chore: update versions (6-next) (#3620)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/giant-years-trade.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/test-cli-commons': minor
+'@verdaccio/config': minor
+---
+
+chore: rollback yaml dep support old nodejs versions

.changeset/old-apples-fail.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/web': patch
+---
+
+fix: missing logo on header

.changeset/poor-suns-film.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix(core): fix `isObject` function.`isObject(true)` should return false.

.changeset/pre.json

@@ -92,6 +92,7 @@
     "fuzzy-onions-draw",
     "gentle-parrots-lay",
     "gentle-trains-switch",
+    "giant-years-trade",
     "gold-vans-tease",
     "green-yaks-divide",
     "healthy-bikes-behave",
@@ -113,6 +114,7 @@
     "moody-clocks-roll",
     "neat-toes-report",
     "neat-toys-float",
+    "old-apples-fail",
     "olive-candles-speak",
     "orange-cows-pull",
     "orange-flowers-cover",
@@ -122,6 +124,7 @@
     "plenty-news-remember",
     "plenty-spiders-melt",
     "plenty-tables-refuse",
+    "poor-suns-film",
     "pretty-hounds-tap",
     "proud-jeans-walk",
     "proud-jobs-hope",
@@ -144,6 +147,7 @@
     "spicy-radios-remain",
     "spicy-snakes-sip",
     "strange-ladybugs-nail",
+    "strong-socks-type",
     "swift-pumpkins-knock",
     "ten-parents-breathe",
     "tender-bags-call",
@@ -157,6 +161,7 @@
     "twelve-crabs-guess",
     "two-dolls-check",
     "unlucky-hairs-wonder",
+    "weak-mangos-taste",
     "wild-jokes-beam",
     "witty-ties-speak"
   ]

.changeset/strong-socks-type.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/ui-theme': major
+'@verdaccio/ui-components': major
+'@verdaccio/web': major
+---
+
+fix package configuration issues

.changeset/weak-mangos-taste.md

@@ -0,0 +1,15 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/config': minor
+'@verdaccio/types': minor
+'@verdaccio/hooks': minor
+'@verdaccio/middleware': minor
+'verdaccio-audit': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/store': minor
+'@verdaccio/web': minor
+'@verdaccio/ui-theme': minor
+---
+
+refactor: render html middleware

.github/disabled/docker-plugins-e2e.yml

@@ -0,0 +1,39 @@
+name: E2E Docker Proxy Plugins Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      with:
+        node-version: 18
+
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry=http://localhost:4873
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost:4873
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost:4873
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost:4873
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/docker-build-install-plugin/docker-compose.yaml" down

.github/workflows/ci-windows.yml

@@ -32,7 +32,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -50,7 +50,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -70,7 +70,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -95,7 +95,7 @@ jobs:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -116,7 +116,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/ci.yml

@@ -43,7 +43,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -63,7 +63,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -85,7 +85,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -112,7 +112,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -136,7 +136,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -34,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@3ebbd71c74ef574dbc558c82f70e52732c8b44fe # tag=v2
+        uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@3ebbd71c74ef574dbc558c82f70e52732c8b44fe # tag=v2
+        uses: github/codeql-action/autobuild@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@3ebbd71c74ef574dbc558c82f70e52732c8b44fe # tag=v2
+        uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -0,0 +1,38 @@
+name: E2E Docker Proxy Apache Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+  schedule:
+    # run every sunday
+    - cron: '0 0 * * 0'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      with:
+        node-version: 18
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" down

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -0,0 +1,41 @@
+name: E2E Docker Proxy Nginx Test
+
+on:
+  workflow_dispatch:
+  push:
+    branches:
+      - 'master'
+jobs:
+  docker:
+    timeout-minutes: 10
+    runs-on: ubuntu-latest
+
+    steps:
+    - name: Checkout
+      uses: actions/checkout@ac593985615ec2ede58e132d2e21d2b1cbd6127c # v3
+      
+    - name: Start containers
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
+
+    - name: Install node
+      uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3
+      with:
+        node-version: 18
+    - name: npm setup
+      run: |
+        npm config set fetch-retries="5"
+        npm config set fetch-retry-factor="50"
+        npm config set fetch-retry-mintimeout="20000"
+        npm config set fetch-retry-maxtimeout="80000"      
+    - name: verdaccio cli
+      run: npm install -g verdaccio --registry http://localhost
+    - name: gastby cli 
+      run:  npm install -g gatsby-cli --registry http://localhost
+    - name: netlify cli 
+      run:  npm install -g netlify-cli --registry http://localhost
+    - name: angular cli 
+      run:  npm install -g @angular/cli --registry http://localhost
+
+    - name: Stop containers
+      if: always()
+      run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" down

.github/workflows/docker-publish.yml

@@ -45,11 +45,11 @@ jobs:
             {{major}}
             {{major}}.{{minor}}
       - name: Build & Push
-        uses: docker/build-push-action@v2
+        uses: docker/build-push-action@v4
         with:
           context: .
           file: ./Dockerfile
-          platforms: linux/amd64
+          platforms: linux/amd64,linux/arm64
           push: ${{ github.event_name != 'pull_request' }}
           tags: ${{ steps.docker_meta.outputs.tags }}
           labels: ${{ steps.docker_meta.outputs.labels }}

.github/workflows/e2e-ci.yml

@@ -29,7 +29,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --reporter=silence --ignore-scripts --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -46,7 +46,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -55,7 +55,7 @@ jobs:
       - name: build
         run: pnpm build
       - name: Cache packages
-        uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         id: cache-packages
         with:
           path: ./packages/
@@ -86,13 +86,13 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
       - name: Install
         run: pnpm recursive install --offline --frozen-lockfile --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: ./packages/
           key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/workflows/ui-components.yml

@@ -35,7 +35,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Cache pnpm modules
-        uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         env:
           cache-name: cache-pnpm-modules
         with:

.github/workflows/website.yml

@@ -31,7 +31,7 @@ jobs:
           node-version: 16
 
       - name: Cache pnpm modules
-        uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         env:
           cache-name: cache-pnpm-modules
         with:
@@ -51,7 +51,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm build --filter "@verdaccio/crowdin-translations"
       - name: Cache Docusaurus Build
-        uses: actions/cache@58c146cc91c5b9e778e71775dfe9bf1442ad9a12 # v3
+        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
@@ -134,7 +134,7 @@ jobs:
       - name: Add comment to PR
         if: github.repository == 'verdaccio/verdaccio'
         id: comment_to_pr
-        uses: marocchino/sticky-pull-request-comment@fcf6fe9e4a0409cd9316a5011435be0f3327f1e1 # tag=v2
+        uses: marocchino/sticky-pull-request-comment@3d60a5b2dae89d44e0c6ddc69dd7536aec2071cd # tag=v2
         with:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
           number: ${{ github.event.issue.number }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:16-alpine as builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:18-alpine as builder
 
 ENV NODE_ENV=development \
     VERDACCIO_BUILD_REGISTRY=https://registry.verdaccio.org
@@ -20,7 +20,7 @@ RUN npm -g i pnpm@6.32.15 && \
 # FIXME: need to remove devDependencies from the build
 # RUN pnpm install --prod --ignore-scripts
 
-FROM node:16-alpine
+FROM node:18-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

e2e/cli/cli-commons/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/test-cli-commons
 
+## 1.1.0-6-next.6
+
+### Minor Changes
+
+- d167f92e: chore: rollback yaml dep support old nodejs versions
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/cli-commons/package.json

@@ -1,19 +1,19 @@
 {
   "private": true,
   "name": "@verdaccio/test-cli-commons",
-  "version": "1.0.1-6-next.5",
+  "version": "1.1.0-6-next.6",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "devDependencies": {
-    "verdaccio": "workspace:6.0.0-6-next.59",
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19",
-    "yaml": "2.2.0",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21",
     "debug": "4.3.4",
     "fs-extra": "10.1.0",
-    "got": "11.8.6",
-    "lodash": "4.17.21"
+    "got": "11.8.5",
+    "js-yaml": "4.1.0",
+    "lodash": "4.17.21",
+    "verdaccio": "workspace:6.0.0-6-next.62"
   },
   "scripts": {
     "test": "jest",

e2e/cli/cli-commons/src/yarn-modern-utils.ts

@@ -1,7 +1,7 @@
 import { cp, writeFile } from 'fs/promises';
+import YAML from 'js-yaml';
 import { join } from 'path';
 import { URL } from 'url';
-import YAML from 'yaml';
 
 import { Dependencies } from '@verdaccio/types';
 
@@ -25,7 +25,7 @@ export function createYamlConfig(registry: string, token?: string) {
     };
   }
 
-  return YAML.stringify(defaultYaml);
+  return YAML.dump(defaultYaml);
 }
 
 export async function prepareYarnModernProject(

e2e/cli/e2e-npm6/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm6
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-npm6/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm6",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
     "npm": "6.14.18"
   },
   "scripts": {

e2e/cli/e2e-npm7/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm7
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-npm7/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm7",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
     "npm": "7.24.2"
   },
   "scripts": {

e2e/cli/e2e-npm8/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm8
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-npm8/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm8",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
-    "npm": "8.19.3"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "npm": "8.19.4"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-npm9/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm9
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-npm9/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm9",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
-    "npm": "9.2.0"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "npm": "9.5.0"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-pnpm6/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-pnpm6
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-pnpm6/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-pnpm6",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
-    "pnpm": "latest-6"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "pnpm": "^6.35.1"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-pnpm7/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-pnpm7
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-pnpm7/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-pnpm7",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
-    "pnpm": "next-7"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "pnpm": "^7.27.1"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-yarn1/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn1
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-yarn1/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn1",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
     "yarn": "1.22.19"
   },
   "scripts": {

e2e/cli/e2e-yarn2/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn2
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-yarn2/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn2",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
     "@yarnpkg/cli-dist": "2.4.2"
   },
   "scripts": {

e2e/cli/e2e-yarn3/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn3
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-yarn3/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn3",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5",
-    "@yarnpkg/cli-dist": "3.3.1"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@yarnpkg/cli-dist": "3.4.1"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-yarn4/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn4
 
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
 ## 1.0.1-6-next.5
 
 ### Patch Changes

e2e/cli/e2e-yarn4/package.json

@@ -1,9 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn4",
-  "version": "1.0.1-6-next.5",
+  "version": "1.0.1-6-next.6",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.0.1-6-next.5"
+    "@yarnpkg/cli-dist": "4.0.0-rc.39",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-yarn4/utils.ts

@@ -7,10 +7,7 @@ export function getCommand(projectFolder) {
 }
 
 export function getYarnCommand() {
-  // FUTURE: yarn 4 rc still not available via registry
-  // tags: https://repo.yarnpkg.com/tags
-  // download binary: https://repo.yarnpkg.com/4.0.0-rc.14/packages/yarnpkg-cli/bin/yarn.js
-  return join(__dirname, './bin/yarn-4.0.0-rc.14.cjs');
+  return join(__dirname, './node_modules/@yarnpkg/cli-dist/bin/yarn.js');
 }
 
 export function yarn(projectFolder, ...args: string[]) {

e2e/docker/apache-verdaccio/apache_proxy/Dockerfile

@@ -0,0 +1,6 @@
+FROM eboraas/apache
+LABEL Juan Picado <jotadeveloper@gmail.com>
+# http://pierrecaserta.com/apache-proxy-one-docker-server-many-domains/
+RUN a2enmod proxy
+COPY ./conf/000-default.conf /etc/apache2/sites-enabled/000-default.conf
+COPY ./conf/env.load /etc/apache2/mods-enabled/env.load

e2e/docker/apache-verdaccio/apache_proxy/conf/000-default.conf

@@ -0,0 +1,17 @@
+ServerName localhost:80
+ServerAdmin admin@localhost
+
+<VirtualHost *:80>
+    ServerName localhost
+    <Proxy *>
+        Allow from localhost
+    </Proxy>
+    SSLProxyEngine          On
+    ProxyRequests           Off
+    ProxyPreserveHost       On
+    AllowEncodedSlashes     NoDecode
+    ProxyPass               /       http://verdaccio:4873/ nocanon
+    ProxyPassReverse        /       http://verdaccio:4873/
+    CustomLog /var/log/apache2/verdaccio-access.log combined
+    ErrorLog /var/log/apache2/verdaccio-error.log
+</VirtualHost>

e2e/docker/apache-verdaccio/apache_proxy/conf/env.load

@@ -0,0 +1,4 @@
+LoadModule env_module /usr/lib/apache2/modules/mod_env.so
+LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so
+LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so
+LoadModule socache_shmcb_module /usr/lib/apache2/modules/mod_socache_shmcb.so

e2e/docker/apache-verdaccio/docker-compose.yaml

@@ -0,0 +1,23 @@
+version: '2'
+
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:nightly-master
+    container_name: verdaccio
+    ports:
+      - '4873:4873'
+    volumes:
+      - verdaccio:/verdaccio
+
+  apacheproxy:
+    build: apache_proxy/
+    links:
+      - verdaccio
+    ports:
+      - '80:80'
+    volumes_from:
+      - verdaccio
+
+volumes:
+  verdaccio:
+    driver: local

e2e/docker/docker-build-install-plugin/Dockerfile

@@ -0,0 +1,9 @@
+FROM verdaccio/verdaccio:nightly-master
+LABEL Juan Picado <jotadeveloper@gmail.com>
+ADD docker.yaml /verdaccio/conf/config.yaml  
+USER root
+RUN npm install --global verdaccio-static-token \
+  # && npm install --global verdaccio-memory@6-next  \
+  && npm install --global verdaccio-auth-memory@6-next
+USER $VERDACCIO_USER_UID
+

e2e/docker/docker-build-install-plugin/docker-compose.yaml

@@ -0,0 +1,12 @@
+version: '2'
+
+services:
+  verdaccio:
+    build: .
+    ports:
+      - '4873:4873'
+    volumes:
+      - verdaccio:/verdaccio
+volumes:
+  verdaccio:
+    driver: local

e2e/docker/docker-build-install-plugin/docker.yaml

@@ -0,0 +1,46 @@
+# store:
+#   memory:
+#     limit: 1000
+
+storage: ./storage
+
+plugins: /verdaccio/plugins
+
+web:
+  title: Verdaccio Publish Config Test
+auth:
+  auth-memory:
+    users:
+      foo:
+        name: foo
+        password: s3cret
+      bar:
+        name: bar
+        password: s3cret
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+packages:
+  '@*/*':
+    access: $all
+    publish: $authenticated
+    unpublish: $authenticated
+    proxy: npmjs
+  '**':
+    access: $all
+    publish: $authenticated
+    unpublish: $authenticated
+    proxy: npmjs
+server:
+  keepAliveTimeout: 60
+middlewares:
+  audit:
+    enabled: true
+  static-token:
+    - token: mySecureToken
+      user: systemUser
+      password: systemPassword
+    - token: ABCD1234
+      user: uncle
+      password: tom
+log: { type: stdout, format: pretty, level: http }

e2e/docker/docker-e2e-ui/Dockerfile

@@ -0,0 +1,3 @@
+FROM verdaccio/verdaccio:nightly-master
+LABEL Juan Picado <jotadeveloper@gmail.com>
+ADD docker.yaml /verdaccio/conf/config.yaml  

e2e/docker/docker-e2e-ui/docker-compose.yaml

@@ -0,0 +1,12 @@
+version: '2'
+
+services:
+  verdaccio:
+    build: .
+    ports:
+      - '4873:4873'
+    volumes:
+      - verdaccio:/verdaccio
+volumes:
+  verdaccio:
+    driver: local

e2e/docker/docker-e2e-ui/docker.yaml

@@ -0,0 +1,37 @@
+storage: /verdaccio/storage/data
+
+plugins: /verdaccio/plugins
+
+web:
+  enable: true
+  title: verdaccio-server-e2e
+  login: true
+
+auth:
+  htpasswd:
+    file: /verdaccio/storage/htpasswd
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@verdaccio/*':
+    access: $all
+    publish: $authenticated
+  '@*/*':
+    access: $all
+    publish: $authenticated
+    unpublish: $authenticated
+    proxy: npmjs
+  '**':
+    access: $all
+    publish: $authenticated
+    unpublish: $authenticated
+    proxy: npmjs
+
+middlewares:
+  audit:
+    enabled: true
+
+log: { type: stdout, format: json, level: info }

e2e/docker/proxy-nginx/conf/nginx/Dockerfile

@@ -0,0 +1,3 @@
+FROM tutum/nginx
+RUN rm /etc/nginx/sites-enabled/default
+ADD sites-enabled /etc/nginx/sites-enabled

e2e/docker/proxy-nginx/conf/nginx/sites-enabled/verdaccio-conf

@@ -0,0 +1,14 @@
+server {
+  listen 80 default_server;
+	access_log /var/log/nginx/verdaccio.log;
+	charset utf-8;
+  location / {
+    proxy_pass              http://verdaccio:4873/;
+    proxy_set_header        Host $host;
+    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-NginX-Proxy true;
+    proxy_ssl_session_reuse off;
+    proxy_set_header Host $http_host;
+    proxy_redirect off;
+  }
+}

e2e/docker/proxy-nginx/docker-compose.yaml

@@ -0,0 +1,26 @@
+version: '2'
+
+services:
+  verdaccio:
+    image: verdaccio/verdaccio:nightly-master
+    container_name: verdaccio_root_path
+    ports:
+      - '4873:4873'
+    volumes:
+      - verdaccio:/verdaccio
+
+  nginx:
+    restart: always
+    build: conf/nginx
+    ports:
+      - '80:80'
+    volumes:
+      - /www/public
+    volumes_from:
+      - verdaccio
+    links:
+      - verdaccio:verdaccio
+
+volumes:
+  verdaccio:
+    driver: local

e2e/ui/package.json

@@ -3,9 +3,9 @@
   "name": "@verdaccio/e2e-ui",
   "version": "2.0.0-6-next.3",
   "devDependencies": {
-    "verdaccio": "workspace:6.0.0-6-next.59",
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
+    "verdaccio": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
     "@verdaccio/test-helper": "workspace:2.0.0-6-next.7",
     "debug": "4.3.4",
     "cypress": "11.2.0"

package.json

@@ -38,74 +38,73 @@
     "@babel/preset-typescript": "7.18.6",
     "@babel/register": "7.18.9",
     "@babel/runtime": "7.20.7",
-    "@dianmora/contributors": "5.0.0",
     "@changesets/changelog-github": "0.4.8",
     "@changesets/cli": "2.24.4",
     "@changesets/get-dependents-graph": "1.3.5",
     "@crowdin/cli": "3.9.1",
+    "@dianmora/contributors": "5.0.0",
     "@emotion/react": "11.10.5",
     "@emotion/styled": "11.10.5",
     "@testing-library/dom": "8.19.1",
     "@testing-library/jest-dom": "5.16.5",
     "@testing-library/react": "12.1.4",
-    "react": "18.2.0",
-    "react-dom": "18.2.0",
-    "@trivago/prettier-plugin-sort-imports": "3.4.0",
+    "@trivago/prettier-plugin-sort-imports": "^4.0.0",
     "@types/async": "3.2.16",
     "@types/express": "4.17.15",
     "@types/http-errors": "1.8.2",
     "@types/jest": "27.5.2",
+    "@types/jsonwebtoken": "8.5.9",
     "@types/lodash": "4.14.191",
     "@types/mime": "2.0.3",
     "@types/minimatch": "3.0.5",
-    "@types/redux": "3.6.0",
     "@types/node": "16.18.10",
-    "@types/jsonwebtoken": "8.5.9",
-    "@types/request": "2.48.8",
-    "@types/semver": "7.3.13",
     "@types/node-fetch": "2.6.2",
-    "@types/supertest": "2.0.12",
-    "@types/testing-library__jest-dom": "5.14.5",
-    "@types/validator": "13.7.10",
-    "@types/webpack": "5.28.0",
-    "@types/webpack-env": "1.18.0",
     "@types/react": "18.0.26",
     "@types/react-dom": "18.0.9",
     "@types/react-router-dom": "5.3.3",
     "@types/react-virtualized": "9.21.21",
-    "@typescript-eslint/eslint-plugin": "5.49.0",
-    "@typescript-eslint/parser": "5.49.0",
+    "@types/redux": "3.6.0",
+    "@types/request": "2.48.8",
+    "@types/semver": "7.3.13",
+    "@types/supertest": "2.0.12",
+    "@types/testing-library__jest-dom": "5.14.5",
+    "@types/validator": "13.7.12",
+    "@types/webpack": "5.28.0",
+    "@types/webpack-env": "1.18.0",
+    "@typescript-eslint/eslint-plugin": "5.52.0",
+    "@typescript-eslint/parser": "5.52.0",
     "@verdaccio/crowdin-translations": "workspace:*",
     "@verdaccio/eslint-config": "workspace:*",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-theme": "workspace:*",
     "babel-core": "7.0.0-bridge.0",
     "babel-eslint": "10.1.0",
-    "babel-jest": "29.3.1",
+    "babel-jest": "29.4.3",
     "babel-plugin-dynamic-import-node": "2.3.3",
     "babel-plugin-emotion": "10.2.2",
     "concurrently": "6.5.1",
-    "core-js": "3.27.0",
     "cross-env": "7.0.3",
     "debug": "4.3.4",
     "detect-secrets": "1.0.6",
-    "jest-diff": "29.3.1",
-    "eslint": "8.33.0",
+    "eslint": "8.34.0",
     "fs-extra": "10.1.0",
+    "got": "11.8.5",
     "husky": "7.0.4",
     "in-publish": "2.0.1",
-    "jest": "29.3.1",
-    "jest-environment-jsdom": "29.3.1",
+    "jest": "29.4.3",
+    "jest-diff": "29.4.3",
+    "jest-environment-jsdom": "29.4.3",
     "jest-environment-jsdom-global": "3.1.2",
     "jest-environment-node": "29.3.1",
     "jest-junit": "12.3.0",
     "kleur": "3.0.3",
     "lint-staged": "11.2.6",
-    "got": "11.8.6",
     "nock": "13.2.9",
     "nodemon": "2.0.20",
     "npm-run-all": "4.1.5",
-    "prettier": "2.8.3",
+    "prettier": "2.8.4",
+    "react": "18.2.0",
+    "react-dom": "18.2.0",
     "rimraf": "3.0.2",
     "selfsigned": "1.10.14",
     "supertest": "6.3.3",

packages/api/CHANGELOG.md

@@ -1,5 +1,49 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.45
+
+### Patch Changes
+
+- Updated dependencies [4fc21146]
+- Updated dependencies [378e907d]
+  - @verdaccio/middleware@6.0.0-6-next.41
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/auth@6.0.0-6-next.41
+  - @verdaccio/logger@6.0.0-6-next.30
+  - @verdaccio/store@6.0.0-6-next.42
+  - @verdaccio/config@6.0.0-6-next.62
+  - @verdaccio/utils@6.0.0-6-next.30
+
+## 6.0.0-6-next.44
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/config@6.0.0-6-next.61
+  - @verdaccio/auth@6.0.0-6-next.40
+  - @verdaccio/middleware@6.0.0-6-next.40
+  - @verdaccio/store@6.0.0-6-next.41
+  - @verdaccio/core@6.0.0-6-next.61
+  - @verdaccio/utils@6.0.0-6-next.29
+  - @verdaccio/logger@6.0.0-6-next.29
+
+## 6.0.0-6-next.43
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
+### Patch Changes
+
+- Updated dependencies [45c03819]
+  - @verdaccio/config@6.0.0-6-next.60
+  - @verdaccio/middleware@6.0.0-6-next.39
+  - @verdaccio/store@6.0.0-6-next.40
+  - @verdaccio/auth@6.0.0-6-next.39
+  - @verdaccio/core@6.0.0-6-next.60
+  - @verdaccio/logger@6.0.0-6-next.28
+  - @verdaccio/utils@6.0.0-6-next.28
+
 ## 6.0.0-6-next.42
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "6.0.0-6-next.42",
+  "version": "6.0.0-6-next.45",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,13 +39,13 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.38",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.38",
-    "@verdaccio/store": "workspace:6.0.0-6-next.39",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.27",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.41",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.41",
+    "@verdaccio/store": "workspace:6.0.0-6-next.42",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
     "abortcontroller-polyfill": "1.7.5",
     "cookies": "0.8.0",
     "debug": "4.3.4",
@@ -57,8 +57,8 @@
   },
   "devDependencies": {
     "@types/node": "16.18.10",
-    "@verdaccio/server": "workspace:6.0.0-6-next.48",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19",
+    "@verdaccio/server": "workspace:6.0.0-6-next.51",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21",
     "@verdaccio/test-helper": "workspace:2.0.0-6-next.7",
     "supertest": "6.3.3",
     "nock": "13.2.9",

packages/api/src/user.ts

@@ -13,6 +13,7 @@ import {
   validatioUtils,
 } from '@verdaccio/core';
 import { logger } from '@verdaccio/logger';
+import { rateLimit } from '@verdaccio/middleware';
 import { Config, RemoteUser } from '@verdaccio/types';
 import { getAuthenticatedMessage, mask } from '@verdaccio/utils';
 
@@ -23,6 +24,7 @@ const debug = buildDebug('verdaccio:api:user');
 export default function (route: Router, auth: Auth, config: Config): void {
   route.get(
     '/-/user/:org_couchdb_user',
+    rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       debug('verifying user');
       const message = getAuthenticatedMessage(req.remote_user.name);
@@ -53,6 +55,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
  */
   route.put(
     '/-/user/:org_couchdb_user/:_rev?/:revision?',
+    rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       const { name, password } = req.body;
       debug('login or adduser');

packages/api/src/v1/profile.ts

@@ -10,6 +10,7 @@ import {
   errorUtils,
   validatioUtils,
 } from '@verdaccio/core';
+import { rateLimit } from '@verdaccio/middleware';
 import { Config } from '@verdaccio/types';
 
 import { $NextFunctionVer, $RequestExtend } from '../../types/custom';
@@ -41,6 +42,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
 
   route.get(
     '/-/npm/v1/user',
+    rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name) === false) {
         return next(buildProfile(req.remote_user.name));
@@ -55,6 +57,7 @@ export default function (route: Router, auth: Auth, config: Config): void {
 
   route.post(
     '/-/npm/v1/user',
+    rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer): void {
       if (_.isNil(req.remote_user.name)) {
         res.status(HTTP_STATUS.UNAUTHORIZED);

packages/api/src/v1/token.ts

@@ -5,6 +5,7 @@ import { getApiToken } from '@verdaccio/auth';
 import { Auth } from '@verdaccio/auth';
 import { HEADERS, HTTP_STATUS, SUPPORT_ERRORS, errorUtils } from '@verdaccio/core';
 import { logger } from '@verdaccio/logger';
+import { rateLimit } from '@verdaccio/middleware';
 import { Storage } from '@verdaccio/store';
 import { Config, RemoteUser, Token } from '@verdaccio/types';
 import { mask, stringToMD5 } from '@verdaccio/utils';
@@ -26,6 +27,7 @@ function normalizeToken(token: Token): NormalizeToken {
 export default function (route: Router, auth: Auth, storage: Storage, config: Config): void {
   route.get(
     '/-/npm/v1/tokens',
+    rateLimit(config?.userRateLimit),
     async function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { name } = req.remote_user;
 
@@ -53,6 +55,7 @@ export default function (route: Router, auth: Auth, storage: Storage, config: Co
 
   route.post(
     '/-/npm/v1/tokens',
+    rateLimit(config?.userRateLimit),
     function (req: $RequestExtend, res: Response, next: $NextFunctionVer) {
       const { password, readonly, cidr_whitelist } = req.body;
       const { name } = req.remote_user;
@@ -123,6 +126,7 @@ export default function (route: Router, auth: Auth, storage: Storage, config: Co
 
   route.delete(
     '/-/npm/v1/tokens/token/:tokenKey',
+    rateLimit(config?.userRateLimit),
     async (req: $RequestExtend, res: Response, next: $NextFunctionVer) => {
       const {
         params: { tokenKey },

packages/auth/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @verdaccio/auth
 
+## 6.0.0-6-next.41
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/loaders@6.0.0-6-next.31
+  - @verdaccio/logger@6.0.0-6-next.30
+  - verdaccio-htpasswd@11.0.0-6-next.32
+  - @verdaccio/config@6.0.0-6-next.62
+  - @verdaccio/utils@6.0.0-6-next.30
+
+## 6.0.0-6-next.40
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/config@6.0.0-6-next.61
+  - @verdaccio/loaders@6.0.0-6-next.30
+  - verdaccio-htpasswd@11.0.0-6-next.31
+  - @verdaccio/core@6.0.0-6-next.61
+  - @verdaccio/utils@6.0.0-6-next.29
+  - @verdaccio/logger@6.0.0-6-next.29
+
+## 6.0.0-6-next.39
+
+### Patch Changes
+
+- Updated dependencies [45c03819]
+  - @verdaccio/config@6.0.0-6-next.60
+  - @verdaccio/loaders@6.0.0-6-next.29
+  - verdaccio-htpasswd@11.0.0-6-next.30
+  - @verdaccio/core@6.0.0-6-next.60
+  - @verdaccio/logger@6.0.0-6-next.28
+  - @verdaccio/utils@6.0.0-6-next.28
+
 ## 6.0.0-6-next.38
 
 ### Patch Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "6.0.0-6-next.38",
+  "version": "6.0.0-6-next.41",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -39,19 +39,19 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.28",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.27",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.31",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
     "debug": "4.3.4",
     "express": "4.18.2",
     "jsonwebtoken": "9.0.0",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:11.0.0-6-next.29"
+    "verdaccio-htpasswd": "workspace:11.0.0-6-next.32"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "funding": {
     "type": "opencollective",

packages/cli/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @verdaccio/cli
 
+## 6.0.0-6-next.62
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/logger@6.0.0-6-next.30
+  - @verdaccio/node-api@6.0.0-6-next.62
+  - @verdaccio/config@6.0.0-6-next.62
+
+## 6.0.0-6-next.61
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/config@6.0.0-6-next.61
+  - @verdaccio/node-api@6.0.0-6-next.61
+  - @verdaccio/core@6.0.0-6-next.61
+  - @verdaccio/logger@6.0.0-6-next.29
+
+## 6.0.0-6-next.60
+
+### Patch Changes
+
+- Updated dependencies [45c03819]
+  - @verdaccio/config@6.0.0-6-next.60
+  - @verdaccio/node-api@6.0.0-6-next.60
+  - @verdaccio/core@6.0.0-6-next.60
+  - @verdaccio/logger@6.0.0-6-next.28
+
 ## 6.0.0-6-next.59
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "6.0.0-6-next.59",
+  "version": "6.0.0-6-next.62",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -44,11 +44,11 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
-    "@verdaccio/node-api": "workspace:6.0.0-6-next.59",
-    "clipanion": "3.1.0",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/node-api": "workspace:6.0.0-6-next.62",
+    "clipanion": "3.2.0",
     "envinfo": "7.8.1",
     "kleur": "3.0.3",
     "semver": "7.3.8"

packages/config/CHANGELOG.md

@@ -1,5 +1,35 @@
 # @verdaccio/config
 
+## 6.0.0-6-next.62
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/utils@6.0.0-6-next.30
+
+## 6.0.0-6-next.61
+
+### Minor Changes
+
+- d167f92e: chore: rollback yaml dep support old nodejs versions
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.61
+- @verdaccio/utils@6.0.0-6-next.29
+
+## 6.0.0-6-next.60
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.60
+- @verdaccio/utils@6.0.0-6-next.28
+
 ## 6.0.0-6-next.59
 
 ### Patch Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "6.0.0-6-next.59",
+  "version": "6.0.0-6-next.62",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,10 +38,10 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.27",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
     "debug": "4.3.4",
-    "yaml": "2.2.0",
+    "js-yaml": "4.1.0",
     "lodash": "4.17.21",
     "minimatch": "3.1.2",
     "yup": "0.32.11"

packages/config/src/agent.ts

@@ -1,5 +1,17 @@
-const pkgVersion = require('../package.json').version;
+import _ from 'lodash';
 
-export function getUserAgent(): string {
-  return `verdaccio/${pkgVersion}`;
+export function getUserAgent(
+  customUserAgent?: boolean | string,
+  version?: string,
+  name?: string
+): string {
+  if (customUserAgent === true) {
+    return `${name}/${version}`;
+  } else if (_.isString(customUserAgent) && _.isEmpty(customUserAgent) === false) {
+    return customUserAgent;
+  } else if (customUserAgent === false) {
+    return 'hidden';
+  }
+
+  return `${name}/${version}`;
 }

packages/config/src/config.ts

@@ -10,6 +10,7 @@ import {
   FlagsConfig,
   PackageAccess,
   PackageList,
+  RateLimit,
   Security,
   ServerSettingsConf,
 } from '@verdaccio/types';
@@ -28,11 +29,17 @@ const debug = buildDebug('verdaccio:config');
 
 export const WEB_TITLE = 'Verdaccio';
 
+// we limit max 1000 request per 15 minutes on user endpoints
+export const defaultUserRateLimiting = {
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 1000,
+};
+
 /**
  * Coordinates the application configuration
  */
 class Config implements AppConfig {
-  public user_agent: string;
+  public user_agent: string | undefined;
   public uplinks: any;
   public packages: PackageList;
   public users: any;
@@ -49,7 +56,7 @@ class Config implements AppConfig {
   // @ts-ignore
   public secret: string;
   public flags: FlagsConfig;
-
+  public userRateLimit: RateLimit;
   public constructor(config: ConfigYaml & { config_path: string }) {
     const self = this;
     this.storage = process.env.VERDACCIO_STORAGE_PATH || config.storage;
@@ -65,6 +72,7 @@ class Config implements AppConfig {
     this.flags = {
       searchRemote: config.flags?.searchRemote ?? true,
     };
+    this.user_agent = config.user_agent;
 
     for (const configProp in config) {
       if (self[configProp] == null) {
@@ -72,11 +80,14 @@ class Config implements AppConfig {
       }
     }
 
-    // @ts-ignore
-    if (_.isNil(this.user_agent)) {
-      this.user_agent = getUserAgent();
+    if (typeof this.user_agent === 'undefined') {
+      // by default user agent is hidden
+      debug('set default user agent');
+      this.user_agent = getUserAgent(false);
     }
 
+    this.userRateLimit = { ...defaultUserRateLimiting, ...config?.userRateLimit };
+
     // some weird shell scripts are valid yaml files parsed as string
     assert(_.isObject(config), APP_ERROR.CONFIG_NOT_VALID);
 

packages/config/src/index.ts

@@ -5,6 +5,7 @@ export * from './package-access';
 export { fromJStoYAML, parseConfigFile } from './parse';
 export * from './uplinks';
 export * from './security';
+export * from './agent';
 export * from './user';
 export { default as ConfigBuilder } from './builder';
 export { getDefaultConfig } from './conf';

packages/config/src/parse.ts

@@ -1,7 +1,7 @@
 import buildDebug from 'debug';
 import fs from 'fs';
+import YAML from 'js-yaml';
 import { isObject } from 'lodash';
-import YAML from 'yaml';
 
 import { APP_ERROR } from '@verdaccio/core';
 import { ConfigYaml } from '@verdaccio/types';
@@ -26,7 +26,7 @@ export function parseConfigFile(configPath: string): ConfigYaml & {
   debug('parsing config file: %o', configPath);
   try {
     if (/\.ya?ml$/i.test(configPath)) {
-      const yamlConfig = YAML.parse(fs.readFileSync(configPath, 'utf8'), {
+      const yamlConfig = YAML.load(fs.readFileSync(configPath, 'utf8'), {
         strict: false,
       }) as ConfigYaml;
 
@@ -56,7 +56,7 @@ export function parseConfigFile(configPath: string): ConfigYaml & {
 export function fromJStoYAML(config: Partial<ConfigYaml>): string | null {
   debug('convert config from JSON to YAML');
   if (isObject(config)) {
-    return YAML.stringify(config);
+    return YAML.dump(config);
   } else {
     throw new Error(`config is not a valid object`);
   }

packages/config/test/__snapshots__/config-parsing.spec.ts.snap

@@ -6,7 +6,7 @@ uplinks:
   npmjs:
     url: http://localhost:4873/
 packages:
-  "@*/*":
+  '@*/*':
     access: $all
     publish: $all
     proxy: npmjs
@@ -32,7 +32,7 @@ packages:
     access: $authenticated
     publish: $authenticated
     proxy: npmjs
-  "*":
+  '*':
     access: $all
     publish: $all
     proxy: npmjs

packages/core/core/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/core
 
+## 6.0.0-6-next.62
+
+### Patch Changes
+
+- 378e907d: fix(core): fix `isObject` function.`isObject(true)` should return false.
+
+## 6.0.0-6-next.61
+
+## 6.0.0-6-next.60
+
 ## 6.0.0-6-next.59
 
 ## 6.0.0-6-next.58

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "6.0.0-6-next.59",
+  "version": "6.0.0-6-next.62",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -38,13 +38,13 @@
     "semver": "7.3.8",
     "ajv": "8.11.2",
     "process-warning": "1.0.0",
-    "core-js": "3.27.0"
+    "core-js": "3.28.0"
   },
   "devDependencies": {
     "lodash": "4.17.21",
-    "typedoc": "0.23.23",
+    "typedoc": "0.23.25",
     "typedoc-plugin-missing-exports": "latest",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/core/src/validation-utils.ts

@@ -95,14 +95,15 @@ export function normalizeMetadata(manifest: Manifest, name: string): Manifest {
  * @return {Boolean}
  */
 export function isObject(obj: any): boolean {
-  if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {
-    return false;
-  }
+  // if (obj === null || typeof obj === 'undefined' || typeof obj === 'string') {
+  //   return false;
+  // }
 
-  return (
-    (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&
-    Array.isArray(obj) === false
-  );
+  // return (
+  //   (typeof obj === 'object' || typeof obj.prototype === 'undefined') &&
+  //   Array.isArray(obj) === false
+  // );
+  return Object.prototype.toString.call(obj) === '[object Object]';
 }
 
 export function validatePassword(

packages/core/core/test/validation-utilts.spec.ts

@@ -31,6 +31,7 @@ describe('isObject', () => {
     expect(isObject(['foo'])).toBeFalsy();
     expect(isObject(null)).toBeFalsy();
     expect(isObject(undefined)).toBeFalsy();
+    expect(isObject(true)).toBeFalsy();
   });
 });
 

packages/core/file-locking/package.json

@@ -39,7 +39,7 @@
     "lockfile": "1.0.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,30 @@
 # Change Log
 
+## 11.0.0-6-next.31
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/url@11.0.0-6-next.28
+  - @verdaccio/utils@6.0.0-6-next.30
+
+## 11.0.0-6-next.30
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.61
+- @verdaccio/url@11.0.0-6-next.27
+- @verdaccio/utils@6.0.0-6-next.29
+
+## 11.0.0-6-next.29
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.60
+- @verdaccio/url@11.0.0-6-next.26
+- @verdaccio/utils@6.0.0-6-next.28
+
 ## 11.0.0-6-next.28
 
 ### Patch Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "11.0.0-6-next.28",
+  "version": "11.0.0-6-next.31",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -34,13 +34,13 @@
   },
   "dependencies": {
     "debug": "4.3.4",
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/url": "workspace:11.0.0-6-next.25",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.27",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/url": "workspace:11.0.0-6-next.28",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21",
     "node-mocks-http": "1.12.1"
   },
   "scripts": {

packages/core/types/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Change Log
 
+## 11.0.0-6-next.21
+
+### Patch Changes
+
+- 4fc21146: fix: missing logo on header
+
+## 11.0.0-6-next.20
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
 ## 11.0.0-6-next.19
 
 ### Minor Changes

packages/core/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "11.0.0-6-next.19",
+  "version": "11.0.0-6-next.21",
   "description": "verdaccio types definitions",
   "keywords": [
     "private",
@@ -41,7 +41,7 @@
   },
   "devDependencies": {
     "@types/node": "16.18.10",
-    "typedoc": "0.23.23"
+    "typedoc": "0.23.25"
   },
   "typedoc": {
     "entryPoint": "./src/types.ts",

packages/core/types/src/configuration.ts

@@ -128,7 +128,6 @@ export type TemplateUIOptions = {
   base: string;
   primaryColor: string;
   version?: string;
-  logoURI?: string;
   flags: FlagsConfig;
 } & CommonWebConf;
 
@@ -252,6 +251,7 @@ export interface ConfigYaml {
   store?: any;
   listen?: ListenAddress;
   https?: HttpsConf;
+  user_agent?: string;
   http_proxy?: string;
   plugins?: string | void | null;
   https_proxy?: string;
@@ -264,6 +264,7 @@ export interface ConfigYaml {
   url_prefix?: string;
   server?: ServerSettingsConf;
   flags?: FlagsConfig;
+  userRateLimit?: RateLimit;
   // internal objects, added by internal yaml to JS config parser
   // @deprecated use configPath instead
   config_path?: string;
@@ -277,7 +278,6 @@ export interface ConfigYaml {
  * @extends {ConfigYaml}
  */
 export interface Config extends Omit<ConfigYaml, 'packages' | 'security' | 'configPath'> {
-  user_agent: string;
   server_id: string;
   secret: string;
   // save the configuration file path, it's fails without thi configPath

packages/core/url/CHANGELOG.md

@@ -1,5 +1,24 @@
 # Change Log
 
+## 11.0.0-6-next.28
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+
+## 11.0.0-6-next.27
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.61
+
+## 11.0.0-6-next.26
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.60
+
 ## 11.0.0-6-next.25
 
 ### Patch Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "11.0.0-6-next.25",
+  "version": "11.0.0-6-next.28",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -33,13 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
     "debug": "4.3.4",
     "lodash": "4.17.21",
-    "validator": "13.7.0"
+    "validator": "13.9.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21",
     "node-mocks-http": "1.12.1"
   },
   "scripts": {

packages/hooks/CHANGELOG.md

@@ -1,5 +1,31 @@
 # @verdaccio/hooks
 
+## 6.0.0-6-next.32
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/logger@6.0.0-6-next.30
+
+## 6.0.0-6-next.31
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.61
+- @verdaccio/logger@6.0.0-6-next.29
+
+## 6.0.0-6-next.30
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.60
+- @verdaccio/logger@6.0.0-6-next.28
+
 ## 6.0.0-6-next.29
 
 ### Patch Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "6.0.0-6-next.29",
+  "version": "6.0.0-6-next.32",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,18 +29,18 @@
     "node": ">=16"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
-    "core-js": "3.27.0",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "core-js": "3.28.0",
     "debug": "4.3.4",
     "handlebars": "4.7.7",
     "undici": "4.16.0"
   },
   "devDependencies": {
     "@types/node": "16.18.10",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.38",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/auth": "workspace:6.0.0-6-next.41",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/hooks/test/notify-request.spec.ts

@@ -15,7 +15,7 @@ const singleHeaderNotificationConfig = parseConfigFile(
 );
 const multiNotificationConfig = parseConfigFile(parseConfigurationNotifyFile('multiple.notify'));
 
-setup([]);
+setup({});
 
 const domain = 'http://slack-service';
 

packages/loaders/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @verdaccio/loaders
 
+## 6.0.0-6-next.31
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.30
+
+## 6.0.0-6-next.30
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.29
+
+## 6.0.0-6-next.29
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.28
+
 ## 6.0.0-6-next.28
 
 ### Patch Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "6.0.0-6-next.28",
+  "version": "6.0.0-6-next.31",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -13,14 +13,14 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/config": "workspace:6.0.0-6-next.59",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "verdaccio-auth-memory": "workspace:*",
     "customprefix-auth": "1.0.0-6-next.0"

packages/logger/logger-7/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @verdaccio/logger-7
 
+## 6.0.0-6-next.7
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.30
+
+## 6.0.0-6-next.6
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.29
+
+## 6.0.0-6-next.5
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.28
+
 ## 6.0.0-6-next.4
 
 ### Patch Changes

packages/logger/logger-7/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-7",
-  "version": "6.0.0-6-next.4",
+  "version": "6.0.0-6-next.7",
   "description": "logger for verdaccio 5.x version",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.27",
+    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.30",
     "pino": "7.11.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,24 @@
 # @verdaccio/logger-commons
 
+## 6.0.0-6-next.30
+
+### Patch Changes
+
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+
+## 6.0.0-6-next.29
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.61
+
+## 6.0.0-6-next.28
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.60
+
 ## 6.0.0-6-next.27
 
 ### Patch Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "6.0.0-6-next.27",
+  "version": "6.0.0-6-next.30",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,14 +38,14 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
     "@verdaccio/logger-prettify": "workspace:6.0.0-6-next.9",
     "debug": "4.3.4",
     "colorette": "2.0.19"
   },
   "devDependencies": {
-    "pino": "8.8.0",
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "pino": "8.10.0",
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-prettify/package.json

@@ -45,7 +45,7 @@
     "sonic-boom": "3.2.1"
   },
   "devDependencies": {
-    "pino": "8.8.0"
+    "pino": "8.10.0"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @verdaccio/logger
 
+## 6.0.0-6-next.30
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.30
+
+## 6.0.0-6-next.29
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.29
+
+## 6.0.0-6-next.28
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.28
+
 ## 6.0.0-6-next.27
 
 ### Patch Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "6.0.0-6-next.27",
+  "version": "6.0.0-6-next.30",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.27",
-    "pino": "8.8.0"
+    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.30",
+    "pino": "8.10.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.19"
+    "@verdaccio/types": "workspace:11.0.0-6-next.21"
   },
   "funding": {
     "type": "opencollective",

packages/middleware/CHANGELOG.md

@@ -1,5 +1,40 @@
 # @verdaccio/middleware
 
+## 6.0.0-6-next.41
+
+### Patch Changes
+
+- 4fc21146: fix: missing logo on header
+- Updated dependencies [378e907d]
+  - @verdaccio/core@6.0.0-6-next.62
+  - @verdaccio/url@11.0.0-6-next.28
+  - @verdaccio/config@6.0.0-6-next.62
+  - @verdaccio/utils@6.0.0-6-next.30
+
+## 6.0.0-6-next.40
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/config@6.0.0-6-next.61
+  - @verdaccio/core@6.0.0-6-next.61
+  - @verdaccio/url@11.0.0-6-next.27
+  - @verdaccio/utils@6.0.0-6-next.29
+
+## 6.0.0-6-next.39
+
+### Minor Changes
+
+- 45c03819: refactor: render html middleware
+
+### Patch Changes
+
+- Updated dependencies [45c03819]
+  - @verdaccio/config@6.0.0-6-next.60
+  - @verdaccio/core@6.0.0-6-next.60
+  - @verdaccio/url@11.0.0-6-next.26
+  - @verdaccio/utils@6.0.0-6-next.28
+
 ## 6.0.0-6-next.38
 
 ### Patch Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "6.0.0-6-next.38",
+  "version": "6.0.0-6-next.41",
   "description": "express middleware utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,18 +38,23 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.59",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.27",
+    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
+    "@verdaccio/config": "workspace:6.0.0-6-next.62",
+    "@verdaccio/url": "workspace:11.0.0-6-next.28",
     "debug": "4.3.4",
+    "lru-cache": "7.16.1",
+    "express": "4.18.2",
     "lodash": "4.17.21",
-    "mime": "2.6.0"
+    "mime": "2.6.0",
+    "express-rate-limit": "5.5.1"
   },
   "funding": {
     "type": "opencollective",
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:6.0.0-6-next.27",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
     "body-parser": "1.20.1",
     "supertest": "6.3.3"
   }

packages/middleware/src/index.ts

@@ -7,6 +7,9 @@ export { expectJson } from './middlewares/json';
 export { antiLoop } from './middlewares/antiLoop';
 export { final } from './middlewares/final';
 export { allow } from './middlewares/allow';
+export { rateLimit } from './middlewares/rate-limit';
+export { userAgent } from './middlewares/user-agent';
+export { webMiddleware } from './middlewares/web';
 export { errorReportingMiddleware, handleError } from './middlewares/error';
 export {
   log,