fix: npm7 audit fix and bulk endpoint (#2426)

* fix: npm7 audit fix and bulk endpoint * chore: update registry * chore: update registry
verdaccio · Sep 7, 2021 · 2c59091 · 2c59091
1 parent 1308ab2
commit 2c59091
Show file tree

Hide file tree

Showing 9 changed files with 45 additions and 27 deletions.
diff --git a/.github/workflows/docker-publish-pre-check.yml b/.github/workflows/docker-publish-pre-check.yml
@@ -11,7 +11,7 @@ jobs:
     - name: Build
       run: docker build .
       env:
-        VERDACCIO_BUILD_REGISTRY: https://registry.verdaccio.org
+        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
 
   testVerdaccio:
     name: Test Verdaccio Publish

diff --git a/.pnp.js b/.pnp.js
diff --git a/.yarn/cache/node-fetch-npm-2.6.0-29c7a53447-dd9f586a9f.zip b/.yarn/cache/node-fetch-npm-2.6.0-29c7a53447-dd9f586a9f.zip
diff --git a/.yarn/cache/verdaccio-audit-npm-10.0.0-449c810834-60969a3c26.zip b/.yarn/cache/verdaccio-audit-npm-10.0.0-449c810834-60969a3c26.zip
diff --git a/.yarn/cache/verdaccio-audit-npm-10.0.1-b900394416-1b3203c893.zip b/.yarn/cache/verdaccio-audit-npm-10.0.1-b900394416-1b3203c893.zip
diff --git a/.yarnrc.yml b/.yarnrc.yml
@@ -8,7 +8,7 @@ httpRetry: 10
 
 httpTimeout: 100000
 
-npmRegistryServer: "https://registry.verdaccio.org"
+npmRegistryServer: "https://registry.npmjs.org"
 
 plugins:
   - path: .yarn/plugins/@yarnpkg/plugin-workspace-tools.cjs

diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 FROM --platform=${BUILDPLATFORM:-linux/amd64} node:14.17.5-alpine as builder
 
 ENV NODE_ENV=production \
-    VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org  \
+    VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org  \
     HUSKY_SKIP_INSTALL=1 \
     CI=true \
     HUSKY_DEBUG=1

diff --git a/package.json b/package.json
@@ -57,7 +57,7 @@
     "request": "2.88.0",
     "semver": "7.3.5",
     "validator": "13.6.0",
-    "verdaccio-audit": "10.0.0",
+    "verdaccio-audit": "10.0.1",
     "verdaccio-htpasswd": "10.0.0"
   },
   "devDependencies": {

diff --git a/yarn.lock b/yarn.lock
@@ -7880,23 +7880,23 @@ fsevents@~2.1.2:
   languageName: node
   linkType: hard
 
-"https-proxy-agent@npm:^4.0.0":
-  version: 4.0.0
-  resolution: "https-proxy-agent@npm:4.0.0"
+"https-proxy-agent@npm:5.0.0, https-proxy-agent@npm:^5.0.0":
+  version: 5.0.0
+  resolution: "https-proxy-agent@npm:5.0.0"
   dependencies:
-    agent-base: 5
+    agent-base: 6
     debug: 4
-  checksum: d3d20730cdcfa1b1ac492280501fa7b14ee89eb4fa2e7d300cc260463b48ea98b6cf1d4b287f40faa8c36c2f88d87819b4b419be5ec4055e9dcd2db501ce4680
+  checksum: 18aa04ea08cc069fa0c83d03475d1bc43e13bfa43d5cffc0c3a07430f755e1ac914049570302775adac82aa5a779643ef2c6c270c057d7a8523a7f6f46b4866a
   languageName: node
   linkType: hard
 
-"https-proxy-agent@npm:^5.0.0":
-  version: 5.0.0
-  resolution: "https-proxy-agent@npm:5.0.0"
+"https-proxy-agent@npm:^4.0.0":
+  version: 4.0.0
+  resolution: "https-proxy-agent@npm:4.0.0"
   dependencies:
-    agent-base: 6
+    agent-base: 5
     debug: 4
-  checksum: 18aa04ea08cc069fa0c83d03475d1bc43e13bfa43d5cffc0c3a07430f755e1ac914049570302775adac82aa5a779643ef2c6c270c057d7a8523a7f6f46b4866a
+  checksum: d3d20730cdcfa1b1ac492280501fa7b14ee89eb4fa2e7d300cc260463b48ea98b6cf1d4b287f40faa8c36c2f88d87819b4b419be5ec4055e9dcd2db501ce4680
   languageName: node
   linkType: hard
 
@@ -10445,6 +10445,13 @@ fsevents@~2.1.2:
   languageName: node
   linkType: hard
 
+"node-fetch@npm:2.6.0":
+  version: 2.6.0
+  resolution: "node-fetch@npm:2.6.0"
+  checksum: dd9f586a9f7ddb7dd94d2aba9cb693d32f5001e9850098512fbc8a4cbdd56838afa08ed0a6725b9fce9b01ec12b713e622cbfc16d92762d8b937b238330a632a
+  languageName: node
+  linkType: hard
+
 "node-fetch@npm:^2.6.0, node-fetch@npm:^2.6.1":
   version: 2.6.1
   resolution: "node-fetch@npm:2.6.1"
@@ -11984,7 +11991,7 @@ fsevents@~2.1.2:
   languageName: node
   linkType: hard
 
-"request@npm:2.88.2, request@npm:^2.88.0, request@npm:^2.88.2":
+"request@npm:^2.88.0, request@npm:^2.88.2":
   version: 2.88.2
   resolution: "request@npm:2.88.2"
   dependencies:
@@ -13893,13 +13900,15 @@ typescript@4.1.3:
   languageName: node
   linkType: hard
 
-"verdaccio-audit@npm:10.0.0":
-  version: 10.0.0
-  resolution: "verdaccio-audit@npm:10.0.0"
+"verdaccio-audit@npm:10.0.1":
+  version: 10.0.1
+  resolution: "verdaccio-audit@npm:10.0.1"
   dependencies:
+    body-parser: 1.19.0
     express: 4.17.1
-    request: 2.88.2
-  checksum: 60969a3c26767b0f1ace2273469e6ec4afdc7b0b926465379dee6539feb363f4156febf650dc889ecf4c9fee37110ada5c541e7153bc628af71254e53661c768
+    https-proxy-agent: 5.0.0
+    node-fetch: 2.6.0
+  checksum: 1b3203c893117c355fc6df879aaef97924925dd5965b8c0cf7ebe63e029c5796ad9d4ac0ed63fcc22903367511dd4aa0c5bf867da05043ab43b8a6cfe3a75655
   languageName: node
   linkType: hard
 
@@ -14054,7 +14063,7 @@ typescript@4.1.3:
     ts-node: 10.2.0
     typescript: 4.1.3
     validator: 13.6.0
-    verdaccio-audit: 10.0.0
+    verdaccio-audit: 10.0.1
     verdaccio-auth-memory: 10.0.0
     verdaccio-htpasswd: 10.0.0
     verdaccio-memory: 10.0.0