chore: update versions (next-8) (#5012)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/breezy-geckos-search.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+'@verdaccio/middleware': patch
+'@verdaccio/store': patch
+---
+
+chore: move tarball utils to core

.changeset/pre.json

@@ -64,6 +64,7 @@
     "angry-doors-tan",
     "beige-lions-type",
     "blue-paws-cheer",
+    "breezy-geckos-search",
     "chatty-apricots-report",
     "clean-beds-wash",
     "clever-bees-happen",
@@ -89,6 +90,8 @@
     "rude-socks-walk",
     "serious-apes-rule",
     "silent-bags-listen",
+    "slow-cars-guess",
+    "smooth-games-share",
     "stupid-camels-build",
     "sweet-crabs-deliver",
     "thirty-comics-trade",

.changeset/slow-cars-guess.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+support packages with multiple module types

.changeset/smooth-games-share.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/server': patch
+'verdaccio-audit': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix: crashes with path-to-regexp v0.1.12 express

.github/workflows/plugin-generator-e2e.yaml

@@ -3,9 +3,9 @@ name: E2E Generator Verdaccio Plugin
 on:
   pull_request:
   workflow_dispatch:
-  push:
-    branches:
-      - 'master'
+#  push:
+#    branches:
+#      - 'master'
 
 concurrency:
   group: generator-plugin-${{ github.ref }}

SECURITY.md

@@ -2,7 +2,7 @@
 
 ## Supported versions
 
-You can find details about the supported versions of Verdaccio in the [version history](VERSIONS.md).
+You can find details about the supported versions of Verdaccio in the [version history](https://github.com/verdaccio/verdaccio/blob/master/VERSIONS.md).
 
 ## Responsible disclosure security policy
 

e2e/cli/cli-commons/package.json

@@ -4,16 +4,16 @@
   "version": "2.0.0-next-8.0",
   "main": "src/index.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "fs-extra": "11.2.0",
     "get-port": "5.1.1",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.6"
+    "verdaccio": "workspace:8.0.0-next-8.7"
   },
   "scripts": {
     "test": "echo no test",

e2e/ui/package.json

@@ -3,11 +3,11 @@
   "name": "@verdaccio/e2e-ui",
   "version": "2.0.0",
   "devDependencies": {
-    "verdaccio": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
-    "debug": "4.3.7",
+    "verdaccio": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
+    "debug": "4.4.0",
     "cypress": "^13.6.0",
     "get-port": "5.1.1"
   },

package.json

@@ -95,7 +95,7 @@
     "babel-plugin-emotion": "11.0.0",
     "concurrently": "8.2.2",
     "cross-env": "7.0.3",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "detect-secrets": "1.0.6",
     "eslint": "8.57.1",
     "fs-extra": "11.2.0",
@@ -107,7 +107,7 @@
     "nock": "13.5.1",
     "nodemon": "3.0.3",
     "npm-run-all2": "5.0.2",
-    "prettier": "3.3.3",
+    "prettier": "3.4.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",
     "rimraf": "5.0.10",

packages/api/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @verdaccio/api
 
+## 8.1.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+- Updated dependencies [139861e]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/middleware@8.0.0-next-8.7
+  - @verdaccio/store@8.0.0-next-8.7
+  - @verdaccio/auth@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.1.0-next-8.6
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "8.1.0-next-8.6",
+  "version": "8.1.0-next-8.7",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,24 +38,24 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
-    "@verdaccio/store": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.7",
+    "@verdaccio/store": "workspace:8.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "abortcontroller-polyfill": "1.7.6",
     "body-parser": "1.20.3",
     "cookies": "0.9.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "express": "4.21.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
     "semver": "7.6.3"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "mockdate": "3.0.5",
     "nock": "13.5.1",

packages/api/src/dist-tags.ts

@@ -5,6 +5,7 @@ import mime from 'mime';
 import { Auth } from '@verdaccio/auth';
 import { constants, errorUtils } from '@verdaccio/core';
 import { allow, media } from '@verdaccio/middleware';
+import { DIST_TAGS_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
@@ -39,21 +40,21 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
 
   // tagging a package.
   route.put(
-    '/:package/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging,
     can('publish'),
     media(mime.getType('json')),
     addTagPackageVersionMiddleware
   );
 
   route.put(
-    '/-/package/:package/dist-tags/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging_package,
     can('publish'),
     media(mime.getType('json')),
     addTagPackageVersionMiddleware
   );
 
   route.delete(
-    '/-/package/:package/dist-tags/:tag',
+    DIST_TAGS_API_ENDPOINTS.tagging_package,
     can('publish'),
     async function (
       req: $RequestExtend,
@@ -75,7 +76,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
   );
 
   route.get(
-    '/-/package/:package/dist-tags',
+    DIST_TAGS_API_ENDPOINTS.get_dist_tags,
     can('access'),
     async function (
       req: $RequestExtend,

packages/api/src/package.ts

@@ -4,6 +4,7 @@ import { Router } from 'express';
 import { Auth } from '@verdaccio/auth';
 import { HEADERS, HEADER_TYPE, stringUtils } from '@verdaccio/core';
 import { allow } from '@verdaccio/middleware';
+import { PACKAGE_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
@@ -17,7 +18,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
     afterAll: (a, b) => logger.trace(a, b),
   });
   route.get(
-    '/:package/:version?',
+    PACKAGE_API_ENDPOINTS.get_package_by_version,
     can('access'),
     async function (
       req: $RequestExtend,
@@ -76,7 +77,7 @@ export default function (route: Router, auth: Auth, storage: Storage, logger: Lo
   );
 
   route.get(
-    '/:package/-/:filename',
+    PACKAGE_API_ENDPOINTS.get_package_tarball,
     can('access'),
     async function (req: $RequestExtend, res: $ResponseExtend, next): Promise<void> {
       const { package: pkgName, filename } = req.params;

packages/api/src/ping.ts

@@ -1,10 +1,12 @@
 import { Router } from 'express';
 
+import { PING_API_ENDPOINTS } from '@verdaccio/middleware';
+
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
 export default function (route: Router): void {
   route.get(
-    '/-/ping',
+    PING_API_ENDPOINTS.ping,
     function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
       next({});
     }

packages/api/src/publish.ts

@@ -5,13 +5,13 @@ import mime from 'mime';
 import { Auth } from '@verdaccio/auth';
 import { API_MESSAGE, HTTP_STATUS } from '@verdaccio/core';
 import { allow, expectJson, media } from '@verdaccio/middleware';
+// import star from './star';
+import { PUBLISH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Logger } from '@verdaccio/types';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types/custom';
 
-// import star from './star';
-
 const debug = buildDebug('verdaccio:api:publish');
 
 /**
@@ -120,7 +120,7 @@ export default function publish(
     afterAll: (a, b) => logger.trace(a, b),
   });
   router.put(
-    '/:package',
+    PUBLISH_API_ENDPOINTS.add_package,
     can('publish'),
     media(mime.getType('json')),
     expectJson,
@@ -128,7 +128,7 @@ export default function publish(
   );
 
   router.put(
-    '/:package/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.publish_package,
     can('unpublish'),
     media(mime.getType('json')),
     expectJson,
@@ -143,7 +143,7 @@ export default function publish(
    *  -  no version is specified in the unpublish call
    *  -  all versions are removed npm unpublish package@*
    *  -  there is no versions on the metadata
-   
+
    * then the client decides to DELETE the resource
    * Example:
    * Get fresh manifest (write=true is a flag to get the latest revision)
@@ -153,7 +153,7 @@ export default function publish(
    * npm http fetch DELETE 201 http://localhost:4873/package-name/-rev/18-d8ebe3020bd4ac9c 22ms
    */
   router.delete(
-    '/:package/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.publish_package,
     can('unpublish'),
     async function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer) {
       const packageName = req.params.package;
@@ -177,7 +177,7 @@ export default function publish(
    npm http fetch DELETE 201 http://localhost:4873/package-name/-rev/18-d8ebe3020bd4ac9c 22ms
   */
   router.delete(
-    '/:package/-/:filename/-rev/:revision',
+    PUBLISH_API_ENDPOINTS.remove_tarball,
     can('unpublish'),
     can('publish'),
     async function (

packages/api/src/search.ts

@@ -1,9 +1,10 @@
 import { HTTP_STATUS } from '@verdaccio/core';
+import { SEARCH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Logger } from '@verdaccio/types';
 
 export default function (route, logger: Logger): void {
   // TODO: next major version, remove this
-  route.get('/-/all(/since)?', function (_req, res) {
+  route.get(SEARCH_API_ENDPOINTS.deprecated_search, function (_req, res) {
     logger.warn('search endpoint has been removed, please use search v1');
     res.status(HTTP_STATUS.NOT_FOUND);
     res.json({ error: 'not found, endpoint was removed' });

packages/api/src/stars.ts

@@ -2,6 +2,7 @@ import { Response, Router } from 'express';
 import _ from 'lodash';
 
 import { HTTP_STATUS, USERS, errorUtils } from '@verdaccio/core';
+import { STARS_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Version } from '@verdaccio/types';
 
@@ -9,7 +10,7 @@ import { $NextFunctionVer, $RequestExtend } from '../types/custom';
 
 export default function (route: Router, storage: Storage): void {
   route.get(
-    '/-/_view/starredByUser',
+    STARS_API_ENDPOINTS.get_user_starred_packages,
     async (req: $RequestExtend, res: Response, next: $NextFunctionVer): Promise<void> => {
       const query: { key: string } = req.query;
       if (typeof query?.key !== 'string') {

packages/api/src/v1/profile.ts

@@ -10,6 +10,7 @@ import {
   errorUtils,
   validatioUtils,
 } from '@verdaccio/core';
+import { PROFILE_API_ENDPOINTS } from '@verdaccio/middleware';
 import { rateLimit } from '@verdaccio/middleware';
 import { Config } from '@verdaccio/types';
 
@@ -41,7 +42,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
   }
 
   route.get(
-    '/-/npm/v1/user',
+    PROFILE_API_ENDPOINTS.get_profile,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name) === false) {
@@ -56,7 +57,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
   );
 
   route.post(
-    '/-/npm/v1/user',
+    PROFILE_API_ENDPOINTS.get_profile,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name)) {

packages/api/src/v1/search.ts

@@ -3,6 +3,7 @@ import _ from 'lodash';
 
 import { Auth } from '@verdaccio/auth';
 import { HTTP_STATUS, searchUtils } from '@verdaccio/core';
+import { SEARCH_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Manifest } from '@verdaccio/types';
 import { Logger } from '@verdaccio/types';
@@ -35,7 +36,7 @@ export default function (route, auth: Auth, storage: Storage, logger: Logger): v
     });
   }
 
-  route.get('/-/v1/search', async (req, res, next) => {
+  route.get(SEARCH_API_ENDPOINTS.search, async (req, res, next) => {
     const { query, url } = req;
     let [size, from] = ['size', 'from'].map((k) => query[k]);
     let data;

packages/api/src/v1/token.ts

@@ -5,6 +5,7 @@ import { getApiToken } from '@verdaccio/auth';
 import { Auth } from '@verdaccio/auth';
 import { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';
 import { rateLimit } from '@verdaccio/middleware';
+import { TOKEN_API_ENDPOINTS } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Config, RemoteUser, Token } from '@verdaccio/types';
 import { Logger } from '@verdaccio/types';
@@ -32,7 +33,7 @@ export default function (
   logger: Logger
 ): void {
   route.get(
-    '/-/npm/v1/tokens',
+    TOKEN_API_ENDPOINTS.get_tokens,
     rateLimit(config?.userRateLimit),
     async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { name } = req.remote_user;
@@ -60,7 +61,7 @@ export default function (
   );
 
   route.post(
-    '/-/npm/v1/tokens',
+    TOKEN_API_ENDPOINTS.get_tokens,
     rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { password, readonly, cidr_whitelist } = req.body;
@@ -131,7 +132,7 @@ export default function (
   );
 
   route.delete(
-    '/-/npm/v1/tokens/token/:tokenKey',
+    TOKEN_API_ENDPOINTS.delete_token,
     rateLimit(config?.userRateLimit),
     async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {
       const {

packages/api/src/whoami.ts

@@ -2,21 +2,25 @@ import buildDebug from 'debug';
 import { Response, Router } from 'express';
 
 import { errorUtils } from '@verdaccio/core';
+import { USER_API_ENDPOINTS } from '@verdaccio/middleware';
 
 import { $NextFunctionVer, $RequestExtend } from '../types/custom';
 
 const debug = buildDebug('verdaccio:api:user');
 
 export default function (route: Router): void {
-  route.get('/-/whoami', (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {
-    // remote_user is set by the auth middleware
-    const username = req?.remote_user?.name;
-    if (!username) {
-      debug('whoami: user not found');
-      return next(errorUtils.getUnauthorized('Unauthorized'));
-    }
+  route.get(
+    USER_API_ENDPOINTS.whoami,
+    (req: $RequestExtend, _res: Response, next: $NextFunctionVer): any => {
+      // remote_user is set by the auth middleware
+      const username = req?.remote_user?.name;
+      if (!username) {
+        debug('whoami: user not found');
+        return next(errorUtils.getUnauthorized('Unauthorized'));
+      }
 
-    debug('whoami: response %o', username);
-    return next({ username: username });
-  });
+      debug('whoami: response %o', username);
+      return next({ username: username });
+    }
+  );
 }

packages/auth/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @verdaccio/auth
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - verdaccio-htpasswd@13.0.0-next-8.7
+  - @verdaccio/signature@8.0.0-next-8.1
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,20 +38,20 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "@verdaccio/loaders": "workspace:8.0.0-next-8.4",
     "@verdaccio/signature": "workspace:8.0.0-next-8.1",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:13.0.0-next-8.6"
+    "verdaccio-htpasswd": "workspace:13.0.0-next-8.7"
   },
   "devDependencies": {
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "express": "4.21.1",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "express": "4.21.2",
     "supertest": "7.0.0"
   },
   "funding": {

packages/cli/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/cli
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/node-api@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -43,10 +43,10 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/node-api": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/node-api": "workspace:8.0.0-next-8.7",
     "clipanion": "4.0.0-rc.4",
     "envinfo": "7.13.0",
     "kleur": "4.1.5",

packages/config/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/config
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,9 +38,9 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
+    "debug": "4.4.0",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
     "minimatch": "7.4.6"

packages/core/core/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/core
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 589ea7f: chore: move tarball utils to core
+
 ## 8.0.0-next-8.6
 
 ## 8.0.0-next-8.5

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "core utilities",
   "keywords": [
     "private",

packages/core/core/src/index.ts

@@ -6,6 +6,7 @@ import * as pluginUtils from './plugin-utils';
 import * as searchUtils from './search-utils';
 import * as streamUtils from './stream-utils';
 import * as stringUtils from './string-utils';
+import * as tarballUtils from './tarball-utils';
 import * as validatioUtils from './validation-utils';
 import * as warningUtils from './warning-utils';
 
@@ -41,4 +42,5 @@ export {
   constants,
   pluginUtils,
   warningUtils,
+  tarballUtils,
 };

packages/core/core/src/pkg-utils.ts

@@ -1,22 +1,9 @@
 import semver from 'semver';
-import { URL } from 'url';
 
 import { Manifest } from '@verdaccio/types';
 
 import { DIST_TAGS } from './constants';
 
-/**
- * Extract the tarball name from a registry dist url
- * 'https://registry.npmjs.org/test/-/test-0.0.2.tgz'
- * @param tarball tarball url
- * @returns tarball filename
- */
-export function extractTarballName(tarball: string) {
-  const urlObject: any = new URL(tarball);
-  const filename = urlObject.pathname.replace(/^.*\//, '');
-  return filename;
-}
-
 /**
  * Function filters out bad semver versions and sorts the array.
  * @return {Array} sorted Array

packages/core/core/src/tarball-utils.ts

@@ -0,0 +1,43 @@
+import { URL } from 'url';
+
+/**
+ * Return package version from tarball name
+ *
+ * test-1.2.4.tgz -> 1.2.4
+ * @param {String} fileName
+ * @returns {String}
+ */
+export function getVersionFromTarball(fileName: string): string | void {
+  const groups = fileName.replace(/\.tgz$/, '').match(/^[^/]+-(\d+\.\d+\.\d+.*)/);
+
+  return groups !== null ? groups[1] : undefined;
+}
+
+/**
+ * Extract the tarball name from a registry dist url
+ *
+ * https://registry.npmjs.org/test/-/test-0.0.2.tgz -> test-0.0.2.tgz
+ * @param tarball tarball url
+ * @returns tarball filename
+ */
+export function extractTarballFromUrl(url: string): string {
+  const urlObject = new URL(url);
+  return urlObject.pathname.replace(/^.*\//, '');
+}
+
+/**
+ * Build the tarball filename from paackage name and version
+ *
+ * test, 1.2.4 -> test-1.2.4.tgz
+ * @scope/name, 1.2.4 -> name-1.2.4.tgz
+ * @param name package name
+ * @param version package version
+ * @returns tarball filename
+ */
+export function composeTarballFromPackage(name: string, version: string): string {
+  if (name.includes('/')) {
+    return `${name.split('/')[1]}-${version}.tgz`;
+  } else {
+    return `${name}-${version}.tgz`;
+  }
+}

packages/core/core/test/pkg-utils.spec.ts

@@ -3,22 +3,6 @@ import { describe, expect, test } from 'vitest';
 import { DIST_TAGS, pkgUtils } from '../src';
 
 describe('pkg-utils', () => {
-  test('extractTarballName', () => {
-    expect(pkgUtils.extractTarballName('https://registry.npmjs.org/test/-/test-0.0.2.tgz')).toBe(
-      'test-0.0.2.tgz'
-    );
-  });
-
-  test('extractTarballName with no tarball should not fails', () => {
-    expect(pkgUtils.extractTarballName('https://registry.npmjs.org/')).toBe('');
-  });
-
-  test('extractTarballName fails', () => {
-    expect(() =>
-      pkgUtils.extractTarballName('xxxxregistry.npmjs.org/test/-/test-0.0.2.tgz')
-    ).toThrow();
-  });
-
   test('getLatest fails if no versions', () => {
     expect(() =>
       // @ts-expect-error

packages/core/core/test/tarball-utils.spec.ts

@@ -0,0 +1,81 @@
+import { describe, expect, test } from 'vitest';
+
+import {
+  composeTarballFromPackage,
+  extractTarballFromUrl,
+  getVersionFromTarball,
+} from '../src/tarball-utils';
+
+describe('Utilities', () => {
+  describe('getVersionFromTarball', () => {
+    test('should get the right version', () => {
+      const simpleName = 'test-name-4.2.12.tgz';
+      const complexName = 'test-5.6.4-beta.2.tgz';
+      const otherComplexName = 'test-3.5.0-6.tgz';
+      expect(getVersionFromTarball(simpleName)).toEqual('4.2.12');
+      expect(getVersionFromTarball(complexName)).toEqual('5.6.4-beta.2');
+      expect(getVersionFromTarball(otherComplexName)).toEqual('3.5.0-6');
+    });
+
+    test('should fail at incorrect tarball name', () => {
+      expect(getVersionFromTarball('incorrectName')).toBeUndefined();
+      expect(getVersionFromTarball('test-1.2.tgz')).toBeUndefined();
+    });
+  });
+});
+
+describe('extractTarballFromUrl', () => {
+  const metadata: any = {
+    name: 'npm_test',
+    versions: {
+      '1.0.0': {
+        dist: {
+          tarball: 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz',
+        },
+      },
+      '1.0.1': {
+        dist: {
+          tarball: 'https://localhost:4873/npm_test/-/npm_test-1.0.1.tgz',
+        },
+      },
+      '1.0.2': {
+        dist: {
+          tarball: 'https://localhost/npm_test-1.0.2.tgz',
+        },
+      },
+      '1.0.3': {
+        dist: {
+          tarball: 'http://registry.org/@org/npm_test/-/npm_test-1.0.3.tgz',
+        },
+      },
+    },
+  };
+
+  test('should return only name of tarball', () => {
+    expect(extractTarballFromUrl(metadata.versions['1.0.0'].dist.tarball)).toEqual(
+      'npm_test-1.0.0.tgz'
+    );
+    expect(extractTarballFromUrl(metadata.versions['1.0.1'].dist.tarball)).toEqual(
+      'npm_test-1.0.1.tgz'
+    );
+    expect(extractTarballFromUrl(metadata.versions['1.0.2'].dist.tarball)).toEqual(
+      'npm_test-1.0.2.tgz'
+    );
+    expect(extractTarballFromUrl(metadata.versions['1.0.3'].dist.tarball)).toEqual(
+      'npm_test-1.0.3.tgz'
+    );
+  });
+
+  test('without tarball should not fails', () => {
+    expect(extractTarballFromUrl('https://registry.npmjs.org/')).toBe('');
+  });
+
+  test('fails with incomplete URL', () => {
+    expect(() => extractTarballFromUrl('xxxxregistry.npmjs.org/test/-/test-0.0.2.tgz')).toThrow();
+  });
+});
+
+test('composeTarballFromPackage - should return filename of tarball', () => {
+  expect(composeTarballFromPackage('npm_test', '1.0.0')).toEqual('npm_test-1.0.0.tgz');
+  expect(composeTarballFromPackage('@mbtools/npm_test', '1.0.1')).toEqual('npm_test-1.0.1.tgz');
+});

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- 589ea7f: chore: move tarball utils to core
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/url@13.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -33,10 +33,10 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/url": "workspace:13.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/url": "workspace:13.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
+    "debug": "4.4.0",
     "gunzip-maybe": "^1.4.2",
     "lodash": "4.17.21",
     "tar-stream": "^3.1.7"

packages/core/tarball/src/getLocalRegistryTarballUri.ts

@@ -1,15 +1,11 @@
 import buildDebug from 'debug';
-import URL from 'url';
 
+import { tarballUtils } from '@verdaccio/core';
 import { RequestOptions } from '@verdaccio/url';
 import { getPublicUrl } from '@verdaccio/url';
 
-const debug = buildDebug('verdaccio:core:url');
+const debug = buildDebug('verdaccio:core:tarball');
 
-export function extractTarballFromUrl(url: string): string {
-  // @ts-ignore
-  return URL.parse(url).pathname.replace(/^.*\//, '');
-}
 /**
  * Filter a tarball url.
  * @param {*} uri
@@ -26,7 +22,7 @@ export function getLocalRegistryTarballUri(
   if (!currentHost) {
     return uri;
   }
-  const tarballName = extractTarballFromUrl(uri);
+  const tarballName = tarballUtils.extractTarballFromUrl(uri);
   debug('tarball name %o', tarballName);
   // header only set with proxy that setup with HTTPS
   const domainRegistry = getPublicUrl(urlPrefix || '', requestOptions);

packages/core/tarball/src/index.ts

@@ -4,7 +4,7 @@ export {
   convertDistRemoteToLocalTarballUrls,
   convertDistVersionToLocalTarballsUrl,
 } from './convertDistRemoteToLocalTarballUrls';
-export { extractTarballFromUrl, getLocalRegistryTarballUri } from './getLocalRegistryTarballUri';
+export { getLocalRegistryTarballUri } from './getLocalRegistryTarballUri';
 export { getTarballDetails, TarballDetails } from './getTarballDetails';
 
 export { RequestOptions };

packages/core/tarball/tests/getLocalRegistryTarballUri.spec.ts

@@ -1,46 +1,52 @@
 import { describe, expect, test } from 'vitest';
 
-import { extractTarballFromUrl } from '../src';
+import { getLocalRegistryTarballUri } from '../src/getLocalRegistryTarballUri';
 
-describe('extractTarballFromUrl', () => {
-  const metadata: any = {
-    name: 'npm_test',
-    versions: {
-      '1.0.0': {
-        dist: {
-          tarball: 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz',
-        },
+describe('getLocalRegistryTarballUri', () => {
+  test('should return the right tarball uri', () => {
+    const uri = 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz';
+    const pkgName = 'npm_test';
+    const requestOptions = {
+      host: 'localhost:4873',
+      protocol: 'http',
+      headers: {
+        host: 'localhost:4873',
       },
-      '1.0.1': {
-        dist: {
-          tarball: 'npm_test-1.0.1.tgz',
-        },
-      },
-      '1.0.2': {
-        dist: {
-          tarball: 'https://localhost/npm_test-1.0.2.tgz',
-        },
-      },
-      '1.0.3': {
-        dist: {
-          tarball: 'http://registry.org/@org/npm_test/-/npm_test-1.0.3.tgz',
-        },
-      },
-    },
-  };
+    };
+    const urlPrefix = '/';
+    expect(getLocalRegistryTarballUri(uri, pkgName, requestOptions, urlPrefix)).toEqual(
+      'http://localhost:4873/npm_test/-/npm_test-1.0.0.tgz'
+    );
+  });
 
-  test('should return only name of tarball', () => {
-    expect(extractTarballFromUrl(metadata.versions['1.0.0'].dist.tarball)).toEqual(
-      'npm_test-1.0.0.tgz'
+  test('should return the right tarball uri with prefix', () => {
+    const uri = 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz';
+    const pkgName = 'npm_test';
+    const requestOptions = {
+      host: 'localhost:4873',
+      protocol: 'http',
+      headers: {
+        host: 'localhost:4873',
+      },
+    };
+    const urlPrefix = '/local/';
+    expect(getLocalRegistryTarballUri(uri, pkgName, requestOptions, urlPrefix)).toEqual(
+      'http://localhost:4873/local/npm_test/-/npm_test-1.0.0.tgz'
     );
-    expect(extractTarballFromUrl(metadata.versions['1.0.1'].dist.tarball)).toEqual(
-      'npm_test-1.0.1.tgz'
-    );
-    expect(extractTarballFromUrl(metadata.versions['1.0.2'].dist.tarball)).toEqual(
-      'npm_test-1.0.2.tgz'
-    );
-    expect(extractTarballFromUrl(metadata.versions['1.0.3'].dist.tarball)).toEqual(
-      'npm_test-1.0.3.tgz'
+  });
+
+  test('should return the right tarball uri without prefix', () => {
+    const uri = 'http://registry.org/npm_test/-/npm_test-1.0.0.tgz';
+    const pkgName = 'npm_test';
+    const requestOptions = {
+      host: 'localhost:4873',
+      protocol: 'http',
+      headers: {
+        host: 'localhost:4873',
+      },
+    };
+    expect(getLocalRegistryTarballUri(uri, pkgName, requestOptions, undefined)).toEqual(
+      'http://localhost:4873/npm_test/-/npm_test-1.0.0.tgz'
     );
   });
 });

packages/core/url/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -33,8 +33,8 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "debug": "4.3.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21",
     "validator": "13.12.0"
   },

packages/hooks/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/hooks
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,16 +29,16 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
     "core-js": "3.37.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "got-cjs": "12.5.4",
     "handlebars": "4.7.8"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "nock": "13.5.1"
   },

packages/loaders/package.json

@@ -13,13 +13,13 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "verdaccio-auth-memory": "workspace:*",

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/logger-commons
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,13 +38,13 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "@verdaccio/logger-prettify": "workspace:8.0.0-next-8.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "colorette": "2.0.20"
   },
   "devDependencies": {
-    "pino": "9.4.0",
+    "pino": "9.5.0",
     "@verdaccio/types": "workspace:13.0.0-next-8.2"
   },
   "funding": {

packages/logger/logger-prettify/package.json

@@ -45,7 +45,7 @@
     "sonic-boom": "3.8.1"
   },
   "devDependencies": {
-    "pino": "9.4.0"
+    "pino": "9.5.0"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/logger
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- @verdaccio/logger-commons@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,8 +38,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:8.0.0-next-8.6",
-    "pino": "9.4.0"
+    "@verdaccio/logger-commons": "workspace:8.0.0-next-8.7",
+    "pino": "9.5.0"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:13.0.0-next-8.2"

packages/middleware/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @verdaccio/middleware
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 589ea7f: chore: move tarball utils to core
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/url@13.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "express middleware utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,12 +38,12 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/url": "workspace:13.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "debug": "4.3.7",
-    "express": "4.21.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/url": "workspace:13.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
+    "debug": "4.4.0",
+    "express": "4.21.2",
     "express-rate-limit": "5.5.1",
     "lodash": "4.17.21",
     "lru-cache": "7.18.3",
@@ -54,7 +54,7 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
     "body-parser": "1.20.3",
     "supertest": "7.0.0",
     "jsdom": "25.0.1"

packages/middleware/src/index.ts

@@ -19,3 +19,5 @@ export {
   LOG_VERDACCIO_ERROR,
 } from './middlewares/log';
 export * from './types';
+export * from './middlewares/api_urls';
+export * from './middlewares/web/web-urls';

packages/middleware/src/middlewares/allow.ts

@@ -1,7 +1,6 @@
 import buildDebug from 'debug';
 
-import { API_ERROR, errorUtils } from '@verdaccio/core';
-import { getVersionFromTarball } from '@verdaccio/utils';
+import { API_ERROR, errorUtils, tarballUtils } from '@verdaccio/core';
 
 import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
 
@@ -24,7 +23,7 @@ export function allow<T>(
         ? `@${req.params.scope}/${req.params.package}`
         : req.params.package;
       const packageVersion = req.params.filename
-        ? getVersionFromTarball(req.params.filename)
+        ? tarballUtils.getVersionFromTarball(req.params.filename)
         : req.params.version
           ? req.params.version
           : undefined;

packages/middleware/src/middlewares/api_urls.ts

@@ -0,0 +1,45 @@
+export enum USER_API_ENDPOINTS {
+  whoami = '/-/whoami',
+  get_user = '/-/user/:org_couchdb_user',
+  add_user = '/-/user/:org_couchdb_user/:_rev?/:revision?',
+  user_token = '/-/user/token/*',
+}
+
+export enum STARS_API_ENDPOINTS {
+  get_user_starred_packages = '/-/_view/starredByUser',
+}
+
+export enum SEARCH_API_ENDPOINTS {
+  search = '/-/v1/search',
+  deprecated_search = '/-/all(/since)?',
+}
+
+export enum PUBLISH_API_ENDPOINTS {
+  add_package = '/:package',
+  publish_package = '/:package/-rev/:revision',
+  remove_tarball = '/:package/-/:filename/-rev/:revision',
+}
+
+export enum PING_API_ENDPOINTS {
+  ping = '/-/ping',
+}
+
+export enum PACKAGE_API_ENDPOINTS {
+  get_package_by_version = '/:package/:version?',
+  get_package_tarball = '/:package/-/:filename',
+}
+
+export enum DIST_TAGS_API_ENDPOINTS {
+  tagging = '/:package/:tag',
+  tagging_package = '/-/package/:package/dist-tags/:tag',
+  get_dist_tags = '/-/package/:package/dist-tags',
+}
+
+export enum PROFILE_API_ENDPOINTS {
+  get_profile = '/-/npm/v1/user',
+}
+
+export enum TOKEN_API_ENDPOINTS {
+  get_tokens = '/-/npm/v1/tokens',
+  delete_token = '/-/npm/v1/tokens/token/:tokenKey',
+}

packages/middleware/src/middlewares/web/web-urls.ts

@@ -0,0 +1,10 @@
+export enum WebUrls {
+  sidebar_scopped_package = '/sidebar/:scope/:package',
+  sidebar_package = '/sidebar/:package',
+  readme_package_scoped_version = '/package/readme/:scope/:package/:version?',
+  readme_package_version = '/package/readme/:package/:version?',
+  packages_all = '/packages',
+  user_login = '/login',
+  search = '/search/:anything',
+  reset_password = '/reset_password',
+}

packages/node-api/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @verdaccio/node-api
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+- Updated dependencies [139861e]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/server@8.0.0-next-8.7
+  - @verdaccio/server-fastify@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/node-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/node-api",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "node API",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -38,13 +38,13 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/server": "workspace:8.0.0-next-8.6",
-    "@verdaccio/server-fastify": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/server": "workspace:8.0.0-next-8.7",
+    "@verdaccio/server-fastify": "workspace:8.0.0-next-8.7",
     "core-js": "3.37.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21"
   },
   "devDependencies": {

packages/plugins/audit/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/plugins/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "private",
@@ -30,15 +30,15 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "express": "4.21.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "express": "4.21.2",
     "https-proxy-agent": "5.0.1",
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "nock": "13.5.1",
     "supertest": "7.0.0"

packages/plugins/auth-memory/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/plugins/auth-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-auth-memory",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "Auth plugin for Verdaccio that keeps users in memory",
   "keywords": [
     "private",
@@ -30,12 +30,12 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "debug": "4.3.7"
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "debug": "4.4.0"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2"
   },
   "scripts": {

packages/plugins/htpasswd/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/plugins/htpasswd/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-htpasswd",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "htpasswd auth plugin for Verdaccio",
   "keywords": [
     "private",
@@ -33,20 +33,20 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "@verdaccio/file-locking": "workspace:13.0.0-next-8.2",
     "apache-md5": "1.1.8",
     "bcryptjs": "2.4.3",
     "core-js": "3.37.1",
     "http-errors": "2.0.0",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "unix-crypt-td-js": "1.1.4"
   },
   "devDependencies": {
     "@types/bcryptjs": "2.4.6",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
     "mockdate": "3.0.5"
   },
   "scripts": {

packages/plugins/local-storage/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/plugins/local-storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/local-storage",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "Local storage implementation",
   "keywords": [
     "private",
@@ -36,11 +36,11 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "@verdaccio/file-locking": "workspace:13.0.0-next-8.2",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "core-js": "3.37.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "globby": "11.1.0",
     "lockfile": "1.0.4",
     "lodash": "4.17.21",
@@ -50,9 +50,9 @@
   },
   "devDependencies": {
     "@types/minimatch": "5.1.2",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "minimatch": "9.0.5"
   },

packages/plugins/memory/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 13.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 13.0.0-next-8.6
 
 ### Patch Changes

packages/plugins/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-memory",
-  "version": "13.0.0-next-8.6",
+  "version": "13.0.0-next-8.7",
   "description": "Storage implementation in memory",
   "keywords": [
     "private",
@@ -30,15 +30,15 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "memory-fs": "0.5.0",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "memfs": "3.5.3"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6"
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/ui-theme/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @verdaccio/ui-theme
 
+## 8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ## 8.0.0-next-8.5

packages/plugins/ui-theme/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/ui-theme",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "Verdaccio User Interface",
   "author": {
     "name": "Verdaccio Contributors",
@@ -27,9 +27,9 @@
     "@testing-library/dom": "10.4.0",
     "@testing-library/jest-dom": "6.4.8",
     "@testing-library/react": "16.0.0",
-    "@verdaccio/node-api": "workspace:8.0.0-next-8.6",
+    "@verdaccio/node-api": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:*",
-    "@verdaccio/ui-components": "workspace:4.0.0-next-8.3",
+    "@verdaccio/ui-components": "workspace:4.0.0-next-8.4",
     "@vitejs/plugin-react": "4.3.4",
     "babel-loader": "8.3.0",
     "babel-plugin-dynamic-import-node": "2.3.3",

packages/plugins/ui-theme/src/components/Contributors/generated_contributors_list.json

@@ -1591,6 +1591,10 @@
     "username": "casserlyprogramming",
     "id": 337812
   },
+  {
+    "username": "h3rmanj",
+    "id": 11387548
+  },
   {
     "username": "jfoechsler",
     "id": 4612720
@@ -1647,6 +1651,10 @@
     "username": "tomashejatko",
     "id": 1197578
   },
+  {
+    "username": "yasn77",
+    "id": 2234002
+  },
   {
     "username": "zzvara",
     "id": 8371789

packages/proxy/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @verdaccio/proxy
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/proxy",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "verdaccio proxy fetcher",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,17 +38,17 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "JSONStream": "1.3.5",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "got-cjs": "12.5.4",
     "hpagent": "1.2.0",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "get-stream": "^6.0.1",
     "nock": "13.5.1",

packages/search-indexer/package.json

@@ -39,7 +39,7 @@
   "devDependencies": {
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "@orama/orama": "1.2.4",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "esbuild": "0.14.10"
   },
   "funding": {

packages/search/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/search
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/proxy@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/search/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/search",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "verdaccio search proxy",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,12 +38,12 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/proxy": "workspace:8.0.0-next-8.6"
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/proxy": "workspace:8.0.0-next-8.7"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:13.0.0-next-8.2",

packages/server/express/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @verdaccio/server
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+- Updated dependencies [589ea7f]
+- Updated dependencies [139861e]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/middleware@8.0.0-next-8.7
+  - @verdaccio/store@8.0.0-next-8.7
+  - verdaccio-audit@13.0.0-next-8.7
+  - @verdaccio/auth@8.0.0-next-8.7
+  - @verdaccio/api@8.1.0-next-8.7
+  - @verdaccio/web@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/server/express/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,26 +29,26 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/api": "workspace:8.1.0-next-8.6",
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
+    "@verdaccio/api": "workspace:8.1.0-next-8.7",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
     "@verdaccio/loaders": "workspace:8.0.0-next-8.4",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
-    "@verdaccio/store": "workspace:8.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
-    "@verdaccio/web": "workspace:8.1.0-next-8.6",
-    "verdaccio-audit": "workspace:13.0.0-next-8.6",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.7",
+    "@verdaccio/store": "workspace:8.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
+    "@verdaccio/web": "workspace:8.1.0-next-8.7",
+    "verdaccio-audit": "workspace:13.0.0-next-8.7",
     "compression": "1.7.5",
     "cors": "2.8.5",
-    "debug": "4.3.7",
-    "express": "4.21.1",
+    "debug": "4.4.0",
+    "express": "4.21.2",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/proxy": "workspace:8.0.0-next-8.6",
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
+    "@verdaccio/proxy": "workspace:8.0.0-next-8.7",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
     "http-errors": "2.0.0"
   },
   "scripts": {

packages/server/fastify/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @verdaccio/server-fastify
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+- Updated dependencies [139861e]
+  - @verdaccio/tarball@13.0.0-next-8.7
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/store@8.0.0-next-8.7
+  - @verdaccio/auth@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/server/fastify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server-fastify",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "fastify server api implementation",
   "keywords": [
     "private",
@@ -33,15 +33,15 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/store": "workspace:8.0.0-next-8.6",
-    "@verdaccio/tarball": "workspace:13.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/store": "workspace:8.0.0-next-8.7",
+    "@verdaccio/tarball": "workspace:13.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "core-js": "3.37.1",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "fastify": "4.25.2",
     "fastify-plugin": "4.5.1",
     "lodash": "4.17.21"

packages/signature/package.json

@@ -39,10 +39,10 @@
   },
   "dependencies": {
     "jsonwebtoken": "9.0.2",
-    "debug": "4.3.7"
+    "debug": "4.4.0"
   },
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2"
   },
   "funding": {

packages/standalone/package.json

@@ -32,8 +32,8 @@
   "homepage": "https://verdaccio.org",
   "license": "MIT",
   "devDependencies": {
-    "@verdaccio/cli": "workspace:8.0.0-next-8.6",
-    "@verdaccio/ui-theme": "workspace:8.0.0-next-8.6",
+    "@verdaccio/cli": "workspace:8.0.0-next-8.7",
+    "@verdaccio/ui-theme": "workspace:8.0.0-next-8.7",
     "fs-extra": "11.2.0",
     "webpack": "5.93.0",
     "webpack-bundle-analyzer": "4.10.2",

packages/store/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @verdaccio/store
 
+## 8.0.0-next-8.7
+
+### Patch Changes
+
+- 589ea7f: chore: move tarball utils to core
+- Updated dependencies [589ea7f]
+  - @verdaccio/tarball@13.0.0-next-8.7
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/utils@8.1.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+  - @verdaccio/url@13.0.0-next-8.7
+  - @verdaccio/hooks@8.0.0-next-8.7
+  - @verdaccio/loaders@8.0.0-next-8.4
+  - @verdaccio/local-storage@13.0.0-next-8.7
+  - @verdaccio/proxy@8.0.0-next-8.7
+  - @verdaccio/search@8.0.0-next-8.7
+  - @verdaccio/logger@8.0.0-next-8.7
+
 ## 8.0.0-next-8.6
 
 ### Patch Changes

packages/store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/store",
-  "version": "8.0.0-next-8.6",
+  "version": "8.0.0-next-8.7",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,25 +38,25 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/hooks": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/hooks": "workspace:8.0.0-next-8.7",
     "@verdaccio/loaders": "workspace:8.0.0-next-8.4",
-    "@verdaccio/local-storage": "workspace:13.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/proxy": "workspace:8.0.0-next-8.6",
-    "@verdaccio/search": "workspace:8.0.0-next-8.6",
-    "@verdaccio/tarball": "workspace:13.0.0-next-8.6",
-    "@verdaccio/url": "workspace:13.0.0-next-8.6",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/local-storage": "workspace:13.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/proxy": "workspace:8.0.0-next-8.7",
+    "@verdaccio/search": "workspace:8.0.0-next-8.7",
+    "@verdaccio/tarball": "workspace:13.0.0-next-8.7",
+    "@verdaccio/url": "workspace:13.0.0-next-8.7",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "JSONStream": "1.3.5",
-    "debug": "4.3.7",
+    "debug": "4.4.0",
     "lodash": "4.17.21",
     "merge2": "1.4.1",
     "semver": "7.6.3"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "mockdate": "3.0.5",
     "nock": "13.5.1",

packages/store/src/storage.ts

@@ -19,9 +19,9 @@ import {
   SUPPORT_ERRORS,
   USERS,
   errorUtils,
-  pkgUtils,
   pluginUtils,
   searchUtils,
+  tarballUtils,
   validatioUtils,
 } from '@verdaccio/core';
 import { asyncLoadPlugin } from '@verdaccio/loaders';
@@ -39,7 +39,6 @@ import {
   TarballDetails,
   convertDistRemoteToLocalTarballUrls,
   convertDistVersionToLocalTarballsUrl,
-  extractTarballFromUrl,
   getTarballDetails,
 } from '@verdaccio/tarball';
 import {
@@ -1424,7 +1423,7 @@ class Storage {
       // if uploaded tarball has a different shasum, it's very likely that we
       // have some kind of error
       if (validatioUtils.isObject(metadata.dist) && _.isString(metadata.dist.tarball)) {
-        const tarball = extractTarballFromUrl(metadata.dist.tarball);
+        const tarball = tarballUtils.extractTarballFromUrl(metadata.dist.tarball);
         if (validatioUtils.isObject(data._attachments[tarball])) {
           if (
             _.isNil(data._attachments[tarball].shasum) === false &&
@@ -1979,7 +1978,7 @@ class Storage {
         cacheManifest.versions[versionId] = version;
 
         if (version?.dist?.tarball) {
-          const filename = pkgUtils.extractTarballName(version.dist.tarball);
+          const filename = tarballUtils.extractTarballFromUrl(version.dist.tarball);
           // store a fast access to the dist file by tarball name
           // it does NOT overwrite any existing records
           if (_.isNil(cacheManifest?._distfiles[filename])) {

packages/tools/docusaurus-plugin-contributors/src/contributors.json

@@ -3,11 +3,11 @@
     {
       "id": 558752,
       "login": "juanpicado",
-      "contributions": 5359,
+      "contributions": 5363,
       "repositories": [
         {
           "name": "verdaccio",
-          "contributions": 2991
+          "contributions": 2993
         },
         {
           "name": "verdaccio-cookbook",
@@ -119,7 +119,7 @@
         },
         {
           "name": "charts",
-          "contributions": 40
+          "contributions": 42
         },
         {
           "name": "verdaccio-e2e-example",
@@ -302,11 +302,11 @@
     {
       "id": 59966492,
       "login": "mbtools",
-      "contributions": 98,
+      "contributions": 99,
       "repositories": [
         {
           "name": "verdaccio",
-          "contributions": 98
+          "contributions": 99
         }
       ]
     },
@@ -4882,6 +4882,17 @@
         }
       ]
     },
+    {
+      "id": 11387548,
+      "login": "h3rmanj",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "charts",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 4612720,
       "login": "jfoechsler",
@@ -5036,6 +5047,17 @@
         }
       ]
     },
+    {
+      "id": 2234002,
+      "login": "yasn77",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "charts",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 8371789,
       "login": "zzvara",
@@ -5110,7 +5132,7 @@
       "full_name": "verdaccio/verdaccio",
       "html_url": "https://github.com/verdaccio/verdaccio",
       "description": "A lightweight Node.js private proxy registry",
-      "stargazers_count": 16541,
+      "stargazers_count": 16549,
       "archived": false
     },
     {

packages/tools/generator-verdaccio-plugin/CHANGELOG.md

@@ -1,5 +1,13 @@
 # generator-verdaccio-plugin
 
+## 6.0.0-next-8.7
+
+### Patch Changes
+
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+  - @verdaccio/config@8.0.0-next-8.7
+
 ## 6.0.0-next-8.6
 
 ### Patch Changes

packages/tools/generator-verdaccio-plugin/package.json

@@ -1,6 +1,6 @@
 {
   "name": "generator-verdaccio-plugin",
-  "version": "6.0.0-next-8.6",
+  "version": "6.0.0-next-8.7",
   "description": "plugin generator for verdaccio",
   "homepage": "https://github.com/verdaccio",
   "author": {
@@ -16,8 +16,8 @@
     "yeoman-generator"
   ],
   "dependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "chalk": "4.1.2",
     "lodash": "4.17.21",
     "yeoman-environment": "3.19.3",
@@ -25,7 +25,7 @@
     "yosay": "2.0.2"
   },
   "devDependencies": {
-    "@verdaccio/test-helper": "workspace:4.0.0-next-8.2",
+    "@verdaccio/test-helper": "workspace:4.0.0-next-8.3",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
     "ts-jest": "29.2.3",
     "yeoman-assert": "3.1.1",

packages/tools/helpers/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 4.0.0-next-8.3
+
+### Patch Changes
+
+- 139861e: fix: crashes with path-to-regexp v0.1.12 express
+
 ## 4.0.0-next-8.2
 
 ### Patch Changes

packages/tools/helpers/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/test-helper",
-  "version": "4.0.0-next-8.2",
+  "version": "4.0.0-next-8.3",
   "private": true,
   "description": "test helpers",
   "author": "Juan Picado <juanpicado19@gmail.com>",
@@ -9,16 +9,16 @@
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/auth": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/logger": "workspace:8.0.0-next-8.6",
-    "@verdaccio/middleware": "workspace:8.0.0-next-8.6",
+    "@verdaccio/auth": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/logger": "workspace:8.0.0-next-8.7",
+    "@verdaccio/middleware": "workspace:8.0.0-next-8.7",
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/utils": "workspace:8.1.0-next-8.6",
+    "@verdaccio/utils": "workspace:8.1.0-next-8.7",
     "body-parser": "1.20.3",
-    "debug": "4.3.7",
-    "express": "4.21.1",
+    "debug": "4.4.0",
+    "express": "4.21.2",
     "fs-extra": "11.2.0",
     "supertest": "7.0.0"
   },

packages/tools/local-publish/package.json

@@ -10,9 +10,9 @@
   "types": "build/index.d.ts",
   "devDependencies": {
     "@verdaccio/types": "workspace:13.0.0-next-8.2",
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
-    "@verdaccio/config": "workspace:8.0.0-next-8.6",
-    "verdaccio": "8.0.0-next-8.6"
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
+    "@verdaccio/config": "workspace:8.0.0-next-8.7",
+    "verdaccio": "8.0.0-next-8.7"
   },
   "scripts": {
     "start": "ts-node src/index.ts",

packages/tools/translations/src/progress_lang.json

@@ -72,8 +72,8 @@
     "approvalProgress": 14
   },
   "zh-CN": {
-    "translationProgress": 99,
-    "approvalProgress": 99
+    "translationProgress": 100,
+    "approvalProgress": 100
   },
   "zh-TW": {
     "translationProgress": 14,

packages/ui-components/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/ui-components
 
+## 4.0.0-next-8.4
+
+### Minor Changes
+
+- 5a91448: support packages with multiple module types
+
 ## 4.0.0-next-8.3
 
 ### Patch Changes

packages/ui-components/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/ui-components",
-  "version": "4.0.0-next-8.3",
+  "version": "4.0.0-next-8.4",
   "description": "theme ui component",
   "author": "Juan Picado <juanpicado19@gmail.com>",
   "license": "MIT",

packages/ui-components/src/components/SideBarTitle/SideBarTitle.stories.tsx

@@ -17,7 +17,7 @@ export const Commonjs: Story = {
   render: () => (
     <SideBarTittle
       isLatest={false}
-      moduleType="commonjs"
+      moduleTypes={['commonjs']}
       packageName="jquery"
       time="2012-12-31T06:54:14.275Z"
       version="1.0.0"
@@ -30,7 +30,7 @@ export const ES6: Story = {
   render: () => (
     <SideBarTittle
       isLatest={true}
-      moduleType="module"
+      moduleTypes={['module']}
       packageName="react"
       time="2012-12-31T06:54:14.275Z"
       version="14.0.0"
@@ -38,13 +38,26 @@ export const ES6: Story = {
   ),
 };
 
+export const CommonjsAndES6: Story = {
+  name: 'CommonJS and ES6 package',
+  render: () => (
+    <SideBarTittle
+      isLatest={true}
+      moduleTypes={['commonjs', 'module']}
+      packageName="jquery"
+      time="2012-12-31T06:54:14.275Z"
+      version="1.0.0"
+    />
+  ),
+};
+
 export const Description: Story = {
   name: 'With description',
   render: () => (
     <SideBarTittle
       description="Storybook's CLI - easiest method of adding storybook to your projects"
       isLatest={true}
-      moduleType="module"
+      moduleTypes={['module']}
       packageName="storybook"
       time="2012-12-31T06:54:14.275Z"
       version="14.0.0"
@@ -59,7 +72,7 @@ export const WithTypes: Story = {
       description="Storybook's CLI - easiest method of adding storybook to your projects"
       hasTypes={true}
       isLatest={true}
-      moduleType="module"
+      moduleTypes={['module']}
       packageName="storybook"
       time="2012-12-31T06:54:14.275Z"
       version="14.0.0"

packages/ui-components/src/components/SideBarTitle/SideBarTitle.tsx

@@ -16,7 +16,7 @@ interface Props {
   version: string;
   isLatest: boolean;
   hasTypes?: boolean;
-  moduleType: ModuleType | void;
+  moduleTypes: ModuleType[];
   time: string;
 }
 
@@ -48,7 +48,7 @@ const DetailSidebarTitle: React.FC<Props> = ({
   version,
   isLatest,
   hasTypes,
-  moduleType,
+  moduleTypes,
   time,
 }) => {
   const { t } = useTranslation();
@@ -63,7 +63,9 @@ const DetailSidebarTitle: React.FC<Props> = ({
                 <TypeScript />
               </Icon>
             )}
-            <ModuleJS module={moduleType} />
+            {moduleTypes.map((module, index) => (
+              <ModuleJS key={index} module={module} />
+            ))}
           </>
         </TitleWrapper>
       </StyledHeading>

packages/ui-components/src/sections/SideBar/Sidebar.tsx

@@ -13,15 +13,18 @@ import Repository from '../../components/Repository';
 import SideBarTitle from '../../components/SideBarTitle';
 import { useConfig } from '../../providers';
 import { useVersion } from '../../providers';
-import { PackageMetaInterface } from '../../types/packageMeta';
+import { ModuleType, PackageMetaInterface } from '../../types/packageMeta';
+
+const getModuleTypes = (manifest: PackageMetaInterface) => {
+  if (!manifest.latest) return [];
+
+  const moduleTypes: ModuleType[] = [manifest.latest.type || 'commonjs'];
 
-const getModuleType = (manifest: PackageMetaInterface) => {
   if (manifest.latest.main) {
-    return 'commonjs';
-  } else if (manifest.latest.type) {
-    return manifest.latest.type;
+    moduleTypes.push('commonjs');
   }
-  return;
+
+  return Array.from(new Set(moduleTypes));
 };
 
 const DetailSidebar: React.FC = () => {
@@ -40,7 +43,7 @@ const DetailSidebar: React.FC = () => {
         description={packageMeta.latest?.description}
         hasTypes={typeof packageMeta.latest?.types === 'string'}
         isLatest={typeof packageVersion === 'undefined'}
-        moduleType={getModuleType(packageMeta)}
+        moduleTypes={getModuleTypes(packageMeta)}
         packageName={packageName}
         time={time}
         version={version}

packages/utils/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/utils
 
+## 8.1.0-next-8.7
+
+### Patch Changes
+
+- 589ea7f: chore: move tarball utils to core
+- Updated dependencies [589ea7f]
+  - @verdaccio/core@8.0.0-next-8.7
+
 ## 8.1.0-next-8.6
 
 ### Patch Changes

packages/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/utils",
-  "version": "8.1.0-next-8.6",
+  "version": "8.1.0-next-8.7",
   "description": "verdaccio utilities",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,7 +29,7 @@
     "node": ">=12"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:8.0.0-next-8.6",
+    "@verdaccio/core": "workspace:8.0.0-next-8.7",
     "lodash": "4.17.21",
     "minimatch": "7.4.6",
     "semver": "7.6.3"

packages/utils/src/index.ts

@@ -3,4 +3,3 @@ export * from './utils';
 export * from './crypto-utils';
 export * from './replace-lodash';
 export * from './matcher';
-export * from './middleware-utils';

packages/utils/src/middleware-utils.ts

@@ -1,10 +0,0 @@
-/**
- * return package version from tarball name
- * @param {String} name
- * @returns {String}
- */
-export function getVersionFromTarball(name: string): string | void {
-  const groups = name.match(/.+-(\d.+)\.tgz/);
-
-  return groups !== null ? groups[1] : undefined;
-}