chore: update versions (next-8) (#5129)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/breezy-geckos-search.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+'@verdaccio/middleware': patch
+'@verdaccio/store': patch
+---
+
+chore: move tarball utils to core

.changeset/bright-bobcats-ring.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): sort versions

.changeset/brown-planets-approve.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/config': patch
+'@verdaccio/types': patch
+'@verdaccio/website': patch
+---
+
+chore: `keep_readmes` docs

.changeset/calm-mangos-compare.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+fix(store): internal error when checking manifest

.changeset/config.json

@@ -13,7 +13,11 @@
     ]
   ],
   "ignoredPackages": [
+    "@verdaccio/local-publish",
+    "docusaurus-plugin-downloads",
+    "docusaurus-plugin-contributors",
     "@verdaccio/test-cli-commons",
+    "@verdaccio/local-scripts",
     "@verdaccio/e2e-cli-npm6",
     "@verdaccio/e2e-cli-npm7",
     "@verdaccio/e2e-cli-npm8",

.changeset/curly-mirrors-smile.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+chore(middleware): improve loop detection

.changeset/eleven-rocks-dream.md

@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore: bump user agent

.changeset/forty-hounds-matter.md

@@ -0,0 +1,7 @@
+---
+'verdaccio': patch
+'@verdaccio/store': patch
+'@verdaccio/utils': patch
+---
+
+fix: internal error for unpublished tarball

.changeset/funny-fireants-tan.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+---
+
+fix(proxy): validate protocol of proxy settings

.changeset/itchy-glasses-end.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/ui-i18n': minor
+---
+
+feat: new i18n package for ui

.changeset/ninety-geese-do.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+fix: runtime dependency missing as explicit dependency

.changeset/popular-trees-grin.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui-components): remove test warnings

.changeset/pre.json

@@ -14,6 +14,7 @@
     "@verdaccio/e2e-cli-yarn3": "1.0.1",
     "@verdaccio/e2e-cli-yarn4": "1.0.1",
     "@verdaccio/e2e-ui": "2.0.0",
+    "@verdaccio/ui-i18n": "8.0.0",
     "@verdaccio/api": "7.0.0",
     "@verdaccio/auth": "7.0.0",
     "@verdaccio/cli": "7.0.0",
@@ -48,8 +49,7 @@
     "@verdaccio/eslint-config": "3.0.0",
     "generator-verdaccio-plugin": "5.0.0",
     "@verdaccio/test-helper": "3.0.0",
-    "@verdaccio/local-publish": "0.0.2",
-    "@verdaccio/crowdin-translations": "1.0.0",
+    "@verdaccio/local-scripts": "1.0.0",
     "customprefix-auth": "2.0.0",
     "@verdaccio/ui-components": "3.0.0",
     "@verdaccio/utils": "7.0.0",
@@ -58,20 +58,30 @@
     "@verdaccio/website": "6.0.0",
     "@verdaccio/e2e-cli-npm-common": "1.0.0",
     "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
-    "@verdaccio/e2e-cli-pnpm10": "1.0.0"
+    "@verdaccio/e2e-cli-pnpm10": "1.0.0",
+    "docusaurus-plugin-downloads": "2.0.0",
+    "@verdaccio/local-publish": "0.0.2"
   },
   "changesets": [
     "angry-doors-tan",
     "beige-lions-type",
     "blue-paws-cheer",
+    "breezy-geckos-search",
+    "bright-bobcats-ring",
+    "brown-planets-approve",
+    "calm-mangos-compare",
     "chatty-apricots-report",
     "clean-beds-wash",
     "clever-bees-happen",
     "cool-seals-watch",
+    "curly-mirrors-smile",
     "curvy-rockets-camp",
     "cyan-snakes-kiss",
     "early-eyes-float",
+    "eleven-rocks-dream",
     "fifty-falcons-design",
+    "forty-hounds-matter",
+    "funny-fireants-tan",
     "gentle-stingrays-repeat",
     "gold-squids-watch",
     "green-eagles-boil",
@@ -79,21 +89,38 @@
     "healthy-zoos-lie",
     "hip-eggs-serve",
     "hot-crews-live",
+    "itchy-glasses-end",
     "long-eyes-drum",
     "long-singers-drive",
     "lucky-crabs-enjoy",
     "nine-countries-remember",
+    "ninety-geese-do",
+    "popular-trees-grin",
+    "proud-houses-switch",
+    "quick-avocados-type",
     "quick-seas-deny",
+    "real-seahorses-change",
     "rotten-melons-notice",
+    "rotton-readers-shave",
     "rude-birds-design",
     "rude-socks-walk",
     "serious-apes-rule",
+    "short-mails-smoke",
     "silent-bags-listen",
+    "silent-tips-admire",
+    "silver-houses-remain",
+    "slow-cars-guess",
+    "smooth-games-share",
+    "strange-pants-chew",
     "stupid-camels-build",
     "sweet-crabs-deliver",
     "thirty-comics-trade",
     "tricky-impalas-shake",
+    "tricky-knives-end",
+    "violet-baboons-beg",
+    "violet-bobcats-allow",
     "violet-boxes-float",
-    "weak-cherries-serve"
+    "weak-cherries-serve",
+    "wet-cats-behave"
   ]
 }

.changeset/proud-houses-switch.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+fix(web): anonymous user handling

.changeset/quick-avocados-type.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui-components): typings for vitest/jest-dom

.changeset/real-seahorses-change.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+update hover background color of package list

.changeset/rotton-readers-shave.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/config': patch
+---
+
+fix: config builder `addLogger`

.changeset/short-mails-smoke.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(deps): upgrade storybook to v8

.changeset/silent-tips-admire.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/web': patch
+---
+
+chore: export and constant on middleware

.changeset/silver-houses-remain.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix: ui-component vitest api

.changeset/slow-cars-guess.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+support packages with multiple module types

.changeset/smooth-games-share.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/server': patch
+'verdaccio-audit': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix: crashes with path-to-regexp v0.1.12 express

.changeset/strange-pants-chew.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+feat: show version-specific readmes in web ui

.changeset/tricky-knives-end.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+fix(store): update deprecate state

.changeset/violet-baboons-beg.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/web': patch
+---
+
+chore: middleware package update

.changeset/violet-bobcats-allow.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/store': patch
+---
+
+chore: add package parameter to storage plugin interface

.changeset/wet-cats-behave.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-i18n': patch
+---
+
+fix: ignore duplicted files

.eslintignore

@@ -1,3 +1,4 @@
+assets/**/*
 **/fixtures/**
 **/mock/store/**
 **/partials/**

.gitattributes

@@ -13,7 +13,7 @@
 ##   Handle line endings automatically for files detected as
 ##   text and leave all files detected as binary untouched.
 ##   This will handle all files NOT defined below.
-*                 text=lf
+*                 text eol=lf
 
 # Source code
 *.bash            text eol=lf
@@ -197,3 +197,6 @@ Procfile          text eol=lf
 
 # Ignore files (like .npmignore or .gitignore)
 *.*ignore         text eol=lf
+
+# Test Snapshots
+*.snap            text eol=lf

.github/actions/cache-packages/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache Packages
       id: cache-packages
-      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
       with:
         path: ./packages/
         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache .pnpm-store
       id: cache-npm
-      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}

.github/actions/install-app-node/action.yml

@@ -22,11 +22,12 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version: ${{ inputs.node-version }}
     - name: Install pnpm
       run: |
+        npm install --global corepack@latest
         corepack enable
         corepack prepare
       shell: bash

.github/actions/install-app/action.yml

@@ -15,11 +15,12 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: Install pnpm
       run: |
+        npm install --global corepack@latest
         corepack enable
         corepack prepare
       shell: bash

.github/disabled/ci-windows.yml

@@ -25,6 +25,7 @@ jobs:
         node-version-file: '.nvmrc'
     - name: Install pnpm
       run: |
+        npm install --global corepack@latest
         corepack enable
         corepack install
     - name: set store

.github/workflows/changesets-pr.yml

@@ -0,0 +1,36 @@
+name: Changesets Publish Test
+
+on:
+  pull_request:
+
+concurrency:
+  group: changeset-pr-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  version:
+    if: github.event.pull_request.head.repo.fork == false
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
+      - name: crowdin download
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download
+      - name: build
+        run: pnpm build
+      - name: Docker test
+        run: |
+          docker run -d -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio:6
+      - name: login
+        run: npx npm-cli-login -u test -p 1234 -e test@domain.test -r http://localhost:4873
+      - name: Prepare
+        # to allow local snapshot
+        run: rm .changeset/pre.json
+      - name: Create snapshot
+        run: pnpm local:snapshots
+      - name: Changeset version
+        run: pnpm local:publish

.github/workflows/changesets.yml

@@ -1,9 +1,7 @@
 name: Changesets
 
 on:
-  schedule:
-    - cron: '0 0 * * *'
-
+  workflow_dispatch:
   push:
     branches:
       - master
@@ -19,40 +17,16 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
-      - name: checkout code repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-        with:
-          fetch-depth: 0
-
-      - name: setup node.js
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
-        with:
-          node-version-file: '.nvmrc'
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
-
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-
-      - name: setup pnpm config
-        run: pnpm config set store-dir $PNPM_CACHE_FOLDER
-      - name: setup pnpm config registry
-        run: pnpm config set registry https://registry.npmjs.org
-
-      - name: install dependencies
-        run: pnpm install
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
       - name: crowdin download
-        env:          
+        env:
           CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
           CONTEXT: production
-        run: pnpm crowdin:download       
+        run: pnpm crowdin:download
       - name: build
         run: pnpm build
-
       - name: create versions
         uses: changesets/action@master
         with:

.github/workflows/ci.yml

@@ -86,14 +86,15 @@ jobs:
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
+          npm install --global corepack@latest
           corepack enable
           corepack install
-      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      - uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -37,7 +37,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
         with:
           config: |
             paths-ignore:
@@ -50,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10

.github/workflows/docker-proxy-apache-e2e.yml

@@ -15,7 +15,7 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
@@ -26,7 +26,7 @@ jobs:
       run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -13,7 +13,7 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-20.04
+    runs-on: ubuntu-24.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
@@ -24,7 +24,7 @@ jobs:
       run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-publish.yml

@@ -25,7 +25,7 @@ jobs:
     if: github.repository == 'verdaccio/verdaccio'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/e2e-ci.yml

@@ -45,7 +45,7 @@ jobs:
             npm9,
             npm10
           ]
-        node: [18, 23]
+        node: [22]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
@@ -59,7 +59,7 @@ jobs:
       - name: Restore cache pnpm store
         uses: ./.github/actions/cache-packages
       - name: Test CLI
-        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
 
   e2e-cli-pnpm:
     needs: [prepare, build]
@@ -72,7 +72,7 @@ jobs:
             pnpm9,
             pnpm10,
           ]
-        node: [18, 23]
+        node: [22]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
@@ -86,7 +86,7 @@ jobs:
       - name: Restore cache pnpm store
         uses: ./.github/actions/cache-packages
       - name: Test CLI
-        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+        run:  cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
   e2e-cli-yarn:
     needs: [prepare, build]
     strategy:
@@ -99,7 +99,7 @@ jobs:
             yarn3,
             yarn4
           ]
-        node: [18, 23]
+        node: [22]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
@@ -113,5 +113,5 @@ jobs:
       - name: Restore cache pnpm store
         uses: ./.github/actions/cache-packages
       - name: Test CLI
-        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
 

.github/workflows/e2e-ui.yml

@@ -26,7 +26,7 @@ jobs:
           node-version: 20
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/plugin-generator-e2e.yaml

@@ -1,11 +1,11 @@
 name: E2E Generator Verdaccio Plugin
 
 on:
-  pull_request:
+#  pull_request:
   workflow_dispatch:
-  push:
-    branches:
-      - 'master'
+#  push:
+#    branches:
+#      - 'master'
 
 concurrency:
   group: generator-plugin-${{ github.ref }}

.github/workflows/shared-docker-publish.yml

@@ -24,7 +24,7 @@ jobs:
     if: github.repository == 'verdaccio/verdaccio'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/static-data.yml

@@ -6,7 +6,7 @@ on:
 #  pull_request:
   schedule:
     # twice peer week
-    - cron: '0 0 * * 1,4'
+    - cron: "0 0 * * 1,4"
   # for now, scheduled, we can enable on push master but not make much sense now
   # push:
   #   branches:
@@ -29,8 +29,16 @@ jobs:
         uses: ./.github/actions/install-app
         with:
           reporter: 'default'
-      - name: Build Translations percentage
-        run: pnpm --filter @verdaccio/crowdin-translations build
+      - name: Build package
+        run: pnpm --filter @verdaccio/local-scripts run build
+      - name: Get npmjs downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:npmjs
+      - name: Get docker downloads
+        run: pnpm --filter @verdaccio/local-scripts run pull:docker
+      - name: Get npmjs monhtly downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:mounthly
+      - name: Get npmjs year downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:yearly
       - name: update contributors
         run: pnpm run contributors
         env:

.github/workflows/ui-components.yml

@@ -1,40 +1,36 @@
 name: UI Components
 
 on:
-#  pull_request:
+# Disabled temporary
+#  push:
+#    branches:
+#      - master
   workflow_dispatch:
-#  schedule:
-#    - cron: '0 0 * * *'
+
+concurrency:
+  group: ui-deploy-${{ github.ref }}
+  cancel-in-progress: true
 
 permissions:
-  contents: read  #  to fetch code (actions/checkout)
-
-env:
-  DEBUG: verdaccio*
+  contents: read
 
 jobs:
   deploy:
-    permissions:
-      contents: read  #  to fetch code (actions/checkout)
-      deployments: write
-      pull-requests: write  #  to comment on pull-requests
-
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
-
-      - name: Install pnpm
-        run: |
-          corepack enable
-            corepack prepare
-      - name: Install
-        run: pnpm install
+      - name: crowdin download
+        env:
+          CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
+          CONTEXT: production
+        run: pnpm crowdin:download
+      - name: Build modules
+        run: pnpm build
       - name: Build storybook
         run: pnpm ui:storybook:build
       - name: Copy public content

.github/workflows/website.yml

@@ -2,6 +2,8 @@ name: Verdaccio Website CI
 
 on:
   workflow_dispatch:
+  schedule:
+    - cron: '0 2 * * 0'  # every Sunday at 2am UTC  (10pm EST)
 permissions:
   contents: read  #  to fetch code (actions/checkout)
 
@@ -35,9 +37,9 @@ jobs:
         with:
           node-version: 20
       - name: Build Translations percentage
-        run: pnpm --filter @verdaccio/crowdin-translations build
+        run: pnpm --filter @verdaccio/local-scripts build
       - name: Cache Docusaurus Build
-        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -47,7 +47,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-audit-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 9'
@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 10'

.github/workflows/x-e2e-jest-workflow.yml

@@ -1,6 +1,6 @@
 on:
   workflow_call:
-  
+
 jobs:
   yarn:
     name: 'yarn:jest example'
@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -41,7 +41,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -108,7 +108,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -132,7 +132,7 @@ jobs:
 
           yarn add left-pad --registry http://localhost:4873 --verbose
           echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js          
+          yarn jest module.test.js
   npm10:
     name: 'npm10:jest example'
     runs-on: ubuntu-latest
@@ -141,11 +141,11 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'
-        run: npm i -g npm@next-10  
+        run: npm i -g npm@next-10
       - name: Install Dependencies
         run: yarn install
       - name: 'Run verdaccio in the background'
@@ -165,7 +165,7 @@ jobs:
 
           yarn add left-pad --registry http://localhost:4873 --verbose
           echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js          
+          yarn jest module.test.js
   pnpm8:
     name: 'pnpm8:jest example'
     runs-on: ubuntu-latest
@@ -174,11 +174,11 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest pnpm'
-        run: npm i -g pnpm@latest-8
+        run: npm i -g pnpm@10.5.2
       - name: Install Dependencies
         run: yarn install
       - name: 'Run verdaccio in the background'
@@ -207,11 +207,11 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest pnpm'
-        run: npm i -g pnpm@latest-9
+        run: npm i -g pnpm@10.5.2
       - name: Install Dependencies
         run: yarn install
       - name: 'Run verdaccio in the background'

.github/workflows/x-release-snapshot.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node (latest)
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/x-release.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node (latest)
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/x-smok-test-docker.yml

@@ -16,7 +16,7 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/x-smok-test-module.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Use Node (latest)
-        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/yarn-ci-lint.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node 
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/yarn-ci.yml

@@ -11,7 +11,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node ${{ inputs.node_version }}
-      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version: ${{ inputs.node_version }}
     - name: Install

.gitignore

@@ -17,6 +17,10 @@ test-storage*
 # docker examples
 docker-examples/v5/reverse_proxy/nginx/relative_path/storage/*
 docker-examples/v5/**/storage/*
+docker-examples/v4/**/storage/*
+docker-examples/v6/**/storage/*
+docker-examples/v7/**/storage/*
+docker-examples/v8/**/storage/*
 
 # jest
 reports/
@@ -36,7 +40,10 @@ packages/standalone/dist/
 packages/plugins/ui-theme/static
 /packages/plugins/ui-theme/src/i18n/download_translations/
 !/packages/plugins/ui-theme/src/i18n/crowdin/ui.json
+/packages/core/**/download_translations/
 
+## ui tests
+!/packages/ui-components/vitest/api/*.tgz
 
 # CI Pnpm cache
 .pnpm-store/

.nvmrc

@@ -1 +1 @@
-20
+22

.prettierignore

@@ -1,4 +1,5 @@
 .cache/
+assets/**/*
 **/corrupted-package/package.json
 **/corrupted.json
 **/invalid.js

CONTRIBUTING.md

@@ -25,7 +25,7 @@ The Verdaccio project is split into several areas, the first three hosted in the
 - **User Interface**: The [user Interface](https://github.com/verdaccio/ui) is based in **react** and **material-ui** and looking for front-end contributors.
 - **Kubernetes and Helm**: Ts the official repository for the [**Helm chart**](https://github.com/verdaccio/charts).
 
-> There are other areas to contribute, like [documentation](https://github.com/verdaccio/verdaccio/tree/master/website/docs) or [translations](#translations}).
+> There are other areas to contribute, like [documentation](https://github.com/verdaccio/verdaccio/tree/master/website/docs) or translations.
 
 ## Prepare local setup {#local-setup}
 
@@ -379,7 +379,7 @@ If you need help with how testing works, please [refer to the following guide
 **If you are introducing new features, you MUST include new tests. PRs for
 features without tests will not be merged.**
 
-## Translations {#translations}
+## Translations
 
 All translations are provided by the **[crowdin](http://crowdin.com)** platform,
 [https://translate.verdaccio.org/](https://translate.verdaccio.org/)

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:21-alpine AS builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:22-alpine AS builder
 
 ENV NODE_ENV=development \
     VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org
@@ -11,16 +11,17 @@ RUN apk --no-cache add openssl ca-certificates wget && \
 
 WORKDIR /opt/verdaccio-build
 COPY . .
-RUN npm -g i pnpm@8.9.0 && \
+RUN npm -g i corepack && \
+    corepack install && \
     pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
     pnpm install --frozen-lockfile --ignore-scripts && \
     rm -Rf test && \
     pnpm run build
-# FIXME: need to remove devDependencies from the build    
+# FIXME: need to remove devDependencies from the build
 # NODE_ENV=production pnpm install --frozen-lockfile --ignore-scripts
 # RUN pnpm install --prod --ignore-scripts
 
-FROM node:21-alpine
+FROM node:22-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

LICENSE

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2024 Verdaccio contributors
+Copyright (c) 2025 Verdaccio contributors
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

README.md

@@ -88,7 +88,7 @@ npm install -g generator-verdaccio-plugin
 
 Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.
 
-## Integration Tests
+## End to End Testing
 
 In our compatibility testing project, we're dedicated to ensuring that your favorite commands work seamlessly across different versions of npm, pnpm, and Yarn. From publishing packages to managing dependencies.
 Our goal is to give you the confidence to use your preferred package manager without any issues. So dive in, check out our matrix, and see how your commands fare across the board!
@@ -299,12 +299,12 @@ Thanks to the following companies to help us to achieve our goals providing free
 | [Juan Picado](https://github.com/juanpicado)                                   | [Ayush Sharma](https://github.com/ayusharma)                             | [Sergio Hg](https://github.com/sergiohgz)                                 |
 | ------------------------------------------------------------------------------ | ------------------------------------------------------------------------ | ------------------------------------------------------------------------- |
 | ![jotadeveloper](https://avatars3.githubusercontent.com/u/558752?s=120&v=4)    | ![ayusharma](https://avatars2.githubusercontent.com/u/6918450?s=120&v=4) | ![sergiohgz](https://avatars2.githubusercontent.com/u/14012309?s=120&v=4) |
-| [@jotadeveloper](https://twitter.com/jotadeveloper)                            | [@ayusharma\_](https://twitter.com/ayusharma_)                           | [@sergiohgz](https://twitter.com/sergiohgz)                               |
+|                                                                                | [@ayusharma\_](https://twitter.com/ayusharma_)                           | [@sergiohgz](https://twitter.com/sergiohgz)                               |
 | [Priscila Oliveria](https://github.com/priscilawebdev)                         | [Daniel Ruf](https://github.com/DanielRuf)                               |
 | ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=120&v=4) | ![DanielRuf](https://avatars3.githubusercontent.com/u/827205?s=120&v=4)  |
 | [@priscilawebdev](https://twitter.com/priscilawebdev)                          | [@DanielRufde](https://twitter.com/DanielRufde)                          |
 
-You can find and chat with them over Discord, click [here](http://chat.verdaccio.org) or follow them at _Twitter_.
+You can find and chat with them over Discord, click [here](http://chat.verdaccio.org).
 
 ## Who is using Verdaccio?
 

SECURITY.md

@@ -2,7 +2,7 @@
 
 ## Supported versions
 
-You can find details about the supported versions of Verdaccio in the [version history](VERSIONS.md).
+You can find details about the supported versions of Verdaccio in the [version history](https://github.com/verdaccio/verdaccio/blob/master/VERSIONS.md).
 
 ## Responsible disclosure security policy
 

VERSIONS.md

@@ -2,13 +2,26 @@
 
 The following table describes the versions of this project:
 
-| Version          | Supported          | Minimum Node.js | Branch | Npm Tag          | Docker Images           | Helm Charts |
-| ---------------- | ------------------ | --------------- | ------ | ---------------- | ----------------------- | ----------- |
-| 4.x              | :x: (deprecated)   | 10              | 4.x    | latest-4         | 4, 4.x, 4.x.x, 4.x-next | 3.x         |
-| 5.x previous     | :x: (deprecated)   | 14              | 5.x    | latest-5         | 5, 5.x, 5.x.x, 5.x-next | 4.0 - 4.18  |
-| 6.x current      | :white_check_mark: | 18              | 6.x    | latest-6, latest | 6, 6.x, 6.x.x, 6.x-next | 4.19 - ...  |
-| 7.x next         | :x:                | 18              | 7.x    | next-7           | 7.x-next                | n/a         |
-| 8.x experimental | :x:                | 18              | master | next-8           | nightly-master          | n/a         |
+| Version          | Supported          | Minimum Node.js | Branch | Npm Tag          | Docker Images           | Helm Charts | E2E Tests                                                          |
+| ---------------- | ------------------ | --------------- | ------ | ---------------- | ----------------------- | ----------- | ------------------------------------------------------------------ |
+| 4.x              | :x: (deprecated)   | 10              | 4.x    | latest-4         | 4, 4.x, 4.x.x, 4.x-next | 3.x         | ❌                                                                 |
+| 5.x previous     | :x: (deprecated)   | 14              | 5.x    | latest-5         | 5, 5.x, 5.x.x, 5.x-next | 4.0 - 4.18  | ❌                                                                 |
+| 6.x current      | :white_check_mark: | 18              | 6.x    | latest-6, latest | 6, 6.x, 6.x.x, 6.x-next | 4.19 - ...  | [e2e-tests/main](https://github.com/verdaccio/e2e-tests/tree/main) |
+| 7.x next         | :x:                | 18              | 7.x    | next-7           | 7.x-next                | n/a         | [e2e-tests/6.x](https://github.com/verdaccio/e2e-tests/tree/6.x)   |
+| 8.x experimental | :x:                | 18              | master | next-8           | nightly-master          | n/a         | master branch                                                      |
+
+## Migration Guide
+
+The migration from Verdaccio v5/v6 to v7 contains breaking changes. Refer to the priliminary [migration guide](https://github.com/verdaccio/verdaccio/blob/master/docs/migration-v5-to-v6.md) for more information.
+
+For migrations from older versions to v5/6 refer to the [v5 migration guide](https://verdaccio.org/blog/2021/04/14/verdaccio-5-migration-guide/).
+
+### Deprecated Versions
+
+Deprecated versions aren’t supported anymore and shouldn’t be used in production. They don’t get updates—including security fixes—and we don’t run E2E tests on them.
+Once the deprecation period is over, the source code will be archived and won’t be maintained anymore.
+
+We try to keep things as backward-compatible as possible, but sometimes deprecating old versions is necessary to keep the project moving forward.
 
 ## Npm Registry
 
@@ -21,3 +34,9 @@ The official Verdaccio Docker Images are found at https://hub.docker.com/r/verda
 ## Helms Charts
 
 The official Verdaccio Helm Charts are found at https://artifacthub.io/packages/helm/verdaccio/verdaccio.
+
+## E2E Tests
+
+The e2e test are set of basic test running on each release to ensure the basic functionality of Verdaccio. The tests are located at
+different branches, depending on the version. For versions `6.x` and `7.x` the tests are located at the [e2e-test](https://github.com/verdaccio/e2e-tests) and everything else on this repository.
+For more details what's being tested, please refer to the [readme file](https://github.com/verdaccio/verdaccio?tab=readme-ov-file#integration-tests) on this repository.

crowdin.yaml

@@ -6,6 +6,8 @@ api_token_env: CROWDIN_VERDACCIO_API_KEY
 preserve_hierarchy: true
 
 files:
+  - source: /packages/core/i18n/src/crowdin/*.json
+    translation: '/packages/core/i18n/src/download_translations/%locale%/%original_file_name%'
   - source: /packages/plugins/ui-theme/src/i18n/crowdin/*.json
     translation: '/packages/plugins/ui-theme/src/i18n/download_translations/%locale%/%original_file_name%'
   - source: /website/i18n/en/**/*
@@ -16,4 +18,3 @@ files:
   - source: /website/versioned_docs/**/*
     translation: /website/i18n/%locale%/docusaurus-plugin-content-docs/**/%original_file_name%
     ignore: [/website/versioned_docs/version-6.x/api/**/*]
-   

docs/env.variables.md

@@ -1,55 +0,0 @@
-# Environment variables
-
-A full list of available environment variables that allow override
-internal features.
-
-#### VERDACCIO_LEGACY_ALGORITHM
-
-Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`. The algorithm must be supported by `crypto.createCipheriv` and `crypto.createDecipheriv`.
-Read more here: https://nodejs.org/api/crypto.html#crypto_crypto_createcipheriv_algorithm_key_iv_options
-
-#### VERDACCIO_LEGACY_ENCRYPTION_KEY
-
-By default, the token stores in the database, but using this variable allows to get it from memory, the length must be 32 characters otherwise will throw an error.
-Read more here: https://nodejs.org/api/crypto.html#crypto_crypto_createcipheriv_algorithm_key_iv_options
-
-#### VERDACCIO_PUBLIC_URL
-
-Define a specific public url for your server, it overrules the `Host` and `X-Forwarded-Proto` header if a reverse proxy is being used, it takes in account the `url_prefix` if is defined.
-
-This is handy in such situations where a dynamic url is required.
-
-eg:
-
-```
-VERDACCIO_PUBLIC_URL='https://somedomain.org';
-url_prefix: '/my_prefix'
-
-// url -> https://somedomain.org/my_prefix/
-
-VERDACCIO_PUBLIC_URL='https://somedomain.org';
-url_prefix: '/'
-
-// url -> https://somedomain.org/
-
-VERDACCIO_PUBLIC_URL='https://somedomain.org/first_prefix';
-url_prefix: '/second_prefix'
-
-// url -> https://somedomain.org/second_prefix/'
-```
-
-#### VERDACCIO_FORWARDED_PROTO
-
-The default header to identify the protocol is `X-Forwarded-Proto`, but there are some environments which [uses something different](https://github.com/verdaccio/verdaccio/issues/990), to change it use the variable `VERDACCIO_FORWARDED_PROTO`
-
-```
-$ VERDACCIO_FORWARDED_PROTO=CloudFront-Forwarded-Proto verdaccio --listen 5000
-```
-
-#### VERDACCIO_STORAGE_PATH
-
-By default, the storage is taken from config file, but using this variable allows to set it from environment variable.
-
-#### VERDACCIO_STORAGE_NAME
-
-The database name for `@verdaccio/local-storage` is by default `.verdaccio-db.json`, but this can be update by using this variable.

docs/migrations-guide.md

@@ -1,4 +1,4 @@
-# Migration Guide from Verdaccio 5 to Verdaccio 6
+# Migration Guide from Verdaccio v5 and v6 to Verdaccio v7
 
 Notes regarding breaking changes for next major release.
 
@@ -79,8 +79,15 @@ for more details.
 
 Introduce environment variables for legacy tokens.
 
-- `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
-- `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory
+- `VERDACCIO_LEGACY_ALGORITHM`:
+
+  Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`. The algorithm must be supported by `crypto.createCipheriv` and `crypto.createDecipheriv`.
+
+- `VERDACCIO_LEGACY_ENCRYPTION_KEY`:
+
+  By default, the token are stored in the database, but using this variable allows to get tokens from memory. The length of the key must be 32 characters otherwise will throw an error.
+
+Read more on [nodejs.org](https://nodejs.org/api/crypto.html#crypto_crypto_createcipheriv_algorithm_key_iv_options).
 
 #### @verdaccio/commons-api migration
 

docs/plugins.md

@@ -1,3 +0,0 @@
-## Developing plugins
-
-TBA

docs/warnings.md

@@ -2,29 +2,44 @@
 
 ## VERWAR001
 
-Verdaccio doesn't need superuser privileges. Don't run it under root.
+`Verdaccio doesn't need superuser privileges. Don't run it under root.`
 
 ## VERWAR002
 
-logger is not defined
+`The configuration property "logs" has been deprecated, please rename to "log" for future compatibility`
 
 ## VERWAR003
 
-'rotating-file type is not longer supported, consider use [logrotate] instead'
+`rotating-file type is not longer supported, consider use [logrotate] instead`
 
 ## VERWAR004
 
-invalid address - xxxxxx, we expect a port (e.g. "4873"),
+`invalid address - %s, we expect a port (e.g. "4873"), host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")`
+
+Learn more at https://verdaccio.org/docs/en/configuration#listen-port
+
+## VERWAR005
+
+`n/a`
+
+## VERWAR006
+
+`the auth plugin method "add_user" in the auth plugin is deprecated and will be removed in next major release, rename to "adduser"`
+
+## VERWAR007
+
+`the secret length is too long, it must be 32 characters long, please consider generate a new one`
+
+Learn more at https://verdaccio.org/docs/configuration/#.verdaccio-db
 
 ## VERDEP001
 
-'config.logs is deprecated, rename configuration to "config.log" in singular'
+> Changed to VERWAR002 (see above)
 
 ## VERDEP002
 
-> After version `verdaccio@6.0.0-6-next.38` this is not longer a warning and
-> will crash your application
+> After version `verdaccio@6.0.0-6-next.38` this is not longer a warning and will crash your application
 
 ## VERDEP003
 
-'multiple addresses will be deprecated in the next major, only use one'
+`multiple addresses will be deprecated in the next major, only use one`

e2e/cli/cli-commons/package.json

@@ -4,16 +4,16 @@
   "version": "2.0.0-next-8.0",
   "main": "src/index.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "debug": "4.3.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.12",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
+    "@verdaccio/types": "workspace:13.0.0-next-8.3",
+    "debug": "4.4.0",
     "fs-extra": "11.2.0",
     "get-port": "5.1.1",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.6"
+    "verdaccio": "workspace:8.0.0-next-8.12"
   },
   "scripts": {
     "test": "echo no test",

e2e/ui/package.json

@@ -3,11 +3,11 @@
   "name": "@verdaccio/e2e-ui",
   "version": "2.0.0",
   "devDependencies": {
-    "verdaccio": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
-    "debug": "4.3.7",
+    "verdaccio": "workspace:8.0.0-next-8.12",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
+    "@verdaccio/config": "workspace:8.0.0-next-8.12",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
+    "debug": "4.4.0",
     "cypress": "^13.6.0",
     "get-port": "5.1.1"
   },

package.json

@@ -15,40 +15,40 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@babel/cli": "7.24.8",
-    "@babel/core": "7.24.9",
+    "@babel/cli": "7.26.4",
+    "@babel/core": "7.26.9",
     "@babel/eslint-parser": "7.25.9",
-    "@babel/node": "7.25.0",
-    "@babel/plugin-proposal-decorators": "7.24.7",
-    "@babel/plugin-proposal-function-sent": "7.24.7",
-    "@babel/plugin-proposal-throw-expressions": "7.24.7",
+    "@babel/node": "7.26.0",
+    "@babel/plugin-proposal-decorators": "7.25.9",
+    "@babel/plugin-proposal-function-sent": "7.25.9",
+    "@babel/plugin-proposal-throw-expressions": "7.25.9",
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
-    "@babel/plugin-transform-async-to-generator": "7.24.7",
-    "@babel/plugin-transform-class-properties": "7.24.7",
-    "@babel/plugin-transform-classes": "7.25.0",
-    "@babel/plugin-transform-export-namespace-from": "7.24.7",
-    "@babel/plugin-transform-json-strings": "7.24.7",
-    "@babel/plugin-transform-nullish-coalescing-operator": "7.24.7",
-    "@babel/plugin-transform-numeric-separator": "7.24.7",
-    "@babel/plugin-transform-object-rest-spread": "7.24.7",
-    "@babel/plugin-transform-optional-chaining": "7.24.8",
-    "@babel/plugin-transform-runtime": "7.24.7",
-    "@babel/preset-env": "7.25.0",
-    "@babel/preset-react": "7.24.7",
+    "@babel/plugin-transform-async-to-generator": "7.25.9",
+    "@babel/plugin-transform-class-properties": "7.25.9",
+    "@babel/plugin-transform-classes": "7.25.9",
+    "@babel/plugin-transform-export-namespace-from": "7.25.9",
+    "@babel/plugin-transform-json-strings": "7.25.9",
+    "@babel/plugin-transform-nullish-coalescing-operator": "7.26.6",
+    "@babel/plugin-transform-numeric-separator": "7.25.9",
+    "@babel/plugin-transform-object-rest-spread": "7.25.9",
+    "@babel/plugin-transform-optional-chaining": "7.25.9",
+    "@babel/plugin-transform-runtime": "7.26.9",
+    "@babel/preset-env": "7.26.9",
+    "@babel/preset-react": "7.26.3",
     "@babel/preset-typescript": "7.24.7",
-    "@babel/register": "7.24.6",
-    "@babel/runtime": "7.25.0",
+    "@babel/register": "7.25.9",
+    "@babel/runtime": "7.26.9",
     "@changesets/changelog-github": "0.5.0",
-    "@changesets/cli": "2.27.10",
+    "@changesets/cli": "2.27.12",
     "@changesets/get-dependents-graph": "2.1.2",
     "@crowdin/cli": "4.4.1",
     "@dianmora/contributors": "5.0.0",
     "@emotion/react": "11.10.6",
     "@emotion/styled": "11.10.6",
     "@testing-library/dom": "10.4.0",
-    "@testing-library/jest-dom": "6.4.8",
-    "@testing-library/react": "16.0.0",
+    "@testing-library/jest-dom": "6.6.3",
+    "@testing-library/react": "16.1.0",
     "@testing-library/user-event": "14.5.2",
     "@trivago/prettier-plugin-sort-imports": "4.3.0",
     "@types/body-parser": "1.19.5",
@@ -58,10 +58,10 @@
     "@types/express": "4.17.21",
     "@types/express-serve-static-core": "4.19.5",
     "@types/http-errors": "2.0.4",
+    "@types/jest": "29.5.14",
     "@types/jsonwebtoken": "9.0.6",
     "@types/lodash": "4.17.7",
     "@types/mime": "3.0.4",
-    "@types/jest": "29.5.14",
     "@types/minimatch": "5.1.2",
     "@types/node": "20.14.12",
     "@types/node-fetch": "2.6.11",
@@ -84,18 +84,18 @@
     "@types/yeoman-test": "4.0.6",
     "@typescript-eslint/eslint-plugin": "6.21.0",
     "@typescript-eslint/parser": "6.21.0",
-    "@verdaccio/crowdin-translations": "workspace:*",
     "@verdaccio/eslint-config": "workspace:*",
+    "@verdaccio/local-scripts": "workspace:*",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-theme": "workspace:*",
-    "@vitest/coverage-v8": "2.0.5",
+    "@vitest/coverage-v8": "3.0.4",
     "aria-query": "5.1.3",
     "babel-core": "7.0.0-bridge.0",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "babel-plugin-emotion": "11.0.0",
     "concurrently": "8.2.2",
     "cross-env": "7.0.3",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "detect-secrets": "1.0.6",
     "eslint": "8.57.1",
     "fs-extra": "11.2.0",
@@ -104,24 +104,25 @@
     "in-publish": "2.0.1",
     "kleur": "4.1.5",
     "lint-staged": "11.2.6",
-    "nock": "13.5.1",
+    "nock": "13.5.6",
     "nodemon": "3.0.3",
     "npm-run-all2": "5.0.2",
-    "prettier": "3.3.3",
-    "react": "18.2.0",
-    "react-dom": "18.2.0",
+    "prettier": "3.4.2",
+    "react": "18.3.1",
+    "react-dom": "18.3.1",
     "rimraf": "5.0.10",
     "selfsigned": "2.4.1",
+    "semver": "^7.6.3",
     "supertest": "7.0.0",
     "ts-node": "10.9.2",
     "typescript": "5.3.3",
-    "undici-types": "5.28.2",
-    "update-ts-references": "3.3.0",
+    "undici-types": "5.28.4",
+    "update-ts-references": "3.6.0",
     "verdaccio-audit": "workspace:*",
     "verdaccio-auth-memory": "workspace:*",
     "verdaccio-htpasswd": "workspace:*",
     "verdaccio-memory": "workspace:*",
-    "vitest": "2.1.2"
+    "vitest": "3.0.4"
   },
   "scripts": {
     "prepare": "husky install",
@@ -175,5 +176,5 @@
     "*.{js,jsx,ts,tsx,json,yml,yaml,md}": "prettier --write",
     "*.{js,jsx,ts,tsx}": "eslint --cache --fix"
   },
-  "packageManager": "pnpm@8.14.0+sha256.9cebf61abd83f68177b29484da72da9751390eaad46dfc3072d266bfbb1ba7bf"
+  "packageManager": "pnpm@10.5.2"
 }

packages/api/CHANGELOG.md

@@ -1,5 +1,90 @@
 # @verdaccio/api
 
+## 8.1.0-next-8.12
+
+### Patch Changes
+
+- Updated dependencies [95ac124]
+  - @verdaccio/core@8.0.0-next-8.12
+  - @verdaccio/store@8.0.0-next-8.12
+  - @verdaccio/auth@8.0.0-next-8.12
+  - @verdaccio/config@8.0.0-next-8.12
+  - @verdaccio/middleware@8.0.0-next-8.12
+  - @verdaccio/utils@8.1.0-next-8.12
+  - @verdaccio/logger@8.0.0-next-8.12
+
+## 8.1.0-next-8.11
+
+### Patch Changes
+
+- Updated dependencies [83dbde5]
+- Updated dependencies [4110873]
+- Updated dependencies [85e0e13]
+- Updated dependencies [7e48ac6]
+- Updated dependencies [66bc284]
+  - @verdaccio/store@8.0.0-next-8.11
+  - @verdaccio/middleware@8.0.0-next-8.11
+  - @verdaccio/utils@8.1.0-next-8.11
+  - @verdaccio/auth@8.0.0-next-8.11
+  - @verdaccio/config@8.0.0-next-8.11
+  - @verdaccio/core@8.0.0-next-8.11
+  - @verdaccio/logger@8.0.0-next-8.11
+
+## 8.1.0-next-8.10
+
+### Patch Changes
+
+- Updated dependencies [bf0e09a]
+  - @verdaccio/config@8.0.0-next-8.10
+  - @verdaccio/auth@8.0.0-next-8.10
+  - @verdaccio/middleware@8.0.0-next-8.10
+  - @verdaccio/store@8.0.0-next-8.10
+  - @verdaccio/core@8.0.0-next-8.10
+  - @verdaccio/utils@8.1.0-next-8.10
+  - @verdaccio/logger@8.0.0-next-8.10
+
+## 8.1.0-next-8.9
+
+### Patch Changes
+
+- Updated dependencies [96e0011]
+  - @verdaccio/middleware@8.0.0-next-8.9
+  - @verdaccio/auth@8.0.0-next-8.9
+  - @verdaccio/core@8.0.0-next-8.9
+  - @verdaccio/config@8.0.0-next-8.9
+  - @verdaccio/store@8.0.0-next-8.9
+  - @verdaccio/utils@8.1.0-next-8.9
+  - @verdaccio/logger@8.0.0-next-8.9
+
+## 8.1.0-next-8.8
+
+### Patch Changes
+
+- Updated dependencies [0588605]
+- Updated dependencies [ca91b9a]
+  - @verdaccio/config@8.0.0-next-8.8
+  - @verdaccio/auth@8.0.0-next-8.8
+  - @verdaccio/middleware@8.0.0-next-8.8
+  - @verdaccio/store@8.0.0-next-8.8
+  - @verdaccio/core@8.0.0-next-8.8
+  - @verdaccio/logger@8.0.0-next-8.8
+  - @verdaccio/utils@8.1.0-next-8.8
+
+## 8.1.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+- Updated dependencies [139861e]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/middleware@8.0.0-next-8.7
+  - @verdaccio/store@8.0.0-next-8.7
+  - @verdaccio/auth@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.1.0-next-8.6
 
 ### Patch Changes

packages/api/README.md

@@ -6,7 +6,6 @@
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
 [![TODOs](https://badgen.net/https/api.tickgit.com/badgen/github.com/verdaccio/verdaccio)](https://www.tickgit.com/browse?repo=github.com/verdaccio/verdaccio)
 
-[![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 
 ## Donations

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "8.1.0-next-8.6",
+  "version": "8.1.0-next-8.12",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,27 +38,26 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
-    "@verdaccio/store": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "abortcontroller-polyfill": "1.7.6",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.12",
+    "@verdaccio/config": "workspace:8.0.0-next-8.12",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.12",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.12",
+    "@verdaccio/store": "workspace:8.0.0-next-8.12",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.12",
+    "abortcontroller-polyfill": "1.7.8",
     "body-parser": "1.20.3",
     "cookies": "0.9.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "express": "4.21.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
-    "semver": "7.6.3"
+    "semver": "7.7.1"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
-    "@verdaccio/types": "workspace:13.0.0-next-8.2",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
+    "@verdaccio/types": "workspace:13.0.0-next-8.3",
     "mockdate": "3.0.5",
-    "nock": "13.5.1",
     "supertest": "7.0.0"
   },
   "funding": {

packages/api/src/dist-tags.ts

@@ -5,6 +5,7 @@ import mime from 'mime';
 import { Auth } from '@verdaccio/auth';
 import { constants, errorUtils } from '@verdaccio/core';
 import { allow, media } from '@verdaccio/middleware';
+import { DIST_TAGS_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
@@ -39,21 +40,21 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
 
   // tagging a package.
   route.put(
-    '/:package/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging,
     can('publish'),
     media(mime.getType('json')),
     addTagPackageVersionMiddleware
   );
 
   route.put(
-    '/-/package/:package/dist-tags/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging_package,
     can('publish'),
     media(mime.getType('json')),
     addTagPackageVersionMiddleware
   );
 
   route.delete(
-    '/-/package/:package/dist-tags/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging_package,
     can('publish'),
     async function (
       req: $RequestExtend,
@@ -75,7 +76,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
   );
 
   route.get(
-    '/-/package/:package/dist-tags',
+    DIST_TAGS_API_ENDPOINTS.get_dist_tags,
     can('access'),
     async function (
       req: $RequestExtend,

packages/api/src/package.ts

@@ -4,6 +4,7 @@ import { Router } from 'express';
 import { Auth } from '@verdaccio/auth';
 import { HEADERS, HEADER_TYPE, stringUtils } from '@verdaccio/core';
 import { allow } from '@verdaccio/middleware';
+import { PACKAGE_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
@@ -17,7 +18,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
     afterAll: (a, b) => logger.trace(a, b),
   });
   route.get(
-    '/:package/:version?',
+    PACKAGE_API_ENDPOINTS.get_package_by_version,
     can('access'),
     async function (
       req: $RequestExtend,
@@ -76,7 +77,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
   );
 
   route.get(
-    '/:package/-/:filename',
+    PACKAGE_API_ENDPOINTS.get_package_tarball,
     can('access'),
     async function (req: $RequestExtend, res: $ResponseExtend, next): Promise<void> {
       const { package: pkgName, filename } = req.params;

packages/api/src/ping.ts

@@ -1,10 +1,12 @@
 import { Router } from 'express';
 
+import { PING_API_ENDPOINTS } from '@verdaccio/middleware';
+
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
 export default function (route: Router): void {
   route.get(
-    '/-/ping',
+    PING_API_ENDPOINTS.ping,
     function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
       next({});
     }

packages/api/src/publish.ts

@@ -5,13 +5,13 @@ import mime from 'mime';
 import { Auth } from '@verdaccio/auth';
 import { API_MESSAGE, HTTP_STATUS } from '@verdaccio/core';
 import { allow, expectJson, media } from '@verdaccio/middleware';
+// import star from './star';
+import { PUBLISH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
-// import star from './star';
-
 const debug = buildDebug('verdaccio:api:publish');
 
 /**
@@ -120,7 +120,7 @@ export default function publish(
     afterAll: (a, b) => logger.trace(a, b),
   });
   router.put(
-    '/:package',
+    PUBLISH_API_ENDPOINTS.add_package,
     can('publish'),
     media(mime.getType('json')),
     expectJson,
@@ -128,7 +128,7 @@ export default function publish(
   );
 
   router.put(
-    '/:package/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.publish_package,
     can('unpublish'),
     media(mime.getType('json')),
     expectJson,
@@ -143,7 +143,7 @@ export default function publish(
    *  -  no version is specified in the unpublish call
    *  -  all versions are removed npm unpublish package@*
    *  -  there is no versions on the metadata
-   
+
    * then the client decides to DELETE the resource
    * Example:
    * Get fresh manifest (write=true is a flag to get the latest revision)
@@ -153,7 +153,7 @@ export default function publish(
    * npm http fetch DELETE 201 http://localhost:4873/package-name/-rev/18-d8ebe3020bd4ac9c 22ms
    */
   router.delete(
-    '/:package/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.publish_package,
     can('unpublish'),
     async function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
       const packageName = req.params.package;
@@ -177,7 +177,7 @@ export default function publish(
    npm http fetch DELETE 201 http://localhost:4873/package-name/-rev/18-d8ebe3020bd4ac9c 22ms
   */
   router.delete(
-    '/:package/-/:filename/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.remove_tarball,
     can('unpublish'),
     can('publish'),
     async function (

packages/api/src/search.ts

@@ -1,9 +1,10 @@
 import { HTTP_STATUS } from '@verdaccio/core';
+import { SEARCH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Logger } from '@verdaccio/types';
 
 export default function (route, logger: Logger): void {
   // TODO: next major version, remove this
-  route.get('/-/all(/since)?', function (_req, res) {
+  route.get(SEARCH_API_ENDPOINTS.deprecated_search, function (_req, res) {
     logger.warn('search endpoint has been removed, please use search v1');
     res.status(HTTP_STATUS.NOT_FOUND);
     res.json({ error: 'not found, endpoint was removed' });

packages/api/src/stars.ts

@@ -2,6 +2,7 @@ import { Response, Router } from 'express';
 import _ from 'lodash';
 
 import { HTTP_STATUS, USERS, errorUtils } from '@verdaccio/core';
+import { STARS_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Version } from '@verdaccio/types';
 
@@ -9,7 +10,7 @@ import { $NextFunctionVer, $RequestExtend } from '../types/custom';
 
 export default function (route: Router, storage: Storage): void {
   route.get(
-    '/-/_view/starredByUser',
+    STARS_API_ENDPOINTS.get_user_starred_packages,
     async (req: $RequestExtend, res: Response, next: $NextFunctionVer): Promise<void> => {
       const query: { key: string } = req.query;
       if (typeof query?.key !== 'string') {

packages/api/src/user.ts

@@ -12,7 +12,7 @@ import {
   errorUtils,
   validatioUtils,
 } from '@verdaccio/core';
-import { rateLimit } from '@verdaccio/middleware';
+import { USER_API_ENDPOINTS, rateLimit } from '@verdaccio/middleware';
 import { Logger } from '@verdaccio/types';
 import { Config, RemoteUser } from '@verdaccio/types';
 import { getAuthenticatedMessage, mask } from '@verdaccio/utils';
@@ -23,7 +23,7 @@ const debug = buildDebug('verdaccio:api:user');
 
 export default function (route: Router, auth: Auth, config: Config, logger: Logger): void {
   route.get(
-    '/-/user/:org_couchdb_user',
+    USER_API_ENDPOINTS.get_user,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       debug('verifying user');
@@ -70,7 +70,7 @@ export default function (route: Router, auth: Auth, config: Config, logger: Logg
  * @param {Config} config
  */
   route.put(
-    '/-/user/:org_couchdb_user/:_rev?/:revision?',
+    USER_API_ENDPOINTS.add_user,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       const { name, password } = req.body;
@@ -168,7 +168,7 @@ export default function (route: Router, auth: Auth, config: Config, logger: Logg
   );
 
   route.delete(
-    '/-/user/token/*',
+    USER_API_ENDPOINTS.user_token,
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       res.status(HTTP_STATUS.OK);
       next({

packages/api/src/v1/profile.ts

@@ -10,6 +10,7 @@ import {
   errorUtils,
   validatioUtils,
 } from '@verdaccio/core';
+import { PROFILE_API_ENDPOINTS } from '@verdaccio/middleware';
 import { rateLimit } from '@verdaccio/middleware';
 import { Config } from '@verdaccio/types';
 
@@ -41,7 +42,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
   }
 
   route.get(
-    '/-/npm/v1/user',
+    PROFILE_API_ENDPOINTS.get_profile,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name) === false) {
@@ -56,7 +57,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
   );
 
   route.post(
-    '/-/npm/v1/user',
+    PROFILE_API_ENDPOINTS.get_profile,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name)) {

packages/api/src/v1/search.ts

@@ -3,6 +3,7 @@ import _ from 'lodash';
 
 import { Auth } from '@verdaccio/auth';
 import { HTTP_STATUS, searchUtils } from '@verdaccio/core';
+import { SEARCH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Manifest } from '@verdaccio/types';
 import { Logger } from '@verdaccio/types';
@@ -35,7 +36,7 @@ export default function (route, auth: Auth, storage: Storage, logger: Logger): v
     });
   }
 
-  route.get('/-/v1/search', async (req, res, next) => {
+  route.get(SEARCH_API_ENDPOINTS.search, async (req, res, next) => {
     const { query, url } = req;
     let [size, from] = ['size', 'from'].map((k) => query[k]);
     let data;

packages/api/src/v1/token.ts

@@ -5,6 +5,7 @@ import { getApiToken } from '@verdaccio/auth';
 import { Auth } from '@verdaccio/auth';
 import { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';
 import { rateLimit } from '@verdaccio/middleware';
+import { TOKEN_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Config, RemoteUser, Token } from '@verdaccio/types';
 import { Logger } from '@verdaccio/types';
@@ -32,7 +33,7 @@ export default function (
   logger: Logger
 ): void {
   route.get(
-    '/-/npm/v1/tokens',
+    TOKEN_API_ENDPOINTS.get_tokens,
     rateLimit(config?.userRateLimit),
     async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { name } = req.remote_user;
@@ -60,7 +61,7 @@ export default function (
   );
 
   route.post(
-    '/-/npm/v1/tokens',
+    TOKEN_API_ENDPOINTS.get_tokens,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { password, readonly, cidr_whitelist } = req.body;
@@ -131,7 +132,7 @@ export default function (
   );
 
   route.delete(
-    '/-/npm/v1/tokens/token/:tokenKey',
+    TOKEN_API_ENDPOINTS.delete_token,
     rateLimit(config?.userRateLimit),
     async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {
       const {

packages/api/src/whoami.ts

@@ -2,21 +2,25 @@ import buildDebug from 'debug';
 import { Response, Router } from 'express';
 
 import { errorUtils } from '@verdaccio/core';
+import { USER_API_ENDPOINTS } from '@verdaccio/middleware';
 
 import { $NextFunctionVer, $RequestExtend } from '../types/custom';
 
 const debug = buildDebug('verdaccio:api:user');
 
 export default function (route: Router): void {
-  route.get('/-/whoami', (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {
-    // remote_user is set by the auth middleware
-    const username = req?.remote_user?.name;
-    if (!username) {
-      debug('whoami: user not found');
-      return next(errorUtils.getUnauthorized('Unauthorized'));
-    }
+  route.get(
+    USER_API_ENDPOINTS.whoami,
+    (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {
+      // remote_user is set by the auth middleware
+      const username = req?.remote_user?.name;
+      if (!username) {
+        debug('whoami: user not found');
+        return next(errorUtils.getUnauthorized('Unauthorized'));
+      }
 
-    debug('whoami: response %o', username);
-    return next({ username: username });
-  });
+      debug('whoami: response %o', username);
+      return next({ username: username });
+    }
+  );
 }

packages/auth/CHANGELOG.md

@@ -1,5 +1,78 @@
 # @verdaccio/auth
 
+## 8.0.0-next-8.12
+
+### Patch Changes
+
+- Updated dependencies [95ac124]
+  - @verdaccio/core@8.0.0-next-8.12
+  - @verdaccio/config@8.0.0-next-8.12
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.12
+  - @verdaccio/utils@8.1.0-next-8.12
+  - @verdaccio/signature@8.0.0-next-8.4
+
+## 8.0.0-next-8.11
+
+### Patch Changes
+
+- Updated dependencies [85e0e13]
+  - @verdaccio/utils@8.1.0-next-8.11
+  - @verdaccio/config@8.0.0-next-8.11
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.11
+  - @verdaccio/signature@8.0.0-next-8.3
+  - @verdaccio/core@8.0.0-next-8.11
+
+## 8.0.0-next-8.10
+
+### Patch Changes
+
+- Updated dependencies [bf0e09a]
+  - @verdaccio/config@8.0.0-next-8.10
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.10
+  - @verdaccio/signature@8.0.0-next-8.2
+  - @verdaccio/core@8.0.0-next-8.10
+  - @verdaccio/utils@8.1.0-next-8.10
+
+## 8.0.0-next-8.9
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.9
+- @verdaccio/config@8.0.0-next-8.9
+- @verdaccio/loaders@8.0.0-next-8.4
+- verdaccio-htpasswd@13.0.0-next-8.9
+- @verdaccio/utils@8.1.0-next-8.9
+- @verdaccio/signature@8.0.0-next-8.1
+
+## 8.0.0-next-8.8
+
+### Patch Changes
+
+- Updated dependencies [0588605]
+- Updated dependencies [ca91b9a]
+  - @verdaccio/config@8.0.0-next-8.8
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.8
+  - @verdaccio/signature@8.0.0-next-8.1
+  - @verdaccio/core@8.0.0-next-8.8
+  - @verdaccio/utils@8.1.0-next-8.8
+
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.7
+  - @verdaccio/signature@8.0.0-next-8.1
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/auth/README.md

@@ -6,7 +6,6 @@
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
 [![TODOs](https://badgen.net/https/api.tickgit.com/badgen/github.com/verdaccio/verdaccio)](https://www.tickgit.com/browse?repo=github.com/verdaccio/verdaccio)
 
-[![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 
 ## Donations

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.12",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,20 +38,20 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.12",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
     "@verdaccio/loaders": "workspace:8.0.0-next-8.4",
-    "@verdaccio/signature": "workspace:8.0.0-next-8.1",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/signature": "workspace:8.0.0-next-8.4",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.12",
+    "debug": "4.4.0",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:13.0.0-next-8.6"
+    "verdaccio-htpasswd": "workspace:13.0.0-next-8.12"
   },
   "devDependencies": {
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
-    "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "express": "4.21.1",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.12",
+    "@verdaccio/types": "workspace:13.0.0-next-8.3",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.12",
+    "express": "4.21.2",
     "supertest": "7.0.0"
   },
   "funding": {

packages/cli/CHANGELOG.md

@@ -1,5 +1,64 @@
 # @verdaccio/cli
 
+## 8.0.0-next-8.12
+
+### Patch Changes
+
+- Updated dependencies [95ac124]
+  - @verdaccio/core@8.0.0-next-8.12
+  - @verdaccio/config@8.0.0-next-8.12
+  - @verdaccio/node-api@8.0.0-next-8.12
+  - @verdaccio/logger@8.0.0-next-8.12
+
+## 8.0.0-next-8.11
+
+### Patch Changes
+
+- @verdaccio/config@8.0.0-next-8.11
+- @verdaccio/node-api@8.0.0-next-8.11
+- @verdaccio/core@8.0.0-next-8.11
+- @verdaccio/logger@8.0.0-next-8.11
+
+## 8.0.0-next-8.10
+
+### Patch Changes
+
+- Updated dependencies [bf0e09a]
+  - @verdaccio/config@8.0.0-next-8.10
+  - @verdaccio/node-api@8.0.0-next-8.10
+  - @verdaccio/core@8.0.0-next-8.10
+  - @verdaccio/logger@8.0.0-next-8.10
+
+## 8.0.0-next-8.9
+
+### Patch Changes
+
+- @verdaccio/node-api@8.0.0-next-8.9
+- @verdaccio/core@8.0.0-next-8.9
+- @verdaccio/config@8.0.0-next-8.9
+- @verdaccio/logger@8.0.0-next-8.9
+
+## 8.0.0-next-8.8
+
+### Patch Changes
+
+- Updated dependencies [0588605]
+- Updated dependencies [ca91b9a]
+  - @verdaccio/config@8.0.0-next-8.8
+  - @verdaccio/node-api@8.0.0-next-8.8
+  - @verdaccio/core@8.0.0-next-8.8
+  - @verdaccio/logger@8.0.0-next-8.8
+
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/node-api@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/cli/README.md

@@ -6,7 +6,6 @@
 [![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
 [![TODOs](https://badgen.net/https/api.tickgit.com/badgen/github.com/verdaccio/verdaccio)](https://www.tickgit.com/browse?repo=github.com/verdaccio/verdaccio)
 
-[![Twitter followers](https://img.shields.io/twitter/follow/verdaccio_npm.svg?style=social&label=Follow)](https://twitter.com/verdaccio_npm)
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 
 ## Donations

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.12",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -43,14 +43,14 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/node-api": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.12",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.12",
+    "@verdaccio/node-api": "workspace:8.0.0-next-8.12",
     "clipanion": "4.0.0-rc.4",
-    "envinfo": "7.13.0",
+    "envinfo": "7.14.0",
     "kleur": "4.1.5",
-    "semver": "7.6.3"
+    "semver": "7.7.1"
   },
   "devDependencies": {
     "ts-node": "10.9.2"

packages/config/CHANGELOG.md

@@ -1,5 +1,53 @@
 # @verdaccio/config
 
+## 8.0.0-next-8.12
+
+### Patch Changes
+
+- Updated dependencies [95ac124]
+  - @verdaccio/core@8.0.0-next-8.12
+  - @verdaccio/utils@8.1.0-next-8.12
+
+## 8.0.0-next-8.11
+
+### Patch Changes
+
+- Updated dependencies [85e0e13]
+  - @verdaccio/utils@8.1.0-next-8.11
+  - @verdaccio/core@8.0.0-next-8.11
+
+## 8.0.0-next-8.10
+
+### Patch Changes
+
+- bf0e09a: fix: runtime dependency missing as explicit dependency
+  - @verdaccio/core@8.0.0-next-8.10
+  - @verdaccio/utils@8.1.0-next-8.10
+
+## 8.0.0-next-8.9
+
+### Patch Changes
+
+- @verdaccio/core@8.0.0-next-8.9
+- @verdaccio/utils@8.1.0-next-8.9
+
+## 8.0.0-next-8.8
+
+### Patch Changes
+
+- 0588605: chore: `keep_readmes` docs
+- ca91b9a: fix: config builder `addLogger`
+  - @verdaccio/core@8.0.0-next-8.8
+  - @verdaccio/utils@8.1.0-next-8.8
+
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.12",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,9 +38,9 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.12",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.12",
+    "debug": "4.4.0",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
     "minimatch": "7.4.6"