chore: update versions (next-8) (#5012)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.babelrc

@@ -4,15 +4,11 @@
       "@babel/env",
       {
         "targets": {
-          "node": 12
+          "node": 18
         }
       }
     ],
     "@babel/typescript"
   ],
-  "ignore": ["**/*.d.ts"],
-  "plugins": [
-    "@babel/plugin-proposal-optional-chaining",
-    "@babel/plugin-proposal-nullish-coalescing-operator"
-  ]
+  "ignore": ["**/*.d.ts"]
 }

.changeset/angry-doors-tan.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): pass version to allow check

.changeset/angry-trees-tie.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-components': patch
-'@verdaccio/ui-theme': patch
----
-
-- fixed login state when token is expired (@ku3mi41 in #3980)

.changeset/beige-lions-type.md

@@ -1,36 +1,37 @@
 ---
-'@verdaccio/api': major
-'@verdaccio/auth': major
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/core': major
-'@verdaccio/file-locking': major
-'@verdaccio/tarball': major
-'@verdaccio/types': major
-'@verdaccio/url': major
-'@verdaccio/hooks': major
-'@verdaccio/loaders': major
-'@verdaccio/logger': major
-'@verdaccio/logger-commons': major
+'generator-verdaccio-plugin': major
 '@verdaccio/logger-prettify': major
-'@verdaccio/middleware': major
-'@verdaccio/node-api': major
-'verdaccio-audit': major
-'verdaccio-auth-memory': major
-'verdaccio-htpasswd': major
+'@verdaccio/logger-commons': major
 '@verdaccio/local-storage': major
-'verdaccio-memory': major
+'verdaccio-auth-memory': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
 '@verdaccio/ui-theme': major
-'@verdaccio/proxy': major
-'@verdaccio/search': major
+'verdaccio-memory': major
+'@verdaccio/search-indexer': major
 '@verdaccio/server': major
 '@verdaccio/server-fastify': major
-'@verdaccio/signature': major
-'@verdaccio/store': major
+'@verdaccio/logger': major
+'verdaccio-audit': major
 '@verdaccio/ui-components': major
-'@verdaccio/utils': major
+'@verdaccio/tarball': major
+'@verdaccio/eslint-config': major
+'@verdaccio/test-cli-commons': major
+'@verdaccio/types': major
+'@verdaccio/middleware': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/core': major
+'@verdaccio/signature': major
 'verdaccio': major
+'@verdaccio/url': major
+'@verdaccio/node-api': major
 '@verdaccio/web': major
+'@verdaccio/loaders': major
+'@verdaccio/config': major
+'@verdaccio/search': major
+'@verdaccio/hooks': major
+'@verdaccio/proxy': major
+'@verdaccio/store': major
 ---
 
-update major dependencies, remove old nodejs support
+chore: move v7 next to v8 next

.changeset/blue-paws-cheer.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/middleware': patch
+'@verdaccio/core': patch
+---
+
+chore: request header constants

.changeset/breezy-geckos-search.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+'@verdaccio/middleware': patch
+'@verdaccio/store': patch
+---
+
+chore: move tarball utils to core

.changeset/breezy-mayflies-pull.md

@@ -1,44 +0,0 @@
----
-'@verdaccio/api': major
-'@verdaccio/auth': major
-'@verdaccio/cli': major
-'@verdaccio/config': major
-'@verdaccio/core': major
-'@verdaccio/file-locking': major
-'@verdaccio/tarball': major
-'@verdaccio/types': major
-'@verdaccio/url': major
-'@verdaccio/hooks': major
-'@verdaccio/loaders': major
-'@verdaccio/logger': major
-'@verdaccio/logger-7': major
-'@verdaccio/logger-commons': major
-'@verdaccio/logger-prettify': major
-'@verdaccio/middleware': major
-'@verdaccio/node-api': major
-'verdaccio-audit': major
-'verdaccio-auth-memory': major
-'verdaccio-htpasswd': major
-'@verdaccio/local-storage': major
-'verdaccio-memory': major
-'@verdaccio/ui-theme': major
-'@verdaccio/proxy': major
-'@verdaccio/search': major
-'@verdaccio/server': major
-'@verdaccio/server-fastify': major
-'@verdaccio/signature': major
-'@verdaccio/cli-standalone': major
-'@verdaccio/store': major
-'docusaurus-plugin-contributors': major
-'@verdaccio/eslint-config': major
-'@verdaccio/test-helper': major
-'customprefix-auth': major
-'@verdaccio/ui-components': major
-'@verdaccio/utils': major
-'verdaccio': major
-'@verdaccio/web': major
-'@verdaccio/website': major
-'@verdaccio/local-publish': patch
----
-
-feat!: bump to v7

.changeset/chatty-apricots-report.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': major
+---
+
+chore: move v7 next to v8 next

.changeset/chilled-carrots-guess.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
----
-
-- added `onClick` prop to `Link` component in @verdaccio/ui-components. (@moglerdev in #3989)
-- resolved issue in the `Package` component where the download button was incorrectly opening a new tab to the homepage. (@moglerdev in #3989)

.changeset/clean-beds-wash.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/logger-commons': patch
+---
+
+chore(logger): avoid message if level remains the same

.changeset/clever-bees-happen.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/proxy': patch
+---
+
+chore: move agent_options to config

.changeset/config.json

@@ -12,6 +12,22 @@
       "@verdaccio/ui-theme"
     ]
   ],
+  "ignoredPackages": [
+    "@verdaccio/test-cli-commons",
+    "@verdaccio/e2e-cli-npm6",
+    "@verdaccio/e2e-cli-npm7",
+    "@verdaccio/e2e-cli-npm8",
+    "@verdaccio/e2e-cli-npm9",
+    "@verdaccio/e2e-cli-npm10",
+    "@verdaccio/e2e-cli-npm-common",
+    "@verdaccio/e2e-cli-yarn1",
+    "@verdaccio/e2e-cli-yarn2",
+    "@verdaccio/e2e-cli-yarn3",
+    "@verdaccio/e2e-cli-yarn4",
+    "@verdaccio/e2e-cli-pnpm8",
+    "@verdaccio/e2e-cli-pnpm9",
+    "@verdaccio/e2e-cli-pnpm10"
+  ],
   "access": "public",
   "baseBranch": "master",
   "updateInternalDependencies": "patch"

.changeset/cool-seals-watch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore(loader): fix types for plugin options

.changeset/curvy-rockets-camp.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+chore(core): typing, naming, and docs of parameters

.changeset/cyan-snakes-kiss.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(web): fix syntax of test files

.changeset/early-eyes-float.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+chore: add `error` to log level enum

.changeset/fifty-falcons-design.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): allow content-type with charset

.changeset/gentle-stingrays-repeat.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/store': patch
+---
+
+fix: code scan issues

.changeset/gold-squids-watch.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/web': patch
+---
+
+chore: add info to log when audit, htpasswd, theme are used

.changeset/green-eagles-boil.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+fix: E409 username is already registered (adduser)

.changeset/healthy-ducks-drive.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/config': patch
+---
+
+chore: fix typedocs warnings

.changeset/healthy-zoos-lie.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+chore: add info to log when local storage is used

.changeset/hip-eggs-serve.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-htpasswd': patch
+---
+
+chore: add debug code to htpasswd package

.changeset/hot-crews-live.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/store': patch
+'@verdaccio/api': patch
+---
+
+fix: unpublish a package on storage package

.changeset/long-eyes-drum.md

@@ -0,0 +1,37 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/file-locking': minor
+'@verdaccio/tarball': minor
+'@verdaccio/types': minor
+'@verdaccio/url': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-commons': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/node-api': minor
+'verdaccio-audit': minor
+'verdaccio-auth-memory': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'verdaccio-memory': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/proxy': minor
+'@verdaccio/search': minor
+'@verdaccio/search-indexer': minor
+'@verdaccio/server': minor
+'@verdaccio/signature': minor
+'@verdaccio/store': minor
+'generator-verdaccio-plugin': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+---
+
+feat: update logger pino to latest

.changeset/long-jars-collect.md

@@ -1,15 +0,0 @@
----
-'@verdaccio/ui-theme': minor
-'@verdaccio/ui-components': minor
----
-
-feat: ui improvements
-
-Some UI improvements
-
-- download progress indicator: https://github.com/verdaccio/verdaccio/discussions/4068
-- fix dark mode and readme css support https://github.com/verdaccio/verdaccio/discussions/3942 https://github.com/verdaccio/verdaccio/discussions/3467
-- fix global for yarn packages and add version to the packages on copy
-- feat: hide deprecated versions option
-- fix: improve deprecated package style
-- feat: display deprecated versions

.changeset/long-singers-drive.md

@@ -3,4 +3,4 @@
 '@verdaccio/ui-components': patch
 ---
 
-fix: display labels for engine versions
+chore(ui): vitest follow-ups

.changeset/lucky-crabs-enjoy.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/core': patch
+'@verdaccio/middleware': patch
+'@verdaccio/proxy': patch
+---
+
+fix(middleware): error 404 when getting scoped tarballs

.changeset/nine-countries-remember.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): encoding of scope package name

.changeset/old-turkeys-heal.md

@@ -1,18 +0,0 @@
----
-'@verdaccio/config': minor
-'@verdaccio/core': minor
-'@verdaccio/file-locking': minor
-'@verdaccio/tarball': minor
-'@verdaccio/url': minor
-'@verdaccio/logger-7': minor
-'@verdaccio/logger-commons': minor
-'@verdaccio/logger-prettify': minor
-'@verdaccio/middleware': minor
-'verdaccio-audit': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/search': minor
-'@verdaccio/signature': minor
-'@verdaccio/utils': minor
----
-
-restore legacy support

.changeset/olive-bananas-wink.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/tarball': patch
----
-
-- Fixes polynomial regular expression when determining the file name of tarball
-- Add tests for extracting tarball name

.changeset/pre.json

@@ -1,75 +1,102 @@
 {
   "mode": "pre",
-  "tag": "next",
+  "tag": "next-8",
   "initialVersions": {
     "@verdaccio/test-cli-commons": "1.1.0",
+    "@verdaccio/e2e-cli-npm9": "1.0.1",
     "@verdaccio/e2e-cli-npm6": "1.0.1",
     "@verdaccio/e2e-cli-npm7": "1.0.1",
     "@verdaccio/e2e-cli-npm8": "1.0.1",
-    "@verdaccio/e2e-cli-npm9": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm6": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm7": "1.0.1",
     "@verdaccio/e2e-cli-pnpm8": "1.0.1",
+    "@verdaccio/e2e-cli-pnpm9": "1.0.1",
     "@verdaccio/e2e-cli-yarn1": "1.0.1",
     "@verdaccio/e2e-cli-yarn2": "1.0.1",
     "@verdaccio/e2e-cli-yarn3": "1.0.1",
     "@verdaccio/e2e-cli-yarn4": "1.0.1",
     "@verdaccio/e2e-ui": "2.0.0",
-    "@verdaccio/api": "6.0.0",
-    "@verdaccio/auth": "6.0.0",
-    "@verdaccio/cli": "6.0.0",
-    "@verdaccio/config": "6.0.0",
-    "@verdaccio/core": "6.0.0",
-    "@verdaccio/file-locking": "11.0.0",
-    "@verdaccio/tarball": "11.0.0",
-    "@verdaccio/types": "11.0.0",
-    "@verdaccio/url": "11.0.0",
-    "@verdaccio/hooks": "6.0.0",
-    "@verdaccio/loaders": "6.0.0",
-    "@verdaccio/logger": "6.0.0",
-    "@verdaccio/logger-7": "6.0.0",
-    "@verdaccio/logger-commons": "6.0.0",
-    "@verdaccio/logger-prettify": "6.0.0",
-    "@verdaccio/middleware": "6.0.0",
-    "@verdaccio/node-api": "6.0.0",
-    "verdaccio-audit": "11.0.0",
-    "verdaccio-auth-memory": "11.0.0",
-    "verdaccio-htpasswd": "11.0.0",
-    "@verdaccio/local-storage": "11.0.0",
-    "verdaccio-memory": "11.0.0",
-    "@verdaccio/ui-theme": "6.0.0",
-    "@verdaccio/proxy": "6.0.0",
-    "@verdaccio/search": "6.0.0",
-    "@verdaccio/server": "6.0.0",
-    "@verdaccio/server-fastify": "6.0.0",
-    "@verdaccio/signature": "6.0.0",
-    "@verdaccio/cli-standalone": "6.0.0",
-    "@verdaccio/store": "6.0.0",
-    "docusaurus-plugin-contributors": "1.0.1",
-    "@verdaccio/eslint-config": "2.0.0",
-    "@verdaccio/test-helper": "2.0.0",
+    "@verdaccio/api": "7.0.0",
+    "@verdaccio/auth": "7.0.0",
+    "@verdaccio/cli": "7.0.0",
+    "@verdaccio/config": "7.0.0",
+    "@verdaccio/core": "7.0.0",
+    "@verdaccio/file-locking": "12.0.0",
+    "@verdaccio/tarball": "12.0.0",
+    "@verdaccio/types": "12.0.0",
+    "@verdaccio/url": "12.0.0",
+    "@verdaccio/hooks": "7.0.0",
+    "@verdaccio/loaders": "7.0.0",
+    "@verdaccio/logger": "7.0.0",
+    "@verdaccio/logger-commons": "7.0.0",
+    "@verdaccio/logger-prettify": "7.0.0",
+    "@verdaccio/middleware": "7.0.0",
+    "@verdaccio/node-api": "7.0.0",
+    "verdaccio-audit": "12.0.0",
+    "verdaccio-auth-memory": "12.0.0",
+    "verdaccio-htpasswd": "12.0.0",
+    "@verdaccio/local-storage": "12.0.0",
+    "verdaccio-memory": "12.0.0",
+    "@verdaccio/ui-theme": "7.0.0",
+    "@verdaccio/proxy": "7.0.0",
+    "@verdaccio/search": "7.0.0",
+    "@verdaccio/search-indexer": "7.0.0",
+    "@verdaccio/server": "7.0.0",
+    "@verdaccio/server-fastify": "7.0.0",
+    "@verdaccio/signature": "7.0.0",
+    "@verdaccio/cli-standalone": "7.0.0",
+    "@verdaccio/store": "7.0.0",
+    "docusaurus-plugin-contributors": "2.0.0",
+    "@verdaccio/eslint-config": "3.0.0",
+    "generator-verdaccio-plugin": "5.0.0",
+    "@verdaccio/test-helper": "3.0.0",
+    "@verdaccio/local-publish": "0.0.2",
     "@verdaccio/crowdin-translations": "1.0.0",
-    "customprefix-auth": "1.0.0",
-    "@verdaccio/ui-components": "2.0.0",
-    "@verdaccio/utils": "6.0.0",
-    "verdaccio": "6.0.0",
-    "@verdaccio/web": "6.0.0",
-    "@verdaccio/website": "5.20.2",
-    "@verdaccio/local-publish": "0.0.1"
+    "customprefix-auth": "2.0.0",
+    "@verdaccio/ui-components": "3.0.0",
+    "@verdaccio/utils": "7.0.0",
+    "verdaccio": "7.0.0",
+    "@verdaccio/web": "7.0.0",
+    "@verdaccio/website": "6.0.0",
+    "@verdaccio/e2e-cli-npm-common": "1.0.0",
+    "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
+    "@verdaccio/e2e-cli-pnpm10": "1.0.0"
   },
   "changesets": [
-    "angry-trees-tie",
-    "breezy-mayflies-pull",
-    "chilled-carrots-guess",
-    "eight-squids-judge",
-    "long-jars-collect",
-    "old-turkeys-heal",
-    "olive-bananas-wink",
-    "perfect-chairs-act",
-    "shiny-worms-retire",
-    "shy-carrots-compare",
-    "shy-garlics-cry",
-    "weak-fans-explain",
-    "young-donuts-own"
+    "angry-doors-tan",
+    "beige-lions-type",
+    "blue-paws-cheer",
+    "breezy-geckos-search",
+    "chatty-apricots-report",
+    "clean-beds-wash",
+    "clever-bees-happen",
+    "cool-seals-watch",
+    "curvy-rockets-camp",
+    "cyan-snakes-kiss",
+    "early-eyes-float",
+    "fifty-falcons-design",
+    "gentle-stingrays-repeat",
+    "gold-squids-watch",
+    "green-eagles-boil",
+    "healthy-ducks-drive",
+    "healthy-zoos-lie",
+    "hip-eggs-serve",
+    "hot-crews-live",
+    "long-eyes-drum",
+    "long-singers-drive",
+    "lucky-crabs-enjoy",
+    "nine-countries-remember",
+    "quick-seas-deny",
+    "rotten-melons-notice",
+    "rude-birds-design",
+    "rude-socks-walk",
+    "serious-apes-rule",
+    "silent-bags-listen",
+    "slow-cars-guess",
+    "smooth-games-share",
+    "stupid-camels-build",
+    "sweet-crabs-deliver",
+    "thirty-comics-trade",
+    "tricky-impalas-shake",
+    "violet-boxes-float",
+    "weak-cherries-serve"
   ]
 }

.changeset/quick-seas-deny.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': minor
+---
+
+chore: remove logger as dependency

.changeset/rotten-melons-notice.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+chore(middleware): fix syntax of test files

.changeset/rude-birds-design.md

@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore: encode parts of URL

.changeset/rude-socks-walk.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/store': patch
+---
+
+feat: keep_readmes option when publishing packages

.changeset/serious-apes-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): replace react-json-view

.changeset/shiny-worms-retire.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/search': patch
----
-
-fix: keyword undefined errors

.changeset/shy-carrots-compare.md

@@ -1,14 +0,0 @@
----
-'@verdaccio/server': minor
-'@verdaccio/test-helper': minor
-'@verdaccio/types': minor
-'@verdaccio/middleware': minor
-'@verdaccio/core': minor
-'@verdaccio/signature': minor
-'@verdaccio/url': minor
-'@verdaccio/config': minor
-'@verdaccio/auth': minor
-'@verdaccio/api': minor
----
-
-refactor: auth with legacy sign support

.changeset/shy-garlics-cry.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/signature': patch
----
-
-chore: export signature options type

.changeset/silent-bags-listen.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/logger-commons': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+---
+
+chore(tests): temp folder naming

.changeset/slow-cars-guess.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': minor
+---
+
+support packages with multiple module types

.changeset/smooth-games-share.md

@@ -0,0 +1,11 @@
+---
+'@verdaccio/server': patch
+'verdaccio-audit': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix: crashes with path-to-regexp v0.1.12 express

.changeset/stupid-camels-build.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+chore(api): fix void return for some tests

.changeset/sweet-crabs-deliver.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): typing for Theme

.changeset/thirty-comics-trade.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+chore: local storage debug messages

.changeset/tricky-impalas-shake.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/store': patch
+---
+
+chore: tweak error logging messages

.changeset/violet-boxes-float.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/tarball': patch
+---
+
+fix(api): add logging when requesting tarball

.changeset/weak-cherries-serve.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/logger-commons': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/search-indexer': patch
+'@verdaccio/server': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/node-api': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+'@verdaccio/web': patch
+---
+
+chore: auth package requires logger as parameter

.changeset/weak-fans-explain.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/server': patch
----
-
-fix: Avoid 404 error when getting favicon from root

.changeset/young-donuts-own.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/config': patch
----
-
-chore(config): increase test coverage

.dockerignore

@@ -22,7 +22,6 @@ jest
 docs
 contrib
 docker-examples
-website
 systemd
 
 # output from test runs and similar things

.github/actions/build-app/action.yml

@@ -0,0 +1,22 @@
+name: 'Build app'
+description: 'build verdaccio application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  node-version:
+    description: 'Node.js version to use'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      uses: ./.github/actions/install-app-node
+      with:
+        node-version: ${{ inputs.node_version }}
+    - name: build
+      run: pnpm build
+      shell: bash

.github/actions/cache-packages/action.yml

@@ -0,0 +1,12 @@
+name: 'Cache packages'
+description: 'get or set cache packages'
+
+runs:
+  using: composite
+  steps:
+    - name: Cache Packages
+      id: cache-packages
+      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      with:
+        path: ./packages/
+        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -0,0 +1,15 @@
+name: 'Cache build'
+description: 'get or set cache build'
+
+runs:
+  using: composite
+  steps:
+    - name: Cache .pnpm-store
+      id: cache-npm
+      uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
+      with:
+        path: ~/.pnpm-store
+        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
+        restore-keys: |
+          pnpm-
+

.github/actions/install-app-node/action.yml

@@ -0,0 +1,50 @@
+name: 'Install app with Node specific version'
+description: 'install application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  reporter:
+    description: 'Reporter for pnpm'
+    required: false
+    default: 'silent'
+  loglevel:
+    description: 'Log level for pnpm'
+    required: false
+    default: 'error'
+  node-version:
+    description: 'Node.js version to use'
+    required: true
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version: ${{ inputs.node-version }}
+    - name: Install pnpm
+      run: |
+        corepack enable
+        corepack prepare
+      shell: bash
+    - name: set store
+      run: |
+        if [ ! -d "$HOME/.pnpm-store" ]; then
+          mkdir -p $HOME/.pnpm-store
+          pnpm config set store-dir $HOME/.pnpm-store
+        else
+          echo "Store directory already exists. Skipping configuration."
+        fi
+      shell: bash
+    - name: Restore cache pnpm store
+      uses: ./.github/actions/cache-store
+    - name: Install
+      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }} --loglevel=${{ inputs.loglevel }}
+      shell: bash
+    - name: Save cache pnpm store
+      if: steps.cache-npm.outputs.cache-hit == 'false'
+      uses: ./.github/actions/cache-store
+

.github/actions/install-app/action.yml

@@ -0,0 +1,39 @@
+name: 'Install app'
+description: 'install application'
+
+inputs:
+  registry-url:
+    description: 'Registry URL for pnpm'
+    required: false
+    default: 'http://localhost:4873'
+  reporter:
+    description: 'Reporter for pnpm'
+    required: false
+    default: 'silent'
+
+runs:
+  using: composite
+  steps:
+    - name: Use Node
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install pnpm
+      run: |
+        corepack enable
+        corepack prepare
+      shell: bash
+    - name: set store
+      run: |
+        mkdir ~/.pnpm-store
+        pnpm config set store-dir ~/.pnpm-store
+      shell: bash
+    - name: Restore cache pnpm store
+      uses: ./.github/actions/cache-store
+    - name: Install
+      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }}
+      shell: bash
+    - name: Save cache pnpm store
+      if: steps.cache-npm.outputs.cache-hit == 'false'
+      uses: ./.github/actions/cache-store
+

.github/dependabot.yml

@@ -8,18 +8,11 @@ updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: 'github-actions'
     directory: '/'
-    schedule:
-      interval: 'weekly'
-
-  # Maintain dependencies for npm
-  - package-ecosystem: 'npm'
-    directory: '/'
-    schedule:
-      interval: 'daily'
-    allow:
-      - dependency-name: '@verdaccio/*'
-      - dependency-name: 'verdaccio-*'
+    open-pull-requests-limit: 1
+    prefix: "[github-actions] "
     assignees:
-      - 'verdacciobot'
+      - 'verdacciobot'    
+    schedule:
+      interval: 'monthly'
     labels:
       - 'bot: dependencies'

.github/disabled/ci-windows.yml

@@ -18,25 +18,23 @@ jobs:
         env:
           NODE_ENV: production          
     steps:
-    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
     - name: Node
-      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
       with:
         node-version-file: '.nvmrc'
     - name: Install pnpm
-      run: npm i pnpm@latest-8 -g
+      run: |
+        corepack enable
+        corepack install
     - name: set store
       run: |
         mkdir ~/.pnpm-store
         pnpm config set store-dir ~/.pnpm-store
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store            
     - name: Install
-      run: pnpm install --registry http://localhost:4873
+      run: pnpm install  --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -47,14 +45,14 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -71,14 +69,14 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Use Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -100,14 +98,14 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
       - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -126,13 +124,13 @@ jobs:
     runs-on: windows-latest
     name: UI Test E2E
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
+      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/disabled/docker-plugins-e2e.yml

@@ -18,7 +18,7 @@ jobs:
       uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
 
     - name: Install node
       uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
@@ -36,4 +36,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down

.github/workflows/changesets.yml

@@ -20,21 +20,21 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           fetch-depth: 0
 
       - name: setup node.js
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version-file: '.nvmrc'
         env:
           NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
-      - name: install pnpm
-        run: npm i pnpm@8.9.0 -g
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
 
       - name: setup pnpm config
         run: pnpm config set store-dir $PNPM_CACHE_FOLDER

.github/workflows/ci.yml

@@ -14,6 +14,9 @@ on:
       - 'pnpm-workspace.yaml'
 permissions:
   contents: read
+concurrency:
+  group: ci-${{ github.ref }}
+  cancel-in-progress: true
 
 jobs:
   prepare:
@@ -21,57 +24,30 @@ jobs:
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
+          options: >-
+            --health-cmd="curl -f http://0.0.0.0:4873/-/ping || exit 1"
+            --health-interval=10s   
+            --health-timeout=20s    
+            --health-retries=6
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install  --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            pnpm-
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
   lint:
     runs-on: ubuntu-latest
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts
+            reporter: 'default'
       - name: Lint
         run: pnpm lint
   format:
@@ -79,24 +55,11 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Use Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts
+          reporter: 'default'
       - name: Lint
         run: pnpm format:check
   test:
@@ -105,47 +68,32 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [18, 20, 21]
+        node_version: [18, 20, 21, 22, 23]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
         with:
           node-version: ${{ matrix.node_version }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --ignore-scripts --registry http://localhost:4873
-      - name: build
-        run: pnpm build
       - name: Test
         run: pnpm test
   sync-translations:
     needs: [test]
     runs-on: ubuntu-latest
     name: synchronize translations
-    if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+    if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
           corepack enable
           corepack install
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+      - uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -1,6 +1,10 @@
-name: 'Code scanning - action'
+name: 'CodeQL Analysis'
 
 on:
+  push:
+    paths:
+      - .github/workflows/codeql-analysis.yml
+      - 'packages/**'
   pull_request:
     paths:
       - .github/workflows/codeql-analysis.yml
@@ -11,6 +15,10 @@ on:
 permissions:
   contents: read
 
+concurrency:
+  group: code-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   CodeQL-Build:
     permissions:
@@ -21,20 +29,20 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
           fetch-depth: 2
 
-      # If this run was triggered by a pull request event, then checkout
-      # the head of the pull request instead of the merge commit.
-      - run: git checkout HEAD^2
-        if: ${{ github.event_name == 'pull_request' }}
-
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2
+        uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
+        with:
+          config: |
+            paths-ignore:
+              - packages/config/test/partials/config/js/invalid.js
+              - packages/middleware/test/static/js
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2
+        uses: github/codeql-action/autobuild@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@1500a131381b66de0c52ac28abb13cd79f4b7ecc # v2
+        uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5

.github/workflows/docker-proxy-apache-e2e.yml

@@ -1,5 +1,9 @@
 name: E2E Docker Proxy Apache Test
 
+concurrency:
+  group: docker-apache-${{ github.ref }}
+  cancel-in-progress: true  
+
 on:
   workflow_dispatch:
   push:
@@ -11,18 +15,18 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup
@@ -42,4 +46,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -1,5 +1,10 @@
 name: E2E Docker Proxy Nginx Test
 
+concurrency:
+  group: docker-nginx-${{ github.ref }}
+  cancel-in-progress: true  
+
+
 on:
   workflow_dispatch:
   push:
@@ -8,18 +13,18 @@ on:
 jobs:
   docker:
     timeout-minutes: 10
-    runs-on: ubuntu-latest
+    runs-on: ubuntu-20.04
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       
     - name: Start containers
-      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
+      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup
@@ -39,4 +44,4 @@ jobs:
 
     - name: Stop containers
       if: always()
-      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down
+      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down

.github/workflows/docker-publish.yml

@@ -22,9 +22,10 @@ permissions:
 jobs:
   docker:
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host
@@ -40,12 +41,13 @@ jobs:
           images: ${{ github.repository }}
           tag-custom: nightly-master
           tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
+          tag-latest: false
           tag-semver: |
             {{version}}
             {{major}}
             {{major}}.{{minor}}
       - name: Build & Push
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           file: ./Dockerfile

.github/workflows/e2e-ci.yml

@@ -3,6 +3,9 @@ name: E2E CLI
 on: [pull_request]
 permissions:
   contents: read
+concurrency:
+  group: e2e-ci-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   prepare:
     runs-on: ubuntu-latest
@@ -15,68 +18,20 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Use Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-          restore-keys: |
-            pnpm-
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
   build:
     needs: [prepare]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Use Node 16
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm recursive install --reporter=silence --registry http://localhost:4873
-      - name: build
-        run: pnpm build
+          node-version: ${{ matrix.node_version }}
       - name: Cache packages
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        id: cache-packages
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-          restore-keys: |
-            packages-
-      # - name: Cache test
-      #   uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   id: cache-test
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      #     restore-keys: |
-      #       test-
+        uses: ./.github/actions/cache-packages
   e2e-cli-npm:
     needs: [prepare, build]
     strategy:
@@ -90,127 +45,73 @@ jobs:
             npm9,
             npm10
           ]
-        node: [20, 21]
+        node: [18, 23]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ matrix.node }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: build e2e
-        run: pnpm --filter @verdaccio/test-cli-commons build
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
+      - name: Test CLI
+        run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
+
+  e2e-cli-pnpm:
+    needs: [prepare, build]
+    strategy:
+      fail-fast: true
+      matrix:
+        pkg:
+          [
+            pnpm8,
+            pnpm9,
+            pnpm10,
+          ]
+        node: [18, 23]
+    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
+        with:
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
-  # TODO: fix pnpm setup
-  # e2e-cli-pnpm:
-  #   needs: [prepare, build]
-  #   strategy:
-  #     fail-fast: true
-  #     matrix:
-  #       pkg:
-  #         [          
-  #           pnpm6,
-  #           pnpm7,
-  #           pnpm8          
-  #         ]
-  #       node: [20, 21]
-  #   name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
-  #   runs-on: ubuntu-latest
-  #   steps:
-  #     - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-  #     - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
-  #       with:
-  #         node-version: ${{ matrix.node }}
-  #     - name: Install pnpm
-  #       run: |
-  #         corepack enable
-  #         corepack prepare
-  #     - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-  #       with:
-  #         path: ~/.pnpm-store
-  #         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-  #     - name: set store
-  #       run: |
-  #         pnpm config set store-dir ~/.pnpm-store
-  #     - name: Install
-  #       run: pnpm install --loglevel debug --ignore-scripts --registry http://localhost:4873
-  #     - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-  #       with:
-  #         path: ./packages/
-  #         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-  #     # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-  #     #   with:
-  #     #     path: ./e2e/
-  #     #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-  #     - name: build e2e
-  #       run: pnpm --filter @verdaccio/test-cli-commons build
-  #     - name: Test CLI
-  #       run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
   e2e-cli-yarn:
     needs: [prepare, build]
     strategy:
       fail-fast: false
       matrix:
         pkg:
-          [           
+          [
             yarn1,
             yarn2,
             yarn3,
             yarn4
           ]
-        node: [20, 21]
+        node: [18, 23]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+        uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ matrix.node }}
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare 
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: set store
-        run: |
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ./packages/
-          key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      # - uses: actions/cache@9b0c1fce7a93df8e3bb8926b0d6e9d89e92f20a7 # tag=v3
-      #   with:
-      #     path: ./e2e/
-      #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-      - name: build e2e
-        run: pnpm --filter @verdaccio/test-cli-commons build
+          node-version: ${{ inputs.node_version }}
+          reporter: 'default'
+          loglevel: 'debug'
+      - name: Restore cache pnpm store
+        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}
-      
+

.github/workflows/e2e-ui.yml

@@ -1,36 +1,32 @@
 name: E2E UI
 
 on: [pull_request]
+
 permissions:
   contents: read
+concurrency:
+  group: e2e-ui-${{ github.ref }}
+  cancel-in-progress: true
 jobs:
   test:
     runs-on: ubuntu-latest
     name: UI Test E2E
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-      - name: Use Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node 20
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack prepare
-      - name: Install
-        run: pnpm install --reporter=silence --registry http://localhost:4873
-      - name: build
-        run: pnpm build
+          node-version: 20
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
+      - uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/plugin-generator-e2e.yaml

@@ -0,0 +1,40 @@
+name: E2E Generator Verdaccio Plugin
+
+on:
+  pull_request:
+  workflow_dispatch:
+#  push:
+#    branches:
+#      - 'master'
+
+concurrency:
+  group: generator-plugin-${{ github.ref }}
+  cancel-in-progress: true
+
+jobs:
+  e2e-plugin-generator:
+    runs-on: ubuntu-latest
+    strategy:
+      matrix:
+        node-version: [20, 22, 23]
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node ${{ matrix.node_version }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node_version }}
+      - name: install verdaccio
+        run: npm install -g verdaccio@5
+      - name: Start server
+        run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
+      - name: ping server
+        run: curl http://localhost:4873/-/ping
+      - name: login
+        run: npx npm-cli-login -u test -p test -e test@domain.test -r http://localhost:4873
+      - name: publish
+        run: pnpm local:publish
+      - name: install yeoman
+        run: npm install -g yo@4 --loglevel=info
+      - name: install generator
+        run: npm install -g generator-verdaccio-plugin --loglevel=info --registry http://localhost:4873
+# Future: add a test to verify the plugin is working with prompt

.github/workflows/shared-docker-publish.yml

@@ -0,0 +1,56 @@
+name: Docker publish to docker.io
+
+on:
+  workflow_call:
+    inputs:
+      tag-latest:
+        required: true
+        type: boolean
+        description: 'Tag as latest'
+        default: false
+      tag-custom: 
+        required: true
+        type: string
+        description: 'Custom tag'
+        default: 'nightly-master'
+      tag-custom-only:
+        required: true
+        type: boolean
+        description: 'Custom tag only'
+        default: false      
+jobs:
+  docker:
+    runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
+      - uses: docker/setup-buildx-action@v1
+        with:
+          driver-opts: network=host
+      - uses: docker/login-action@v1
+        name: Login Docker Hub
+        with:
+          username: ${{ secrets.DOCKER_USERNAME }}
+          password: ${{ secrets.DOCKER_PASSWORD }}
+      - name: Prepare docker image tags
+        id: docker_meta
+        uses: crazy-max/ghaction-docker-meta@v1
+        with:
+          images: ${{ github.repository }}
+          tag-custom: ${{ inputs.tag-custom }}
+          tag-custom-only: ${{ inputs.tag-custom-only }}
+          tag-latest: ${{ inputs.tag-latest }}
+          tag-semver: |
+            {{version}}
+            {{major}}
+            {{major}}.{{minor}}
+      - name: Build & Push
+        uses: docker/build-push-action@v6
+        with:
+          context: .
+          file: ./Dockerfile
+          platforms: linux/amd64,linux/arm64
+          push: ${{ github.event_name != 'pull_request' }}
+          tags: ${{ steps.docker_meta.outputs.tags }}
+          labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/static-data.yml

@@ -3,6 +3,7 @@ name: static data
 
 on:
   workflow_dispatch:
+#  pull_request:
   schedule:
     # twice peer week
     - cron: '0 0 * * 1,4'
@@ -18,18 +19,16 @@ jobs:
   prepare:
     name: Run script
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
         with:
           persist-credentials: false
           fetch-depth: 0
-      - uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
         with:
-          node-version: 18.x
-      - name: install pnpm
-        run: sudo npm i pnpm@latest-8 -g
-      - name: install dependencies
-        run: pnpm install
+          reporter: 'default'
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/crowdin-translations build
       - name: update contributors
@@ -41,11 +40,11 @@ jobs:
       - name: update translations
         run: pnpm run translations
         env:
-          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}          
+          TOKEN: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
       - name: format
         run: pnpm format
       - name: Commit & Push changes
-        uses: actions-js/push@156f2b10c3aa000c44dbe75ea7018f32ae999772 # tag=v1.4
+        uses: actions-js/push@5a7cbd780d82c0c937b5977586e641b2fd94acc5 # tag=v1.5
         with:
           github_token: ${{ secrets.TOKEN_VERDACCIOBOT_GITHUB }}
           message: "chore: updated static data"

.github/workflows/test-docker-build.yml

@@ -0,0 +1,13 @@
+on:
+  workflow_call:
+
+jobs:
+  testDocker:
+    name: Test Docker Build
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Build
+      run: docker build .
+      env:
+        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org

.github/workflows/test-publish-package.yml

@@ -0,0 +1,13 @@
+on:
+  workflow_call:
+
+jobs:
+  testVerdaccio:
+    name: Test Verdaccio Publish
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Publish
+      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      with:
+        args: -d

.github/workflows/ui-components.yml

@@ -1,19 +1,10 @@
 name: UI Components
 
-on: 
+on:
+#  pull_request:
   workflow_dispatch:
-  pull_request:
-    branches-ignore:
-      - 'renovate/*'
-      - 'dependabot/*'    
-    paths:
-    - .github/workflows/ui-components.yml
-    - 'packages/ui-components/**'
-    - 'package.json'
-    - 'pnpm-workspace.yaml'
-    - 'pnpm-lock.yaml'
-  schedule:
-      - cron: '0 0 * * 1'     
+#  schedule:
+#    - cron: '0 0 * * *'
 
 permissions:
   contents: read  #  to fetch code (actions/checkout)
@@ -29,55 +20,28 @@ jobs:
       pull-requests: write  #  to comment on pull-requests
 
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
-      - name: Use Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
-        with:
-          node-version-file: '.nvmrc'
-
-      - name: Cache pnpm modules
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        env:
-          cache-name: cache-pnpm-modules
-        with:
-          path: ~/.pnpm-store
-          key: ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-${{ hashFiles('**/pnpm-lock.yaml') }}
-          restore-keys: |
-            ${{ runner.os }}-build-${{ env.cache-name }}-${{ matrix.node-version }}-
+      - name: Install dependencies with a custom registry
+        uses: ./.github/actions/install-app
 
       - name: Install pnpm
         run: |
           corepack enable
-            corepack prepare --activate pnpm@8.9.0
+            corepack prepare
       - name: Install
-        run: pnpm install  
+        run: pnpm install
       - name: Build storybook
         run: pnpm ui:storybook:build
       - name: Copy public content
         # the msw.js worker is need it at the storybook-static folder in production
         run: cp -R packages/ui-components/public/* packages/ui-components/storybook-static
-      - name: 🔥 Deploy Production UI Netlify
-        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
-        uses: verdaccio/action-netlify-deploy@1c086d59169edeec9254672c7de17d2ceac3928f # v2.0.0
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
-          build-dir: './packages/ui-components/storybook-static'          
-      - name: 🤖 Deploy Preview UI Components Netlify
-        if: github.repository == 'verdaccio/verdaccio'
-        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
-        id: netlify_preview_ui
-        with:
-          draft: true
-          comment-on-pull-request: true
-          github-deployment-is-production: false
-          github-deployment-is-transient: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-          netlify-site-id: ${{ secrets.NETLIFY_UI_SITE_ID }}
-          build-dir: './packages/ui-components/storybook-static'
+      - name: Deploy to Netlify
+        env:
+          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_UI_SITE_ID }}
+          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+        run: pnpm --filter ...@verdaccio/ui-components netlify:ui:deploy

.github/workflows/website.yml

@@ -2,19 +2,13 @@ name: Verdaccio Website CI
 
 on:
   workflow_dispatch:
-  pull_request:
-    branches-ignore:
-      - 'renovate/*'
-      - 'dependabot/*'    
-    paths:
-        - 'website/**'
-        - './.github/workflows/website.yml'
-  schedule:
-    - cron: '0 0 * * *' 
-
 permissions:
   contents: read  #  to fetch code (actions/checkout)
 
+concurrency:
+  group: website-${{ github.ref }}
+  cancel-in-progress: true
+
 jobs:
   build:
     permissions:
@@ -23,133 +17,42 @@ jobs:
       pull-requests: write  #  to comment on pull-requests
 
     runs-on: ubuntu-latest
+    if: github.repository == 'verdaccio/verdaccio'
     name: setup verdaccio
     services:
       verdaccio:
-        image: verdaccio/verdaccio:5
+        image: verdaccio/verdaccio:6
         ports:
           - 4873:4873
         env:
-          NODE_ENV: production    
+          NODE_ENV: production
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
-
-      - name: Node
-        uses: actions/setup-node@b39b52d1213e96004bfcb1c61a8a6fa8ab84f3e8 # v3
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Build application with Node 20
+        uses: ./.github/actions/build-app
         with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: |
-          corepack enable
-          corepack install
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: Install
-        run: pnpm install  --registry http://localhost:4873
-      - name: Cache .pnpm-store
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-          restore-keys: |
-            pnpm-          
-      - name: Build 
-        run: pnpm build
+          node-version: 20
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/crowdin-translations build
       - name: Cache Docusaurus Build
-        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4.0.2
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
           restore-keys: cache/webpack-${{github.ref}}
-
-      # Will deploy to production on:
-        # 1st: When a push occurs on master branch
-        # 2nd: When we force the worflow dispatch through the UI
       - name: Build Production
-        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
         env:
           CROWDIN_VERDACCIO_API_KEY: ${{ secrets.CROWDIN_VERDACCIO_API_KEY }}
           SENTRY_KEY: ${{ secrets.SENTRY_KEY }}
           CONTEXT: production
-        run: pnpm --filter @verdaccio/website netlify:build:production
-
-      - name: 🔥 Deploy Production Netlify
-        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
-        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
-        with:
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
-          build-dir: './website/build'
-
-      # Will deploy to Preview URL, only when a pull request is open with changes on the website
-      - name: Build Deployment Preview
+        run: pnpm --filter @verdaccio/website netlify:build
+      - name: Deploy to Netlify
+        if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
         env:
-          CONTEXT: deploy-preview
-        run: pnpm --filter ...@verdaccio/website netlify:build:deployPreview
+          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
+          NETLIFY_AUTH_TOKEN: ${{ secrets.NETLIFY_AUTH_TOKEN }}
+        run: pnpm --filter ...@verdaccio/website netlify:deploy
 
-      - name: 🤖 Deploy Preview Netlify
-        if: github.repository == 'verdaccio/verdaccio'
-        uses: semoal/action-netlify-deploy@1a53f098745bf78555d11b436f5ee3af87e6b566
-        id: netlify_preview
-        with:
-          draft: true
-          comment-on-pull-request: true
-          github-deployment-is-production: false
-          github-deployment-is-transient: true
-          github-token: ${{ secrets.GITHUB_TOKEN }}
-          netlify-auth-token: ${{ secrets.NETLIFY_AUTH_TOKEN }}
-          netlify-site-id: ${{ secrets.NETLIFY_SITE_ID }}
-          build-dir: './website/build'
-
-      - name: Audit preview URL with Lighthouse
-        if: github.repository == 'verdaccio/verdaccio'
-        id: lighthouse_audit
-        uses: treosh/lighthouse-ci-action@03becbfc543944dd6e7534f7ff768abb8a296826 # tag=10.1.0
-        with:
-          urls: |
-            ${{ steps.netlify_preview.outputs.preview-url }}
-          uploadArtifacts: true
-          temporaryPublicStorage: true
-
-      - name: Format lighthouse score
-        id: format_lighthouse_score
-        uses: actions/github-script@d7906e4ad0b1822421a7e6a35d5ca353c962f410 # v6
-        with:
-          github-token: ${{secrets.GITHUB_TOKEN}}
-          script: |
-            const result = ${{ steps.lighthouse_audit.outputs.manifest }}[0].summary
-            const links = ${{ steps.lighthouse_audit.outputs.links }}
-            const formatResult = (res) => Math.round((res * 100))
-            Object.keys(result).forEach(key => result[key] = formatResult(result[key]))
-            const score = res => res >= 90 ? '🟢' : res >= 50 ? '🟠' : '🔴'
-            const comment = [
-                `⚡️ [Lighthouse report](${Object.values(links)[0]}) for the changes in this PR:`,
-                '| Category | Score |',
-                '| --- | --- |',
-                `| ${score(result.performance)} Performance | ${result.performance} |`,
-                `| ${score(result.accessibility)} Accessibility | ${result.accessibility} |`,
-                `| ${score(result['best-practices'])} Best practices | ${result['best-practices']} |`,
-                `| ${score(result.seo)} SEO | ${result.seo} |`,
-                ' ',
-                `*Lighthouse ran on [${Object.keys(links)[0]}](${Object.keys(links)[0]})*`
-            ].join('\n')
-             core.setOutput("comment", comment);
-
-      - name: Add comment to PR
-        if: github.repository == 'verdaccio/verdaccio'
-        id: comment_to_pr
-        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd # v2
-        with:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          number: ${{ github.event.issue.number }}
-          delete: true
-          header: lighthouse
-          message: |
-            ${{ steps.format_lighthouse_score.outputs.comment }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -0,0 +1,114 @@
+on:
+  workflow_call:
+
+jobs:
+  npm8:
+    name: 'npm8:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm'
+        run: npm i -g npm@next-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="silent"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot
+  npm9:
+    name: 'npm9:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 9'
+        run: npm i -g npm@next-9          
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="silent"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+          npm run ng build --aot
+  npm10:
+    name: 'npm10:angular example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10         
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873" > ~/.npmrc
+          npm config set loglevel="info"
+          npm config set fetch-retries="5"
+          npm config set fetch-retry-factor="50"
+          npm config set fetch-retry-mintimeout="20000"
+          npm config set fetch-retry-maxtimeout="80000"
+          npm install -g @angular/cli
+          ng new verdaccio-angular --interactive=false
+
+          cd verdaccio-angular
+          npm install @angular-devkit/core@next @babel/preset-env @babel/core -D
+
+          npm run ng build --aot

.github/workflows/x-e2e-audit-workflow.yml

@@ -0,0 +1,31 @@
+on:
+  workflow_call:
+  
+jobs:
+  npm10:
+    name: 'npm10:audit example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10  
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install next --registry http://localhost:4873  --loglevel info
+          npm audit

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -0,0 +1,74 @@
+on:
+  workflow_call:
+  
+jobs:
+  npm9:
+    name: 'npm9:gatsby example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install npm 9'
+        run: npm i -g npm@next-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="info"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby@latest
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build          
+  npm10:
+    name: 'npm10:gatsby example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install npm 10'
+        run: npm i -g npm@next-10
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          echo "registry=http://localhost:4873
+          loglevel="info"
+          fetch-retries=10
+          fetch-retry-factor=2
+          fetch-retry-mintimeout=10000
+          fetch-retry-maxtimeout=80000" > ~/.npmrc
+          npm config list
+          npm i -g gatsby@latest
+          gatsby new my-gatsby
+          cd my-gatsby
+          npm run build          

.github/workflows/x-e2e-jest-workflow.yml

@@ -0,0 +1,234 @@
+on:
+  workflow_call:
+  
+jobs:
+  yarn:
+    name: 'yarn:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn add jest@29.5.0 --registry http://localhost:4873
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  yarn2:
+    name: 'yarn2:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js --config ./scripts/e2e-config.yaml &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          yarn init --yes
+          yarn set version berry
+          yarn config set npmRegistryServer "http://localhost:4873"
+          yarn config set unsafeHttpWhitelist --json '["localhost"]'
+          yarn add jest@29.5.0
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm8:
+    name: 'npm8:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm'
+        run: npm i -g npm@next-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.5.0 --registry http://localhost:4873 --loglevel info
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  npm9:
+    name: 'npm9:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 9'
+        run: npm i -g npm@next-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.4.2 --registry http://localhost:4873 --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js          
+  npm10:
+    name: 'npm10:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest npm 10'
+        run: npm i -g npm@next-10  
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js  --config ./scripts/e2e-config.yaml  &
+      - name: 'Ping to verdaccio'
+        run: |
+          npm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --yes
+          npm install jest@29.4.2 --registry http://localhost:4873  --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js          
+  pnpm8:
+    name: 'pnpm8:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm@latest-8
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          nohup yarn node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init
+          pnpm install jest@29.5.0 --registry http://localhost:4873  --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js
+  pnpm9:
+    name: 'pnpm:9:jest example'
+    runs-on: ubuntu-latest
+
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+
+      - name: 'Use Node.js'
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: 'install latest pnpm'
+        run: npm i -g pnpm@latest-9
+      - name: Install Dependencies
+        run: yarn install
+      - name: 'Run verdaccio in the background'
+        run: |
+          yarn node ./scripts/run-verdaccio.js &
+      - name: 'Ping to verdaccio'
+        run: |
+          pnpm ping --registry http://localhost:4873
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          pnpm init
+          pnpm install jest@29.5.0 --registry http://localhost:4873 --loglevel info 
+
+          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
+          yarn jest pass.test.js
+
+          yarn add left-pad --registry http://localhost:4873 --verbose
+          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
+          yarn jest module.test.js

.github/workflows/x-release-snapshot.yml

@@ -0,0 +1,28 @@
+on:
+  workflow_call:
+  
+jobs:
+  release:
+    name: Release Snapshot
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node (latest)
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install
+      run: yarn install
+    - name: Build
+      run: yarn build
+    - name: Declare some variables
+      shell: bash
+      run: |
+        echo "sha_short=$(git rev-parse --short "$GITHUB_SHA")" >> "$GITHUB_ENV"
+    - name: Bump up package
+      run: npm version prerelease --no-git-tag-version --preid ${{ env.sha_short }}   
+    - name: Publish
+      run: sh scripts/publish-prerelease.sh
+      env:
+        REGISTRY_AUTH_TOKEN: ${{ secrets.VERDACCIO_REGISTRY_TOKEN_CANARY }}
+        REGISTRY_URL: rg.verdaccio.org

.github/workflows/x-release.yml

@@ -0,0 +1,28 @@
+on:
+  workflow_call:
+  
+jobs:
+  release:
+    name: Release
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node (latest)
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install
+      run: yarn install
+    - name: Build
+      run: yarn build
+    - name: Types
+      run: yarn code:types      
+    - name: Publish
+      run: sh scripts/publish.sh
+      env:
+        REGISTRY_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
+        REGISTRY_URL: registry.npmjs.org
+    - name: Create release notes
+      run: sh scripts/github-release.sh
+      env:
+        GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/x-smok-test-docker.yml

@@ -0,0 +1,32 @@
+on:
+  workflow_call:
+    inputs:
+      docker_tag:
+        required: true
+        type: string
+        description: 'Docker tag to use for the verdaccio image'
+        default: '5'
+      module_tag:
+        required: true
+        type: string
+        description: 'Npmjs module tag to use for the verdaccio image'
+        default: '@latest'   
+  
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Docker test
+        run: |
+            docker run -d -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio:${{ inputs.docker_tag }}
+      - name: verdaccio cli 
+        run:  npm install -g verdaccio${{inputs.module_tag }} --registry http://localhost:4873                        
+      - name: gastby cli 
+        run:  npm install -g gatsby-cli --registry http://localhost:4873
+      - name: netlify cli 
+        run:  npm install -g netlify-cli --registry http://localhost:4873
+      - name: angular cli 
+        run:  npm install -g @angular/cli --registry http://localhost:4873

.github/workflows/x-smok-test-module.yml

@@ -0,0 +1,45 @@
+on:
+  workflow_call:
+    inputs:
+      docker_tag:
+        required: true
+        type: string
+        description: 'Docker tag to use for the verdaccio image'
+        default: '5'  
+jobs:
+  test:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - name: Use Node (latest)
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+        with:
+          node-version-file: '.nvmrc'
+      - name: Docker test
+        run: |
+            docker run -d -it --rm --name verdaccio -p 4873:4873 verdaccio/verdaccio:${{ inputs.docker_tag }}
+      - name: login    
+        run: npx npm-cli-login -u test -p 1234 -e test@domain.test -r http://localhost:4873                 
+      - name: Install
+        run: yarn
+      - name: Build
+        run: yarn build
+      - name: Types
+        run: yarn code:types
+      - name: Bump up package
+        run: npm version prerelease --no-git-tag-version --preid $(date +%s%N)
+      - name: publish verdaccio 
+        run:  npm publish --registry http://localhost:4873
+      - name: install verdaccio 
+        run:  npm i -g verdaccio --loglevel info --registry http://localhost:4873
+      - name: verdaccio version 
+        run:  verdaccio --version
+      - name: 'Running the integration test'
+        run: |
+          source scripts/e2e-setup-ci.sh
+          npm init --force
+          npm install jest --registry http://localhost:4873
+          npm install verdaccio --registry http://localhost:4873
+          echo "test('require module should works', () => { const {runServer} = require('verdaccio') });" | tee module.spec.js
+          cat module.spec.js
+          yarn jest    

.github/workflows/yarn-ci-lint.yml

@@ -0,0 +1,21 @@
+on:
+  workflow_call:
+
+jobs:
+  ci-lint:
+    name: Node Lint
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node 
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version-file: '.nvmrc'
+    - name: Install
+      run: yarn install --immutable
+    - name: Format
+      run: yarn format:check
+    - name: Lint
+      run: yarn lint
+    - name: Lint Lockfile
+      run: yarn lint:lockfile

.github/workflows/yarn-ci.yml

@@ -0,0 +1,24 @@
+on:
+  workflow_call:
+    inputs:
+      node_version:
+        required: true
+        type: string
+jobs:
+  ci:
+    name: Node ${{ inputs.node_version }}
+    runs-on: ubuntu-latest
+    steps:
+    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - name: Use Node ${{ inputs.node_version }}
+      uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
+      with:
+        node-version: ${{ inputs.node_version }}
+    - name: Install
+      run: yarn install --immutable
+    - name: Build
+      run: yarn build
+    - name: Types
+      run: yarn code:types            
+    - name: Test
+      run: yarn test

.gitignore

@@ -41,7 +41,7 @@ packages/plugins/ui-theme/static
 # CI Pnpm cache
 .pnpm-store/
 
-#docs 
+#docs
 website/docs/api/**/*.md
 website/docs/api/**/*.yml
 !website/docs/api/index.md
@@ -53,3 +53,6 @@ e2e/ui/cypress/screenshots/**/*
 
 # storybook
 packages/ui-components/storybook-static
+
+# plugin generator
+packages/tools/generator-verdaccio-plugin/generators/

.netlify/netlify-plugin-pnpm/index.js

@@ -1,10 +0,0 @@
-module.exports = {
-  onPreBuild: async ({ utils: { build, run } }) => {
-    try {
-      await run.command("npm install -g pnpm")
-      await run.command("pnpm install --ignore-scripts --frozen-lockfile")
-    } catch (error) {
-      return build.failBuild(error)
-    }
-  }
-}

.netlify/netlify-plugin-pnpm/manifest.yml

@@ -1,2 +0,0 @@
-name: netlify-plugin-pnpm
-inputs: []

.npmignore

@@ -29,10 +29,6 @@ coverage/
 test-storage*
 test/
 __mocks__/
-jestEnvironment.js
-test/jest.e2e.config.js
-test/jest.config.functional.js
-jest.config.js
 
 # misc
 contrib/

.npmrc

@@ -1,2 +1 @@
-always-auth = true
 fetch-retries="10"

CONTRIBUTING.md

@@ -78,14 +78,14 @@ pnpm build
 pnpm test
 ```
 
-Verdaccio is a mono repository. To run the tests for for a specific package:
+Verdaccio is a mono repository. To run the tests for a specific package:
 
 ```shell
 cd packages/store
 pnpm test
 ```
 
-or an specific test in that package:
+or a specific test in that package:
 
 ```shell
 pnpm test test/merge.dist.tags.spec.ts
@@ -129,7 +129,7 @@ The user interface is split in two packages, the `/packages/plugins/ui-theme` an
 
 Go to `/packages/ui-component` and run `pnpm watch` to enable _babel_ in watch mode, every change on the components will be hot reloaded in combination with the `pnpm start` command.
 
-Any change on the server packages, must be build independently (server do not has hot reload, `pnpm start` should be triggered again).
+Any change on the server packages, must be build independently (server does not have hot reload, `pnpm start` should be triggered again).
 
 Any interaction with the server should be done through the port `8000` eg: `npm login --registry http://localhost:8000` .
 
@@ -142,7 +142,7 @@ Any interaction with the server should be done through the port `8000` eg: `npm
 
 #### Debugging compiled code {#debugging-compiled-code}
 
-Currently you can only run pre-compiled packages in debug mode. To enable debug
+Currently, you can only run pre-compiled packages in debug mode. To enable debug
 while running add the `verdaccio` namespace using the `DEBUG` environment
 variable, like this:
 
@@ -164,7 +164,7 @@ of the output is sent to the logger module.
 
 #### Testing your changes in a local registry {#testing-local-registry}
 
-Once you have perform your changes in the code base, the build and tests passes you can publish a local version:
+Once you have performed your changes in the code base, the build and tests passes you can publish a local version:
 
 - Ensure you have built all modules by running `pnpm build` (or the one you have modified)
 - Run `pnpm local:publish:release` to launch a local registry and publish all packages into it. This command will be alive until server is killed (Control Key + C)
@@ -181,7 +181,7 @@ npm i -g verdaccio --registry=http://localhost:4873
 verdaccio
 ```
 
-If you perform more changes in the source code, repeat this process, there is not _hot reloading_ support.
+If you perform more changes in the source code, repeat this process, there is no _hot reloading_ support.
 
 ## Feature Request {#feature-request}
 
@@ -208,7 +208,7 @@ a report in our [issue tracker](https://github.com/verdaccio/verdaccio/issues),
 > **NOTE: Verdaccio still does not support all npm commands. Some were not
 > considered important and others have not been requested yet.**
 
-### What's is not considered a bug?
+### What is not considered a bug?
 
 - _Third party integrations_: proxies integrations, external plugins
 - _Package managers_: If a package manager does not support a specific command
@@ -272,7 +272,7 @@ information on [rebasing](https://git-scm.com/book/en/v2/Git-Branching-Rebasing)
 
 #### Caveats
 
-Feel free to commit as much times you want in your branch, but keep on mind on
+Feel free to commit as many times you want in your branch, but keep on mind on
 this repository we `git squash` on merge by default, as we like to maintain a
 clean git history.
 
@@ -359,7 +359,7 @@ The last step is to confirm your changeset or abort the operation:
 🦋  info /Users/user/verdaccio.clone/.changeset/light-scissors-smell.md
 ```
 
-Once the changeset is added (all will have an unique name) you can freely edit
+Once the changeset is added (all will have a unique name) you can freely edit
 using markdown, adding additional information, code snippets or whatever else
 you consider to be relevant.
 
@@ -395,7 +395,7 @@ For adding a new **language** on the UI follow these steps:
 1. Ensure the **language** has been enabled, must be visible in the `crowdin` platform.
 2. Find in the explorer the file `en.US.json` in the path `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` and complete the translations, **not need to find approval on this**.
 3. Into the project, add a new field into `packages/plugins/ui-theme/src/i18n/crowdin/ui.json` file, in the section `lng`, the new language, eg: `{ lng: {korean:"Korean"}}`. (This file is English based, once the PR has been merged, this string will be available in crowdin for translate to the targeted language).
-4. Add the language, [flag icon](https://www.npmjs.com/package/country-flag-icons), and the menu key fort he new language eg: `menuKey: 'lng.korean'` to the file `packages/plugins/ui-theme/src/i18n/enabledLanguages.ts`.
+4. Add the language, [flag icon](https://www.npmjs.com/package/country-flag-icons), and the menu key for the new language eg: `menuKey: 'lng.korean'` to the file `packages/plugins/ui-theme/src/i18n/enabledLanguages.ts`.
 5. For local testing, read `packages/plugins/ui-theme/src/i18n/ABOUT_TRANSLATIONS.md`.
 6. Add a `changeset` file, see more info below.
 

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:21-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:21-alpine AS builder
 
 ENV NODE_ENV=development \
     VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org

README.md

@@ -1,4 +1,4 @@
-[![BannerUK](https://cdn.verdaccio.dev/readme/banner-uk.svg)](https://donate.redcrossredcrescent.org/ua/donate/~my-donation?_cv=1)
+[![BannerHelp](https://cdn.verdaccio.dev/readme/banner-uk.svg)](https://u24.gov.ua)
 
 > Verdaccio stands for **peace**, stop the war, we will be yellow / blue 🇺🇦 until that happens.
 
@@ -6,13 +6,12 @@
 
 ![verdaccio gif](https://cdn.verdaccio.dev/readme/readme-website.png)
 
-# Version Next (Development branch)
+# Version Next (Development Branch)
+
+> Looking for Verdaccio version 5 or 6? Version 6 is the latest version and successor to version 5. Version 6 requires Node.js 18 or higher and is maintained in the `6.x` branch.
+
+> The plugins for versions 5 and 6 are located at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository. Plugins for the `next-8` version are hosted in this project under the `./packages/plugins` folder.
 
-> Looking for Verdaccio 5 version? Check the branch `5.x`
-> The plugins for the `v5.x` that are hosted within this organization are located
-> at the [`verdaccio/monorepo`](https://github.com/verdaccio/monorepo) repository, while for the `next` version
-> are hosted on this project `./packages/plugins`, keep on mind `next` plugins will eventually would be
-> incompatible with `v5.x` versions.
 > Note that contributing guidelines might be different based on the branch.
 
 [Verdaccio](https://verdaccio.org/) is a simple, **zero-config-required local private npm registry**.
@@ -36,26 +35,30 @@ Google Cloud Storage** or create your own plugin.
 [![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 [![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
+## Versions
+
+You can find more details about the different versions of Verdaccio, minimum requirements, as well as links to associated npm packages and docker images in the [version history](VERSIONS.md).
+
 ## Install
 
-> Latest Node.js v16 required
+> Node.js v18 as minimum version required
 
 Install with npm:
 
 ```bash
-npm install --location=global verdaccio@next
+npm install -g verdaccio@next-8
 ```
 
 With `yarn`
 
 ```bash
-yarn global add verdaccio@next
+yarn global add verdaccio@next-8
 ```
 
 With `pnpm`
 
 ```bash
-pnpm i -g verdaccio@next
+pnpm i -g verdaccio@next-8
 ```
 
 or
@@ -79,15 +82,47 @@ Furthermore, you can read the [**Debugging Guidelines**](https://github.com/verd
 You can develop your own [plugins](https://verdaccio.org/docs/plugins) with the [verdaccio generator](https://github.com/verdaccio/generator-verdaccio-plugin). Installing [Yeoman](https://yeoman.io/) is required.
 
 ```
-npm install --location=global yo
-npm install --location=global generator-verdaccio-plugin
+npm install -g yo
+npm install -g generator-verdaccio-plugin
 ```
 
 Learn more [here](https://verdaccio.org/docs/dev-plugins) how to develop plugins. Share your plugins with the community.
 
+## Integration Tests
+
+In our compatibility testing project, we're dedicated to ensuring that your favorite commands work seamlessly across different versions of npm, pnpm, and Yarn. From publishing packages to managing dependencies.
+Our goal is to give you the confidence to use your preferred package manager without any issues. So dive in, check out our matrix, and see how your commands fare across the board!
+
+[Learn or contribute here](https://github.com/verdaccio/verdaccio/tree/master/e2e/cli)
+
+### Commands
+
+| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | pnpm8 | pnpm9 | pnpm10 | yarn1 | yarn2 | yarn3 | yarn4 |
+| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ------ | ----- | ----- | ----- | ----- |
+| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| unpublish | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ❌     | ❌    | ❌    | ❌    | ❌    |
+| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ❌    |
+| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ❌    | ❌    | ❌    |
+
+> notes:
+>
+> - yarn search cmd exist in _modern_ but, it do not uses the search registry endpoint.
+> - yarn _modern_ has two info commands, the one used here is `yarn npm info`
+
+❌ = no tested
+✅ = tested
+⛔ = no supported
+
 ## Donations
 
-Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider do a long support donation - **and your logo will be on this section of the readme.**
+Verdaccio is run by **volunteers**; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider doing a long support donation - **and your logo will be on this section of the readme.**
 
 **[Donate](https://github.com/sponsors/verdaccio)** 💵👍🏻 starting from _$1/month_ or just one single contribution.
 
@@ -113,7 +148,7 @@ If you want to use a modified version of some 3rd-party package (for example, yo
 ### E2E Testing
 
 Verdaccio has proved to be a lightweight registry that can be
-booted in a couple of seconds, fast enough for any CI. Many open source projects use verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **babel.js**, **angular-cli** or **docusaurus**. You can read more in [here](https://verdaccio.org/docs/e2e).
+booted in a couple of seconds, fast enough for any CI. Many open source projects use Verdaccio for end to end testing, to mention some examples, **create-react-app**, **mozilla neutrino**, **pnpm**, **storybook**, **babel.js**, **angular-cli** or **docusaurus**. You can read more in [here](https://verdaccio.org/docs/e2e).
 
 Furthermore, here few examples how to start:
 
@@ -123,7 +158,7 @@ Furthermore, here few examples how to start:
 
 ## Watch our Videos
 
-**Node Congress 2022, February 2022, Online Free**
+**Node 2022, February 2022, Online Free**
 
 <div>
    <a href="https://portal.gitnation.org/contents/five-ways-of-taking-advantage-of-verdaccio-your-private-and-proxy-nodejs-registry">
@@ -200,7 +235,7 @@ docker pull verdaccio/verdaccio:nightly-master
 
 Available as [tags](https://hub.docker.com/r/verdaccio/verdaccio/tags/).
 
-### Running verdaccio using Docker
+### Running Verdaccio using Docker
 
 To run the docker container:
 
@@ -212,35 +247,35 @@ Docker examples are available [in this repository](https://github.com/verdaccio/
 
 ## Compatibility
 
-Verdaccio aims to support all features of a standard npm client that make sense to support in private repository. Unfortunately, it isn't always possible.
+Verdaccio aims to support all features of a standard npm client that make sense to support in a private repository. Unfortunately, it isn't always possible.
 
 ### Basic features
 
-- Installing packages (npm install, npm upgrade, etc.) - **supported**
-- Publishing packages (npm publish) - **supported**
+- Installing packages (`npm install`, `npm update`, etc.) - **supported**
+- Publishing packages (`npm publish`) - **supported**
 
 ### Advanced package control
 
-- Unpublishing packages (npm unpublish) - **supported**
-- Tagging (npm tag) - **supported**
-- Deprecation (npm deprecate) - **supported**
+- Unpublishing packages (`npm unpublish`) - **supported**
+- Tagging (`npm dist-tag`) - **supported**
+- Deprecation (`npm deprecate`) - **supported**
 
 ### User management
 
-- Registering new users (npm adduser {newuser}) - **supported**
-- Change password (npm profile set password) - **supported**
-- Transferring ownership (npm owner add {user} {pkg}) - not supported, _PR-welcome_
-- Token (npm token) - **supported**
+- Registering new users (`npm adduser {newuser}`) - **supported**
+- Change password (`npm profile set password`) - **supported**
+- Transferring ownership (`npm owner`) - **supported**
+- Token (`npm token`) - **supported**
 
-### Miscellany
+### Miscellaneous
 
-- Searching (npm search) - **supported** (cli / browser)
-- Ping (npm ping) - **supported**
-- Starring (npm star, npm unstar, npm stars) - **supported**
+- Searching (`npm search`) - **supported** (cli / browser)
+- Ping (`npm ping`) - **supported**
+- Starring (`npm star`, `npm unstar`, `npm stars`) - **supported**
 
 ### Security
 
-- npm/yarn audit - **supported**
+- Audit (`npm/yarn audit`) - **supported**
 
 ## Report a vulnerability
 
@@ -269,7 +304,7 @@ Thanks to the following companies to help us to achieve our goals providing free
 | ![priscilawebdev](https://avatars2.githubusercontent.com/u/29228205?s=120&v=4) | ![DanielRuf](https://avatars3.githubusercontent.com/u/827205?s=120&v=4)  |
 | [@priscilawebdev](https://twitter.com/priscilawebdev)                          | [@DanielRufde](https://twitter.com/DanielRufde)                          |
 
-You can find and chat with then over Discord, click [here](http://chat.verdaccio.org) or follow them at _Twitter_.
+You can find and chat with them over Discord, click [here](http://chat.verdaccio.org) or follow them at _Twitter_.
 
 ## Who is using Verdaccio?
 
@@ -323,7 +358,7 @@ This project exists thanks to all the people who contribute. [[Contribute](CONTR
 
 ### FAQ / Contact / Troubleshoot
 
-If you have any issue you can try the following options, do no desist to ask or check our issues database, perhaps someone has asked already what you are looking for.
+If you have any issue you can try the following options. Do no hesitate to ask or check our issues database. Perhaps someone has asked already what you are looking for.
 
 - [Blog](https://verdaccio.org/blog/)
 - [Donations](https://github.com/sponsors/verdaccio)

SECURITY.md

@@ -2,15 +2,7 @@
 
 ## Supported versions
 
-The following table describes the versions of this project that are currently supported with security updates:
-
-| Version   | Supported          |
-| --------- | ------------------ |
-| 2.x       | :x:                |
-| 3.x       | :x:                |
-| 4.x       | :x:                |
-| 5.x       | :white_check_mark: |
-| 6.x alpha | :x:                |
+You can find details about the supported versions of Verdaccio in the [version history](https://github.com/verdaccio/verdaccio/blob/master/VERSIONS.md).
 
 ## Responsible disclosure security policy
 
@@ -34,7 +26,7 @@ Note that time-frame and processes are subject to each program’s own policy.
 
 - Report the security issue to the project maintainers directly at verdaccio@pm.me. If the report contains highly sensitive information, please be advised to encrypt your findings using our [PGP key](https://cdn.verdaccio.dev/gpg/publickey.verdaccio@pm.me.asc) which is also available in this document.
 
-Your efforts to responsibly disclose your findings are sincerely appreciated and will be taken into account to acknowledge your contributions.
+Your efforts to responsibly disclose your findings are sincerely appreciated. There isn't a security bounty program available, but any security contributions will be duly acknowledged to recognize your valuable input.
 
 ## PGP key
 

VERSIONS.md

@@ -0,0 +1,23 @@
+# Versions
+
+The following table describes the versions of this project:
+
+| Version          | Supported          | Minimum Node.js | Branch | Npm Tag          | Docker Images           | Helm Charts |
+| ---------------- | ------------------ | --------------- | ------ | ---------------- | ----------------------- | ----------- |
+| 4.x              | :x: (deprecated)   | 10              | 4.x    | latest-4         | 4, 4.x, 4.x.x, 4.x-next | 3.x         |
+| 5.x previous     | :x: (deprecated)   | 14              | 5.x    | latest-5         | 5, 5.x, 5.x.x, 5.x-next | 4.0 - 4.18  |
+| 6.x current      | :white_check_mark: | 18              | 6.x    | latest-6, latest | 6, 6.x, 6.x.x, 6.x-next | 4.19 - ...  |
+| 7.x next         | :x:                | 18              | 7.x    | next-7           | 7.x-next                | n/a         |
+| 8.x experimental | :x:                | 18              | master | next-8           | nightly-master          | n/a         |
+
+## Npm Registry
+
+The official Verdaccio npm packages are located at https://www.npmjs.com/package/verdaccio.
+
+## Docker Hub
+
+The official Verdaccio Docker Images are found at https://hub.docker.com/r/verdaccio/verdaccio.
+
+## Helms Charts
+
+The official Verdaccio Helm Charts are found at https://artifacthub.io/packages/helm/verdaccio/verdaccio.

crowdin.yaml

@@ -15,5 +15,5 @@ files:
     ignore: [/website/docs/api/**/*]
   - source: /website/versioned_docs/**/*
     translation: /website/i18n/%locale%/docusaurus-plugin-content-docs/**/%original_file_name%
-    ignore: [/website/versioned_docs/version-5.x/api/**/*, /website/versioned_docs/version-6.x/api/**/*]
+    ignore: [/website/versioned_docs/version-6.x/api/**/*]
    

docker-examples/v5/plugins/docker-build-install-plugin/docker.yaml

@@ -88,7 +88,7 @@ packages:
     # and three keywords: "$all", "$anonymous", "$authenticated"
     access: $all
 
-    # allow all known users to publish/publish packages
+    # allow all known users to publish/unpublish packages
     # (anyone can register by default, remember?)
     publish: $authenticated
     unpublish: $authenticated

docker-examples/v5/plugins/docker-local-plugin/Dockerfile

@@ -1,7 +1,7 @@
 # Docs based on https://github.com/xlts-dev/verdaccio-prometheus-middleware#installation
 # Docker multi-stage build - https://docs.docker.com/develop/develop-images/multistage-build/
 # Use an alpine node image to install the plugin
-FROM node:lts-alpine as builder
+FROM node:lts-alpine AS builder
 
 RUN mkdir -p /verdaccio/plugins
 

docker-examples/v5/plugins/docker-local-plugin/docker.yaml

@@ -90,7 +90,7 @@ packages:
     # and three keywords: "$all", "$anonymous", "$authenticated"
     access: $all
 
-    # allow all known users to publish/publish packages
+    # allow all known users to publish/unpublish packages
     # (anyone can register by default, remember?)
     publish: $authenticated
     unpublish: $authenticated

docker-examples/v6/plugins/docker-build-install-plugin/Dockerfile

@@ -2,7 +2,7 @@
 
 # Docker multi-stage build - https://docs.docker.com/develop/develop-images/multistage-build/
 # Use an alpine node image to install the plugin
-FROM node:lts-alpine as builder
+FROM node:lts-alpine AS builder
 
 # Install the metrics middleware plugin
 # npm docs