chore(deps): update dependency verdaccio to v5

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
verdaccio (source)	4.12.0 -> 5.0.1

---

Release Notes

verdaccio/verdaccio

v5.0.1

Compare Source

@​@​ -0,0 +1,1992 @​@​

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

5.0.1 (2021-04-10)

Bug Fixes

• logo and favicon configuration (#​2180) (782dd1c)

5.0.0 (2021-04-09)

Features

• prepare release for v5 (#​2175) (82c5c4e)

5.0.0-alpha.7 (2021-04-08)

Bug Fixes

• ui readme missing css (#​2174) (f49ca06)
• Upgrade Node from 14.16 to 14.16.1 for security fixes (#​2172) (6ab3163), closes /github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V14.md#​14

5.0.0-alpha.6 (2021-04-06)

5.0.0-alpha.5 (2021-04-03)

5.0.0-alpha.4 (2021-04-03)

Features

• clipanion as cli (#​2160) (be2f612)

5.0.0-alpha.3 (2021-04-02)

Features

• custom protocol header (#​2156) (9c80399)

5.0.0-alpha.2 (2021-03-31)

Bug Fixes

• using correctly logging levels (#​2153) (5b6be2a)

5.0.0-alpha.1 (2021-03-30)

Features

• replace bunyan by pino.js (#​2148) (ee97dcb)

5.0.0-alpha.0 (2021-03-29)

⚠️ BREAKING CHANGES

• npm token support revisited and enabled by default (#​2145)
• drop node 8 and node 10 (#​2142)

Features

• drop node 8 and node 10 (#​2142) (43f7043)
• improve url_prefix behavior (#​2122) (15bb350)
• npm token support revisited and enabled by default (#​2145) (8cc6393)
• upgrade to commander v7 (#​2143) (3a1f608)

4.12.0 (2021-03-17)

Features

• handle kill signals nicely (#​2130) (7b6fbae)

4.11.3 (2021-03-06)

Bug Fixes

• update dependencies (#​2115) (4206572)

4.11.2 (2021-03-04)

Bug Fixes

• upgrade handlebars from 4.7.6 to 4.7.7 (#​2114) (1e6fa60)

4.11.1 (2021-02-25)

Bug Fixes

• upgrade Node from 14.15 to 14.16 for security fixes (#​2104) (156342b)

4.11.0 (2021-01-20)

Features

• enable keep alive (#​2067) (4d152ca)
• skip log static content from web (#​2027) (39376be), closes #​2026
• update @​verdaccio/ui-theme (#​2026) (2ea17ce)
• update UI theme (#​2065) (936aa30)

Bug Fixes

• update dependencies (#​2066) (f005b37)
• update docker base image node 14.15.14 (#​2049) (76e035e)

4.10.0 (2020-12-06)

Features

• enable keep alive on configuration by default (#​2014) (9171f25)
• Set bytesin log as optional (#​2013) (e2f7bb2)

Bug Fixes

• doubled request logs in node.js >= 11 (#​2012) (1e59b6a)

4.9.1 (2020-11-28)

Bug Fixes

• fix missing readme on npm7 (#​2010) (f4a85af)

4.9.0 (2020-11-22)

Features

• migrate yarn 1 to yarn 2 (#​1962) (1ece11c)
• update docker base image to node 14.15.0 (#​1992) (f901749)

Bug Fixes

• buffer deprecated warnings (#​1993) (4feaf24)
• check author if lastest is not found (#​1994) (185babc)
• package.json & yarn.lock to reduce vulnerabilities (#​1910) (cb5a8a7)
• update dependencies (#​1965) (1443b73)
• update dependencies (#​1991) (ef51294)
• update dependencies, docker base and build deps (#​2007) (6eef015)
• deps: bump @​verdaccio/ui-theme from 1.12.1 to 1.13.1 (#​1961) (f7aad33)
• update Dockerfile to Node v12.18.4 (#​1945) (b409c01)

4.8.1 (2020-08-06)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1879) (7c50d87)
• package.json & yarn.lock to reduce vulnerabilities (#​1889) (5e94478)
• update readme library (#​1892) (f75ad87)
• upgrade docker base image nodejs (#​1895) (261eab5)

4.8.0 (2020-07-16)

Features

• deps: bump @​verdaccio/ui-theme from 1.11.0 to 1.12.0 (#​1872) (0348bf6)
• ca certificate is optional for https configuration (#​1853) (912482a)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1876) (e374a62)
• revert move bodyParse to the upper level (#​1841) (#​1877) (844267c)
• update dependencies (#​1878) (3c48670)

4.7.2 (2020-06-26)

Bug Fixes

• package.json & yarn.lock to reduce vulnerabilities (#​1863) (b559d75)

4.7.1 (2020-06-22)

Bug Fixes

• move search v1 endpoint as experimental (#​1850) (0bfdeaa)

4.7.0 (2020-06-20)

Features

• npm deprecation support (#​1842) (80ade97)
• restore Node 8 support (#​1832) (56b677a)
• update ui add new languages (#​1849) (4d01831)
• update verdaccio plugins and dependencies (#​1838) (03c7feb)

Bug Fixes

• [Snyk] upgrade @​verdaccio/streams from 9.4.0 to 9.5.0 (#​1819) (1e2159a)
• move bodyParse to the upper level (#​1841) (67c31b6)
• updated nodejs version to fix vulnerability in 12.x https://nodejs.org/en/blog/vulnerability/june-2020-security-releases/ (#​1836) (aee69a9)
• upgrade mkdirp from 1.0.3 to 1.0.4 (#​1782) (50f6c71)

4.6.2 (2020-05-01)

Bug Fixes

• avoid access to sidebar without login (#​1794) (c2e0e1e)
• update core dependencies (#​1790) (f9e7f86)

4.6.1 (2020-04-27)

Bug Fixes

• improve token validation (#​1784) (416d41f)

4.6.0 (2020-04-24)

Features

• add dark mode on and chinese translation for web (#​1765) (4a81262)
• update @​verdaccio/ui-theme@​1.5.0 (#​1780) (656ec55)
• update docker node to 12.16.2 (#​1776) (61faa33)

Bug Fixes

• fatal exception and crash when log rotate signal event is called (#​1774) (1a9a12e), closes #​1709
• incorrect primary_color crash the ui (#​1771) (d689260)
• upgrade async from 3.1.1 to 3.2.0 (#​1756) (3ec8d13)
• upgrade dayjs from 1.8.20 to 1.8.21 (#​1759) (ebae410)
• upgrade dayjs from 1.8.21 to 1.8.22 (b2d00e4)

4.5.1 (2020-03-14)

Bug Fixes

• update docs to support minimum node v10 (#​1753) (17c3324)

4.5.0 (2020-03-14)

Features

• i18n on web (#​1750) (c493b31)
• add support for new search endpoint(#​1732) (9ac307a)

Bug Fixes

• adding Content-Type to response in GET /-/all (#​1697) (#​1728) (3aaa048)
• package.json & yarn.lock to reduce vulnerabilities (#​1746) (3c49777)
• update @​verdaccio/readme@​9.3.2 (#​1745) (9213526)
• update acorn@7.1.1 (#​1739) (1968fa8)
• update dependencies security warnings (#​1748) (1e664bd)
• upgrade dayjs from 1.8.19 to 1.8.20 (#​1721) (6849ef9)
• upgrade handlebars from 4.7.2 to 4.7.3 (#​1726) (11fed6d)
• upgrade mkdirp from 1.0.0 to 1.0.3 (#​1747) (981efa5)
• upgrade semver from 7.1.2 to 7.1.3 (#​1735) (64e2543)

4.4.4 (2020-02-26)

Bug Fixes

• tarball urls for web/package (fix #​1714) (#​1716) (70a93da)
• upgrade @​verdaccio/local-storage from 9.0.0 to 9.3.0 (#​1717) (1f3f8cd)
• upgrade semver from 7.1.1 to 7.1.2 (#​1719) (c3e931e)

4.4.3 (2020-02-19)

Bug Fixes

• update @​verdaccio/ui-theme@​0.3.13 (#​1710) (d94f838)
• upgrade async from 3.1.0 to 3.1.1 (#​1708) (a32e431)
• upgrade dayjs from 1.8.17 to 1.8.19 (#​1700) (5320b13)
• upgrade handlebars from 4.5.3 to 4.7.2 (#​1699) (8c2e58b)
• upgrade lockfile-lint from 2.0.1 to 2.2.0 (#​1698) (17ddf3e)
• use https to resolve mixed content errors (#​1674) (fd6c649)

4.4.2 (2020-01-11)

Bug Fixes

• use hasProxyTo to find correct uplink for tarballs (#​1644) (19d9fc2), closes #​1642 #​1642
• deps: bump @​verdaccio/local-storage from 8.5.0 to 9.0.0 (7b67bea), closes #​1663 #​1639
• deps: bump @​verdaccio/ui-theme from 0.3.10 to 0.3.11 (#​1657) (9a2fd81)
• deps: bump @​verdaccio/ui-theme from 0.3.11 to 0.3.12 (#​1657) (#​1665) (aac6709)
• updated combine url fix method (#​1647) (4f43347)

4.4.1 (2020-01-03)

Bug Fixes

• prevent issue with leading hyphen in package name - fixes #​1429 (#​1636) (f89bf27)
• warning due ui dependecy (#​1638) (fbc87fc)

4.4.0 (2019-12-15)

Bug Fixes

• search api will not set magic date header when return array (#​1598) (158de3f)

Features

• bumb up docker to node 12 (#​1622) (287ed3f)
• update @​verdaccio/ui-theme@​0.3.9 (#​1623) (1b4a5dc)

4.3.5 (2019-11-21)

Bug Fixes

• changed the exit code for info flag (#​1537) (cbea2ed)
• package.json to reduce vulnerabilities (#​1552) (cd8228b)
• package.json to reduce vulnerabilities (#​1577) (e459881)
• package.json to reduce vulnerabilities (#​1583) (2f3ba93)

4.3.4 (2019-10-23)

Bug Fixes

• minor grammatical tweak (#​1513) (35f816b)
• minor typos, formatting, and docs (#​1512) (549f474)
• security vulnerability at readme in dompurify dep (#​1532) (2ac7770)

4.3.3 (2019-10-03)

Bug Fixes

• allow add to request agentOptions (#​1506) (65d6a93)

4.3.2 (2019-10-02)

Bug Fixes

• comment out experiments from configuration files (#​1505) (3438b75)
• fixing the lint issues (#​1503) (02aee3a)
• fixing typos in comments (#​1504) (72314e4)

4.3.1 (2019-10-01)

Bug Fixes

• remove jwt from default config (#​1499) (e9616f9)
• remove jwt from docker config (#​1500) (bc6b084)

4.3.0 (2019-09-30)

Bug Fixes

• package.json to reduce vulnerabilities (#​1474) (b1cd070)

Features

• browse web package version (#​1457) (d5303f4)
• ensure every log file has at least one record (#​1414) (962d5d5)
• npm token command support (#​1427) (dbf2017)
• docker: Node.js update to 10.16.3 (#​1473) (e081a58)

4.2.2 (2019-08-25)

Bug Fixes

• mkdir failed and ec2 infinitely re-launch (342d284)
• update @​verdaccio/ui-theme@​0.2.3 (#​1451)
• use test + mkdir for strict dir check (9006146)

4.2.1 (2019-08-10)

Bug Fixes

• fixed user creation endpoint to properly import groups (50e115f)
• remove stub type definition for handlebars (de8dc43)
• unpublish and add or remove star collision (#​1434) (c264f94)
• deps: add missing prod dependency (849f5bc)

4.2.0 (2019-07-29)

Bug Fixes

• security: add secrets baseline (2b218ce)
• allows pkg names that start with dash (e319435), closes /github.com/rlidwka/sinopia/commit/9f662a69e19a15dd90f568fc3a3ebf65b33cbd80#diff-50e3aa130a4f97a42ee2cf111c7b1d9
• upgrade to 1.0.2 which solves the docker issue (aa8f1d3)

Build System

• deps: bump lodash.template from 4.4.0 to 4.5.0 (#​1384) (b453681)
• fix semver missing type on build with docker (12b60f6)
• update issue templates for use info new flag (#​1377) (495bb0a)

Features

• add new prop to audit middleware (d93e76b)
• convert project to typescript (#​1374) (66f4197)
• docker image bump to node.js 10.16 (802c796)
• plugins can throw http status codes (3c53997)
• prevent secrets from leaking to source control (9ef6808)
• update to @​verdaccio/ui-theme@​0.2.2 (9dd1c8f)

Tests

• add unit test for parser logger strings (3beb57f)

4.1.0 (2019-07-08)

Features

• parse YAML/JSON/JS config file (#​1258) (95d134b)
• plugin support to filter packages (b9ffac5), closes #​818
• chore: Included provision to show up local environment information (#​1365) (eb6bf51), closes #​1364

Tests

• increase usage of constants (2f3ec2c)
• fix broken test for validate parameters (4bf6b3b)
• relocate api spec test (8786a37)
• relocate helpers (d052bce)
• relocate notification test (596c727)
• relocate plugin storage (e7400ce)
• relocate spec test (b4c42c1)
• relocate test (3929633)
• relocate unit test (ca2e23c)
• relocate unit test cli, proxy, utils (b1eb7c6)

4.0.4 (2019-06-20)

Bug Fixes

• correctly check the keepAliveTimeout value, fixes #​1352 (#​1353) (a92bd5f)

4.0.3 (2019-06-14)

Bug Fixes

• api: return 503 to npm/yarn on uplink connection timeout (#​1331) (eb7a8e3), closes #​1328 #​720 #​1328 #​720

4.0.2 (2019-06-13)

Bug Fixes

• correctly check if the proxy setting evaluates to false (#​1336) (df834f4)
• update dependencies (e581634), closes #​1339
• update security policy details (#​1342) (ddcd89d)
• api: force authenticate on login (#​1347) (85c1bd1)
• ui: failed to load all packages after login (192fb77)

4.0.1 (2019-05-28)

Bug Fixes

• web: fix sidebar tarball protocol (#​1326) (de04463), closes #​1320

4.0.0 (2019-05-26)

Bug Fixes

• add missing pkg version and name on start up (8cf3966)
• update @​verdaccio/ui-theme:0.1.7 (8e48eea)
• warning text is hard to read when running under root (3ac038f)

Features

• create security policy (#​1322) (0e9f23d)
• prepare release v4 (#​1307) (b9506d6)
• update readme v4 (#​1312) (7686417)

4.0.0-beta.10 (2019-05-20)

Bug Fixes

• add missing pkg version and name on start up (8cf3966)

4.0.0-beta.9 (2019-05-20)

Bug Fixes

• update @​verdaccio/ui-theme:0.1.7 (8e48eea)

Features

• update readme v4 (#​1312) (7686417)

4.0.0-beta.8 (2019-05-07)

Bug Fixes

• update lock file (3c69132)

4.0.0-beta.7 (2019-05-07)

4.0.0-beta.6 (2019-05-07)

Bug Fixes

• routing is aware of reverse proxy directory #​1297 (01f8da6)

4.0.0-beta.5 (2019-04-30)

Bug Fixes

• remove unused dependencies #​1292 (f48b23f)

Features

• add some security headers for web UI (#​1295) @​juanpicado (615db0a)

4.0.0-beta.4 (2019-04-29)

Features

• replace chalk with kleur (#​1289) @​DanielRuf (ff71640)

4.0.0-beta.3 (2019-04-28)

Bug Fixes

• logo field in configuration cannot use the local file (56c70d4)
• ui: version rendering issue (40679aa)

4.0.0-beta.2 (2019-04-26)

Features

• accept web.primary_color as config option and inject into webui (#​1282) (9f8a054)

4.0.0-beta.1 (2019-04-16)

Bug Fixes

• all static files are captured by the router (86a6e5e)

4.0.0-beta.0 (2019-04-15)

Bug Fixes

• package.json to reduce vulnerabilities (#​1276) (fbe9409)
• update @​verdaccio/ui-theme@​0.0.13 (8760e18)
• update docker node to latest lts version (a5be22b)

4.0.0-alpha.7 (2019-04-06)

Bug Fixes

• package.json to reduce vulnerabilities (d99053e)

Features

• theme as plugin (#​1252) (c3c6202)

4.0.0-alpha.6 (2019-03-30)

Bug Fixes

• add new enpoind that allow download tarballs according the standard (87203f2)
• add not found if package is missing (4da21c1)
• husky commitlint not work, replace invalid test (84be869)
• potential issue on sign new jwt tokens (265849e), closes /github.com/auth0/node-jsonwebtoken/issues/326#issuecomment-288124020

Features

• add star and unstar api for 4.x (1ab7c50)
• add stars api (75c0e1e)
• engines and npm upgraded to v8 and v5 (89b0efe)

4.0.0-alpha.5 (2019-03-04)

Bug Fixes

• #​1191 overrides existing package to 0 bytes file (783fbce)
• applied jsx-max-depth (d940da4)
• applied prefer-const (4962e36)
• applied valid-describe (2b48958)
• applied valid-describe (3bda0cf)
• applied valid-expect-in-promise (c7034e7)
• broken home page (4f41fc9)
• click on logo break ui (#​1071) (5b34dc8)
• fixed container size (039a94d)
• issue on refactor router (19b0f47)
• logo on header (158666f)
• remove online fonts (29c6e56)
• remove unused dependency (3ed7a86)
• update markup@6.0.1 (009bb98)
• v4 compatible helpers (7279662)

Features

• ability to restrict unpublish action to certain users #​492 (ef50325)
• add dependencies navigation (adfcbc2)
• add dist-tags on ui (4f4720d)
• add support for profile cli command #​392 (change password) (#​1034) (f1416ed)
• added uplinks component (6c32769)
• added versions. wip (5573ff5)
• allow apiJWTmiddleware to be managed by Auth plugin (049917a)
• allow disable gravatar #​1172 (c338f46)
• allow order packages via on web #​1163 (49c6f03)
• disable node9 on circleci (9e4e8be)
• endpoints change password on ui (#​1068) (712db31)
• migrate react router from hash to history api #​1013 (1a456fb)
• not found page (#​1208) (752b870)
• package version gets sent to plugins (3943863)
• register info selector (6d96007)
• stop hit proxies on search web UI (#​1126) (2362310)
• update verdaccio author (9efd1e2)
• use verdaccio babel preset (d37fe5c)
• use verdaccio babel preset (c3af3cb)

4.0.0-alpha.1 (2018-09-27)

4.0.0-alpha.0 (2018-09-27)

Bug Fixes

• fix docker python issue #​883 (611aeb4)
• load package list undefined (#​993) (4431c47)
• Make systemd unit more production-like (#​929) (ffc9410)

Features

• add support for jwt on api (#​896) (a68d247), closes #​168
• add support for multiple protocol on protocol header (#​1014) (40e2b10)
• added prettier (#​921) (43bd622)
• check for minimum node.js version on start (#​968) (ba9dc35)
• rename database file name (#​954) (dd72120)
• replaced element-react by Material-UI (#​950) (#​985) (3639557)
• replaced lunr by lunr-mutable (#​915) (1602840)
• verdaccio update notification on CLI (#​988) (#​998) (bc04703)

4.0.0-alpha.4 (2019-01-09)

Bug Fixes

• applied jsx-max-depth (d940da4)
• applied prefer-const (4962e36)
• applied valid-describe (3bda0cf)
• applied valid-describe (2b48958)
• applied valid-expect-in-promise (c7034e7)
• broken home page (4f41fc9)
• click on logo break ui (#​1071) (5b34dc8)
• issue on refactor router (19b0f47)

Features

• add support for profile cli command #​392 (change password) (#​1034) (f1416ed)
• endpoints change password on ui (#​1068) (712db31)
• stop hit proxies on search web UI (#​1126) (2362310)

4.0.0-alpha.3 (2018-10-12)

Bug Fixes

• click on logo break ui (#​1071) (5b34dc8)

4.0.0-alpha.2 (2018-10-12)

Bug Fixes

• click on logo when using url_prefix was not working (#​996) (3ac9646)

4.0.0-alpha.1 (2018-09-27)

Bug Fixes

• fix docker python issue #​883 (611aeb4)
• load package list undefined (#​993) (4431c47)
• Make systemd unit more production-like (#​929) (ffc9410)

Features

• add support for jwt on api (#​896) (a68d247), closes #​168
• add support for multiple protocol on protocol header (#​1014) (40e2b10)
• added prettier (#​921) (43bd622)
• check for minimum node.js version on start (#​968) (ba9dc35)
• rename database file name (#​954) (dd72120)
• replaced element-react by Material-UI (#​950) (#​985) (3639557)
• replaced lunr by lunr-mutable (#​915) (1602840)
• verdaccio update notification on CLI (#​988) (#​998) (bc04703)

3.11.6 (2019-02-25)

Bug Fixes

• overrides existing package to zero bytes file #​1191 (d470cfe)
• remove unused dependency (e943d91)

3.11.5 (2019-02-21)

Bug Fixes

• debugging with all ports (c7789f1)
• package.json to reduce vulnerabilities (5fdf678)

3.11.4 (2019-02-11)

Bug Fixes

• update dependencies due to security vulnerabilities (f6f014a)

3.11.3 (2019-02-07)

Bug Fixes

• server keepAliveTimeout is in milliseconds, config value in seconds. (7f79c77)

3.11.2 (2019-02-05)

Bug Fixes

• lodash vulnerability (c35486d)

3.11.1 (2019-01-31)

Bug Fixes

• don’t make change if time fields match (#​1167) (e62ef8d)
• don’t packages that have no uplinks after reading (#​1204) (95686be)

3.11.0 (2019-01-27)

Features

• introduce server keepAliveTimeout into config files ([a359055](https://togithub.com

---

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box.

---

This PR has been generated by WhiteSource Renovate. View repository job log here.