fix: update dependencies, docker base and build deps (#2007)

* fix: update docker to v14.15.1 * chore: update deps * chore: update actions/setup-node security update
verdaccio · Nov 20, 2020 · 6eef015 · 6eef015
1 parent 4feaf24
commit 6eef015
Show file tree

Hide file tree

Showing 8 changed files with 159 additions and 116 deletions.
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
@@ -16,7 +16,7 @@ jobs:
     steps:
     - uses: actions/checkout@v2.3.3
     - name: Use Node ${{ matrix.node_version }}
-      uses: actions/setup-node@v2.1.1
+      uses: actions/setup-node@v1.4.4
       with:
         node_version: ${{ matrix.node_version }}
     - name: Install

diff --git a/.github/workflows/e2e-angular-cli-workflow.yml b/.github/workflows/e2e-angular-cli-workflow.yml
@@ -16,7 +16,7 @@ jobs:
 #      - uses: actions/checkout@v2.3.3
 #
 #      - name: 'Use Node.js 10.x'
-#        uses: actions/setup-node@v2.1.1
+#        uses: actions/setup-node@v1.4.4
 #        with:
 #          node-version: 10.x
 #      - name: Install Dependencies
@@ -49,7 +49,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 14.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 14.x
       - name: 'install latest npm'
@@ -86,7 +86,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 14.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 14.x
       - name: 'install latest npm'

diff --git a/.github/workflows/e2e-gatsbyjs-cli-workflow.yml b/.github/workflows/e2e-gatsbyjs-cli-workflow.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 14.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 14.x
       - name: 'install latest npm'

diff --git a/.github/workflows/e2e-jest-workflow.yml b/.github/workflows/e2e-jest-workflow.yml
@@ -15,7 +15,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 10.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 10.x
       - name: Install Dependencies
@@ -46,7 +46,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 10.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 10.x
       - name: Install Dependencies
@@ -64,7 +64,7 @@ jobs:
           yarn set version berry
           yarn config set npmRegistryServer "http://localhost:4873"
           yarn config set unsafeHttpWhitelist --json '["localhost"]'
-          yarn add jest
+          yarn add jest@26.0.0
 
           echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
           yarn jest pass.test.js
@@ -80,7 +80,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 10.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 10.x
       - name: 'install latest npm'
@@ -113,7 +113,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 10.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 10.x
       - name: 'install latest npm'
@@ -147,7 +147,7 @@ jobs:
       - uses: actions/checkout@v2.3.3
 
       - name: 'Use Node.js 10.x'
-        uses: actions/setup-node@v2.1.1
+        uses: actions/setup-node@v1.4.4
         with:
           node-version: 10.x
       - name: 'install latest pnpm'

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -12,9 +12,9 @@ jobs:
     steps:
     - uses: actions/checkout@v2.3.3
     - name: Use Node (latest)
-      uses: actions/setup-node@v2.1.1
+      uses: actions/setup-node@v1.4.4
       with:
-        node_version: 12
+        node_version: 14
     - name: Install
       run: yarn install
     - name: Build

diff --git a/Dockerfile b/Dockerfile
@@ -1,4 +1,4 @@
-FROM node:14.15.0-alpine as builder
+FROM node:14.15.1-alpine as builder
 
 ENV NODE_ENV=production \
     VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
@@ -23,7 +23,7 @@ RUN yarn config set npmRegistryServer $VERDACCIO_BUILD_REGISTRY && \
 
 
 
-FROM node:14.15.0-alpine
+FROM node:14.15.1-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

diff --git a/package.json b/package.json
@@ -31,7 +31,7 @@
     "compression": "1.7.4",
     "cookies": "0.8.0",
     "cors": "2.8.5",
-    "dayjs": "1.9.4",
+    "dayjs": "1.9.6",
     "envinfo": "7.7.3",
     "express": "4.17.1",
     "handlebars": "4.7.6",
@@ -41,7 +41,7 @@
     "kleur": "4.1.3",
     "lodash": "4.17.20",
     "lunr-mutable-indexes": "2.3.2",
-    "marked": "1.2.2",
+    "marked": "1.2.5",
     "mime": "2.4.6",
     "minimatch": "3.0.4",
     "mkdirp": "0.5.5",
@@ -54,14 +54,14 @@
   },
   "devDependencies": {
     "@babel/cli": "7.12.1",
-    "@babel/core": "7.12.1",
-    "@babel/node": "7.12.1",
+    "@babel/core": "7.12.3",
+    "@babel/node": "7.12.6",
     "@babel/plugin-proposal-class-properties": "7.12.1",
     "@babel/plugin-proposal-decorators": "7.12.1",
     "@babel/plugin-proposal-export-namespace-from": "7.12.1",
     "@babel/plugin-proposal-function-sent": "7.12.1",
     "@babel/plugin-proposal-json-strings": "7.12.1",
-    "@babel/plugin-proposal-numeric-separator": "7.12.1",
+    "@babel/plugin-proposal-numeric-separator": "7.12.5",
     "@babel/plugin-proposal-object-rest-spread": "7.12.1",
     "@babel/plugin-proposal-throw-expressions": "7.12.1",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
@@ -73,11 +73,11 @@
     "@babel/preset-env": "7.12.1",
     "@babel/preset-typescript": "7.12.1",
     "@babel/register": "7.12.1",
-    "@babel/runtime": "7.12.1",
+    "@babel/runtime": "7.12.5",
     "@commitlint/cli": "8.3.5",
     "@commitlint/config-conventional": "8.3.4",
     "@octokit/rest": "16.36.0",
-    "@types/async": "3.2.0",
+    "@types/async": "3.2.4",
     "@types/bunyan": "1.8.6",
     "@types/express": "4.17.1",
     "@types/http-errors": "1.6.3",
@@ -93,8 +93,8 @@
     "@verdaccio/types": "^9.7.2",
     "all-contributors-cli": "6.16.0",
     "babel-eslint": "10.1.0",
-    "babel-jest": "26.5.2",
-    "babel-loader": "^8.1.0",
+    "babel-jest": "26.6.3",
+    "babel-loader": "^8.2.1",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "babel-plugin-emotion": "10.0.33",
     "codecov": "3.7.1",