Update devDependency verdaccio to v5.33.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
verdaccio (source)	5.29.2 -> 5.33.0

---

Release Notes

verdaccio/verdaccio (verdaccio)

v5.33.0

Compare Source

ℹ️ℹ️ℹ️ℹ️ℹ️ℹ️

There will be no more updates for version 5.x. Please upgrade to version 6.x. Aside from requiring Node.js 18 as a minimum, there are no breaking changes.

ℹ️ℹ️ℹ️ℹ️ℹ️ℹ️

Bug Fixes

• deps: update dependency @​cypress/request to v3.0.5 (#​4830) (5e16f89)
• deps: update dependency async to v3.2.6 (#​4831) (3ce57aa)
• update dependencies 5.x (#​4964) (fd7fd2f)

v5.32.2

Compare Source

5.32.2 (2024-09-12)

Bug Fixes

• deps: update core verdaccio dependencies (5.x) (#​4825) (f17b5a9) (prepare for release v6)
• deps: update dependency express to v4.21.0 (#​4815) (f8e5395)

v5.32.1

Compare Source

5.32.1 (2024-08-02)

Bug Fixes

• deps: update core verdaccio dependencies (#​4752) (960924b)
  • fix(middleware): link to favicon in template https://github.com/verdaccio/verdaccio/pull/4744 by @​mbtools fix #​4736

v5.32.0

Compare Source

🚧 pending add details of each update

Features

• update core deps (#​4726) (6dc8e91)

Bug Fixes

• deps: update core verdaccio dependencies (#​4737) (e062a02)
• deps: update core verdaccio dependencies (5.x) (#​4708) (301deca)

v5.31.1

Compare Source

5.31.1 (2024-06-06)

Bug Fixes

• deps: update core verdaccio dependencies (#​4668) (9e3a79d)
  • patch(core/url): Throw if VERDACCIO_FORWARDED_PROTO resolves to an array https://github.com/verdaccio/verdaccio/pull/4613. by @​Tobbe
  • fix: log spacing depending on the FORMAT and COLORS options #​4631 by @​somethingSTRANGE
• deps: update node.js to v20.14.0 (#​4663) (6591927)
• set engine to 14.21.3 (6cf6064)
• set engine to Node.js 14 (9a6d5b3)

v5.31.0

Compare Source

(🗞️ hey (renovate/dependabot/other bots) users, read this)

ℹ️ Important changes added to the .verdaccio-db.json and token signature for users that run on Node.js 22 or higher (in the future 🙃 ) please read
https://verdaccio.org/docs/configuration/#.verdaccio-db

TLDR:

• Enforced for users that runs verdaccio via npmjs, for all Docker image isuers, verdaccio uses Node.js LTS 21 and the secret migration is voluntary until next major release.
• For Node.js 21 or lower a new deprecation will appear [VERWAR007] VerdaccioDeprecation: the secret length is too lon... to remove it please read the link above
• For Node.js 22 if you have already a storage with .verdaccio-db.json and the token inside does not complies with the length (read link above) the application startup will fail with fatal error (Error: Invalid storage secret key length, must be 32 characters long but is....)

In both cases by updating the secret all previously tokens will get invalid, in your benefit a new legacy signature will be applied and is more secure than the old one (generating tokens with salt).

For existing installations that have no issues by invalidating tokens is recommended to add to the config.yaml the following setup, this will automatically generate a new the secret once is started, could be removed aftewards, if all went succesfull the [VERWAR007] deprecation will not be displayed anymore.

security:
  api:
    migrateToSecureLegacySignature: true

Any new installation should not worry about this, new token signature and secret (32 characters) is applied by default.

Features

• add property forceMigrateToSecureLegacySignature (#​4625) (2941522) https://github.com/verdaccio/verdaccio/issues/4601

Bug Fixes

• deps: update dependency express to v4.19.2 (#​4596) (4123dbc)

v5.30.3

Compare Source

5.30.3 (2024-04-06)

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Bug Fixes

• upgrade docker file base image to v20.12.1 (#​4576) (513b10d)

v5.30.2

Compare Source

5.30.2 (2024-03-24)

Same as https://github.com/verdaccio/verdaccio/releases/tag/v5.30.0

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Bug Fixes

• update @​verdaccio/search-indexer engine restrictions ([1ceb9f9] https://github.com/verdaccio/verdaccio/pull/4560 (verdaccio/verdaccio@1ceb9f9)) (remove engine strict message in older Node.js versions)

v5.30.1

Compare Source

5.30.1 (2024-03-24)

Same as https://github.com/verdaccio/verdaccio/releases/tag/v5.30.0

Bug Fixes

• remove search dependency (dependency requires Node.js 18 and is not used) (#​4560) (a9cfae5)

v5.30.0

Compare Source

🎉 3 new contributors

Be warned, if you are using (or cannot upgrade to major) Node.js 12 (only if you install from npmjs) please do not upgrade to this version, the minimum is now Node.js 14 (due dependency reasons are out my hand), the recommendation is always go for LTS releases anyway which at this moment is Node.js 20. For context if you are using the Docker image ignore this warning, the Dockerfile uses Node.js 20 as base image.

ℹ️ Verdaccio v6.0.0-beta.2 has been released, ready for user test to ensure the best backward compatibility, help us by trying it out.

Features

On the versions view there is a new filter that allows semantic versioning filtering (feedback is welcome)

• deps: update core verdaccio dependencies (5.x) (#​4558) (72c3ab7)

Versions filter by semver range

Bug Fixes

• fix multiple user interface issues in dark mode (css styles)
• newline after version command (#​4543) (c478324) by @​aseerkt
• deps: update core verdaccio dependencies (#​4530) (7206f84)
  • fix config builder erroring when passed partial config https://github.com/verdaccio/verdaccio/pull/4552 by @​ItamarGronich
  • Avoid displaying "prettify pipeline error" if there is no error https://github.com/verdaccio/verdaccio/pull/4551 by @​divdavem
• deps: update core verdaccio dependencies (5.x) (#​4539) (da50302)
• deps: update dependency envinfo to v7.11.1 (#​4527) (c2604e7)
• deps: update dependency express to v4.18.3 (#​4528) (e07c352)
• deps: update dependency semver to v7.6.0 (#​4529) (43d3c5e)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Post-upgrade command 'npx beachball@latest change --no-fetch --no-commit --type none --message '{{{commitMessage}}}'' has not been added to the allowed list in allowedPostUpgradeCommands

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (5.33.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.