chore(deps): bump verdaccio from 6.7.3 to 6.7.4

[dependabot]

Bumps verdaccio from 6.7.3 to 6.7.4.

Release notes

Sourced from verdaccio's releases.

v6.7.4

Patch Changes

• 0205c78: fix: run jwt middleware before middleware plugins

  Register the JWT middleware before middleware plugins are loaded so that req.remote_user (anonymous by default) is available inside a plugin's register_middlewares. The API router keeps its own JWT middleware behind a guard so it is not executed twice.

  Backport of verdaccio/verdaccio#5697

  Closes #5167

Changelog

Sourced from verdaccio's changelog.

6.7.4

Patch Changes

• 0205c78: fix: run jwt middleware before middleware plugins

  Register the JWT middleware before middleware plugins are loaded so that req.remote_user (anonymous by default) is available inside a plugin's register_middlewares. The API router keeps its own JWT middleware behind a guard so it is not executed twice.

  Backport of verdaccio/verdaccio#5697

  Closes #5167

Commits

• 9570db1 chore: release 6.x (#5963)
• 0205c78 fix: run jwt middleware before middleware plugins (#5962)
• See full diff in compare view

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	verdaccio@​6.7.3 ⏵ 6.7.4

View full report