Update verdaccio/verdaccio Docker tag to v4.13.2

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
verdaccio/verdaccio	final	minor	4.11.0 -> 4.13.2

---

Release Notes

verdaccio/verdaccio

v4.13.2

Compare Source

@​@​ -0,0 +1,1959 @​@​

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.13.2 (2022-04-16)

Bug Fixes

• update async and lodash to latest patches ([df541c4] (verdaccio/verdaccio@df541c4)) 🛡️ security update 🙏🏼 upgrade to v5 still so many downloads

[4.13.1] 🤷🏼‍♂️ This version seem was skipped, ignore it, the release for v4 is just old.

v4.13.0

Compare Source

@​@​ -0,0 +1,1945 @​@​

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.13.0 (2022-03-10)

Features

• update docker base node to 14.x in 4.x branch (#​3046) (f40ea10) by @​dotboris

v4.12.2

Compare Source

@​@​ -0,0 +1,1938 @​@​

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.12.2 (2021-06-23)

🔔🔔🔔 migrate to verdaccio 5

https://verdaccio.org/blog/2021/04/14/verdaccio-5-migration-guide

Bug Fixes

• update readme and deprecation notice (d3cd935)

v4.12.1

Compare Source

4.12.1 (2021-05-22)

Bug Fixes

• emit warning for upgrade 5.x and publish on previous (a760e68)
• update docker base 14.17.0 (6870f99)

v4.12.0

Compare Source

@​@​ -0,0 +1,1923 @​@​

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.12.0 (2021-03-17)

Features

• handle kill signals nicely (#​2130) (7b6fbae)

4.11.3 (2021-03-06)

Bug Fixes

• update dependencies (#​2115) (4206572)

4.11.2 (2021-03-04)

Bug Fixes

• upgrade handlebars from 4.7.6 to 4.7.7 (#​2114) (1e6fa60)

4.11.1 (2021-02-25)

Bug Fixes

• upgrade Node from 14.15 to 14.16 for security fixes (#​2104) (156342b)

4.11.0 (2021-01-20)

Features

• enable keep alive (#​2067) (4d152ca)
• skip log static content from web (#​2027) (39376be), closes #​2026
• update @​verdaccio/ui-theme (#​2026) (2ea17ce)
• update UI theme (#​2065) (936aa30)

Bug Fixes

• update dependencies (#​2066) (f005b37)
• update docker base image node 14.15.14 (#​2049) (76e035e)

4.10.0 (2020-12-06)

Features

• enable keep alive on configuration by default (#​2014) (9171f25)
• Set bytesin log as optional (#​2013) (e2f7bb2)

Bug Fixes

• doubled request logs in node.js >= 11 (#​2012) (1e59b6a)

4.9.1 (2020-11-28)

Bug Fixes

• fix missing readme on npm7 (#​2010) (f4a85af)

4.9.0 (2020-11-22)

Features

• migrate yarn 1 to yarn 2 (#​1962) (1ece11c)
• update docker base image to node 14.15.0 (#​1992) (f901749)

Bug Fixes

• buffer deprecated warnings (#​1993) (4feaf24)
• check author if lastest is not found (#​1994) (185babc)
• package.json & yarn.lock to reduce vulnerabilities (#​1910) (cb5a8a7)
• update dependencies (#​1965) (1443b73)
• update dependencies (#​1991) (ef51294)
• update dependencies, docker base and build deps (#​2007) (6eef015)
• deps: bump @​verdaccio/ui-theme from 1.12.1 to 1.13.1 (#​1961) (f7aad33)
• update Dockerfile to Node v12.18.4 (#​1945) (b409c01)

4.8.1 (2020-08-06)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1879) (7c50d87)
• package.json & yarn.lock to reduce vulnerabilities (#​1889) (5e94478)
• update readme library (#​1892) (f75ad87)
• upgrade docker base image nodejs (#​1895) (261eab5)

4.8.0 (2020-07-16)

Features

• deps: bump @​verdaccio/ui-theme from 1.11.0 to 1.12.0 (#​1872) (0348bf6)
• ca certificate is optional for https configuration (#​1853) (912482a)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1876) (e374a62)
• revert move bodyParse to the upper level (#​1841) (#​1877) (844267c)
• update dependencies (#​1878) (3c48670)

4.7.2 (2020-06-26)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1863) (b559d75)

4.7.1 (2020-06-22)

Bug Fixes

• move search v1 endpoint as experimental (#​1850) (0bfdeaa)

4.7.0 (2020-06-20)

Features

• npm deprecation support (#​1842) (80ade97)
• restore Node 8 support (#​1832) (56b677a)
• update ui add new languages (#​1849) (4d01831)
• update verdaccio plugins and dependencies (#​1838) (03c7feb)

Bug Fixes

• [Snyk] upgrade @​verdaccio/streams from 9.4.0 to 9.5.0 (#​1819) (1e2159a)
• move bodyParse to the upper level (#​1841) (67c31b6)
• updated nodejs version to fix vulnerability in 12.x https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/ (#​1836) (aee69a9)
• upgrade mkdirp from 1.0.3 to 1.0.4 (#​1782) (50f6c71)

4.6.2 (2020-05-01)

Bug Fixes

• avoid access to sidebar without login (#​1794) (c2e0e1e)
• update core dependencies (#​1790) (f9e7f86)

4.6.1 (2020-04-27)

Bug Fixes

• improve token validation (#​1784) (416d41f)

4.6.0 (2020-04-24)

Features

• add dark mode on and chinese translation for web (#​1765) (4a81262)
• update @​verdaccio/ui-theme@​1.5.0 (#​1780) (656ec55)
• update docker node to 12.16.2 (#​1776) (61faa33)

Bug Fixes

• fatal exception and crash when log rotate signal event is called (#​1774) (1a9a12e), closes #​1709
• incorrect primary_color crash the ui (#​1771) (d689260)
• upgrade async from 3.1.1 to 3.2.0 (#​1756) (3ec8d13)
• upgrade dayjs from 1.8.20 to 1.8.21 (#​1759) (ebae410)
• upgrade dayjs from 1.8.21 to 1.8.22 (b2d00e4)

4.5.1 (2020-03-14)

Bug Fixes

• update docs to support minimum node v10 (#​1753) (17c3324)

4.5.0 (2020-03-14)

Features

• i18n on web (#​1750) (c493b31)
• add support for new search endpoint(#​1732) (9ac307a)

Bug Fixes

• adding Content-Type to response in GET /-/all (#​1697) (#​1728) (3aaa048)
• package.json & yarn.lock to reduce vulnerabilities (#​1746) (3c49777)
• update @​verdaccio/readme@​9.3.2 (#​1745) (9213526)
• update [email protected] (#​1739) (1968fa8)
• update dependencies security warnings (#​1748) (1e664bd)
• upgrade dayjs from 1.8.19 to 1.8.20 (#​1721) (6849ef9)
• upgrade handlebars from 4.7.2 to 4.7.3 (#​1726) (11fed6d)
• upgrade mkdirp from 1.0.0 to 1.0.3 (#​1747) (981efa5)
• upgrade semver from 7.1.2 to 7.1.3 (#​1735) (64e2543)

4.4.4 (2020-02-26)

Bug Fixes

• tarball urls for web/package (fix #​1714) (#​1716) (70a93da)
• upgrade @​verdaccio/local-storage from 9.0.0 to 9.3.0 (#​1717) (1f3f8cd)
• upgrade semver from 7.1.1 to 7.1.2 (#​1719) (c3e931e)

4.4.3 (2020-02-19)

Bug Fixes

• update @​verdaccio/ui-theme@​0.3.13 (#​1710) (d94f838)
• upgrade async from 3.1.0 to 3.1.1 (#​1708) (a32e431)
• upgrade dayjs from 1.8.17 to 1.8.19 (#​1700) (5320b13)
• upgrade handlebars from 4.5.3 to 4.7.2 (#​1699) (8c2e58b)
• upgrade lockfile-lint from 2.0.1 to 2.2.0 (#​1698) (17ddf3e)
• use https to resolve mixed content errors (#​1674) (fd6c649)

4.4.2 (2020-01-11)

Bug Fixes

• use hasProxyTo to find correct uplink for tarballs (#​1644) (19d9fc2), closes #​1642 #​1642
• deps: bump @​verdaccio/local-storage from 8.5.0 to 9.0.0 (7b67bea), closes #​1663 #​1639
• deps: bump @​verdaccio/ui-theme from 0.3.10 to 0.3.11 (#​1657) (9a2fd81)
• deps: bump @​verdaccio/ui-theme from 0.3.11 to 0.3.12 (#​1657) (#​1665) (aac6709)
• updated combine url fix method (#​1647) (4f43347)

4.4.1 (2020-01-03)

Bug Fixes

• prevent issue with leading hyphen in package name - fixes #​1429 (#​1636) (f89bf27)
• warning due ui dependecy (#​1638) (fbc87fc)

4.4.0 (2019-12-15)

Bug Fixes

• search api will not set magic date header when return array (#​1598) (158de3f)

Features

• bumb up docker to node 12 (#​1622) (287ed3f)
• update @​verdaccio/ui-theme@​0.3.9 (#​1623) (1b4a5dc)

4.3.5 (2019-11-21)

Bug Fixes

• changed the exit code for info flag (#​1537) (cbea2ed)
• package.json to reduce vulnerabilities (#​1552) (cd8228b)
• package.json to reduce vulnerabilities (#​1577) (e459881)
• package.json to reduce vulnerabilities (#​1583) (2f3ba93)

4.3.4 (2019-10-23)

Bug Fixes

• minor grammatical tweak (#​1513) (35f816b)
• minor typos, formatting, and docs (#​1512) (549f474)
• security vulnerability at readme in dompurify dep (#​1532) (2ac7770)

4.3.3 (2019-10-03)

Bug Fixes

• allow add to request agentOptions (#​1506) (65d6a93)

4.3.2 (2019-10-02)

Bug Fixes

• comment out experiments from configuration files (#​1505) (3438b75)
• fixing the lint issues (#​1503) (02aee3a)
• fixing typos in comments (#​1504) (72314e4)

4.3.1 (2019-10-01)

Bug Fixes

• remove jwt from default config (#​1499) (e9616f9)
• remove jwt from docker config (#​1500) (bc6b084)

4.3.0 (2019-09-30)

Bug Fixes

• package.json to reduce vulnerabilities (#​1474) (b1cd070)

Features

• browse web package version (#​1457) (d5303f4)
• ensure every log file has at least one record (#​1414) (962d5d5)
• npm token command support (#​1427) (dbf2017)
• docker: Node.js update to 10.16.3 (#​1473) (e081a58)

4.2.2 (2019-08-25)

Bug Fixes

• mkdir failed and ec2 infinitely re-launch (342d284)
• update @​verdaccio/ui-theme@​0.2.3 (#​1451)
• use test + mkdir for strict dir check (9006146)

4.2.1 (2019-08-10)

Bug Fixes

• fixed user creation endpoint to properly import groups (50e115f)
• remove stub type definition for handlebars (de8dc43)
• unpublish and add or remove star collision (#​1434) (c264f94)
• deps: add missing prod dependency (849f5bc)

4.2.0 (2019-07-29)

Bug Fixes

• security: add secrets baseline (2b218ce)
• allows pkg names that start with dash (e319435), closes /github.com/rlidwka/sinopia/commit/9f662a69e19a15dd90f568fc3a3ebf65b33cbd80#diff-50e3aa130a4f97a42ee2cf111c7b1d9
• upgrade to 1.0.2 which solves the docker issue (aa8f1d3)

Build System

• deps: bump lodash.template from 4.4.0 to 4.5.0 (#​1384) (b453681)
• fix semver missing type on build with docker (12b60f6)
• update issue templates for use info new flag (#​1377) (495bb0a)

Features

• add new prop to audit middleware (d93e76b)
• convert project to typescript (#​1374) (66f4197)
• docker image bump to node.js 10.16 (802c796)
• plugins can throw http status codes (3c53997)
• prevent secrets from leaking to source control (9ef6808)
• update to @​verdaccio/ui-theme@​0.2.2 (9dd1c8f)

Tests

• add unit test for parser logger strings (3beb57f)

4.1.0 (2019-07-08)

Features

• parse YAML/JSON/JS config file (#​1258) (95d134b)
• plugin support to filter packages (b9ffac5), closes #​818
• chore: Included provision to show up local environment information (#​1365) (eb6bf51), closes #​1364

Tests

• increase usage of constants (2f3ec2c)
• fix broken test for validate parameters (4bf6b3b)
• relocate api spec test (8786a37)
• relocate helpers (d052bce)
• relocate notification test (596c727)
• relocate plugin storage (e7400ce)
• relocate spec test (b4c42c1)
• relocate test (3929633)
• relocate unit test (ca2e23c)
• relocate unit test cli, proxy, utils (b1eb7c6)

4.0.4 (2019-06-20)

Bug Fixes

• correctly check the keepAliveTimeout value, fixes #​1352 (#​1353) (a92bd5f)

4.0.3 (2019-06-14)

Bug Fixes

• api: return 503 to npm/yarn on uplink connection timeout (#​1331) (eb7a8e3), closes #​1328 #​720 #​1328 #​720

4.0.2 (2019-06-13)

Bug Fixes

• correctly check if the proxy setting evaluates to false (#​1336) (df834f4)
• update dependencies (e581634), closes #​1339
• update security policy details (#​1342) (ddcd89d)
• api: force authenticate on login (#​1347) (85c1bd1)
• ui: failed to load all packages after login (192fb77)

4.0.1 (2019-05-28)

Bug Fixes

• web: fix sidebar tarball protocol (#​1326) (de04463), closes #​1320

4.0.0 (2019-05-26)

Bug Fixes

• add missing pkg version and name on start up (8cf3966)
• update @​verdaccio/ui-theme:0.1.7 (8e48eea)
• warning text is hard to read when running under root (3ac038f)

Features

• create security policy (#​1322) (0e9f23d)
• prepare release v4 (#​1307) (b9506d6)
• update readme v4 (#​1312) (7686417)

4.0.0-beta.10 (2019-05-20)

Bug Fixes

• add missing pkg version and name on start up (8cf3966)

4.0.0-beta.9 (2019-05-20)

Bug Fixes

• update @​verdaccio/ui-theme:0.1.7 (8e48eea)

Features

• update readme v4 (#​1312) (7686417)

4.0.0-beta.8 (2019-05-07)

Bug Fixes

• update lock file (3c69132)

4.0.0-beta.7 (2019-05-07)

4.0.0-beta.6 (2019-05-07)

Bug Fixes

• routing is aware of reverse proxy directory #​1297 (01f8da6)

4.0.0-beta.5 (2019-04-30)

Bug Fixes

• remove unused dependencies #​1292 (f48b23f)

Features

• add some security headers for web UI (#​1295) @​juanpicado (615db0a)

4.0.0-beta.4 (2019-04-29)

Features

• replace chalk with kleur (#​1289) @​DanielRuf (ff71640)

4.0.0-beta.3 (2019-04-28)

Bug Fixes

• logo field in configuration cannot use the local file (56c70d4)
• ui: version rendering issue (40679aa)

4.0.0-beta.2 (2019-04-26)

Features

• accept web.primary_color as config option and inject into webui (#​1282) (9f8a054)

4.0.0-beta.1 (2019-04-16)

Bug Fixes

• all static files are captured by the router (86a6e5e)

4.0.0-beta.0 (2019-04-15)

Bug Fixes

• package.json to reduce vulnerabilities (#​1276) (fbe9409)
• update @​verdaccio/ui-theme@​0.0.13 (8760e18)
• update docker node to latest lts version (a5be22b)

4.0.0-alpha.7 (2019-04-06)

Bug Fixes

• package.json to reduce vulnerabilities (d99053e)

Features

• theme as plugin (#​1252) (c3c6202)

4.0.0-alpha.6 (2019-03-30)

Bug Fixes

• add new enpoind that allow download tarballs according the standard (87203f2)
• add not found if package is missing (4da21c1)
• husky commitlint not work, replace invalid test (84be869)
• potential issue on sign new jwt tokens (265849e), closes /github.com/auth0/node-jsonwebtoken/issues/326#issuecomment-288124020

Features

• add star and unstar api for 4.x (1ab7c50)
• add stars api (75c0e1e)
• engines and npm upgraded to v8 and v5 (89b0efe)

4.0.0-alpha.5 (2019-03-04)

Bug Fixes

• #​1191 overrides existing package to 0 bytes file (783fbce)
• applied jsx-max-depth (d940da4)
• applied prefer-const (4962e36)
• applied valid-describe (2b48958)
• applied valid-describe (3bda0cf)
• applied valid-expect-in-promise (c7034e7)
• broken home page (4f41fc9)
• click on logo break ui (#​1071) (5b34dc8)
• fixed container size (039a94d)
• issue on refactor router (19b0f47)
• logo on header (158666f)
• remove online fonts (29c6e56)
• remove unused dependency (3ed7a86)
• update [email protected] (009bb98)
• v4 compatible helpers (7279662)

Features

• ability to restrict unpublish action to certain users #​492 (ef50325)
• add dependencies navigation (adfcbc2)
• add dist-tags on ui (4f4720d)
• add support for profile cli command #​392 (change password) (#​1034) (f1416ed)
• added uplinks component (6c32769)
• added versions. wip (5573ff5)
• allow apiJWTmiddleware to be managed by Auth plugin (049917a)
• allow disable gravatar #​1172 (c338f46)
• allow order packages via on web #​1163 (49c6f03)
• disable node9 on circleci (9e4e8be)
• endpoints change password on ui (#​1068) (712db31)
• migrate react router from hash to history api #​1013 (1a456fb)
• not found page (#​1208) (752b870)
• package version gets sent to plugins (3943863)
• register info selector (6d96007)
• stop hit proxies on search web UI (#​1126) (2362310)
• update verdaccio author (9efd1e2)
• use verdaccio babel preset (d37fe5c)
• use verdaccio babel preset (c3af3cb)

4.0.0-alpha.1 (2018-09-27)

4.0.0-alpha.0 (2018-09-27)

Bug Fixes

• fix docker python issue #​883 (611aeb4)
• load package list undefined (#​993) (4431c47)
• Make systemd unit more production-like (#​929) (ffc9410)

Features

• add support for jwt on api (#​896) (a68d247), closes #​168
• add support for multiple protocol on protocol header (#​1014) (40e2b10)
• added prettier (#​921) (43bd622)
• check for minimum node.js version on start (#​968) (ba9dc35)
• rename database file name (#​954) (dd72120)
• replaced element-react by Material-UI (#​950) (#​985) (3639557)
• replaced lunr by lunr-mutable (#​915) (1602840)
• verdaccio update notification on CLI (#​988) (#​998) (bc04703)

4.0.0-alpha.4 (2019-01-09)

Bug Fixes

• applied jsx-max-depth (d940da4)
• applied prefer-const (4962e36)
• applied valid-describe (3bda0cf)
• applied valid-describe (2b48958)
• applied valid-expect-in-promise (c7034e7)
• broken home page (4f41fc9)
• click on logo break ui (#​1071) (5b34dc8)
• issue on refactor router (19b0f47)

Features

• add support for profile cli command #​392 (change password) (#​1034) (f1416ed)
• endpoints change password on ui (#​1068) (712db31)
• stop hit proxies on search web UI (#​1126) (2362310)

4.0.0-alpha.3 (2018-10-12)

Bug Fixes

• click on logo break ui (#​1071) (5b34dc8)

4.0.0-alpha.2 (2018-10-12)

Bug Fixes

• click on logo when using url_prefix was not working (#​996) (3ac9646)

4.0.0-alpha.1 (2018-09-27)

Bug Fixes

• fix docker python issue #​883 (611aeb4)
• load package list undefined (#​993) (4431c47)
• Make systemd unit more production-like (#​929) (ffc9410)

Features

• add support for jwt on api (#​896) (a68d247), closes #​168
• add support for multiple protocol on protocol header (#​1014) (40e2b10)
• added prettier (#​921) (43bd622)
• check for minimum node.js version on start (#​968) (ba9dc35)
• rename database file name (#​954) (dd72120)
• replaced element-react by Material-UI (#​950) (#​985) (3639557)
• replaced lunr by lunr-mutable (#​915) (1602840)
• verdaccio update notification on CLI (#​988) (#​998) (bc04703)

3.11.6 (2019-02-25)

Bug Fixes

• overrides existing package to zero bytes file #​1191 (d470cfe)
• remove unused dependency (e943d91)

3.11.5 (2019-02-21)

Bug Fixes

• debugging with all ports (c7789f1)
• package.json to reduce vulnerabilities (5fdf678)

3.11.4 (2019-02-11)

Bug Fixes

• update dependencies due to security vulnerabilities (f6f014a)

3.11.3 (2019-02-07)

Bug Fixes

• server keepAliveTimeout is in milliseconds, config value in seconds. (7f79c77)

3.11.2 (2019-02-05)

Bug Fixes

• lodash vulnerability (c35486d)

3.11.1 (2019-01-31)

Bug Fixes

• don’t make change if time fields match (#​1167) (e62ef8d)
• don’t packages that have no uplinks after reading (#​1204) (95686be)

3.11.0 (2019-01-27)

Features

• introduce server keepAliveTimeout into config files (a359055)

3.10.2 (2019-01-22)

Bug Fixes

• add logic to catch clause (#​1183) (056d396)
• adds _id to normalise metadata (#​1194) (e2fa581)
• remove some unneeded checks (#​1182) (ab56d75)
• remove unused object (#​1185) (e9b3907)
• remove unused parameters from processBody method invocation (#​1184) (064f7cf)
• remove use of comma separator (#​1186) (f20fefa)
• remove useless assignment to local variable emailCopy (#​1181) (13b8347)

3.10.1 (2018-12-20)

Bug Fixes

• remove useless secureProtocol option ([#​1158](https://t

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.