Skip to content

Latest commit

 

History

History
830 lines (387 loc) · 27.1 KB

CHANGELOG.md

File metadata and controls

830 lines (387 loc) · 27.1 KB

Change Log

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.0.2 (2017-09-06)

Bug Fixes

  • extract: preserve executable perms on extracted files (19b3dfd)

Performance Improvements

  • replace some calls to .match() with .starts/endsWith() (#115) (192a02f)

6.0.1 (2017-08-22)

Bug Fixes

  • finalize: insist on getting a package.json (f72ee91)

6.0.0 (2017-08-19)

Bug Fixes

  • tar: bring back the .gitignore -> .npmignore logic (#113) (0dd518e)

BREAKING CHANGES

  • tar: this reverts a previous change to disable this feature.

5.0.1 (2017-08-17)

Bug Fixes

  • tar: chown directories on extract as well (2fa4598)

5.0.0 (2017-08-16)

Bug Fixes

  • registry: Pass maxSockets options down (#110) (3f05b79)

Features

  • deps: replace tar-fs/tar-stream with tar@3 (28c80a9)
  • tar: switch to tarv3 (53899c7)

BREAKING CHANGES

  • tar: this changes the underlying tar library, and thus may introduce some subtle low-level incompatibility. Also:

  • The tarball packer built into pacote works much closer to how the one npm injects does.

  • Special characters on Windows will now be escaped the way tar(1) usually does: by replacing them with the 0xf000 masked character on the way out.

  • Directories won't be chowned.

4.0.0 (2017-06-29)

Bug Fixes

  • extract: revert uid/gid change (41852e0)

BREAKING CHANGES

  • extract: behavior for setting uid/gid on extracted contents was restored to what it was in pacote@2

3.0.0 (2017-06-29)

Bug Fixes

  • extract: always extract as current user gid/uid (6fc01a5)

BREAKING CHANGES

  • extract: pacote will no longer set ownership of extracted contents -- uid/gid will only be used for the cache and other internal details.

2.7.38 (2017-06-29)

Bug Fixes

  • manifest: bump npm-pick-manifest for loose semver fix (b3d45ef)

2.7.37 (2017-06-29)

Bug Fixes

  • deps: bump deps for fixes (f156655)

2.7.36 (2017-06-10)

Bug Fixes

  • deps: update tar-fs with the special characters patch (#102) (ed43aa3)

2.7.35 (2017-06-09)

Bug Fixes

  • registry: only print one 199 warning (#100) (b395138)

2.7.34 (2017-06-09)

Bug Fixes

  • git: whitelist specific shallow-cloneable hosts (b210cc8)

2.7.33 (2017-06-08)

Bug Fixes

  • git: better error reporting when ls-remote fails (10aae8f)

2.7.32 (2017-06-07)

Bug Fixes

  • registry: print both 111 and 199 warnings (2f8c201)

2.7.31 (2017-06-06)

Bug Fixes

  • extract: always return a bluebird promise (06ca91d)
  • registry: bump make-fetch-happen for local cache header issue fix (868615c)

2.7.30 (2017-06-05)

Bug Fixes

  • ssri: bump ssri for bugfix (70a859c)

2.7.29 (2017-06-05)

Bug Fixes

  • registry: use cert instead of certfile opt (a45880d)

2.7.28 (2017-06-05)

Bug Fixes

  • git: limit ls-remote output to heads/tags (#97) (c1e3dcd)
  • proxy: send certificate authority, key and other options (#95) (c4b6128)
  • registry: add support for global auth and _auth token (#96) (7919fb7)
  • registry: emit npm-session header (#98) (9816b18)

2.7.27 (2017-06-01)

Bug Fixes

  • git: fix semver range detection. oops (76d9233)

2.7.26 (2017-06-01)

Bug Fixes

  • git: hash was not being replaced/appended correctly (6fcbed5)

2.7.25 (2017-05-31)

Bug Fixes

  • git: git deps were getting _resolved without shasums (96f0675)

2.7.24 (2017-05-31)

Bug Fixes

  • deps: update dep versions with new patches (dc2e4ff)

2.7.23 (2017-05-31)

Bug Fixes

  • git: fix ls-remote command and throw away ^{} junk (62ba84d)
  • git: use the parsed git committish from npa (77a676a)

2.7.22 (2017-05-31)

Bug Fixes

  • git: accept shortened git hashes (#91) (4466388)

2.7.21 (2017-05-25)

Bug Fixes

  • registry: stop URIEncoding username/password (011c9a2)

2.7.20 (2017-05-25)

Bug Fixes

  • registry: encode username and password for auth (c48b651)

2.7.19 (2017-05-25)

Bug Fixes

  • registry: respect alwaysAuth (150788a)

2.7.18 (2017-05-25)

Bug Fixes

  • cache: pass uid/gid settings through to mfh (d8845df)
  • deps: update m-f-h for cache opts fix (faab6cd)

2.7.17 (2017-05-25)

Bug Fixes

2.7.16 (2017-05-24)

Bug Fixes

  • deps: pull in various fixes from deps (4354703)

2.7.15 (2017-05-24)

Bug Fixes

  • proxy: bump m-f-h with more patches (26d4170)

2.7.14 (2017-05-24)

Bug Fixes

  • proxy: pull in new m-f-h with fixed http proxies (d6a14e0)

2.7.13 (2017-05-23)

Bug Fixes

  • deps: bump dep versions to fix http redirect issues (b23a9fa)

2.7.12 (2017-05-16)

Bug Fixes

  • fetch: fix default userAgent (4b9d344)
  • registry: log failed requests too (0f23f06)
  • remote: send a useful pkg id header for remote tarballs (ac13356)

2.7.11 (2017-05-12)

Bug Fixes

  • fetch: make it play nicer with bundlers (67cd713)

2.7.10 (2017-05-12)

Bug Fixes

  • logging: shhhhhhh (e7ea56e)
  • manifest: _resolved is the only main field we do not overwrite (4c12421)

2.7.9 (2017-05-09)

Bug Fixes

  • git: Resolve to ref git specs w/o committishes (#88) (cb885f5), closes #88

2.7.8 (2017-05-07)

Bug Fixes

  • git: integrity hash was not always emitted (97ed9e1)

2.7.7 (2017-05-06)

Bug Fixes

  • auth: redirects no longer send auth to different host (82e78c5)

2.7.6 (2017-05-05)

Bug Fixes

  • git: only use longpaths on win32 because old gits (32846fc)

2.7.5 (2017-05-04)

Bug Fixes

  • registry-key: Use pathname instead of path in registryKey (#85) (5339831)

2.7.4 (2017-05-04)

Bug Fixes

  • pick-manifest: fix =1.2.3 semver range requests (dd6911c)

2.7.3 (2017-05-04)

Bug Fixes

  • pick-manifest: spaces in requested version are now trimmed out (6422b28)

2.7.2 (2017-05-04)

Bug Fixes

  • extract: missing or corrupted content properly re-fetched again (46f60c2)

2.7.1 (2017-05-01)

Bug Fixes

  • logging: log specs correctly on extract (4b5bab0)
  • manifest: obey opts.preferOnline when fetching from memoized (26928a7)

2.7.0 (2017-04-29)

Bug Fixes

  • registry: stop using integrity hashes for metadata. again. (4595ab2)

Features

  • manifest: include _shasum for legacy compat (b3a7eed)

2.6.0 (2017-04-29)

Features

  • manifest: annotate manifests with _from (e45e968)

2.5.0 (2017-04-28)

Bug Fixes

  • registry: JSON text is not a valid header value (78951ea)

Features

  • memoization: allow injection and control of memoizers (d8a2be7)

2.4.0 (2017-04-27)

Bug Fixes

  • tests: nicer error message on registry 404 (e8e71c8)

Features

  • auth: added basic auth and always-auth support (548aeb5)
  • proxy: proxy support for registry and remote deps (3766bbb)

2.3.2 (2017-04-26)

Bug Fixes

  • deps: reduce deps size with m-f-h upgrade (ba75461)

2.3.1 (2017-04-26)

Bug Fixes

  • git: another attempt at fixing EPERM b.s. (e445bef)

2.3.0 (2017-04-26)

Bug Fixes

  • git: had ENOTSUP error on windows (ee17c35)
  • memoization: actually memoize package metadata (e2078c0)

Features

  • memoization: better packument memoization + pacote.clearMemoized() (eb1bd4f)

2.2.2 (2017-04-24)

Bug Fixes

  • prefetch: pull in new cacache + fix prefetch hasContent call (9f476b8)

2.2.1 (2017-04-23)

Bug Fixes

  • finalize: pass on engines/cpu/os (0a73c78)

2.2.0 (2017-04-22)

Bug Fixes

  • git: fix shortcut fallback order again (5759d40)
  • registry: fix infinite manifetch loop (6c6a62b)

Features

  • manifest: opts.fullMetadata to get unfiltered manifests (ff2945b)

2.1.2 (2017-04-20)

2.1.1 (2017-04-19)

Bug Fixes

  • git: use sshurl instead of ssh for ssh clones (ff20803)
  • notice: only log npm-notice if the packument came from network (eeeb411)
  • registry: improve 404 error messages (6a5cbdb)

2.1.0 (2017-04-18)

Bug Fixes

  • cache: bump deps for cache fixes (9596434)

Features

  • warn: http warning headers now logged (f22ce1d)

2.0.5 (2017-04-18)

Bug Fixes

  • file: oops, the type for these is file (e7a3d35)

2.0.4 (2017-04-18)

Bug Fixes

  • deps: remove normalize-git-url (12d464a)
  • git: Correctly read in the HEAD ref after cloning (dbe1b15)
  • git: The full clone path doesn't have _resolved set (ddce561)
  • manifest: no _from ever (15087c4)

2.0.3 (2017-04-15)

Bug Fixes

  • manifest: meh just shove _from in there (4396f09)
  • registry: include CI header (86ad911)
  • registry: include npm-scope header (574cd93)
  • registry: make sure to send referer header (2d3aaac)

2.0.2 (2017-04-15)

Bug Fixes

  • directory: fix default pack-dir and write a test for it (9d9266f)
  • extract: brainfart with extractByManifest fixed. lol. (a1367fb)

2.0.1 (2017-04-15)

Bug Fixes

  • tarball: missed the local->tarball rename (ac42dc4)

2.0.0 (2017-04-15)

Bug Fixes

  • api: use npa@5 for spec parsing (#78) (3f56298)
  • deprecated: remove underscore from manifest._deprecated (9f4af93)
  • directory: add _resolved to directory manifests (1d305db)
  • directory: return null instead of throwing (d35630d)
  • finalize: don't try to cache manifests we can't get a good key for (8ab1758)
  • finalize: refactored finalize-manifest code + add _integrity=false sentinel (657b7fa)
  • git: cleaner handling of git tarball streams when caching (11acd0a)
  • git: emit manifests from git tarball handler (b139d4b)
  • git: fix .git exclusion, set mtime = 0 to make tarballs idempotent (9a9fa1b)
  • git: fix fallback order and only fall back on hosted shortcuts (551cb33)
  • git: fix filling-out of git manifests (95e807c)
  • git: got dir packer option working with git (7669b3e)
  • headers: nudge around some headers to make things behave (db1e0a1)
  • manifest: get rid of resolved-with-non-error warning (d4d4917)
  • manifest: stop using digest for manifests (4ddd2f5)
  • opts: bring opt-check up to date (564419e)
  • opts: rename refreshCache to preferOnline cause much clearer (94171d6)
  • prefetch: fall back to the _integrity in the manifest if none calculated (083ac79)
  • prefetch: if there's no stream, just skip (for directory) (714de91)
  • registry: fix error handling for registry tarballs (e69539f)
  • registry: nudging logging stuff around a bit (61d62cc)
  • registry: only send auth info if tarball is hosted on the same registry (1de5a2b)
  • registry: redirect tarball urls to provided registry port+protocol if same host (f50167e)
  • registry: support memoizing packuments (e7fff31)
  • registry: treat registry cache as "private" -- bumps m-f-h (6fa1503)

Features

  • directory: implement local dir packing (017d989)
  • fetch: bump make-fetch-happen for new restarts (cf90716)
  • git: support pulling in git submodules (5825d33)
  • integrity: replace http client (#72) (189cdd2)
  • prefetch: return cache-related info on prefetch (623b7f3)
  • registry: allow injection of request agents (805e5ae)
  • registry: fast request pooling (321f84b)
  • registry: registry requests now follow cache spec more closely, respect Age, etc (9e47098)

BREAKING CHANGES

  • api: spec objects can no longer be realize-package-specifier objects. Pass a string or generate npa@>=5 spec objects to pass in.

  • integrity: This PR replaces a pretty fundamental chunk of pacote.

  • Caching now follows standard-ish cache rules for http-related requests.

  • manifest() no longer includes the _shasum field. It's been replaced by _integrity, which is a Subresource Integrity hash string containing equivalent data. These strings can be parsed and managed using https://npm.im/ssri.

  • Any functions that accepted opts.digest and/or opts.hashAlgorithm now expect opts.integrity instead.

  • Packuments and finalized manifests are now cached using sha512. Tarballs can start using that hash (or any other more secure hash) once registries start supporting them: packument.dist.integrity will be prioritized over packument.shasum.

  • If opts.offline is used, a ENOCACHE error will be returned.

1.0.0 (2017-03-17)

Bug Fixes

  • extract-stream: adapt to tar-fs api (aa21308)
  • add 'use strict' to all .js files (#26) (021bd59)
  • cache: this is really a user error, so just throw (5c9c0fa)
  • deps: cacache@5.0.3 (37cddc5)
  • deps: tar-fs@1.15.1 (e0d853a)
  • docs: correct fixtures table (#57) (23d2eb4)
  • extract: correctly detect digest cache misses (ec6672b)
  • extract: fixed race condition (14fd2a8)
  • finalize-manifest: use digest to uniquify cached manifests (931a9cb)
  • http: Fixed cache-related race condition (b70a4b1)
  • manifest: dir manifests should throw ENOPACKAGEJSON (b06882d)
  • manifest: ETARGET when no packages match (ea2127d)
  • manifest: local manifest fn should return a promise (c700622)
  • manifest: retry registry manifests once on ETARGET (#66) (3b99adc)
  • prefetch: hashAlgorithm is required for hasContent (f03d51c)
  • request: report cache write errors on end (c102b86)

Features

  • api: support pre-realized specifiers as specs (#62) (1d5bf39)
  • cache: grabbing info and hasContent (a559711)
  • deps: minimatch@3.0.3 (2bb8cd5)
  • deps: normalize-package-data@2.3.5 (4250e0d)
  • directory: directory dep support (#68) (6d5307a)
  • git: baseline git support (#69) (6d7eaf5)
  • handlers: added remote tarball support (#64) (add1808)
  • local: local tarball support (#67) (e50d625)
  • manifest: handle deprecation notice (#60) (db82dae)
  • manifest: standardize manifest format (3dd9a72)
  • manifest: switch to cacache for caching (8ba7249)
  • prefetch: added tarball prefetch support (26c34ce)
  • request: accept maxSockets opt (3987807)
  • scopes: new scopeTargets option (#59) (b5db7ae)

Performance Improvements

  • finalize-manifest: cache finalized manifests (fa3c430)

BREAKING CHANGES

  • manifest: Toplevel APIs now return Promises instead of using callbacks.