chore: replace mime package with constants (#5471 )

* chore: replace mime package with constants * Revert types/mime * Revert types/mime * Update lock file
fix(proxy): proxy protocol check (#5474 )
2025-11-14 07:59:14 +01:00 · 2025-11-14 07:49:57 +01:00 · 2025-11-13 00:22:45 +00:00 · 2025-11-11 08:32:10 +01:00 · 2025-11-10 23:00:04 +01:00 · 2025-11-10 01:14:21 +00:00
510 changed files with 24132 additions and 12274 deletions
--- a/.changeset/beige-cars-raise.md
+++ b/.changeset/beige-cars-raise.md
@@ -0,0 +1,5 @@
+---
+'verdaccio-memory': minor
+---
+
+feat: rewrite of memory storage
--- a/.changeset/beige-lions-type.md
+++ b/.changeset/beige-lions-type.md
@@ -10,7 +10,6 @@
 'verdaccio-memory': major
 '@verdaccio/search-indexer': major
 '@verdaccio/server': major
-'@verdaccio/server-fastify': major
 '@verdaccio/logger': major
 'verdaccio-audit': major
 '@verdaccio/ui-components': major
--- a/.changeset/beige-timers-greet.md
+++ b/.changeset/beige-timers-greet.md
@@ -0,0 +1,10 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+---
+
+chore: replace conditional require(fs/promises) pattern
--- a/.changeset/brave-ears-drive.md
+++ b/.changeset/brave-ears-drive.md
@@ -1,7 +1,6 @@
 ---
 '@verdaccio/local-storage': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/ui-components': patch
 '@verdaccio/tarball': patch
--- a/.changeset/brave-rockets-remember.md
+++ b/.changeset/brave-rockets-remember.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/store': patch
+---
+
+fix(storage): check_owners with anonymous access
--- a/.changeset/bright-mugs-buy.md
+++ b/.changeset/bright-mugs-buy.md
@@ -0,0 +1,20 @@
+---
+'docusaurus-plugin-contributors': patch
+'generator-verdaccio-plugin': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/file-locking': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+'@verdaccio/hooks': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+chore(deps): built-in node imports
--- a/.changeset/clean-dryers-hug.md
+++ b/.changeset/clean-dryers-hug.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(deps): express
--- a/.changeset/cool-balloons-search.md
+++ b/.changeset/cool-balloons-search.md
@@ -0,0 +1,7 @@
+---
+'verdaccio-htpasswd': patch
+'verdaccio-memory': patch
+'verdaccio-audit': patch
+---
+
+chore(deps): plugins audit, htpasswd, memory
--- a/.changeset/cool-emus-know.md
+++ b/.changeset/cool-emus-know.md
@@ -0,0 +1,9 @@
+---
+'@verdaccio/url': patch
+'@verdaccio/config': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+---
+
+chore(deps): api, auth, cli, config, url
--- a/.changeset/cuddly-paws-laugh.md
+++ b/.changeset/cuddly-paws-laugh.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/config': patch
+'@verdaccio/logger-commons': patch
+'@verdaccio/types': patch
+---
+
+feat(logger): support redacting sensitive data
--- a/.changeset/curvy-bananas-complain.md
+++ b/.changeset/curvy-bananas-complain.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/node-api': patch
+'@verdaccio/config': patch
+---
+
+fix(config): avoid warning for multiple addresses
--- a/.changeset/dry-cups-hear.md
+++ b/.changeset/dry-cups-hear.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/test-helper': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+chore: publish @verdaccio/test-helper
--- a/.changeset/famous-hornets-know.md
+++ b/.changeset/famous-hornets-know.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+---
+
+fix(proxy): proxy protocol check
--- a/.changeset/few-ears-deny.md
+++ b/.changeset/few-ears-deny.md
@@ -1,6 +1,5 @@
 ---
 '@verdaccio/local-storage': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/middleware': patch
 '@verdaccio/core': patch
 '@verdaccio/config': patch
--- a/.changeset/few-poets-bathe.md
+++ b/.changeset/few-poets-bathe.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/signature': patch
+'@verdaccio/utils': patch
+---
+
+chore(deps): signature, utils
--- a/.changeset/flat-rules-design.md
+++ b/.changeset/flat-rules-design.md
@@ -0,0 +1,5 @@
+---
+'verdaccio': patch
+---
+
+chore(deps): verdaccio package
--- a/.changeset/friendly-feet-sing.md
+++ b/.changeset/friendly-feet-sing.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+chore(deps): local-storage
--- a/.changeset/friendly-worms-drum.md
+++ b/.changeset/friendly-worms-drum.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore: add types for createConfigFolder
--- a/.changeset/fuzzy-cups-help.md
+++ b/.changeset/fuzzy-cups-help.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/api': patch
+---
+
+chore: replace mime package with constants
--- a/.changeset/gold-parents-shave.md
+++ b/.changeset/gold-parents-shave.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/core': minor
+'@verdaccio/node-api': minor
+'@verdaccio/config': minor
+---
+
+feat: getListenAddress getConfigParsed methods
--- a/.changeset/hungry-books-bathe.md
+++ b/.changeset/hungry-books-bathe.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(deps): web package
--- a/.changeset/lemon-baboons-double.md
+++ b/.changeset/lemon-baboons-double.md
@@ -0,0 +1,13 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/ui-theme': patch
+'verdaccio-memory': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/eslint-config': patch
+'@verdaccio/middleware': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/api': patch
+---
+
+chore(lint): switch rules from jest to vitest
--- a/.changeset/mean-timers-look.md
+++ b/.changeset/mean-timers-look.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+chore(express): housekeeping
--- a/.changeset/pink-jeans-lick.md
+++ b/.changeset/pink-jeans-lick.md
@@ -11,7 +11,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/ui-components': patch
--- a/.changeset/pink-mayflies-hide.md
+++ b/.changeset/pink-mayflies-hide.md
@@ -0,0 +1,7 @@
+---
+'@verdaccio/ui-components': patch
+'@verdaccio/node-api': patch
+'@verdaccio/web': patch
+---
+
+chore(deps): node-api, fastify, ui-comp, web
--- a/.changeset/pre.json
+++ b/.changeset/pre.json
@@ -41,7 +41,6 @@
    "@verdaccio/search": "7.0.0",
    "@verdaccio/search-indexer": "7.0.0",
    "@verdaccio/server": "7.0.0",
-    "@verdaccio/server-fastify": "7.0.0",
    "@verdaccio/signature": "7.0.0",
    "@verdaccio/cli-standalone": "7.0.0",
    "@verdaccio/store": "7.0.0",
@@ -68,24 +67,33 @@
    "afraid-cars-sneeze",
    "afraid-cheetahs-rule",
    "angry-doors-tan",
+    "beige-cars-raise",
    "beige-lions-type",
+    "beige-timers-greet",
    "blue-paws-cheer",
    "brave-ears-drive",
+    "brave-rockets-remember",
    "breezy-geckos-search",
    "breezy-toys-judge",
    "bright-bobcats-ring",
+    "bright-mugs-buy",
    "brown-lions-talk",
    "brown-planets-approve",
    "calm-mangos-compare",
    "chatty-apricots-report",
    "clean-beds-wash",
+    "clean-dryers-hug",
    "clean-rings-listen",
    "clever-bees-happen",
+    "cool-balloons-search",
    "cool-seals-watch",
+    "cuddly-paws-laugh",
    "curly-mirrors-smile",
+    "curvy-bananas-complain",
    "curvy-rockets-camp",
    "cyan-snakes-kiss",
    "dirty-countries-play",
+    "dry-cups-hear",
    "early-eyes-float",
    "early-trainers-grin",
    "eight-countries-think",
@@ -93,14 +101,19 @@
    "eleven-rocks-dream",
    "few-beds-itch",
    "few-ears-deny",
+    "few-poets-bathe",
    "fifty-falcons-design",
+    "flat-rules-design",
    "forty-hounds-matter",
    "four-buttons-remember",
    "fresh-owls-hunt",
+    "friendly-feet-sing",
+    "friendly-worms-drum",
    "funny-fireants-tan",
    "fuzzy-ears-yawn",
    "gentle-stingrays-repeat",
    "gold-files-speak",
+    "gold-parents-shave",
    "gold-squids-watch",
    "great-candles-hang",
    "green-eagles-boil",
@@ -110,6 +123,7 @@
    "hip-eggs-serve",
    "hip-suns-jam",
    "hot-crews-live",
+    "hungry-books-bathe",
    "hungry-dolls-destroy",
    "itchy-glasses-end",
    "large-turkeys-change",
@@ -117,6 +131,7 @@
    "long-singers-drive",
    "loud-dingos-cough",
    "lucky-crabs-enjoy",
+    "mean-timers-look",
    "modern-llamas-know",
    "nasty-cooks-watch",
    "nasty-experts-bow",
@@ -132,18 +147,25 @@
    "poor-hats-smile",
    "poor-queens-shop",
    "popular-trees-grin",
+    "pretty-beds-destroy",
+    "pretty-carrots-smash",
+    "pretty-news-do",
    "proud-houses-switch",
    "purple-planes-do",
    "quick-avocados-type",
    "quick-seas-deny",
+    "rare-mirrors-notice",
    "real-balloons-travel",
    "real-seahorses-change",
    "red-dolls-repair",
+    "rotten-bananas-attend",
    "rotten-melons-notice",
    "rotton-readers-shave",
    "rude-birds-design",
    "rude-socks-walk",
    "serious-apes-rule",
+    "seven-peas-obey",
+    "seven-suits-kneel",
    "sharp-queens-rhyme",
    "shiny-buttons-laugh",
    "short-mails-smoke",
@@ -152,27 +174,37 @@
    "silent-tips-admire",
    "silver-houses-remain",
    "silver-insects-train",
+    "six-planes-appear",
    "slow-cars-guess",
    "smooth-games-share",
+    "soft-berries-fail",
    "strange-pants-chew",
    "stupid-camels-build",
+    "stupid-socks-grow",
+    "sweet-bulldogs-doubt",
    "sweet-crabs-deliver",
    "swift-knives-shop",
    "swift-mangos-grab",
    "swift-zebras-cheer",
+    "tame-hairs-drive",
    "ten-jeans-approve",
    "tender-buckets-smoke",
    "thick-dolphins-rule",
+    "thick-insects-run",
    "thirty-comics-trade",
    "tidy-socks-battle",
    "tricky-impalas-shake",
+    "tricky-kiwis-thank",
    "tricky-knives-end",
    "twelve-games-wonder",
+    "twelve-socks-accept",
    "violet-baboons-beg",
    "violet-bobcats-allow",
    "violet-boxes-float",
+    "violet-poems-walk",
    "weak-cherries-serve",
    "wet-cats-behave",
+    "wet-comics-listen",
    "wicked-points-relate",
    "wild-coins-lie",
    "yellow-flies-sniff"
--- a/.changeset/pretty-beds-destroy.md
+++ b/.changeset/pretty-beds-destroy.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+fix: restore minimatch major version
--- a/.changeset/pretty-carrots-smash.md
+++ b/.changeset/pretty-carrots-smash.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+Fix inconsistency in filter plugin invocation upon receiving 304 from uplink after uplink.maxage has passed
--- a/.changeset/pretty-news-do.md
+++ b/.changeset/pretty-news-do.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/types': patch
+---
+
+fix: minor logger missing type
--- a/.changeset/rare-mirrors-notice.md
+++ b/.changeset/rare-mirrors-notice.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+chore(auth): typings
--- a/.changeset/rotten-bananas-attend.md
+++ b/.changeset/rotten-bananas-attend.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+chore(auth): multiple plugins test
--- a/.changeset/seven-eggs-sparkle.md
+++ b/.changeset/seven-eggs-sparkle.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): regression after mui 7 upgrade
--- a/.changeset/seven-peas-obey.md
+++ b/.changeset/seven-peas-obey.md
@@ -0,0 +1,8 @@
+---
+'@verdaccio/file-locking': patch
+'@verdaccio/tarball': patch
+'@verdaccio/core': patch
+'@verdaccio/url': patch
+---
+
+chore(deps): clean up core modules
--- a/.changeset/seven-suits-kneel.md
+++ b/.changeset/seven-suits-kneel.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/proxy': patch
+---
+
+chore(proxy): update tests
--- a/.changeset/shiny-buttons-laugh.md
+++ b/.changeset/shiny-buttons-laugh.md
@@ -12,7 +12,6 @@
 'verdaccio-memory': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/logger': patch
 'verdaccio-audit': patch
 '@verdaccio/test-helper': patch
--- a/.changeset/six-planes-appear.md
+++ b/.changeset/six-planes-appear.md
@@ -0,0 +1,8 @@
+---
+'@verdaccio/logger-prettify': patch
+'@verdaccio/logger-commons': patch
+'@verdaccio/loaders': patch
+'@verdaccio/hooks': patch
+---
+
+chore(deps): hooks, loaders, logger
--- a/.changeset/soft-berries-fail.md
+++ b/.changeset/soft-berries-fail.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): update deps and storybook
--- a/.changeset/stupid-socks-grow.md
+++ b/.changeset/stupid-socks-grow.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+chore(deps): middleware
--- a/.changeset/sweet-bulldogs-doubt.md
+++ b/.changeset/sweet-bulldogs-doubt.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build (2)
--- a/.changeset/tame-hairs-drive.md
+++ b/.changeset/tame-hairs-drive.md
@@ -0,0 +1,8 @@
+---
+'@verdaccio/search-indexer': patch
+'@verdaccio/node-api': patch
+'@verdaccio/search': patch
+'@verdaccio/proxy': patch
+---
+
+chore(deps): node-api, proxy, search, search-indexer
--- a/.changeset/thick-insects-run.md
+++ b/.changeset/thick-insects-run.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/store': patch
+---
+
+chore(deps): storage
--- a/.changeset/tricky-kiwis-thank.md
+++ b/.changeset/tricky-kiwis-thank.md
@@ -0,0 +1,18 @@
+---
+'@verdaccio/test-cli-commons': patch
+'@verdaccio/e2e-cli-pnpm10': patch
+'@verdaccio/e2e-cli-npm10': patch
+'@verdaccio/e2e-cli-npm11': patch
+'@verdaccio/e2e-cli-pnpm8': patch
+'@verdaccio/e2e-cli-pnpm9': patch
+'@verdaccio/e2e-cli-yarn1': patch
+'@verdaccio/e2e-cli-yarn2': patch
+'@verdaccio/e2e-cli-yarn3': patch
+'@verdaccio/e2e-cli-yarn4': patch
+'@verdaccio/e2e-cli-npm6': patch
+'@verdaccio/e2e-cli-npm7': patch
+'@verdaccio/e2e-cli-npm8': patch
+'@verdaccio/e2e-cli-npm9': patch
+---
+
+chore(deps): e2e-cli
--- a/.changeset/twelve-socks-accept.md
+++ b/.changeset/twelve-socks-accept.md
@@ -0,0 +1,12 @@
+---
+'verdaccio-auth-memory': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/proxy': patch
+'@verdaccio/website': patch
+'@verdaccio/e2e-ui': patch
+---
+
+chore(deps): sync and pin dependencies
--- a/.changeset/violet-poems-walk.md
+++ b/.changeset/violet-poems-walk.md
@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+chore(api): remove obsolete tests
--- a/.changeset/weak-cherries-serve.md
+++ b/.changeset/weak-cherries-serve.md
@@ -4,7 +4,6 @@
 '@verdaccio/ui-theme': patch
 '@verdaccio/search-indexer': patch
 '@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
 '@verdaccio/test-helper': patch
 '@verdaccio/middleware': patch
 'verdaccio': patch
--- a/.changeset/wet-comics-listen.md
+++ b/.changeset/wet-comics-listen.md
@@ -0,0 +1,6 @@
+---
+'@verdaccio/local-scripts': patch
+'@verdaccio/website': patch
+---
+
+fix(docs): warnings during website build
--- a/.eslintignore
+++ b/.eslintignore
@@ -19,3 +19,5 @@ yarn.js
 packages/ui-components/storybook-static
 dist.js
 bundle.js
+# generator templates
+packages/tools/generator-verdaccio-plugin/generators/app/**
--- a/.eslintrc.js
+++ b/.eslintrc.js
@@ -1,3 +1,3 @@
 module.exports = {
-  extends: ['@verdaccio/eslint-config'],
+  extends: ['@verdaccio/eslint-config', 'plugin:storybook/recommended'],
 };
--- a/.github/actions/build-app/action.yml
+++ b/.github/actions/build-app/action.yml
@@ -16,7 +16,7 @@ runs:
    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
      uses: ./.github/actions/install-app-node
      with:
-        node-version: ${{ inputs.node_version }}
+        node-version: ${{ inputs.node-version }}
    - name: build
      run: pnpm build
      shell: bash
--- a/.github/actions/cache-packages/action.yml
+++ b/.github/actions/cache-packages/action.yml
@@ -6,7 +6,7 @@ runs:
  steps:
    - name: Cache Packages
      id: cache-packages
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
      with:
        path: ./packages/
        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}
--- a/.github/actions/cache-store/action.yml
+++ b/.github/actions/cache-store/action.yml
@@ -6,7 +6,7 @@ runs:
  steps:
    - name: Cache .pnpm-store
      id: cache-npm
-      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
      with:
        path: ~/.pnpm-store
        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
--- a/.github/workflows/changesets-pr.yml
+++ b/.github/workflows/changesets-pr.yml
@@ -12,7 +12,7 @@ jobs:
    if: github.event.pull_request.head.repo.fork == false
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/changesets.yml
+++ b/.github/workflows/changesets.yml
@@ -17,7 +17,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -35,7 +35,7 @@ jobs:
            --health-timeout=20s    
            --health-retries=6
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
  lint:
@@ -43,7 +43,7 @@ jobs:
    name: Lint
    needs: prepare
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
        with:
@@ -55,7 +55,7 @@ jobs:
    name: Format
    needs: prepare
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
        with:
@@ -68,11 +68,11 @@ jobs:
      fail-fast: true
      matrix:
        os: [ubuntu-latest]
-        node_version: [18, 20, 21, 22, 23, 24]
+        node_version: [18, 20, 22, 24]
    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
    runs-on: ${{ matrix.os }}
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node ${{ matrix.node_version }}
        uses: ./.github/actions/build-app
        with:
@@ -85,7 +85,7 @@ jobs:
    name: synchronize translations
    if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version-file: '.nvmrc'
@@ -94,7 +94,7 @@ jobs:
          npm install --global corepack@latest
          corepack enable
          corepack install
-      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+      - uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
        with:
          path: ~/.pnpm-store
          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
--- a/.github/workflows/codeql-analysis.yml
+++ b/.github/workflows/codeql-analysis.yml
@@ -29,7 +29,7 @@ jobs:

    steps:
      - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          # We must fetch at least the immediate parents so that if this is
          # a pull request then we can checkout the head.
@@ -37,7 +37,7 @@ jobs:

      # Initializes the CodeQL tools for scanning.
      - name: Initialize CodeQL
-        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/init@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
        with:
          config: |
            paths-ignore:
@@ -50,7 +50,7 @@ jobs:
      # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
      # If this step fails, then you should remove it and run the build manually (see below)
      - name: Autobuild
-        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/autobuild@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5

      # ℹ️ Command-line programs to run using the OS shell.
      # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
      #   make release

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        uses: github/codeql-action/analyze@51f77329afa6477de8c49fc9c7046c15b9a4e79d # v3.29.5
--- a/.github/workflows/docker-proxy-apache-e2e.yml
+++ b/.github/workflows/docker-proxy-apache-e2e.yml
@@ -20,7 +20,7 @@ jobs:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
    - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      
    - name: Start containers
      run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
--- a/.github/workflows/docker-proxy-nginx-e2e.yml
+++ b/.github/workflows/docker-proxy-nginx-e2e.yml
@@ -18,7 +18,7 @@ jobs:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
    - name: Checkout
-      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      
    - name: Start containers
      run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
--- a/.github/workflows/docker-publish.yml
+++ b/.github/workflows/docker-publish.yml
@@ -16,7 +16,7 @@ jobs:
    if: github.repository == 'verdaccio/verdaccio'
    steps:
      - name: Checkout repository
-        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
+        uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5

      - name: Set up QEMU
        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
@@ -34,7 +34,7 @@ jobs:

      - name: Prepare Docker image tags
        id: docker_meta
-        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
+        uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5
        with:
          images: ${{ github.repository }}
          tags: |
--- a/.github/workflows/e2e-ci.yml
+++ b/.github/workflows/e2e-ci.yml
@@ -1,11 +1,14 @@
 name: E2E CLI

 on: [pull_request]
+
 permissions:
  contents: read
+
 concurrency:
  group: e2e-ci-${{ github.ref }}
  cancel-in-progress: true
+
 jobs:
  prepare:
    runs-on: ubuntu-latest
@@ -18,22 +21,12 @@ jobs:
        env:
          NODE_ENV: production
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
-  build:
-    needs: [prepare]
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Build application with Node ${{ matrix.node_version }}
-        uses: ./.github/actions/build-app
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Cache packages
-        uses: ./.github/actions/cache-packages
+
  e2e-cli-npm:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: false
      matrix:
@@ -47,23 +40,25 @@ jobs:
            npm11,
          ]
        node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test

  e2e-cli-pnpm:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: true
      matrix:
@@ -73,23 +68,26 @@ jobs:
            pnpm9,
            pnpm10,
          ]
-        node: [2, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+        node: [22, 24]
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
-        run:  cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
+
  e2e-cli-yarn:
-    needs: [prepare, build]
+    needs: [prepare]
    strategy:
      fail-fast: false
      matrix:
@@ -101,18 +99,19 @@ jobs:
            yarn4
          ]
        node: [22, 24]
-    name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
+    name: ${{ matrix.pkg }} / ubuntu-latest / ${{ matrix.node }}
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+      - name: Build application with Node ${{ matrix.node }}
+        uses: ./.github/actions/build-app
+        with:
+          node-version: ${{ matrix.node }}
+      - name: Install dependencies with a custom registry version ${{ matrix.node }}
        uses: ./.github/actions/install-app-node
        with:
-          node-version: ${{ inputs.node_version }}
+          node-version: ${{ matrix.node }}
          reporter: 'default'
          loglevel: 'debug'
-      - name: Restore cache pnpm store
-        uses: ./.github/actions/cache-packages
      - name: Test CLI
        run: cd e2e/cli/e2e-${{matrix.pkg}} && NODE_ENV=production pnpm test
-
--- a/.github/workflows/e2e-ui.yml
+++ b/.github/workflows/e2e-ui.yml
@@ -19,7 +19,7 @@ jobs:
        env:
          NODE_ENV: production
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node 20
        uses: ./.github/actions/build-app
        with:
--- a/.github/workflows/plugin-generator-e2e.yaml
+++ b/.github/workflows/plugin-generator-e2e.yaml
@@ -16,15 +16,15 @@ jobs:
    runs-on: ubuntu-latest
    strategy:
      matrix:
-        node-version: [20, 22, 23]
+        node-version: [20, 22, 24]
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node ${{ matrix.node_version }}
        uses: ./.github/actions/build-app
        with:
          node-version: ${{ matrix.node_version }}
      - name: install verdaccio
-        run: npm install -g verdaccio@5
+        run: npm install -g verdaccio@6
      - name: Start server
        run: verdaccio -c e2e/docker/generator-e2e/generator.yaml &
      - name: ping server
--- a/.github/workflows/shared-docker-publish.yml
+++ b/.github/workflows/shared-docker-publish.yml
@@ -23,7 +23,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
      - uses: docker/setup-buildx-action@v1
        with:
--- a/.github/workflows/static-data.yml
+++ b/.github/workflows/static-data.yml
@@ -21,7 +21,7 @@ jobs:
    runs-on: ubuntu-latest
    if: github.repository == 'verdaccio/verdaccio'
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
        with:
          persist-credentials: false
          fetch-depth: 0
--- a/.github/workflows/test-docker-build.yml
+++ b/.github/workflows/test-docker-build.yml
@@ -6,8 +6,25 @@ jobs:
    name: Test Docker Build
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-    - name: Build
-      run: docker build .
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
+    - name: Build Docker image
+      run: docker build -t verdaccio-test .
      env:
        VERDACCIO_BUILD_REGISTRY: https://registry.npmjs.org
+    - name: Run Verdaccio in background
+      run: |
+        docker run -d --name verdaccio-test -p 4873:4873 verdaccio-test
+        sleep 10  # Give Verdaccio some time to start
+
+    - name: Test npm install from local Verdaccio
+      run: |
+        npm set registry http://localhost:4873
+        npm install -g verdaccio 
+
+    - name: Show Verdaccio logs (for debugging)
+      if: always()
+      run: docker logs verdaccio-test
+
+    - name: Stop Verdaccio
+      if: always()
+      run: docker stop verdaccio-test
--- a/.github/workflows/test-publish-package.yml
+++ b/.github/workflows/test-publish-package.yml
@@ -1,13 +1,20 @@
 on:
  workflow_call:
+    inputs:
+      verdaccio-version:
+        description: 'Verdaccio version to use'
+        required: false
+        default: 'latest'
+        type: string

 jobs:
  testVerdaccio:
    name: Test Verdaccio Publish
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Publish
-      uses: verdaccio/github-actions/publish@f2e0370cfa5d74d24c325017b701bfddc9cc2e5d # tag=v0.4.0
+      uses: verdaccio/github-actions/publish@master # always latest by design 
      with:
        args: -d
+        verdaccio-version: ${{ inputs.verdaccio-version }}
--- a/.github/workflows/ui-components.yml
+++ b/.github/workflows/ui-components.yml
@@ -21,7 +21,7 @@ jobs:
    env:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Install dependencies with a custom registry
        uses: ./.github/actions/install-app
      - name: crowdin download
--- a/.github/workflows/website.yml
+++ b/.github/workflows/website.yml
@@ -31,7 +31,7 @@ jobs:
    env:
      NODE_OPTIONS: --max_old_space_size=4096
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Build application with Node 20
        uses: ./.github/actions/build-app
        with:
@@ -39,7 +39,7 @@ jobs:
      - name: Build Translations percentage
        run: pnpm --filter @verdaccio/local-scripts build
      - name: Cache Docusaurus Build
-        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
+        uses: actions/cache@0057852bfaa89a56745cba8c7296529d2fc39830 # v4.3.0
        with:
          path: website/node_modules/.cache/webpack
          key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}
--- a/.github/workflows/x-e2e-angular-cli-workflow.yml
+++ b/.github/workflows/x-e2e-angular-cli-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -44,7 +44,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -80,7 +80,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-audit-workflow.yml
+++ b/.github/workflows/x-e2e-audit-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml
+++ b/.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -42,7 +42,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-e2e-jest-workflow.yml
+++ b/.github/workflows/x-e2e-jest-workflow.yml
@@ -7,7 +7,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -38,7 +38,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -72,7 +72,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -105,7 +105,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
@@ -138,7 +138,7 @@ jobs:
    runs-on: ubuntu-latest

    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0

      - name: 'Use Node.js'
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
--- a/.github/workflows/x-release-snapshot.yml
+++ b/.github/workflows/x-release-snapshot.yml
@@ -6,7 +6,7 @@ jobs:
    name: Release Snapshot
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node (latest)
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/x-release.yml
+++ b/.github/workflows/x-release.yml
@@ -6,7 +6,7 @@ jobs:
    name: Release
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node (latest)
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/x-smok-test-docker.yml
+++ b/.github/workflows/x-smok-test-docker.yml
@@ -16,7 +16,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
          node-version-file: '.nvmrc'
--- a/.github/workflows/x-smok-test-module.yml
+++ b/.github/workflows/x-smok-test-module.yml
@@ -10,7 +10,7 @@ jobs:
  test:
    runs-on: ubuntu-latest
    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
      - name: Use Node (latest)
        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
        with:
--- a/.github/workflows/yarn-ci-lint.yml
+++ b/.github/workflows/yarn-ci-lint.yml
@@ -6,7 +6,7 @@ jobs:
    name: Node Lint
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node 
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/.github/workflows/yarn-ci.yml
+++ b/.github/workflows/yarn-ci.yml
@@ -9,7 +9,7 @@ jobs:
    name: Node ${{ inputs.node_version }}
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+    - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
    - name: Use Node ${{ inputs.node_version }}
      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
      with:
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -136,7 +136,6 @@ Any interaction with the server should be done through the port `8000` eg: `npm
 #### Useful commands

 - `pnpm debug`: Run the server in debug mode `--inspect`. UI runs too but without hot reload. For automatic break use `pnpm debug:break`.
- `pnpm debug:fastify`: To contribute on the [fastify migration](https://github.com/verdaccio/verdaccio/discussions/2155) this is a temporary command for such purpose.
 - `pnpm website`: Build the website, for more commands to run the _website_, run `cd website` and then `pnpm serve`, website will run on port `3000`.
 - `pnpm docker`: Build the docker image. Requires `docker` command available in your system.

--- a/4
+++ b/4
@@ -45,8 +45,8 @@ ADD packages/config/src/conf/docker.yaml /verdaccio/conf/config.yaml

 RUN adduser -u $VERDACCIO_USER_UID -S -D -h $VERDACCIO_APPDIR -g "$VERDACCIO_USER_NAME user" -s /sbin/nologin $VERDACCIO_USER_NAME && \
    chmod -R +x $VERDACCIO_APPDIR/packages/verdaccio/bin $VERDACCIO_APPDIR/docker-bin && \
-    chown -R $VERDACCIO_USER_UID:root /verdaccio/storage && \
-    chmod -R g=u /verdaccio/storage /etc/passwd
+    chown -R $VERDACCIO_USER_UID:root /verdaccio/storage /verdaccio/conf && \
+    chmod -R g=u /verdaccio/storage /verdaccio/conf /etc/passwd

 USER $VERDACCIO_USER_UID

--- a/README.md
+++ b/README.md
@@ -329,7 +329,7 @@ You can find and chat with them over Discord, click [here](http://chat.verdaccio
 - [NX](https://github.com/nrwl/nx) _(+6.1k ⭐️)_
 - [Mozilla Neutrino](https://github.com/neutrinojs/neutrino) _(+3.7k ⭐️)_
 - [workshopper how to npm](https://github.com/workshopper/how-to-npm) _(+1k ⭐️)_
- [Amazon SDK v3](https://github.com/aws/aws-sdk-js-v3)
+- [Amazon SDK for JavaScript (v3)](https://github.com/aws/aws-sdk-js-v3)
 - [Amazon Encryption SDK for Javascript](https://github.com/aws/aws-encryption-sdk-javascript)

 🤓 Don't be shy, add yourself to this readme.
--- a/docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json
+++ b/docker-examples/v4/docker-plugin-external/plugins/verdaccio-memory/package.json
@@ -16,9 +16,9 @@
    "build": "babel src/ --out-dir lib/ --copy-files --ignore ___tests___"
  },
  "dependencies": {
-    "@verdaccio/streams": "^1.0.0",
+    "@verdaccio/streams": "10.2.1",
    "http-errors": "1.6.3",
-    "memory-fs": "^0.4.1"
+    "memory-fs": "0.5.0"
  },
  "devDependencies": {
    "@commitlint/cli": "7.0.0",
--- a/docker-examples/v6/README.md
+++ b/docker-examples/v6/README.md
@@ -8,7 +8,7 @@

 ## Proxy

- [Docker + Nginx + Verdaccio](proxy/reverse_proxy/nginx/README.md)
+- [Docker + Nginx + Verdaccio](reverse_proxy/nginx/README.md)
 - [Docker + Apache + Verdaccio](proxy/apache-verdaccio/README.md)
 - [Docker + HTTPS Portal + Verdaccio](proxy/https-portal-example/README.md)

--- a/e2e/cli/cli-commons/CHANGELOG.md
+++ b/e2e/cli/cli-commons/CHANGELOG.md
@@ -1,5 +1,11 @@
 # @verdaccio/test-cli-commons

+## 2.0.0-next-8.1
+
+### Patch Changes
+
+- 9da5308: chore(deps): e2e-cli
+
 ## 2.0.0-next-8.0

 ### Major Changes
--- a/e2e/cli/cli-commons/package.json
+++ b/e2e/cli/cli-commons/package.json
@@ -1,19 +1,19 @@
 {
  "private": true,
  "name": "@verdaccio/test-cli-commons",
-  "version": "2.0.0-next-8.0",
+  "version": "2.0.0-next-8.1",
  "main": "src/index.ts",
  "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.18",
-    "@verdaccio/core": "workspace:8.0.0-next-8.18",
-    "@verdaccio/types": "workspace:13.0.0-next-8.6",
-    "debug": "4.4.1",
+    "@verdaccio/config": "workspace:8.0.0-next-8.24",
+    "@verdaccio/core": "workspace:8.0.0-next-8.24",
+    "@verdaccio/types": "workspace:13.0.0-next-8.8",
+    "debug": "4.4.3",
    "fs-extra": "11.2.0",
    "get-port": "5.1.1",
    "got": "11.8.6",
    "js-yaml": "4.1.0",
    "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.18"
+    "verdaccio": "workspace:8.0.0-next-8.24"
  },
  "scripts": {
    "test": "echo no test",
--- a/e2e/cli/cli-commons/src/process.ts
+++ b/e2e/cli/cli-commons/src/process.ts
@@ -1,7 +1,6 @@
-import { spawn } from 'child_process';
-import { SpawnOptions } from 'child_process';
 import buildDebug from 'debug';
-import { createInterface } from 'readline';
+import { SpawnOptions, spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';

 const debug = buildDebug('verdaccio:e2e:process');
 const debugRead = buildDebug('verdaccio:e2e:line');
--- a/e2e/cli/cli-commons/src/utils.ts
+++ b/e2e/cli/cli-commons/src/utils.ts
@@ -1,7 +1,7 @@
 import buildDebug from 'debug';
 import fs from 'fs-extra';
-import { cp, readFile, writeFile } from 'fs/promises';
-import { join } from 'path';
+import { cp, readFile, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';

 import { fileUtils } from '@verdaccio/core';

--- a/e2e/cli/cli-commons/src/yarn-modern-utils.ts
+++ b/e2e/cli/cli-commons/src/yarn-modern-utils.ts
@@ -1,7 +1,7 @@
-import { cp, writeFile } from 'fs/promises';
 import YAML from 'js-yaml';
-import { join } from 'path';
-import { URL } from 'url';
+import { cp, writeFile } from 'node:fs/promises';
+import { join } from 'node:path';
+import { URL } from 'node:url';

 import { Dependencies } from '@verdaccio/types';

--- a/e2e/cli/e2e-npm-commons/CHANGELOG.md
+++ b/e2e/cli/e2e-npm-commons/CHANGELOG.md
@@ -1,5 +1,12 @@
 # @verdaccio/e2e-cli-npm-common

+## 1.0.1-next-8.1
+
+### Patch Changes
+
+- Updated dependencies [9da5308]
+  - @verdaccio/test-cli-commons@2.0.0-next-8.1
+
 ## 1.0.1-next-8.0

 ### Patch Changes
--- a/e2e/cli/e2e-npm-commons/package.json
+++ b/e2e/cli/e2e-npm-commons/package.json
@@ -1,9 +1,9 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-cli-npm-common",
-  "version": "1.0.1-next-8.0",
+  "version": "1.0.1-next-8.1",
  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0"
+    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.1"
  },
  "scripts": {
    "test": "echo no test"
--- a/e2e/cli/e2e-npm10/CHANGELOG.md
+++ b/e2e/cli/e2e-npm10/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @verdaccio/e2e-cli-npm9

+## 1.0.2-next-8.2
+
+### Patch Changes
+
+- 9da5308: chore(deps): e2e-cli
+- Updated dependencies [9da5308]
+  - @verdaccio/test-cli-commons@2.0.0-next-8.1
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.1
+
 ## 1.0.2-next-8.1

 ### Patch Changes
--- a/e2e/cli/e2e-npm10/package.json
+++ b/e2e/cli/e2e-npm10/package.json
@@ -1,11 +1,11 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-cli-npm10",
-  "version": "1.0.2-next-8.1",
+  "version": "1.0.2-next-8.2",
  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
+    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.1",
    "@verdaccio/e2e-cli-npm-common": "workspace:*",
-    "npm": "10.9.0"
+    "npm": "10.9.2"
  },
  "scripts": {
    "test": "vitest run --testTimeout 50000"
--- a/e2e/cli/e2e-npm10/utils.ts
+++ b/e2e/cli/e2e-npm10/utils.ts
@@ -1,5 +1,5 @@
-import { SpawnOptions } from 'child_process';
-import { join } from 'path';
+import { SpawnOptions } from 'node:child_process';
+import { join } from 'node:path';

 import { exec } from '@verdaccio/test-cli-commons';
 import { addRegistry } from '@verdaccio/test-cli-commons';
--- a/e2e/cli/e2e-npm11/CHANGELOG.md
+++ b/e2e/cli/e2e-npm11/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @verdaccio/e2e-cli-npm9

+## 1.0.2-next-8.2
+
+### Patch Changes
+
+- 9da5308: chore(deps): e2e-cli
+- Updated dependencies [9da5308]
+  - @verdaccio/test-cli-commons@2.0.0-next-8.1
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.1
+
 ## 1.0.2-next-8.1

 ### Patch Changes
--- a/e2e/cli/e2e-npm11/package.json
+++ b/e2e/cli/e2e-npm11/package.json
@@ -1,11 +1,11 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-cli-npm11",
-  "version": "1.0.2-next-8.1",
+  "version": "1.0.2-next-8.2",
  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
+    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.1",
    "@verdaccio/e2e-cli-npm-common": "workspace:*",
-    "npm": "11.4.0"
+    "npm": "11.4.2"
  },
  "scripts": {
    "test": "vitest run --testTimeout 50000"
--- a/e2e/cli/e2e-npm11/utils.ts
+++ b/e2e/cli/e2e-npm11/utils.ts
@@ -1,5 +1,5 @@
-import { SpawnOptions } from 'child_process';
-import { join } from 'path';
+import { SpawnOptions } from 'node:child_process';
+import { join } from 'node:path';

 import { exec } from '@verdaccio/test-cli-commons';
 import { addRegistry } from '@verdaccio/test-cli-commons';
--- a/e2e/cli/e2e-npm6/CHANGELOG.md
+++ b/e2e/cli/e2e-npm6/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @verdaccio/e2e-cli-npm6

+## 1.0.2-next-8.2
+
+### Patch Changes
+
+- 9da5308: chore(deps): e2e-cli
+- Updated dependencies [9da5308]
+  - @verdaccio/test-cli-commons@2.0.0-next-8.1
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.1
+
 ## 1.0.2-next-8.1

 ### Patch Changes
--- a/e2e/cli/e2e-npm6/package.json
+++ b/e2e/cli/e2e-npm6/package.json
@@ -1,9 +1,9 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-cli-npm6",
-  "version": "1.0.2-next-8.1",
+  "version": "1.0.2-next-8.2",
  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
+    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.1",
    "@verdaccio/e2e-cli-npm-common": "workspace:*",
    "npm": "6.14.18"
  },
--- a/e2e/cli/e2e-npm6/utils.ts
+++ b/e2e/cli/e2e-npm6/utils.ts
@@ -1,5 +1,5 @@
-import { SpawnOptions } from 'child_process';
-import { join } from 'path';
+import { SpawnOptions } from 'node:child_process';
+import { join } from 'node:path';

 import { exec } from '@verdaccio/test-cli-commons';

--- a/e2e/cli/e2e-npm7/CHANGELOG.md
+++ b/e2e/cli/e2e-npm7/CHANGELOG.md
@@ -1,5 +1,14 @@
 # @verdaccio/e2e-cli-npm7

+## 1.0.2-next-8.2
+
+### Patch Changes
+
+- 9da5308: chore(deps): e2e-cli
+- Updated dependencies [9da5308]
+  - @verdaccio/test-cli-commons@2.0.0-next-8.1
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.1
+
 ## 1.0.2-next-8.1

 ### Patch Changes
--- a/e2e/cli/e2e-npm7/package.json
+++ b/e2e/cli/e2e-npm7/package.json
@@ -1,9 +1,9 @@
 {
  "private": true,
  "name": "@verdaccio/e2e-cli-npm7",
-  "version": "1.0.2-next-8.1",
+  "version": "1.0.2-next-8.2",
  "dependencies": {
-    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
+    "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.1",
    "@verdaccio/e2e-cli-npm-common": "workspace:*",
    "npm": "7.24.2"
  },
--- a/Show More
+++ b/Show More