chore: update versions (next-8) (#5095)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.babelrc

@@ -4,15 +4,11 @@
       "@babel/env",
       {
         "targets": {
-          "node": 12
+          "node": 18
         }
       }
     ],
     "@babel/typescript"
   ],
-  "ignore": ["**/*.d.ts"],
-  "plugins": [
-    "@babel/plugin-proposal-optional-chaining",
-    "@babel/plugin-proposal-nullish-coalescing-operator"
-  ]
+  "ignore": ["**/*.d.ts"]
 }

.changeset/angry-doors-tan.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): pass version to allow check

.changeset/angry-trees-tie.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-components': patch
-'@verdaccio/ui-theme': patch
----
-
-- fixed login state when token is expired (@ku3mi41 in #3980)

.changeset/beige-lions-type.md

@@ -1,36 +1,37 @@
 ---
-'@verdaccio/api': major
-'@verdaccio/auth': major
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/core': major
-'@verdaccio/file-locking': major
-'@verdaccio/tarball': major
-'@verdaccio/types': major
-'@verdaccio/url': major
-'@verdaccio/hooks': major
-'@verdaccio/loaders': major
-'@verdaccio/logger': major
-'@verdaccio/logger-commons': major
+'generator-verdaccio-plugin': major
 '@verdaccio/logger-prettify': major
-'@verdaccio/middleware': major
-'@verdaccio/node-api': major
-'verdaccio-audit': major
-'verdaccio-auth-memory': major
-'verdaccio-htpasswd': major
+'@verdaccio/logger-commons': major
 '@verdaccio/local-storage': major
-'verdaccio-memory': major
+'verdaccio-auth-memory': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
 '@verdaccio/ui-theme': major
-'@verdaccio/proxy': major
-'@verdaccio/search': major
+'verdaccio-memory': major
+'@verdaccio/search-indexer': major
 '@verdaccio/server': major
 '@verdaccio/server-fastify': major
-'@verdaccio/signature': major
-'@verdaccio/store': major
+'@verdaccio/logger': major
+'verdaccio-audit': major
 '@verdaccio/ui-components': major
-'@verdaccio/utils': major
+'@verdaccio/tarball': major
+'@verdaccio/eslint-config': major
+'@verdaccio/test-cli-commons': major
+'@verdaccio/types': major
+'@verdaccio/middleware': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/core': major
+'@verdaccio/signature': major
 'verdaccio': major
+'@verdaccio/url': major
+'@verdaccio/node-api': major
 '@verdaccio/web': major
+'@verdaccio/loaders': major
+'@verdaccio/config': major
+'@verdaccio/search': major
+'@verdaccio/hooks': major
+'@verdaccio/proxy': major
+'@verdaccio/store': major
 ---
 
-update major dependencies, remove old nodejs support
+chore: move v7 next to v8 next

.changeset/blue-paws-cheer.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/middleware': patch
+'@verdaccio/core': patch
+---
+
+chore: request header constants

.changeset/breezy-geckos-search.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+'@verdaccio/middleware': patch
+'@verdaccio/store': patch
+---
+
+chore: move tarball utils to core

.changeset/breezy-mayflies-pull.md

@@ -1,44 +0,0 @@
----
-'@verdaccio/api': major
-'@verdaccio/auth': major
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/core': major
-'@verdaccio/file-locking': major
-'@verdaccio/tarball': major
-'@verdaccio/types': major
-'@verdaccio/url': major
-'@verdaccio/hooks': major
-'@verdaccio/loaders': major
-'@verdaccio/logger': major
-'@verdaccio/logger-7': major
-'@verdaccio/logger-commons': major
-'@verdaccio/logger-prettify': major
-'@verdaccio/middleware': major
-'@verdaccio/node-api': major
-'verdaccio-audit': major
-'verdaccio-auth-memory': major
-'verdaccio-htpasswd': major
-'@verdaccio/local-storage': major
-'verdaccio-memory': major
-'@verdaccio/ui-theme': major
-'@verdaccio/proxy': major
-'@verdaccio/search': major
-'@verdaccio/server': major
-'@verdaccio/server-fastify': major
-'@verdaccio/signature': major
-'@verdaccio/cli-standalone': major
-'@verdaccio/store': major
-'docusaurus-plugin-contributors': major
-'@verdaccio/eslint-config': major
-'@verdaccio/test-helper': major
-'customprefix-auth': major
-'@verdaccio/ui-components': major
-'@verdaccio/utils': major
-'verdaccio': major
-'@verdaccio/web': major
-'@verdaccio/website': major
-'@verdaccio/local-publish': patch
----
-
-feat!: bump to v7

.changeset/bright-bobcats-ring.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): sort versions

.changeset/brown-planets-approve.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/config': patch
+'@verdaccio/types': patch
+'@verdaccio/website': patch
+---
+
+chore: `keep_readmes` docs

.changeset/chatty-apricots-report.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': major
+---
+
+chore: move v7 next to v8 next

.changeset/chilled-carrots-guess.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
----
-
-- added `onClick` prop to `Link` component in @verdaccio/ui-components. (@moglerdev in #3989)
-- resolved issue in the `Package` component where the download button was incorrectly opening a new tab to the homepage. (@moglerdev in #3989)

.changeset/clean-beds-wash.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/logger-commons': patch
+---
+
+chore(logger): avoid message if level remains the same

.changeset/clever-bees-happen.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/proxy': patch
+---
+
+chore: move agent_options to config

.changeset/config.json

@@ -12,6 +12,25 @@
       "@verdaccio/ui-theme"
     ]
   ],
+  "ignoredPackages": [
+    "docusaurus-plugin-downloads",
+    "docusaurus-plugin-contributors",
+    "@verdaccio/test-cli-commons",
+    "@verdaccio/local-scripts",
+    "@verdaccio/e2e-cli-npm6",
+    "@verdaccio/e2e-cli-npm7",
+    "@verdaccio/e2e-cli-npm8",
+    "@verdaccio/e2e-cli-npm9",
+    "@verdaccio/e2e-cli-npm10",
+    "@verdaccio/e2e-cli-npm-common",
+    "@verdaccio/e2e-cli-yarn1",
+    "@verdaccio/e2e-cli-yarn2",
+    "@verdaccio/e2e-cli-yarn3",
+    "@verdaccio/e2e-cli-yarn4",
+    "@verdaccio/e2e-cli-pnpm8",
+    "@verdaccio/e2e-cli-pnpm9",
+    "@verdaccio/e2e-cli-pnpm10"
+  ],
   "access": "public",
   "baseBranch": "master",
   "updateInternalDependencies": "patch"

.changeset/cool-seals-watch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore(loader): fix types for plugin options

.changeset/curvy-rockets-camp.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+chore(core): typing, naming, and docs of parameters

.changeset/cyan-snakes-kiss.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(web): fix syntax of test files

.changeset/early-eyes-float.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+chore: add `error` to log level enum

.changeset/eight-squids-judge.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-fix: display labels for engine versions

.changeset/eleven-rocks-dream.md

@@ -2,4 +2,4 @@
 'verdaccio': patch
 ---
 
-chore: test release
+chore: bump user agent

.changeset/fifty-falcons-design.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): allow content-type with charset

.changeset/gentle-stingrays-repeat.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/store': patch
+---
+
+fix: code scan issues

.changeset/gold-squids-watch.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/web': patch
+---
+
+chore: add info to log when audit, htpasswd, theme are used

.changeset/good-cups-train.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/search': patch
-'@verdaccio/search-indexer': patch
----
-
-refactor: search package

.changeset/green-eagles-boil.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+fix: E409 username is already registered (adduser)

.changeset/healthy-ducks-drive.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/config': patch
+---
+
+chore: fix typedocs warnings

.changeset/healthy-zoos-lie.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+chore: add info to log when local storage is used

.changeset/hip-eggs-serve.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-htpasswd': patch
+---
+
+chore: add debug code to htpasswd package

.changeset/hot-crews-live.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/store': patch
+'@verdaccio/api': patch
+---
+
+fix: unpublish a package on storage package

.changeset/long-eyes-drum.md

@@ -0,0 +1,37 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/file-locking': minor
+'@verdaccio/tarball': minor
+'@verdaccio/types': minor
+'@verdaccio/url': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-commons': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/node-api': minor
+'verdaccio-audit': minor
+'verdaccio-auth-memory': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'verdaccio-memory': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/proxy': minor
+'@verdaccio/search': minor
+'@verdaccio/search-indexer': minor
+'@verdaccio/server': minor
+'@verdaccio/signature': minor
+'@verdaccio/store': minor
+'generator-verdaccio-plugin': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+---
+
+feat: update logger pino to latest

.changeset/long-jars-collect.md

@@ -1,15 +0,0 @@
----
-'@verdaccio/ui-theme': minor
-'@verdaccio/ui-components': minor
----
-
-feat: ui improvements
-
-Some UI improvements
-
-- download progress indicator: https://github.com/verdaccio/verdaccio/discussions/4068
-- fix dark mode and readme css support https://github.com/verdaccio/verdaccio/discussions/3942 https://github.com/verdaccio/verdaccio/discussions/3467
-- fix global for yarn packages and add version to the packages on copy
-- feat: hide deprecated versions option
-- fix: improve deprecated package style
-- feat: display deprecated versions

.changeset/long-singers-drive.md

@@ -3,4 +3,4 @@
 '@verdaccio/ui-components': patch
 ---
 
-feat: versions filter by semver range
+chore(ui): vitest follow-ups

.changeset/lucky-crabs-enjoy.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/core': patch
+'@verdaccio/middleware': patch
+'@verdaccio/proxy': patch
+---
+
+fix(middleware): error 404 when getting scoped tarballs

.changeset/nine-countries-remember.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): encoding of scope package name

.changeset/old-turkeys-heal.md

@@ -1,18 +0,0 @@
----
-'@verdaccio/config': minor
-'@verdaccio/core': minor
-'@verdaccio/file-locking': minor
-'@verdaccio/tarball': minor
-'@verdaccio/url': minor
-'@verdaccio/logger-7': minor
-'@verdaccio/logger-commons': minor
-'@verdaccio/logger-prettify': minor
-'@verdaccio/middleware': minor
-'verdaccio-audit': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/search': minor
-'@verdaccio/signature': minor
-'@verdaccio/utils': minor
----
-
-restore legacy support

.changeset/olive-bananas-wink.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/tarball': patch
----
-
-- Fixes polynomial regular expression when determining the file name of tarball
-- Add tests for extracting tarball name

.changeset/pink-apples-nail.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/ui-theme': minor
-'@verdaccio/ui-components': minor
-'@verdaccio/config': minor
----
-
-feat: forbidden user interface

.changeset/pre.json

@@ -1,87 +1,112 @@
 {
   "mode": "pre",
-  "tag": "next-7",
+  "tag": "next-8",
   "initialVersions": {
     "@verdaccio/test-cli-commons": "1.1.0",
+    "@verdaccio/e2e-cli-npm9": "1.0.1",
     "@verdaccio/e2e-cli-npm6": "1.0.1",
     "@verdaccio/e2e-cli-npm7": "1.0.1",
     "@verdaccio/e2e-cli-npm8": "1.0.1",
-    "@verdaccio/e2e-cli-npm9": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm6": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm7": "1.0.1",
     "@verdaccio/e2e-cli-pnpm8": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm9": "1.0.1",
     "@verdaccio/e2e-cli-yarn1": "1.0.1",
     "@verdaccio/e2e-cli-yarn2": "1.0.1",
     "@verdaccio/e2e-cli-yarn3": "1.0.1",
     "@verdaccio/e2e-cli-yarn4": "1.0.1",
     "@verdaccio/e2e-ui": "2.0.0",
-    "@verdaccio/api": "6.0.0",
-    "@verdaccio/auth": "6.0.0",
-    "@verdaccio/cli": "6.0.0",
-    "@verdaccio/config": "6.0.0",
-    "@verdaccio/core": "6.0.0",
-    "@verdaccio/file-locking": "11.0.0",
-    "@verdaccio/tarball": "11.0.0",
-    "@verdaccio/types": "11.0.0",
-    "@verdaccio/url": "11.0.0",
-    "@verdaccio/hooks": "6.0.0",
-    "@verdaccio/loaders": "6.0.0",
-    "@verdaccio/logger": "6.0.0",
-    "@verdaccio/logger-7": "6.0.0",
-    "@verdaccio/logger-commons": "6.0.0",
-    "@verdaccio/logger-prettify": "6.0.0",
-    "@verdaccio/middleware": "6.0.0",
-    "@verdaccio/node-api": "6.0.0",
-    "verdaccio-audit": "11.0.0",
-    "verdaccio-auth-memory": "11.0.0",
-    "verdaccio-htpasswd": "11.0.0",
-    "@verdaccio/local-storage": "11.0.0",
-    "verdaccio-memory": "11.0.0",
-    "@verdaccio/ui-theme": "6.0.0",
-    "@verdaccio/proxy": "6.0.0",
-    "@verdaccio/search-indexer": "6.0.0",
-    "@verdaccio/server": "6.0.0",
-    "@verdaccio/server-fastify": "6.0.0",
-    "@verdaccio/signature": "6.0.0",
-    "@verdaccio/cli-standalone": "6.0.0",
-    "@verdaccio/store": "6.0.0",
-    "docusaurus-plugin-contributors": "1.0.1",
-    "@verdaccio/eslint-config": "2.0.0",
-    "@verdaccio/test-helper": "2.0.0",
-    "@verdaccio/crowdin-translations": "1.0.0",
-    "customprefix-auth": "1.0.0",
-    "@verdaccio/ui-components": "2.0.0",
-    "@verdaccio/utils": "6.0.0",
-    "verdaccio": "6.0.0",
-    "@verdaccio/web": "6.0.0",
-    "@verdaccio/website": "5.20.2",
-    "@verdaccio/local-publish": "0.0.1",
-    "@verdaccio/search": "7.0.0-next.0",
-    "@verdaccio/e2e-cli-pnpm9": "1.0.1"
+    "@verdaccio/api": "7.0.0",
+    "@verdaccio/auth": "7.0.0",
+    "@verdaccio/cli": "7.0.0",
+    "@verdaccio/config": "7.0.0",
+    "@verdaccio/core": "7.0.0",
+    "@verdaccio/file-locking": "12.0.0",
+    "@verdaccio/tarball": "12.0.0",
+    "@verdaccio/types": "12.0.0",
+    "@verdaccio/url": "12.0.0",
+    "@verdaccio/hooks": "7.0.0",
+    "@verdaccio/loaders": "7.0.0",
+    "@verdaccio/logger": "7.0.0",
+    "@verdaccio/logger-commons": "7.0.0",
+    "@verdaccio/logger-prettify": "7.0.0",
+    "@verdaccio/middleware": "7.0.0",
+    "@verdaccio/node-api": "7.0.0",
+    "verdaccio-audit": "12.0.0",
+    "verdaccio-auth-memory": "12.0.0",
+    "verdaccio-htpasswd": "12.0.0",
+    "@verdaccio/local-storage": "12.0.0",
+    "verdaccio-memory": "12.0.0",
+    "@verdaccio/ui-theme": "7.0.0",
+    "@verdaccio/proxy": "7.0.0",
+    "@verdaccio/search": "7.0.0",
+    "@verdaccio/search-indexer": "7.0.0",
+    "@verdaccio/server": "7.0.0",
+    "@verdaccio/server-fastify": "7.0.0",
+    "@verdaccio/signature": "7.0.0",
+    "@verdaccio/cli-standalone": "7.0.0",
+    "@verdaccio/store": "7.0.0",
+    "docusaurus-plugin-contributors": "2.0.0",
+    "@verdaccio/eslint-config": "3.0.0",
+    "generator-verdaccio-plugin": "5.0.0",
+    "@verdaccio/test-helper": "3.0.0",
+    "@verdaccio/local-publish": "0.0.2",
+    "@verdaccio/local-scripts": "1.0.0",
+    "customprefix-auth": "2.0.0",
+    "@verdaccio/ui-components": "3.0.0",
+    "@verdaccio/utils": "7.0.0",
+    "verdaccio": "7.0.0",
+    "@verdaccio/web": "7.0.0",
+    "@verdaccio/website": "6.0.0",
+    "@verdaccio/e2e-cli-npm-common": "1.0.0",
+    "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
+    "@verdaccio/e2e-cli-pnpm10": "1.0.0",
+    "docusaurus-plugin-downloads": "2.0.0"
   },
   "changesets": [
-    "angry-trees-tie",
-    "breezy-mayflies-pull",
-    "chilled-carrots-guess",
-    "eight-squids-judge",
-    "eighty-lobsters-study",
-    "good-cups-train",
-    "long-jars-collect",
-    "old-turkeys-heal",
-    "olive-bananas-wink",
-    "perfect-chairs-act",
-    "pink-apples-nail",
-    "real-socks-vanish",
-    "shiny-worms-retire",
-    "shy-carrots-compare",
-    "shy-garlics-cry",
-    "silent-shirts-knock",
-    "slow-wasps-glow",
-    "spicy-birds-flow",
-    "strange-points-repair",
-    "thirty-toes-swim",
-    "weak-fans-explain",
-    "wild-otters-talk",
-    "young-donuts-own"
+    "angry-doors-tan",
+    "beige-lions-type",
+    "blue-paws-cheer",
+    "breezy-geckos-search",
+    "bright-bobcats-ring",
+    "brown-planets-approve",
+    "chatty-apricots-report",
+    "clean-beds-wash",
+    "clever-bees-happen",
+    "cool-seals-watch",
+    "curvy-rockets-camp",
+    "cyan-snakes-kiss",
+    "early-eyes-float",
+    "eleven-rocks-dream",
+    "fifty-falcons-design",
+    "gentle-stingrays-repeat",
+    "gold-squids-watch",
+    "green-eagles-boil",
+    "healthy-ducks-drive",
+    "healthy-zoos-lie",
+    "hip-eggs-serve",
+    "hot-crews-live",
+    "long-eyes-drum",
+    "long-singers-drive",
+    "lucky-crabs-enjoy",
+    "nine-countries-remember",
+    "quick-seas-deny",
+    "real-seahorses-change",
+    "rotten-melons-notice",
+    "rotton-readers-shave",
+    "rude-birds-design",
+    "rude-socks-walk",
+    "serious-apes-rule",
+    "short-mails-smoke",
+    "silent-bags-listen",
+    "silent-tips-admire",
+    "silver-houses-remain",
+    "slow-cars-guess",
+    "smooth-games-share",
+    "strange-pants-chew",
+    "stupid-camels-build",
+    "sweet-crabs-deliver",
+    "thirty-comics-trade",
+    "tricky-impalas-shake",
+    "violet-boxes-float",
+    "weak-cherries-serve"
   ]
 }

.changeset/quick-seas-deny.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': minor
+---
+
+chore: remove logger as dependency

.changeset/real-seahorses-change.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+update hover background color of package list

.changeset/rotten-melons-notice.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+chore(middleware): fix syntax of test files

.changeset/rotton-readers-shave.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/config': patch
+---
+
+fix: config builder `addLogger`

.changeset/rude-birds-design.md

@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore: encode parts of URL

.changeset/rude-socks-walk.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/store': patch
+---
+
+feat: keep_readmes option when publishing packages

.changeset/serious-apes-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): replace react-json-view

.changeset/shiny-worms-retire.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/search': patch
----
-
-fix: keyword undefined errors

.changeset/short-mails-smoke.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(deps): upgrade storybook to v8

.changeset/shy-carrots-compare.md

@@ -1,14 +0,0 @@
----
-'@verdaccio/server': minor
-'@verdaccio/test-helper': minor
-'@verdaccio/types': minor
-'@verdaccio/middleware': minor
-'@verdaccio/core': minor
-'@verdaccio/signature': minor
-'@verdaccio/url': minor
-'@verdaccio/config': minor
-'@verdaccio/auth': minor
-'@verdaccio/api': minor
----
-
-refactor: auth with legacy sign support

.changeset/shy-garlics-cry.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/signature': patch
----
-
-chore: export signature options type

.changeset/silent-bags-listen.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/logger-commons': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+---
+
+chore(tests): temp folder naming

.changeset/silent-shirts-knock.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/config': patch
----
-
-fix config builder erroring when passed partial config

.changeset/silent-tips-admire.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/web': patch
+---
+
+chore: export and constant on middleware

.changeset/silver-houses-remain.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix: ui-component vitest api

.changeset/slow-cars-guess.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+support packages with multiple module types

.changeset/slow-wasps-glow.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/logger-prettify': patch
----
-
-Avoid displaying "prettify pipeline error" if there is no error

.changeset/smooth-games-share.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/server': patch
+'verdaccio-audit': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix: crashes with path-to-regexp v0.1.12 express

.changeset/spicy-birds-flow.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/test-helper': patch
----
-
-fix: store readme when publishing locally

.changeset/strange-pants-chew.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+feat: show version-specific readmes in web ui

.changeset/strange-points-repair.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-fix: render READMEs with correct font and highlighting

.changeset/stupid-camels-build.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+chore(api): fix void return for some tests

.changeset/sweet-crabs-deliver.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): typing for Theme

.changeset/thirty-comics-trade.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+chore: local storage debug messages

.changeset/thirty-toes-swim.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-fix: ui dialog break pages on open due remark error

.changeset/tricky-impalas-shake.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/store': patch
+---
+
+chore: tweak error logging messages

.changeset/violet-boxes-float.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/tarball': patch
+---
+
+fix(api): add logging when requesting tarball

.changeset/weak-cherries-serve.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/logger-commons': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/search-indexer': patch
+'@verdaccio/server': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/node-api': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+'@verdaccio/web': patch
+---
+
+chore: auth package requires logger as parameter

.changeset/weak-fans-explain.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/server': patch
----
-
-fix: Avoid 404 error when getting favicon from root

.changeset/wild-otters-talk.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/api': patch
----
-
-fix: bug on change password npm profile

.changeset/young-donuts-own.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/config': patch
----
-
-chore(config): increase test coverage

.dockerignore

@@ -22,7 +22,6 @@ jest
 docs
 contrib
 docker-examples
-website
 systemd
 
 # output from test runs and similar things

.github/actions/build-app/action.yml

@@ -0,0 +1,22 @@
+name: 'Build app'
+description: 'build verdaccio application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  node-version:
+    description: 'Node.js version to use'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      uses: ./.github/actions/install-app-node
+      with:
+        node-version: ${{ inputs.node_version }}
+    - name: build
+      run: pnpm build
+      shell: bash

.github/actions/cache-packages/action.yml

@@ -0,0 +1,12 @@
+name: 'Cache packages'
+description: 'get or set cache packages'
+
+runs:
+  using: composite
+  steps:
+    - name: Cache Packages
+      id: cache-packages
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      with:
+        path: ./packages/
+        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -0,0 +1,15 @@
+name: 'Cache build'
+description: 'get or set cache build'
+
+runs:
+  using: composite
+  steps:
+    - name: Cache .pnpm-store
+      id: cache-npm
+      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
+        restore-keys: |
+          pnpm-
+

.github/actions/install-app-node/action.yml

@@ -0,0 +1,51 @@
+name: 'Install app with Node specific version'
+description: 'install application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  reporter:
+    description: 'Reporter for pnpm'
+    required: false
+    default: 'silent'
+  loglevel:
+    description: 'Log level for pnpm'
+    required: false
+    default: 'error'
+  node-version:
+    description: 'Node.js version to use'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      with:
+        node-version: ${{ inputs.node-version }}
+    - name: Install pnpm
+      run: |
+        npm install --global corepack@latest
+        corepack enable
+        corepack prepare
+      shell: bash
+    - name: set store
+      run: |
+        if [ ! -d "$HOME/.pnpm-store" ]; then
+          mkdir -p $HOME/.pnpm-store
+          pnpm config set store-dir $HOME/.pnpm-store
+        else
+          echo "Store directory already exists. Skipping configuration."
+        fi
+      shell: bash
+    - name: Restore cache pnpm store
+      uses: ./.github/actions/cache-store
+    - name: Install
+      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }} --loglevel=${{ inputs.loglevel }}
+      shell: bash
+    - name: Save cache pnpm store
+      if: steps.cache-npm.outputs.cache-hit == 'false'
+      uses: ./.github/actions/cache-store
+

.github/actions/install-app/action.yml

@@ -0,0 +1,40 @@
+name: 'Install app'
+description: 'install application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  reporter:
+    description: 'Reporter for pnpm'
+    required: false
+    default: 'silent'
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install pnpm
+      run: |
+        npm install --global corepack@latest
+        corepack enable
+        corepack prepare
+      shell: bash
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+      shell: bash
+    - name: Restore cache pnpm store
+      uses: ./.github/actions/cache-store
+    - name: Install
+      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }}
+      shell: bash
+    - name: Save cache pnpm store
+      if: steps.cache-npm.outputs.cache-hit == 'false'
+      uses: ./.github/actions/cache-store
+

.github/dependabot.yml

@@ -8,18 +8,11 @@ updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: 'github-actions'
     directory: '/'
-    schedule:
-      interval: 'weekly'
-
-  # Maintain dependencies for npm
-  - package-ecosystem: 'npm'
-    directory: '/'
-    schedule:
-      interval: 'daily'
-    allow:
-      - dependency-name: '@verdaccio/*'
-      - dependency-name: 'verdaccio-*'
+    open-pull-requests-limit: 1
+    prefix: "[github-actions] "
     assignees:
-      - 'verdacciobot'
+      - 'verdacciobot'    
+    schedule:
+      interval: 'monthly'
     labels:
       - 'bot: dependencies'

.github/disabled/ci-windows.yml

@@ -18,25 +18,24 @@ jobs:
         env:
           NODE_ENV: production          
     steps:
-    - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
     - name: Node
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
       with:
         node-version-file: '.nvmrc'
     - name: Install pnpm
-      run: npm i pnpm@latest-8 -g
+      run: |
+        npm install --global corepack@latest
+        corepack enable
+        corepack install
     - name: set store
       run: |
         mkdir ~/.pnpm-store
         pnpm config set store-dir ~/.pnpm-store
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store            
     - name: Install
-      run: pnpm install --registry http://localhost:4873
+      run: pnpm install  --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -47,14 +46,14 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -71,14 +70,14 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -100,14 +99,14 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Use Node ${{ matrix.node_version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -126,13 +125,13 @@ jobs:
     runs-on: windows-latest
     name: UI Test E2E
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/disabled/docker-plugins-e2e.yml

@@ -18,7 +18,7 @@ jobs:
       uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
 
     - name: Install node
       uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
@@ -36,4 +36,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down

.github/workflows/changesets.yml

@@ -20,12 +20,12 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
       - name: setup node.js
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
         env:
@@ -33,6 +33,7 @@ jobs:
 
       - name: Install pnpm
         run: |
+          npm install --global corepack@latest
           corepack enable
           corepack install
 

.github/workflows/ci.yml

@@ -16,7 +16,7 @@ permissions:
   contents: read
 concurrency:
   group: ci-${{ github.ref }}
-  cancel-in-progress: true  
+  cancel-in-progress: true
 
 jobs:
   prepare:
@@ -24,57 +24,30 @@ jobs:
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
+          options: >-
+            --health-cmd="curl -f http://0.0.0.0:4873/-/ping || exit 1"
+            --health-interval=10s   
+            --health-timeout=20s    
+            --health-retries=6
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install  --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            pnpm-
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
   lint:
     runs-on: ubuntu-latest
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts
+            reporter: 'default'
       - name: Lint
         run: pnpm lint
   format:
@@ -82,24 +55,11 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Use Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts
+          reporter: 'default'
       - name: Lint
         run: pnpm format:check
   test:
@@ -108,47 +68,33 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [18, 20, 21]
+        node_version: [18, 20, 21, 22, 23]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
         with:
           node-version: ${{ matrix.node_version }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts --registry http://localhost:4873
-      - name: build
-        run: pnpm build
       - name: Test
         run: pnpm test
   sync-translations:
     needs: [test]
     runs-on: ubuntu-latest
     name: synchronize translations
-    if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
+          npm install --global corepack@latest
           corepack enable
           corepack install
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+      - uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -1,6 +1,10 @@
-name: 'Code scanning - action'
+name: 'CodeQL Analysis'
 
 on:
+  push:
+    paths:
+      - .github/workflows/codeql-analysis.yml
+      - 'packages/**'
   pull_request:
     paths:
       - .github/workflows/codeql-analysis.yml
@@ -11,6 +15,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: code-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   CodeQL-Build:
     permissions:
@@ -21,20 +29,20 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
           fetch-depth: 2
 
-      # If this run was triggered by a pull request event, then checkout
-      # the head of the pull request instead of the merge commit.
-      - run: git checkout HEAD^2
-        if: ${{ github.event_name == 'pull_request' }}
-
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3ab4101902695724f9365a384f86c1074d94e18c # v2
+        uses: github/codeql-action/init@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
+        with:
+          config: |
+            paths-ignore:
+              - packages/config/test/partials/config/js/invalid.js
+              - packages/middleware/test/static/js
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3ab4101902695724f9365a384f86c1074d94e18c # v2
+        uses: github/codeql-action/autobuild@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3ab4101902695724f9365a384f86c1074d94e18c # v2
+        uses: github/codeql-action/analyze@dd746615b3b9d728a6a37ca2045b68ca76d4841a # v3.28.8

.github/workflows/docker-proxy-apache-e2e.yml

@@ -1,5 +1,9 @@
 name: E2E Docker Proxy Apache Test
 
+concurrency:
+  group: docker-apache-${{ github.ref }}
+  cancel-in-progress: true  
+
 on:
   workflow_dispatch:
   push:
@@ -11,18 +15,18 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup
@@ -42,4 +46,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -1,5 +1,10 @@
 name: E2E Docker Proxy Nginx Test
 
+concurrency:
+  group: docker-nginx-${{ github.ref }}
+  cancel-in-progress: true  
+
+
 on:
   workflow_dispatch:
   push:
@@ -8,18 +13,18 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-24.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup
@@ -39,4 +44,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down

.github/workflows/docker-publish.yml

@@ -22,9 +22,10 @@ permissions:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host
@@ -40,12 +41,13 @@ jobs:
           images: ${{ github.repository }}
           tag-custom: nightly-master
           tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
+          tag-latest: false
           tag-semver: |
             {{version}}
             {{major}}
             {{major}}.{{minor}}
       - name: Build & Push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./Dockerfile

.github/workflows/e2e-ci.yml

@@ -18,72 +18,24 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Use Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-          restore-keys: |
-            pnpm-
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
   build:
     needs: [prepare]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Use Node 16
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm recursive install --reporter=silence --registry http://localhost:4873
-      - name: build
-        run: pnpm build
+          node-version: ${{ matrix.node_version }}
       - name: Cache packages
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        id: cache-packages
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-          restore-keys: |
-            packages-
-      # - name: Cache test
-      #   uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   id: cache-test
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      #     restore-keys: |
-      #       test-
+        uses: ./.github/actions/cache-packages
   e2e-cli-npm:
     needs: [prepare, build]
     strategy:
-      fail-fast: false      
+      fail-fast: false
       matrix:
         pkg:
           [
@@ -93,37 +45,19 @@ jobs:
             npm9,
             npm10
           ]
-        node: [20, 21]
+        node: [18, 23]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ matrix.node }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: build e2e
-        run: pnpm --filter @verdaccio/test-cli-commons build
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
 
@@ -136,38 +70,21 @@ jobs:
           [
             pnpm8,
             pnpm9,
+            pnpm10,
           ]
-        node: [20, 21]
+        node: [18, 23]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ matrix.node }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --loglevel debug --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: build e2e
-        run: pnpm --filter @verdaccio/test-cli-commons build
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
   e2e-cli-yarn:
@@ -176,43 +93,25 @@ jobs:
       fail-fast: false
       matrix:
         pkg:
-          [           
+          [
             yarn1,
             yarn2,
             yarn3,
             yarn4
           ]
-        node: [20, 21]
+        node: [18, 23]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ matrix.node }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: build e2e
-        run: pnpm --filter @verdaccio/test-cli-commons build
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
-      
+

.github/workflows/e2e-ui.yml

@@ -1,39 +1,32 @@
 name: E2E UI
 
 on: [pull_request]
+
 permissions:
   contents: read
 concurrency:
   group: e2e-ui-${{ github.ref }}
-  cancel-in-progress: true  
+  cancel-in-progress: true
 jobs:
   test:
     runs-on: ubuntu-latest
     name: UI Test E2E
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-      - name: Use Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node 20
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare
-      - name: Install
-        run: pnpm install --reporter=silence --registry http://localhost:4873
-      - name: build
-        run: pnpm build
+          node-version: 20
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+      - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/plugin-generator-e2e.yaml

@@ -0,0 +1,40 @@
+name: E2E Generator Verdaccio Plugin
+
+on:
+#  pull_request:
+  workflow_dispatch:
+#  push:
+#    branches:
+#      - 'master'
+
+concurrency:
+  group: generator-plugin-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  e2e-plugin-generator:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [20, 22, 23]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: install verdaccio
+        run: npm install -g verdaccio@5
+      - name: Start server
+        run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
+      - name: ping server
+        run: curl http://localhost:4873/-/ping
+      - name: login
+        run: npx npm-cli-login -u test -p test -e test@domain.test -r http://localhost:4873
+      - name: publish
+        run: pnpm local:publish
+      - name: install yeoman
+        run: npm install -g yo@4 --loglevel=info
+      - name: install generator
+        run: npm install -g generator-verdaccio-plugin --loglevel=info --registry http://localhost:4873
+# Future: add a test to verify the plugin is working with prompt

.github/workflows/shared-docker-publish.yml

@@ -0,0 +1,56 @@
+name: Docker publish to docker.io
+
+on:
+  workflow_call:
+    inputs:
+      tag-latest:
+        required: true
+        type: boolean
+        description: 'Tag as latest'
+        default: false
+      tag-custom: 
+        required: true
+        type: string
+        description: 'Custom tag'
+        default: 'nightly-master'
+      tag-custom-only:
+        required: true
+        type: boolean
+        description: 'Custom tag only'
+        default: false      
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3.3.0
+      - uses: docker/setup-buildx-action@v1
+        with:
+          driver-opts: network=host
+      - uses: docker/login-action@v1
+        name: Login Docker Hub
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Prepare docker image tags
+        id: docker_meta
+        uses: crazy-max/ghaction-docker-meta@v1
+        with:
+          images: ${{ github.repository }}
+          tag-custom: ${{ inputs.tag-custom }}
+          tag-custom-only: ${{ inputs.tag-custom-only }}
+          tag-latest: ${{ inputs.tag-latest }}
+          tag-semver: |
+            {{version}}
+            {{major}}
+            {{major}}.{{minor}}
+      - name: Build & Push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/static-data.yml

@@ -3,9 +3,10 @@ name: static data
 
 on:
   workflow_dispatch:
+#  pull_request:
   schedule:
     # twice peer week
-    - cron: '0 0 * * 1,4'
+    - cron: "0 0 * * 1,4"
   # for now, scheduled, we can enable on push master but not make much sense now
   # push:
   #   branches:
@@ -18,20 +19,26 @@ jobs:
   prepare:
     name: Run script
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version: 18.x
-      - name: install pnpm
-        run: sudo npm i pnpm@latest-8 -g
-      - name: install dependencies
-        run: pnpm install
-      - name: Build Translations percentage
-        run: pnpm --filter @verdaccio/crowdin-translations build
+          reporter: 'default'
+      - name: Build package
+        run: pnpm --filter @verdaccio/local-scripts run build
+      - name: Get npmjs downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:npmjs
+      - name: Get docker downloads
+        run: pnpm --filter @verdaccio/local-scripts run pull:docker
+      - name: Get npmjs monhtly downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:mounthly
+      - name: Get npmjs year downloads
+        run: pnpm --filter @verdaccio/local-scripts run downloads:yearly
       - name: update contributors
         run: pnpm run contributors
         env:
@@ -41,11 +48,11 @@ jobs:
       - name: update translations
         run: pnpm run translations
         env:
-          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}          
+          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
       - name: format
         run: pnpm format
       - name: Commit & Push changes
-        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 # tag=v1.4
+        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5 # tag=v1.5
         with:
           github_token: ${{ secrets.TOKEN_VERDACCIOBOT_GITHUB }}
           message: "chore: updated static data"

.github/workflows/test-docker-build.yml

@@ -0,0 +1,13 @@
+on:
+  workflow_call:
+
+jobs:
+  testDocker:
+    name: Test Docker Build
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Build
+      run: docker build .
+      env:
+        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org

.github/workflows/test-publish-package.yml

@@ -0,0 +1,13 @@
+on:
+  workflow_call:
+
+jobs:
+  testVerdaccio:
+    name: Test Verdaccio Publish
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Publish
+      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      with:
+        args: -d

.github/workflows/ui-components.yml

@@ -1,9 +1,10 @@
 name: UI Components
 
 on:
+#  pull_request:
   workflow_dispatch:
-  schedule:
-    - cron: '0 0 * * *' 
+#  schedule:
+#    - cron: '0 0 * * *'
 
 permissions:
   contents: read  #  to fetch code (actions/checkout)
@@ -19,32 +20,22 @@ jobs:
       pull-requests: write  #  to comment on pull-requests
 
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Use Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-
-      - name: Cache pnpm modules
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        env:
-          cache-name: cache-pnpm-modules
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
 
       - name: Install pnpm
         run: |
+          npm install --global corepack@latest
           corepack enable
-            corepack prepare --activate pnpm@8.9.0
+          corepack install
       - name: Install
-        run: pnpm install  
+        run: pnpm install
       - name: Build storybook
         run: pnpm ui:storybook:build
       - name: Copy public content

.github/workflows/website.yml

@@ -3,11 +3,14 @@ name: Verdaccio Website CI
 on:
   workflow_dispatch:
   schedule:
-    - cron: '0 0 * * *' 
-
+    - cron: '0 2 * * 0'  # every Sunday at 2am UTC  (10pm EST)
 permissions:
   contents: read  #  to fetch code (actions/checkout)
 
+concurrency:
+  group: website-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     permissions:
@@ -16,46 +19,27 @@ jobs:
       pull-requests: write  #  to comment on pull-requests
 
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
-          NODE_ENV: production    
+          NODE_ENV: production
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v3
-
-      - name: Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node 20
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install  --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            pnpm-          
-      - name: Build 
-        run: pnpm build
+          node-version: 20
       - name: Build Translations percentage
-        run: pnpm --filter @verdaccio/crowdin-translations build
+        run: pnpm --filter @verdaccio/local-scripts build
       - name: Cache Docusaurus Build
-        uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v3
+        uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -68,8 +52,9 @@ jobs:
           CONTEXT: production
         run: pnpm --filter @verdaccio/website netlify:build
       - name: Deploy to Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
         env:
           NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
           NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-        run: pnpm --filter ...@verdaccio/website netlify:deploy 
+        run: pnpm --filter ...@verdaccio/website netlify:deploy
 

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -0,0 +1,114 @@
+on:
+  workflow_call:
+
+jobs:
+  npm8:
+    name: 'npm8:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm'
+        run: npm i -g npm@next-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="silent"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+  npm9:
+    name: 'npm9:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 9'
+        run: npm i -g npm@next-9          
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="silent"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+          npm run ng build --aot
+  npm10:
+    name: 'npm10:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10         
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="info"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot

.github/workflows/x-e2e-audit-workflow.yml

@@ -0,0 +1,31 @@
+on:
+  workflow_call:
+  
+jobs:
+  npm10:
+    name: 'npm10:audit example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10  
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install next --registry http://localhost:4873  --loglevel info
+          npm audit

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -0,0 +1,74 @@
+on:
+  workflow_call:
+  
+jobs:
+  npm9:
+    name: 'npm9:gatsby example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install npm 9'
+        run: npm i -g npm@next-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="info"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby@latest
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build          
+  npm10:
+    name: 'npm10:gatsby example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install npm 10'
+        run: npm i -g npm@next-10
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="info"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby@latest
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build          

.github/workflows/x-e2e-jest-workflow.yml

@@ -0,0 +1,234 @@
+on:
+  workflow_call:
+  
+jobs:
+  yarn:
+    name: 'yarn:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn add jest@29.5.0 --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  yarn2:
+    name: 'yarn2:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn set version berry
+          yarn config set npmRegistryServer "http://localhost:4873"
+          yarn config set unsafeHttpWhitelist --json '["localhost"]'
+          yarn add jest@29.5.0
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm8:
+    name: 'npm8:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm'
+        run: npm i -g npm@next-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.5.0 --registry http://localhost:4873 --loglevel info
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm9:
+    name: 'npm9:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 9'
+        run: npm i -g npm@next-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.4.2 --registry http://localhost:4873 --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js          
+  npm10:
+    name: 'npm10:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10  
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.4.2 --registry http://localhost:4873  --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js          
+  pnpm8:
+    name: 'pnpm8:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm@latest-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init
+          pnpm install jest@29.5.0 --registry http://localhost:4873  --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  pnpm9:
+    name: 'pnpm:9:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm@latest-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          yarn node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init
+          pnpm install jest@29.5.0 --registry http://localhost:4873 --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js

.github/workflows/x-release-snapshot.yml

@@ -0,0 +1,28 @@
+on:
+  workflow_call:
+  
+jobs:
+  release:
+    name: Release Snapshot
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node (latest)
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install
+      run: yarn install
+    - name: Build
+      run: yarn build
+    - name: Declare some variables
+      shell: bash
+      run: |
+        echo "sha_short=$(git rev-parse --short "$GITHUB_SHA")" >> "$GITHUB_ENV"
+    - name: Bump up package
+      run: npm version prerelease --no-git-tag-version --preid ${{ env.sha_short }}   
+    - name: Publish
+      run: sh scripts/publish-prerelease.sh
+      env:
+        REGISTRY_AUTH_TOKEN: ${{ secrets.VERDACCIO_REGISTRY_TOKEN_CANARY }}
+        REGISTRY_URL: rg.verdaccio.org

.github/workflows/x-release.yml

@@ -0,0 +1,28 @@
+on:
+  workflow_call:
+  
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node (latest)
+      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install
+      run: yarn install
+    - name: Build
+      run: yarn build
+    - name: Types
+      run: yarn code:types      
+    - name: Publish
+      run: sh scripts/publish.sh
+      env:
+        REGISTRY_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+        REGISTRY_URL: registry.npmjs.org
+    - name: Create release notes
+      run: sh scripts/github-release.sh
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/x-smok-test-docker.yml

@@ -0,0 +1,32 @@
+on:
+  workflow_call:
+    inputs:
+      docker_tag:
+        required: true
+        type: string
+        description: 'Docker tag to use for the verdaccio image'
+        default: '5'
+      module_tag:
+        required: true
+        type: string
+        description: 'Npmjs module tag to use for the verdaccio image'
+        default: '@latest'   
+  
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Docker test
+        run: |
+            docker run -d -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio:${{ inputs.docker_tag }}
+      - name: verdaccio cli 
+        run:  npm install -g verdaccio${{inputs.module_tag }} --registry http://localhost:4873                        
+      - name: gastby cli 
+        run:  npm install -g gatsby-cli --registry http://localhost:4873
+      - name: netlify cli 
+        run:  npm install -g netlify-cli --registry http://localhost:4873
+      - name: angular cli 
+        run:  npm install -g @angular/cli --registry http://localhost:4873