chore: replace mime package with constants (#5471 )

* chore: replace mime package with constants * Revert types/mime * Revert types/mime * Update lock file
fix(proxy): proxy protocol check (#5474 )
2025-11-14 07:59:14 +01:00 · 2025-11-14 07:49:57 +01:00 · 2025-11-13 00:22:45 +00:00 · 2025-11-11 08:32:10 +01:00 · 2025-11-10 23:00:04 +01:00 · 2025-11-10 01:14:21 +00:00
314 changed files with 19980 additions and 10090 deletions
--- a/.changeset/beige-cars-raise.md
+++ b/.changeset/beige-cars-raise.md
@@ -0,0 +1,5 @@
+---
+'verdaccio-memory': minor
+---
+
+feat: rewrite of memory storage
--- a/.changeset/beige-lions-type.md
+++ b/.changeset/beige-lions-type.md
@@ -10,7 +10,6 @@
 'verdaccio-memory': major
 '@verdaccio/search-indexer': major
 '@verdaccio/server': major
-'@verdaccio/server-fastify': major
 '@verdaccio/logger': major
 'verdaccio-audit': major
 '@verdaccio/ui-components': major
--- a/.changeset/beige-timers-greet.md
+++ b/.changeset/beige-timers-greet.md
@@ -0,0 +1,10 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore: replace conditional require(fs/promises) pattern
--- a/.changeset/brave-ears-drive.md
+++ b/.changeset/brave-ears-drive.md
@@ -1,7 +1,6 @@
 ---
 '@verdaccio/local-storage': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/ui-components': patch
 '@verdaccio/tarball': patch
--- a/.changeset/brave-rockets-remember.md
+++ b/.changeset/brave-rockets-remember.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/store': patch
+---
+
+fix(storage): check_owners with anonymous access
--- a/.changeset/bright-mugs-buy.md
+++ b/.changeset/bright-mugs-buy.md
@@ -5,7 +5,6 @@
 '@verdaccio/local-scripts': patch
 '@verdaccio/file-locking': patch
 '@verdaccio/ui-theme': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/middleware': patch
 'verdaccio': patch
--- a/.changeset/cool-emus-know.md
+++ b/.changeset/cool-emus-know.md
@@ -0,0 +1,9 @@
+---
+'@verdaccio/url': patch
+'@verdaccio/config': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+---
+
+chore(deps): api, auth, cli, config, url
--- a/.changeset/curvy-bananas-complain.md
+++ b/.changeset/curvy-bananas-complain.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+---
+
+fix(config): avoid warning for multiple addresses
--- a/.changeset/dry-cups-hear.md
+++ b/.changeset/dry-cups-hear.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/test-helper': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+chore: publish @verdaccio/test-helper
--- a/.changeset/famous-hornets-know.md
+++ b/.changeset/famous-hornets-know.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+---
+
+fix(proxy): proxy protocol check
--- a/.changeset/few-ears-deny.md
+++ b/.changeset/few-ears-deny.md
@@ -1,6 +1,5 @@
 ---
 '@verdaccio/local-storage': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/middleware': patch
 '@verdaccio/core': patch
 '@verdaccio/config': patch
--- a/.changeset/friendly-worms-drum.md
+++ b/.changeset/friendly-worms-drum.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore: add types for createConfigFolder
--- a/.changeset/fuzzy-cups-help.md
+++ b/.changeset/fuzzy-cups-help.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/api': patch
+---
+
+chore: replace mime package with constants
--- a/.changeset/lemon-baboons-double.md
+++ b/.changeset/lemon-baboons-double.md
@@ -0,0 +1,13 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/ui-theme': patch
+'verdaccio-memory': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/eslint-config': patch
+'@verdaccio/middleware': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/api': patch
+---
+
+chore(lint): switch rules from jest to vitest
--- a/.changeset/mean-timers-look.md
+++ b/.changeset/mean-timers-look.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(express): housekeeping
--- a/.changeset/pink-jeans-lick.md
+++ b/.changeset/pink-jeans-lick.md
@@ -11,7 +11,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/ui-components': patch
--- a/.changeset/pink-mayflies-hide.md
+++ b/.changeset/pink-mayflies-hide.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/node-api': patch
+'@verdaccio/web': patch
+---
+
+chore(deps): node-api, fastify, ui-comp, web
--- a/.changeset/pre.json
+++ b/.changeset/pre.json
@@ -41,7 +41,6 @@
    "@verdaccio/search": "7.0.0",
    "@verdaccio/search-indexer": "7.0.0",
    "@verdaccio/server": "7.0.0",
-    "@verdaccio/server-fastify": "7.0.0",
    "@verdaccio/signature": "7.0.0",
    "@verdaccio/cli-standalone": "7.0.0",
    "@verdaccio/store": "7.0.0",
@@ -68,9 +67,12 @@
    "afraid-cars-sneeze",
    "afraid-cheetahs-rule",
    "angry-doors-tan",
+    "beige-cars-raise",
    "beige-lions-type",
+    "beige-timers-greet",
    "blue-paws-cheer",
    "brave-ears-drive",
+    "brave-rockets-remember",
    "breezy-geckos-search",
    "breezy-toys-judge",
    "bright-bobcats-ring",
@@ -87,9 +89,11 @@
    "cool-seals-watch",
    "cuddly-paws-laugh",
    "curly-mirrors-smile",
+    "curvy-bananas-complain",
    "curvy-rockets-camp",
    "cyan-snakes-kiss",
    "dirty-countries-play",
+    "dry-cups-hear",
    "early-eyes-float",
    "early-trainers-grin",
    "eight-countries-think",
@@ -104,6 +108,7 @@
    "four-buttons-remember",
    "fresh-owls-hunt",
    "friendly-feet-sing",
+    "friendly-worms-drum",
    "funny-fireants-tan",
    "fuzzy-ears-yawn",
    "gentle-stingrays-repeat",
@@ -126,6 +131,7 @@
    "long-singers-drive",
    "loud-dingos-cough",
    "lucky-crabs-enjoy",
+    "mean-timers-look",
    "modern-llamas-know",
    "nasty-cooks-watch",
    "nasty-experts-bow",
@@ -141,6 +147,9 @@
    "poor-hats-smile",
    "poor-queens-shop",
    "popular-trees-grin",
+    "pretty-beds-destroy",
+    "pretty-carrots-smash",
+    "pretty-news-do",
    "proud-houses-switch",
    "purple-planes-do",
    "quick-avocados-type",
@@ -172,6 +181,7 @@
    "strange-pants-chew",
    "stupid-camels-build",
    "stupid-socks-grow",
+    "sweet-bulldogs-doubt",
    "sweet-crabs-deliver",
    "swift-knives-shop",
    "swift-mangos-grab",
@@ -187,12 +197,14 @@
    "tricky-kiwis-thank",
    "tricky-knives-end",
    "twelve-games-wonder",
+    "twelve-socks-accept",
    "violet-baboons-beg",
    "violet-bobcats-allow",
    "violet-boxes-float",
    "violet-poems-walk",
    "weak-cherries-serve",
    "wet-cats-behave",
+    "wet-comics-listen",
    "wicked-points-relate",
    "wild-coins-lie",
    "yellow-flies-sniff"
--- a/.changeset/pretty-beds-destroy.md
+++ b/.changeset/pretty-beds-destroy.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix: restore minimatch major version
--- a/.changeset/pretty-carrots-smash.md
+++ b/.changeset/pretty-carrots-smash.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+Fix inconsistency in filter plugin invocation upon receiving 304 from uplink after uplink.maxage has passed
--- a/.changeset/pretty-news-do.md
+++ b/.changeset/pretty-news-do.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+fix: minor logger missing type
--- a/.changeset/seven-eggs-sparkle.md
+++ b/.changeset/seven-eggs-sparkle.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): regression after mui 7 upgrade
--- a/.changeset/shiny-buttons-laugh.md
+++ b/.changeset/shiny-buttons-laugh.md
@@ -12,7 +12,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 'verdaccio-audit': patch
 '@verdaccio/test-helper': patch
--- a/.changeset/sweet-bulldogs-doubt.md
+++ b/.changeset/sweet-bulldogs-doubt.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build (2)
--- a/.changeset/twelve-socks-accept.md
+++ b/.changeset/twelve-socks-accept.md
@@ -0,0 +1,12 @@
+---
+'verdaccio-auth-memory': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+'@verdaccio/e2e-ui': patch
+---
+
+chore(deps): sync and pin dependencies
--- a/.changeset/weak-cherries-serve.md
+++ b/.changeset/weak-cherries-serve.md
@@ -4,7 +4,6 @@
 '@verdaccio/ui-theme': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/middleware': patch
 'verdaccio': patch
--- a/.changeset/wet-comics-listen.md
+++ b/.changeset/wet-comics-listen.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build
--- a/.eslintignore
+++ b/.eslintignore
@@ -19,3 +19,5 @@ yarn.js
 packages/ui-components/storybook-static
 dist.js
 bundle.js
+# generator templates
+packages/tools/generator-verdaccio-plugin/generators/app/**
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -1,3 +1,3 @@
 module.exports = {
-  extends: ['@verdaccio/eslint-config'],
+  extends: ['@verdaccio/eslint-config', 'plugin:storybook/recommended'],
 };
--- a/.github/actions/build-app/action.yml
+++ b/.github/actions/build-app/action.yml
@@ -16,7 +16,7 @@ runs:
    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
      uses: ./.github/actions/install-app-node
      with:
-        node-version: ${{ inputs.node_version }}
+        node-version: ${{ inputs.node-version }}
    - name: build
      run: pnpm build
      shell: bash
--- a/.github/actions/cache-packages/action.yml
+++ b/.github/actions/cache-packages/action.yml
@@ -6,7 +6,7 @@ runs:
  steps:
    - name: Cache Packages
      id: cache-packages
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
      with:
        path: ./packages/
        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
--- a/.github/actions/cache-store/action.yml
+++ b/.github/actions/cache-store/action.yml
@@ -6,7 +6,7 @@ runs:
  steps:
    - name: Cache .pnpm-store
      id: cache-npm
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
      with:
        path: ~/.pnpm-store
        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
--- a/.github/workflows/changesets-pr.yml
+++ b/.github/workflows/changesets-pr.yml
@@ -12,7 +12,7 @@ jobs:
    if: github.event.pull_request.head.repo.fork == false
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -17,7 +17,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
            --health-timeout=20s    
            --health-retries=6
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
  lint:
@@ -43,7 +43,7 @@ jobs:
    name: Lint
    needs: prepare
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
        with:
@@ -55,7 +55,7 @@ jobs:
    name: Format
    needs: prepare
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
        with:
@@ -72,7 +72,7 @@ jobs:
    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node ${{ matrix.node_version }}
        uses: ./.github/actions/build-app
        with:
@@ -85,7 +85,7 @@ jobs:
    name: synchronize translations
    if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version-file: '.nvmrc'
@@ -94,7 +94,7 @@ jobs:
          npm install --global corepack@latest
          corepack enable
          corepack install
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
        with:
          path: ~/.pnpm-store
          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,7 +29,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          # We must fetch at least the immediate parents so that if this is
          # a pull request then we can checkout the head.
@@ -37,7 +37,7 @@ jobs:

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
        with:
          config: |
            paths-ignore:
@@ -50,7 +50,7 @@ jobs:
      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
      #   make release

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
--- a/.github/workflows/docker-proxy-apache-e2e.yml
+++ b/.github/workflows/docker-proxy-apache-e2e.yml
@@ -20,7 +20,7 @@ jobs:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
    - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      
    - name: Start containers
      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
--- a/.github/workflows/docker-proxy-nginx-e2e.yml
+++ b/.github/workflows/docker-proxy-nginx-e2e.yml
@@ -18,7 +18,7 @@ jobs:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
    - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      
    - name: Start containers
      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -16,7 +16,7 @@ jobs:
    if: github.repository == 'verdaccio/verdaccio'
    steps:
      - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

      - name: Set up QEMU
        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
@@ -34,7 +34,7 @@ jobs:

      - name: Prepare Docker image tags
        id: docker_meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
        with:
          images: ${{ github.repository }}
          tags: |
--- a/.github/workflows/e2e-ci.yml
+++ b/.github/workflows/e2e-ci.yml
@@ -1,11 +1,14 @@
 name: E2E CLI

 on: [pull_request]
+
 permissions:
  contents: read
+
 concurrency:
  group: e2e-ci-${{ github.ref }}
  cancel-in-progress: true
+
 jobs:
  prepare:
    runs-on: ubuntu-latest
@@ -18,22 +21,12 @@ jobs:
        env:
          NODE_ENV: production
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
-  build:
-    needs: [prepare]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Cache packages
-        uses: ./.github/actions/cache-packages
+
  e2e-cli-npm:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: false
      matrix:
@@ -47,23 +40,25 @@ jobs:
            npm11,
          ]
        node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test

  e2e-cli-pnpm:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: true
      matrix:
@@ -73,23 +68,26 @@ jobs:
            pnpm9,
            pnpm10,
          ]
-        node: [2, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
-        run:  cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+
  e2e-cli-yarn:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: false
      matrix:
@@ -101,18 +99,19 @@ jobs:
            yarn4
          ]
        node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
-
--- a/.github/workflows/e2e-ui.yml
+++ b/.github/workflows/e2e-ui.yml
@@ -19,7 +19,7 @@ jobs:
        env:
          NODE_ENV: production
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node 20
        uses: ./.github/actions/build-app
        with:
--- a/.github/workflows/plugin-generator-e2e.yaml
+++ b/.github/workflows/plugin-generator-e2e.yaml
@@ -16,15 +16,15 @@ jobs:
    runs-on: ubuntu-latest
    strategy:
      matrix:
-        node-version: [20, 22, 23]
+        node-version: [20, 22, 24]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node ${{ matrix.node_version }}
        uses: ./.github/actions/build-app
        with:
          node-version: ${{ matrix.node_version }}
      - name: install verdaccio
-        run: npm install -g verdaccio@5
+        run: npm install -g verdaccio@6
      - name: Start server
        run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
      - name: ping server
--- a/.github/workflows/shared-docker-publish.yml
+++ b/.github/workflows/shared-docker-publish.yml
@@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
      - uses: docker/setup-buildx-action@v1
        with:
--- a/.github/workflows/static-data.yml
+++ b/.github/workflows/static-data.yml
@@ -21,7 +21,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          persist-credentials: false
          fetch-depth: 0
--- a/.github/workflows/test-docker-build.yml
+++ b/.github/workflows/test-docker-build.yml
@@ -6,8 +6,25 @@ jobs:
    name: Test Docker Build
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - name: Build
-      run: docker build .
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - name: Build Docker image
+      run: docker build -t verdaccio-test .
      env:
        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
+    - name: Run Verdaccio in background
+      run: |
+        docker run -d --name verdaccio-test -p 4873:4873 verdaccio-test
+        sleep 10  # Give Verdaccio some time to start
+
+    - name: Test npm install from local Verdaccio
+      run: |
+        npm set registry http://localhost:4873
+        npm install -g verdaccio 
+
+    - name: Show Verdaccio logs (for debugging)
+      if: always()
+      run: docker logs verdaccio-test
+
+    - name: Stop Verdaccio
+      if: always()
+      run: docker stop verdaccio-test
--- a/.github/workflows/test-publish-package.yml
+++ b/.github/workflows/test-publish-package.yml
@@ -1,13 +1,20 @@
 on:
  workflow_call:
+    inputs:
+      verdaccio-version:
+        description: 'Verdaccio version to use'
+        required: false
+        default: 'latest'
+        type: string

 jobs:
  testVerdaccio:
    name: Test Verdaccio Publish
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Publish
-      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      uses: verdaccio/github-actions/publish@master # always latest by design 
      with:
        args: -d
+        verdaccio-version: ${{ inputs.verdaccio-version }}
--- a/.github/workflows/ui-components.yml
+++ b/.github/workflows/ui-components.yml
@@ -21,7 +21,7 @@ jobs:
    env:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -31,7 +31,7 @@ jobs:
    env:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node 20
        uses: ./.github/actions/build-app
        with:
@@ -39,7 +39,7 @@ jobs:
      - name: Build Translations percentage
        run: pnpm --filter @verdaccio/local-scripts build
      - name: Cache Docusaurus Build
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
        with:
          path: website/node_modules/.cache/webpack
          key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
--- a/.github/workflows/x-e2e-angular-cli-workflow.yml
+++ b/.github/workflows/x-e2e-angular-cli-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -44,7 +44,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -80,7 +80,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-audit-workflow.yml
+++ b/.github/workflows/x-e2e-audit-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml
+++ b/.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -42,7 +42,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-jest-workflow.yml
+++ b/.github/workflows/x-e2e-jest-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -38,7 +38,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -72,7 +72,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -105,7 +105,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -138,7 +138,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-release-snapshot.yml
+++ b/.github/workflows/x-release-snapshot.yml
@@ -6,7 +6,7 @@ jobs:
    name: Release Snapshot
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node (latest)
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/x-release.yml
+++ b/.github/workflows/x-release.yml
@@ -6,7 +6,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node (latest)
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/x-smok-test-docker.yml
+++ b/.github/workflows/x-smok-test-docker.yml
@@ -16,7 +16,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version-file: '.nvmrc'
--- a/.github/workflows/x-smok-test-module.yml
+++ b/.github/workflows/x-smok-test-module.yml
@@ -10,7 +10,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Use Node (latest)
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
--- a/.github/workflows/yarn-ci-lint.yml
+++ b/.github/workflows/yarn-ci-lint.yml
@@ -6,7 +6,7 @@ jobs:
    name: Node Lint
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node 
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/yarn-ci.yml
+++ b/.github/workflows/yarn-ci.yml
@@ -9,7 +9,7 @@ jobs:
    name: Node ${{ inputs.node_version }}
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node ${{ inputs.node_version }}
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -136,7 +136,6 @@ Any interaction with the server should be done through the port `8000` eg: `npm
 #### Useful commands

 - `pnpm debug`: Run the server in debug mode `--inspect`. UI runs too but without hot reload. For automatic break use `pnpm debug:break`.
- `pnpm debug:fastify`: To contribute on the [fastify migration](https://github.com/verdaccio/verdaccio/discussions/2155) this is a temporary command for such purpose.
 - `pnpm website`: Build the website, for more commands to run the _website_, run `cd website` and then `pnpm serve`, website will run on port `3000`.
 - `pnpm docker`: Build the docker image. Requires `docker` command available in your system.

--- a/README.md
+++ b/README.md
@@ -329,7 +329,7 @@ You can find and chat with them over Discord, click [here](http://chat.verdaccio
 - [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
 - [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
 - [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
- [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
+- [Amazon SDK for JavaScript (v3)](https://github.com/aws/aws-sdk-js-v3)
 - [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)

 🤓 Don't be shy, add yourself to this readme.
--- a/docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json
+++ b/docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json
@@ -16,9 +16,9 @@
    "build": "babel src/ --out-dir lib/ --copy-files --ignore ___tests___"
  },
  "dependencies": {
-    "@verdaccio/streams": "^1.0.0",
+    "@verdaccio/streams": "10.2.1",
    "http-errors": "1.6.3",
-    "memory-fs": "^0.4.1"
+    "memory-fs": "0.5.0"
  },
  "devDependencies": {
    "@commitlint/cli": "7.0.0",
--- a/docker-examples/v6/README.md
+++ b/docker-examples/v6/README.md
@@ -8,7 +8,7 @@

 ## Proxy

- [Docker + Nginx + Verdaccio](proxy/reverse_proxy/nginx/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
 - [Docker + Apache + Verdaccio](proxy/apache-verdaccio/README.md)
 - [Docker + HTTPS Portal + Verdaccio](proxy/https-portal-example/README.md)

--- a/e2e/cli/cli-commons/package.json
+++ b/e2e/cli/cli-commons/package.json
@@ -4,16 +4,16 @@
  "version": "2.0.0-next-8.1",
  "main": "src/index.ts",
  "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "debug": "4.4.3",
    "fs-extra": "11.2.0",
    "get-port": "5.1.1",
    "got": "11.8.6",
    "js-yaml": "4.1.0",
    "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.20"
+    "verdaccio": "workspace:8.0.0-next-8.24"
  },
  "scripts": {
    "test": "echo no test",
--- a/e2e/cli/e2e-pnpm-commons/publish.ts
+++ b/e2e/cli/e2e-pnpm-commons/publish.ts
@@ -15,9 +15,15 @@ export function runPublish(pnpm) {
    test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
      'should publish a package %s',
      async (pkgName) => {
+        // As of npm v11, npm will fetch the packument from the npm registry before publishing (from the uplink),
+        // and there are more checks in the client:
+        // - "You cannot publish over the previously published versions"
+        // - "You must specify a tag using --tag when publishing a prerelease version"
+        // - "Cannot implicitly apply the 'latest' tag because previously published version x.y.z is higher than the new version a.b.c"
+        // Therefore, we pick a version that is higher than any of the published versions for the test packages (and not a pre-release).
        const { tempFolder } = await prepareGenericEmptyProject(
          pkgName,
-          '1.0.0-patch',
+          '99.0.0',
          registry.port,
          registry.getToken(),
          registry.getRegistryUrl()
@@ -31,7 +37,6 @@ export function runPublish(pnpm) {
        const parsedBody = JSON.parse(resp.stdout as string);
        expect(parsedBody.name).toEqual(pkgName);
        expect(parsedBody.files).toBeDefined();
-        expect(parsedBody.files).toBeDefined();
      }
    );

--- a/e2e/cli/e2e-pnpm-commons/star.ts
+++ b/e2e/cli/e2e-pnpm-commons/star.ts
@@ -20,7 +20,7 @@ export function runStar(pnpm) {
    test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
      const { tempFolder } = await prepareGenericEmptyProject(
        pkgName,
-        '1.0.0-patch',
+        '1.0.0',
        registry.port,
        registry.getToken(),
        registry.getRegistryUrl()
@@ -39,7 +39,7 @@ export function runStar(pnpm) {
    test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
      const { tempFolder } = await prepareGenericEmptyProject(
        pkgName,
-        '1.0.0-patch',
+        '1.0.0',
        registry.port,
        registry.getToken(),
        registry.getRegistryUrl()
@@ -67,7 +67,7 @@ export function runStar(pnpm) {
      const pkgName = '@verdaccio/stars';
      const { tempFolder } = await prepareGenericEmptyProject(
        pkgName,
-        '1.0.0-patch',
+        '1.0.0',
        registry.port,
        registry.getToken(),
        registry.getRegistryUrl()
--- a/e2e/cli/e2e-pnpm-commons/unpublish.ts
+++ b/e2e/cli/e2e-pnpm-commons/unpublish.ts
@@ -22,7 +22,7 @@ export function runUnpublish(pnpm) {
      async (pkgName) => {
        const { tempFolder } = await prepareGenericEmptyProject(
          pkgName,
-          '1.0.0-beta',
+          '1.0.0',
          registry.port,
          registry.getToken(),
          registry.getRegistryUrl()
@@ -53,7 +53,7 @@ export function runUnpublish(pnpm) {
      async (pkgName) => {
        const { tempFolder } = await prepareGenericEmptyProject(
          pkgName,
-          '1.0.0-beta',
+          '1.0.0',
          registry.port,
          registry.getToken(),
          registry.getRegistryUrl()
@@ -69,13 +69,13 @@ export function runUnpublish(pnpm) {
        const resp2 = await pnpm(
          { cwd: tempFolder },
          'unpublish',
-          `${pkgName}@1.0.0-beta`,
+          `${pkgName}@1.0.0`,
          '--force',
          '--loglevel=info',
          '--json',
          ...addRegistry(registry.getRegistryUrl())
        );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0-beta');
+        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0');
      }
    );

--- a/e2e/ui/CHANGELOG.md
+++ b/e2e/ui/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @verdaccio/e2e-ui

+## 2.0.1-next-8.0
+
+### Patch Changes
+
+- f443f81: chore(deps): sync and pin dependencies
+
 ## 2.0.0

 ### Major Changes
--- a/e2e/ui/package.json
+++ b/e2e/ui/package.json
@@ -1,14 +1,14 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-ui",
-  "version": "2.0.0",
+  "version": "2.0.1-next-8.0",
  "devDependencies": {
-    "verdaccio": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.6",
-    "debug": "4.4.1",
-    "cypress": "^13.6.0",
+    "verdaccio": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.8",
+    "debug": "4.4.3",
+    "cypress": "15.6.0",
    "get-port": "5.1.1"
  },
  "scripts": {
--- a/package.json
+++ b/package.json
@@ -15,41 +15,41 @@
    "url": "https://opencollective.com/verdaccio"
  },
  "devDependencies": {
-    "@babel/cli": "7.27.2",
-    "@babel/core": "7.27.4",
+    "@babel/cli": "7.28.3",
+    "@babel/core": "7.28.4",
    "@babel/eslint-parser": "7.25.9",
-    "@babel/node": "7.27.1",
-    "@babel/plugin-proposal-decorators": "7.27.1",
+    "@babel/node": "7.28.0",
+    "@babel/plugin-proposal-decorators": "7.28.0",
    "@babel/plugin-proposal-function-sent": "7.27.1",
    "@babel/plugin-proposal-throw-expressions": "7.27.1",
    "@babel/plugin-syntax-dynamic-import": "7.8.3",
    "@babel/plugin-syntax-import-meta": "7.10.4",
    "@babel/plugin-transform-async-to-generator": "7.27.1",
    "@babel/plugin-transform-class-properties": "7.27.1",
-    "@babel/plugin-transform-classes": "7.27.1",
+    "@babel/plugin-transform-classes": "7.28.4",
    "@babel/plugin-transform-export-namespace-from": "7.27.1",
    "@babel/plugin-transform-json-strings": "7.27.1",
    "@babel/plugin-transform-nullish-coalescing-operator": "7.27.1",
    "@babel/plugin-transform-numeric-separator": "7.27.1",
-    "@babel/plugin-transform-object-rest-spread": "7.27.3",
+    "@babel/plugin-transform-object-rest-spread": "7.28.4",
    "@babel/plugin-transform-optional-chaining": "7.27.1",
-    "@babel/plugin-transform-runtime": "7.27.4",
-    "@babel/preset-env": "7.27.2",
+    "@babel/plugin-transform-runtime": "7.28.3",
+    "@babel/preset-env": "7.28.3",
    "@babel/preset-react": "7.27.1",
    "@babel/preset-typescript": "7.24.7",
-    "@babel/register": "7.27.1",
-    "@babel/runtime": "7.27.6",
+    "@babel/register": "7.28.3",
+    "@babel/runtime": "7.28.4",
    "@changesets/changelog-github": "0.5.1",
    "@changesets/cli": "2.27.12",
    "@changesets/get-dependents-graph": "2.1.3",
    "@crowdin/cli": "4.7.1",
    "@dianmora/contributors": "5.0.0",
-    "@emotion/react": "11.10.6",
-    "@emotion/styled": "11.10.6",
-    "@testing-library/dom": "10.4.0",
-    "@testing-library/jest-dom": "6.6.3",
-    "@testing-library/react": "16.1.0",
-    "@testing-library/user-event": "14.5.2",
+    "@emotion/react": "11.11.4",
+    "@emotion/styled": "11.11.5",
+    "@testing-library/dom": "10.4.1",
+    "@testing-library/jest-dom": "6.8.0",
+    "@testing-library/react": "16.3.0",
+    "@testing-library/user-event": "14.6.1",
    "@trivago/prettier-plugin-sort-imports": "4.3.0",
    "@types/body-parser": "1.19.5",
    "@types/connect": "3.4.38",
@@ -89,14 +89,14 @@
    "@verdaccio/local-scripts": "workspace:*",
    "@verdaccio/types": "workspace:*",
    "@verdaccio/ui-theme": "workspace:*",
-    "@vitest/coverage-v8": "3.0.4",
+    "@vitest/coverage-v8": "3.2.4",
    "aria-query": "5.1.3",
    "babel-core": "7.0.0-bridge.0",
    "babel-plugin-dynamic-import-node": "2.3.3",
    "babel-plugin-emotion": "11.0.0",
    "concurrently": "8.2.2",
    "cross-env": "7.0.3",
-    "debug": "4.4.1",
+    "debug": "4.4.3",
    "detect-secrets": "1.0.6",
    "eslint": "8.57.1",
    "fs-extra": "11.2.0",
@@ -106,24 +106,24 @@
    "kleur": "4.1.5",
    "lint-staged": "11.2.6",
    "nock": "13.5.6",
-    "nodemon": "3.0.3",
-    "npm-run-all2": "5.0.2",
+    "nodemon": "3.1.10",
+    "npm-run-all2": "8.0.4",
    "prettier": "3.4.2",
    "react": "18.3.1",
    "react-dom": "18.3.1",
    "rimraf": "5.0.10",
    "selfsigned": "2.4.1",
-    "semver": "^7.6.3",
-    "supertest": "7.0.0",
+    "semver": "7.7.3",
+    "supertest": "7.1.4",
    "ts-node": "10.9.2",
    "typescript": "5.3.3",
    "undici-types": "5.28.4",
-    "update-ts-references": "3.6.0",
+    "update-ts-references": "3.6.2",
    "verdaccio-audit": "workspace:*",
    "verdaccio-auth-memory": "workspace:*",
    "verdaccio-htpasswd": "workspace:*",
    "verdaccio-memory": "workspace:*",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
  },
  "scripts": {
    "prepare": "husky install",
@@ -147,7 +147,6 @@
    "_debug:reload": "nodemon -d 3 packages/verdaccio/debug/bootstrap.js",
    "start:ts": "ts-node packages/verdaccio/src/start.ts -- --listen 8000",
    "debug": "node --trace-warnings --trace-uncaught --inspect packages/verdaccio/debug/bootstrap.js",
-    "debug:fastify": "cross-env VERDACCIO_SERVER=fastify node --trace-warnings --trace-uncaught --inspect packages/verdaccio/debug/bootstrap.js",
    "debug:break": "node --trace-warnings --trace-uncaught --inspect-brk packages/verdaccio/debug/bootstrap.js",
    "changeset": "changeset",
    "changeset:check": "changeset status --since-master",
--- a/packages/api/CHANGELOG.md
+++ b/packages/api/CHANGELOG.md
@@ -1,5 +1,56 @@
 # @verdaccio/api

+## 8.1.0-next-8.24
+
+### Patch Changes
+
+- Updated dependencies [71587f3]
+  - @verdaccio/store@8.0.0-next-8.24
+  - @verdaccio/core@8.0.0-next-8.24
+  - @verdaccio/config@8.0.0-next-8.24
+  - @verdaccio/auth@8.0.0-next-8.24
+  - @verdaccio/middleware@8.0.0-next-8.24
+  - @verdaccio/logger@8.0.0-next-8.24
+
+## 8.1.0-next-8.23
+
+### Patch Changes
+
+- 5c499fa: chore: publish @verdaccio/test-helper
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/store@8.0.0-next-8.23
+  - @verdaccio/auth@8.0.0-next-8.23
+  - @verdaccio/middleware@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/logger@8.0.0-next-8.23
+
+## 8.1.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/store@8.0.0-next-8.22
+  - @verdaccio/auth@8.0.0-next-8.22
+  - @verdaccio/middleware@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.1.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/auth@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/middleware@8.0.0-next-8.21
+  - @verdaccio/store@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.1.0-next-8.20

 ### Patch Changes
--- a/packages/api/package.json
+++ b/packages/api/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/api",
-  "version": "8.1.0-next-8.20",
+  "version": "8.1.0-next-8.24",
  "description": "Verdaccio Registry API",
  "main": "./build/index.js",
  "types": "build/index.d.ts",
@@ -42,26 +42,23 @@
  },
  "license": "MIT",
  "dependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.20",
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.20",
-    "@verdaccio/store": "workspace:8.0.0-next-8.20",
-    "abortcontroller-polyfill": "1.7.8",
-    "body-parser": "1.20.3",
-    "cookies": "0.9.1",
-    "debug": "4.4.1",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.24",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.24",
+    "@verdaccio/store": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
    "express": "4.21.2",
-    "lodash": "4.17.21",
-    "mime": "2.6.0",
-    "semver": "7.7.2"
+    "lodash": "4.17.21"
  },
  "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.6",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.8",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
    "mockdate": "3.0.5",
-    "supertest": "7.0.0"
+    "nock": "13.5.6",
+    "supertest": "7.1.4",
+    "vitest": "3.2.4"
  },
  "funding": {
    "type": "opencollective",
--- a/packages/api/src/dist-tags.ts
+++ b/packages/api/src/dist-tags.ts
@@ -1,9 +1,8 @@
 import { Router } from 'express';
 import _ from 'lodash';
-import mime from 'mime';

 import { Auth } from '@verdaccio/auth';
-import { constants, errorUtils } from '@verdaccio/core';
+import { HEADERS, constants, errorUtils } from '@verdaccio/core';
 import { allow, media } from '@verdaccio/middleware';
 import { DIST_TAGS_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
@@ -42,14 +41,14 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
  route.put(
    DIST_TAGS_API_ENDPOINTS.tagging,
    can('publish'),
-    media(mime.getType('json')),
+    media(HEADERS.JSON),
    addTagPackageVersionMiddleware
  );

  route.put(
    DIST_TAGS_API_ENDPOINTS.tagging_package,
    can('publish'),
-    media(mime.getType('json')),
+    media(HEADERS.JSON),
    addTagPackageVersionMiddleware
  );

--- a/packages/api/src/publish.ts
+++ b/packages/api/src/publish.ts
@@ -1,9 +1,8 @@
 import buildDebug from 'debug';
 import { Router } from 'express';
-import mime from 'mime';

 import { Auth } from '@verdaccio/auth';
-import { API_MESSAGE, HTTP_STATUS } from '@verdaccio/core';
+import { API_MESSAGE, HEADERS, HTTP_STATUS } from '@verdaccio/core';
 import { allow, expectJson, media } from '@verdaccio/middleware';
 // import star from './star';
 import { PUBLISH_API_ENDPOINTS } from '@verdaccio/middleware';
@@ -122,7 +121,7 @@ export default function publish(
  router.put(
    PUBLISH_API_ENDPOINTS.add_package,
    can('publish'),
-    media(mime.getType('json')),
+    media(HEADERS.JSON),
    expectJson,
    publishPackage(storage, logger, 'publish one version')
  );
@@ -130,7 +129,7 @@ export default function publish(
  router.put(
    PUBLISH_API_ENDPOINTS.publish_package,
    can('unpublish'),
-    media(mime.getType('json')),
+    media(HEADERS.JSON),
    expectJson,
    publishPackage(storage, logger, 'publish with revision')
  );
--- a/packages/api/test/integration/_helper.ts
+++ b/packages/api/test/integration/_helper.ts
@@ -27,7 +27,7 @@ setup({});

 export const buildToken = authUtils.buildToken;

-export const getConf = (conf) => {
+export const getConf = (conf: string) => {
  const configPath = path.join(__dirname, 'config', conf);
  const config = parseConfigFile(configPath);
  // custom config to avoid conflict with other tests
@@ -35,12 +35,12 @@ export const getConf = (conf) => {
  return config;
 };

-export async function initializeServer(configName): Promise<Application> {
+export async function initializeServer(configName: string): Promise<Application> {
  const config = getConf(configName);
  return initializeServerHelper(config, [apiMiddleware], Storage);
 }

-export function createUser(app, name: string, password: string): supertest.Test {
+export function createUser(app: any, name: string, password: string): supertest.Test {
  return supertest(app)
    .put(`/-/user/org.couchdb.user:${name}`)
    .send({
@@ -61,7 +61,7 @@ export async function getNewToken(app: any, credentials: any): Promise<string> {
  return token;
 }

-export async function generateTokenCLI(app, token, payload): Promise<any> {
+export async function generateTokenCLI(app: any, token: string, payload: any): Promise<any> {
  return supertest(app)
    .post('/-/npm/v1/tokens')
    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
@@ -70,7 +70,7 @@ export async function generateTokenCLI(app, token, payload): Promise<any> {
    .expect(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON_CHARSET);
 }

-export async function deleteTokenCLI(app, token, tokenToDelete): Promise<any> {
+export async function deleteTokenCLI(app: any, token: string, tokenToDelete: string): Promise<any> {
  return supertest(app)
    .delete(`/-/npm/v1/tokens/token/${tokenToDelete}`)
    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
@@ -80,7 +80,7 @@ export async function deleteTokenCLI(app, token, tokenToDelete): Promise<any> {
 }

 export function publishVersionWithToken(
-  app,
+  app: any,
  pkgName: string,
  version: string,
  token: string,
@@ -98,7 +98,7 @@ export function publishVersionWithToken(
 }

 export function publishVersion(
-  app,
+  app: any,
  pkgName: string,
  version: string,
  distTags?: GenericBody,
@@ -121,7 +121,7 @@ export function publishVersion(
 }

 export function starPackage(
-  app,
+  app: any,
  options: {
    users: PackageUsers;
    name: string;
@@ -152,7 +152,7 @@ export function starPackage(
 }

 export function changeOwners(
-  app,
+  app: any,
  options: {
    maintainers: Author[];
    name: string;
@@ -182,7 +182,7 @@ export function changeOwners(
  return test;
 }

-export function getDisTags(app, pkgName) {
+export function getDisTags(app: any, pkgName: string): supertest.Test {
  return supertest(app)
    .get(`/-/package/${encodeURIComponent(pkgName)}/dist-tags`)
    .set(HEADER_TYPE.CONTENT_TYPE, HEADERS.JSON)
--- a/packages/api/test/integration/owner.spec.ts
+++ b/packages/api/test/integration/owner.spec.ts
@@ -1,4 +1,3 @@
-/* eslint-disable jest/no-commented-out-tests */
 import nock from 'nock';
 import { describe, expect, test } from 'vitest';

--- a/packages/api/test/integration/profile.spec.ts
+++ b/packages/api/test/integration/profile.spec.ts
@@ -5,8 +5,8 @@ import { HEADERS, HEADER_TYPE, HTTP_STATUS, TOKEN_BEARER } from '@verdaccio/core

 import { buildToken, createUser, initializeServer } from './_helper';

-describe('profile ', () => {
-  describe('get profile ', () => {
+describe('profile', () => {
+  describe('get profile', () => {
    test('should return Unauthorized if header token is missing', async () => {
      const app = await initializeServer('profile.yaml');
      return supertest(app)
@@ -26,7 +26,7 @@ describe('profile ', () => {
        .expect(HTTP_STATUS.OK);
    });
  });
-  describe('post profile ', () => {
+  describe('post profile', () => {
    test('should return Unauthorized if header token is missing', async () => {
      const app = await initializeServer('profile.yaml');
      return supertest(app)
--- a/packages/auth/CHANGELOG.md
+++ b/packages/auth/CHANGELOG.md
@@ -1,5 +1,50 @@
 # @verdaccio/auth

+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/loaders@8.0.0-next-8.14
+- verdaccio-htpasswd@13.0.0-next-8.24
+- @verdaccio/signature@8.0.0-next-8.16
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/loaders@8.0.0-next-8.13
+  - verdaccio-htpasswd@13.0.0-next-8.23
+  - @verdaccio/signature@8.0.0-next-8.15
+  - @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/loaders@8.0.0-next-8.12
+  - @verdaccio/config@8.0.0-next-8.22
+  - verdaccio-htpasswd@13.0.0-next-8.22
+  - @verdaccio/signature@8.0.0-next-8.14
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/loaders@8.0.0-next-8.11
+  - verdaccio-htpasswd@13.0.0-next-8.21
+  - @verdaccio/signature@8.0.0-next-8.13
+
 ## 8.0.0-next-8.20

 ### Patch Changes
--- a/packages/auth/package.json
+++ b/packages/auth/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/auth",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
  "description": "Verdaccio Authentication",
  "main": "./build/index.js",
  "types": "./build/index.d.ts",
@@ -42,20 +42,21 @@
  },
  "license": "MIT",
  "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/loaders": "workspace:8.0.0-next-8.10",
-    "@verdaccio/signature": "workspace:8.0.0-next-8.12",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/loaders": "workspace:8.0.0-next-8.14",
+    "@verdaccio/signature": "workspace:8.0.0-next-8.16",
+    "debug": "4.4.3",
    "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:13.0.0-next-8.20"
+    "verdaccio-htpasswd": "workspace:13.0.0-next-8.24"
  },
  "devDependencies": {
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.20",
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
    "express": "4.21.2",
-    "supertest": "7.0.0"
+    "supertest": "7.1.4",
+    "vitest": "3.2.4"
  },
  "funding": {
    "type": "opencollective",
--- a/packages/auth/src/types.ts
+++ b/packages/auth/src/types.ts
@@ -1,4 +1,4 @@
-import { NextFunction, Request, Response } from 'express';
+import type { NextFunction, Request, Response } from 'express';

 import { VerdaccioError } from '@verdaccio/core';
 import { AuthPackageAllow, JWTSignOptions, Logger, RemoteUser } from '@verdaccio/types';
--- a/packages/cli/CHANGELOG.md
+++ b/packages/cli/CHANGELOG.md
@@ -1,5 +1,46 @@
 # @verdaccio/cli

+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/node-api@8.0.0-next-8.24
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/config@8.0.0-next-8.24
+- @verdaccio/logger@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- Updated dependencies [b671a38]
+  - @verdaccio/config@8.0.0-next-8.23
+  - @verdaccio/node-api@8.0.0-next-8.23
+  - @verdaccio/core@8.0.0-next-8.23
+  - @verdaccio/logger@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+- Updated dependencies [05f03b3]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/config@8.0.0-next-8.22
+  - @verdaccio/node-api@8.0.0-next-8.22
+  - @verdaccio/logger@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/config@8.0.0-next-8.21
+  - @verdaccio/node-api@8.0.0-next-8.21
+  - @verdaccio/logger@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20

 ### Patch Changes
--- a/packages/cli/package.json
+++ b/packages/cli/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/cli",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
  "author": {
    "name": "Juan Picado",
    "email": "juanpicado19@gmail.com"
@@ -47,17 +47,18 @@
    "start": "ts-node src/index.ts"
  },
  "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.20",
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.20",
-    "@verdaccio/node-api": "workspace:8.0.0-next-8.20",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.24",
+    "@verdaccio/node-api": "workspace:8.0.0-next-8.24",
    "clipanion": "4.0.0-rc.4",
-    "envinfo": "7.14.0",
-    "kleur": "4.1.5",
-    "semver": "7.7.2"
+    "envinfo": "7.19.0",
+    "semver": "7.7.3"
  },
  "devDependencies": {
-    "ts-node": "10.9.2"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "ts-node": "10.9.2",
+    "vitest": "3.2.4"
  },
  "funding": {
    "type": "opencollective",
--- a/packages/config/CHANGELOG.md
+++ b/packages/config/CHANGELOG.md
@@ -1,5 +1,35 @@
 # @verdaccio/config

+## 8.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+### Patch Changes
+
+- b671a38: chore: add types for createConfigFolder
+  - @verdaccio/core@8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+- 05f03b3: fix(config): avoid warning for multiple addresses
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+
 ## 8.0.0-next-8.20

 ### Minor Changes
--- a/packages/config/package.json
+++ b/packages/config/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/config",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
  "description": "Verdaccio Configuration",
  "main": "./build/index.js",
  "types": "build/index.d.ts",
@@ -42,14 +42,14 @@
    "build": "pnpm run build:js && pnpm run build:types"
  },
  "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "debug": "4.4.1",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "debug": "4.4.3",
    "js-yaml": "4.1.0",
-    "lodash": "4.17.21",
-    "minimatch": "7.4.6"
+    "lodash": "4.17.21"
  },
  "devDependencies": {
-    "@types/minimatch": "5.1.2"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "vitest": "3.2.4"
  },
  "funding": {
    "type": "opencollective",
--- a/packages/config/src/address.ts
+++ b/packages/config/src/address.ts
@@ -1,7 +1,7 @@
 import createDebug from 'debug';

 import { DEFAULT_DOMAIN, DEFAULT_PORT, DEFAULT_PROTOCOL } from '@verdaccio/core';
-import { Logger } from '@verdaccio/types';
+import { ListenAddress as ConfigListenAddress, Logger } from '@verdaccio/types';

 const debug = createDebug('verdaccio:config:address');

@@ -70,7 +70,10 @@ function addrToString(a: ListenAddress): string {
 - localhost:5557
 @return {Array}
 */
-export function getListenAddress(listen: (string | void)[], logger: Logger): ListenAddress {
+export function getListenAddress(
+  listen: ConfigListenAddress | string | undefined,
+  logger: Logger
+): ListenAddress {
  debug('getListenAddress called with %o', listen);

  if (!listen) {
@@ -86,31 +89,17 @@ export function getListenAddress(listen: (string | void)[], logger: Logger): Lis
    }

    const invalid: string[] = [];
+    const valid: ListenAddress[] = [];

    for (const raw of filteredListen) {
      const candidate = parseAddress(raw as string);
      if (candidate) {
        debug('valid listen address found: %o', candidate);
-
-        invalid.forEach((bad) =>
-          logger.warn(
-            { addr: bad },
-            'invalid address - @{addr}, we expect a port (e.g. "4873"), ' +
-              'host:port (e.g. "localhost:4873"), full url ' +
-              '(e.g. "http://localhost:4873/") or unix:/path/socket'
-          )
-        );
-
-        if (listen.length > 1) {
-          logger.warn(
-            `Multiple listen addresses are not supported, using the first valid one ${addrToString(
-              candidate
-            )}`
-          );
-        }
-        return candidate;
+        valid.push(candidate);
+      } else {
+        debug('invalid address found: %o', raw);
+        invalid.push(raw as string);
      }
-      invalid.push(raw as string);
    }

    invalid.forEach((bad) =>
@@ -121,10 +110,25 @@ export function getListenAddress(listen: (string | void)[], logger: Logger): Lis
          '(e.g. "http://localhost:4873/") or unix:/path/socket'
      )
    );
-    throw new Error('No valid listen addresses found in configuration array');
+
+    if (valid.length === 0) {
+      throw new Error('No valid listen addresses found in configuration array');
+    }
+
+    const firstValid = valid[0];
+
+    if (listen.length > 1) {
+      logger.warn(
+        `Multiple listen addresses are not supported, using the first valid one ${addrToString(
+          firstValid
+        )}`
+      );
+    }
+
+    return firstValid;
  }

-  const single = parseAddress(listen);
+  const single = parseAddress(listen as string);
  if (!single) {
    throw new Error(
      `Invalid address - ${listen}, we expect a port (e.g. "4873"), ` +
--- a/packages/config/src/conf/default.yaml
+++ b/packages/config/src/conf/default.yaml
@@ -72,6 +72,10 @@ auth:
    # Maximum amount of users allowed to register, defaults to "+inf".
    # You can set this to -1 to disable registration.
    # max_users: 1000
+    # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+    # algorithm: bcrypt # by default is crypt, but is recommended use bcrypt for new installations
+    # Rounds number for "bcrypt", will be ignored for other algorithms.
+    # rounds: 10

 # A list of other known repositories we can talk to
 # https://verdaccio.org/docs/configuration#uplinks
--- a/packages/config/src/config-path.ts
+++ b/packages/config/src/config-path.ts
@@ -78,7 +78,7 @@ export function readDefaultConfig(): string {
  return fs.readFileSync(pathDefaultConf, 'utf8');
 }

-function createConfigFolder(configLocation): void {
+function createConfigFolder(configLocation: SetupDirectory): void {
  const folder = path.dirname(configLocation.path);
  debug(`creating default config file folder at %o`, folder);
  fs.mkdirSync(folder, { recursive: true });
--- a/packages/config/test/address.spec.ts
+++ b/packages/config/test/address.spec.ts
@@ -56,12 +56,12 @@ describe('address parsing', () => {
    });

    test('throws when given an empty array', () => {
-      expect(() => getListenAddress([])).toThrow(/array cannot be empty/i);
+      expect(() => getListenAddress([], logger)).toThrow(/array cannot be empty/i);
      expect(warn).not.toHaveBeenCalled();
    });

    test('localhost:4873  (default value)', () => {
-      const addr = getListenAddress('localhost:4873');
+      const addr = getListenAddress('localhost:4873', logger);

      expect(addr).toEqual({ proto: 'http', host: 'localhost', port: '4873' });
      expect(warn).not.toHaveBeenCalled();
--- a/packages/config/test/config-parsing.spec.ts
+++ b/packages/config/test/config-parsing.spec.ts
@@ -1,4 +1,4 @@
-import fs from 'node:fs';
+import { writeFile } from 'node:fs/promises';
 import path from 'node:path';
 import { describe, expect, test } from 'vitest';

@@ -7,8 +7,6 @@ import { fileUtils } from '@verdaccio/core';
 import { fromJStoYAML, parseConfigFile } from '../src';
 import { parseConfigurationFile } from './utils';

-const { writeFile } = fs.promises ? fs.promises : require('fs/promises');
-
 describe('parse', () => {
  describe('parseConfigFile', () => {
    describe('JSON format', () => {
--- a/packages/config/test/config.spec.ts
+++ b/packages/config/test/config.spec.ts
@@ -137,7 +137,6 @@ describe('checkSecretKey', () => {
    const config = new Config(parseConfigFile(resolveConf('default')), {
      forceMigrateToSecureLegacySignature: false,
    });
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(() =>
      // 64 characters secret long
      config.checkSecretKey('b4982dbb0108531fafb552374d7e83724b6458a2b3ffa97ad0edb899bdaefc4a')
@@ -149,7 +148,6 @@ describe('checkSecretKey', () => {
      forceMigrateToSecureLegacySignature: false,
    });
    config.security.api.migrateToSecureLegacySignature = true;
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(
      config.checkSecretKey('b4982dbb0108531fafb552374d7e83724b6458a2b3ffa97ad0edb899bdaefc4a')
    ).toHaveLength(TOKEN_VALID_LENGTH);
@@ -161,7 +159,6 @@ describe('checkSecretKey', () => {
      const config = new Config(parseConfigFile(resolveConf('default')));
      config.security.api.migrateToSecureLegacySignature = false;
      // 64 characters secret long
-      // eslint-disable-next-line jest/no-standalone-expect
      expect(
        config.checkSecretKey('b4982dbb0108531fafb552374d7e83724b6458a2b3ffa97ad0edb899bdaefc4a')
      ).toHaveLength(64);
@@ -172,17 +169,16 @@ describe('checkSecretKey', () => {
    const config = new Config(parseConfigFile(resolveConf('default')));
    config.security.api.migrateToSecureLegacySignature = true;
    // 64 characters secret long
-    // eslint-disable-next-line jest/no-standalone-expect
    expect(
      config.checkSecretKey('b4982dbb0108531fafb552374d7e83724b6458a2b3ffa97ad0edb899bdaefc4a')
    ).toHaveLength(TOKEN_VALID_LENGTH);
  });

-  test.todo('test emit warning with secret key');
+  test.todo('emit warning with secret key');
 });

 describe('getMatchedPackagesSpec', () => {
-  test('should match with react as defined in config file', () => {
+  test('should match with react as defined in config file - react', () => {
    const configParsed = parseConfigFile(parseConfigurationFile('config-getMatchedPackagesSpec'));
    const config = new Config(configParsed);
    expect(config.getMatchedPackagesSpec('react')).toEqual({
@@ -193,7 +189,7 @@ describe('getMatchedPackagesSpec', () => {
    });
  });

-  test('should not match with react as defined in config file', () => {
+  test('should not match with react as defined in config file - somePackage', () => {
    const configParsed = parseConfigFile(parseConfigurationFile('config-getMatchedPackagesSpec'));
    const config = new Config(configParsed);
    expect(config.getMatchedPackagesSpec('somePackage')).toEqual({
--- a/packages/config/test/parse.spec.ts
+++ b/packages/config/test/parse.spec.ts
@@ -12,7 +12,7 @@ describe('getConfigParsed', () => {
    expect(config).toBeDefined();
  });

-  test('parses config from a YAML file path', () => {
+  test('parses config from JSON', () => {
    const yamlFile = path.join(partialsDir, 'config-getMatchedPackagesSpec.yaml');
    const config = getConfigParsed(parseConfigFile(yamlFile));
    expect(config).toBeDefined();
--- a/packages/core/core/CHANGELOG.md
+++ b/packages/core/core/CHANGELOG.md
@@ -1,5 +1,22 @@
 # @verdaccio/core

+## 8.0.0-next-8.24
+
+## 8.0.0-next-8.23
+
+## 8.0.0-next-8.22
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+- 60ef8ff: fix(storage): check_owners with anonymous access
+
+## 8.0.0-next-8.21
+
+### Patch Changes
+
+- f8a321f: fix: restore minimatch major version
+
 ## 8.0.0-next-8.20

 ### Minor Changes
--- a/packages/core/core/package.json
+++ b/packages/core/core/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/core",
-  "version": "8.0.0-next-8.20",
+  "version": "8.0.0-next-8.24",
  "description": "Verdaccio Core Components",
  "keywords": [
    "private",
@@ -36,15 +36,15 @@
    "ajv": "8.17.1",
    "http-errors": "2.0.0",
    "http-status-codes": "2.3.0",
-    "minimatch": "10.0.1",
+    "minimatch": "7.4.6",
    "process-warning": "1.0.0",
-    "semver": "7.7.2"
+    "semver": "7.7.3"
  },
  "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
    "express": "4.21.2",
-    "typedoc": "0.23.25",
-    "vitest": "3.0.4"
+    "typedoc": "0.28.14",
+    "vitest": "3.2.4"
  },
  "scripts": {
    "clean": "rimraf ./build",
--- a/packages/core/core/src/constants.ts
+++ b/packages/core/core/src/constants.ts
@@ -7,7 +7,8 @@ export const DIST_TAGS = 'dist-tags';
 export const LATEST = 'latest';
 export const USERS = 'users';
 export const MAINTAINERS = 'maintainers';
-export const DEFAULT_USER = 'Anonymous';
+export const DEFAULT_USER = 'Anonymous'; // for display purposes
+export const ANONYMOUS_USER = 'anonymous'; // for username purposes

 export const HEADER_TYPE = {
  CONTENT_ENCODING: 'content-encoding',
--- a/packages/core/core/src/file-utils.ts
+++ b/packages/core/core/src/file-utils.ts
@@ -1,4 +1,4 @@
-import fs from 'node:fs';
+import { mkdir, mkdtemp } from 'node:fs/promises';
 import os from 'node:os';
 import path from 'node:path';

@@ -6,8 +6,6 @@ export const Files = {
  DatabaseName: '.verdaccio-db.json',
 };

-const { mkdir, mkdtemp } = fs.promises ? fs.promises : require('fs/promises');
-
 /**
 * Create a temporary folder.
 * @param prefix The prefix of the folder name.
--- a/packages/core/core/src/index.ts
+++ b/packages/core/core/src/index.ts
@@ -25,6 +25,7 @@ export {
  LATEST,
  DEFAULT_PASSWORD_VALIDATION,
  DEFAULT_USER,
+  ANONYMOUS_USER,
  USERS,
  MAINTAINERS,
  PLUGIN_CATEGORY,
--- a/packages/core/file-locking/CHANGELOG.md
+++ b/packages/core/file-locking/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Change Log

+## 13.0.0-next-8.6
+
+### Patch Changes
+
+- 67e667b: chore: replace conditional require(fs/promises) pattern
+
 ## 13.0.0-next-8.5

 ### Patch Changes
--- a/packages/core/file-locking/package.json
+++ b/packages/core/file-locking/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/file-locking",
-  "version": "13.0.0-next-8.5",
+  "version": "13.0.0-next-8.6",
  "description": "Verdaccio File Locking Library",
  "keywords": [
    "private",
@@ -39,8 +39,8 @@
    "lockfile": "1.0.4"
  },
  "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
-    "vitest": "3.0.4"
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "vitest": "3.2.4"
  },
  "scripts": {
    "clean": "rimraf ./build",
--- a/packages/core/file-locking/src/utils.ts
+++ b/packages/core/file-locking/src/utils.ts
@@ -1,10 +1,8 @@
 import locker from 'lockfile';
-import fs from 'node:fs';
+import * as fsP from 'node:fs/promises';
 import path from 'node:path';
 import { promisify } from 'node:util';

-const fsP = fs.promises ? fs.promises : require('fs/promises');
-
 export const readFile = fsP.readFile;
 const statPromise = fsP.stat;
 // https://github.com/npm/lockfile/issues/33
--- a/packages/core/tarball/CHANGELOG.md
+++ b/packages/core/tarball/CHANGELOG.md
@@ -1,5 +1,37 @@
 # Change Log

+## 13.0.0-next-8.24
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.24
+- @verdaccio/url@13.0.0-next-8.24
+
+## 13.0.0-next-8.23
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.23
+- @verdaccio/url@13.0.0-next-8.23
+
+## 13.0.0-next-8.22
+
+### Patch Changes
+
+- f443f81: chore(deps): sync and pin dependencies
+- Updated dependencies [67e667b]
+- Updated dependencies [60ef8ff]
+  - @verdaccio/core@8.0.0-next-8.22
+  - @verdaccio/url@13.0.0-next-8.22
+
+## 13.0.0-next-8.21
+
+### Patch Changes
+
+- Updated dependencies [f8a321f]
+  - @verdaccio/core@8.0.0-next-8.21
+  - @verdaccio/url@13.0.0-next-8.21
+
 ## 13.0.0-next-8.20

 ### Patch Changes
--- a/packages/core/tarball/package.json
+++ b/packages/core/tarball/package.json
@@ -1,6 +1,6 @@
 {
  "name": "@verdaccio/tarball",
-  "version": "13.0.0-next-8.20",
+  "version": "13.0.0-next-8.24",
  "description": "Verdaccio Tarball Utilities",
  "keywords": [
    "private",
@@ -33,16 +33,16 @@
    "access": "public"
  },
  "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.20",
-    "@verdaccio/url": "workspace:13.0.0-next-8.20",
-    "debug": "4.4.1",
-    "gunzip-maybe": "^1.4.2",
-    "tar-stream": "^3.1.7"
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/url": "workspace:13.0.0-next-8.24",
+    "debug": "4.4.3",
+    "gunzip-maybe": "1.4.2",
+    "tar-stream": "3.1.7"
  },
  "devDependencies": {
-    "@verdaccio/types": "workspace:13.0.0-next-8.7",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
    "node-mocks-http": "1.14.1",
-    "vitest": "3.0.4"
+    "vitest": "3.2.4"
  },
  "scripts": {
    "clean": "rimraf ./build",
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
Marc Bernard	ab3bf4a5d4	chore: replace mime package with constants (#5471 ) * chore: replace mime package with constants * Revert types/mime * Revert types/mime * Update lock file	2025-11-14 07:59:14 +01:00
Marc Bernard	265c94af37	fix(proxy): proxy protocol check (#5474 ) * fix(proxy): proxy protocol check * Clarify docs	2025-11-14 07:49:57 +01:00
verdacciobot	430b3173b1	chore: updated static data	2025-11-13 00:22:45 +00:00
Marc Bernard	05c8e517c1	fix(ui): regression after MUI 7 upgrade (#5469 )	2025-11-11 08:32:10 +01:00
Marc Bernard	b24f513b92	chore(lint): switch rules from jest to vitest (#5470 ) * chore(lint): switch rules from jest to vitest * Revert tsconfig * Update active-directory	2025-11-10 23:00:04 +01:00
verdacciobot	6c0f9f9ba0	chore: updated static data	2025-11-10 01:14:21 +00:00
renovate[bot]	87b9c1e8da	fix(deps): update dependency validator to v13.15.22 (#5467 )	2025-11-09 15:45:26 +01:00
Marc Bernard	3aff890593	chore(deps): api, auth, cli, config, url (#5459 )	2025-11-09 12:58:31 +01:00
renovate[bot]	b1ceb7b3ad	chore(deps): update dependency cypress to v15.6.0 (#5465 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-08 17:52:52 +01:00
renovate[bot]	92a65eb6b4	chore(deps): update github/codeql-action digest to 51f7732 (#5454 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-11-08 12:46:12 +01:00
Juan Picado	9ecfd5a256	Update pink-mayflies-hide.md	2025-11-08 11:06:52 +01:00
Juan Picado	f3d696facb	feat!: remove fastify server packages (#5463 )	2025-11-08 10:11:23 +01:00
Marc Bernard	6d1a84aba1	chore(deps): node-api, fastify, ui-comp, web (#5460 )	2025-11-07 21:44:20 +01:00
verdacciobot	6b9ac25158	chore: updated static data	2025-11-06 00:16:04 +00:00
verdacciobot	a94cc9c8e5	chore: updated static data	2025-11-03 00:17:11 +00:00
dependabot[bot]	f831a6508f	chore(deps): bump github/codeql-action from 3.30.5 to 4.31.2 (#5451 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.31.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`3599b3baa1...0499de31b9`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.2 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-11-01 16:16:09 +01:00
verdacciobot	87d99ec1ed	chore: updated static data	2025-10-30 00:16:50 +00:00
verdacciobot	1661abb5a8	chore: updated static data	2025-10-27 00:17:27 +00:00
Juan Picado	26a339518f	chore: update material-ui and storybook 9 (#5444 ) * chore: update material ui 7 * chore: update storybook 9	2025-10-26 12:47:29 +01:00
renovate[bot]	a97c85e975	fix(deps): update dependency pino to v9.14.0 (#5442 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-10-24 18:49:58 +02:00
renovate[bot]	1da9aefce3	fix(deps): update dependency core-js to v3.46.0 (#5441 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-10-24 18:31:04 +02:00
verdacciobot	c2ef25dfa1	chore: updated static data	2025-10-23 00:15:59 +00:00
verdacciobot	8dc3f3e1bc	chore: updated static data	2025-10-20 00:16:57 +00:00
Juan Picado	e3b155ef5b	chore: update versions (next-8) (#5438 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-10-19 21:40:22 +02:00
Vitaliy Sugrobov	71587f328d	fix: filter plugin invocation on 304 from uplink (#5413 ) * fix: invoke filter plugin after receiving 304 * Add changeset for filter plugin invocation fix	2025-10-19 16:16:16 +02:00
renovate[bot]	dcce77e502	fix(deps): update dependency envinfo to v7.19.0 (#5436 )	2025-10-18 21:36:29 +02:00
renovate[bot]	ae7d2610f2	fix(deps): update dependency react-hook-form to v7.65.0 (#5437 )	2025-10-18 20:36:16 +02:00
renovate[bot]	24675a3564	chore(deps): update dependency sass to v1.93.2 (#5435 )	2025-10-17 14:55:00 +02:00
renovate[bot]	2c5f96abdd	chore(deps): update dependency msw-storybook-addon to v2.0.6 (#5434 )	2025-10-17 13:21:29 +02:00
renovate[bot]	a19b6cce6a	chore(deps): update dependency mini-css-extract-plugin to v2.9.4 (#5431 )	2025-10-17 09:06:22 +02:00
renovate[bot]	7af3e28d24	chore(deps): update dependency nodemon to v3.1.10 (#5432 )	2025-10-16 21:27:06 +02:00
renovate[bot]	12022bccf8	chore(deps): update dependency webpack to v5.102.1 (#5433 )	2025-10-16 19:13:26 +02:00
renovate[bot]	debd5474ad	chore(deps): update dependency typedoc to v0.28.14 (#5430 )	2025-10-16 09:20:00 +02:00
verdacciobot	e51fbd5acd	chore: updated static data	2025-10-16 00:15:48 +00:00
renovate[bot]	997fcf2c3b	chore(deps): update dependency ts-jest to v29.4.5 (#5429 )	2025-10-15 22:17:14 +02:00
renovate[bot]	a3cb0f4070	fix(deps): update dependency dompurify to v3.3.0 (#5427 )	2025-10-14 18:34:46 +02:00
renovate[bot]	19e263ef7a	chore(deps): update dependency esbuild to v0.25.10 (#5428 )	2025-10-14 16:11:36 +02:00
renovate[bot]	f29caa04a4	fix(deps): update dependency semver to v7.7.3 (#5425 )	2025-10-14 14:20:18 +02:00
renovate[bot]	6ae7c2a82e	chore(deps): update dependency cypress to v15 (#5426 )	2025-10-14 07:30:41 +02:00
verdacciobot	6fa242f975	chore: updated static data	2025-10-13 00:16:35 +00:00
verdacciobot	5561a1e7d9	chore: updated static data	2025-10-09 00:15:45 +00:00
renovate[bot]	a45c4db7bb	fix(deps): update dependency validator to v13.15.15 (#5422 )	2025-10-07 21:23:35 +02:00
renovate[bot]	6f07f90782	fix(deps): update dependency pino to v9.13.1 (#5421 )	2025-10-07 03:41:53 +02:00
verdacciobot	c0e37809b3	chore: updated static data	2025-10-06 00:15:27 +00:00
Juan Picado	daf19a572e	Revert "chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 (#5415 )" (#5423 ) This reverts commit `0a7466064f`.	2025-10-05 23:50:19 +02:00
dependabot[bot]	fbfef1653c	chore(deps): bump github/codeql-action from 3.29.7 to 3.30.5 (#5414 )	2025-10-04 18:39:31 +02:00
renovate[bot]	27558050cd	fix(deps): update dependency copy-text-to-clipboard to v3.2.2 (#5419 )	2025-10-04 18:00:00 +02:00
dependabot[bot]	0a7466064f	chore(deps): bump actions/setup-node from 4.4.0 to 5.0.0 (#5415 )	2025-10-04 12:33:02 +02:00
renovate[bot]	0c15dc6d0c	chore(deps): update dependency @vitejs/plugin-react to v5.0.4 (#5417 )	2025-10-04 12:32:28 +02:00
renovate[bot]	63a3c91133	fix(deps): update dependency country-flag-icons to v1.5.21 (#5420 )	2025-10-04 12:32:02 +02:00
renovate[bot]	829575b06c	chore(deps): update dependency msw to v2.11.3 (#5418 )	2025-10-04 10:35:05 +02:00
verdacciobot	3c741ecfd9	chore: updated static data	2025-10-02 00:15:43 +00:00
verdacciobot	1a551daa38	chore: updated static data	2025-09-29 00:15:52 +00:00
Juan Picado	34aec8f7e8	chore: update versions (next-8) (#5404 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-09-28 19:10:16 +02:00
renovate[bot]	38337c45dd	fix(deps): update dependency core-js to v3.45.1 (#5410 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-28 18:28:46 +02:00
renovate[bot]	0f75a9f88e	fix(deps): update dependency js-base64 to v3.7.8 (#5409 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-28 18:19:23 +02:00
renovate[bot]	aaeecdf7ed	fix(deps): update dependency debug to v4.4.3 (#5408 )	2025-09-28 17:44:09 +02:00
renovate[bot]	a409923935	chore(deps): update dependency update-ts-references to v3.6.2 (#5407 )	2025-09-28 17:43:42 +02:00
Juan Picado	b671a38d83	chore: add types for createConfigFolder (#5406 )	2025-09-28 17:18:33 +02:00
renovate[bot]	d047b6b7e7	chore(deps): update actions/cache action to v4.3.0 (#5401 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-28 16:23:47 +02:00
Juan Picado	5c499fac41	chore: add package @verdaccio/test-helper (#5405 ) * Update @types/supertest and improve test typings Upgraded @types/supertest from 2.0.16 to 6.0.3 and updated test helper functions to use explicit type annotations for better type safety. Also fixed web server test to publish a package before checking the packages API response. * add tests * restore types * Create dry-cups-hear.md * update deps	2025-09-28 16:16:35 +02:00
Juan Picado	a02514baee	fix: minor logger missing type (#5403 )	2025-09-28 14:19:25 +02:00
verdacciobot	20b839f9d2	chore: updated static data	2025-09-25 00:16:00 +00:00
renovate[bot]	981d3f47e5	fix(deps): update dependency dompurify to v3.2.7 (#5396 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-22 07:24:11 +02:00
verdacciobot	b6d6c22a73	chore: updated static data	2025-09-22 00:16:34 +00:00
renovate[bot]	385e55a7c5	chore(deps): update dependency npm-run-all2 to v8 (#5389 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-21 13:27:30 +02:00
Juan Picado	8de18b1ed6	chore: update versions (next-8) (#5335 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-09-19 21:32:46 +02:00
verdacciobot	115a2e7f3b	chore: updated static data	2025-09-18 00:14:37 +00:00
verdacciobot	357c2a4b55	chore: updated static data	2025-09-15 00:16:28 +00:00
renovate[bot]	2efee8f64e	fix(deps): update dependency pino to v9.9.5 (#5377 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-14 21:20:47 +02:00
clintonsteiner	20cd608c14	website: fix docs image pointing to old docker url (#5374 ) * website: fix docs image pointing to old docker url * Update Docker pull command to use 'latest' tag --------- Co-authored-by: Juan Picado <juanpicado19@gmail.com>	2025-09-14 20:59:15 +02:00
renovate[bot]	ce4edab7d0	chore(deps): update dependency msw to v2.11.2 (#5381 )	2025-09-14 20:34:30 +02:00
renovate[bot]	d7b40f8ae1	chore(deps): update babel monorepo (#5378 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-14 14:25:40 +02:00
renovate[bot]	7998670a5a	fix(deps): update dependency dayjs to v1.11.18 (#5380 )	2025-09-14 13:27:55 +02:00
renovate[bot]	788359e3e8	chore(deps): update dependency @vitejs/plugin-react to v5 (#5379 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-13 09:16:41 +02:00
clintonsteiner	7612350fb5	docs: fix docker-example link (#5373 )	2025-09-12 11:26:53 +02:00
verdacciobot	8ffe0c0279	chore: updated static data	2025-09-11 00:15:22 +00:00
Marc Bernard	cb730c56d4	feat: rewrite of memory storage (#5310 ) * feat: rewrite of memory storage * revert settings.json * Update pnpm-lock * Fix lock file * Update lockfile	2025-09-09 07:05:42 +02:00
verdacciobot	3c8121523f	chore: updated static data	2025-09-08 00:16:02 +00:00
Marc Bernard	5e1992ce5b	docs: update default config (#5371 )	2025-09-04 19:57:36 +02:00
verdacciobot	72dfa3a672	chore: updated static data	2025-09-04 00:15:15 +00:00
renovate[bot]	5956c694d0	chore(deps): update all test dependencies (#5368 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-03 14:53:49 +02:00
renovate[bot]	3e0abbd95f	chore(deps): update all build dependencies (#5367 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-03 14:00:36 +02:00
renovate[bot]	c55c353fb9	chore(deps): update actions/cache action to v4.2.4 (#5364 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-01 20:18:04 +02:00
renovate[bot]	a8bd4e8007	chore(deps): update all actions to v5 (#5365 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-09-01 11:36:25 +02:00
verdacciobot	1c832d288d	chore: updated static data	2025-09-01 00:18:28 +00:00
renovate[bot]	1260d141a1	fix(deps): update dependency react-player to v2.16.1 (#5362 )	2025-08-31 06:55:54 +02:00
Oussama Filani	a4c7f11661	fix: improve button color contrast for accessibility (#5363 )	2025-08-30 12:11:35 +02:00
verdacciobot	d5f870a894	chore: updated static data	2025-08-28 00:16:06 +00:00
Marc Bernard	05f03b3580	fix(config): avoid warning for multiple addresses (#5338 )	2025-08-26 22:25:04 +02:00
renovate[bot]	49db0b991f	fix(deps): update dependency pino to v9.9.0 (#5361 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-08-26 22:15:26 +02:00
verdacciobot	3115a5719b	chore: updated static data	2025-08-25 00:16:21 +00:00
verdacciobot	776f2c24e7	chore: updated static data	2025-08-21 00:14:45 +00:00
verdacciobot	7ec1f2c6a7	chore: updated static data	2025-08-18 00:17:43 +00:00
csteiner	9435c80576	docs: fix link path to resolve correctly (#5353 )	2025-08-15 19:40:59 +02:00
verdacciobot	ac7901d40d	chore: updated static data	2025-08-14 00:16:37 +00:00
Marc Bernard	60ef8ff3da	fix(storage): `check_owners` with anonymous access (#5340 ) * fix(storage): check_owners with anonymous access * replace anon username constant * fix test	2025-08-11 21:27:33 +02:00
verdacciobot	68706e640d	chore: updated static data	2025-08-11 00:17:54 +00:00
Copilot	b3d9e39c30	Improve TypeScript type safety and eliminate `any` types in UI components (#5352 ) * Initial plan * Improve TypeScript error handling and function parameter typing Co-authored-by: juanpicado <558752+juanpicado@users.noreply.github.com> * Add const assertions and readonly modifiers for better type safety Co-authored-by: juanpicado <558752+juanpicado@users.noreply.github.com> --------- Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com> Co-authored-by: juanpicado <558752+juanpicado@users.noreply.github.com>	2025-08-10 16:01:30 +02:00
Marc Bernard	f443f81936	chore(deps): sync and pin dependencies (#5345 ) * chore(deps): sync and pin dependencies * get-stream 6.0.1	2025-08-10 10:08:52 +02:00
csteiner	38e3527f89	docs (kubernetes install): remove deprecated warning (#5351 ) * referenced issue was closed in 2020 * correct chart is referenced below - so believe this is no longer needed * feel free to decline if maintainers disagree	2025-08-09 09:29:17 +02:00
verdacciobot	6f2a3d9d53	chore: updated static data	2025-08-07 00:17:25 +00:00
Trivikram Kamat	cbde52418d	docs: use official name of JS SDK v3 (#5350 )	2025-08-04 20:07:46 +02:00
verdacciobot	41800a2878	chore: updated static data	2025-08-04 00:18:36 +00:00
dependabot[bot]	fe3548c221	chore(deps): bump github/codeql-action from 3.29.2 to 3.29.5 (#5347 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.29.2 to 3.29.5. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`181d5eefc2...51f77329af`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.5 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-08-02 17:08:52 +02:00
dependabot[bot]	6ecd8fd002	chore(deps): bump docker/metadata-action from 5.7.0 to 5.8.0 (#5348 ) Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.7.0 to 5.8.0. - [Release notes](https://github.com/docker/metadata-action/releases) - [Commits](`902fa8ec7d...c1e51972af`) --- updated-dependencies: - dependency-name: docker/metadata-action dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-08-02 16:21:07 +02:00
Marc Bernard	29125755d9	chore(express): housekeeping (#5339 )	2025-08-02 15:03:10 +02:00
Marc Bernard	67e667b905	chore: replace conditional require(fs/promises) pattern (#5342 )	2025-08-02 14:53:23 +02:00
verdacciobot	8e4a5b4d70	chore: updated static data	2025-07-31 00:17:13 +00:00
Marc Bernard	d78ac49703	chore(docs): troubleshooting link (#5343 )	2025-07-28 21:03:17 +02:00
Marc Bernard	6b16761224	chore(docs): add some articles (#5344 )	2025-07-28 20:56:32 +02:00
verdacciobot	fd768bed6a	chore: updated static data	2025-07-28 00:17:57 +00:00
Marc Bernard	3b9f1b3ca2	fix(docs): warnings during website build (2) (#5341 )	2025-07-27 14:30:27 +02:00
Marc Bernard	67d6b5fa98	fix(e2e): ci matrix and pnpm tests (#5294 ) * fix(e2e): pnpm matrix * Fix build-app action, e2e-ci * Fix e2e-pnpm-commons (same as #5245) * Caching is in build/install already * Add version output to test step * Revert	2025-07-25 07:55:36 +02:00
renovate[bot]	2fa1ddff4f	fix(deps): update dependency compression to v1.8.1 (#5333 )	2025-07-25 00:02:02 +02:00
dependabot[bot]	718a69170c	chore(deps): bump github/codeql-action from 3.28.18 to 3.29.2 (#5318 ) Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.28.18 to 3.29.2. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`ff0a06e83c...181d5eefc2`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 3.29.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-07-24 23:45:47 +02:00
Marc Bernard	56d9757fad	fix(docs): warnings during website build (#5332 ) * fix(docs): warnings during website build * Move types	2025-07-24 23:45:25 +02:00
verdacciobot	00fd738876	chore: updated static data	2025-07-24 00:17:03 +00:00
verdacciobot	6250e59347	chore: updated static data	2025-07-21 00:17:52 +00:00
renovate[bot]	8f47f73c81	fix(deps): update dependency country-flag-icons to v1.5.19 (#5322 ) Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	2025-07-18 20:30:32 +02:00
verdacciobot	9d3ff696ff	chore: updated static data	2025-07-17 00:17:17 +00:00
verdacciobot	98d09e7bc1	chore: updated static data	2025-07-14 00:17:33 +00:00
Juan Picado	2cf19a53da	chore: update docker build workflow	2025-07-13 22:21:07 +02:00
Juan Picado	d9800a87f2	chore: option to set a version	2025-07-13 17:45:15 +02:00
Juan Picado	3cbecdc8f4	chore: github action unpined	2025-07-13 16:55:17 +02:00
Juan Picado	ad2046b8e8	chore: fix actions issue	2025-07-13 16:52:13 +02:00
verdacciobot	c2d43bf051	chore: updated static data	2025-07-10 00:16:46 +00:00
verdacciobot	a12ebfe732	chore: updated static data	2025-07-07 00:17:19 +00:00
Juan Picado	d220e5b54b	chore: update versions (next-8) (#5326 ) Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>	2025-07-06 22:21:58 +02:00
Juan Picado	f8a321f03e	fix: restore minimatch major version (#5325 ) minimatch 10 requires ESM breaks 6.x old versions	2025-07-06 22:02:14 +02:00