chore: replace mime package with constants (#5471)

* chore: replace mime package with constants

* Revert types/mime

* Revert types/mime

* Update lock file

.changeset/afraid-cars-sneeze.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': minor
+---
+
+feat(loader): support scoped plugins in plugin folder

.changeset/afraid-cheetahs-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): check token expiry on refresh/timer

.changeset/beige-cars-raise.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-memory': minor
+---
+
+feat: rewrite of memory storage

.changeset/beige-lions-type.md

@@ -10,7 +10,6 @@
 'verdaccio-memory': major
 '@verdaccio/search-indexer': major
 '@verdaccio/server': major
-'@verdaccio/server-fastify': major
 '@verdaccio/logger': major
 'verdaccio-audit': major
 '@verdaccio/ui-components': major

.changeset/beige-timers-greet.md

@@ -0,0 +1,10 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore: replace conditional require(fs/promises) pattern

.changeset/brave-ears-drive.md

@@ -0,0 +1,17 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/server': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/config': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+chore(utils): replace @verdaccio/utils dependency with core

.changeset/brave-rockets-remember.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/store': patch
+---
+
+fix(storage): check_owners with anonymous access

.changeset/breezy-toys-judge.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+fix(server): web-enabled test

.changeset/bright-mugs-buy.md

@@ -0,0 +1,20 @@
+---
+'docusaurus-plugin-contributors': patch
+'generator-verdaccio-plugin': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+'@verdaccio/hooks': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+chore(deps): built-in node imports

.changeset/clean-dryers-hug.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(deps): express

.changeset/clean-rings-listen.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/middleware': patch
+'@verdaccio/ui-i18n': patch
+---
+
+feat: web v1 login frontend (experimental)

.changeset/cool-balloons-search.md

@@ -0,0 +1,7 @@
+---
+'verdaccio-htpasswd': patch
+'verdaccio-memory': patch
+'verdaccio-audit': patch
+---
+
+chore(deps): plugins audit, htpasswd, memory

.changeset/cool-emus-know.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/url': patch
+'@verdaccio/config': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+---
+
+chore(deps): api, auth, cli, config, url

.changeset/cuddly-paws-laugh.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/config': patch
+'@verdaccio/logger-commons': patch
+'@verdaccio/types': patch
+---
+
+feat(logger): support redacting sensitive data

.changeset/curvy-bananas-complain.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+---
+
+fix(config): avoid warning for multiple addresses

.changeset/dirty-countries-play.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): avoid ts error for Alerts

.changeset/dry-cups-hear.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/test-helper': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+chore: publish @verdaccio/test-helper

.changeset/famous-hornets-know.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+---
+
+fix(proxy): proxy protocol check

.changeset/few-beds-itch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/types': patch
+---
+
+chore(types): use "Person" instead of "Author"

.changeset/few-ears-deny.md

@@ -1,6 +1,5 @@
 ---
 '@verdaccio/local-storage': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/middleware': patch
 '@verdaccio/core': patch
 '@verdaccio/config': patch

.changeset/few-poets-bathe.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/signature': patch
+'@verdaccio/utils': patch
+---
+
+chore(deps): signature, utils

.changeset/flat-rules-design.md

@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore(deps): verdaccio package

.changeset/four-buttons-remember.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(web): move utils to web package

.changeset/friendly-feet-sing.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+chore(deps): local-storage

.changeset/friendly-worms-drum.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore: add types for createConfigFolder

.changeset/fuzzy-cups-help.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/api': patch
+---
+
+chore: replace mime package with constants

.changeset/fuzzy-ears-yawn.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': patch
+---
+
+add `@verdaccio/core` as a dependency

.changeset/gold-parents-shave.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/core': minor
+'@verdaccio/node-api': minor
+'@verdaccio/config': minor
+---
+
+feat: getListenAddress getConfigParsed methods

.changeset/great-candles-hang.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+chore(ui): minor app improvements

.changeset/hip-deers-join.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+chore(core): http status codes

.changeset/hungry-books-bathe.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(deps): web package

.changeset/hungry-dolls-destroy.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+fix(local-storage): uncontrolled data used in path expression

.changeset/large-turkeys-change.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+feat: add legacyMergeConfigs as option

.changeset/lemon-baboons-double.md

@@ -0,0 +1,13 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/ui-theme': patch
+'verdaccio-memory': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/eslint-config': patch
+'@verdaccio/middleware': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/api': patch
+---
+
+chore(lint): switch rules from jest to vitest

.changeset/loud-dingos-cough.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/e2e-cli-npm-common': patch
+---
+
+fix(e2e): test.each was not working as expected

.changeset/mean-timers-look.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(express): housekeeping

.changeset/modern-llamas-know.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/website': patch
+---
+
+- Updated the docs to show how we can make AWS CodeArtifact work with Verdaccio
+- Added the example uplinks configuration

.changeset/nasty-cooks-watch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/e2e-cli-npm11': patch
+'@verdaccio/e2e-cli-npm-common': patch
+---
+
+feat(e2e): add npm11

.changeset/nine-onions-talk.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): search chips when showUplinks is false

.changeset/pink-jeans-lick.md

@@ -11,7 +11,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/ui-components': patch

.changeset/pink-mayflies-hide.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/node-api': patch
+'@verdaccio/web': patch
+---
+
+chore(deps): node-api, fastify, ui-comp, web

.changeset/pink-pants-try.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/loaders': patch
+---
+
+fix(express): error loading middleware plugins

.changeset/poor-hats-smile.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/core': patch
+'@verdaccio/config': patch
+'@verdaccio/api': patch
+---
+
+feat: web v1 login backend (experimental)

.changeset/poor-queens-shop.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/signature': patch
+'@verdaccio/config': patch
+---
+
+chore(signature): remove duplicate code

.changeset/pre.json

@@ -41,7 +41,6 @@
     "@verdaccio/search": "7.0.0",
     "@verdaccio/search-indexer": "7.0.0",
     "@verdaccio/server": "7.0.0",
-    "@verdaccio/server-fastify": "7.0.0",
     "@verdaccio/signature": "7.0.0",
     "@verdaccio/cli-standalone": "7.0.0",
     "@verdaccio/store": "7.0.0",
@@ -61,89 +60,153 @@
     "@verdaccio/e2e-cli-pnpm10": "1.0.0",
     "docusaurus-plugin-downloads": "2.0.0",
     "@verdaccio/local-publish": "0.0.2",
-    "@verdaccio/e2e-cli-npm10": "1.0.1"
+    "@verdaccio/e2e-cli-npm10": "1.0.1",
+    "@verdaccio/e2e-cli-npm11": "1.0.2-next-8.0"
   },
   "changesets": [
+    "afraid-cars-sneeze",
+    "afraid-cheetahs-rule",
     "angry-doors-tan",
+    "beige-cars-raise",
     "beige-lions-type",
+    "beige-timers-greet",
     "blue-paws-cheer",
+    "brave-ears-drive",
+    "brave-rockets-remember",
     "breezy-geckos-search",
+    "breezy-toys-judge",
     "bright-bobcats-ring",
+    "bright-mugs-buy",
     "brown-lions-talk",
     "brown-planets-approve",
     "calm-mangos-compare",
     "chatty-apricots-report",
     "clean-beds-wash",
+    "clean-dryers-hug",
+    "clean-rings-listen",
     "clever-bees-happen",
+    "cool-balloons-search",
     "cool-seals-watch",
+    "cuddly-paws-laugh",
     "curly-mirrors-smile",
+    "curvy-bananas-complain",
     "curvy-rockets-camp",
     "cyan-snakes-kiss",
+    "dirty-countries-play",
+    "dry-cups-hear",
     "early-eyes-float",
     "early-trainers-grin",
     "eight-countries-think",
     "eighty-apes-think",
     "eleven-rocks-dream",
+    "few-beds-itch",
     "few-ears-deny",
+    "few-poets-bathe",
     "fifty-falcons-design",
+    "flat-rules-design",
     "forty-hounds-matter",
+    "four-buttons-remember",
     "fresh-owls-hunt",
+    "friendly-feet-sing",
+    "friendly-worms-drum",
     "funny-fireants-tan",
+    "fuzzy-ears-yawn",
     "gentle-stingrays-repeat",
     "gold-files-speak",
+    "gold-parents-shave",
     "gold-squids-watch",
+    "great-candles-hang",
     "green-eagles-boil",
     "healthy-ducks-drive",
     "healthy-zoos-lie",
+    "hip-deers-join",
     "hip-eggs-serve",
     "hip-suns-jam",
     "hot-crews-live",
+    "hungry-books-bathe",
+    "hungry-dolls-destroy",
     "itchy-glasses-end",
+    "large-turkeys-change",
     "long-eyes-drum",
     "long-singers-drive",
+    "loud-dingos-cough",
     "lucky-crabs-enjoy",
+    "mean-timers-look",
+    "modern-llamas-know",
+    "nasty-cooks-watch",
     "nasty-experts-bow",
     "nice-garlics-tie",
     "nine-countries-remember",
+    "nine-onions-talk",
     "ninety-geese-do",
     "ninety-hotels-dance",
     "odd-fishes-cry",
     "old-clocks-destroy",
     "pink-jeans-lick",
+    "pink-pants-try",
+    "poor-hats-smile",
+    "poor-queens-shop",
     "popular-trees-grin",
+    "pretty-beds-destroy",
+    "pretty-carrots-smash",
+    "pretty-news-do",
     "proud-houses-switch",
     "purple-planes-do",
     "quick-avocados-type",
     "quick-seas-deny",
+    "rare-mirrors-notice",
+    "real-balloons-travel",
     "real-seahorses-change",
     "red-dolls-repair",
+    "rotten-bananas-attend",
     "rotten-melons-notice",
     "rotton-readers-shave",
     "rude-birds-design",
     "rude-socks-walk",
     "serious-apes-rule",
+    "seven-peas-obey",
+    "seven-suits-kneel",
+    "sharp-queens-rhyme",
     "shiny-buttons-laugh",
     "short-mails-smoke",
     "short-turkeys-boil",
     "silent-bags-listen",
     "silent-tips-admire",
     "silver-houses-remain",
+    "silver-insects-train",
+    "six-planes-appear",
     "slow-cars-guess",
     "smooth-games-share",
+    "soft-berries-fail",
     "strange-pants-chew",
     "stupid-camels-build",
+    "stupid-socks-grow",
+    "sweet-bulldogs-doubt",
     "sweet-crabs-deliver",
+    "swift-knives-shop",
+    "swift-mangos-grab",
+    "swift-zebras-cheer",
+    "tame-hairs-drive",
     "ten-jeans-approve",
     "tender-buckets-smoke",
+    "thick-dolphins-rule",
+    "thick-insects-run",
     "thirty-comics-trade",
+    "tidy-socks-battle",
     "tricky-impalas-shake",
+    "tricky-kiwis-thank",
     "tricky-knives-end",
     "twelve-games-wonder",
+    "twelve-socks-accept",
     "violet-baboons-beg",
     "violet-bobcats-allow",
     "violet-boxes-float",
+    "violet-poems-walk",
     "weak-cherries-serve",
     "wet-cats-behave",
+    "wet-comics-listen",
+    "wicked-points-relate",
+    "wild-coins-lie",
     "yellow-flies-sniff"
   ]
 }

.changeset/pretty-beds-destroy.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix: restore minimatch major version

.changeset/pretty-carrots-smash.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+Fix inconsistency in filter plugin invocation upon receiving 304 from uplink after uplink.maxage has passed

.changeset/pretty-news-do.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+fix: minor logger missing type

.changeset/rare-mirrors-notice.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+chore(auth): typings

.changeset/real-balloons-travel.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+fix: config web login default

.changeset/rotten-bananas-attend.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+chore(auth): multiple plugins test

.changeset/seven-eggs-sparkle.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): regression after mui 7 upgrade

.changeset/seven-peas-obey.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/file-locking': patch
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/url': patch
+---
+
+chore(deps): clean up core modules

.changeset/seven-suits-kneel.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/proxy': patch
+---
+
+chore(proxy): update tests

.changeset/sharp-queens-rhyme.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): avoid ts errors for CircularProgress

.changeset/shiny-buttons-laugh.md

@@ -12,7 +12,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 'verdaccio-audit': patch
 '@verdaccio/test-helper': patch

.changeset/silver-insects-train.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): fix ts error due to excluded test folder

.changeset/six-planes-appear.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/logger-prettify': patch
+'@verdaccio/logger-commons': patch
+'@verdaccio/loaders': patch
+'@verdaccio/hooks': patch
+---
+
+chore(deps): hooks, loaders, logger

.changeset/soft-berries-fail.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): update deps and storybook

.changeset/stupid-socks-grow.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+chore(deps): middleware

.changeset/sweet-bulldogs-doubt.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build (2)

.changeset/swift-knives-shop.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+---
+
+chore(core): move more utils to core

.changeset/swift-mangos-grab.md

@@ -0,0 +1,12 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/core': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix(config): server settings

.changeset/swift-zebras-cheer.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+fix(api): cidr whitelist for tokens

.changeset/tame-hairs-drive.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/search-indexer': patch
+'@verdaccio/node-api': patch
+'@verdaccio/search': patch
+'@verdaccio/proxy': patch
+---
+
+chore(deps): node-api, proxy, search, search-indexer

.changeset/thick-dolphins-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): properly derive the html cache key

.changeset/thick-insects-run.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+chore(deps): storage

.changeset/tidy-socks-battle.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix(core): remove `lodash` from a dependency

.changeset/tricky-kiwis-thank.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/test-cli-commons': patch
+'@verdaccio/e2e-cli-pnpm10': patch
+'@verdaccio/e2e-cli-npm10': patch
+'@verdaccio/e2e-cli-npm11': patch
+'@verdaccio/e2e-cli-pnpm8': patch
+'@verdaccio/e2e-cli-pnpm9': patch
+'@verdaccio/e2e-cli-yarn1': patch
+'@verdaccio/e2e-cli-yarn2': patch
+'@verdaccio/e2e-cli-yarn3': patch
+'@verdaccio/e2e-cli-yarn4': patch
+'@verdaccio/e2e-cli-npm6': patch
+'@verdaccio/e2e-cli-npm7': patch
+'@verdaccio/e2e-cli-npm8': patch
+'@verdaccio/e2e-cli-npm9': patch
+---
+
+chore(deps): e2e-cli

.changeset/twelve-socks-accept.md

@@ -0,0 +1,12 @@
+---
+'verdaccio-auth-memory': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+'@verdaccio/e2e-ui': patch
+---
+
+chore(deps): sync and pin dependencies

.changeset/violet-poems-walk.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+chore(api): remove obsolete tests

.changeset/weak-cherries-serve.md

@@ -4,7 +4,6 @@
 '@verdaccio/ui-theme': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/middleware': patch
 'verdaccio': patch

.changeset/wet-comics-listen.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build

.changeset/wicked-points-relate.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/auth': patch
+'@verdaccio/signature': patch
+'@verdaccio/types': patch
+---
+
+fix: support JWT sign and verify options

.changeset/wild-coins-lie.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/tarball': patch
+---
+
+chore(tarball): remove lodash, fix typing

.eslintignore

@@ -19,3 +19,5 @@ yarn.js
 packages/ui-components/storybook-static
 dist.js
 bundle.js
+# generator templates
+packages/tools/generator-verdaccio-plugin/generators/app/**

.eslintrc.js

@@ -1,3 +1,3 @@
 module.exports = {
-  extends: ['@verdaccio/eslint-config'],
+  extends: ['@verdaccio/eslint-config', 'plugin:storybook/recommended'],
 };

.github/ISSUE_TEMPLATE/bug_report.md

@@ -17,24 +17,27 @@ assignees: ''
  - If you are willing to fix it, there is a checkbox at the bottom.
 -->
 
-**Your Environment**
-  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
- * **verdaccio version**: 5.x.x
- * **node version** [12.x.x, 14.x.x]:
- * **package manager**: [npm@7, pnpm@6, yarn@2]
- * **os**: [mac, windows@10, linux]
- * **platform**: [npm, docker, helm, other]
+**Your environment**
+
+<!-- bugs below the version 6.x will be closed, see SECURITY.md and VERSIONS.md for more details -->
+<!-- Please paste the results of running `verdaccio --version` --> 
+* **verdaccio version**: 6.x.x
+
+<!-- Please paste the results of running `verdaccio --info` --> 
+* **node version** [20.x.x, 22.x.x]:
+* **package manager**: [npm@10.x.x, pnpm@10.x.x, yarn@2.x.x]
+* **os**: [mac, windows@11, linux]
+* **platform**: [node, docker, helm, other]
+* **reverse proxy**: [yes, no]
 
 **Describe the bug**
 
 <!-- A clear and concise description of what the bug is. -->
 
-**To Reproduce**
+**Steps to reproduce**
 
 <!-- IMPORTANT:
- - How to reproduce the issue
- - Steps to reproduce the issue
-
+Add step-by-step instructions on how to reproduce the bug.
 Be aware, the lack of reproducible steps the issue might cause your ticket to be closed.
 -->
 
@@ -42,17 +45,14 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots, server logs, package manager log**
+**Screenshots, Verdaccio server log, package manager log**
 
 <!-- If applicable, add screenshots to help explain your problem. -->
 
-**Configuration File (cat ~/.config/verdaccio/config.yaml)**
+**Configuration file**
 
-<!-- Please be careful do not leak any sensitive information, remove tokens -->
-
-**Environment information**
-
-<!-- Please paste the results of running `verdaccio --info` -->
+<!-- cat ~/.config/verdaccio/config.yaml -->
+<!-- Please be careful do not leak any sensitive information, remove usernames and tokens -->
 
 **Debugging output**
 
@@ -66,6 +66,5 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 - [ ] I'm willing to fix this bug 🥇 
 
 <!--
-
 IMPORTANT: please do not attach external files, all content should be visible from any device.
 -->

.github/actions/build-app/action.yml

@@ -16,7 +16,7 @@ runs:
     - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
       uses: ./.github/actions/install-app-node
       with:
-        node-version: ${{ inputs.node_version }}
+        node-version: ${{ inputs.node-version }}
     - name: build
       run: pnpm build
       shell: bash

.github/actions/cache-packages/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache Packages
       id: cache-packages
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ./packages/
         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache .pnpm-store
       id: cache-npm
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}

.github/actions/install-app-node/action.yml

@@ -22,7 +22,7 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: ${{ inputs.node-version }}
     - name: Install pnpm

.github/actions/install-app/action.yml

@@ -15,7 +15,7 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: Install pnpm

.github/workflows/changesets-pr.yml

@@ -12,7 +12,7 @@ jobs:
     if: github.event.pull_request.head.repo.fork == false
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/changesets.yml

@@ -17,7 +17,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/ci.yml

@@ -35,7 +35,7 @@ jobs:
             --health-timeout=20s    
             --health-retries=6
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
   lint:
@@ -43,7 +43,7 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
         with:
@@ -55,7 +55,7 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
         with:
@@ -68,11 +68,11 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        node_version: [18, 20, 21, 22, 23]
+        node_version: [18, 20, 22, 24]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node ${{ matrix.node_version }}
         uses: ./.github/actions/build-app
         with:
@@ -85,8 +85,8 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
@@ -94,7 +94,7 @@ jobs:
           npm install --global corepack@latest
           corepack enable
           corepack install
-      - uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -29,7 +29,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -37,7 +37,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
         with:
           config: |
             paths-ignore:
@@ -50,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5

.github/workflows/docker-proxy-apache-e2e.yml

@@ -20,13 +20,13 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -18,13 +18,13 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       
     - name: Start containers
       run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-publish.yml

@@ -2,50 +2,49 @@ name: Docker publish to docker.io
 
 on:
   push:
-    paths:
-      - .github/workflows/docker-publish.yml
-      - .github/workflows/docker-publish.yml
-      - 'packages/**'
-      - 'docker-bin/**'
-      - 'package.json'
-      - 'pnpm-*.yaml'
-      - 'Dockerfile'
-      - '.dockerignore'
     branches:
       - 'master'
     tags:
       - 'v*'
 
 permissions:
-  contents: read  #  to fetch code (actions/checkout)
+  contents: read
 
 jobs:
   docker:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
-      - uses: docker/setup-buildx-action@v1
+      - name: Checkout repository
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
         with:
           driver-opts: network=host
-      - uses: docker/login-action@v1
-        name: Login Docker Hub
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      - name: Prepare docker image tags
+
+      - name: Prepare Docker image tags
         id: docker_meta
-        uses: crazy-max/ghaction-docker-meta@v1
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
         with:
           images: ${{ github.repository }}
-          tag-custom: nightly-master
-          tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
-          tag-latest: false
-          tag-semver: |
-            {{version}}
-            {{major}}
-            {{major}}.{{minor}}
+          tags: |
+            type=raw,value=nightly-master
+            type=raw,value=latest,enable=false
+          labels: |
+            org.opencontainers.image.source=${{ github.repositoryUrl }}
+            org.opencontainers.image.created=${{ steps.docker_meta.outputs.created }}
+            org.opencontainers.image.version=${{ steps.docker_meta.outputs.version }}
+
       - name: Build & Push
         uses: docker/build-push-action@v6
         with:

.github/workflows/e2e-ci.yml

@@ -1,11 +1,14 @@
 name: E2E CLI
 
 on: [pull_request]
+
 permissions:
   contents: read
+
 concurrency:
   group: e2e-ci-${{ github.ref }}
   cancel-in-progress: true
+
 jobs:
   prepare:
     runs-on: ubuntu-latest
@@ -18,22 +21,12 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
-  build:
-    needs: [prepare]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Cache packages
-        uses: ./.github/actions/cache-packages
+
   e2e-cli-npm:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: false
       matrix:
@@ -43,26 +36,29 @@ jobs:
             npm7,
             npm8,
             npm9,
-            npm10
+            npm10,
+            npm11,
           ]
-        node: [22]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
 
   e2e-cli-pnpm:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: true
       matrix:
@@ -72,23 +68,26 @@ jobs:
             pnpm9,
             pnpm10,
           ]
-        node: [22]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+
   e2e-cli-yarn:
-    needs: [prepare, build]
+    needs: [prepare]
     strategy:
       fail-fast: false
       matrix:
@@ -99,19 +98,20 @@ jobs:
             yarn3,
             yarn4
           ]
-        node: [22]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
         uses: ./.github/actions/install-app-node
         with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
           reporter: 'default'
           loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
       - name: Test CLI
         run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
-

.github/workflows/e2e-ui.yml

@@ -19,14 +19,14 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node 20
         uses: ./.github/actions/build-app
         with:
           node-version: 20
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/plugin-generator-e2e.yaml

@@ -16,15 +16,15 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        node-version: [20, 22, 23]
+        node-version: [20, 22, 24]
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node ${{ matrix.node_version }}
         uses: ./.github/actions/build-app
         with:
           node-version: ${{ matrix.node_version }}
       - name: install verdaccio
-        run: npm install -g verdaccio@5
+        run: npm install -g verdaccio@6
       - name: Start server
         run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
       - name: ping server

.github/workflows/shared-docker-publish.yml

@@ -23,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
       - uses: docker/setup-buildx-action@v1
         with:

.github/workflows/static-data.yml

@@ -21,7 +21,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
           persist-credentials: false
           fetch-depth: 0
@@ -36,7 +36,7 @@ jobs:
       - name: Get docker downloads
         run: pnpm --filter @verdaccio/local-scripts run pull:docker
       - name: Get npmjs monhtly downloads
-        run: pnpm --filter @verdaccio/local-scripts run downloads:mounthly
+        run: pnpm --filter @verdaccio/local-scripts run downloads:monthly
       - name: Get npmjs year downloads
         run: pnpm --filter @verdaccio/local-scripts run downloads:yearly
       - name: update contributors

.github/workflows/test-docker-build.yml

@@ -6,8 +6,25 @@ jobs:
     name: Test Docker Build
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - name: Build
-      run: docker build .
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - name: Build Docker image
+      run: docker build -t verdaccio-test .
       env:
         VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
+    - name: Run Verdaccio in background
+      run: |
+        docker run -d --name verdaccio-test -p 4873:4873 verdaccio-test
+        sleep 10  # Give Verdaccio some time to start
+
+    - name: Test npm install from local Verdaccio
+      run: |
+        npm set registry http://localhost:4873
+        npm install -g verdaccio 
+
+    - name: Show Verdaccio logs (for debugging)
+      if: always()
+      run: docker logs verdaccio-test
+
+    - name: Stop Verdaccio
+      if: always()
+      run: docker stop verdaccio-test

.github/workflows/test-publish-package.yml

@@ -1,13 +1,20 @@
 on:
   workflow_call:
+    inputs:
+      verdaccio-version:
+        description: 'Verdaccio version to use'
+        required: false
+        default: 'latest'
+        type: string
 
 jobs:
   testVerdaccio:
     name: Test Verdaccio Publish
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
     - name: Publish
-      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      uses: verdaccio/github-actions/publish@master # always latest by design 
       with:
         args: -d
+        verdaccio-version: ${{ inputs.verdaccio-version }}

.github/workflows/ui-components.yml

@@ -21,7 +21,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Install dependencies with a custom registry
         uses: ./.github/actions/install-app
       - name: crowdin download

.github/workflows/website.yml

@@ -31,7 +31,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
       - name: Build application with Node 20
         uses: ./.github/actions/build-app
         with:
@@ -39,7 +39,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/local-scripts build
       - name: Cache Docusaurus Build
-        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -7,10 +7,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -44,10 +44,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -80,10 +80,10 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'