chore(release): 5.3.2

* fix: publish with deprecated field by @Jiasm 

When publish with deprecated field in `package.json`, that will make all old versions miss.

Examples:

I have package@1.0.0 and package@1.0.1.

When `npm deprecate package@1.0.0 "xxx"`, Verdaccio will recived:

```json
{
  "name": "module_name",
  "version": {
    "1.0.0": {
      "deprecated": "xxx"
    },
    "1.0.1": {}
  }
}
```

⬆️ This make sense

But then publish new version with @1.0.2.

Verdaccio will recived:

```json
{
  "name": "module_name",
  "version": {
    "1.0.2": {
      "deprecated": "xxx" // if we set this field in package.json
    },
  }
}
```

and that metadata will override package.json, make old version miss.

migrate from #2766

* remove spaces

* fix: ignore empty package case

* fix: cover normal unpublish case

* refactor: Optimize check logic for lazy execution

* test: upgrade Jest Snapshot

* fix: set storage.getPackage `uplinksLook: false`.

* feat: use `_attachments` to distinguish deprecate

* test: rollback test snapshots

* test: rollback jest snapshots

* test: publish new version with deprecate field

* test: remove space

.dockerignore

@@ -9,18 +9,21 @@
 # you can add exceptions like in .gitignore to maintain a whitelist:
 # e.g.
 !babel.config.js
-!.eslintrc
+!eslintrc.js
 !.prettierrc
 !.eslintignore
 !.stylelintrc
 !.jest.config.js
 !.jestEnvironment.js
 !.yarnrc.yml
-!.yarn/releases/yarn-berry.cjs
+!.yarn/releases/yarn-*.cjs
 !.yarn/plugins/*
+!.pnp.js
 
-# do not copy over node_modules we will run `npm install` anyway
+# just in case, yarn 2 pnp is enabled
 node_modules
+.husky/
+.git/
 
 # output from test runs and similar things
 *.log

.eslintignore

@@ -19,3 +19,5 @@ Dockerfile
 test/unit/partials/
 types/custom.d.ts
 docker-examples/
+LICENSE
+.pnp.js

.github/workflows/ci.yml

@@ -9,7 +9,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        node_version: [12, 14, 15]
+        node_version: [12, 14, 15, 16]
 
     runs-on: ubuntu-latest
 

.github/workflows/codeql-analysis.yml

@@ -1,52 +0,0 @@
-name: "Code scanning - action"
-
-on:
-  push:
-  pull_request:
-  schedule:
-    - cron: '0 2 * * 4'
-
-jobs:
-  CodeQL-Build:
-
-    # CodeQL runs on ubuntu-latest and windows-latest
-    runs-on: ubuntu-latest
-
-    steps:
-    - name: Checkout repository
-      uses: actions/checkout@v2.3.3
-      with:
-        # We must fetch at least the immediate parents so that if this is
-        # a pull request then we can checkout the head.
-        fetch-depth: 2
-
-    # If this run was triggered by a pull request event, then checkout
-    # the head of the pull request instead of the merge commit.
-    - run: git checkout HEAD^2
-      if: ${{ github.event_name == 'pull_request' }}
-      
-    # Initializes the CodeQL tools for scanning.
-    - name: Initialize CodeQL
-      uses: github/codeql-action/init@v1
-      # Override language selection by uncommenting this and choosing your languages
-      # with:
-      #   languages: go, javascript, csharp, python, cpp, java
-
-    # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
-    # If this step fails, then you should remove it and run the build manually (see below)
-    - name: Autobuild
-      uses: github/codeql-action/autobuild@v1
-
-    # ℹ️ Command-line programs to run using the OS shell.
-    # 📚 https://git.io/JvXDl
-
-    # ✏️ If the Autobuild fails above, remove it and uncomment the following three lines
-    #    and modify them (or add more) to build your code if your project
-    #    uses a compiled language
-
-    #- run: |
-    #   make bootstrap
-    #   make release
-
-    - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v1

.github/workflows/docker-publish-pre-check.yml

@@ -11,7 +11,7 @@ jobs:
     - name: Build
       run: docker build .
       env:
-        VERDACCIO_BUILD_REGISTRY: https://registry.verdaccio.org
+        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
 
   testVerdaccio:
     name: Test Verdaccio Publish

.github/workflows/docker-publish.yml

@@ -11,10 +11,13 @@ on:
       - 'bin/**'
       - 'package.json'
       - 'yarn.lock'
+      - '.yarn/**'
+      - '.yarnrc.yaml'
+      - '.pnp.js'
     branches:
       - '**'
-#    tags:
-#      - 'v*'
+    tags:
+     - 'v*'
 
 jobs:
   docker:
@@ -36,12 +39,11 @@ jobs:
         with:
           images: ${{ github.repository }}
           tag-custom: 5.x-next
-          tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
-          # disabled while is on alpha
-          # tag-semver: |
-          #   {{version}}
-          #   {{major}}
-          #   {{major}}.{{minor}}
+          tag-custom-only: ${{ github.ref == 'refs/heads/5.x' }}
+          tag-semver: |
+            {{version}}
+            {{major}}
+            {{major}}.{{minor}}
       - name: Build & Push
         uses: docker/build-push-action@v2
         with:

.github/workflows/e2e-angular-cli-workflow.yml

@@ -23,7 +23,7 @@ jobs:
 #        run: yarn install --pure-lockfile
 #      - name: 'Run verdaccio in the background'
 #        run: |
-#          nohup node ./scripts/run-verdaccio.js &
+#          nohup yarn node ./scripts/run-verdaccio.js &
 #      - name: 'Ping to verdaccio'
 #        run: |
 #          npm ping --registry http://localhost:4873
@@ -58,7 +58,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -95,7 +95,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -134,7 +134,7 @@ jobs:
 #        run: yarn install --pure-lockfile
 #      - name: 'Run verdaccio in the background'
 #        run: |
-#          nohup node ./scripts/run-verdaccio.js &
+#          nohup yarn node ./scripts/run-verdaccio.js &
 #      - name: 'Ping to verdaccio'
 #        run: |
 #          pnpm ping --registry http://localhost:4873

.github/workflows/e2e-gatsbyjs-cli-workflow.yml

@@ -24,7 +24,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873

.github/workflows/e2e-jest-workflow.yml

@@ -22,7 +22,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -53,7 +53,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -89,7 +89,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -122,7 +122,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
       - name: 'Ping to verdaccio'
         run: |
           npm ping --registry http://localhost:4873
@@ -156,7 +156,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js &
+          nohup yarn node ./scripts/run-verdaccio.js &
       - name: 'Ping to verdaccio'
         run: |
           pnpm ping --registry http://localhost:4873
@@ -189,7 +189,7 @@ jobs:
         run: yarn install
       - name: 'Run verdaccio in the background'
         run: |
-          nohup node ./scripts/run-verdaccio.js &
+          nohup yarn node ./scripts/run-verdaccio.js &
       - name: 'Ping to verdaccio'
         run: |
           pnpm ping --registry http://localhost:4873

.github/workflows/release.yml

@@ -4,7 +4,6 @@ on:
   push:
     tags:
       - '*'
-
 jobs:
   release:
     name: Release
@@ -19,14 +18,13 @@ jobs:
       run: yarn install
     - name: Build
       run: yarn code:build
-    - name: Lint
-      run: yarn lint
     - name: Publish
       run: sh scripts/publish.sh
       env:
         REGISTRY_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
         REGISTRY_URL: registry.npmjs.org
-    - name: Create release notes
-      run: sh scripts/github-release.sh
-      env:
-        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+    # FIXME: there is an issue where all the changelog is copied to the release notes (all versions)
+    # - name: Create release notes
+    #   run: sh scripts/github-release.sh
+    #   env:
+    #     GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,4 +1,4 @@
-npm-debug.log
+
 verdaccio-*.tgz
 .DS_Store
 build/
@@ -21,19 +21,13 @@ package-lock.json
 npm_test-fails-add-tarball*
 yarn-error.log
 
-# Istanbul
+# coverage
 reports/
 coverage/
-.nyc*
 
+# IDE
 .idea/
 
-
-# React
-bundle.js
-bundle.js.map
-__tests__
-
 # Compiled script
 static/*
 

.husky/.gitignore

@@ -0,0 +1 @@
+_

.husky/commit-msg

@@ -0,0 +1,4 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+yarn commitlint --edit "$1"

.husky/pre-commit

@@ -0,0 +1,4 @@
+#!/bin/sh
+. "$(dirname "$0")/_/husky.sh"
+
+yarn lint-staged

.prettierignore

@@ -30,3 +30,4 @@ docker-examples/
 .npmignore
 .gitignore
 *.ico
+.pnp.js

.vscode/extensions.json

@@ -0,0 +1,13 @@
+{
+  // See http://go.microsoft.com/fwlink/?LinkId=827846 to learn about workspace recommendations.
+  // Extension identifier format: ${publisher}.${name}. Example: vscode.csharp
+  // List of extensions which should be recommended for users of this workspace.
+  "recommendations": [
+    "EditorConfig.EditorConfig",
+    "dbaeumer.vscode-eslint",
+    "arcanis.vscode-zipfs",
+    "esbenp.prettier-vscode"
+  ],
+  // List of extensions recommended by VS Code that should not be recommended for users of this workspace.
+  "unwantedRecommendations": []
+}

.vscode/settings.json

@@ -1,10 +1,26 @@
 // Place your settings in this file to overwrite default and user settings.
 {
-	"files.exclude": {
-		"**/.idea": false,
-		"**/.nyc_output": true,
-		"**/build": true,
-		"**/coverage": true
-	},
-	"typescript.tsdk": "node_modules/typescript/lib"
+  "typescript.tsdk": ".yarn/sdks/typescript/lib",
+  "typescript.tsserver.watchOptions": {
+    "watchFile": "useFsEventsOnParentDirectory",
+    "watchDirectory": "useFsEvents"
+  },
+  "eslint.nodePath": ".yarn/sdks",
+  "eslint.validate": [
+    "javascript",
+    "typescript"
+  ],
+  "files.exclude": {
+    "**/.idea": false,
+    "**/.nyc_output": true,
+    "**/build": true,
+    "**/coverage": true
+  },
+  "editor.formatOnSave": true,
+  "typescript.enablePromptUseWorkspaceTsdk": true,
+  "prettier.prettierPath": ".yarn/sdks/prettier/index.js",
+  "search.exclude": {
+    "**/.yarn": true,
+    "**/.pnp.*": true
+  }
 }