chore: update versions (6-next) (#3675)

* fix: missing version on fotter

* add tests

* fix version

* Delete Footer.test.tsx.snap

* Update renderHTML.ts

.changeset/blue-cobras-study.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/cli': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/core': minor
+'@verdaccio/types': minor
+---
+
+fix: startup messages improved and logs support on types

.changeset/fresh-chicken-rush.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/server': patch
+'@verdaccio/ui-components': patch
+---
+
+fix: missing version on footer

.changeset/giant-apples-laugh.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix: minor typo on warning message

.changeset/honest-maps-hear.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/test-cli-commons': patch
+'@verdaccio/e2e-ui': patch
+'verdaccio': patch
+---
+
+fix: get-port missing dep

.changeset/kind-ladybugs-admire.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/auth': minor
+'@verdaccio/config': minor
+'@verdaccio/signature': minor
+'@verdaccio/ui-components': minor
+---
+
+feat: signature package

.changeset/pre.json

@@ -56,13 +56,16 @@
     "customprefix-auth": "0.0.1",
     "@verdaccio/crowdin-translations": "1.0.0",
     "@verdaccio/logger-7": "6.0.0-6-next.1",
-    "@verdaccio/logger-commons": "6.0.0-6-next.25"
+    "@verdaccio/logger-commons": "6.0.0-6-next.25",
+    "@verdaccio/e2e-cli-pnpm8": "1.0.1-6-next.6",
+    "@verdaccio/signature": "6.0.0-6-next.1"
   },
   "changesets": [
     "afraid-mice-obey",
     "angry-nails-appear",
     "big-lobsters-sin",
     "big-years-repair",
+    "blue-cobras-study",
     "brave-seahorses-press",
     "bright-poems-obey",
     "brown-cycles-laugh",
@@ -88,10 +91,12 @@
     "fluffy-papayas-lay",
     "forty-students-refuse",
     "four-ways-try",
+    "fresh-chicken-rush",
     "fuzzy-drinks-taste",
     "fuzzy-onions-draw",
     "gentle-parrots-lay",
     "gentle-trains-switch",
+    "giant-apples-laugh",
     "giant-years-trade",
     "gold-vans-tease",
     "green-yaks-divide",
@@ -100,7 +105,9 @@
     "healthy-poets-compare",
     "heavy-ravens-lay",
     "hip-hounds-destroy",
+    "honest-maps-hear",
     "kind-bears-nail",
+    "kind-ladybugs-admire",
     "late-adults-love",
     "late-parents-act",
     "light-pumas-brake",
@@ -128,6 +135,7 @@
     "pretty-hounds-tap",
     "proud-jeans-walk",
     "proud-jobs-hope",
+    "rare-planets-travel",
     "red-chefs-float",
     "red-yaks-sell",
     "rich-badgers-begin",

.changeset/rare-planets-travel.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/config': minor
+'@verdaccio/core': minor
+'@verdaccio/types': minor
+'@verdaccio/signature': minor
+'@verdaccio/test-helper': minor
+---
+
+feat: add forceEnhancedLegacySignature

.github/workflows/ci-windows.yml

@@ -32,7 +32,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -50,7 +50,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -70,7 +70,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -95,7 +95,7 @@ jobs:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -116,7 +116,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/ci.yml

@@ -43,7 +43,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -63,7 +63,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -85,7 +85,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -112,7 +112,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -136,7 +136,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare --activate pnpm@6.32.15
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -34,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2
+        uses: github/codeql-action/init@32dc499307d133bb5085bae78498c0ac2cf762d5 # tag=v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2
+        uses: github/codeql-action/autobuild@32dc499307d133bb5085bae78498c0ac2cf762d5 # tag=v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@17573ee1cc1b9d061760f3a006fc4aac4f944fd5 # tag=v2
+        uses: github/codeql-action/analyze@32dc499307d133bb5085bae78498c0ac2cf762d5 # tag=v2

.github/workflows/e2e-ci.yml

@@ -29,7 +29,7 @@ jobs:
     - name: Install
       run: pnpm recursive install --frozen-lockfile --reporter=silence --ignore-scripts --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -46,7 +46,7 @@ jobs:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -55,7 +55,7 @@ jobs:
       - name: build
         run: pnpm build
       - name: Cache packages
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+        uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         id: cache-packages
         with:
           path: ./packages/
@@ -75,7 +75,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        pkg: [npm6, npm7, npm8, npm9, pnpm6, pnpm7, yarn1, yarn2, yarn3, yarn4]
+        pkg: [npm6, npm7, npm8, npm9, pnpm6, pnpm7, pnpm8, yarn1, yarn2, yarn3, yarn4]
         node: [16, 18, 19]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
@@ -86,13 +86,13 @@ jobs:
           node-version: ${{ matrix.node }}
       - name: Install pnpm
         run: npm i pnpm@6.32.15 -g
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
       - name: Install
         run: pnpm recursive install --offline --frozen-lockfile --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+      - uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: ./packages/
           key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/workflows/static-data.yml

@@ -28,12 +28,6 @@ jobs:
           node-version: 18.x
       - name: install pnpm
         run: sudo npm i pnpm@latest-6 -g
-      - name: set store
-        run: | 
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store
-      - name: setup pnpm config registry
-        run: pnpm config set registry https://registry.verdaccio.org
       - name: install dependencies
         run: pnpm install
       - name: Build Translations percentage

.github/workflows/ui-components.yml

@@ -35,7 +35,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Cache pnpm modules
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+        uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         env:
           cache-name: cache-pnpm-modules
         with:

.github/workflows/website.yml

@@ -31,7 +31,7 @@ jobs:
           node-version: 16
 
       - name: Cache pnpm modules
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+        uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         env:
           cache-name: cache-pnpm-modules
         with:
@@ -51,7 +51,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm build --filter "@verdaccio/crowdin-translations"
       - name: Cache Docusaurus Build
-        uses: actions/cache@6998d139ddd3e68c71e9e398d8e40b71a2f39812 # v3
+        uses: actions/cache@69d9d449aced6a2ede0bc19182fadc3a0a42d2b0 # v3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

e2e/cli/README.md

@@ -10,18 +10,18 @@
 
 ### Commands Tested
 
-| cmd       | npm6 | npm7 | npm8 | npm9 | pnpm6 | pnpm7 | yarn1 | yarn2 | yarn3 | yarn4 |
-| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ----- | ----- | ----- |
-| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
-| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
-| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ❌    |
-| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
-| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
-| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
-| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
-| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
-| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
-| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ❌    | ❌    | ❌    |
+| cmd       | npm6 | npm7 | npm8 | npm9 | pnpm6 | pnpm7 | pnpm8 | yarn1 | yarn2 | yarn3 | yarn4 |
+| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ----- | ----- | ----- | ----- |
+| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
+| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
+| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ❌    |
+| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    | ✅    |
+| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
+| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
+| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
+| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
+| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ⛔    | ⛔    | ⛔    | ⛔    |
+| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ❌    | ❌    | ❌    |
 
 > notes:
 >

e2e/cli/cli-commons/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/test-cli-commons
 
+## 1.1.0-6-next.7
+
+### Patch Changes
+
+- c383eb68: fix: get-port missing dep
+
 ## 1.1.0-6-next.6
 
 ### Minor Changes

e2e/cli/cli-commons/package.json

@@ -1,19 +1,20 @@
 {
   "private": true,
   "name": "@verdaccio/test-cli-commons",
-  "version": "1.1.0-6-next.6",
+  "version": "1.1.0-6-next.7",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24",
     "debug": "4.3.4",
     "fs-extra": "10.1.0",
-    "got": "11.8.5",
+    "got": "11.8.6",
     "js-yaml": "4.1.0",
+    "get-port": "5.1.1",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:6.0.0-6-next.62"
+    "verdaccio": "workspace:6.0.0-6-next.66"
   },
   "scripts": {
     "test": "jest",

e2e/cli/cli-commons/src/registry.ts

@@ -1,5 +1,6 @@
 /* eslint-disable prefer-promise-reject-errors */
 import buildDebug from 'debug';
+import getPort from 'get-port';
 import { merge } from 'lodash';
 import { Registry } from 'verdaccio';
 
@@ -35,6 +36,7 @@ export async function initialSetup(customConfig?: ConfigYaml): Promise<Setup> {
   const { configPath, tempFolder } = await getConfigPath(config);
   debug(`configPath %o`, configPath);
   debug(`tempFolder %o`, tempFolder);
-  const registry = new Registry(configPath, { createUser: true });
+  const port = await getPort();
+  const registry = new Registry(configPath, { createUser: true, port });
   return { registry, tempFolder };
 }

e2e/cli/e2e-npm6/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm6
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-npm6/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm6",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "npm": "6.14.18"
   },
   "scripts": {

e2e/cli/e2e-npm7/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm7
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-npm7/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm7",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "npm": "7.24.2"
   },
   "scripts": {

e2e/cli/e2e-npm8/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm8
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-npm8/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm8",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "npm": "8.19.4"
   },
   "scripts": {

e2e/cli/e2e-npm9/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm9
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-npm9/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm9",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
-    "npm": "9.5.0"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
+    "npm": "9.6.0"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-pnpm6/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-pnpm6
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-pnpm6/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-pnpm6",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "pnpm": "^6.35.1"
   },
   "scripts": {

e2e/cli/e2e-pnpm7/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-pnpm7
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-pnpm7/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-pnpm7",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "pnpm": "^7.27.1"
   },
   "scripts": {

e2e/cli/e2e-pnpm8/.babelrc

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../.babelrc"
+}

e2e/cli/e2e-pnpm8/.eslintrc

@@ -0,0 +1,7 @@
+{
+  "rules": {
+    "no-console": 0,
+    "@typescript-eslint/no-var-requires": 0,
+    "@typescript-eslint/explicit-member-accessibility": 0
+  }
+}

e2e/cli/e2e-pnpm8/CHANGELOG.md

@@ -0,0 +1,53 @@
+# @verdaccio/e2e-cli-pnpm7
+
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
+## 1.0.1-6-next.5
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.5
+
+## 1.0.1-6-next.4
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.4
+
+## 1.0.1-6-next.3
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/test-cli-commons@1.0.1-6-next.3
+
+## 1.0.1-6-next.2
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.2
+
+## 1.0.1-6-next.1
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.1
+
+## 1.0.1-6-next.0
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.0

e2e/cli/e2e-pnpm8/audit.spec.ts

@@ -0,0 +1,45 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', '@verdaccio/cli']])(
+    'should audit a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl(),
+        { jquery: '3.6.1' }
+      );
+      // install is required to create package lock file
+      await pnpm({ cwd: tempFolder }, 'install', ...addRegistry(registry.getRegistryUrl()));
+      const resp = await pnpm(
+        { cwd: tempFolder },
+        'audit',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.metadata).toBeDefined();
+      expect(parsedBody.actions).toBeDefined();
+      expect(parsedBody.advisories).toBeDefined();
+      expect(parsedBody.muted).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/deprecate.spec.ts

@@ -0,0 +1,115 @@
+import {
+  addRegistry,
+  initialSetup,
+  pnpmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('deprecate a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  async function deprecate(tempFolder, packageVersion, registry, message) {
+    await pnpm(
+      { cwd: tempFolder },
+      'deprecate',
+      packageVersion,
+      message,
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+  }
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@verdaccio/deprecated-1']])(
+    'should deprecate a single package %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      // deprecate one version
+      await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+      // verify is deprecated
+      const infoBody = await pnpmUtils.getInfoVersions(pnpm, `${pkgName}`, registry);
+      expect(infoBody.name).toEqual(pkgName);
+      expect(infoBody.deprecated).toEqual(message);
+    }
+  );
+
+  test.each([['@verdaccio/deprecated-2']])('should un-deprecate a package %s', async (pkgName) => {
+    const message = 'some message';
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    // deprecate one version
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, message);
+    // verify is deprecated
+    const infoBody = await pnpmUtils.getInfoVersions(pnpm, `${pkgName}`, registry);
+    expect(infoBody.deprecated).toEqual(message);
+    // empty string is same as undeprecate
+    await deprecate(tempFolder, `${pkgName}@1.0.0`, registry, '');
+    const infoBody2 = await pnpmUtils.getInfoVersions(pnpm, `${pkgName}`, registry);
+    expect(infoBody2.deprecated).toBeUndefined();
+  });
+
+  test.each([['@verdaccio/deprecated-3']])(
+    'should deprecate a multiple packages %s',
+    async (pkgName) => {
+      const message = 'some message';
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      // publish 1.0.0
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      // publish 1.1.0
+      await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      // publish 1.2.0
+      await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      // publish 1.3.0
+      await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      // // deprecate all version
+      await deprecate(tempFolder, pkgName, registry, message);
+      // verify is deprecated
+      for (let v of ['1.0.0', '1.1.0', '1.2.0', '1.3.0']) {
+        const infoResp = await pnpmUtils.getInfoVersions(pnpm, `${pkgName}@${v}`, registry);
+        expect(infoResp.deprecated).toEqual(message);
+      }
+      // publish normal version
+      // publish 1.4.0
+      await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      const infoResp = await pnpmUtils.getInfoVersions(pnpm, `${pkgName}@1.4.0`, registry);
+      // must be not deprecated
+      expect(infoResp.deprecated).toBeUndefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/dist-tags.spec.ts

@@ -0,0 +1,91 @@
+import {
+  addRegistry,
+  initialSetup,
+  pnpmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('publish a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@foo/foo', 'foo']])('should list dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await pnpm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'ls',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
+  });
+
+  test.each([['@verdaccio/bar']])('should remove tag with dist-tags for %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+    const resp2 = await pnpm(
+      { cwd: tempFolder },
+      'dist-tag',
+      'rm',
+      `${pkgName}@1.1.0`,
+      'beta',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp2.stdout).toEqual('-beta: @verdaccio/bar@1.1.0');
+  });
+
+  test.each([['@verdaccio/five']])(
+    'should add tag to package and version with dist-tags for %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      await pnpmUtils.bumbUp(pnpm, tempFolder, registry);
+      await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+      const resp2 = await pnpm(
+        { cwd: tempFolder },
+        'dist-tag',
+        'add',
+        `${pkgName}@1.1.0`,
+        'alfa',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      expect(resp2.stdout).toEqual(`+alfa: ${pkgName}@1.1.0`);
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/info.spec.ts

@@ -0,0 +1,31 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run pnpm info json body', async () => {
+    const resp = await pnpm(
+      {},
+      'info',
+      'verdaccio',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.name).toEqual('verdaccio');
+    expect(parsedBody.dependencies).toBeDefined();
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/install.spec.ts

@@ -0,0 +1,36 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('install a project packages', () => {
+  jest.setTimeout(80000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should run npm install json body', async () => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      'something',
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl(),
+      { react: '18.2.0' }
+    );
+    const resp = await pnpm(
+      { cwd: tempFolder },
+      'install',
+      '--reporter=default',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp.stdout).toMatch(/react/);
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/jest.config.js

@@ -0,0 +1,3 @@
+const config = require('../jest.config');
+
+module.exports = { ...config };

e2e/cli/e2e-pnpm8/package.json

@@ -0,0 +1,12 @@
+{
+  "private": true,
+  "name": "@verdaccio/e2e-cli-pnpm8",
+  "version": "1.0.1-6-next.7",
+  "dependencies": {
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
+    "pnpm": "^8.0.0-alpha.0"
+  },
+  "scripts": {
+    "test": "jest"
+  }
+}

e2e/cli/e2e-pnpm8/ping.spec.ts

@@ -0,0 +1,24 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('ping registry', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should ping registry', async () => {
+    const resp = await pnpm({}, 'ping', '--json', ...addRegistry(registry.getRegistryUrl()));
+    const parsedBody = JSON.parse(resp.stdout as string);
+    expect(parsedBody.registry).toEqual(registry.getRegistryUrl() + '/');
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/publish.spec.ts

@@ -0,0 +1,41 @@
+import { addRegistry, initialSetup, prepareGenericEmptyProject } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('install a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
+    'should publish a package %s',
+    async (pkgName) => {
+      const { tempFolder } = await prepareGenericEmptyProject(
+        pkgName,
+        '1.0.0-patch',
+        registry.port,
+        registry.getToken(),
+        registry.getRegistryUrl()
+      );
+      const resp = await pnpm(
+        { cwd: tempFolder },
+        'publish',
+        '--json',
+        ...addRegistry(registry.getRegistryUrl())
+      );
+      const parsedBody = JSON.parse(resp.stdout as string);
+      expect(parsedBody.name).toEqual(pkgName);
+      expect(parsedBody.files).toBeDefined();
+      expect(parsedBody.files).toBeDefined();
+    }
+  );
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/search.spec.ts

@@ -0,0 +1,33 @@
+import { addRegistry, initialSetup } from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('search a package', () => {
+  jest.setTimeout(10000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test('should search a package', async () => {
+    const resp = await pnpm(
+      {},
+      'search',
+      '@verdaccio/cli',
+      '--json',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    const parsedBody = JSON.parse(resp.stdout as string);
+    const pkgFind = parsedBody.find((item) => {
+      return item.name === '@verdaccio/cli';
+    });
+    expect(pkgFind.name).toEqual('@verdaccio/cli');
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/star.spec.ts

@@ -0,0 +1,89 @@
+import {
+  addRegistry,
+  initialSetup,
+  pnpmUtils,
+  prepareGenericEmptyProject,
+} from '@verdaccio/test-cli-commons';
+
+import { pnpm } from './utils';
+
+describe('star a package', () => {
+  jest.setTimeout(20000);
+  let registry;
+
+  beforeAll(async () => {
+    const setup = await initialSetup();
+    registry = setup.registry;
+    await registry.init();
+  });
+
+  test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    const resp = await pnpm(
+      { cwd: tempFolder },
+      'star',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp.stdout).toEqual(`★  ${pkgName}`);
+  });
+
+  test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    const resp = await pnpm(
+      { cwd: tempFolder },
+      'star',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp.stdout).toEqual(`★  ${pkgName}`);
+
+    const resp1 = await pnpm(
+      { cwd: tempFolder },
+      'unstar',
+      pkgName,
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    expect(resp1.stdout).toEqual(`☆  ${pkgName}`);
+  });
+
+  test('should list stars of a user %s', async () => {
+    const pkgName = '@verdaccio/stars';
+    const { tempFolder } = await prepareGenericEmptyProject(
+      pkgName,
+      '1.0.0-patch',
+      registry.port,
+      registry.getToken(),
+      registry.getRegistryUrl()
+    );
+    await pnpmUtils.publish(pnpm, tempFolder, pkgName, registry);
+    await pnpm({ cwd: tempFolder }, 'star', pkgName, ...addRegistry(registry.getRegistryUrl()));
+    const resp = await pnpm(
+      { cwd: tempFolder },
+      'stars',
+      ...addRegistry(registry.getRegistryUrl())
+    );
+    // side effects: this result is affected the the package published in the previous step
+    expect(resp.stdout).toEqual(`@verdaccio/foo@verdaccio/stars`);
+  });
+
+  afterAll(async () => {
+    registry.stop();
+  });
+});

e2e/cli/e2e-pnpm8/tsconfig.json

@@ -0,0 +1,8 @@
+{
+  "extends": "../../../tsconfig.reference.json",
+  "references": [
+    {
+      "path": "../cli-commons"
+    }
+  ]
+}

e2e/cli/e2e-pnpm8/utils.ts

@@ -0,0 +1,12 @@
+import { SpawnOptions } from 'child_process';
+import { join } from 'path';
+
+import { exec } from '@verdaccio/test-cli-commons';
+
+function getCommand() {
+  return join(__dirname, './node_modules/.bin/pnpm');
+}
+
+export function pnpm(options: SpawnOptions, ...args: string[]) {
+  return exec(options, getCommand(), args);
+}

e2e/cli/e2e-yarn1/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn1
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-yarn1/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn1",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "yarn": "1.22.19"
   },
   "scripts": {

e2e/cli/e2e-yarn2/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn2
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-yarn2/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn2",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "@yarnpkg/cli-dist": "2.4.2"
   },
   "scripts": {

e2e/cli/e2e-yarn3/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn3
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-yarn3/package.json

@@ -1,9 +1,9 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn3",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6",
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7",
     "@yarnpkg/cli-dist": "3.4.1"
   },
   "scripts": {

e2e/cli/e2e-yarn4/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-yarn4
 
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
 ## 1.0.1-6-next.6
 
 ### Patch Changes

e2e/cli/e2e-yarn4/package.json

@@ -1,10 +1,10 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-yarn4",
-  "version": "1.0.1-6-next.6",
+  "version": "1.0.1-6-next.7",
   "dependencies": {
     "@yarnpkg/cli-dist": "4.0.0-rc.39",
-    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.6"
+    "@verdaccio/test-cli-commons": "workspace:1.1.0-6-next.7"
   },
   "scripts": {
     "test": "jest"

e2e/ui/CHANGELOG.md

@@ -0,0 +1,7 @@
+# @verdaccio/e2e-ui
+
+## 2.0.0-6-next.4
+
+### Patch Changes
+
+- c383eb68: fix: get-port missing dep

e2e/ui/cypress.config.ts

@@ -1,4 +1,5 @@
 import { defineConfig } from 'cypress';
+import getPort from 'get-port';
 import { join } from 'path';
 import { Registry, ServerQuery } from 'verdaccio';
 
@@ -17,9 +18,11 @@ export default defineConfig({
           ...configProtected,
           storage: registry1storage,
         });
+        const port = await getPort();
         registry1 = new Registry(protectedRegistry.configPath, {
           createUser: true,
           credentials: { user: 'test', password: 'test' },
+          port,
         });
         await registry1.init();
       });

e2e/ui/cypress/e2e/home.cy.ts

@@ -12,6 +12,11 @@ describe('home spec', () => {
     cy.title().should('eq', 'verdaccio-server-e2e');
   });
 
+  it('version should be displayed', () => {
+    cy.visit(ctx.url);
+    cy.getByTestId('version-footer').contains('Powered by');
+  });
+
   it('should match title with no packages published', () => {
     cy.visit(ctx.url);
     cy.getByTestId('help-card').contains('No Package Published Yet.');

e2e/ui/package.json

@@ -1,14 +1,15 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-ui",
-  "version": "2.0.0-6-next.3",
+  "version": "2.0.0-6-next.4",
   "devDependencies": {
-    "verdaccio": "workspace:6.0.0-6-next.62",
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/test-helper": "workspace:2.0.0-6-next.7",
+    "verdaccio": "workspace:6.0.0-6-next.66",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/test-helper": "workspace:2.0.0-6-next.8",
     "debug": "4.3.4",
-    "cypress": "11.2.0"
+    "cypress": "11.2.0",
+    "get-port": "5.1.1"
   },
   "scripts": {
     "cypress:open": "cypress open",

package.json

@@ -88,7 +88,7 @@
     "detect-secrets": "1.0.6",
     "eslint": "8.34.0",
     "fs-extra": "10.1.0",
-    "got": "11.8.5",
+    "got": "11.8.6",
     "husky": "7.0.4",
     "in-publish": "2.0.1",
     "jest": "29.4.3",

packages/api/CHANGELOG.md

@@ -1,5 +1,58 @@
 # @verdaccio/api
 
+## 6.0.0-6-next.49
+
+### Patch Changes
+
+- Updated dependencies [7ef599cc]
+  - @verdaccio/middleware@6.0.0-6-next.45
+  - @verdaccio/auth@6.0.0-6-next.45
+  - @verdaccio/core@6.0.0-6-next.66
+  - @verdaccio/logger@6.0.0-6-next.34
+  - @verdaccio/store@6.0.0-6-next.46
+  - @verdaccio/config@6.0.0-6-next.66
+  - @verdaccio/utils@6.0.0-6-next.34
+
+## 6.0.0-6-next.48
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/auth@6.0.0-6-next.44
+  - @verdaccio/config@6.0.0-6-next.65
+  - @verdaccio/middleware@6.0.0-6-next.44
+  - @verdaccio/store@6.0.0-6-next.45
+  - @verdaccio/utils@6.0.0-6-next.33
+  - @verdaccio/logger@6.0.0-6-next.33
+
+## 6.0.0-6-next.47
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/auth@6.0.0-6-next.43
+  - @verdaccio/config@6.0.0-6-next.64
+  - @verdaccio/middleware@6.0.0-6-next.43
+  - @verdaccio/store@6.0.0-6-next.44
+  - @verdaccio/utils@6.0.0-6-next.32
+  - @verdaccio/logger@6.0.0-6-next.32
+
+## 6.0.0-6-next.46
+
+### Patch Changes
+
+- Updated dependencies [ddb6a223]
+- Updated dependencies [dc571aab]
+  - @verdaccio/auth@6.0.0-6-next.42
+  - @verdaccio/config@6.0.0-6-next.63
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/middleware@6.0.0-6-next.42
+  - @verdaccio/store@6.0.0-6-next.43
+  - @verdaccio/utils@6.0.0-6-next.31
+  - @verdaccio/logger@6.0.0-6-next.31
+
 ## 6.0.0-6-next.45
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "6.0.0-6-next.45",
+  "version": "6.0.0-6-next.49",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -39,13 +39,13 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:6.0.0-6-next.41",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
-    "@verdaccio/middleware": "workspace:6.0.0-6-next.41",
-    "@verdaccio/store": "workspace:6.0.0-6-next.42",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
+    "@verdaccio/auth": "workspace:6.0.0-6-next.45",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
+    "@verdaccio/middleware": "workspace:6.0.0-6-next.45",
+    "@verdaccio/store": "workspace:6.0.0-6-next.46",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.34",
     "abortcontroller-polyfill": "1.7.5",
     "cookies": "0.8.0",
     "debug": "4.3.4",
@@ -57,9 +57,9 @@
   },
   "devDependencies": {
     "@types/node": "16.18.10",
-    "@verdaccio/server": "workspace:6.0.0-6-next.51",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21",
-    "@verdaccio/test-helper": "workspace:2.0.0-6-next.7",
+    "@verdaccio/server": "workspace:6.0.0-6-next.55",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24",
+    "@verdaccio/test-helper": "workspace:2.0.0-6-next.8",
     "supertest": "6.3.3",
     "nock": "13.2.9",
     "mockdate": "3.0.5"

packages/auth/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @verdaccio/auth
 
+## 6.0.0-6-next.45
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+- @verdaccio/loaders@6.0.0-6-next.35
+- @verdaccio/logger@6.0.0-6-next.34
+- verdaccio-htpasswd@11.0.0-6-next.36
+- @verdaccio/signature@6.0.0-6-next.2
+- @verdaccio/config@6.0.0-6-next.66
+- @verdaccio/utils@6.0.0-6-next.34
+
+## 6.0.0-6-next.44
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/config@6.0.0-6-next.65
+  - @verdaccio/loaders@6.0.0-6-next.34
+  - verdaccio-htpasswd@11.0.0-6-next.35
+  - @verdaccio/utils@6.0.0-6-next.33
+  - @verdaccio/signature@6.0.0-6-next.2
+  - @verdaccio/logger@6.0.0-6-next.33
+
+## 6.0.0-6-next.43
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/config@6.0.0-6-next.64
+  - @verdaccio/loaders@6.0.0-6-next.33
+  - verdaccio-htpasswd@11.0.0-6-next.34
+  - @verdaccio/utils@6.0.0-6-next.32
+  - @verdaccio/logger@6.0.0-6-next.32
+  - @verdaccio/signature@6.0.0-6-next.2
+
+## 6.0.0-6-next.42
+
+### Minor Changes
+
+- ddb6a223: feat: signature package
+
+### Patch Changes
+
+- Updated dependencies [ddb6a223]
+- Updated dependencies [dc571aab]
+  - @verdaccio/config@6.0.0-6-next.63
+  - @verdaccio/signature@6.0.0-6-next.2
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/loaders@6.0.0-6-next.32
+  - verdaccio-htpasswd@11.0.0-6-next.33
+  - @verdaccio/utils@6.0.0-6-next.31
+  - @verdaccio/logger@6.0.0-6-next.31
+
 ## 6.0.0-6-next.41
 
 ### Patch Changes

packages/auth/jest.config.js

@@ -4,7 +4,7 @@ module.exports = Object.assign({}, config, {
   coverageThreshold: {
     global: {
       // FIXME: increase to 90
-      lines: 42,
+      lines: 30,
     },
   },
 });

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "6.0.0-6-next.41",
+  "version": "6.0.0-6-next.45",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -39,19 +39,19 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/loaders": "workspace:6.0.0-6-next.31",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/loaders": "workspace:6.0.0-6-next.35",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
+    "@verdaccio/signature": "workspace:6.0.0-6-next.2",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.34",
     "debug": "4.3.4",
     "express": "4.18.2",
-    "jsonwebtoken": "9.0.0",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:11.0.0-6-next.32"
+    "verdaccio-htpasswd": "workspace:11.0.0-6-next.36"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "funding": {
     "type": "opencollective",

packages/auth/src/auth.ts

@@ -15,6 +15,7 @@ import {
 } from '@verdaccio/core';
 import { asyncLoadPlugin } from '@verdaccio/loaders';
 import { logger } from '@verdaccio/logger';
+import { aesEncrypt, parseBasicPayload, signPayload } from '@verdaccio/signature';
 import {
   AllowAccess,
   Callback,
@@ -27,9 +28,6 @@ import {
 } from '@verdaccio/types';
 import { getMatchedPackagesSpec, isFunction, isNil } from '@verdaccio/utils';
 
-import { signPayload } from './jwt-token';
-import { aesEncrypt } from './legacy-token';
-import { parseBasicPayload } from './token';
 import {
   convertPayloadToBase64,
   getDefaultPlugins,
@@ -47,6 +45,7 @@ export interface TokenEncryption {
   aesEncrypt(buf: string): string | void;
 }
 
+// remove
 export interface AESPayload {
   user: string;
   password: string;

packages/auth/src/index.ts

@@ -1,5 +1,2 @@
-export { Auth, TokenEncryption } from './auth';
+export { Auth } from './auth';
 export * from './utils';
-export * from './legacy-token';
-export * from './jwt-token';
-export * from './token';

packages/auth/src/utils.ts

@@ -11,12 +11,10 @@ import {
   errorUtils,
   pluginUtils,
 } from '@verdaccio/core';
+import { aesDecrypt, parseBasicPayload, verifyPayload } from '@verdaccio/signature';
 import { AuthPackageAllow, Config, Logger, RemoteUser, Security } from '@verdaccio/types';
 
 import { AESPayload, TokenEncryption } from './auth';
-import { verifyPayload } from './jwt-token';
-import { aesDecrypt } from './legacy-token';
-import { parseBasicPayload } from './token';
 
 const debug = buildDebug('verdaccio:auth:utils');
 

packages/auth/test/auth-utils.spec.ts

@@ -17,24 +17,22 @@ import {
   errorUtils,
 } from '@verdaccio/core';
 import { setup } from '@verdaccio/logger';
+import { aesDecrypt, signPayload, verifyPayload } from '@verdaccio/signature';
 import { Config, RemoteUser, Security } from '@verdaccio/types';
 import { buildToken, buildUserBuffer, getAuthenticatedMessage } from '@verdaccio/utils';
-import type { AllowActionCallbackResponse } from '@verdaccio/utils';
 
 import {
   ActionsAllowed,
+  AllowActionCallbackResponse,
   Auth,
-  aesDecrypt,
   allow_action,
   getApiToken,
   getDefaultPlugins,
   getMiddlewareCredentials,
-  signPayload,
   verifyJWTPayload,
-  verifyPayload,
 } from '../src';
 
-setup([]);
+setup({});
 
 const parseConfigurationFile = (conf) => {
   const { name, ext } = path.parse(conf);
@@ -452,6 +450,7 @@ describe('Auth utilities', () => {
         const config: Config = getConfig('security-legacy', secret);
         const auth: Auth = new Auth(config);
         await auth.init();
+        // @ts-expect-error
         const token = auth.aesEncrypt(null);
         const security: Security = config.security;
         const credentials = getMiddlewareCredentials(

packages/auth/tsconfig.json

@@ -19,6 +19,9 @@
     {
       "path": "../loaders"
     },
+    {
+      "path": "../signature"
+    },
     {
       "path": "../logger/logger"
     },

packages/cli/CHANGELOG.md

@@ -1,5 +1,49 @@
 # @verdaccio/cli
 
+## 6.0.0-6-next.66
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+- @verdaccio/logger@6.0.0-6-next.34
+- @verdaccio/node-api@6.0.0-6-next.66
+- @verdaccio/config@6.0.0-6-next.66
+
+## 6.0.0-6-next.65
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/config@6.0.0-6-next.65
+  - @verdaccio/node-api@6.0.0-6-next.65
+  - @verdaccio/logger@6.0.0-6-next.33
+
+## 6.0.0-6-next.64
+
+### Minor Changes
+
+- 974cd8c1: fix: startup messages improved and logs support on types
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/config@6.0.0-6-next.64
+  - @verdaccio/node-api@6.0.0-6-next.64
+  - @verdaccio/logger@6.0.0-6-next.32
+
+## 6.0.0-6-next.63
+
+### Patch Changes
+
+- Updated dependencies [ddb6a223]
+- Updated dependencies [dc571aab]
+  - @verdaccio/config@6.0.0-6-next.63
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/node-api@6.0.0-6-next.63
+  - @verdaccio/logger@6.0.0-6-next.31
+
 ## 6.0.0-6-next.62
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "6.0.0-6-next.62",
+  "version": "6.0.0-6-next.66",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -44,10 +44,10 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
-    "@verdaccio/node-api": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
+    "@verdaccio/node-api": "workspace:6.0.0-6-next.66",
     "clipanion": "3.2.0",
     "envinfo": "7.8.1",
     "kleur": "3.0.3",

packages/cli/src/commands/init.ts

@@ -46,9 +46,7 @@ export class InitCommand extends Command {
   });
 
   private initLogger(logConfig: ConfigYaml) {
-    // @ts-expect-error
     if (logConfig.logs) {
-      // @ts-expect-error
       logConfig.log = logConfig.logs;
       warningUtils.emit(warningUtils.Codes.VERWAR002);
     }

packages/config/CHANGELOG.md

@@ -1,5 +1,41 @@
 # @verdaccio/config
 
+## 6.0.0-6-next.66
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+- @verdaccio/utils@6.0.0-6-next.34
+
+## 6.0.0-6-next.65
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/utils@6.0.0-6-next.33
+
+## 6.0.0-6-next.64
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/utils@6.0.0-6-next.32
+
+## 6.0.0-6-next.63
+
+### Minor Changes
+
+- ddb6a223: feat: signature package
+- dc571aab: feat: add forceEnhancedLegacySignature
+
+### Patch Changes
+
+- Updated dependencies [dc571aab]
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/utils@6.0.0-6-next.31
+
 ## 6.0.0-6-next.62
 
 ### Patch Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "6.0.0-6-next.62",
+  "version": "6.0.0-6-next.66",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,8 +38,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.34",
     "debug": "4.3.4",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",

packages/config/src/config-path.ts

@@ -28,7 +28,6 @@ const debug = buildDebug('verdaccio:config');
  * @return {String} the config file path
  */
 function findConfigFile(configPath?: string): string {
-  // console.log(process.env);
   if (typeof configPath !== 'undefined') {
     return path.resolve(configPath);
   }

packages/config/src/config.ts

@@ -2,7 +2,8 @@ import assert from 'assert';
 import buildDebug from 'debug';
 import _ from 'lodash';
 
-import { APP_ERROR } from '@verdaccio/core';
+import { APP_ERROR, warningUtils } from '@verdaccio/core';
+import { Codes } from '@verdaccio/core/build/warning-utils';
 import {
   Config as AppConfig,
   AuthConf,
@@ -45,9 +46,11 @@ class Config implements AppConfig {
   public users: any;
   public auth: AuthConf;
   public server_id: string;
-  // @deprecated use configPath instead
-  public config_path: string;
   public configPath: string;
+  /**
+   * @deprecated use configPath or config.getConfigPath();
+   */
+  public self_path: string;
   public storage: string | void;
 
   public plugins: string | void | null;
@@ -57,14 +60,24 @@ class Config implements AppConfig {
   public secret: string;
   public flags: FlagsConfig;
   public userRateLimit: RateLimit;
-  public constructor(config: ConfigYaml & { config_path: string }) {
+  private configOptions: { forceEnhancedLegacySignature: boolean };
+  public constructor(
+    config: ConfigYaml & { config_path: string },
+    configOptions = { forceEnhancedLegacySignature: true }
+  ) {
     const self = this;
+    this.configOptions = configOptions;
     this.storage = process.env.VERDACCIO_STORAGE_PATH || config.storage;
     if (!config.configPath) {
-      throw new Error('config_path is required');
+      // backport self_path for previous to version 6
+      // @ts-expect-error
+      config.configPath = config.config_path ?? config.self_path;
+      if (!config.configPath) {
+        throw new Error('configPath property is required');
+      }
     }
-    this.config_path = config.config_path ?? (config.configPath as string);
     this.configPath = config.configPath;
+    this.self_path = this.configPath;
     debug('config path: %s', this.configPath);
     this.plugins = config.plugins;
     this.security = _.merge(defaultSecurity, config.security);
@@ -117,6 +130,10 @@ class Config implements AppConfig {
     }
   }
 
+  public getConfigPath() {
+    return this.configPath;
+  }
+
   /**
    * Check for package spec
    */
@@ -127,18 +144,35 @@ class Config implements AppConfig {
 
   /**
    * Store or create whether receive a secret key
+   * @secret external secret key
    */
   public checkSecretKey(secret?: string): string {
     debug('check secret key');
-    if (_.isString(secret) && _.isEmpty(secret) === false) {
+    if (typeof secret === 'string' && _.isEmpty(secret) === false) {
       this.secret = secret;
       debug('reusing previous key');
       return secret;
     }
-    // it generates a secret key
+    // generate a new a secret key
     // FUTURE: this might be an external secret key, perhaps within config file?
     debug('generate a new key');
-    this.secret = generateRandomSecretKey();
+    //
+    if (this.configOptions.forceEnhancedLegacySignature) {
+      this.secret = generateRandomSecretKey();
+    } else {
+      this.secret =
+        this.security.enhancedLegacySignature === true
+          ? generateRandomSecretKey()
+          : generateRandomHexString(32);
+      // set this to false allow use old token signature and is not recommended
+      // only use for migration reasons, major release will remove this property and
+      // set it by default
+      if (this.security.enhancedLegacySignature === false) {
+        warningUtils.emit(Codes.VERWAR005);
+      }
+    }
+
+    debug('generated a new secret key %s', this.secret?.length);
     return this.secret;
   }
 }

packages/config/tsconfig.json

@@ -9,6 +9,9 @@
   "references": [
     {
       "path": "../utils"
+    },
+    {
+      "path": "../core/core"
     }
   ]
 }

packages/core/core/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @verdaccio/core
 
+## 6.0.0-6-next.66
+
+## 6.0.0-6-next.65
+
+### Patch Changes
+
+- a1da1130: fix: minor typo on warning message
+
+## 6.0.0-6-next.64
+
+### Minor Changes
+
+- 974cd8c1: fix: startup messages improved and logs support on types
+
+## 6.0.0-6-next.63
+
+### Minor Changes
+
+- dc571aab: feat: add forceEnhancedLegacySignature
+
 ## 6.0.0-6-next.62
 
 ### Patch Changes

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "6.0.0-6-next.62",
+  "version": "6.0.0-6-next.66",
   "description": "core utilities",
   "keywords": [
     "private",
@@ -44,7 +44,7 @@
     "lodash": "4.17.21",
     "typedoc": "0.23.25",
     "typedoc-plugin-missing-exports": "latest",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/core/src/warning-utils.ts

@@ -9,6 +9,7 @@ export enum Codes {
   VERWAR002 = 'VERWAR002',
   VERWAR003 = 'VERWAR003',
   VERWAR004 = 'VERWAR004',
+  VERWAR005 = 'VERWAR005',
   // deprecation warnings
   VERDEP003 = 'VERDEP003',
 }
@@ -16,7 +17,7 @@ export enum Codes {
 warningInstance.create(
   verdaccioWarning,
   Codes.VERWAR002,
-  `The property config "logs" property is longer supported, rename to "log" and use object instead`
+  `The configuration property "logs" has been deprecated, please rename to "log" for future compatibility`
 );
 
 warningInstance.create(
@@ -39,6 +40,12 @@ host:port (e.g. "localhost:4873") or full url '(e.g. "http://localhost:4873/")
 https://verdaccio.org/docs/en/configuration#listen-port`
 );
 
+warningInstance.create(
+  verdaccioWarning,
+  Codes.VERWAR005,
+  'disable enhanced legacy signature is considered a security risk, please reconsider enable it'
+);
+
 warningInstance.create(
   verdaccioDeprecation,
   Codes.VERDEP003,

packages/core/file-locking/package.json

@@ -39,7 +39,7 @@
     "lockfile": "1.0.4"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,40 @@
 # Change Log
 
+## 11.0.0-6-next.35
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+- @verdaccio/url@11.0.0-6-next.32
+- @verdaccio/utils@6.0.0-6-next.34
+
+## 11.0.0-6-next.34
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/url@11.0.0-6-next.31
+  - @verdaccio/utils@6.0.0-6-next.33
+
+## 11.0.0-6-next.33
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/url@11.0.0-6-next.30
+  - @verdaccio/utils@6.0.0-6-next.32
+
+## 11.0.0-6-next.32
+
+### Patch Changes
+
+- Updated dependencies [dc571aab]
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/url@11.0.0-6-next.29
+  - @verdaccio/utils@6.0.0-6-next.31
+
 ## 11.0.0-6-next.31
 
 ### Patch Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "11.0.0-6-next.31",
+  "version": "11.0.0-6-next.35",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -34,13 +34,13 @@
   },
   "dependencies": {
     "debug": "4.3.4",
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/url": "workspace:11.0.0-6-next.28",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/url": "workspace:11.0.0-6-next.32",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.34",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24",
     "node-mocks-http": "1.12.1"
   },
   "scripts": {

packages/core/types/CHANGELOG.md

@@ -1,5 +1,23 @@
 # Change Log
 
+## 11.0.0-6-next.24
+
+### Patch Changes
+
+- 7ef599cc: fix: missing version on footer
+
+## 11.0.0-6-next.23
+
+### Minor Changes
+
+- 974cd8c1: fix: startup messages improved and logs support on types
+
+## 11.0.0-6-next.22
+
+### Minor Changes
+
+- dc571aab: feat: add forceEnhancedLegacySignature
+
 ## 11.0.0-6-next.21
 
 ### Patch Changes

packages/core/types/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/types",
-  "version": "11.0.0-6-next.21",
+  "version": "11.0.0-6-next.24",
   "description": "verdaccio types definitions",
   "keywords": [
     "private",

packages/core/types/src/configuration.ts

@@ -75,16 +75,6 @@ export type RateLimit = {
   max?: number;
 };
 
-// export interface WebConf {
-//   enable?: boolean;
-//   title?: string;
-//   logo?: string;
-//   favicon?: string;
-//   gravatar?: boolean;
-//   sort_packages?: string;
-//   rateLimit?: RateLimit;
-// }
-
 export type FlagsConfig = {
   searchRemote?: boolean;
   changePassword?: boolean;
@@ -105,6 +95,14 @@ export type CommonWebConf = {
   login?: boolean;
   scope?: string;
   pkgManagers?: PackageManagers[];
+  showInfo?: boolean;
+  showSettings?: boolean;
+  showSearch?: boolean;
+  showFooter?: boolean;
+  showThemeSwitch?: boolean;
+  showDownloadTarball?: boolean;
+  primaryColor: string;
+  showRaw?: boolean;
 };
 
 /**
@@ -112,21 +110,11 @@ export type CommonWebConf = {
  */
 export type TemplateUIOptions = {
   uri?: string;
-  darkMode?: boolean;
   protocol?: string;
   host?: string;
-  // deprecated
+  // @deprecated use base instead
   basename?: string;
-  scope?: string;
-  showInfo?: boolean;
-  showSettings?: boolean;
-  showSearch?: boolean;
-  showFooter?: boolean;
-  showThemeSwitch?: boolean;
-  showDownloadTarball?: boolean;
-  showRaw?: boolean;
   base: string;
-  primaryColor: string;
   version?: string;
   flags: FlagsConfig;
 } & CommonWebConf;
@@ -135,14 +123,18 @@ export type TemplateUIOptions = {
  * Options on config.yaml for web
  */
 export type WebConf = {
-  // FIXME: rename to primaryColor and move it to CommonWebConf
+  // @deprecated use primaryColor
   primary_color?: string;
+  primaryColor?: string;
   enable?: boolean;
   scriptsHead?: string[];
   scriptsBodyAfter?: string[];
+  scriptsbodyBefore?: string[];
   metaScripts?: string[];
   bodyBefore?: string[];
   bodyAfter?: string[];
+  rateLimit?: RateLimit;
+  html_cache?: boolean;
 } & CommonWebConf;
 
 export interface UpLinksConfList {
@@ -185,6 +177,7 @@ export interface APITokenOptions {
 }
 
 export interface Security {
+  enhancedLegacySignature?: boolean;
   web: JWTOptions;
   api: APITokenOptions;
 }
@@ -244,6 +237,8 @@ export interface ConfigYaml {
   packages: PackageList;
   uplinks: UpLinksConfList;
   log?: LoggerConfItem;
+  // @deprecated deprecation path from 5.x
+  logs?: LoggerConfItem;
   web?: WebConf;
   auth?: AuthConf;
   security: Security;
@@ -264,12 +259,13 @@ export interface ConfigYaml {
   url_prefix?: string;
   server?: ServerSettingsConf;
   flags?: FlagsConfig;
+  // @deprecated use flags instead
+  experiments?: FlagsConfig;
   userRateLimit?: RateLimit;
   // internal objects, added by internal yaml to JS config parser
-  // @deprecated use configPath instead
-  config_path?: string;
   // save the configuration file path
   configPath?: string;
+  i18n?: { web: string };
 }
 
 /**
@@ -282,6 +278,8 @@ export interface Config extends Omit<ConfigYaml, 'packages' | 'security' | 'conf
   secret: string;
   // save the configuration file path, it's fails without thi configPath
   configPath: string;
+  // @deprecated use configPath
+  self_path?: string;
   // packages from yaml file looks different from packages inside the config file
   packages: PackageList;
   // security object defaults is added by the config file but optional in the yaml file

packages/core/url/CHANGELOG.md

@@ -1,5 +1,32 @@
 # Change Log
 
+## 11.0.0-6-next.32
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+
+## 11.0.0-6-next.31
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+
+## 11.0.0-6-next.30
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+
+## 11.0.0-6-next.29
+
+### Patch Changes
+
+- Updated dependencies [dc571aab]
+  - @verdaccio/core@6.0.0-6-next.63
+
 ## 11.0.0-6-next.28
 
 ### Patch Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "11.0.0-6-next.28",
+  "version": "11.0.0-6-next.32",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -33,13 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
     "debug": "4.3.4",
     "lodash": "4.17.21",
     "validator": "13.9.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24",
     "node-mocks-http": "1.12.1"
   },
   "scripts": {

packages/hooks/CHANGELOG.md

@@ -1,5 +1,36 @@
 # @verdaccio/hooks
 
+## 6.0.0-6-next.36
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+- @verdaccio/logger@6.0.0-6-next.34
+
+## 6.0.0-6-next.35
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/logger@6.0.0-6-next.33
+
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/logger@6.0.0-6-next.32
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- Updated dependencies [dc571aab]
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/logger@6.0.0-6-next.31
+
 ## 6.0.0-6-next.32
 
 ### Patch Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "6.0.0-6-next.32",
+  "version": "6.0.0-6-next.36",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,8 +29,8 @@
     "node": ">=16"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
     "core-js": "3.28.0",
     "debug": "4.3.4",
     "handlebars": "4.7.7",
@@ -38,9 +38,9 @@
   },
   "devDependencies": {
     "@types/node": "16.18.10",
-    "@verdaccio/auth": "workspace:6.0.0-6-next.41",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/auth": "workspace:6.0.0-6-next.45",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/loaders/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @verdaccio/loaders
 
+## 6.0.0-6-next.35
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.34
+
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.33
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.32
+
+## 6.0.0-6-next.32
+
+### Patch Changes
+
+- @verdaccio/logger@6.0.0-6-next.31
+
 ## 6.0.0-6-next.31
 
 ### Patch Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "6.0.0-6-next.31",
+  "version": "6.0.0-6-next.35",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -13,14 +13,14 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/types": "workspace:11.0.0-6-next.24",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "verdaccio-auth-memory": "workspace:*",
     "customprefix-auth": "1.0.0-6-next.0"

packages/logger/logger-7/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @verdaccio/logger-7
 
+## 6.0.0-6-next.11
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.34
+
+## 6.0.0-6-next.10
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.33
+
+## 6.0.0-6-next.9
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.32
+
+## 6.0.0-6-next.8
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.31
+
 ## 6.0.0-6-next.7
 
 ### Patch Changes

packages/logger/logger-7/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-7",
-  "version": "6.0.0-6-next.7",
+  "version": "6.0.0-6-next.11",
   "description": "logger for verdaccio 5.x version",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.30",
+    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.34",
     "pino": "7.11.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,32 @@
 # @verdaccio/logger-commons
 
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- @verdaccio/core@6.0.0-6-next.66
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+
+## 6.0.0-6-next.32
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+
+## 6.0.0-6-next.31
+
+### Patch Changes
+
+- Updated dependencies [dc571aab]
+  - @verdaccio/core@6.0.0-6-next.63
+
 ## 6.0.0-6-next.30
 
 ### Patch Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "6.0.0-6-next.30",
+  "version": "6.0.0-6-next.34",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,14 +38,14 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
     "@verdaccio/logger-prettify": "workspace:6.0.0-6-next.9",
     "debug": "4.3.4",
     "colorette": "2.0.19"
   },
   "devDependencies": {
     "pino": "8.10.0",
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "funding": {
     "type": "opencollective",

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,29 @@
 # @verdaccio/logger
 
+## 6.0.0-6-next.34
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.34
+
+## 6.0.0-6-next.33
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.33
+
+## 6.0.0-6-next.32
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.32
+
+## 6.0.0-6-next.31
+
+### Patch Changes
+
+- @verdaccio/logger-commons@6.0.0-6-next.31
+
 ## 6.0.0-6-next.30
 
 ### Patch Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "6.0.0-6-next.30",
+  "version": "6.0.0-6-next.34",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,11 +38,11 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.30",
+    "@verdaccio/logger-commons": "workspace:6.0.0-6-next.34",
     "pino": "8.10.0"
   },
   "devDependencies": {
-    "@verdaccio/types": "workspace:11.0.0-6-next.21"
+    "@verdaccio/types": "workspace:11.0.0-6-next.24"
   },
   "funding": {
     "type": "opencollective",

packages/middleware/CHANGELOG.md

@@ -1,5 +1,46 @@
 # @verdaccio/middleware
 
+## 6.0.0-6-next.45
+
+### Patch Changes
+
+- 7ef599cc: fix: missing version on footer
+  - @verdaccio/core@6.0.0-6-next.66
+  - @verdaccio/url@11.0.0-6-next.32
+  - @verdaccio/config@6.0.0-6-next.66
+  - @verdaccio/utils@6.0.0-6-next.34
+
+## 6.0.0-6-next.44
+
+### Patch Changes
+
+- Updated dependencies [a1da1130]
+  - @verdaccio/core@6.0.0-6-next.65
+  - @verdaccio/config@6.0.0-6-next.65
+  - @verdaccio/url@11.0.0-6-next.31
+  - @verdaccio/utils@6.0.0-6-next.33
+
+## 6.0.0-6-next.43
+
+### Patch Changes
+
+- Updated dependencies [974cd8c1]
+  - @verdaccio/core@6.0.0-6-next.64
+  - @verdaccio/config@6.0.0-6-next.64
+  - @verdaccio/url@11.0.0-6-next.30
+  - @verdaccio/utils@6.0.0-6-next.32
+
+## 6.0.0-6-next.42
+
+### Patch Changes
+
+- Updated dependencies [ddb6a223]
+- Updated dependencies [dc571aab]
+  - @verdaccio/config@6.0.0-6-next.63
+  - @verdaccio/core@6.0.0-6-next.63
+  - @verdaccio/url@11.0.0-6-next.29
+  - @verdaccio/utils@6.0.0-6-next.31
+
 ## 6.0.0-6-next.41
 
 ### Patch Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "6.0.0-6-next.41",
+  "version": "6.0.0-6-next.45",
   "description": "express middleware utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,10 +38,10 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:6.0.0-6-next.62",
-    "@verdaccio/utils": "workspace:6.0.0-6-next.30",
-    "@verdaccio/config": "workspace:6.0.0-6-next.62",
-    "@verdaccio/url": "workspace:11.0.0-6-next.28",
+    "@verdaccio/core": "workspace:6.0.0-6-next.66",
+    "@verdaccio/utils": "workspace:6.0.0-6-next.34",
+    "@verdaccio/config": "workspace:6.0.0-6-next.66",
+    "@verdaccio/url": "workspace:11.0.0-6-next.32",
     "debug": "4.3.4",
     "lru-cache": "7.16.1",
     "express": "4.18.2",
@@ -54,7 +54,7 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:6.0.0-6-next.30",
+    "@verdaccio/logger": "workspace:6.0.0-6-next.34",
     "body-parser": "1.20.1",
     "supertest": "6.3.3"
   }