chore: update versions (next-8) (#5438)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/beige-cars-raise.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-memory': minor
+---
+
+feat: rewrite of memory storage

.changeset/beige-timers-greet.md

@@ -0,0 +1,10 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore: replace conditional require(fs/promises) pattern

.changeset/brave-rockets-remember.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/store': patch
+---
+
+fix(storage): check_owners with anonymous access

.changeset/curvy-bananas-complain.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+---
+
+fix(config): avoid warning for multiple addresses

.changeset/dry-cups-hear.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/test-helper': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+chore: publish @verdaccio/test-helper

.changeset/friendly-worms-drum.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore: add types for createConfigFolder

.changeset/mean-timers-look.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(express): housekeeping

.changeset/pre.json

@@ -68,9 +68,12 @@
     "afraid-cars-sneeze",
     "afraid-cheetahs-rule",
     "angry-doors-tan",
+    "beige-cars-raise",
     "beige-lions-type",
+    "beige-timers-greet",
     "blue-paws-cheer",
     "brave-ears-drive",
+    "brave-rockets-remember",
     "breezy-geckos-search",
     "breezy-toys-judge",
     "bright-bobcats-ring",
@@ -87,9 +90,11 @@
     "cool-seals-watch",
     "cuddly-paws-laugh",
     "curly-mirrors-smile",
+    "curvy-bananas-complain",
     "curvy-rockets-camp",
     "cyan-snakes-kiss",
     "dirty-countries-play",
+    "dry-cups-hear",
     "early-eyes-float",
     "early-trainers-grin",
     "eight-countries-think",
@@ -104,6 +109,7 @@
     "four-buttons-remember",
     "fresh-owls-hunt",
     "friendly-feet-sing",
+    "friendly-worms-drum",
     "funny-fireants-tan",
     "fuzzy-ears-yawn",
     "gentle-stingrays-repeat",
@@ -126,6 +132,7 @@
     "long-singers-drive",
     "loud-dingos-cough",
     "lucky-crabs-enjoy",
+    "mean-timers-look",
     "modern-llamas-know",
     "nasty-cooks-watch",
     "nasty-experts-bow",
@@ -141,6 +148,9 @@
     "poor-hats-smile",
     "poor-queens-shop",
     "popular-trees-grin",
+    "pretty-beds-destroy",
+    "pretty-carrots-smash",
+    "pretty-news-do",
     "proud-houses-switch",
     "purple-planes-do",
     "quick-avocados-type",
@@ -172,6 +182,7 @@
     "strange-pants-chew",
     "stupid-camels-build",
     "stupid-socks-grow",
+    "sweet-bulldogs-doubt",
     "sweet-crabs-deliver",
     "swift-knives-shop",
     "swift-mangos-grab",
@@ -187,12 +198,14 @@
     "tricky-kiwis-thank",
     "tricky-knives-end",
     "twelve-games-wonder",
+    "twelve-socks-accept",
     "violet-baboons-beg",
     "violet-bobcats-allow",
     "violet-boxes-float",
     "violet-poems-walk",
     "weak-cherries-serve",
     "wet-cats-behave",
+    "wet-comics-listen",
     "wicked-points-relate",
     "wild-coins-lie",
     "yellow-flies-sniff"

.changeset/pretty-beds-destroy.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix: restore minimatch major version

.changeset/pretty-carrots-smash.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+Fix inconsistency in filter plugin invocation upon receiving 304 from uplink after uplink.maxage has passed

.changeset/pretty-news-do.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+fix: minor logger missing type

.changeset/sweet-bulldogs-doubt.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build (2)

.changeset/twelve-socks-accept.md

@@ -0,0 +1,12 @@
+---
+'verdaccio-auth-memory': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+'@verdaccio/e2e-ui': patch
+---
+
+chore(deps): sync and pin dependencies

.changeset/wet-comics-listen.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build

.github/actions/build-app/action.yml

@@ -16,7 +16,7 @@ runs:
     - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
       uses: ./.github/actions/install-app-node
       with:
-        node-version: ${{ inputs.node_version }}
+        node-version: ${{ inputs.node-version }}
     - name: build
       run: pnpm build
       shell: bash

.github/actions/cache-packages/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache Packages
       id: cache-packages
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ./packages/
         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache .pnpm-store
       id: cache-npm
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}

.github/workflows/changesets-pr.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.event.pull_request.head.repo.fork == false
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/changesets.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
             --health-timeout=20s    
             --health-retries=6
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
   lint:
@@ -43,7 +43,7 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
         with:
@@ -55,7 +55,7 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
         with:
@@ -72,7 +72,7 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node ${{ matrix.node_version }}
         uses: ./.github/actions/build-app
         with:
@@ -85,7 +85,7 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
@@ -94,7 +94,7 @@ jobs:
           npm install --global corepack@latest
           corepack enable
           corepack install
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -37,7 +37,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
         with:
           config: |
             paths-ignore:
@@ -50,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5

.github/workflows/docker-proxy-apache-e2e.yml

@@ -20,7 +20,7 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -18,7 +18,7 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build

.github/workflows/docker-publish.yml

@@ -16,7 +16,7 @@ jobs:
     if: github.repository == 'verdaccio/verdaccio'
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
 
       - name: Set up QEMU
         uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
@@ -34,7 +34,7 @@ jobs:
 
       - name: Prepare Docker image tags
         id: docker_meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
         with:
           images: ${{ github.repository }}
           tags: |

.github/workflows/e2e-ci.yml

@@ -1,11 +1,14 @@
 name: E2E CLI
 
 on: [pull_request]
+
 permissions:
   contents: read
+
 concurrency:
   group: e2e-ci-${{ github.ref }}
   cancel-in-progress: true
+
 jobs:
   prepare:
     runs-on: ubuntu-latest
@@ -18,22 +21,12 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
-  build:
-    needs: [prepare]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Cache packages
-        uses: ./.github/actions/cache-packages
+
   e2e-cli-npm:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: false
       matrix:
@@ -47,23 +40,25 @@ jobs:
             npm11,
           ]
         node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
 
   e2e-cli-pnpm:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: true
       matrix:
@@ -73,23 +68,26 @@ jobs:
             pnpm9,
             pnpm10,
           ]
-        node: [2, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
-        run:  cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+
   e2e-cli-yarn:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: false
       matrix:
@@ -101,18 +99,19 @@ jobs:
             yarn4
           ]
         node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
-

.github/workflows/e2e-ui.yml

@@ -19,7 +19,7 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node 20
         uses: ./.github/actions/build-app
         with:

.github/workflows/plugin-generator-e2e.yaml

@@ -16,15 +16,15 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22, 23]
+        node-version: [20, 22, 24]
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node ${{ matrix.node_version }}
         uses: ./.github/actions/build-app
         with:
           node-version: ${{ matrix.node_version }}
       - name: install verdaccio
-        run: npm install -g verdaccio@5
+        run: npm install -g verdaccio@6
       - name: Start server
         run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
       - name: ping server

.github/workflows/shared-docker-publish.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
       - uses: docker/setup-buildx-action@v1
         with:

.github/workflows/static-data.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/test-docker-build.yml

@@ -6,8 +6,25 @@ jobs:
     name: Test Docker Build
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - name: Build
-      run: docker build .
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - name: Build Docker image
+      run: docker build -t verdaccio-test .
       env:
         VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
+    - name: Run Verdaccio in background
+      run: |
+        docker run -d --name verdaccio-test -p 4873:4873 verdaccio-test
+        sleep 10  # Give Verdaccio some time to start
+
+    - name: Test npm install from local Verdaccio
+      run: |
+        npm set registry http://localhost:4873
+        npm install -g verdaccio 
+
+    - name: Show Verdaccio logs (for debugging)
+      if: always()
+      run: docker logs verdaccio-test
+
+    - name: Stop Verdaccio
+      if: always()
+      run: docker stop verdaccio-test

.github/workflows/test-publish-package.yml

@@ -1,13 +1,20 @@
 on:
   workflow_call:
+    inputs:
+      verdaccio-version:
+        description: 'Verdaccio version to use'
+        required: false
+        default: 'latest'
+        type: string
 
 jobs:
   testVerdaccio:
     name: Test Verdaccio Publish
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Publish
-      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      uses: verdaccio/github-actions/publish@master # always latest by design 
       with:
         args: -d
+        verdaccio-version: ${{ inputs.verdaccio-version }}

.github/workflows/ui-components.yml

@@ -21,7 +21,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/website.yml

@@ -31,7 +31,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node 20
         uses: ./.github/actions/build-app
         with:
@@ -39,7 +39,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/local-scripts build
       - name: Cache Docusaurus Build
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -44,7 +44,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -80,7 +80,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/x-e2e-audit-workflow.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -42,7 +42,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/x-e2e-jest-workflow.yml

@@ -7,7 +7,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -38,7 +38,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -72,7 +72,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -105,7 +105,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -138,7 +138,7 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0

.github/workflows/x-release-snapshot.yml

@@ -6,7 +6,7 @@ jobs:
     name: Release Snapshot
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Use Node (latest)
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

.github/workflows/x-release.yml

@@ -6,7 +6,7 @@ jobs:
     name: Release
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Use Node (latest)
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

.github/workflows/x-smok-test-docker.yml

@@ -16,7 +16,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'

.github/workflows/x-smok-test-module.yml

@@ -10,7 +10,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Use Node (latest)
         uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:

.github/workflows/yarn-ci-lint.yml

@@ -6,7 +6,7 @@ jobs:
     name: Node Lint
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Use Node 
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

.github/workflows/yarn-ci.yml

@@ -9,7 +9,7 @@ jobs:
     name: Node ${{ inputs.node_version }}
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Use Node ${{ inputs.node_version }}
       uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:

README.md

@@ -329,7 +329,7 @@ You can find and chat with them over Discord, click [here](http://chat.verdaccio
 - [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
 - [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
 - [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
-- [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
+- [Amazon SDK for JavaScript (v3)](https://github.com/aws/aws-sdk-js-v3)
 - [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)
 
 🤓 Don't be shy, add yourself to this readme.

docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json

@@ -16,9 +16,9 @@
     "build": "babel src/ --out-dir lib/ --copy-files --ignore ___tests___"
   },
   "dependencies": {
-    "@verdaccio/streams": "^1.0.0",
+    "@verdaccio/streams": "10.2.1",
     "http-errors": "1.6.3",
-    "memory-fs": "^0.4.1"
+    "memory-fs": "0.5.0"
   },
   "devDependencies": {
     "@commitlint/cli": "7.0.0",

docker-examples/v6/README.md

@@ -8,7 +8,7 @@
 
 ## Proxy
 
-- [Docker + Nginx + Verdaccio](proxy/reverse_proxy/nginx/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
 - [Docker + Apache + Verdaccio](proxy/apache-verdaccio/README.md)
 - [Docker + HTTPS Portal + Verdaccio](proxy/https-portal-example/README.md)
 

e2e/cli/cli-commons/package.json

@@ -4,16 +4,16 @@
   "version": "2.0.0-next-8.1",
   "main": "src/index.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "debug": "4.4.3",
     "fs-extra": "11.2.0",
     "get-port": "5.1.1",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.20"
+    "verdaccio": "workspace:8.0.0-next-8.24"
   },
   "scripts": {
     "test": "echo no test",

e2e/cli/e2e-pnpm-commons/publish.ts

@@ -15,9 +15,15 @@ export function runPublish(pnpm) {
     test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
       'should publish a package %s',
       async (pkgName) => {
+        // As of npm v11, npm will fetch the packument from the npm registry before publishing (from the uplink),
+        // and there are more checks in the client:
+        // - "You cannot publish over the previously published versions"
+        // - "You must specify a tag using --tag when publishing a prerelease version"
+        // - "Cannot implicitly apply the 'latest' tag because previously published version x.y.z is higher than the new version a.b.c"
+        // Therefore, we pick a version that is higher than any of the published versions for the test packages (and not a pre-release).
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-patch',
+          '99.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -31,7 +37,6 @@ export function runPublish(pnpm) {
         const parsedBody = JSON.parse(resp.stdout as string);
         expect(parsedBody.name).toEqual(pkgName);
         expect(parsedBody.files).toBeDefined();
-        expect(parsedBody.files).toBeDefined();
       }
     );
 

e2e/cli/e2e-pnpm-commons/star.ts

@@ -20,7 +20,7 @@ export function runStar(pnpm) {
     test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()
@@ -39,7 +39,7 @@ export function runStar(pnpm) {
     test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()
@@ -67,7 +67,7 @@ export function runStar(pnpm) {
       const pkgName = '@verdaccio/stars';
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()

e2e/cli/e2e-pnpm-commons/unpublish.ts

@@ -22,7 +22,7 @@ export function runUnpublish(pnpm) {
       async (pkgName) => {
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-beta',
+          '1.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -53,7 +53,7 @@ export function runUnpublish(pnpm) {
       async (pkgName) => {
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-beta',
+          '1.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -69,13 +69,13 @@ export function runUnpublish(pnpm) {
         const resp2 = await pnpm(
           { cwd: tempFolder },
           'unpublish',
-          `${pkgName}@1.0.0-beta`,
+          `${pkgName}@1.0.0`,
           '--force',
           '--loglevel=info',
           '--json',
           ...addRegistry(registry.getRegistryUrl())
         );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0-beta');
+        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0');
       }
     );
 

e2e/ui/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/e2e-ui
 
+## 2.0.1-next-8.0
+
+### Patch Changes
+
+- f443f81: chore(deps): sync and pin dependencies
+
 ## 2.0.0
 
 ### Major Changes

e2e/ui/package.json

@@ -1,14 +1,14 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-ui",
-  "version": "2.0.0",
+  "version": "2.0.1-next-8.0",
   "devDependencies": {
-    "verdaccio": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.6",
-    "debug": "4.4.1",
-    "cypress": "^13.6.0",
+    "verdaccio": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.8",
+    "debug": "4.4.3",
+    "cypress": "15.4.0",
     "get-port": "5.1.1"
   },
   "scripts": {

package.json

@@ -15,41 +15,41 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@babel/cli": "7.27.2",
-    "@babel/core": "7.27.4",
+    "@babel/cli": "7.28.3",
+    "@babel/core": "7.28.4",
     "@babel/eslint-parser": "7.25.9",
-    "@babel/node": "7.27.1",
-    "@babel/plugin-proposal-decorators": "7.27.1",
+    "@babel/node": "7.28.0",
+    "@babel/plugin-proposal-decorators": "7.28.0",
     "@babel/plugin-proposal-function-sent": "7.27.1",
     "@babel/plugin-proposal-throw-expressions": "7.27.1",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
     "@babel/plugin-transform-async-to-generator": "7.27.1",
     "@babel/plugin-transform-class-properties": "7.27.1",
-    "@babel/plugin-transform-classes": "7.27.1",
+    "@babel/plugin-transform-classes": "7.28.4",
     "@babel/plugin-transform-export-namespace-from": "7.27.1",
     "@babel/plugin-transform-json-strings": "7.27.1",
     "@babel/plugin-transform-nullish-coalescing-operator": "7.27.1",
     "@babel/plugin-transform-numeric-separator": "7.27.1",
-    "@babel/plugin-transform-object-rest-spread": "7.27.3",
+    "@babel/plugin-transform-object-rest-spread": "7.28.4",
     "@babel/plugin-transform-optional-chaining": "7.27.1",
-    "@babel/plugin-transform-runtime": "7.27.4",
-    "@babel/preset-env": "7.27.2",
+    "@babel/plugin-transform-runtime": "7.28.3",
+    "@babel/preset-env": "7.28.3",
     "@babel/preset-react": "7.27.1",
     "@babel/preset-typescript": "7.24.7",
-    "@babel/register": "7.27.1",
-    "@babel/runtime": "7.27.6",
+    "@babel/register": "7.28.3",
+    "@babel/runtime": "7.28.4",
     "@changesets/changelog-github": "0.5.1",
     "@changesets/cli": "2.27.12",
     "@changesets/get-dependents-graph": "2.1.3",
     "@crowdin/cli": "4.7.1",
     "@dianmora/contributors": "5.0.0",
-    "@emotion/react": "11.10.6",
-    "@emotion/styled": "11.10.6",
-    "@testing-library/dom": "10.4.0",
-    "@testing-library/jest-dom": "6.6.3",
-    "@testing-library/react": "16.1.0",
-    "@testing-library/user-event": "14.5.2",
+    "@emotion/react": "11.11.4",
+    "@emotion/styled": "11.11.5",
+    "@testing-library/dom": "10.4.1",
+    "@testing-library/jest-dom": "6.8.0",
+    "@testing-library/react": "16.3.0",
+    "@testing-library/user-event": "14.6.1",
     "@trivago/prettier-plugin-sort-imports": "4.3.0",
     "@types/body-parser": "1.19.5",
     "@types/connect": "3.4.38",
@@ -89,14 +89,14 @@
     "@verdaccio/local-scripts": "workspace:*",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-theme": "workspace:*",
-    "@vitest/coverage-v8": "3.0.4",
+    "@vitest/coverage-v8": "3.2.4",
     "aria-query": "5.1.3",
     "babel-core": "7.0.0-bridge.0",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "babel-plugin-emotion": "11.0.0",
     "concurrently": "8.2.2",
     "cross-env": "7.0.3",
-    "debug": "4.4.1",
+    "debug": "4.4.3",
     "detect-secrets": "1.0.6",
     "eslint": "8.57.1",
     "fs-extra": "11.2.0",
@@ -106,24 +106,24 @@
     "kleur": "4.1.5",
     "lint-staged": "11.2.6",
     "nock": "13.5.6",
-    "nodemon": "3.0.3",
-    "npm-run-all2": "5.0.2",
+    "nodemon": "3.1.10",
+    "npm-run-all2": "8.0.4",
     "prettier": "3.4.2",
     "react": "18.3.1",
     "react-dom": "18.3.1",
     "rimraf": "5.0.10",
     "selfsigned": "2.4.1",
-    "semver": "^7.6.3",
-    "supertest": "7.0.0",
+    "semver": "7.7.3",
+    "supertest": "7.1.4",
     "ts-node": "10.9.2",
     "typescript": "5.3.3",
     "undici-types": "5.28.4",
-    "update-ts-references": "3.6.0",
+    "update-ts-references": "3.6.2",
     "verdaccio-audit": "workspace:*",
     "verdaccio-auth-memory": "workspace:*",
     "verdaccio-htpasswd": "workspace:*",
     "verdaccio-memory": "workspace:*",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   },
   "scripts": {
     "prepare": "husky install",

packages/api/CHANGELOG.md

@@ -1,5 +1,56 @@
 # @verdaccio/api
 
+## 8.1.0-next-8.24
+
+### Patch Changes
+
+- Updated dependencies [71587f3]
+  - @verdaccio/store@8.0.0-next-8.24
+  - @verdaccio/core@8.0.0-next-8.24
+  - @verdaccio/config@8.0.0-next-8.24
+  - @verdaccio/auth@8.0.0-next-8.24
+  - @verdaccio/middleware@8.0.0-next-8.24
+  - @verdaccio/logger@8.0.0-next-8.24
+
+## 8.1.0-next-8.23
+
+### Patch Changes
+
+- 5c499fa: chore: publish @verdaccio/test-helper
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/store@8.0.0-next-8.23
+  - @verdaccio/auth@8.0.0-next-8.23
+  - @verdaccio/middleware@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/logger@8.0.0-next-8.23
+
+## 8.1.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/store@8.0.0-next-8.22
+  - @verdaccio/auth@8.0.0-next-8.22
+  - @verdaccio/middleware@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.1.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/auth@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/middleware@8.0.0-next-8.21
+  - @verdaccio/store@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.1.0-next-8.20
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "8.1.0-next-8.20",
+  "version": "8.1.0-next-8.24",
   "description": "Verdaccio Registry API",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -42,26 +42,26 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.20",
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.20",
-    "@verdaccio/store": "workspace:8.0.0-next-8.20",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.24",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.24",
+    "@verdaccio/store": "workspace:8.0.0-next-8.24",
     "abortcontroller-polyfill": "1.7.8",
     "body-parser": "1.20.3",
     "cookies": "0.9.1",
-    "debug": "4.4.1",
+    "debug": "4.4.3",
     "express": "4.21.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
-    "semver": "7.7.2"
+    "semver": "7.7.3"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.6",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.8",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "mockdate": "3.0.5",
-    "supertest": "7.0.0"
+    "supertest": "7.1.4"
   },
   "funding": {
     "type": "opencollective",

packages/api/test/integration/_helper.ts

@@ -27,7 +27,7 @@ setup({});
 
 export const buildToken = authUtils.buildToken;
 
-export const getConf = (conf) => {
+export const getConf = (conf: string) => {
   const configPath = path.join(__dirname, 'config', conf);
   const config = parseConfigFile(configPath);
   // custom config to avoid conflict with other tests
@@ -35,12 +35,12 @@ export const getConf = (conf) => {
   return config;
 };
 
-export async function initializeServer(configName): Promise<Application> {
+export async function initializeServer(configName: string): Promise<Application> {
   const config = getConf(configName);
   return initializeServerHelper(config, [apiMiddleware], Storage);
 }
 
-export function createUser(app, name: string, password: string): supertest.Test {
+export function createUser(app: any, name: string, password: string): supertest.Test {
   return supertest(app)
     .put(`/-/user/org.couchdb.user:${name}`)
     .send({
@@ -61,7 +61,7 @@ export async function getNewToken(app: any, credentials: any): Promise<string> {
   return token;
 }
 
-export async function generateTokenCLI(app, token, payload): Promise<any> {
+export async function generateTokenCLI(app: any, token: string, payload: any): Promise<any> {
   return supertest(app)
     .post('/-/npm/v1/tokens')
     .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
@@ -70,7 +70,7 @@ export async function generateTokenCLI(app, token, payload): Promise<any> {
     .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET);
 }
 
-export async function deleteTokenCLI(app, token, tokenToDelete): Promise<any> {
+export async function deleteTokenCLI(app: any, token: string, tokenToDelete: string): Promise<any> {
   return supertest(app)
     .delete(`/-/npm/v1/tokens/token/${tokenToDelete}`)
     .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
@@ -80,7 +80,7 @@ export async function deleteTokenCLI(app, token, tokenToDelete): Promise<any> {
 }
 
 export function publishVersionWithToken(
-  app,
+  app: any,
   pkgName: string,
   version: string,
   token: string,
@@ -98,7 +98,7 @@ export function publishVersionWithToken(
 }
 
 export function publishVersion(
-  app,
+  app: any,
   pkgName: string,
   version: string,
   distTags?: GenericBody,
@@ -121,7 +121,7 @@ export function publishVersion(
 }
 
 export function starPackage(
-  app,
+  app: any,
   options: {
     users: PackageUsers;
     name: string;
@@ -152,7 +152,7 @@ export function starPackage(
 }
 
 export function changeOwners(
-  app,
+  app: any,
   options: {
     maintainers: Author[];
     name: string;
@@ -182,7 +182,7 @@ export function changeOwners(
   return test;
 }
 
-export function getDisTags(app, pkgName) {
+export function getDisTags(app: any, pkgName: string): supertest.Test {
   return supertest(app)
     .get(`/-/package/${encodeURIComponent(pkgName)}/dist-tags`)
     .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)

packages/auth/CHANGELOG.md

@@ -1,5 +1,50 @@
 # @verdaccio/auth
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/loaders@8.0.0-next-8.14
+- verdaccio-htpasswd@13.0.0-next-8.24
+- @verdaccio/signature@8.0.0-next-8.16
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/loaders@8.0.0-next-8.13
+  - verdaccio-htpasswd@13.0.0-next-8.23
+  - @verdaccio/signature@8.0.0-next-8.15
+  - @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/loaders@8.0.0-next-8.12
+  - @verdaccio/config@8.0.0-next-8.22
+  - verdaccio-htpasswd@13.0.0-next-8.22
+  - @verdaccio/signature@8.0.0-next-8.14
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/loaders@8.0.0-next-8.11
+  - verdaccio-htpasswd@13.0.0-next-8.21
+  - @verdaccio/signature@8.0.0-next-8.13
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Authentication",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -42,20 +42,20 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/loaders": "workspace:8.0.0-next-8.10",
-    "@verdaccio/signature": "workspace:8.0.0-next-8.12",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/loaders": "workspace:8.0.0-next-8.14",
+    "@verdaccio/signature": "workspace:8.0.0-next-8.16",
+    "debug": "4.4.3",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:13.0.0-next-8.20"
+    "verdaccio-htpasswd": "workspace:13.0.0-next-8.24"
   },
   "devDependencies": {
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
     "express": "4.21.2",
-    "supertest": "7.0.0"
+    "supertest": "7.1.4"
   },
   "funding": {
     "type": "opencollective",

packages/cli/CHANGELOG.md

@@ -1,5 +1,46 @@
 # @verdaccio/cli
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/node-api@8.0.0-next-8.24
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/logger@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/node-api@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/logger@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/node-api@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/node-api@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -47,14 +47,14 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/node-api": "workspace:8.0.0-next-8.20",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/node-api": "workspace:8.0.0-next-8.24",
     "clipanion": "4.0.0-rc.4",
-    "envinfo": "7.14.0",
+    "envinfo": "7.19.0",
     "kleur": "4.1.5",
-    "semver": "7.7.2"
+    "semver": "7.7.3"
   },
   "devDependencies": {
     "ts-node": "10.9.2"

packages/config/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @verdaccio/config
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- b671a38: chore: add types for createConfigFolder
+  - @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+- 05f03b3: fix(config): avoid warning for multiple addresses
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Minor Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Configuration",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -42,8 +42,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
     "minimatch": "7.4.6"

packages/config/src/address.ts

@@ -1,7 +1,7 @@
 import createDebug from 'debug';
 
 import { DEFAULT_DOMAIN, DEFAULT_PORT, DEFAULT_PROTOCOL } from '@verdaccio/core';
-import { Logger } from '@verdaccio/types';
+import { ListenAddress as ConfigListenAddress, Logger } from '@verdaccio/types';
 
 const debug = createDebug('verdaccio:config:address');
 
@@ -70,7 +70,10 @@ function addrToString(a: ListenAddress): string {
  - localhost:5557
  @return {Array}
  */
-export function getListenAddress(listen: (string | void)[], logger: Logger): ListenAddress {
+export function getListenAddress(
+  listen: ConfigListenAddress | string | undefined,
+  logger: Logger
+): ListenAddress {
   debug('getListenAddress called with %o', listen);
 
   if (!listen) {
@@ -86,31 +89,17 @@ export function getListenAddress(listen: (string | void)[], logger: Logger): Lis
     }
 
     const invalid: string[] = [];
+    const valid: ListenAddress[] = [];
 
     for (const raw of filteredListen) {
       const candidate = parseAddress(raw as string);
       if (candidate) {
         debug('valid listen address found: %o', candidate);
-
-        invalid.forEach((bad) =>
-          logger.warn(
-            { addr: bad },
-            'invalid address - @{addr}, we expect a port (e.g. "4873"), ' +
-              'host:port (e.g. "localhost:4873"), full url ' +
-              '(e.g. "http://localhost:4873/") or unix:/path/socket'
-          )
-        );
-
-        if (listen.length > 1) {
-          logger.warn(
-            `Multiple listen addresses are not supported, using the first valid one ${addrToString(
-              candidate
-            )}`
-          );
-        }
-        return candidate;
+        valid.push(candidate);
+      } else {
+        debug('invalid address found: %o', raw);
+        invalid.push(raw as string);
       }
-      invalid.push(raw as string);
     }
 
     invalid.forEach((bad) =>
@@ -121,10 +110,25 @@ export function getListenAddress(listen: (string | void)[], logger: Logger): Lis
           '(e.g. "http://localhost:4873/") or unix:/path/socket'
       )
     );
-    throw new Error('No valid listen addresses found in configuration array');
+
+    if (valid.length === 0) {
+      throw new Error('No valid listen addresses found in configuration array');
+    }
+
+    const firstValid = valid[0];
+
+    if (listen.length > 1) {
+      logger.warn(
+        `Multiple listen addresses are not supported, using the first valid one ${addrToString(
+          firstValid
+        )}`
+      );
+    }
+
+    return firstValid;
   }
 
-  const single = parseAddress(listen);
+  const single = parseAddress(listen as string);
   if (!single) {
     throw new Error(
       `Invalid address - ${listen}, we expect a port (e.g. "4873"), ` +

packages/config/src/conf/default.yaml

@@ -72,6 +72,10 @@ auth:
     # Maximum amount of users allowed to register, defaults to "+inf".
     # You can set this to -1 to disable registration.
     # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10
 
 # A list of other known repositories we can talk to
 # https://verdaccio.org/docs/configuration#uplinks

packages/config/src/config-path.ts

@@ -78,7 +78,7 @@ export function readDefaultConfig(): string {
   return fs.readFileSync(pathDefaultConf, 'utf8');
 }
 
-function createConfigFolder(configLocation): void {
+function createConfigFolder(configLocation: SetupDirectory): void {
   const folder = path.dirname(configLocation.path);
   debug(`creating default config file folder at %o`, folder);
   fs.mkdirSync(folder, { recursive: true });

packages/config/test/address.spec.ts

@@ -56,12 +56,12 @@ describe('address parsing', () => {
     });
 
     test('throws when given an empty array', () => {
-      expect(() => getListenAddress([])).toThrow(/array cannot be empty/i);
+      expect(() => getListenAddress([], logger)).toThrow(/array cannot be empty/i);
       expect(warn).not.toHaveBeenCalled();
     });
 
     test('localhost:4873  (default value)', () => {
-      const addr = getListenAddress('localhost:4873');
+      const addr = getListenAddress('localhost:4873', logger);
 
       expect(addr).toEqual({ proto: 'http', host: 'localhost', port: '4873' });
       expect(warn).not.toHaveBeenCalled();

packages/config/test/config-parsing.spec.ts

@@ -1,4 +1,4 @@
-import fs from 'node:fs';
+import { writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { describe, expect, test } from 'vitest';
 
@@ -7,8 +7,6 @@ import { fileUtils } from '@verdaccio/core';
 import { fromJStoYAML, parseConfigFile } from '../src';
 import { parseConfigurationFile } from './utils';
 
-const { writeFile } = fs.promises ? fs.promises : require('fs/promises');
-
 describe('parse', () => {
   describe('parseConfigFile', () => {
     describe('JSON format', () => {

packages/core/core/CHANGELOG.md

@@ -1,5 +1,22 @@
 # @verdaccio/core
 
+## 8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+- 60ef8ff: fix(storage): check_owners with anonymous access
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- f8a321f: fix: restore minimatch major version
+
 ## 8.0.0-next-8.20
 
 ### Minor Changes

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Core Components",
   "keywords": [
     "private",
@@ -36,15 +36,15 @@
     "ajv": "8.17.1",
     "http-errors": "2.0.0",
     "http-status-codes": "2.3.0",
-    "minimatch": "10.0.1",
+    "minimatch": "7.4.6",
     "process-warning": "1.0.0",
-    "semver": "7.7.2"
+    "semver": "7.7.3"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "express": "4.21.2",
-    "typedoc": "0.23.25",
-    "vitest": "3.0.4"
+    "typedoc": "0.28.14",
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/core/src/constants.ts

@@ -7,7 +7,8 @@ export const DIST_TAGS = 'dist-tags';
 export const LATEST = 'latest';
 export const USERS = 'users';
 export const MAINTAINERS = 'maintainers';
-export const DEFAULT_USER = 'Anonymous';
+export const DEFAULT_USER = 'Anonymous'; // for display purposes
+export const ANONYMOUS_USER = 'anonymous'; // for username purposes
 
 export const HEADER_TYPE = {
   CONTENT_ENCODING: 'content-encoding',

packages/core/core/src/file-utils.ts

@@ -1,4 +1,4 @@
-import fs from 'node:fs';
+import { mkdir, mkdtemp } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';
 
@@ -6,8 +6,6 @@ export const Files = {
   DatabaseName: '.verdaccio-db.json',
 };
 
-const { mkdir, mkdtemp } = fs.promises ? fs.promises : require('fs/promises');
-
 /**
  * Create a temporary folder.
  * @param prefix The prefix of the folder name.

packages/core/core/src/index.ts

@@ -25,6 +25,7 @@ export {
   LATEST,
   DEFAULT_PASSWORD_VALIDATION,
   DEFAULT_USER,
+  ANONYMOUS_USER,
   USERS,
   MAINTAINERS,
   PLUGIN_CATEGORY,

packages/core/file-locking/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 13.0.0-next-8.6
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+
 ## 13.0.0-next-8.5
 
 ### Patch Changes

packages/core/file-locking/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/file-locking",
-  "version": "13.0.0-next-8.5",
+  "version": "13.0.0-next-8.6",
   "description": "Verdaccio File Locking Library",
   "keywords": [
     "private",
@@ -39,8 +39,8 @@
     "lockfile": "1.0.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "vitest": "3.0.4"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/file-locking/src/utils.ts

@@ -1,10 +1,8 @@
 import locker from 'lockfile';
-import fs from 'node:fs';
+import * as fsP from 'node:fs/promises';
 import path from 'node:path';
 import { promisify } from 'node:util';
 
-const fsP = fs.promises ? fs.promises : require('fs/promises');
-
 export const readFile = fsP.readFile;
 const statPromise = fsP.stat;
 // https://github.com/npm/lockfile/issues/33

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Change Log
 
+## 13.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/url@13.0.0-next-8.24
+
+## 13.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+- @verdaccio/url@13.0.0-next-8.23
+
+## 13.0.0-next-8.22
+
+### Patch Changes
+
+- f443f81: chore(deps): sync and pin dependencies
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/url@13.0.0-next-8.22
+
+## 13.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/url@13.0.0-next-8.21
+
 ## 13.0.0-next-8.20
 
 ### Patch Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "13.0.0-next-8.20",
+  "version": "13.0.0-next-8.24",
   "description": "Verdaccio Tarball Utilities",
   "keywords": [
     "private",
@@ -33,16 +33,16 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/url": "workspace:13.0.0-next-8.20",
-    "debug": "4.4.1",
-    "gunzip-maybe": "^1.4.2",
-    "tar-stream": "^3.1.7"
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/url": "workspace:13.0.0-next-8.24",
+    "debug": "4.4.3",
+    "gunzip-maybe": "1.4.2",
+    "tar-stream": "3.1.7"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "node-mocks-http": "1.14.1",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/types/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 13.0.0-next-8.8
+
+### Patch Changes
+
+- a02514b: fix: minor logger missing type
+
 ## 13.0.0-next-8.7
 
 ### Patch Changes

packages/core/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "13.0.0-next-8.7",
+  "version": "13.0.0-next-8.8",
   "description": "Verdaccio Type Definitions",
   "keywords": [
     "private",
@@ -42,7 +42,7 @@
   "devDependencies": {
     "@types/jsonwebtoken": "9.0.6",
     "@types/ms": "2.1.0",
-    "typedoc": "0.23.25"
+    "typedoc": "0.28.14"
   },
   "typedoc": {
     "entryPoint": "./src/types.ts",

packages/core/types/src/configuration.ts

@@ -9,6 +9,7 @@ export type TypeToken = 'Bearer' | 'Basic';
 export interface Logger {
   child: (conf: any) => any;
   debug: (conf: any, template?: string) => void;
+  fatal: (conf: any, template?: string) => void;
   error: (conf: any, template?: string) => void;
   http: (conf: any, template?: string) => void;
   trace: (conf: any, template?: string) => void;

packages/core/url/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Change Log
 
+## 13.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 13.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+
+## 13.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 13.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 13.0.0-next-8.20
 
 ### Patch Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "13.0.0-next-8.20",
+  "version": "13.0.0-next-8.24",
   "description": "Verdaccio URL Utilities",
   "keywords": [
     "private",
@@ -33,15 +33,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
     "lodash": "4.17.21",
-    "validator": "13.12.0"
+    "validator": "13.15.15"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "node-mocks-http": "1.14.1",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/hooks/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @verdaccio/hooks
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/logger@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+- @verdaccio/logger@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Hooks",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -33,17 +33,17 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
     "got-cjs": "12.5.4",
     "handlebars": "4.7.8"
   },
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "nock": "13.5.6",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/loaders/CHANGELOG.md

@@ -1,5 +1,33 @@
 # @verdaccio/loaders
 
+## 8.0.0-next-8.14
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 8.0.0-next-8.13
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.12
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 8.0.0-next-8.11
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 8.0.0-next-8.10
 
 ### Patch Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "8.0.0-next-8.10",
+  "version": "8.0.0-next-8.14",
   "description": "Verdaccio Loader Logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -17,18 +17,18 @@
     "url": "https://github.com/verdaccio/verdaccio/issues"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "customprefix-auth": "workspace:2.0.0",
     "verdaccio-auth-memory": "workspace:*",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   },
   "homepage": "https://verdaccio.org",
   "keywords": [

packages/loaders/src/plugin-async-loader.ts

@@ -1,6 +1,6 @@
 import buildDebug from 'debug';
 import _ from 'lodash';
-import fs from 'node:fs';
+import { lstat } from 'node:fs/promises';
 import { dirname, isAbsolute, join, resolve } from 'node:path';
 
 import { PLUGIN_PREFIX, pluginUtils } from '@verdaccio/core';
@@ -9,8 +9,6 @@ import { PluginType, isES6, isValid, tryLoad } from './utils';
 
 const debug = buildDebug('verdaccio:plugin:loader:async');
 
-const { lstat } = fs.promises ? fs.promises : require('fs/promises');
-
 async function isDirectory(pathFolder: string) {
   const stat = await lstat(pathFolder);
   return stat.isDirectory();

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @verdaccio/logger-commons
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Logger Commons",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -42,15 +42,15 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
     "@verdaccio/logger-prettify": "workspace:8.0.0-next-8.4",
-    "debug": "4.4.1",
+    "debug": "4.4.3",
     "colorette": "2.0.20"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "pino": "9.7.0",
-    "vitest": "3.0.4"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "pino": "9.13.1",
+    "vitest": "3.2.4"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-prettify/package.json

@@ -42,7 +42,7 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "dayjs": "1.11.13",
+    "dayjs": "1.11.18",
     "on-exit-leak-free": "2.1.2",
     "pino-abstract-transport": "1.2.0",
     "colorette": "2.0.20",
@@ -50,8 +50,8 @@
     "sonic-boom": "3.8.1"
   },
   "devDependencies": {
-    "pino": "9.7.0",
-    "vitest": "3.0.4"
+    "pino": "9.13.1",
+    "vitest": "3.2.4"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @verdaccio/logger
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/logger-commons@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/logger-commons@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- @verdaccio/logger-commons@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- @verdaccio/logger-commons@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -42,11 +42,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:8.0.0-next-8.20",
-    "pino": "9.7.0"
+    "@verdaccio/logger-commons": "workspace:8.0.0-next-8.24",
+    "pino": "9.13.1"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8"
   },
   "funding": {
     "type": "opencollective",

packages/middleware/CHANGELOG.md

@@ -1,5 +1,42 @@
 # @verdaccio/middleware
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/url@13.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/url@13.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/url@13.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/url@13.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Patch Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Express Middleware",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -42,10 +42,10 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/url": "workspace:13.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/url": "workspace:13.0.0-next-8.24",
+    "debug": "4.4.3",
     "express": "4.21.2",
     "express-rate-limit": "5.5.1",
     "lodash": "4.17.21",
@@ -57,11 +57,11 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "http-errors": "2.0.0",
-    "supertest": "7.0.0",
+    "supertest": "7.1.4",
     "jsdom": "26.1.0",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
   }
 }

packages/node-api/CHANGELOG.md

@@ -1,5 +1,52 @@
 # @verdaccio/node-api
 
+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/server@8.0.0-next-8.24
+- @verdaccio/server-fastify@8.0.0-next-8.24
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/logger@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/server@8.0.0-next-8.23
+  - @verdaccio/server-fastify@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/logger@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- 05f03b3: fix(config): avoid warning for multiple addresses
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+- Updated dependencies [2912575]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/server@8.0.0-next-8.22
+  - @verdaccio/server-fastify@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/server@8.0.0-next-8.21
+  - @verdaccio/server-fastify@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20
 
 ### Minor Changes

packages/node-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/node-api",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
   "description": "Verdaccio Node API",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -42,19 +42,19 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/server": "workspace:8.0.0-next-8.20",
-    "@verdaccio/server-fastify": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/server": "workspace:8.0.0-next-8.24",
+    "@verdaccio/server-fastify": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "selfsigned": "2.4.1",
-    "supertest": "7.0.0",
-    "vitest": "3.0.4"
+    "supertest": "7.1.4",
+    "vitest": "3.2.4"
   },
   "publishConfig": {
     "access": "public"

packages/node-api/src/server.ts

@@ -1,6 +1,6 @@
 /* eslint-disable */
 import buildDebug from 'debug';
-import _, { assign, isFunction } from 'lodash';
+import { assign, isFunction } from 'lodash';
 import constants from 'node:constants';
 import fs from 'node:fs';
 import http from 'node:http';
@@ -8,7 +8,6 @@ import https from 'node:https';
 import url from 'node:url';
 
 import { getConfigParsed, getListenAddress } from '@verdaccio/config';
-import { DEFAULT_PORT } from '@verdaccio/core';
 import { logger, setup } from '@verdaccio/logger';
 import expressServer from '@verdaccio/server';
 import fastifyServer from '@verdaccio/server-fastify';
@@ -107,7 +106,7 @@ export function createServerFactory(config: ConfigYaml, addr, app) {
 }
 
 /**
- * Start the server on the port defined
+ * Start the server on the port defined (or the port defined in the config file)
  * @param config
  * @param port
  * @param version
@@ -121,8 +120,7 @@ export async function initServer(
 ): Promise<void> {
   return new Promise(async (resolve, reject) => {
     const logger = setup(config?.log as any);
-    const combined: string | undefined | any[] = [port, config?.listen, DEFAULT_PORT];
-    const addr = getListenAddress(combined, logger);
+    const addr = getListenAddress(port ?? config?.listen, logger);
     displayExperimentsInfoBox(config.flags);
 
     let app;
@@ -200,9 +198,7 @@ export async function runServer(config?: string | ConfigYaml): Promise<any> {
   const configurationParsed = getConfigParsed(config);
   setup(configurationParsed.log as any);
   displayExperimentsInfoBox(configurationParsed.flags);
-  // FIXME: get only the first match, the multiple address will be removed
-  const combined: string | undefined | any[] = [configurationParsed?.listen, DEFAULT_PORT];
-  const addr = getListenAddress(combined, logger);
+  const addr = getListenAddress(configurationParsed.listen, logger);
   const app = await expressServer(configurationParsed);
   return createServerFactory(configurationParsed, addr, app);
 }

packages/plugins/audit/CHANGELOG.md

@@ -1,5 +1,38 @@
 # Change Log
 
+## 13.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+
+## 13.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+
+## 13.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+
+## 13.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+
 ## 13.0.0-next-8.20
 
 ### Patch Changes

packages/plugins/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "13.0.0-next-8.20",
+  "version": "13.0.0-next-8.24",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "private",
@@ -30,19 +30,19 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
     "express": "4.21.2",
     "https-proxy-agent": "5.0.1",
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
     "nock": "13.5.6",
-    "supertest": "7.0.0",
-    "vitest": "3.0.4"
+    "supertest": "7.1.4",
+    "vitest": "3.2.4"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/auth-memory/CHANGELOG.md

@@ -1,5 +1,33 @@
 # Change Log
 
+## 13.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 13.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+
+## 13.0.0-next-8.22
+
+### Patch Changes
+
+- f443f81: chore(deps): sync and pin dependencies
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 13.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 13.0.0-next-8.20
 
 ### Patch Changes