chore: update versions (next) (#4093)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.babelrc

@@ -4,7 +4,7 @@
       "@babel/env",
       {
         "targets": {
-          "node": 16
+          "node": 12
         }
       }
     ],

.changeset/angry-trees-tie.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/ui-theme': patch
+---
+
+- fixed login state when token is expired (@ku3mi41 in #3980)

.changeset/chilled-carrots-guess.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+- added `onClick` prop to `Link` component in @verdaccio/ui-components. (@moglerdev in #3989)
+- resolved issue in the `Package` component where the download button was incorrectly opening a new tab to the homepage. (@moglerdev in #3989)

.changeset/eight-squids-judge.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+fix: display labels for engine versions

.changeset/long-jars-collect.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+---
+
+feat: ui improvements
+
+Some UI improvements
+
+- download progress indicator: https://github.com/verdaccio/verdaccio/discussions/4068
+- fix dark mode and readme css support https://github.com/verdaccio/verdaccio/discussions/3942 https://github.com/verdaccio/verdaccio/discussions/3467
+- fix global for yarn packages and add version to the packages on copy
+- feat: hide deprecated versions option
+- fix: improve deprecated package style
+- feat: display deprecated versions

.changeset/old-turkeys-heal.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/file-locking': minor
+'@verdaccio/tarball': minor
+'@verdaccio/url': minor
+'@verdaccio/logger-7': minor
+'@verdaccio/logger-commons': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'verdaccio-audit': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/search': minor
+'@verdaccio/signature': minor
+'@verdaccio/utils': minor
+---
+
+restore legacy support

.changeset/perfect-chairs-act.md

@@ -0,0 +1,36 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/core': major
+'@verdaccio/file-locking': major
+'@verdaccio/tarball': major
+'@verdaccio/types': major
+'@verdaccio/url': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-commons': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/node-api': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'verdaccio-memory': major
+'@verdaccio/ui-theme': major
+'@verdaccio/proxy': major
+'@verdaccio/search': major
+'@verdaccio/server': major
+'@verdaccio/server-fastify': major
+'@verdaccio/signature': major
+'@verdaccio/store': major
+'@verdaccio/ui-components': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+update major dependencies, remove old nodejs support

.changeset/pre.json

@@ -57,5 +57,16 @@
     "@verdaccio/website": "5.20.2",
     "@verdaccio/local-publish": "0.0.1"
   },
-  "changesets": ["breezy-mayflies-pull"]
+  "changesets": [
+    "angry-trees-tie",
+    "breezy-mayflies-pull",
+    "chilled-carrots-guess",
+    "eight-squids-judge",
+    "long-jars-collect",
+    "old-turkeys-heal",
+    "perfect-chairs-act",
+    "shiny-worms-retire",
+    "shy-garlics-cry",
+    "weak-fans-explain"
+  ]
 }

.changeset/shiny-worms-retire.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/search': patch
+---
+
+fix: keyword undefined errors

.changeset/shy-garlics-cry.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/signature': patch
+---
+
+chore: export signature options type

.changeset/weak-fans-explain.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+fix: Avoid 404 error when getting favicon from root

.github/workflows/changesets.yml

@@ -20,7 +20,7 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           fetch-depth: 0
 
@@ -32,7 +32,7 @@ jobs:
           NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 
       - name: install pnpm
-        run: npm i pnpm@latest-8 -g
+        run: npm i pnpm@8.9.0 -g
         env:
           NODE_AUTH_TOKEN: ${{ secrets.REGISTRY_AUTH_TOKEN }}
 

.github/workflows/ci-windows.yml

@@ -18,7 +18,7 @@ jobs:
         env:
           NODE_ENV: production          
     steps:
-    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
     - name: Node
       uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
       with:
@@ -47,7 +47,7 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -71,7 +71,7 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -100,7 +100,7 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node ${{ matrix.node_version }}
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -126,7 +126,7 @@ jobs:
     runs-on: windows-latest
     name: UI Test E2E
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version-file: '.nvmrc'

.github/workflows/ci.yml

@@ -25,36 +25,9 @@ jobs:
         ports:
           - 4873:4873
         env:
-          NODE_ENV: production          
+          NODE_ENV: production
     steps:
-    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
-    - name: Node
-      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
-      with:
-        node-version-file: '.nvmrc'
-    - name: Install pnpm
-      run: |
-        corepack enable
-        corepack prepare --activate pnpm@latest-8
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store
-    - name: Install
-      run: pnpm install  --registry http://localhost:4873
-    - name: Cache .pnpm-store
-      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-      with:
-        path: ~/.pnpm-store
-        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-        restore-keys: |
-          pnpm-
-  lint:
-    runs-on: ubuntu-latest
-    name: Lint
-    needs: prepare
-    steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -62,16 +35,43 @@ jobs:
       - name: Install pnpm
         run: |
           corepack enable
-          corepack prepare --activate pnpm@latest-8
+          corepack install
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install  --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
+          restore-keys: |
+            pnpm-
+  lint:
+    runs-on: ubuntu-latest
+    name: Lint
+    needs: prepare
+    steps:
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack install
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
-        run: pnpm install --offline   --ignore-scripts
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm lint
   format:
@@ -79,7 +79,7 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -87,16 +87,16 @@ jobs:
       - name: Install pnpm
         run: |
           corepack enable
-          corepack prepare --activate pnpm@latest-8
+          corepack install
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
-        run: pnpm install --offline   --ignore-scripts
+        run: pnpm install --ignore-scripts
       - name: Lint
         run: pnpm format:check
   test:
@@ -105,11 +105,11 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [16, 18]
+        node_version: [18, 20]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node ${{ matrix.node_version }}
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
@@ -117,16 +117,16 @@ jobs:
       - name: Install pnpm
         run: |
           corepack enable
-          corepack prepare --activate pnpm@latest-8
+          corepack prepare --activate pnpm@8.9.0
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
-        run: pnpm install --offline   --ignore-scripts --registry http://localhost:4873
+        run: pnpm install --ignore-scripts --registry http://localhost:4873
       - name: build
         run: pnpm build
       - name: Test
@@ -137,24 +137,24 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
           corepack enable
-          corepack prepare --activate pnpm@latest-8
+          corepack install
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
         ## we need scripts, pupetter downloads aditional content
-        run: pnpm install  --registry http://localhost:4873
+        run: pnpm install --registry http://localhost:4873
       - name: build
         run: pnpm build
       - name: generate website translations

.github/workflows/codeql-analysis.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -34,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@a09933a12a80f87b87005513f0abb1494c27a716 # v2
+        uses: github/codeql-action/init@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@a09933a12a80f87b87005513f0abb1494c27a716 # v2
+        uses: github/codeql-action/autobuild@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@a09933a12a80f87b87005513f0abb1494c27a716 # v2
+        uses: github/codeql-action/analyze@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -15,7 +15,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       
     - name: Start containers
       run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -12,7 +12,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       
     - name: Start containers
       run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build

.github/workflows/docker-publish.yml

@@ -23,8 +23,8 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
-      - uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 # tag=v1
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:
           driver-opts: network=host

.github/workflows/e2e-ci.yml

@@ -15,44 +15,48 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-    - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
-    - name: Use Node
-      uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
-      with:
-        node-version-file: '.nvmrc'
-    - name: Install pnpm
-      run: npm i pnpm@latest-8 -g
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store
-    - name: Install
-      run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
-    - name: Cache .pnpm-store
-      uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
-      with:
-        path: ~/.pnpm-store
-        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
-        restore-keys: |
-          pnpm-
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - name: Use Node
+        uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
+        with:
+          node-version-file: '.nvmrc'
+      - name: Install pnpm
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@8.9.0
+      - name: set store
+        run: |
+          mkdir ~/.pnpm-store
+          pnpm config set store-dir ~/.pnpm-store
+      - name: Install
+        run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
+      - name: Cache .pnpm-store
+        uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
+        with:
+          path: ~/.pnpm-store
+          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
+          restore-keys: |
+            pnpm-
   build:
     needs: [prepare]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node 16
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@8.9.0
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
         run: pnpm recursive install --reporter=silence --registry http://localhost:4873
       - name: build
@@ -78,24 +82,40 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        pkg: [npm6, npm7, npm8, npm9, pnpm6, pnpm7, pnpm8, yarn1, yarn2, yarn3, yarn4]
+        pkg:
+          [
+            npm6,
+            npm7,
+            npm8,
+            npm9,
+            npm10,
+            pnpm6,
+            pnpm7,
+            pnpm8,
+            yarn1,
+            yarn2,
+            yarn3,
+            yarn4,
+          ]
         node: [16, 18, 19]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version: ${{ matrix.node }}
       - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
+        run: |
+          corepack enable
+          corepack prepare --activate pnpm@8.9.0
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
       - name: set store
         run: |
-          pnpm config set store-dir ~/.pnpm-store              
+          pnpm config set store-dir ~/.pnpm-store
       - name: Install
         run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
       - uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3
@@ -107,6 +127,6 @@ jobs:
       #     path: ./e2e/
       #     key: test-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
       - name: build e2e
-        run:  pnpm --filter @verdaccio/test-cli-commons build
+        run: pnpm --filter @verdaccio/test-cli-commons build
       - name: Test CLI
         run: NODE_ENV=production pnpm test --filter ...@verdaccio/e2e-cli-${{matrix.pkg}}

.github/workflows/e2e-ui.yml

@@ -15,22 +15,22 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
       - name: Use Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: |
-         corepack enable
-         corepack prepare --activate pnpm@latest-8
+          corepack enable
+          corepack install
       - name: Install
         run: pnpm install --reporter=silence --registry http://localhost:4873
       - name: build
         run: pnpm build
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3
+      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/static-data.yml

@@ -19,7 +19,7 @@ jobs:
     name: Run script
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/ui-components.yml

@@ -27,7 +27,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Use Node
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
@@ -47,7 +47,7 @@ jobs:
       - name: Install pnpm
         run: |
           corepack enable
-            corepack prepare --activate pnpm@latest-8
+            corepack prepare --activate pnpm@8.9.0
       - name: Install
         run: pnpm install  
       - name: Build storybook

.github/workflows/website.yml

@@ -23,7 +23,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3
+      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
 
       - name: Use Node 16
         uses: actions/setup-node@5e21ff4d9bc1a8cf6de233a3057d20ec6b3fb69d # tag=v3
@@ -134,7 +134,7 @@ jobs:
       - name: Add comment to PR
         if: github.repository == 'verdaccio/verdaccio'
         id: comment_to_pr
-        uses: marocchino/sticky-pull-request-comment@f6a2580ed520ae15da6076e7410b088d1c5dddd9 # v2
+        uses: marocchino/sticky-pull-request-comment@efaaab3fd41a9c3de579aba759d2552635e590fd # v2
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ github.event.issue.number }}

.nvmrc

@@ -1 +1 @@
-16
+20

CONTRIBUTING.md

@@ -41,61 +41,71 @@ package-lock=false
 
 This setting would cause the `pnpm install` command to install incorrect versions of package dependencies and the subsequent `pnpm build` step would likely fail.
 
-To begin your development setup, please install the latest version of pnpm globally:
+We use [corepack](https://github.com/nodejs/corepack) to install and use a specific (latest) version of pnpm. Please run the following commands which is use a specific version on Node.js and configure it to use a specific version of pnpm. The version of pnpm is specified in the `package.json` file in `packageManager` field.
 
+```shell
+nvm install
+corepack enable
+corepack install
 ```
-npm i -g pnpm@latest-8
+
+`pnpm` version will be updated mainly by the maintainers but if you would like to set it to a specific version, you can do so by running the following command:
+
+```shell
+corepack use pnpm@8.9.1
 ```
 
+It will update the `package.json` file with the new version of pnpm in the `packageManager` field.
+
 With pnpm installed, the first step is installing all dependencies:
 
-```
+```shell
 pnpm install
 ```
 
 ### Building the project
 
-To build the project run
+Each package is independent, dependencies must be build first, run:
 
-```
+```shell
 pnpm build
 ```
 
 ### Running test
 
-```
+```shell
 pnpm test
 ```
 
 Verdaccio is a mono repository. To run the tests for for a specific package:
 
-```
+```shell
 cd packages/store
 pnpm test
 ```
 
 or an specific test in that package:
 
-```
+```shell
 pnpm test test/merge.dist.tags.spec.ts
 ```
 
 or a single test unit:
 
-```
+```shell
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple'
 ```
 
 Coverage reporting is enabled by default, but you can turn it off to speed up
 test runs:
 
-```
+```shell
 pnpm test test/merge.dist.tags.spec.ts -- -t 'simple' --coverage=false
 ```
 
 You can enable increased [`debug`](https://www.npmjs.com/package/debug) output:
 
-```
+```shell
 DEBUG=verdaccio:* pnpm test
 ```
 
@@ -108,11 +118,22 @@ More details in the debug section
 We use [`debug`](https://www.npmjs.com/package/debug) to add helpful debugging
 output to the code. Each package has it owns namespace.
 
-#### Useful Scripts
+#### Developing with local server
 
 To run the application from the source code, ensure the project has been built with `pnpm build`, once this is done, there are few commands that helps to run server:
 
-- `pnpm start`: Runs server on port `8000` and UI on port `4873`. This is particularly useful if you want to contribute to the UI, since it runs with hot reload.
+The command `pnpm start` runs web server on port `8000` and user interface (webpack-server) on port `4873`. This is particularly useful if you want to contribute to the UI, since it runs with hot reload. The request to the server are proxy through webpack proxy support through the port `4873`.
+
+The user interface is split in two packages, the `/packages/plugins/ui-theme` and the `/packages/ui-components`. The `ui-components` package uses _storybook_ in order to develop component, but if you need to reload ui components with `ui-theme` do the following.
+
+Go to `/packages/ui-component` and run `pnpm watch` to enable _babel_ in watch mode, every change on the components will be hot reloaded in combination with the `pnpm start` command.
+
+Any change on the server packages, must be build independently (server do not has hot reload, `pnpm start` should be triggered again).
+
+Any interaction with the server should be done through the port `8000` eg: `npm login --registry http://localhost:8000` .
+
+#### Useful commands
+
 - `pnpm debug`: Run the server in debug mode `--inspect`. UI runs too but without hot reload. For automatic break use `pnpm debug:break`.
 - `pnpm debug:fastify`: To contribute on the [fastify migration](https://github.com/verdaccio/verdaccio/discussions/2155) this is a temporary command for such purpose.
 - `pnpm website`: Build the website, for more commands to run the _website_, run `cd website` and then `pnpm serve`, website will run on port `3000`.
@@ -124,14 +145,14 @@ Currently you can only run pre-compiled packages in debug mode. To enable debug
 while running add the `verdaccio` namespace using the `DEBUG` environment
 variable, like this:
 
-```
+```shell
 DEBUG=verdaccio:* node packages/verdaccio/debug/bootstrap.js
 ```
 
 You can filter this output to just the packages you're interested in using
 namespaces:
 
-```
+```shell
 DEBUG=verdaccio:plugin:* node packages/verdaccio/debug/bootstrap.js
 ```
 
@@ -144,17 +165,17 @@ of the output is sent to the logger module.
 
 Once you have perform your changes in the code base, the build and tests passes you can publish a local version:
 
-- Ensure you have build all modules (or the one you have modified)
+- Ensure you have built all modules by running `pnpm build` (or the one you have modified)
 - Run `pnpm local:publish:release` to launch a local registry and publish all packages into it. This command will be alive until server is killed (Control Key + C)
 
-```
+```shell
 pnpm build
 pnpm local:publish:release
 ```
 
 The last step consist on install globally the package from the local registry which runs on the default port (4873).
 
-```
+```shell
 npm i -g verdaccio --registry=http://localhost:4873
 verdaccio
 ```
@@ -220,7 +241,7 @@ Questions can be asked via [Discord](https://discord.gg/7qWJxBf)
 
 ## Development Guidelines {#development-guidelines}
 
-It's recommended use a UNIX system for local development, Windows should works fine for development, but is not daily tested could not be perfect. To ensure a fast code review and merge, please follow the next guidelines:
+It's recommended use a UNIX system for local development, Windows dev local support is not being tested and might not work. To ensure a fast code review and merge, please follow the next guidelines:
 
 Any contribution gives you the right to be part of this organization as _collaborator_ and your avatar will be automatically added to the [contributors page](https://verdaccio.org/contributors).
 
@@ -285,7 +306,7 @@ contribution to get merged (unless it does not affect functionality or
 user-facing content, eg: docs, readme, adding test or typo/lint fixes). To
 create a changeset please run:
 
-```
+```shell
 pnpm changeset
 ```
 
@@ -364,6 +385,8 @@ All translations are provided by the **[crowdin](http://crowdin.com)** platform,
 
 If you want to contribute by adding translations, create an account (GitHub could be used as fast alternative), in the platform you can contribute to two areas, the website or improve User Interface translations.
 
+> Languages with less the 40% of translations available are excluded by the build system.
+
 If a language is not listed, ask for it in the [Discord](https://discord.gg/7qWJxBf) channel #contribute channel.
 
 For adding a new **language** on the UI follow these steps:

Dockerfile

@@ -11,7 +11,7 @@ RUN apk --no-cache add openssl ca-certificates wget && \
 
 WORKDIR /opt/verdaccio-build
 COPY . .
-RUN npm -g i pnpm@latest-8 && \
+RUN npm -g i pnpm@8.9.0 && \
     pnpm config set registry $VERDACCIO_BUILD_REGISTRY && \
     pnpm install --frozen-lockfile --ignore-scripts && \
     rm -Rf test && \

README.md

@@ -44,19 +44,19 @@ Google Cloud Storage** or create your own plugin.
 Install with npm:
 
 ```bash
-npm install --location=global verdaccio@6-next
+npm install --location=global verdaccio@next
 ```
 
 With `yarn`
 
 ```bash
-yarn global add verdaccio@6-next
+yarn global add verdaccio@next
 ```
 
 With `pnpm`
 
 ```bash
-pnpm i -g verdaccio@6-next
+pnpm i -g verdaccio@next
 ```
 
 or

crowdin.yaml

@@ -15,5 +15,5 @@ files:
     ignore: [/website/docs/api/**/*]
   - source: /website/versioned_docs/**/*
     translation: /website/i18n/%locale%/docusaurus-plugin-content-docs/**/%original_file_name%
-    ignore: [/website/versioned_docs/version-5.x/api/**/*]
+    ignore: [/website/versioned_docs/version-5.x/api/**/*, /website/versioned_docs/version-6.x/api/**/*]
    

e2e/cli/README.md

@@ -3,14 +3,11 @@
 ## What is included on these test?
 
 - Default configuration only
-- Test with all popular package managers:
-- `yarn classic` and `yarn modern (2, 3, 4 RC)`
-- `pnpm 6, 7`
-- `npm 6, 7, 8 and 9`
+- Test with all popular package managers
 
 ### Commands Tested
 
-| cmd       | npm6 | npm7 | npm8 | npm9 | pnpm6 | pnpm7 | pnpm8 | yarn1 | yarn2 | yarn3 | yarn4 |
+| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | pnpm6 | pnpm7 | yarn1 | yarn2 | yarn3 | yarn4 |
 | --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ----- | ----- | ----- | ----- |
 | publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
 | info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |

e2e/cli/cli-commons/package.json

@@ -5,16 +5,16 @@
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
     "debug": "4.3.4",
     "fs-extra": "10.1.0",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "get-port": "5.1.1",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:7.0.0-next.0"
+    "verdaccio": "workspace:7.0.0-next.4"
   },
   "scripts": {
     "test": "jest",

e2e/cli/cli-commons/src/process.ts

@@ -31,12 +31,13 @@ export async function exec(options: SpawnOptions, cmd, args): Promise<ExecOutput
   }
 
   const childProcess = spawn(cmd, args, spawnOptions);
-  // @ts-ignore
-  const rl = createInterface({ input: childProcess.stdout });
+  if (childProcess.stdout) {
+    const rl = createInterface({ input: childProcess.stdout });
 
-  rl.on('line', function (line) {
-    stdout += line;
-  });
+    rl.on('line', function (line) {
+      stdout += line;
+    });
+  }
 
   const err = new Error(`Running "${cmd} ${args.join(' ')}" returned error code `);
   return new Promise((resolve, reject) => {
@@ -45,14 +46,9 @@ export async function exec(options: SpawnOptions, cmd, args): Promise<ExecOutput
         resolve({ stdout, stderr });
       } else {
         err.message += `${error}...\n\nSTDOUT:\n${stdout}\n\nSTDERR:\n${stderr}\n`;
-        return reject({ stdout, stderr: err });
+        const errorObj = { stdout, stderr: err };
+        return reject(errorObj);
       }
     });
   });
 }
-
-export function silentNpm(...args): Promise<ExecOutput> {
-  debug('run silent npm %o', args);
-  // @ts-ignore
-  return exec({ silent: true }, 'npm', args);
-}

e2e/cli/cli-commons/src/utils.ts

@@ -5,7 +5,6 @@ import { join } from 'path';
 import { fileUtils } from '@verdaccio/core';
 
 export function createProject(projectName: string) {
-  // @ts-ignore
   const tempRootFolder = global.__namespace.getItem('dir-suite-root');
   const verdaccioInstall = join(tempRootFolder, projectName);
   fs.mkdirSync(verdaccioInstall);

e2e/cli/e2e-npm10/.babelrc

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../.babelrc"
+}

e2e/cli/e2e-npm10/.eslintrc

@@ -0,0 +1,7 @@
+{
+  "rules": {
+    "no-console": 0,
+    "@typescript-eslint/no-var-requires": 0,
+    "@typescript-eslint/explicit-member-accessibility": 0
+  }
+}

e2e/cli/e2e-npm10/CHANGELOG.md

@@ -0,0 +1,62 @@
+# @verdaccio/e2e-cli-npm9
+
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [351aeeaa8]
+- Updated dependencies [d167f92e1]
+- Updated dependencies [c383eb68c]
+  - @verdaccio/test-cli-commons@1.1.0
+
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
+## 1.0.1-6-next.5
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.5
+
+## 1.0.1-6-next.4
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.4
+
+## 1.0.1-6-next.3
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/test-cli-commons@1.0.1-6-next.3
+
+## 1.0.1-6-next.2
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.2
+
+## 1.0.1-6-next.1
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.1
+
+## 1.0.1-6-next.0
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.0

e2e/cli/e2e-npm10/audit.spec.ts

@@ -0,0 +1,44 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('audit a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', '@verdaccio/cli']])(
+    'should audit a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl(),
+        { jquery: '3.6.1' }
+      );
+      // install is required to create package lock file
+      await npm({ cwd: tempFolder }, 'install', ...addRegistry(registry.getRegistryUrl()));
+      const resp = await npm(
+        { cwd: tempFolder },
+        'audit',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.metadata).toBeDefined();
+      expect(parsedBody.auditReportVersion).toBeDefined();
+      expect(parsedBody.vulnerabilities).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/deprecate.spec.ts

@@ -0,0 +1,115 @@
+import {
+  addRegistry,
+  initialSetup,
+  npmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('deprecate a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  async function deprecate(tempFolder, packageVersion, registry, message) {
+    await npm(
+      { cwd: tempFolder },
+      'deprecate',
+      packageVersion,
+      message,
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+  }
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@verdaccio/deprecated-1']])(
+    'should deprecate a single package %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // deprecate one version
+      await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+      // verify is deprecated
+      const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+      expect(infoBody.name).toEqual(pkgName);
+      expect(infoBody.deprecated).toEqual(message);
+    }
+  );
+
+  test.each([['@verdaccio/deprecated-2']])('should un-deprecate a package %s', async (pkgName) => {
+    const message = 'some message';
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    // deprecate one version
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+    // verify is deprecated
+    const infoBody = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+    expect(infoBody.deprecated).toEqual(message);
+    // empty string is same as undeprecate
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, '');
+    const infoBody2 = await npmUtils.getInfoVersions(npm, `${pkgName}`, registry);
+    expect(infoBody2.deprecated).toBeUndefined();
+  });
+
+  test.each([['@verdaccio/deprecated-3']])(
+    'should deprecate a multiple packages %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      // publish 1.0.0
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.1.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.2.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // publish 1.3.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      // // deprecate all version
+      await deprecate(tempFolder, pkgName, registry, message);
+      // verify is deprecated
+      for (let v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {
+        const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@${v}`, registry);
+        expect(infoResp.deprecated).toEqual(message);
+      }
+      // publish normal version
+      // publish 1.4.0
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      const infoResp = await npmUtils.getInfoVersions(npm, `${pkgName}@1.4.0`, registry);
+      // must be not deprecated
+      expect(infoResp.deprecated).toBeUndefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/dist-tags.spec.ts

@@ -0,0 +1,91 @@
+import {
+  addRegistry,
+  initialSetup,
+  npmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('publish a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@foo/foo', 'foo']])('should list dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    await npmUtils.bumbUp(npm, tempFolder, registry);
+    await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await npm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'ls',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
+  });
+
+  test.each([['@verdaccio/bar']])('should remove tag with dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    await npmUtils.bumbUp(npm, tempFolder, registry);
+    await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await npm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'rm',
+      `${pkgName}@1.1.0`,
+      'beta',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('-beta: @verdaccio/bar@1.1.0');
+  });
+
+  test.each([['@verdaccio/five']])(
+    'should add tag to package and version with dist-tags for %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      await npmUtils.bumbUp(npm, tempFolder, registry);
+      await npmUtils.publish(npm, tempFolder, pkgName, registry);
+      const resp2 = await npm(
+        { cwd: tempFolder },
+        'dist-tag',
+        'add',
+        `${pkgName}@1.1.0`,
+        'alfa',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      expect(resp2.stdout).toEqual(`+alfa: ${pkgName}@1.1.0`);
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/info.spec.ts

@@ -0,0 +1,31 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run npm info json body', async () => {
+    const resp = await npm(
+      {},
+      'info',
+      'verdaccio',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.name).toEqual('verdaccio');
+    expect(parsedBody.dependencies).toBeDefined();
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/install.spec.ts

@@ -0,0 +1,38 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('install a project packages', () => {
+  jest.setTimeout(100000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run npm install json body', async () => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      'something',
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl(),
+      { react: '18.2.0' }
+    );
+    const resp = await npm(
+      { cwd: tempFolder },
+      'install',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.added).toBeDefined();
+    expect(parsedBody.audit).toBeDefined();
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/jest.config.js

@@ -0,0 +1,3 @@
+const config = require('../jest.config');
+
+module.exports = { ...config };

e2e/cli/e2e-npm10/package.json

@@ -0,0 +1,12 @@
+{
+  "private": true,
+  "name": "@verdaccio/e2e-cli-npm9",
+  "version": "1.0.1",
+  "dependencies": {
+    "@verdaccio/test-cli-commons": "workspace:1.1.0",
+    "npm": "10.1.0"
+  },
+  "scripts": {
+    "test": "jest"
+  }
+}

e2e/cli/e2e-npm10/ping.spec.ts

@@ -0,0 +1,24 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('ping registry', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should ping registry', async () => {
+    const resp = await npm({}, 'ping', '--json', ...addRegistry(registry.getRegistryUrl()));
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.registry).toEqual(registry.getRegistryUrl() + '/');
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/publish.spec.ts

@@ -0,0 +1,41 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
+    'should publish a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      const resp = await npm(
+        { cwd: tempFolder },
+        'publish',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.name).toEqual(pkgName);
+      expect(parsedBody.files).toBeDefined();
+      expect(parsedBody.files).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/search.spec.ts

@@ -0,0 +1,33 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('search a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should search a package', async () => {
+    const resp = await npm(
+      {},
+      'search',
+      '@verdaccio/cli',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    const pkgFind = parsedBody.find((item) => {
+      return item.name === '@verdaccio/cli';
+    });
+    expect(pkgFind.name).toEqual('@verdaccio/cli');
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/star.spec.ts

@@ -0,0 +1,85 @@
+import {
+  addRegistry,
+  initialSetup,
+  npmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { npm } from './utils';
+
+describe('star a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    const resp = await npm(
+      { cwd: tempFolder },
+      'star',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp.stdout).toEqual(`★  ${pkgName}`);
+  });
+
+  test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    const resp = await npm(
+      { cwd: tempFolder },
+      'star',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp.stdout).toEqual(`★  ${pkgName}`);
+
+    const resp1 = await npm(
+      { cwd: tempFolder },
+      'unstar',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp1.stdout).toEqual(`☆  ${pkgName}`);
+  });
+
+  test('should list stars of a user %s', async () => {
+    const pkgName = '@verdaccio/stars';
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await npmUtils.publish(npm, tempFolder, pkgName, registry);
+    await npm({ cwd: tempFolder }, 'star', pkgName, ...addRegistry(registry.getRegistryUrl()));
+    const resp = await npm({ cwd: tempFolder }, 'stars', ...addRegistry(registry.getRegistryUrl()));
+    // side effects: this result is affected the the package published in the previous step
+    expect(resp.stdout).toEqual(`@verdaccio/foo@verdaccio/stars`);
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-npm10/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../../tsconfig.reference.json",
+  "references": [
+    {
+      "path": "../cli-commons"
+    }
+  ]
+}

e2e/cli/e2e-npm10/utils.ts

@@ -0,0 +1,41 @@
+import { SpawnOptions } from 'child_process';
+import { join } from 'path';
+
+import { exec } from '@verdaccio/test-cli-commons';
+import { addRegistry } from '@verdaccio/test-cli-commons';
+
+export function getCommand() {
+  return join(__dirname, './node_modules/.bin/npm');
+}
+
+export function npm(options: SpawnOptions, ...args: string[]) {
+  return exec(options, getCommand(), args);
+}
+
+export async function bumbUp(tempFolder, registry) {
+  await npm({ cwd: tempFolder }, 'version', 'minor', ...addRegistry(registry.getRegistryUrl()));
+}
+
+export async function publish(tempFolder, pkgName, registry, arg: string[] = []) {
+  const resp = await npm(
+    { cwd: tempFolder },
+    'publish',
+    ...arg,
+    '--json',
+    ...addRegistry(registry.getRegistryUrl())
+  );
+  const parsedBody = JSON.parse(resp.stdout as string);
+  expect(parsedBody.name).toEqual(pkgName);
+}
+
+export async function getInfoVersions(pkgName, registry) {
+  const infoResp = await npm(
+    {},
+    'info',
+    pkgName,
+    '--json',
+    ...addRegistry(registry.getRegistryUrl())
+  );
+  const infoBody = JSON.parse(infoResp.stdout as string);
+  return infoBody;
+}

e2e/ui/package.json

@@ -3,9 +3,9 @@
   "name": "@verdaccio/e2e-ui",
   "version": "2.0.0",
   "devDependencies": {
-    "verdaccio": "workspace:7.0.0-next.0",
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
+    "verdaccio": "workspace:7.0.0-next.4",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
     "@verdaccio/test-helper": "workspace:3.0.0-next.0",
     "debug": "4.3.4",
     "cypress": "^11.2.0",

package.json

@@ -15,12 +15,12 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@babel/cli": "7.22.10",
-    "@babel/core": "7.22.10",
-    "@babel/eslint-parser": "7.22.10",
-    "@babel/node": "7.22.10",
+    "@babel/cli": "7.23.0",
+    "@babel/core": "7.23.2",
+    "@babel/eslint-parser": "7.22.15",
+    "@babel/node": "7.22.19",
     "@babel/plugin-proposal-class-properties": "7.18.6",
-    "@babel/plugin-proposal-decorators": "7.22.10",
+    "@babel/plugin-proposal-decorators": "7.23.2",
     "@babel/plugin-proposal-export-namespace-from": "7.18.9",
     "@babel/plugin-proposal-function-sent": "7.22.5",
     "@babel/plugin-proposal-json-strings": "7.18.6",
@@ -32,84 +32,86 @@
     "@babel/plugin-syntax-dynamic-import": "7.8.3",
     "@babel/plugin-syntax-import-meta": "7.10.4",
     "@babel/plugin-transform-async-to-generator": "7.22.5",
-    "@babel/plugin-transform-classes": "7.22.6",
-    "@babel/plugin-transform-runtime": "7.22.10",
-    "@babel/preset-env": "7.22.10",
-    "@babel/preset-react": "7.22.5",
-    "@babel/preset-typescript": "7.22.5",
-    "@babel/register": "7.22.5",
-    "@babel/runtime": "7.22.10",
+    "@babel/plugin-transform-classes": "7.22.15",
+    "@babel/plugin-transform-runtime": "7.23.2",
+    "@babel/preset-env": "7.23.2",
+    "@babel/preset-react": "7.22.15",
+    "@babel/preset-typescript": "7.23.2",
+    "@babel/register": "7.22.15",
+    "@babel/runtime": "7.23.2",
     "@changesets/changelog-github": "0.4.8",
     "@changesets/cli": "2.24.4",
     "@changesets/get-dependents-graph": "1.3.6",
-    "@crowdin/cli": "3.10.1",
+    "@crowdin/cli": "3.14.0",
     "@dianmora/contributors": "5.0.0",
     "@emotion/react": "11.10.6",
     "@emotion/styled": "11.10.6",
-    "@testing-library/dom": "8.19.1",
-    "@testing-library/jest-dom": "5.16.5",
-    "@testing-library/react": "12.1.5",
-    "@trivago/prettier-plugin-sort-imports": "^4.0.0",
-    "@types/async": "3.2.20",
+    "@testing-library/dom": "9.3.3",
+    "@testing-library/jest-dom": "6.1.4",
+    "@testing-library/react": "14.0.0",
+    "@trivago/prettier-plugin-sort-imports": "^4.2.0",
+    "@types/async": "3.2.21",
     "@types/body-parser": "1.19.2",
-    "@types/connect": "3.4.35",
+    "@types/connect": "3.4.36",
     "@types/cookiejar": "2.1.2",
-    "@types/debug": "^4.1.7",
-    "@types/express": "4.17.15",
-    "@types/express-serve-static-core": "4.17.31",
-    "@types/http-errors": "1.8.2",
-    "@types/jest": "27.5.2",
-    "@types/jsonwebtoken": "8.5.9",
-    "@types/lodash": "4.14.197",
-    "@types/mime": "2.0.3",
-    "@types/minimatch": "3.0.5",
-    "@types/node": "16.18.40",
-    "@types/node-fetch": "2.6.4",
-    "@types/qs": "6.9.7",
-    "@types/range-parser": "1.2.4",
-    "@types/react": "18.0.26",
-    "@types/react-dom": "18.0.9",
+    "@types/debug": "^4.1.9",
+    "@types/express": "4.17.18",
+    "@types/express-serve-static-core": "4.17.37",
+    "@types/http-errors": "2.0.2",
+    "@types/jest": "29.5.5",
+    "@types/jsonwebtoken": "9.0.3",
+    "@types/lodash": "4.14.199",
+    "@types/mime": "3.0.2",
+    "@types/minimatch": "5.1.2",
+    "@types/node": "20.8.3",
+    "@types/node-fetch": "2.6.6",
+    "@types/qs": "6.9.8",
+    "@types/range-parser": "1.2.5",
+    "@types/react": "18.2.25",
+    "@types/react-dom": "18.2.11",
     "@types/react-router-dom": "5.3.3",
-    "@types/react-virtualized": "9.21.21",
+    "@types/react-virtualized": "9.21.23",
     "@types/redux": "3.6.0",
-    "@types/request": "2.48.8",
-    "@types/semver": "7.5.0",
-    "@types/serve-static": "1.13.10",
-    "@types/superagent": "4.1.18",
-    "@types/supertest": "2.0.12",
-    "@types/testing-library__jest-dom": "5.14.9",
-    "@types/validator": "13.7.17",
-    "@types/webpack": "5.28.1",
-    "@types/webpack-env": "1.18.1",
-    "@typescript-eslint/eslint-plugin": "5.59.8",
-    "@typescript-eslint/parser": "5.59.8",
+    "@types/request": "2.48.9",
+    "@types/semver": "7.5.3",
+    "@types/send": "0.17.2",
+    "@types/serve-static": "1.15.3",
+    "@types/superagent": "4.1.19",
+    "@types/supertest": "2.0.14",
+    "@types/testing-library__jest-dom": "6.0.0",
+    "@types/validator": "13.11.2",
+    "@types/webpack": "5.28.3",
+    "@types/webpack-env": "1.18.2",
+    "@typescript-eslint/eslint-plugin": "6.9.0",
+    "@typescript-eslint/parser": "6.9.0",
     "@verdaccio/crowdin-translations": "workspace:*",
     "@verdaccio/eslint-config": "workspace:*",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-theme": "workspace:*",
+    "@vitest/coverage-v8": "^0.34.6",
     "babel-core": "7.0.0-bridge.0",
-    "babel-jest": "29.4.3",
+    "babel-jest": "29.7.0",
     "babel-plugin-dynamic-import-node": "2.3.3",
-    "babel-plugin-emotion": "10.2.2",
+    "babel-plugin-emotion": "11.0.0",
     "concurrently": "6.5.1",
     "cross-env": "7.0.3",
     "debug": "4.3.4",
     "detect-secrets": "1.0.6",
-    "eslint": "8.42.0",
+    "eslint": "8.52.0",
     "fs-extra": "10.1.0",
     "got": "11.8.6",
     "husky": "7.0.4",
     "in-publish": "2.0.1",
-    "jest": "29.4.3",
-    "jest-diff": "29.4.3",
-    "jest-environment-jsdom": "29.4.3",
-    "jest-environment-jsdom-global": "3.1.2",
-    "jest-environment-node": "29.3.1",
-    "jest-junit": "12.3.0",
+    "jest": "29.7.0",
+    "jest-diff": "29.7.0",
+    "jest-environment-jsdom": "29.7.0",
+    "jest-environment-jsdom-global": "4.0.0",
+    "jest-environment-node": "29.7.0",
+    "jest-junit": "16.0.0",
     "kleur": "4.1.5",
     "lint-staged": "11.2.6",
-    "nock": "13.2.9",
-    "nodemon": "2.0.20",
+    "nock": "13.3.3",
+    "nodemon": "2.0.22",
     "npm-run-all": "4.1.5",
     "prettier": "2.8.8",
     "react": "18.2.0",
@@ -118,12 +120,13 @@
     "selfsigned": "1.10.14",
     "supertest": "6.3.3",
     "ts-node": "10.9.1",
-    "typescript": "4.9.4",
-    "update-ts-references": "2.4.1",
+    "typescript": "5.2.2",
+    "update-ts-references": "2.6.1",
     "verdaccio-audit": "workspace:*",
     "verdaccio-auth-memory": "workspace:*",
     "verdaccio-htpasswd": "workspace:*",
-    "verdaccio-memory": "workspace:*"
+    "verdaccio-memory": "workspace:*",
+    "vitest": "^0.34.3"
   },
   "scripts": {
     "prepare": "husky install",
@@ -176,11 +179,12 @@
     }
   },
   "engines": {
-    "node": ">=16.5"
+    "node": ">=18"
   },
   "license": "MIT",
   "lint-staged": {
     "*.{js,jsx,ts,tsx,json,yml,yaml,md}": "prettier --write",
     "*.{js,jsx,ts,tsx}": "eslint --cache --fix"
-  }
+  },
+  "packageManager": "pnpm@8.9.0+sha256.8f5264ad1d100da11a6add6bb8a94c6f1e913f9e9261b2a551fabefad2ec0fec"
 }

packages/api/CHANGELOG.md

@@ -1,5 +1,59 @@
 # @verdaccio/api
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/auth@7.0.0-next.4
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/config@7.0.0-next.4
+- @verdaccio/middleware@7.0.0-next.4
+- @verdaccio/store@7.0.0-next.4
+- @verdaccio/utils@7.0.0-next.4
+- @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/middleware@7.0.0-next.3
+  - @verdaccio/utils@7.0.0-next.3
+  - @verdaccio/auth@7.0.0-next.3
+  - @verdaccio/logger@7.0.0-next.3
+  - @verdaccio/store@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+- @verdaccio/auth@7.0.0-next.2
+- @verdaccio/middleware@7.0.0-next.2
+- @verdaccio/store@7.0.0-next.2
+- @verdaccio/utils@7.0.0-next.2
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+- @verdaccio/auth@7.0.0-next.1
+- @verdaccio/middleware@7.0.0-next.1
+- @verdaccio/store@7.0.0-next.1
+- @verdaccio/utils@7.0.0-next.1
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -25,8 +25,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",
@@ -39,29 +38,29 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
-    "@verdaccio/middleware": "workspace:7.0.0-next.0",
-    "@verdaccio/store": "workspace:7.0.0-next.0",
-    "@verdaccio/utils": "workspace:7.0.0-next.0",
+    "@verdaccio/auth": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
+    "@verdaccio/middleware": "workspace:7.0.0-next.4",
+    "@verdaccio/store": "workspace:7.0.0-next.4",
+    "@verdaccio/utils": "workspace:7.0.0-next.4",
     "abortcontroller-polyfill": "1.7.5",
+    "body-parser": "1.20.2",
     "cookies": "0.8.0",
     "debug": "4.3.4",
-    "body-parser": "1.20.2",
     "express": "4.18.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
     "semver": "7.5.4"
   },
   "devDependencies": {
-    "@verdaccio/server": "workspace:7.0.0-next.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/server": "workspace:7.0.0-next.4",
     "@verdaccio/test-helper": "workspace:3.0.0-next.0",
-    "supertest": "6.3.3",
-    "nock": "13.2.9",
-    "mockdate": "3.0.5"
+    "@verdaccio/types": "workspace:12.0.0-next.1",
+    "mockdate": "3.0.5",
+    "nock": "13.3.3",
+    "supertest": "6.3.3"
   },
   "funding": {
     "type": "opencollective",

packages/api/src/index.ts

@@ -43,7 +43,6 @@ export default function (config: Config, auth: Auth, storage: Storage): Router {
   app.param('org_couchdb_user', match(/^org\.couchdb\.user:/));
   app.use(auth.apiJWTmiddleware());
   app.use(express.json({ strict: false, limit: config.max_body_size || '10mb' }));
-  // @ts-ignore
   app.use(antiLoop(config));
   // encode / in a scoped package name to be matched as a single parameter in routes
   app.use(encodeScopePackage);

packages/api/src/publish.ts

@@ -196,10 +196,10 @@ export function publishPackage(storage: Storage): any {
         requestOptions: {
           host: req.hostname,
           protocol: req.protocol,
-          // @ts-ignore
-          headers: req.headers,
+          headers: req.headers as { [key: string]: string },
           username,
         },
+        uplinksLook: false,
       });
 
       res.status(HTTP_STATUS.CREATED);

packages/auth/CHANGELOG.md

@@ -1,5 +1,60 @@
 # @verdaccio/auth
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- Updated dependencies [312bc100f]
+  - @verdaccio/signature@7.0.0-next.2
+  - @verdaccio/core@7.0.0-next.4
+  - @verdaccio/config@7.0.0-next.4
+  - @verdaccio/loaders@7.0.0-next.4
+  - verdaccio-htpasswd@12.0.0-next.4
+  - @verdaccio/utils@7.0.0-next.4
+  - @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+  - verdaccio-htpasswd@12.0.0-next.3
+  - @verdaccio/signature@7.0.0-next.1
+  - @verdaccio/utils@7.0.0-next.3
+  - @verdaccio/loaders@7.0.0-next.3
+  - @verdaccio/logger@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+- @verdaccio/loaders@7.0.0-next.2
+- verdaccio-htpasswd@12.0.0-next.2
+- @verdaccio/utils@7.0.0-next.2
+- @verdaccio/signature@7.0.0-next.0
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+- @verdaccio/loaders@7.0.0-next.1
+- verdaccio-htpasswd@12.0.0-next.1
+- @verdaccio/utils@7.0.0-next.1
+- @verdaccio/signature@7.0.0-next.0
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -25,8 +25,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",
@@ -39,19 +38,19 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/loaders": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
-    "@verdaccio/signature": "workspace:7.0.0-next.0",
-    "@verdaccio/utils": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/loaders": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
+    "@verdaccio/signature": "workspace:7.0.0-next.2",
+    "@verdaccio/utils": "workspace:7.0.0-next.4",
     "debug": "4.3.4",
     "express": "4.18.2",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:12.0.0-next.0"
+    "verdaccio-htpasswd": "workspace:12.0.0-next.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "funding": {
     "type": "opencollective",

packages/auth/src/auth.ts

@@ -1,5 +1,5 @@
 import buildDebug from 'debug';
-import { NextFunction, Request, RequestHandler, Response } from 'express';
+import { NextFunction, Request, Response } from 'express';
 import _ from 'lodash';
 import { HTPasswd } from 'verdaccio-htpasswd';
 
@@ -308,12 +308,11 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
     debug('allow unpublish for %o', packageName);
 
     for (const plugin of this.plugins) {
-      if (_.isNil(plugin) || isFunction(plugin.allow_unpublish) === false) {
+      if (typeof plugin?.allow_unpublish !== 'function') {
         debug('allow unpublish for %o plugin does not implement allow_unpublish', packageName);
         continue;
       } else {
-        // @ts-ignore
-        plugin.allow_unpublish!(user, pkg, (err, ok: boolean): void => {
+        plugin.allow_unpublish(user, pkg, (err, ok): void => {
           if (err) {
             debug(
               'forbidden publish for %o, it will fallback on unpublish permissions',
@@ -324,9 +323,7 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
 
           if (_.isNil(ok) === true) {
             debug('bypass unpublish for %o, publish will handle the access', packageName);
-            // @ts-ignore
-            // eslint-disable-next-line
-            return this.allow_publish(...arguments);
+            return this.allow_publish({ packageName, packageVersion }, user, callback);
           }
 
           if (ok) {
@@ -350,7 +347,7 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
     const pkg = Object.assign(
       { name: packageName, version: packageVersion },
       getMatchedPackagesSpec(packageName, this.config.packages)
-    ) as any;
+    );
     debug('allow publish for %o init | plugins: %o', packageName, plugins.length);
 
     (function next(): void {
@@ -378,7 +375,7 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
     })();
   }
 
-  public apiJWTmiddleware(): RequestHandler {
+  public apiJWTmiddleware() {
     debug('jwt middleware');
     const plugins = this.plugins.slice(0);
     const helpers = { createAnonymousRemoteUser, createRemoteUser };
@@ -388,7 +385,6 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
       }
     }
 
-    // @ts-ignore
     return (req: $RequestExtend, res: $ResponseExtend, _next: NextFunction) => {
       req.pause();
 
@@ -519,8 +515,7 @@ class Auth implements IAuthMiddleware, TokenEncryption, pluginUtils.IBasicAuth {
   /**
    * JWT middleware for WebUI
    */
-  public webUIJWTmiddleware(): RequestHandler {
-    // @ts-ignore
+  public webUIJWTmiddleware(): $NextFunctionVer {
     return (req: $RequestExtend, res: $ResponseExtend, _next: NextFunction): void => {
       if (this._isRemoteUserValid(req.remote_user)) {
         return _next();

packages/cli/CHANGELOG.md

@@ -1,5 +1,47 @@
 # @verdaccio/cli
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/node-api@7.0.0-next.4
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/config@7.0.0-next.4
+- @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/logger@7.0.0-next.3
+  - @verdaccio/node-api@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+- @verdaccio/node-api@7.0.0-next.2
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+- @verdaccio/node-api@7.0.0-next.1
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -26,8 +26,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "description": "verdaccio CLI",
   "license": "MIT",
@@ -44,10 +43,10 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
-    "@verdaccio/node-api": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
+    "@verdaccio/node-api": "workspace:7.0.0-next.4",
     "clipanion": "3.2.1",
     "envinfo": "7.8.1",
     "kleur": "4.1.5",

packages/config/CHANGELOG.md

@@ -1,5 +1,43 @@
 # @verdaccio/config
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/utils@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/utils@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/utils@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/utils@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,16 +38,16 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/utils": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/utils": "workspace:7.0.0-next.4",
     "debug": "4.3.4",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "minimatch": "3.1.2",
+    "minimatch": "7.4.6",
     "yup": "0.32.11"
   },
   "devDependencies": {
-    "@types/minimatch": "3.0.5",
+    "@types/minimatch": "5.1.2",
     "@types/yup": "0.29.14"
   },
   "funding": {

packages/core/core/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @verdaccio/core
 
+## 7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+## 7.0.0-next.2
+
+## 7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -44,7 +44,7 @@
     "lodash": "4.17.21",
     "typedoc": "0.23.25",
     "typedoc-plugin-missing-exports": "latest",
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/file-locking/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Change Log
 
+## 12.0.0-next.1
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/core/file-locking/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/file-locking",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.1",
   "description": "library that handle file locking",
   "keywords": [
     "private",
@@ -39,7 +39,7 @@
     "lockfile": "1.0.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/file-locking/tests/lock.legacy.spec.ts

@@ -85,9 +85,7 @@ describe('testing locking', () => {
         parse: true,
       };
       readFile(getFilePath('package.fail.json'), options, (error: Error) => {
-        expect(error.message).toMatch(
-          /ENOENT: no such file or directory, open '(.*)package.fail.json'/
-        );
+        expect(error.message).toMatch(/ENOENT/);
         done();
       });
     });
@@ -97,7 +95,7 @@ describe('testing locking', () => {
         parse: true,
       };
       readFile(getFilePath('wrong.package.json'), options, (error: Error) => {
-        expect(error.message).toMatch(/Unexpected token } in JSON at position \d+/);
+        expect(error.message).toBeDefined();
         done();
       });
     });
@@ -120,7 +118,7 @@ describe('testing locking', () => {
       });
     });
 
-    test(
+    test.skip(
       'read file with options (parse, lock) should be found to be read and ' + 'fails to be parsed',
       (done) => {
         const options = {

packages/core/file-locking/tests/lock.spec.ts

@@ -80,18 +80,14 @@ describe('testing locking', () => {
       const options = {
         parse: true,
       };
-      await expect(readFileNext(getFilePath('package.fail.json'), options)).rejects.toThrow(
-        /ENOENT: no such file or directory, open '(.*)package.fail.json'/
-      );
+      await expect(readFileNext(getFilePath('package.fail.json'), options)).rejects.toThrow();
     });
 
     test('read file with options should be found to be read it and fails to be parsed', async () => {
       const options = {
         parse: true,
       };
-      await expect(readFileNext(getFilePath('wrong.package.json'), options)).rejects.toThrow(
-        'Unexpected token } in JSON at position 44'
-      );
+      await expect(readFileNext(getFilePath('wrong.package.json'), options)).rejects.toThrow();
     });
 
     test('read file with options (parse, lock) should be found to be read it as object', async () => {
@@ -109,7 +105,7 @@ describe('testing locking', () => {
       removeTempFile('package2.json.lock');
     });
 
-    test(
+    test.skip(
       'read file with options (parse, lock) should be found to be read and ' + 'fails to be parsed',
       async () => {
         const options = {

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Change Log
 
+## 12.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/url@12.0.0-next.4
+- @verdaccio/utils@7.0.0-next.4
+
+## 12.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/url@12.0.0-next.3
+  - @verdaccio/utils@7.0.0-next.3
+
+## 12.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/url@12.0.0-next.2
+- @verdaccio/utils@7.0.0-next.2
+
+## 12.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/url@12.0.0-next.1
+- @verdaccio/utils@7.0.0-next.1
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.4",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -34,13 +34,13 @@
   },
   "dependencies": {
     "debug": "4.3.4",
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/url": "workspace:12.0.0-next.0",
-    "@verdaccio/utils": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/url": "workspace:12.0.0-next.4",
+    "@verdaccio/utils": "workspace:7.0.0-next.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
     "node-mocks-http": "1.13.0"
   },
   "scripts": {

packages/core/types/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 12.0.0-next.1
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/core/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.1",
   "description": "verdaccio types definitions",
   "keywords": [
     "private",
@@ -17,7 +17,7 @@
   "license": "MIT",
   "homepage": "https://verdaccio.org",
   "engines": {
-    "node": ">=12"
+    "node": ">=18"
   },
   "repository": {
     "type": "https",

packages/core/types/src/configuration.ts

@@ -98,6 +98,7 @@ export type CommonWebConf = {
   showFooter?: boolean;
   showThemeSwitch?: boolean;
   showDownloadTarball?: boolean;
+  hideDeprecatedVersions?: boolean;
   primaryColor: string;
   showRaw?: boolean;
 };
@@ -150,18 +151,29 @@ export interface JWTOptions {
   verify: JWTVerifyOptions;
 }
 
+export type Algorithm =
+  | 'HS256'
+  | 'HS384'
+  | 'HS512'
+  | 'RS256'
+  | 'RS384'
+  | 'RS512'
+  | 'ES256'
+  | 'ES384'
+  | 'ES512'
+  | 'PS256'
+  | 'PS384'
+  | 'PS512'
+  | 'none';
+
 export interface JWTSignOptions {
-  algorithm?: string;
-  expiresIn?: string;
-  notBefore?: string;
-  ignoreExpiration?: boolean;
-  maxAge?: string | number;
-  clockTimestamp?: number;
+  algorithm?: Algorithm | undefined;
+  expiresIn?: string | number | undefined;
+  notBefore?: string | number | undefined;
 }
 
 export interface JWTVerifyOptions {
-  algorithm?: string;
-  expiresIn?: string;
+  algorithm?: Algorithm | undefined;
   notBefore?: string | number;
   ignoreExpiration?: boolean;
   maxAge?: string | number;

packages/core/types/src/manifest.ts

@@ -3,7 +3,7 @@ export interface PackageAccess {
   publish?: string[];
   proxy?: string[];
   access?: string[];
-  unpublish: string[];
+  unpublish?: string[];
 }
 
 export interface PackageList {

packages/core/url/CHANGELOG.md

@@ -1,5 +1,39 @@
 # Change Log
 
+## 12.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+
+## 12.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+
+## 12.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+
+## 12.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.4",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -33,13 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
     "debug": "4.3.4",
     "lodash": "4.17.21",
     "validator": "13.9.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
     "node-mocks-http": "1.13.0"
   },
   "scripts": {

packages/hooks/CHANGELOG.md

@@ -1,5 +1,39 @@
 # @verdaccio/hooks
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/logger@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -26,21 +26,21 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=12"
+    "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
     "core-js": "3.30.2",
     "debug": "4.3.4",
-    "handlebars": "4.7.7",
-    "got-cjs": "12.5.4"
+    "got-cjs": "12.5.4",
+    "handlebars": "4.7.7"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0",
-    "nock": "13.2.9"
+    "@verdaccio/auth": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
+    "nock": "13.3.3"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/loaders/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @verdaccio/loaders
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/logger@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -13,14 +13,14 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "verdaccio-auth-memory": "workspace:*",
     "customprefix-auth": "2.0.0-next.0"
@@ -38,7 +38,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=12"
+    "node": ">=18"
   },
   "license": "MIT",
   "scripts": {

packages/logger/logger-7/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @verdaccio/logger-7
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/logger-commons@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/logger/logger-7/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-7",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "logger for verdaccio 5.x version",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:7.0.0-next.0",
+    "@verdaccio/logger-commons": "workspace:7.0.0-next.4",
     "pino": "7.11.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @verdaccio/logger-commons
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/logger-prettify@7.0.0-next.1
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,14 +38,14 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/logger-prettify": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/logger-prettify": "workspace:7.0.0-next.1",
     "debug": "4.3.4",
     "colorette": "2.0.20"
   },
   "devDependencies": {
     "pino": "7.11.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-prettify/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/logger-prettify
 
+## 7.0.0-next.1
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/logger/logger-prettify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-prettify",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.1",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @verdaccio/logger
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/logger-commons@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/logger-commons@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -26,7 +26,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=12"
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:7.0.0-next.0",
+    "@verdaccio/logger-commons": "workspace:7.0.0-next.4",
     "pino": "8.14.1"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "funding": {
     "type": "opencollective",

packages/middleware/CHANGELOG.md

@@ -1,5 +1,51 @@
 # @verdaccio/middleware
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/config@7.0.0-next.4
+- @verdaccio/url@12.0.0-next.4
+- @verdaccio/utils@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/url@12.0.0-next.3
+  - @verdaccio/utils@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+- @verdaccio/url@12.0.0-next.2
+- @verdaccio/utils@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+- @verdaccio/url@12.0.0-next.1
+- @verdaccio/utils@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "express middleware utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,10 +38,10 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/utils": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/url": "workspace:12.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/utils": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/url": "workspace:12.0.0-next.4",
     "debug": "4.3.4",
     "lru-cache": "7.18.3",
     "express": "4.18.2",
@@ -54,7 +54,7 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
     "body-parser": "1.20.2",
     "supertest": "6.3.3"
   }

packages/middleware/src/middlewares/antiLoop.ts

@@ -8,7 +8,7 @@ import { $NextFunctionVer, $RequestExtend, $ResponseExtend } from '../types';
  * @param config
  * @returns
  */
-export function antiLoop(config: Config): Function {
+export function antiLoop(config: Config) {
   return function (req: $RequestExtend, res: $ResponseExtend, next: $NextFunctionVer): void {
     if (req?.headers?.via != null) {
       const arr = req.get('via')?.split(',');

packages/middleware/src/middlewares/web/utils/renderHTML.ts

@@ -42,6 +42,7 @@ export default function renderHTML(config: ConfigYaml, manifest, manifestFiles,
   const base = getPublicUrl(config?.url_prefix, req);
   const basename = new URL(base).pathname;
   const language = config?.i18n?.web ?? DEFAULT_LANGUAGE;
+  const hideDeprecatedVersions = config?.web?.hideDeprecatedVersions ?? false;
   // @ts-ignore
   const needHtmlCache = [undefined, null].includes(config?.web?.html_cache)
     ? true
@@ -99,6 +100,7 @@ export default function renderHTML(config: ConfigYaml, manifest, manifestFiles,
     title,
     scope,
     language,
+    hideDeprecatedVersions,
   };
 
   let webPage;

packages/node-api/CHANGELOG.md

@@ -1,5 +1,52 @@
 # @verdaccio/node-api
 
+## 7.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/server@7.0.0-next.4
+- @verdaccio/server-fastify@7.0.0-next.4
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/config@7.0.0-next.4
+- @verdaccio/logger@7.0.0-next.4
+
+## 7.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+- Updated dependencies [3ca405618]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+  - @verdaccio/logger@7.0.0-next.3
+  - @verdaccio/server@7.0.0-next.3
+  - @verdaccio/server-fastify@7.0.0-next.3
+
+## 7.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+- @verdaccio/server@7.0.0-next.2
+- @verdaccio/server-fastify@7.0.0-next.2
+- @verdaccio/logger@7.0.0-next.2
+
+## 7.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+- @verdaccio/server@7.0.0-next.1
+- @verdaccio/server-fastify@7.0.0-next.1
+- @verdaccio/logger@7.0.0-next.1
+
 ## 7.0.0-next.0
 
 ### Major Changes

packages/node-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/node-api",
-  "version": "7.0.0-next.0",
+  "version": "7.0.0-next.4",
   "description": "node API",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -25,8 +25,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "scripts": {
     "clean": "rimraf ./build",
@@ -39,19 +38,20 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
-    "@verdaccio/server": "workspace:7.0.0-next.0",
-    "@verdaccio/server-fastify": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
+    "@verdaccio/server": "workspace:7.0.0-next.4",
+    "@verdaccio/server-fastify": "workspace:7.0.0-next.4",
     "core-js": "3.30.2",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
     "selfsigned": "1.10.14",
-    "supertest": "6.3.3"
+    "supertest": "6.3.3",
+    "jest": "29.7.0"
   },
   "publishConfig": {
     "access": "public"

packages/plugins/active-directory/package.json

@@ -30,15 +30,14 @@
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "dependencies": {
     "@verdaccio/core": "workspace:6.0.0-6-next.5",
     "activedirectory2": "2.1.0"
   },
   "devDependencies": {
-    "@types/activedirectory2": "1.2.3",
+    "@types/activedirectory2": "1.2.4",
     "@verdaccio/types": "workspace:11.0.0-6-next.12"
   },
   "scripts": {

packages/plugins/audit/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Change Log
 
+## 12.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+- @verdaccio/config@7.0.0-next.4
+
+## 12.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Minor Changes
+
+- daceb6d87: restore legacy support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/config@7.0.0-next.3
+  - @verdaccio/core@7.0.0-next.3
+
+## 12.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+- @verdaccio/config@7.0.0-next.2
+
+## 12.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+- @verdaccio/config@7.0.0-next.1
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/plugins/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.4",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "private",
@@ -30,17 +30,17 @@
     "node": ">=12"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
     "express": "4.18.2",
     "https-proxy-agent": "5.0.1",
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:12.0.0-next.0",
-    "@verdaccio/auth": "workspace:7.0.0-next.0",
-    "@verdaccio/logger": "workspace:7.0.0-next.0",
-    "nock": "13.2.9",
+    "@verdaccio/auth": "workspace:7.0.0-next.4",
+    "@verdaccio/logger": "workspace:7.0.0-next.4",
+    "@verdaccio/types": "workspace:12.0.0-next.1",
+    "nock": "13.3.3",
     "supertest": "6.3.3"
   },
   "scripts": {

packages/plugins/auth-memory/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Change Log
 
+## 12.0.0-next.4
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.4
+
+## 12.0.0-next.3
+
+### Major Changes
+
+- e7ebccb61: update major dependencies, remove old nodejs support
+
+### Patch Changes
+
+- Updated dependencies [daceb6d87]
+- Updated dependencies [e7ebccb61]
+  - @verdaccio/core@7.0.0-next.3
+
+## 12.0.0-next.2
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.2
+
+## 12.0.0-next.1
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next.1
+
 ## 12.0.0-next.0
 
 ### Major Changes

packages/plugins/auth-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-auth-memory",
-  "version": "12.0.0-next.0",
+  "version": "12.0.0-next.4",
   "description": "Auth plugin for Verdaccio that keeps users in memory",
   "keywords": [
     "private",
@@ -27,17 +27,16 @@
   "main": "build/index.js",
   "types": "build/src/index.d.ts",
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next.0",
+    "@verdaccio/core": "workspace:7.0.0-next.4",
     "debug": "4.3.4"
   },
   "devDependencies": {
-    "@types/debug": "^4.1.7",
-    "@verdaccio/config": "workspace:7.0.0-next.0",
-    "@verdaccio/types": "workspace:12.0.0-next.0"
+    "@types/debug": "^4.1.9",
+    "@verdaccio/config": "workspace:7.0.0-next.4",
+    "@verdaccio/types": "workspace:12.0.0-next.1"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/aws-storage/package.json

@@ -14,8 +14,7 @@
     "verdaccio"
   ],
   "engines": {
-    "node": ">=14",
-    "npm": ">=6"
+    "node": ">=18"
   },
   "author": "Juan Picado <juanpicado19@gmail.com>",
   "license": "MIT",