

download progress indicator:

fix dark mode and readme css support

fix global for yarn packages and add version to the packages on copy

feat: hide deprecated versions option

fix: improve deprecated package style

feat: display deprecated versions

5.26.3 (2023-09-24)

Bug Fixes

5.26.2 (2023-08-26)

Bug Fixes

Bug Fixes

Features

Bug Fixes

Features

Bug Fixes

UI set global package on sidebar setting

5.24.1 (2023-04-24)

Bug Fixes

Features

Bug Fixes

5.23.2 (2023-04-04)

Bug Fixes

5.23.1 (2023-03-23)

Bug Fixes

Features

Bug Fixes

5.22.1 (2023-03-07)

Bug Fixes

Docs

Refactor

Bugs

renovate bot commented Sep 20, 2024 •

edited

Loading

fix global for `yarn` packages and add version to the packages on copy