chore: update versions (next-7) (#4658)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/big-cameras-invent.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+chore: fix types for some store tests

.changeset/dry-shoes-report.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/logger-commons': patch
+'@verdaccio/logger-prettify': patch
+---
+
+fix: log spacing depending on the FORMAT and COLORS options

.changeset/eight-icons-heal.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/tarball': patch
+'@verdaccio/store': patch
+---
+
+feat: add tarball details for published packages

.changeset/pre.json

@@ -61,8 +61,11 @@
   },
   "changesets": [
     "angry-trees-tie",
+    "big-cameras-invent",
     "breezy-mayflies-pull",
     "chilled-carrots-guess",
+    "dry-shoes-report",
+    "eight-icons-heal",
     "eight-squids-judge",
     "eighty-lobsters-study",
     "good-cups-train",
@@ -85,6 +88,7 @@
     "slow-wasps-glow",
     "spicy-birds-flow",
     "strange-points-repair",
+    "stupid-dancers-relate",
     "thirty-toes-swim",
     "unlucky-cycles-sparkle",
     "weak-fans-explain",

.changeset/stupid-dancers-relate.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/url': patch
+---
+
+patch(core/url): Throw if VERDACCIO_FORWARDED_PROTO resolves to an array (#4613 by @Tobbe)

.github/dependabot.yml

@@ -8,18 +8,11 @@ updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: 'github-actions'
     directory: '/'
-    schedule:
-      interval: 'weekly'
-
-  # Maintain dependencies for npm
-  - package-ecosystem: 'npm'
-    directory: '/'
-    schedule:
-      interval: 'daily'
-    allow:
-      - dependency-name: '@verdaccio/*'
-      - dependency-name: 'verdaccio-*'
+    open-pull-requests-limit: 1
+    prefix: "[github-actions] "
     assignees:
-      - 'verdacciobot'
+      - 'verdacciobot'    
+    schedule:
+      interval: 'monthly'
     labels:
       - 'bot: dependencies'

.github/workflows/changesets.yml

@@ -20,7 +20,7 @@ jobs:
     if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
     steps:
       - name: checkout code repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
         with:
           fetch-depth: 0
 

.github/workflows/ci-windows.yml

@@ -18,7 +18,7 @@ jobs:
         env:
           NODE_ENV: production          
     steps:
-    - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+    - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
     - name: Node
       uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
       with:
@@ -32,7 +32,7 @@ jobs:
     - name: Install
       run: pnpm install --registry http://localhost:4873
     - name: Cache .pnpm-store
-      uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -43,14 +43,14 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -67,14 +67,14 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -96,14 +96,14 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node ${{ matrix.node_version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node_version }}
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -122,13 +122,13 @@ jobs:
     runs-on: windows-latest
     name: UI Test E2E
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
         run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/ci.yml

@@ -30,7 +30,7 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -46,7 +46,7 @@ jobs:
       - name: Install
         run: pnpm install  --registry http://localhost:4873
       - name: Cache .pnpm-store
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -57,7 +57,7 @@ jobs:
     name: Lint
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -66,7 +66,7 @@ jobs:
         run: |
           corepack enable
           corepack install
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -82,7 +82,7 @@ jobs:
     name: Format
     needs: prepare
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -91,7 +91,7 @@ jobs:
         run: |
           corepack enable
           corepack install
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -112,7 +112,7 @@ jobs:
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node ${{ matrix.node_version }}
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -121,7 +121,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -140,7 +140,7 @@ jobs:
     name: synchronize translations
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version-file: '.nvmrc'
@@ -148,7 +148,7 @@ jobs:
         run: |
           corepack enable
           corepack install
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -21,7 +21,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
         with:
           # We must fetch at least the immediate parents so that if this is
           # a pull request then we can checkout the head.
@@ -34,7 +34,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@ceaec5c11a131e0d282ff3b6f095917d234caace # v2
+        uses: github/codeql-action/init@f079b8493333aace61c81488f8bd40919487bd9f # v2
 
       # Override language selection by uncommenting this and choosing your languages
       # with:
@@ -42,7 +42,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@ceaec5c11a131e0d282ff3b6f095917d234caace # v2
+        uses: github/codeql-action/autobuild@f079b8493333aace61c81488f8bd40919487bd9f # v2
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -56,4 +56,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ceaec5c11a131e0d282ff3b6f095917d234caace # v2
+        uses: github/codeql-action/analyze@f079b8493333aace61c81488f8bd40919487bd9f # v2

.github/workflows/docker-proxy-apache-e2e.yml

@@ -16,7 +16,7 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       
     - name: Start containers
       run: docker-compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -13,7 +13,7 @@ jobs:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
     - name: Checkout
-      uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       
     - name: Start containers
       run: docker-compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build

.github/workflows/docker-publish.yml

@@ -24,7 +24,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # tag=v1
       - uses: docker/setup-buildx-action@v1
         with:

.github/workflows/e2e-ci.yml

@@ -18,7 +18,7 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -34,7 +34,7 @@ jobs:
       - name: Install
         run: pnpm install --reporter=silence --ignore-scripts --registry http://localhost:4873
       - name: Cache .pnpm-store
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -44,7 +44,7 @@ jobs:
     needs: [prepare]
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node 16
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
@@ -53,7 +53,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare 
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -65,7 +65,7 @@ jobs:
       - name: build
         run: pnpm build
       - name: Cache packages
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         id: cache-packages
         with:
           path: ./packages/
@@ -97,7 +97,7 @@ jobs:
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node }}
@@ -105,7 +105,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare 
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -114,7 +114,7 @@ jobs:
           pnpm config set store-dir ~/.pnpm-store
       - name: Install
         run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ./packages/
           key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -141,7 +141,7 @@ jobs:
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node }}
@@ -149,7 +149,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -158,7 +158,7 @@ jobs:
           pnpm config set store-dir ~/.pnpm-store
       - name: Install
         run: pnpm install --loglevel debug --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ./packages/
           key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -186,7 +186,7 @@ jobs:
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:
           node-version: ${{ matrix.node }}
@@ -194,7 +194,7 @@ jobs:
         run: |
           corepack enable
           corepack prepare 
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
@@ -203,7 +203,7 @@ jobs:
           pnpm config set store-dir ~/.pnpm-store
       - name: Install
         run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ./packages/
           key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/workflows/e2e-ui.yml

@@ -18,7 +18,7 @@ jobs:
         env:
           NODE_ENV: production
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
         with:

.github/workflows/static-data.yml

@@ -20,7 +20,7 @@ jobs:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
         with:
           persist-credentials: false
           fetch-depth: 0

.github/workflows/ui-components.yml

@@ -23,7 +23,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
 
       - name: Use Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
@@ -31,7 +31,7 @@ jobs:
           node-version-file: '.nvmrc'
 
       - name: Cache pnpm modules
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         env:
           cache-name: cache-pnpm-modules
         with:

.github/workflows/website.yml

@@ -26,7 +26,7 @@ jobs:
     env:
       NODE_OPTIONS: --max_old_space_size=4096
     steps:
-      - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v3
 
       - name: Node
         uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
@@ -43,7 +43,7 @@ jobs:
       - name: Install
         run: pnpm install  --registry http://localhost:4873
       - name: Cache .pnpm-store
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
@@ -54,7 +54,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/crowdin-translations build
       - name: Cache Docusaurus Build
-        uses: actions/cache@e12d46a63a90f2fae62d114769bbf2a179198b5c # v3
+        uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

docs/migration-v5-to-v6.md

@@ -1,14 +1,14 @@
-# Migration guide from Verdaccio 5 to Verdaccio 6
+# Migration Guide from Verdaccio 5 to Verdaccio 6
 
 Notes regarding breaking changes for next major release.
 
-> This list might growth over the development.
+> This list might growth over the course of development.
 
-## Breaking changes
+## Breaking Changes
 
 ### New node-api interface [#2165](https://github.com/verdaccio/verdaccio/pull/2165)
 
-If you are using the node-api, the new structure is Promise based and less arguments.
+If you are using the `node-api`, the new structure is Promise based and less arguments.
 
 ```js
 import { runServer } from '@verdaccio/node-api';
@@ -22,7 +22,7 @@ app.listen(4000, (event) => {
 });
 ```
 
-### allow other password hashing algorithms [#1917](https://github.com/verdaccio/verdaccio/pull/1917)
+### Allow other password hashing algorithms [#1917](https://github.com/verdaccio/verdaccio/pull/1917)
 
 The current implementation of the `htpasswd` module supports multiple hash formats on verify, but only `crypt` on sign in.
 `crypt` is an insecure old format, so to improve the security of the new `verdaccio` release we introduce the support of multiple hash algorithms on sign in step.
@@ -53,21 +53,28 @@ htpasswd:
 
 - The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
 
-```js
-flags: token: false;
-search: false;
+```yaml
+flags:
+  token: false;
+  search: false;
 ```
 
 - The `self_path` property from the config file is being removed in favor of `config_file` full path.
 - Refactor `config` module, better types and utilities
 
-### legacy token signature by removing crypto.createDecipher is deprecated [#1953](https://github.com/verdaccio/verdaccio/pull/1953)
+### Legacy token signature by removing crypto.createDecipher is deprecated [#1953](https://github.com/verdaccio/verdaccio/pull/1953)
 
 - Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
 - **The new signature invalidates all previous tokens generated by Verdaccio 5 or previous versions**.
 - The secret key must have 32 characters long
   > Remediation, update `.verdaccio-db.json` secret field with a secret key with 32 characters.
 
+### Legacy token secret length
+
+If the migration to v6 include an update to node 22 or higher, be aware that token secrets with a length other than 32 are not
+supported anymore. A new secret will be generated. See [docs](https://verdaccio.org/docs/6.x/configuration#legacy-token-signature)
+for more details.
+
 #### New environment variables
 
 Introduce environment variables for legacy tokens.

e2e/cli/cli-commons/package.json

@@ -5,8 +5,8 @@
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "debug": "4.3.4",
     "fs-extra": "11.2.0",
@@ -14,7 +14,7 @@
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:7.0.0-next-7.15"
+    "verdaccio": "workspace:7.0.0-next-7.16"
   },
   "scripts": {
     "test": "jest",

e2e/ui/package.json

@@ -3,9 +3,9 @@
   "name": "@verdaccio/e2e-ui",
   "version": "2.0.0",
   "devDependencies": {
-    "verdaccio": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
+    "verdaccio": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
     "@verdaccio/test-helper": "workspace:3.0.0-next-7.2",
     "debug": "4.3.4",
     "cypress": "^13.6.0",

packages/api/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @verdaccio/api
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [e5624e1]
+- Updated dependencies [5bfab62]
+  - @verdaccio/store@7.0.0-next-7.16
+  - @verdaccio/logger@7.0.0-next-7.16
+  - @verdaccio/middleware@7.0.0-next-7.16
+  - @verdaccio/auth@7.0.0-next-7.16
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/config@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/api",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,18 +38,18 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/middleware": "workspace:7.0.0-next-7.15",
-    "@verdaccio/store": "workspace:7.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/middleware": "workspace:7.0.0-next-7.16",
+    "@verdaccio/store": "workspace:7.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "abortcontroller-polyfill": "1.7.5",
     "body-parser": "1.20.2",
     "cookies": "0.9.0",
     "debug": "4.3.4",
-    "express": "4.18.3",
+    "express": "4.19.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
     "semver": "7.6.0"

packages/auth/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @verdaccio/auth
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/loaders@7.0.0-next-7.16
+- verdaccio-htpasswd@12.0.0-next-7.16
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+- @verdaccio/utils@7.0.0-next-7.16
+- @verdaccio/signature@7.0.0-next-7.5
+
 ## 7.0.0-next-7.15
 
 ### Minor Changes

packages/auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/auth",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,20 +38,20 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/loaders": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/loaders": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "@verdaccio/signature": "workspace:7.0.0-next-7.5",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4",
     "lodash": "4.17.21",
-    "verdaccio-htpasswd": "workspace:12.0.0-next-7.15"
+    "verdaccio-htpasswd": "workspace:12.0.0-next-7.16"
   },
   "devDependencies": {
-    "express": "4.18.3",
+    "express": "4.19.2",
     "supertest": "6.3.4",
-    "@verdaccio/middleware": "workspace:7.0.0-next-7.15",
+    "@verdaccio/middleware": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3"
   },
   "funding": {

packages/cli/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @verdaccio/cli
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/node-api@7.0.0-next-7.16
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/cli",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "author": {
     "name": "Juan Picado",
     "email": "juanpicado19@gmail.com"
@@ -43,10 +43,10 @@
     "start": "ts-node src/index.ts"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/node-api": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/node-api": "workspace:7.0.0-next-7.16",
     "clipanion": "3.2.1",
     "envinfo": "7.11.0",
     "kleur": "4.1.5",

packages/config/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/config
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Minor Changes

packages/config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/config",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,8 +38,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",

packages/core/core/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @verdaccio/core
 
+## 7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Minor Changes

packages/core/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/core",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "core utilities",
   "keywords": [
     "private",

packages/core/tarball/CHANGELOG.md

@@ -1,5 +1,15 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- 5bfab62: feat: add tarball details for published packages
+- Updated dependencies [38b1e82]
+  - @verdaccio/url@12.0.0-next-7.16
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/core/tarball/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/tarball",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "tarball utilities resolver",
   "keywords": [
     "private",
@@ -33,11 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/url": "workspace:12.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/url": "workspace:12.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4",
-    "lodash": "4.17.21"
+    "gunzip-maybe": "^1.4.2",
+    "lodash": "4.17.21",
+    "tar-stream": "^3.1.7"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:12.0.0-next-7.3",

packages/core/tarball/src/getTarballDetails.ts

@@ -0,0 +1,34 @@
+import gunzipMaybe from 'gunzip-maybe';
+import { Readable } from 'stream';
+import * as tarStream from 'tar-stream';
+
+export type TarballDetails = {
+  fileCount: number;
+  unpackedSize: number; // in bytes
+};
+
+export async function getTarballDetails(buffer: Buffer): Promise<TarballDetails> {
+  let fileCount = 0;
+  let unpackedSize = 0;
+  const readable = Readable.from(buffer);
+  const unpack = tarStream.extract();
+
+  return new Promise((resolve, reject) => {
+    readable
+      .pipe(gunzipMaybe())
+      .pipe(unpack)
+      .on('entry', (header, stream, next) => {
+        fileCount++;
+        unpackedSize += Number(header.size);
+        stream.resume(); // important to ensure that "entry" events keep firing
+        next();
+      })
+      .on('finish', () => {
+        resolve({
+          fileCount,
+          unpackedSize,
+        });
+      })
+      .on('error', reject);
+  });
+}

packages/core/tarball/src/index.ts

@@ -5,5 +5,6 @@ export {
   convertDistVersionToLocalTarballsUrl,
 } from './convertDistRemoteToLocalTarballUrls';
 export { extractTarballFromUrl, getLocalRegistryTarballUri } from './getLocalRegistryTarballUri';
+export { getTarballDetails, TarballDetails } from './getTarballDetails';
 
 export { RequestOptions };

packages/core/tarball/tests/getTarballDetails.spec.ts

@@ -0,0 +1,33 @@
+import fs from 'fs';
+import path from 'path';
+
+import { getTarballDetails } from '../src/getTarballDetails.ts';
+
+const getFilePath = (filename: string): string => {
+  return path.resolve(__dirname, `assets/${filename}`);
+};
+
+const getFileBuffer = async (filename: string): Promise<Buffer> => {
+  return fs.promises.readFile(getFilePath(filename));
+};
+
+describe('getTarballDetails', () => {
+  test('should return stats of tarball (gzipped)', async () => {
+    const buffer = await getFileBuffer('tarball.tgz');
+    const details = await getTarballDetails(buffer);
+    expect(details.fileCount).toBe(2);
+    expect(details.unpackedSize).toBe(1280);
+  });
+
+  test('should return stats of tarball (uncompressed)', async () => {
+    const buffer = await getFileBuffer('tarball.tar');
+    const details = await getTarballDetails(buffer);
+    expect(details.fileCount).toBe(2);
+    expect(details.unpackedSize).toBe(1280);
+  });
+
+  test('should throw an error if the buffer is corrupt', async () => {
+    const corruptBuffer = Buffer.from('this is not a tarball');
+    await expect(getTarballDetails(corruptBuffer)).rejects.toThrow();
+  });
+});

packages/core/url/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- 38b1e82: patch(core/url): Throw if VERDACCIO_FORWARDED_PROTO resolves to an array (#4613 by @Tobbe)
+  - @verdaccio/core@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/core/url/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/url",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "url utilities resolver",
   "keywords": [
     "private",
@@ -33,7 +33,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4",
     "lodash": "4.17.21",
     "validator": "13.11.0"

packages/core/url/src/index.ts

@@ -121,10 +121,17 @@ export function getPublicUrl(url_prefix: string = '', requestOptions: RequestOpt
       throw new Error('invalid host');
     }
 
+    // 'X-Forwarded-Proto' is the default header
     const protoHeader: string =
       process.env.VERDACCIO_FORWARDED_PROTO?.toLocaleLowerCase() ??
       HEADERS.FORWARDED_PROTO.toLowerCase();
-    const forwardedProtocolHeaderValue = requestOptions.headers[protoHeader] as string | undefined;
+    const forwardedProtocolHeaderValue = requestOptions.headers[protoHeader];
+
+    if (Array.isArray(forwardedProtocolHeaderValue)) {
+      // This really should never happen - only set-cookie is allowed to have
+      // multiple values.
+      throw new Error('invalid forwarded protocol header value. Reading header ' + protoHeader);
+    }
 
     const protocol = getWebProtocol(forwardedProtocolHeaderValue, requestOptions.protocol);
     const combinedUrl = combineBaseUrl(protocol, host, url_prefix);

packages/core/url/tests/getPublicUrl.spec.ts

@@ -316,6 +316,31 @@ describe('env variable', () => {
     delete process.env.VERDACCIO_FORWARDED_PROTO;
   });
 
+  test('with the VERDACCIO_FORWARDED_PROTO environment variable set to "set-cookie"', () => {
+    process.env.VERDACCIO_FORWARDED_PROTO = 'set-cookie';
+    const req = httpMocks.createRequest({
+      method: 'GET',
+      headers: {
+        host: 'some.com',
+        cookie: 'name=value; name2=value2;',
+        'set-cookie': [
+          'cookieName1=value; expires=Tue, 19 Jan 2038 03:14:07 GMT;',
+          'cookieName2=value; expires=Tue, 19 Jan 2038 03:14:07 GMT;',
+        ],
+      },
+      url: '/',
+    });
+
+    expect(() =>
+      getPublicUrl('/test/', {
+        host: req.hostname,
+        headers: req.headers as any,
+        protocol: req.protocol,
+      })
+    ).toThrow('invalid forwarded protocol header value. Reading header set-cookie');
+    delete process.env.VERDACCIO_FORWARDED_PROTO;
+  });
+
   test('with a invalid X-Forwarded-Proto https and host injection with invalid host', () => {
     process.env.VERDACCIO_PUBLIC_URL = 'http://injection.test.com"><svg onload="alert(1)">';
     const req = httpMocks.createRequest({

packages/hooks/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/hooks
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/core@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/hooks/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/hooks",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,16 +29,16 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "core-js": "3.35.0",
     "debug": "4.3.4",
     "got-cjs": "12.5.4",
     "handlebars": "4.7.8"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "nock": "13.5.1"
   },

packages/loaders/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/loaders
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/loaders/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/loaders",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -13,13 +13,13 @@
     "url": "https://github.com/verdaccio/verdaccio"
   },
   "dependencies": {
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "@verdaccio-scope/verdaccio-auth-foo": "0.0.2",
     "verdaccio-auth-memory": "workspace:*",

packages/logger/logger-7/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/logger-7
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [cf1b46c]
+  - @verdaccio/logger-commons@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/logger/logger-7/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-7",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "logger for verdaccio 5.x version",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,7 +38,7 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:7.0.0-next-7.15",
+    "@verdaccio/logger-commons": "workspace:7.0.0-next-7.16",
     "pino": "7.11.0"
   },
   "devDependencies": {

packages/logger/logger-commons/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @verdaccio/logger-commons
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- cf1b46c: fix: log spacing depending on the FORMAT and COLORS options
+- Updated dependencies [cf1b46c]
+  - @verdaccio/logger-prettify@7.0.0-next-7.3
+  - @verdaccio/core@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/logger/logger-commons/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-commons",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,8 +38,8 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger-prettify": "workspace:7.0.0-next-7.2",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger-prettify": "workspace:7.0.0-next-7.3",
     "debug": "4.3.4",
     "colorette": "2.0.20"
   },

packages/logger/logger-commons/test/logger.spec.ts

@@ -36,7 +36,7 @@ describe('logger test', () => {
       logger.trace(`this should not be logged`);
       logger.error(`this should logged`);
       const content = await readLogFile(file);
-      expect(content).toBe('info --- testing test \nerror--- this should logged \n');
+      expect(content).toBe('info --- testing test\nerror--- this should logged\n');
     });
 
     test('should include all logging level', async () => {
@@ -51,7 +51,7 @@ describe('logger test', () => {
       logger.error(`this should logged`);
       const content = await readLogFile(file);
       expect(content).toBe(
-        'info --- testing test \ndebug--- this should not be logged \ntrace--- this should not be logged \nerror--- this should logged \n'
+        'info --- testing test\ndebug--- this should not be logged\ntrace--- this should not be logged\nerror--- this should logged\n'
       );
     });
   });
@@ -101,7 +101,7 @@ describe('logger test', () => {
         `publishing or updating a new version for @{packageName}`
       );
       const content = await readLogFile(file);
-      expect(content).toEqual('info --- publishing or updating a new version for test \n');
+      expect(content).toEqual('info --- publishing or updating a new version for test\n');
     });
 
     test('should log into a file with pretty-timestamped', async () => {
@@ -122,7 +122,7 @@ describe('logger test', () => {
       );
       const content = await readLogFile(file);
       // TODO: we might want mock time for testing
-      expect(content).toMatch('info --- publishing or updating a new version for test \n');
+      expect(content).toMatch('info --- publishing or updating a new version for test\n');
     });
   });
 });

packages/logger/logger-prettify/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/logger-prettify
 
+## 7.0.0-next-7.3
+
+### Patch Changes
+
+- cf1b46c: fix: log spacing depending on the FORMAT and COLORS options
+
 ## 7.0.0-next-7.2
 
 ### Patch Changes

packages/logger/logger-prettify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger-prettify",
-  "version": "7.0.0-next-7.2",
+  "version": "7.0.0-next-7.3",
   "description": "logger",
   "main": "./build/index.js",
   "types": "build/index.d.ts",

packages/logger/logger-prettify/src/formatter.ts

@@ -3,7 +3,7 @@ import { inspect } from 'util';
 
 import { LevelCode, calculateLevel, levelsColors, subSystemLevels } from './levels';
 import { PrettyOptionsExtended } from './types';
-import { formatLoggingDate, isObject, padLeft, padRight } from './utils';
+import { formatLoggingDate, isObject, padRight } from './utils';
 
 let LEVEL_VALUE_MAX = 0;
 for (const l in levelsColors) {
@@ -68,11 +68,11 @@ function getMessage(debugLevel, msg, sub, templateObjects, hasColors: boolean) {
       `${subSystemType} ${finalMessage}`
     )}`;
 
-    return padLeft(logString);
+    return logString;
   }
   const logString = `${padRight(debugLevel, LEVEL_VALUE_MAX)}${subSystemType} ${finalMessage}`;
 
-  return padRight(logString);
+  return logString;
 }
 
 export function printMessage(

packages/logger/logger-prettify/src/utils.ts

@@ -8,10 +8,6 @@ export function isObject(obj: unknown): boolean {
   return _.isObject(obj) && _.isNull(obj) === false && _.isArray(obj) === false;
 }
 
-export function padLeft(message: string) {
-  return message.padStart(message.length + CUSTOM_PAD_LENGTH, ' ');
-}
-
 export function padRight(message: string, max = message.length + CUSTOM_PAD_LENGTH) {
   return message.padEnd(max, ' ');
 }
@@ -19,5 +15,5 @@ export function padRight(message: string, max = message.length + CUSTOM_PAD_LENG
 export function formatLoggingDate(time: number, message: string): string {
   const timeFormatted = dayjs(time).format(FORMAT_DATE);
 
-  return `[${timeFormatted}]${message}`;
+  return `[${timeFormatted}] ${message}`;
 }

packages/logger/logger-prettify/test/__snapshots__/formatter.spec.ts.snap

@@ -1,21 +1,21 @@
 // Jest Snapshot v1, https://goo.gl/fbAQLP
 
-exports[`formatter printMessage should display a bytes request 1`] = `"fatal<-- 200, user: null(127.0.0.1), req: 'GET /verdaccio', bytes: 0/150186 "`;
+exports[`formatter printMessage should display a bytes request 1`] = `"fatal<-- 200, user: null(127.0.0.1), req: 'GET /verdaccio', bytes: 0/150186"`;
 
-exports[`formatter printMessage should display a resource request 1`] = `"info <-- 127.0.0.1 requested 'GET /verdaccio' "`;
+exports[`formatter printMessage should display a resource request 1`] = `"info <-- 127.0.0.1 requested 'GET /verdaccio'"`;
 
-exports[`formatter printMessage should display a streaming request 1`] = `"fatal--> 304, req: 'GET https://registry.npmjs.org/verdaccio' (streaming) "`;
+exports[`formatter printMessage should display a streaming request 1`] = `"fatal--> 304, req: 'GET https://registry.npmjs.org/verdaccio' (streaming)"`;
 
-exports[`formatter printMessage should display an error request 1`] = `"fatal--> ERR, req: 'GET https://registry.fake.org/aaa', error: getaddrinfo ENOTFOUND registry.fake.org "`;
+exports[`formatter printMessage should display an error request 1`] = `"fatal--> ERR, req: 'GET https://registry.fake.org/aaa', error: getaddrinfo ENOTFOUND registry.fake.org"`;
 
-exports[`formatter printMessage should display an fatal request 1`] = `"fatal--> ERR, req: 'GET https://registry.fake.org/aaa', error: fatal error "`;
+exports[`formatter printMessage should display an fatal request 1`] = `"fatal--> ERR, req: 'GET https://registry.fake.org/aaa', error: fatal error"`;
 
-exports[`formatter printMessage should display config file 1`] = `"warn --- config file  - /Users/user/.config/verdaccio/config/config.yaml "`;
+exports[`formatter printMessage should display config file 1`] = `"warn --- config file  - /Users/user/.config/verdaccio/config/config.yaml"`;
 
-exports[`formatter printMessage should display custom log message 1`] = `"fatal--- custom - foo - undefined "`;
+exports[`formatter printMessage should display custom log message 1`] = `"fatal--- custom - foo - undefined"`;
 
-exports[`formatter printMessage should display trace level 1`] = `"trace--- [trace]  - foo "`;
+exports[`formatter printMessage should display trace level 1`] = `"trace--- [trace]  - foo"`;
 
-exports[`formatter printMessage should display trace level with pretty stamp 1`] = `"[formatted-date]trace--- [trace]  - foo "`;
+exports[`formatter printMessage should display trace level with pretty stamp 1`] = `"[formatted-date] trace--- [trace]  - foo"`;
 
-exports[`formatter printMessage should display version and http address 1`] = `"warn --- http address - http://localhost:4873/ - verdaccio/5.0.0 "`;
+exports[`formatter printMessage should display version and http address 1`] = `"warn --- http address - http://localhost:4873/ - verdaccio/5.0.0"`;

packages/logger/logger-prettify/test/index.spec.ts

@@ -17,7 +17,7 @@ describe('prettyFactory', () => {
         objectMode: true,
         write(chunk, enc, cb) {
           const formatted = pretty(JSON.parse(chunk));
-          expect(formatted).toBe('info --- test message ');
+          expect(formatted).toBe('info --- test message');
           cb();
           done();
         },

packages/logger/logger-prettify/test/utils.test.ts

@@ -1,8 +1,8 @@
-import { formatLoggingDate, padLeft, padRight } from '../src/utils';
+import { formatLoggingDate, padRight } from '../src/utils';
 
 describe('formatLoggingDate', () => {
   test('basic', () => {
-    expect(formatLoggingDate(1585411248203, ' message')).toEqual('[2020-03-28 16:00:48] message');
+    expect(formatLoggingDate(1585411248203, 'message')).toEqual('[2020-03-28 16:00:48] message');
   });
 });
 
@@ -14,7 +14,4 @@ describe('pad', () => {
   test('pad right 2', () => {
     expect(padRight('message right')).toEqual('message right ');
   });
-  test('pad left', () => {
-    expect(padLeft('message left')).toEqual(' message left');
-  });
 });

packages/logger/logger/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @verdaccio/logger
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [cf1b46c]
+  - @verdaccio/logger-commons@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/logger/logger/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/logger",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "logger",
   "main": "./build/index.js",
   "types": "./build/index.d.ts",
@@ -38,7 +38,7 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/logger-commons": "workspace:7.0.0-next-7.15",
+    "@verdaccio/logger-commons": "workspace:7.0.0-next-7.16",
     "pino": "8.17.2"
   },
   "devDependencies": {

packages/middleware/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/middleware
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [38b1e82]
+  - @verdaccio/url@12.0.0-next-7.16
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/config@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/middleware/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/middleware",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "express middleware utils",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,13 +38,13 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/url": "workspace:12.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/url": "workspace:12.0.0-next-7.16",
     "debug": "4.3.4",
     "lru-cache": "7.18.3",
-    "express": "4.18.3",
+    "express": "4.19.2",
     "lodash": "4.17.21",
     "mime": "2.6.0",
     "express-rate-limit": "5.5.1"
@@ -54,7 +54,7 @@
     "url": "https://opencollective.com/verdaccio"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "body-parser": "1.20.2",
     "supertest": "6.3.4"
   }

packages/node-api/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @verdaccio/node-api
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/server@7.0.0-next-7.16
+- @verdaccio/server-fastify@7.0.0-next-7.16
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Minor Changes

packages/node-api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/node-api",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "node API",
   "main": "build/index.js",
   "types": "build/index.d.ts",
@@ -38,11 +38,11 @@
   },
   "license": "MIT",
   "dependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/server": "workspace:7.0.0-next-7.15",
-    "@verdaccio/server-fastify": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/server": "workspace:7.0.0-next-7.16",
+    "@verdaccio/server-fastify": "workspace:7.0.0-next-7.16",
     "core-js": "3.35.0",
     "debug": "4.3.4",
     "lodash": "4.17.21"

packages/plugins/audit/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/plugins/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-audit",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "Verdaccio Middleware plugin to bypass npmjs audit",
   "keywords": [
     "private",
@@ -30,15 +30,15 @@
     "node": ">=12"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "express": "4.18.3",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "express": "4.19.2",
     "https-proxy-agent": "5.0.1",
     "node-fetch": "cjs"
   },
   "devDependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "nock": "13.5.1",
     "supertest": "6.3.4"

packages/plugins/auth-memory/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/plugins/auth-memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-auth-memory",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "Auth plugin for Verdaccio that keeps users in memory",
   "keywords": [
     "private",
@@ -30,12 +30,12 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "debug": "4.3.4"
   },
   "devDependencies": {
     "@types/debug": "^4.1.12",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3"
   },
   "scripts": {

packages/plugins/htpasswd/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/plugins/htpasswd/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-htpasswd",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "htpasswd auth plugin for Verdaccio",
   "keywords": [
     "private",
@@ -33,7 +33,7 @@
     "node": ">=12"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "@verdaccio/file-locking": "workspace:12.0.0-next.1",
     "apache-md5": "1.1.8",
     "bcryptjs": "2.4.3",
@@ -45,8 +45,8 @@
   "devDependencies": {
     "@types/bcryptjs": "2.4.6",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "mockdate": "3.0.5"
   },
   "scripts": {

packages/plugins/local-storage/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/utils@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/plugins/local-storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/local-storage",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "Local storage implementation",
   "keywords": [
     "private",
@@ -36,9 +36,9 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "@verdaccio/file-locking": "workspace:12.0.0-next.1",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "core-js": "3.35.0",
     "debug": "4.3.4",
     "globby": "11.1.0",
@@ -50,8 +50,8 @@
   },
   "devDependencies": {
     "@types/minimatch": "5.1.2",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "@verdaccio/test-helper": "workspace:3.0.0-next-7.2",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "minimatch": "9.0.3"

packages/plugins/memory/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Change Log
 
+## 12.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+
 ## 12.0.0-next-7.15
 
 ### Patch Changes

packages/plugins/memory/package.json

@@ -1,6 +1,6 @@
 {
   "name": "verdaccio-memory",
-  "version": "12.0.0-next-7.15",
+  "version": "12.0.0-next-7.16",
   "description": "Storage implementation in memory",
   "keywords": [
     "private",
@@ -30,15 +30,15 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "memory-fs": "0.5.0",
     "debug": "4.3.4",
     "memfs": "3.5.3"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15"
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16"
   },
   "scripts": {
     "clean": "rimraf ./build",

packages/plugins/ui-theme/CHANGELOG.md

@@ -1,5 +1,7 @@
 # @verdaccio/ui-theme
 
+## 7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ## 7.0.0-next-7.14

packages/plugins/ui-theme/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/ui-theme",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "Verdaccio User Interface",
   "author": {
     "name": "Verdaccio Contributors",
@@ -27,7 +27,7 @@
     "@testing-library/dom": "9.3.4",
     "@testing-library/jest-dom": "6.3.0",
     "@testing-library/react": "14.1.2",
-    "@verdaccio/node-api": "workspace:7.0.0-next-7.15",
+    "@verdaccio/node-api": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:*",
     "@verdaccio/ui-components": "workspace:3.0.0-next-7.6",
     "babel-loader": "8.3.0",

packages/plugins/ui-theme/src/components/Contributors/generated_contributors_list.json

@@ -191,6 +191,10 @@
     "username": "NotWearingPants",
     "id": 26556598
   },
+  {
+    "username": "gweesin",
+    "id": 42909374
+  },
   {
     "username": "BartDubois",
     "id": 1180931
@@ -199,14 +203,14 @@
     "username": "CrispyConductor",
     "id": 2132722
   },
-  {
-    "username": "semoal",
-    "id": 22656541
-  },
   {
     "username": "greshilov",
     "id": 814614
   },
+  {
+    "username": "semoal",
+    "id": 22656541
+  },
   {
     "username": "Jason-Cooke",
     "id": 5185660
@@ -355,6 +359,10 @@
     "username": "plitex",
     "id": 2946823
   },
+  {
+    "username": "Tobbe",
+    "id": 30793
+  },
   {
     "username": "varijkapil13",
     "id": 8291077
@@ -632,8 +640,12 @@
     "id": 8954107
   },
   {
-    "username": "Tobbe",
-    "id": 30793
+    "username": "tomcoonen",
+    "id": 988013
+  },
+  {
+    "username": "morrain",
+    "id": 9381634
   },
   {
     "username": "oltodo",
@@ -699,10 +711,6 @@
     "username": "RodrigoBalest",
     "id": 4810463
   },
-  {
-    "username": "tomcoonen",
-    "id": 988013
-  },
   {
     "username": "iketiunn",
     "id": 10249208
@@ -871,6 +879,10 @@
     "username": "divdavem",
     "id": 1152706
   },
+  {
+    "username": "hedocode",
+    "id": 22884999
+  },
   {
     "username": "iambrandonn",
     "id": 1644549
@@ -947,14 +959,6 @@
     "username": "ericmutta",
     "id": 20465797
   },
-  {
-    "username": "Joon",
-    "id": 94231
-  },
-  {
-    "username": "hedocode",
-    "id": 22884999
-  },
   {
     "username": "itsabdelrahman",
     "id": 11808903
@@ -1039,6 +1043,14 @@
     "username": "bchenSyd",
     "id": 8207081
   },
+  {
+    "username": "einfallstoll",
+    "id": 619048
+  },
+  {
+    "username": "Joon",
+    "id": 94231
+  },
   {
     "username": "Mearman",
     "id": 1331872
@@ -1107,14 +1119,6 @@
     "username": "morlay",
     "id": 1667873
   },
-  {
-    "username": "morrain",
-    "id": 9381634
-  },
-  {
-    "username": "einfallstoll",
-    "id": 619048
-  },
   {
     "username": "felipeplets",
     "id": 119980
@@ -1139,10 +1143,6 @@
     "username": "gecruz",
     "id": 29457476
   },
-  {
-    "username": "gweesin",
-    "id": 42909374
-  },
   {
     "username": "iztsv",
     "id": 3539802
@@ -1171,6 +1171,10 @@
     "username": "vStone",
     "id": 356719
   },
+  {
+    "username": "jlguenego",
+    "id": 2842446
+  },
   {
     "username": "zaventh",
     "id": 669283
@@ -1283,6 +1287,10 @@
     "username": "MrCube42",
     "id": 1512210
   },
+  {
+    "username": "kongdewen",
+    "id": 10659566
+  },
   {
     "username": "donbowman",
     "id": 5131923

packages/proxy/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @verdaccio/proxy
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+- @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/proxy",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "verdaccio proxy fetcher",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,9 +38,9 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "JSONStream": "1.3.5",
     "debug": "4.3.4",
     "got-cjs": "12.5.4",
@@ -48,7 +48,7 @@
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
     "get-stream": "^6.0.1",
     "nock": "13.5.1",

packages/search/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @verdaccio/search
 
+## 7.0.0-next-7.5
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/proxy@7.0.0-next-7.16
+- @verdaccio/core@7.0.0-next-7.16
+- @verdaccio/config@7.0.0-next-7.16
+
 ## 7.0.0-next-7.4
 
 ### Patch Changes

packages/search/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/search",
-  "version": "7.0.0-next-7.4",
+  "version": "7.0.0-next-7.5",
   "description": "verdaccio search proxy",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -40,10 +40,10 @@
   "dependencies": {
     "debug": "4.3.4",
     "lodash": "4.17.21",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/proxy": "workspace:7.0.0-next-7.15"
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/proxy": "workspace:7.0.0-next-7.16"
   },
   "devDependencies": {
     "@verdaccio/types": "workspace:12.0.0-next-7.3",

packages/server/express/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @verdaccio/server
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [e5624e1]
+- Updated dependencies [5bfab62]
+  - @verdaccio/store@7.0.0-next-7.16
+  - @verdaccio/api@7.0.0-next-7.16
+  - @verdaccio/web@7.0.0-next-7.16
+  - @verdaccio/logger@7.0.0-next-7.16
+  - @verdaccio/middleware@7.0.0-next-7.16
+  - @verdaccio/auth@7.0.0-next-7.16
+  - @verdaccio/loaders@7.0.0-next-7.16
+  - verdaccio-audit@12.0.0-next-7.16
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/config@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/server/express/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "server logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,25 +29,25 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@verdaccio/api": "workspace:7.0.0-next-7.15",
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/loaders": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/middleware": "workspace:7.0.0-next-7.15",
-    "@verdaccio/store": "workspace:7.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
-    "@verdaccio/web": "workspace:7.0.0-next-7.15",
-    "verdaccio-audit": "workspace:12.0.0-next-7.15",
+    "@verdaccio/api": "workspace:7.0.0-next-7.16",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/loaders": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/middleware": "workspace:7.0.0-next-7.16",
+    "@verdaccio/store": "workspace:7.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
+    "@verdaccio/web": "workspace:7.0.0-next-7.16",
+    "verdaccio-audit": "workspace:12.0.0-next-7.16",
     "compression": "1.7.4",
     "cors": "2.8.5",
     "debug": "4.3.4",
-    "express": "4.18.3",
+    "express": "4.19.2",
     "lodash": "4.17.21"
   },
   "devDependencies": {
-    "@verdaccio/proxy": "workspace:7.0.0-next-7.15",
+    "@verdaccio/proxy": "workspace:7.0.0-next-7.16",
     "@verdaccio/test-helper": "workspace:3.0.0-next-7.2",
     "http-errors": "2.0.0"
   },

packages/server/fastify/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @verdaccio/server-fastify
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- Updated dependencies [e5624e1]
+- Updated dependencies [5bfab62]
+  - @verdaccio/store@7.0.0-next-7.16
+  - @verdaccio/tarball@12.0.0-next-7.16
+  - @verdaccio/logger@7.0.0-next-7.16
+  - @verdaccio/auth@7.0.0-next-7.16
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/config@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/server/fastify/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/server-fastify",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "fastify server api implementation",
   "keywords": [
     "private",
@@ -33,13 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/store": "workspace:7.0.0-next-7.15",
-    "@verdaccio/tarball": "workspace:12.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/store": "workspace:7.0.0-next-7.16",
+    "@verdaccio/tarball": "workspace:12.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "core-js": "3.35.0",
     "debug": "4.3.4",
     "fastify": "4.25.2",

packages/signature/package.json

@@ -42,7 +42,7 @@
     "debug": "4.3.4"
   },
   "devDependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3"
   },
   "funding": {

packages/standalone/package.json

@@ -32,8 +32,8 @@
   "homepage": "https://verdaccio.org",
   "license": "MIT",
   "devDependencies": {
-    "@verdaccio/cli": "workspace:7.0.0-next-7.15",
-    "@verdaccio/ui-theme": "workspace:7.0.0-next-7.15",
+    "@verdaccio/cli": "workspace:7.0.0-next-7.16",
+    "@verdaccio/ui-theme": "workspace:7.0.0-next-7.16",
     "fs-extra": "11.2.0",
     "webpack": "5.90.0",
     "webpack-bundle-analyzer": "4.10.1",

packages/store/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @verdaccio/store
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- e5624e1: chore: fix types for some store tests
+- 5bfab62: feat: add tarball details for published packages
+- Updated dependencies [5bfab62]
+- Updated dependencies [38b1e82]
+  - @verdaccio/tarball@12.0.0-next-7.16
+  - @verdaccio/url@12.0.0-next-7.16
+  - @verdaccio/logger@7.0.0-next-7.16
+  - @verdaccio/hooks@7.0.0-next-7.16
+  - @verdaccio/loaders@7.0.0-next-7.16
+  - @verdaccio/local-storage@12.0.0-next-7.16
+  - @verdaccio/proxy@7.0.0-next-7.16
+  - @verdaccio/search@7.0.0-next-7.5
+  - @verdaccio/core@7.0.0-next-7.16
+  - @verdaccio/config@7.0.0-next-7.16
+  - @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/store/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/store",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "loaders logic",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -38,17 +38,17 @@
     "build": "pnpm run build:js && pnpm run build:types"
   },
   "dependencies": {
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/hooks": "workspace:7.0.0-next-7.15",
-    "@verdaccio/loaders": "workspace:7.0.0-next-7.15",
-    "@verdaccio/local-storage": "workspace:12.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/search": "workspace:7.0.0-next-7.4",
-    "@verdaccio/proxy": "workspace:7.0.0-next-7.15",
-    "@verdaccio/tarball": "workspace:12.0.0-next-7.15",
-    "@verdaccio/url": "workspace:12.0.0-next-7.15",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/hooks": "workspace:7.0.0-next-7.16",
+    "@verdaccio/loaders": "workspace:7.0.0-next-7.16",
+    "@verdaccio/local-storage": "workspace:12.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/search": "workspace:7.0.0-next-7.5",
+    "@verdaccio/proxy": "workspace:7.0.0-next-7.16",
+    "@verdaccio/tarball": "workspace:12.0.0-next-7.16",
+    "@verdaccio/url": "workspace:12.0.0-next-7.16",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "JSONStream": "1.3.5",
     "debug": "4.3.4",
     "lodash": "4.17.21",

packages/store/src/storage.ts

@@ -34,9 +34,11 @@ import {
 } from '@verdaccio/proxy';
 import Search from '@verdaccio/search';
 import {
+  TarballDetails,
   convertDistRemoteToLocalTarballUrls,
   convertDistVersionToLocalTarballsUrl,
   extractTarballFromUrl,
+  getTarballDetails,
 } from '@verdaccio/tarball';
 import {
   AbbreviatedManifest,
@@ -1076,13 +1078,14 @@ class Storage {
 
     // 1. after tarball has been successfully uploaded, we update the version
     try {
+      const tarballStats = await this.getTarballStats(versions[versionToPublish], buffer);
       // Older package managers like npm6 do not send readme content as part of version but include it on root level
       if (_.isEmpty(versions[versionToPublish].readme)) {
         versions[versionToPublish].readme =
           _.isNil(manifest.readme) === false ? String(manifest.readme) : '';
       }
       // addVersion will move the readme from the the published version to the root level
-      await this.addVersion(name, versionToPublish, versions[versionToPublish], null);
+      await this.addVersion(name, versionToPublish, versions[versionToPublish], null, tarballStats);
     } catch (err: any) {
       logger.error({ err: err.message }, 'updated version has failed: @{err}');
       debug('error on create a version for %o with error %o', name, err.message);
@@ -1283,7 +1286,8 @@ class Storage {
     name: string,
     version: string,
     metadata: Version,
-    tag: StringValue
+    tag: StringValue,
+    tarballStats: TarballDetails
   ): Promise<void> {
     debug(`add version %s package for %s`, version, name);
     await this.updatePackage(name, async (data: Manifest): Promise<Manifest> => {
@@ -1295,6 +1299,12 @@ class Storage {
       metadata.contributors = normalizeContributors(metadata.contributors as Author[]);
       debug('%s` contributors normalized', name);
 
+      // Update tarball stats
+      if (metadata.dist) {
+        metadata.dist.fileCount = tarballStats.fileCount;
+        metadata.dist.unpackedSize = tarballStats.unpackedSize;
+      }
+
       // if uploaded tarball has a different shasum, it's very likely that we
       // have some kind of error
       if (validatioUtils.isObject(metadata.dist) && _.isString(metadata.dist.tarball)) {
@@ -1905,6 +1915,20 @@ class Storage {
       return cacheManifest;
     }
   }
+
+  private async getTarballStats(version: Version, buffer: Buffer): Promise<TarballDetails> {
+    if (
+      version.dist == undefined ||
+      version.dist?.fileCount == undefined ||
+      version.dist?.unpackedSize == undefined
+    ) {
+      debug('tarball stats not found, calculating');
+      return await getTarballDetails(buffer);
+    } else {
+      debug('tarball stats found');
+      return { fileCount: version.dist.fileCount, unpackedSize: version.dist.unpackedSize };
+    }
+  }
 }
 
 export { Storage };

packages/store/test/storage-utils.spec.ts

@@ -225,6 +225,7 @@ describe('Storage Utils', () => {
         _uplinks: {},
         name: '',
         versions: {},
+        time: {},
         [DIST_TAGS]: {},
       };
       const mergedPkg = mergeUplinkTimeIntoLocal(pkg1, pkg2);

packages/store/test/storage.spec.ts

@@ -262,10 +262,12 @@ describe('storage', () => {
         expect(manifestVersion._id).toEqual(`${pkgName}@1.0.1`);
         expect(manifestVersion.description).toEqual('package generated');
         expect(manifestVersion.dist).toEqual({
+          fileCount: 4,
           integrity:
             'sha512-6gHiERpiDgtb3hjqpQH5/i7zRmvYi9pmCjQf2ZMy3QEa9wVk9RgdZaPWUt7ZOnWUPFjcr9cmE6dUBf+XoPoH4g==',
           shasum: '2c03764f651a9f016ca0b7620421457b619151b9',
           tarball: 'http://localhost:5555/upstream/-/upstream-1.0.1.tgz',
+          unpackedSize: 543,
         });
 
         expect(manifestVersion.contributors).toEqual([]);
@@ -658,6 +660,47 @@ describe('storage', () => {
   });
 
   describe('getTarball', () => {
+    test('should get a package from local storage', (done) => {
+      const pkgName = 'foo';
+      const config = new Config(
+        configExample({
+          ...getDefaultConfig(),
+          storage: generateRandomStorage(),
+        })
+      );
+      const storage = new Storage(config);
+      storage.init(config).then(() => {
+        const ac = new AbortController();
+        const bodyNewManifest = generatePackageMetadata(pkgName, '1.0.0');
+        storage
+          .updateManifest(bodyNewManifest, {
+            signal: ac.signal,
+            name: pkgName,
+            uplinksLook: false,
+            requestOptions: defaultRequestOptions,
+          })
+          .then(() => {
+            const abort = new AbortController();
+            storage
+              .getTarball(pkgName, `${pkgName}-1.0.0.tgz`, {
+                signal: abort.signal,
+              })
+              .then((stream) => {
+                stream.on('data', (dat) => {
+                  expect(dat).toBeDefined();
+                  expect(dat.length).toEqual(512);
+                });
+                stream.on('end', () => {
+                  done();
+                });
+                stream.on('error', () => {
+                  done('this should not happen');
+                });
+              });
+          });
+      });
+    });
+
     test('should not found a package anywhere', (done) => {
       const config = new Config(
         configExample({
@@ -729,7 +772,7 @@ describe('storage', () => {
     test('should serve fetch tarball from upstream without dist info local', (done) => {
       const pkgName = 'upstream';
       const upstreamManifest = addNewVersion(
-        generateRemotePackageMetadata(pkgName, '1.0.0'),
+        generateRemotePackageMetadata(pkgName, '1.0.0') as Manifest,
         '1.0.1'
       );
       nock('https://registry.verdaccio.org').get(`/${pkgName}`).reply(201, upstreamManifest);
@@ -789,7 +832,7 @@ describe('storage', () => {
     test('should serve fetch tarball from upstream without with info local', (done) => {
       const pkgName = 'upstream';
       const upstreamManifest = addNewVersion(
-        addNewVersion(generateRemotePackageMetadata(pkgName, '1.0.0'), '1.0.1'),
+        addNewVersion(generateRemotePackageMetadata(pkgName, '1.0.0') as Manifest, '1.0.1'),
         '1.0.2'
       );
       nock('https://registry.verdaccio.org')
@@ -971,7 +1014,7 @@ describe('storage', () => {
         const storage = new Storage(config);
         await storage.init(config);
         const [manifest] = await storage.syncUplinksMetadata(fooManifest.name, fooManifest, {
-          retry: 0,
+          retry: { limit: 0 },
         });
         expect(manifest).toBe(fooManifest);
       });

packages/store/test/versions.spec.ts

@@ -41,12 +41,16 @@ describe('versions-utils', () => {
     });
 
     test('should return nothing on get invalid versions', () => {
+      // @ts-ignore
       expect(getVersion({ ...metadata } as any, undefined)).toBeUndefined();
+      // @ts-ignore
       expect(getVersion({ ...metadata } as any, null)).toBeUndefined();
+      // @ts-ignore
       expect(getVersion({ ...metadata } as any, 8)).toBeUndefined();
     });
 
     test('should handle no versions', () => {
+      // @ts-ignore
       expect(getVersion(undefined, undefined)).toBeUndefined();
     });
   });
@@ -60,6 +64,7 @@ describe('versions-utils', () => {
       ]);
     });
     test('should sort versions and filter out invalid', () => {
+      // @ts-ignore
       expect(sortVersionsAndFilterInvalid(['1.0.0', '5.0.0', '2.0.0', '', null])).toEqual([
         '1.0.0',
         '2.0.0',

packages/tools/docusaurus-plugin-contributors/src/contributors.json

@@ -3,11 +3,11 @@
     {
       "id": 558752,
       "login": "juanpicado",
-      "contributions": 5261,
+      "contributions": 5271,
       "repositories": [
         {
           "name": "verdaccio",
-          "contributions": 2904
+          "contributions": 2914
         },
         {
           "name": "verdaccio-cookbook",
@@ -370,11 +370,11 @@
     {
       "id": 59966492,
       "login": "mbtools",
-      "contributions": 25,
+      "contributions": 27,
       "repositories": [
         {
           "name": "verdaccio",
-          "contributions": 25
+          "contributions": 27
         }
       ]
     },
@@ -900,6 +900,17 @@
         }
       ]
     },
+    {
+      "id": 42909374,
+      "login": "gweesin",
+      "contributions": 4,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 4
+        }
+      ]
+    },
     {
       "id": 1180931,
       "login": "BartDubois",
@@ -922,21 +933,6 @@
         }
       ]
     },
-    {
-      "id": 22656541,
-      "login": "semoal",
-      "contributions": 4,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 2
-        },
-        {
-          "name": "ui",
-          "contributions": 2
-        }
-      ]
-    },
     {
       "id": 814614,
       "login": "greshilov",
@@ -956,6 +952,21 @@
         }
       ]
     },
+    {
+      "id": 22656541,
+      "login": "semoal",
+      "contributions": 4,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 2
+        },
+        {
+          "name": "ui",
+          "contributions": 2
+        }
+      ]
+    },
     {
       "id": 5185660,
       "login": "Jason-Cooke",
@@ -1431,6 +1442,17 @@
         }
       ]
     },
+    {
+      "id": 30793,
+      "login": "Tobbe",
+      "contributions": 2,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 2
+        }
+      ]
+    },
     {
       "id": 8291077,
       "login": "varijkapil13",
@@ -2243,8 +2265,19 @@
       ]
     },
     {
-      "id": 30793,
-      "login": "Tobbe",
+      "id": 988013,
+      "login": "tomcoonen",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 1
+        }
+      ]
+    },
+    {
+      "id": 9381634,
+      "login": "morrain",
       "contributions": 1,
       "repositories": [
         {
@@ -2429,17 +2462,6 @@
         }
       ]
     },
-    {
-      "id": 988013,
-      "login": "tomcoonen",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
     {
       "id": 10249208,
       "login": "iketiunn",
@@ -2902,6 +2924,17 @@
         }
       ]
     },
+    {
+      "id": 22884999,
+      "login": "hedocode",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 1644549,
       "login": "iambrandonn",
@@ -3111,28 +3144,6 @@
         }
       ]
     },
-    {
-      "id": 94231,
-      "login": "Joon",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
-    {
-      "id": 22884999,
-      "login": "hedocode",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
     {
       "id": 11808903,
       "login": "itsabdelrahman",
@@ -3364,6 +3375,28 @@
         }
       ]
     },
+    {
+      "id": 619048,
+      "login": "einfallstoll",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 1
+        }
+      ]
+    },
+    {
+      "id": 94231,
+      "login": "Joon",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 1331872,
       "login": "Mearman",
@@ -3551,28 +3584,6 @@
         }
       ]
     },
-    {
-      "id": 9381634,
-      "login": "morrain",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
-    {
-      "id": 619048,
-      "login": "einfallstoll",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
     {
       "id": 119980,
       "login": "felipeplets",
@@ -3639,17 +3650,6 @@
         }
       ]
     },
-    {
-      "id": 42909374,
-      "login": "gweesin",
-      "contributions": 1,
-      "repositories": [
-        {
-          "name": "verdaccio",
-          "contributions": 1
-        }
-      ]
-    },
     {
       "id": 3539802,
       "login": "iztsv",
@@ -3727,6 +3727,17 @@
         }
       ]
     },
+    {
+      "id": 2842446,
+      "login": "jlguenego",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "verdaccio",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 669283,
       "login": "zaventh",
@@ -4035,6 +4046,17 @@
         }
       ]
     },
+    {
+      "id": 10659566,
+      "login": "kongdewen",
+      "contributions": 1,
+      "repositories": [
+        {
+          "name": "monorepo",
+          "contributions": 1
+        }
+      ]
+    },
     {
       "id": 5131923,
       "login": "donbowman",
@@ -5033,7 +5055,7 @@
       "full_name": "verdaccio/verdaccio",
       "html_url": "https://github.com/verdaccio/verdaccio",
       "description": "📦🔐 A lightweight Node.js private proxy registry",
-      "stargazers_count": 15880,
+      "stargazers_count": 15967,
       "archived": false
     },
     {
@@ -5231,7 +5253,7 @@
       "full_name": "verdaccio/github-actions",
       "html_url": "https://github.com/verdaccio/github-actions",
       "description": "🤖Verdaccio GitHub Actions",
-      "stargazers_count": 22,
+      "stargazers_count": 23,
       "archived": false
     },
     {

packages/tools/helpers/package.json

@@ -9,16 +9,16 @@
   "main": "build/index.js",
   "types": "build/index.d.ts",
   "devDependencies": {
-    "@verdaccio/auth": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/logger": "workspace:7.0.0-next-7.15",
-    "@verdaccio/middleware": "workspace:7.0.0-next-7.15",
+    "@verdaccio/auth": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/logger": "workspace:7.0.0-next-7.16",
+    "@verdaccio/middleware": "workspace:7.0.0-next-7.16",
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
-    "@verdaccio/utils": "workspace:7.0.0-next-7.15",
+    "@verdaccio/utils": "workspace:7.0.0-next-7.16",
     "body-parser": "1.20.2",
     "debug": "4.3.4",
-    "express": "4.18.3",
+    "express": "4.19.2",
     "fs-extra": "11.2.0",
     "supertest": "6.3.4"
   },

packages/tools/local-publish/package.json

@@ -10,9 +10,9 @@
   "types": "build/index.d.ts",
   "devDependencies": {
     "@verdaccio/types": "workspace:12.0.0-next-7.3",
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
-    "@verdaccio/config": "workspace:7.0.0-next-7.15",
-    "verdaccio": "7.0.0-next-7.15"
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
+    "@verdaccio/config": "workspace:7.0.0-next-7.16",
+    "verdaccio": "7.0.0-next-7.16"
   },
   "scripts": {
     "start": "ts-node src/index.ts",

packages/tools/translations/src/progress_lang.json

@@ -8,20 +8,20 @@
     "approvalProgress": 16
   },
   "es-ES": {
-    "translationProgress": 21,
-    "approvalProgress": 21
+    "translationProgress": 20,
+    "approvalProgress": 20
   },
   "fr": {
-    "translationProgress": 27,
-    "approvalProgress": 27
+    "translationProgress": 26,
+    "approvalProgress": 26
   },
   "gl": {
     "translationProgress": 1,
     "approvalProgress": 1
   },
   "it": {
-    "translationProgress": 99,
-    "approvalProgress": 99
+    "translationProgress": 95,
+    "approvalProgress": 95
   },
   "ja": {
     "translationProgress": 1,
@@ -40,11 +40,11 @@
     "approvalProgress": 17
   },
   "pt-BR": {
-    "translationProgress": 29,
-    "approvalProgress": 29
+    "translationProgress": 28,
+    "approvalProgress": 28
   },
   "ru": {
-    "translationProgress": 55,
+    "translationProgress": 57,
     "approvalProgress": 37
   },
   "sr-CS": {
@@ -68,8 +68,8 @@
     "approvalProgress": 14
   },
   "zh-CN": {
-    "translationProgress": 69,
-    "approvalProgress": 69
+    "translationProgress": 100,
+    "approvalProgress": 100
   },
   "zh-TW": {
     "translationProgress": 15,

packages/utils/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @verdaccio/utils
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/core@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes

packages/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@verdaccio/utils",
-  "version": "7.0.0-next-7.15",
+  "version": "7.0.0-next-7.16",
   "description": "verdaccio utilities",
   "main": "./build/index.js",
   "types": "build/index.d.ts",
@@ -29,7 +29,7 @@
     "node": ">=12"
   },
   "dependencies": {
-    "@verdaccio/core": "workspace:7.0.0-next-7.15",
+    "@verdaccio/core": "workspace:7.0.0-next-7.16",
     "minimatch": "7.4.6",
     "semver": "7.6.0",
     "lodash": "4.17.21"

packages/verdaccio/CHANGELOG.md

@@ -1,5 +1,18 @@
 # verdaccio
 
+## 7.0.0-next-7.16
+
+### Patch Changes
+
+- @verdaccio/logger@7.0.0-next-7.16
+- @verdaccio/node-api@7.0.0-next-7.16
+- @verdaccio/cli@7.0.0-next-7.16
+- @verdaccio/hooks@7.0.0-next-7.16
+- verdaccio-audit@12.0.0-next-7.16
+- verdaccio-htpasswd@12.0.0-next-7.16
+- @verdaccio/ui-theme@7.0.0-next-7.16
+- @verdaccio/utils@7.0.0-next-7.16
+
 ## 7.0.0-next-7.15
 
 ### Patch Changes