chore: update env

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.all-contributorsrc

@@ -0,0 +1,245 @@
+{
+  "projectName": "verdaccio",
+  "projectOwner": "verdaccio",
+  "repoType": "github",
+  "repoHost": "https://github.com",
+  "commitConvention": "none",
+  "files": [
+    "CONTRIBUTORS.md"
+  ],
+  "contributors": [
+    {
+      "login": "juanpicado",
+      "name": "Juan Picado",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/558752?v=4",
+      "profile": "https://www.linkedin.com/in/jotadeveloper/",
+      "contributions": [
+        "doc",
+        "code",
+        "infra",
+        "eventOrganizing",
+        "blog",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "sergiohgz",
+      "name": "Sergio Herrera",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/14012309?v=4",
+      "profile": "https://github.com/sergiohgz",
+      "contributions": [
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "DanielRuf",
+      "name": "Daniel Ruf",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/827205?v=4",
+      "profile": "https://daniel-ruf.de/",
+      "contributions": [
+        "security",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "priscilawebdev",
+      "name": "Priscila Oliveira",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/29228205?v=4",
+      "profile": "https://priscilawebdev.github.io/priscilaoliveira/",
+      "contributions": [
+        "design",
+        "code",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "ayusharma",
+      "name": "Ayush Sharma",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/6918450?v=4",
+      "profile": "http://ayusharma.github.io/",
+      "contributions": [
+        "infra",
+        "code",
+        "design"
+      ]
+    },
+    {
+      "login": "trentearl",
+      "name": "Trent Earl",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/802857?v=4",
+      "profile": "https://github.com/trentearl",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jmwilkinson",
+      "name": "jmwilkinson",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/17836030?v=4",
+      "profile": "https://github.com/jmwilkinson",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "bufferoverflow",
+      "name": "Roger Meier",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/378909?v=4",
+      "profile": "https://github.com/bufferoverflow",
+      "contributions": [
+        "plugin"
+      ]
+    },
+    {
+      "login": "jamesgeorge007",
+      "name": "James George",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/25279263?v=4",
+      "profile": "https://ghuser.io/jamesgeorge007",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "AvailCat",
+      "name": "AvailCat",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/19658647?v=4",
+      "profile": "https://github.com/AvailCat",
+      "contributions": [
+        "code",
+        "infra",
+        "maintenance"
+      ]
+    },
+    {
+      "login": "lgaitan",
+      "name": "Lucius Gaitán",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5970350?v=4",
+      "profile": "https://www.luciusgaitan.com/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ramonornela",
+      "name": "Ramon Henrique Ornelas",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/187946?v=4",
+      "profile": "https://github.com/ramonornela",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "UnitedMarsupials-zz",
+      "name": "UnitedMarsupials-zz",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1486340?v=4",
+      "profile": "https://people.freebsd.org/~mi/resume/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ryan-codingintrigue",
+      "name": "Ryan Graham",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/9048902?v=4",
+      "profile": "http://www.codingintrigue.co.uk/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "coolsp",
+      "name": "coolsp",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1246647?v=4",
+      "profile": "https://github.com/coolsp",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ashishsurana",
+      "name": "Ashish Surana",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/5610944?v=4",
+      "profile": "http://ashishsurana.in/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "buffaybu",
+      "name": "Wang Yifei",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/2025661?v=4",
+      "profile": "https://github.com/buffaybu",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "lirantal",
+      "name": "Liran Tal",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/316371?v=4",
+      "profile": "https://twitter.com/liran_tal",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "brenordr",
+      "name": "Breno Rodrigues",
+      "avatar_url": "https://avatars2.githubusercontent.com/u/19731692?v=4",
+      "profile": "https://github.com/brenordr",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "jachstet-sea",
+      "name": "jachstet-sea",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/7993508?v=4",
+      "profile": "https://github.com/jachstet-sea",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "Vrtak-CZ",
+      "name": "Patrik Votoček",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/112567?v=4",
+      "profile": "https://patrik.votocek.cz/",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "monkeywithacupcake",
+      "name": "jess",
+      "avatar_url": "https://avatars3.githubusercontent.com/u/7316730?v=4",
+      "profile": "https://github.com/monkeywithacupcake",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "toolsofraj",
+      "name": "toolsofraj",
+      "avatar_url": "https://avatars0.githubusercontent.com/u/2507152?v=4",
+      "profile": "https://github.com/toolsofraj",
+      "contributions": [
+        "code"
+      ]
+    },
+    {
+      "login": "ddhp",
+      "name": "Jian-Chen Chen (jesse)",
+      "avatar_url": "https://avatars1.githubusercontent.com/u/1715380?v=4",
+      "profile": "https://github.com/ddhp",
+      "contributions": [
+        "translation",
+        "code"
+      ]
+    }
+  ],
+  "skipCi": true,
+  "contributorsPerLine": 7
+}

.babelrc

@@ -1,14 +1,26 @@
 {
-  "presets": [
-    [
-      "@babel/env",
-      {
-        "targets": {
-          "node": 18
-        }
+  "presets": [ [
+    "@babel/env",
+    {
+      "useBuiltIns": "usage",
+      "corejs": {
+        "version": 3, "proposals": true
+      },
+      "targets": {
+        "node": 12
       }
-    ],
+    }
+  ],
     "@babel/typescript"
   ],
-  "ignore": ["**/*.d.ts"]
+  "plugins": [
+    "babel-plugin-dynamic-import-node",
+    "@babel/proposal-class-properties",
+    "@babel/proposal-object-rest-spread",
+    "@babel/plugin-proposal-optional-chaining",
+    "@babel/plugin-proposal-nullish-coalescing-operator"
+    ],
+  "ignore": [
+    "**/*.d.ts"
+  ]
 }

.changeset/angry-doors-tan.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-fix(middleware): pass version to allow check

.changeset/beige-lions-type.md

@@ -1,37 +0,0 @@
----
-'generator-verdaccio-plugin': major
-'@verdaccio/logger-prettify': major
-'@verdaccio/logger-commons': major
-'@verdaccio/local-storage': major
-'verdaccio-auth-memory': major
-'@verdaccio/file-locking': major
-'verdaccio-htpasswd': major
-'@verdaccio/ui-theme': major
-'verdaccio-memory': major
-'@verdaccio/search-indexer': major
-'@verdaccio/server': major
-'@verdaccio/server-fastify': major
-'@verdaccio/logger': major
-'verdaccio-audit': major
-'@verdaccio/ui-components': major
-'@verdaccio/tarball': major
-'@verdaccio/eslint-config': major
-'@verdaccio/test-cli-commons': major
-'@verdaccio/types': major
-'@verdaccio/middleware': major
-'@verdaccio/cli-standalone': major
-'@verdaccio/core': major
-'@verdaccio/signature': major
-'verdaccio': major
-'@verdaccio/url': major
-'@verdaccio/node-api': major
-'@verdaccio/web': major
-'@verdaccio/loaders': major
-'@verdaccio/config': major
-'@verdaccio/search': major
-'@verdaccio/hooks': major
-'@verdaccio/proxy': major
-'@verdaccio/store': major
----
-
-chore: move v7 next to v8 next

.changeset/big-lobsters-sin.md

@@ -0,0 +1,23 @@
+---
+'@verdaccio/local-storage': major
+'@verdaccio/url': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/store': major
+---
+
+# async storage plugin bootstrap
+
+Gives a storage plugin the ability to perform asynchronous tasks on initialization
+
+## Breaking change
+
+Plugin must have an init method in which asynchronous tasks can be executed
+
+```js
+public async init(): Promise<void> {
+   this.data = await this._fetchLocalPackages();
+   this._sync();
+}
+```

.changeset/blue-paws-cheer.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/server': patch
-'@verdaccio/middleware': patch
-'@verdaccio/core': patch
----
-
-chore: request header constants

.changeset/breezy-geckos-search.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/tarball': patch
-'@verdaccio/core': patch
-'@verdaccio/utils': patch
-'@verdaccio/middleware': patch
-'@verdaccio/store': patch
----
-
-chore: move tarball utils to core

.changeset/bright-bobcats-ring.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-fix(ui): sort versions

.changeset/brown-lions-talk.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-chore(deps): update webpack-dev-server to v5

.changeset/brown-planets-approve.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/config': patch
-'@verdaccio/types': patch
-'@verdaccio/website': patch
----
-
-chore: `keep_readmes` docs

.changeset/calm-mangos-compare.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/store': patch
----
-
-fix(store): internal error when checking manifest

.changeset/chatty-apricots-report.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/auth': major
----
-
-chore: move v7 next to v8 next

.changeset/clean-beds-wash.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/logger-commons': patch
----
-
-chore(logger): avoid message if level remains the same

.changeset/clever-bees-happen.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/proxy': patch
----
-
-chore: move agent_options to config

.changeset/config.json

@@ -2,37 +2,9 @@
   "$schema": "https://unpkg.com/@changesets/config@1.3.0/schema.json",
   "changelog": "@changesets/cli/changelog",
   "commit": false,
-  "fixed": [
-    [
-      "verdaccio",
-      "@verdaccio/cli",
-      "@verdaccio/core",
-      "@verdaccio/config",
-      "@verdaccio/node-api",
-      "@verdaccio/ui-theme"
-    ]
-  ],
-  "ignoredPackages": [
-    "@verdaccio/local-publish",
-    "docusaurus-plugin-downloads",
-    "docusaurus-plugin-contributors",
-    "@verdaccio/test-cli-commons",
-    "@verdaccio/local-scripts",
-    "@verdaccio/e2e-cli-npm6",
-    "@verdaccio/e2e-cli-npm7",
-    "@verdaccio/e2e-cli-npm8",
-    "@verdaccio/e2e-cli-npm9",
-    "@verdaccio/e2e-cli-npm10",
-    "@verdaccio/e2e-cli-npm-common",
-    "@verdaccio/e2e-cli-yarn1",
-    "@verdaccio/e2e-cli-yarn2",
-    "@verdaccio/e2e-cli-yarn3",
-    "@verdaccio/e2e-cli-yarn4",
-    "@verdaccio/e2e-cli-pnpm8",
-    "@verdaccio/e2e-cli-pnpm9",
-    "@verdaccio/e2e-cli-pnpm10"
-  ],
+  "linked": [],
   "access": "public",
-  "baseBranch": "master",
-  "updateInternalDependencies": "patch"
+  "baseBranch": "6.x",
+  "updateInternalDependencies": "patch",
+  "ignore": []
 }

.changeset/cool-seals-watch.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/loaders': patch
-'@verdaccio/config': patch
----
-
-chore(loader): fix types for plugin options

.changeset/curly-mirrors-smile.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-chore(middleware): improve loop detection

.changeset/curvy-rockets-camp.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/core': patch
----
-
-chore(core): typing, naming, and docs of parameters

.changeset/cyan-snakes-kiss.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/web': patch
----
-
-chore(web): fix syntax of test files

.changeset/early-eyes-float.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/types': patch
----
-
-chore: add `error` to log level enum

.changeset/eleven-rocks-dream.md

@@ -1,5 +0,0 @@
----
-'verdaccio': patch
----
-
-chore: bump user agent

.changeset/few-cooks-destroy.md

@@ -0,0 +1,46 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/commons-api': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'@verdaccio/readme': major
+'@verdaccio/streams': major
+'@verdaccio/types': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/mock': major
+'@verdaccio/node-api': major
+'@verdaccio/active-directory': major
+'verdaccio-audit': major
+'verdaccio-auth-memory': major
+'verdaccio-aws-s3-storage': major
+'verdaccio-google-cloud': major
+'verdaccio-memory': major
+'@verdaccio/proxy': major
+'@verdaccio/server': major
+'@verdaccio/store': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+'@verdaccio/website': major
+---
+
+feat!: experiments config renamed to flags
+
+- The `experiments` configuration is renamed to `flags`. The functionality is exactly the same.
+
+```js
+flags: token: false;
+search: false;
+```
+
+- The `self_path` property from the config file is being removed in favor of `config_file` full path.
+- Refactor `config` module, better types and utilities

.changeset/fifty-falcons-design.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-fix(middleware): allow content-type with charset

.changeset/fifty-jars-rest.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/middleware': patch
+'@verdaccio/web': patch
+---
+
+Remove @ts-ignore and any in packages/web/src/endpoint/package.ts

.changeset/forty-hounds-matter.md

@@ -1,7 +0,0 @@
----
-'verdaccio': patch
-'@verdaccio/store': patch
-'@verdaccio/utils': patch
----
-
-fix: internal error for unpublished tarball

.changeset/funny-fireants-tan.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/proxy': patch
-'@verdaccio/website': patch
----
-
-fix(proxy): validate protocol of proxy settings

.changeset/gentle-stingrays-repeat.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/local-storage': patch
-'@verdaccio/store': patch
----
-
-fix: code scan issues

.changeset/gentle-trains-switch.md

@@ -0,0 +1,44 @@
+---
+'@verdaccio/api': major
+'@verdaccio/auth': major
+'@verdaccio/cli': major
+'@verdaccio/config': major
+'@verdaccio/commons-api': major
+'@verdaccio/file-locking': major
+'verdaccio-htpasswd': major
+'@verdaccio/local-storage': major
+'@verdaccio/readme': major
+'@verdaccio/streams': major
+'@verdaccio/types': major
+'@verdaccio/hooks': major
+'@verdaccio/loaders': major
+'@verdaccio/logger': major
+'@verdaccio/logger-prettify': major
+'@verdaccio/middleware': major
+'@verdaccio/mock': major
+'@verdaccio/node-api': major
+'@verdaccio/proxy': major
+'@verdaccio/server': major
+'@verdaccio/store': major
+'@verdaccio/dev-types': major
+'@verdaccio/utils': major
+'verdaccio': major
+'@verdaccio/web': major
+---
+
+- Replace signature handler for legacy tokens by removing deprecated crypto.createDecipher by createCipheriv
+- Introduce environment variables for legacy tokens
+
+### Code Improvements
+
+- Add debug library for improve developer experience
+
+### Breaking change
+
+- The new signature invalidates all previous tokens generated by Verdaccio 4 or previous versions.
+- The secret key must have 32 characters long.
+
+### New environment variables
+
+- `VERDACCIO_LEGACY_ALGORITHM`: Allows to define the specific algorithm for the token signature which by default is `aes-256-ctr`
+- `VERDACCIO_LEGACY_ENCRYPTION_KEY`: By default, the token stores in the database, but using this variable allows to get it from memory

.changeset/giant-years-appear.md

@@ -1,7 +0,0 @@
----
-'verdaccio-auth-memory': minor
-'@verdaccio/core': minor
-'@verdaccio/auth': minor
----
-
-fix: auth callback types

.changeset/gold-squids-watch.md

@@ -1,8 +0,0 @@
----
-'@verdaccio/server': patch
-'@verdaccio/store': patch
-'@verdaccio/auth': patch
-'@verdaccio/web': patch
----
-
-chore: add info to log when audit, htpasswd, theme are used

.changeset/green-eagles-boil.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
----
-
-fix: E409 username is already registered (adduser)

.changeset/healthy-ducks-drive.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/config': patch
----
-
-chore: fix typedocs warnings

.changeset/healthy-zoos-lie.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/store': patch
----
-
-chore: add info to log when local storage is used

.changeset/hip-eggs-serve.md

@@ -1,5 +0,0 @@
----
-'verdaccio-htpasswd': patch
----
-
-chore: add debug code to htpasswd package

.changeset/hip-hounds-destroy.md

@@ -0,0 +1,39 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/ui-theme': patch
+'@verdaccio/server': patch
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/readme': patch
+'@verdaccio/streams': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/active-directory': patch
+'verdaccio-audit': patch
+'verdaccio-auth-memory': patch
+'verdaccio-aws-s3-storage': patch
+'verdaccio-google-cloud': patch
+'verdaccio-memory': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+'@verdaccio/web': patch
+'@verdaccio/e2e-cli': patch
+'@verdaccio/e2e-ui': patch
+'@verdaccio/website': patch
+---
+
+chore: add release step to private regisry on merge changeset pr

.changeset/hot-crews-live.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/core': patch
-'verdaccio': patch
-'@verdaccio/store': patch
-'@verdaccio/api': patch
----
-
-fix: unpublish a package on storage package

.changeset/itchy-glasses-end.md

@@ -1,7 +0,0 @@
----
-'@verdaccio/ui-theme': minor
-'@verdaccio/ui-components': minor
-'@verdaccio/ui-i18n': minor
----
-
-feat: new i18n package for ui

.changeset/late-adults-love.md

@@ -0,0 +1,20 @@
+---
+'@verdaccio/api': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+---
+
+feat: remove level dependency by lowdb for npm token cli as storage
+
+### new npm token database
+
+There will be a new database located in your storage named `.token-db.json` which
+will store all references to created tokens, **it does not store tokens**, just
+mask of them and related metadata required to reference them.
+
+#### Breaking change
+
+If you were relying on `npm token` experiment. This PR will replace the
+used database (level) by a json plain based one (lowbd) which does not
+require Node.js C++ compilation step and has less dependencies. Since was
+a experiment there is no migration step.

.changeset/late-parents-act.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/hooks': patch
+'@verdaccio/proxy': patch
+---
+
+refactor: migrate request to node-fetch at hooks package

.changeset/long-eyes-drum.md

@@ -1,37 +0,0 @@
----
-'@verdaccio/api': minor
-'@verdaccio/auth': minor
-'@verdaccio/cli': minor
-'@verdaccio/config': minor
-'@verdaccio/core': minor
-'@verdaccio/file-locking': minor
-'@verdaccio/tarball': minor
-'@verdaccio/types': minor
-'@verdaccio/url': minor
-'@verdaccio/hooks': minor
-'@verdaccio/loaders': minor
-'@verdaccio/logger': minor
-'@verdaccio/logger-commons': minor
-'@verdaccio/logger-prettify': minor
-'@verdaccio/middleware': minor
-'@verdaccio/node-api': minor
-'verdaccio-audit': minor
-'verdaccio-auth-memory': minor
-'verdaccio-htpasswd': minor
-'@verdaccio/local-storage': minor
-'verdaccio-memory': minor
-'@verdaccio/ui-theme': minor
-'@verdaccio/proxy': minor
-'@verdaccio/search': minor
-'@verdaccio/search-indexer': minor
-'@verdaccio/server': minor
-'@verdaccio/signature': minor
-'@verdaccio/store': minor
-'generator-verdaccio-plugin': minor
-'@verdaccio/ui-components': minor
-'@verdaccio/utils': minor
-'verdaccio': minor
-'@verdaccio/web': minor
----
-
-feat: update logger pino to latest

.changeset/long-singers-drive.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/ui-theme': patch
-'@verdaccio/ui-components': patch
----
-
-chore(ui): vitest follow-ups

.changeset/lucky-crabs-enjoy.md

@@ -1,8 +0,0 @@
----
-'@verdaccio/api': patch
-'@verdaccio/core': patch
-'@verdaccio/middleware': patch
-'@verdaccio/proxy': patch
----
-
-fix(middleware): error 404 when getting scoped tarballs

.changeset/modern-spies-tell.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': minor
+'verdaccio': minor
+---
+
+feat: ui theme plugin part of the application

.changeset/neat-toes-report.md

@@ -0,0 +1,51 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/commons-api': minor
+'@verdaccio/file-locking': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/readme': minor
+'@verdaccio/streams': minor
+'@verdaccio/types': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/mock': minor
+'@verdaccio/node-api': minor
+'@verdaccio/active-directory': minor
+'verdaccio-audit': minor
+'verdaccio-auth-memory': minor
+'verdaccio-aws-s3-storage': minor
+'verdaccio-google-cloud': minor
+'verdaccio-memory': minor
+'@verdaccio/ui-theme': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/store': minor
+'@verdaccio/dev-types': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+---
+
+feat: add server rate limit protection to all request
+
+To modify custom values, use the server settings property.
+
+```markdown
+server:
+
+## https://www.npmjs.com/package/express-rate-limit#configuration-options
+
+rateLimit:
+windowMs: 1000
+max: 10000
+```
+
+The values are intended to be high, if you want to improve security of your server consider
+using different values.

.changeset/nine-countries-remember.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-fix(middleware): encoding of scope package name

.changeset/ninety-geese-do.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/config': patch
----
-
-fix: runtime dependency missing as explicit dependency

.changeset/perfect-kangaroos-agree.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/cli': major
+---
+
+feat: use clipanion over commander

.changeset/pink-jeans-lick.md

@@ -1,42 +0,0 @@
----
-'generator-verdaccio-plugin': patch
-'@verdaccio/logger-prettify': patch
-'@verdaccio/logger-commons': patch
-'@verdaccio/local-storage': patch
-'@verdaccio/local-publish': patch
-'@verdaccio/local-scripts': patch
-'@verdaccio/file-locking': patch
-'verdaccio-htpasswd': patch
-'@verdaccio/ui-theme': patch
-'verdaccio-memory': patch
-'@verdaccio/search-indexer': patch
-'@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
-'@verdaccio/logger': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/ui-components': patch
-'@verdaccio/tarball': patch
-'@verdaccio/eslint-config': patch
-'@verdaccio/types': patch
-'@verdaccio/middleware': patch
-'@verdaccio/cli-standalone': patch
-'@verdaccio/core': patch
-'@verdaccio/ui-i18n': patch
-'@verdaccio/signature': patch
-'verdaccio': patch
-'@verdaccio/url': patch
-'@verdaccio/node-api': patch
-'@verdaccio/loaders': patch
-'@verdaccio/config': patch
-'@verdaccio/search': patch
-'@verdaccio/hooks': patch
-'@verdaccio/proxy': patch
-'@verdaccio/store': patch
-'@verdaccio/utils': patch
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
-'@verdaccio/cli': patch
-'@verdaccio/web': patch
----
-
-chore: package.json maintenance

.changeset/plenty-news-remember.md

@@ -0,0 +1,30 @@
+---
+'@verdaccio/auth': major
+'verdaccio-htpasswd': major
+'verdaccio-audit': major
+'@verdaccio/server': major
+'@verdaccio/cli-standalone': major
+---
+
+feat: standalone registry with no dependencies
+
+## Usage
+
+To install a server with no dependencies
+
+```bash
+npm install -g @verdaccio/standalone
+```
+
+with no internet required
+
+```bash
+npm install -g ./tarball.tar.gz
+```
+
+Bundles htpasswd and audit plugins.
+
+### Breaking Change
+
+It does not allow anymore the `auth` and `middleware` property at config file empty,
+it will fallback to those plugins by default.

.changeset/plenty-spiders-melt.md

@@ -0,0 +1,36 @@
+---
+'@verdaccio/api': minor
+'@verdaccio/auth': minor
+'@verdaccio/cli': minor
+'@verdaccio/config': minor
+'@verdaccio/commons-api': minor
+'@verdaccio/file-locking': minor
+'verdaccio-htpasswd': minor
+'@verdaccio/local-storage': minor
+'@verdaccio/readme': minor
+'@verdaccio/streams': minor
+'@verdaccio/types': minor
+'@verdaccio/hooks': minor
+'@verdaccio/loaders': minor
+'@verdaccio/logger': minor
+'@verdaccio/logger-prettify': minor
+'@verdaccio/middleware': minor
+'@verdaccio/mock': minor
+'@verdaccio/node-api': minor
+'@verdaccio/proxy': minor
+'@verdaccio/server': minor
+'@verdaccio/store': minor
+'@verdaccio/dev-types': minor
+'@verdaccio/utils': minor
+'verdaccio': minor
+'@verdaccio/web': minor
+'@verdaccio/website': minor
+---
+
+feat: add typescript project references settings
+
+Reading https://ebaytech.berlin/optimizing-multi-package-apps-with-typescript-project-references-d5c57a3b4440 I realized I can use project references to solve the issue to pre-compile modules on develop mode.
+
+It allows to navigate (IDE) trough the packages without need compile the packages.
+
+Add two `tsconfig`, one using the previous existing configuration that is able to produce declaration files (`tsconfig.build`) and a new one `tsconfig` which is enables [_projects references_](https://www.typescriptlang.org/docs/handbook/project-references.html).

.changeset/plenty-tables-refuse.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/cli': minor
+'@verdaccio/node-api': minor
+---
+
+feat: improve cli loggin on start up

.changeset/popular-trees-grin.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-fix(ui-components): remove test warnings

.changeset/pre.json

@@ -1,126 +1,66 @@
 {
   "mode": "pre",
-  "tag": "next-8",
+  "tag": "6-next",
   "initialVersions": {
-    "@verdaccio/test-cli-commons": "1.1.0",
-    "@verdaccio/e2e-cli-npm9": "1.0.1",
-    "@verdaccio/e2e-cli-npm6": "1.0.1",
-    "@verdaccio/e2e-cli-npm7": "1.0.1",
-    "@verdaccio/e2e-cli-npm8": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm8": "1.0.1",
-    "@verdaccio/e2e-cli-pnpm9": "1.0.1",
-    "@verdaccio/e2e-cli-yarn1": "1.0.1",
-    "@verdaccio/e2e-cli-yarn2": "1.0.1",
-    "@verdaccio/e2e-cli-yarn3": "1.0.1",
-    "@verdaccio/e2e-cli-yarn4": "1.0.1",
-    "@verdaccio/e2e-ui": "2.0.0",
-    "@verdaccio/ui-i18n": "8.0.0",
-    "@verdaccio/api": "7.0.0",
-    "@verdaccio/auth": "7.0.0",
-    "@verdaccio/cli": "7.0.0",
-    "@verdaccio/config": "7.0.0",
-    "@verdaccio/core": "7.0.0",
-    "@verdaccio/file-locking": "12.0.0",
-    "@verdaccio/tarball": "12.0.0",
-    "@verdaccio/types": "12.0.0",
-    "@verdaccio/url": "12.0.0",
-    "@verdaccio/hooks": "7.0.0",
-    "@verdaccio/loaders": "7.0.0",
-    "@verdaccio/logger": "7.0.0",
-    "@verdaccio/logger-commons": "7.0.0",
-    "@verdaccio/logger-prettify": "7.0.0",
-    "@verdaccio/middleware": "7.0.0",
-    "@verdaccio/node-api": "7.0.0",
-    "verdaccio-audit": "12.0.0",
-    "verdaccio-auth-memory": "12.0.0",
-    "verdaccio-htpasswd": "12.0.0",
-    "@verdaccio/local-storage": "12.0.0",
-    "verdaccio-memory": "12.0.0",
-    "@verdaccio/ui-theme": "7.0.0",
-    "@verdaccio/proxy": "7.0.0",
-    "@verdaccio/search": "7.0.0",
-    "@verdaccio/search-indexer": "7.0.0",
-    "@verdaccio/server": "7.0.0",
-    "@verdaccio/server-fastify": "7.0.0",
-    "@verdaccio/signature": "7.0.0",
-    "@verdaccio/cli-standalone": "7.0.0",
-    "@verdaccio/store": "7.0.0",
-    "docusaurus-plugin-contributors": "2.0.0",
-    "@verdaccio/eslint-config": "3.0.0",
-    "generator-verdaccio-plugin": "5.0.0",
-    "@verdaccio/test-helper": "3.0.0",
-    "@verdaccio/local-scripts": "1.0.0",
-    "customprefix-auth": "2.0.0",
-    "@verdaccio/ui-components": "3.0.0",
-    "@verdaccio/utils": "7.0.0",
-    "verdaccio": "7.0.0",
-    "@verdaccio/web": "7.0.0",
-    "@verdaccio/website": "6.0.0",
-    "@verdaccio/e2e-cli-npm-common": "1.0.0",
-    "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
-    "@verdaccio/e2e-cli-pnpm10": "1.0.0",
-    "docusaurus-plugin-downloads": "2.0.0",
-    "@verdaccio/local-publish": "0.0.2"
+    "@verdaccio/api": "6.0.0-alpha.0",
+    "@verdaccio/auth": "6.0.0-alpha.0",
+    "@verdaccio/cli": "6.0.0-alpha.0",
+    "@verdaccio/config": "6.0.0-alpha.0",
+    "@verdaccio/commons-api": "11.0.0-alpha.0",
+    "@verdaccio/file-locking": "11.0.0-alpha.0",
+    "verdaccio-htpasswd": "11.0.0-alpha.0",
+    "@verdaccio/local-storage": "11.0.0-alpha.0",
+    "@verdaccio/readme": "11.0.0-alpha.0",
+    "@verdaccio/streams": "11.0.0-alpha.0",
+    "@verdaccio/types": "11.0.0-alpha.0",
+    "@verdaccio/hooks": "6.0.0-alpha.0",
+    "@verdaccio/loaders": "6.0.0-alpha.0",
+    "@verdaccio/logger": "6.0.0-alpha.0",
+    "@verdaccio/logger-prettify": "6.0.0-alpha.0",
+    "@verdaccio/middleware": "6.0.0-alpha.0",
+    "@verdaccio/mock": "6.0.0-alpha.0",
+    "@verdaccio/node-api": "6.0.0-alpha.0",
+    "@verdaccio/proxy": "6.0.0-alpha.0",
+    "@verdaccio/server": "6.0.0-alpha.0",
+    "@verdaccio/store": "6.0.0-alpha.0",
+    "@verdaccio/dev-types": "6.0.0-alpha.0",
+    "@verdaccio/utils": "6.0.0-alpha.0",
+    "verdaccio": "6.0.0-alpha.0",
+    "@verdaccio/web": "6.0.0-alpha.0",
+    "@verdaccio/active-directory": "11.0.0-alpha.0",
+    "verdaccio-audit": "11.0.0-alpha.0",
+    "verdaccio-auth-memory": "11.0.0-alpha.0",
+    "verdaccio-aws-s3-storage": "11.0.0-alpha.0",
+    "verdaccio-google-cloud": "11.0.0-alpha.0",
+    "verdaccio-memory": "11.0.0-alpha.0",
+    "@verdaccio/website": "0.0.1",
+    "@verdaccio/ui-theme": "6.0.0-alpha.1",
+    "@verdaccio/e2e-cli": "1.0.0",
+    "@verdaccio/e2e-ui": "1.0.0",
+    "@verdaccio/cli-standalone": "6.0.0-alpha.3",
+    "@verdaccio/cli-ui": "6.0.0-alpha.3",
+    "@verdaccio/tarball": "11.0.0-alpha.3",
+    "@verdaccio/url": "11.0.0-alpha.3"
   },
   "changesets": [
-    "angry-doors-tan",
-    "beige-lions-type",
-    "blue-paws-cheer",
-    "breezy-geckos-search",
-    "bright-bobcats-ring",
-    "brown-planets-approve",
-    "calm-mangos-compare",
-    "chatty-apricots-report",
-    "clean-beds-wash",
-    "clever-bees-happen",
-    "cool-seals-watch",
-    "curly-mirrors-smile",
-    "curvy-rockets-camp",
-    "cyan-snakes-kiss",
-    "early-eyes-float",
-    "eleven-rocks-dream",
-    "fifty-falcons-design",
-    "forty-hounds-matter",
-    "funny-fireants-tan",
-    "gentle-stingrays-repeat",
-    "gold-squids-watch",
-    "green-eagles-boil",
-    "healthy-ducks-drive",
-    "healthy-zoos-lie",
-    "hip-eggs-serve",
-    "hot-crews-live",
-    "itchy-glasses-end",
-    "long-eyes-drum",
-    "long-singers-drive",
-    "lucky-crabs-enjoy",
-    "nine-countries-remember",
-    "ninety-geese-do",
-    "popular-trees-grin",
-    "proud-houses-switch",
-    "quick-avocados-type",
-    "quick-seas-deny",
-    "real-seahorses-change",
-    "rotten-melons-notice",
-    "rotton-readers-shave",
-    "rude-birds-design",
-    "rude-socks-walk",
-    "serious-apes-rule",
-    "short-mails-smoke",
-    "silent-bags-listen",
-    "silent-tips-admire",
-    "silver-houses-remain",
-    "slow-cars-guess",
-    "smooth-games-share",
-    "strange-pants-chew",
-    "stupid-camels-build",
-    "sweet-crabs-deliver",
-    "thirty-comics-trade",
-    "tricky-impalas-shake",
-    "tricky-knives-end",
-    "violet-baboons-beg",
-    "violet-bobcats-allow",
-    "violet-boxes-float",
-    "weak-cherries-serve",
-    "wet-cats-behave"
+    "big-lobsters-sin",
+    "few-cooks-destroy",
+    "fifty-jars-rest",
+    "gentle-trains-switch",
+    "hip-hounds-destroy",
+    "late-adults-love",
+    "late-parents-act",
+    "modern-spies-tell",
+    "neat-toes-report",
+    "perfect-kangaroos-agree",
+    "plenty-news-remember",
+    "plenty-spiders-melt",
+    "plenty-tables-refuse",
+    "pretty-hounds-tap",
+    "shiny-chefs-heal",
+    "smart-apricots-kneel",
+    "spicy-frogs-press",
+    "tender-bags-call",
+    "three-pots-sit"
   ]
 }

.changeset/pretty-hounds-tap.md

@@ -0,0 +1,29 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/readme': patch
+'@verdaccio/streams': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/proxy': patch
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+'@verdaccio/web': patch
+---
+
+Enable prerelease mode with **changesets**

.changeset/proud-houses-switch.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/web': patch
----
-
-fix(web): anonymous user handling

.changeset/quick-avocados-type.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-fix(ui-components): typings for vitest/jest-dom

.changeset/quick-seas-deny.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/loaders': minor
----
-
-chore: remove logger as dependency

.changeset/real-seahorses-change.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': minor
----
-
-update hover background color of package list

.changeset/rotten-melons-notice.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/middleware': patch
----
-
-chore(middleware): fix syntax of test files

.changeset/rotton-readers-shave.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/config': patch
----
-
-fix: config builder `addLogger`

.changeset/rude-birds-design.md

@@ -1,5 +0,0 @@
----
-'verdaccio': patch
----
-
-chore: encode parts of URL

.changeset/rude-socks-walk.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/types': patch
-'@verdaccio/store': patch
----
-
-feat: keep_readmes option when publishing packages

.changeset/serious-apes-rule.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-chore(ui): replace react-json-view

.changeset/shiny-chefs-heal.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+testing changesets

.changeset/short-mails-smoke.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-chore(deps): upgrade storybook to v8

.changeset/silent-bags-listen.md

@@ -1,9 +0,0 @@
----
-'@verdaccio/logger-commons': patch
-'@verdaccio/local-storage': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/core': patch
-'verdaccio': patch
----
-
-chore(tests): temp folder naming

.changeset/silent-tips-admire.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/middleware': patch
-'@verdaccio/web': patch
----
-
-chore: export and constant on middleware

.changeset/silver-houses-remain.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-fix: ui-component vitest api

.changeset/slow-cars-guess.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': minor
----
-
-support packages with multiple module types

.changeset/smart-apricots-kneel.md

@@ -0,0 +1,79 @@
+---
+'@verdaccio/ui-theme': major
+'@verdaccio/cli-standalone': major
+'@verdaccio/web': major
+---
+
+feat: flexible user interface generator
+
+**breaking change**
+
+The UI does not provide a pre-generated `index.html`, instead the server generates
+the body of the web application based in few parameters:
+
+- Webpack manifest
+- User configuration details
+
+It allows inject html tags, javascript and new CSS to make the page even more flexible.
+
+### Web new properties for dynamic template
+
+The new set of properties are made in order allow inject _html_ and _JavaScript_ scripts within the template. This
+might be useful for scenarios like Google Analytics scripts or custom html in any part of the body.
+
+- metaScripts: html injected before close the `head` element.
+- scriptsBodyAfter: html injected before close the `body` element.
+- bodyAfter: html injected after _verdaccio_ JS scripts.
+
+```yaml
+web:
+  scriptsBodyAfter:
+    - '<script type="text/javascript" src="https://my.company.com/customJS.min.js"></script>'
+  metaScripts:
+    - '<script type="text/javascript" src="https://code.jquery.com/jquery-3.5.1.slim.min.js"></script>'
+    - '<script type="text/javascript" src="https://browser.sentry-cdn.com/5.15.5/bundle.min.js"></script>'
+    - '<meta name="robots" content="noindex" />'
+  bodyBefore:
+    - '<div id="myId">html before webpack scripts</div>'
+  bodyAfter:
+    - '<div id="myId">html after webpack scripts</div>'
+```
+
+### UI plugin changes
+
+- `index.html` is not longer used, template is generated based on `manifest.json` generated by webpack.
+- Plugin must export:
+  - the manifest file.
+  - the manifest files: matcher (array of id that generates required scripts to run the ui)
+  - static path: The absolute path where the files are located in `node_modules`
+
+```
+exports.staticPath = path.join(__dirname, 'static');
+exports.manifest = require('./static/manifest.json');
+exports.manifestFiles = {
+  js: ['runtime.js', 'vendors.js', 'main.js'],
+  css: [],
+  ico: 'favicon.ico',
+};
+```
+
+- Remove font files
+- CSS is inline on JS (this will help with #2046)
+
+### Docker v5 Examples
+
+- Move all current examples to v4 folder
+- Remove any v3 example
+- Create v5 folder with Nginx Example
+
+#### Related tickets
+
+https://github.com/verdaccio/verdaccio/issues/1523
+https://github.com/verdaccio/verdaccio/issues/1297
+https://github.com/verdaccio/verdaccio/issues/1593
+https://github.com/verdaccio/verdaccio/discussions/1539
+https://github.com/verdaccio/website/issues/264
+https://github.com/verdaccio/verdaccio/issues/1565
+https://github.com/verdaccio/verdaccio/issues/1251
+https://github.com/verdaccio/verdaccio/issues/2029
+https://github.com/verdaccio/docker-examples/issues/29

.changeset/smooth-games-share.md

@@ -1,11 +0,0 @@
----
-'@verdaccio/server': patch
-'verdaccio-audit': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/middleware': patch
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
-'@verdaccio/web': patch
----
-
-fix: crashes with path-to-regexp v0.1.12 express

.changeset/spicy-frogs-press.md

@@ -0,0 +1,32 @@
+---
+'verdaccio-htpasswd': major
+---
+
+feat: allow other password hashing algorithms (#1917)
+
+**breaking change**
+
+The current implementation of the `htpasswd` module supports multiple hash formats on verify, but only `crypt` on sign in.
+`crypt` is an insecure old format, so to improve the security of the new `verdaccio` release we introduce the support of multiple hash algorithms on sign in step.
+
+### New hashing algorithms
+
+The new possible hash algorithms to use are `bcrypt`, `md5`, `sha1`. `bcrypt` is chosen as a default, because of its customizable complexity and overall reliability. You can read more about them [here](https://httpd.apache.org/docs/2.4/misc/password_encryptions.html).
+
+Two new properties are added to `auth` section in the configuration file:
+
+- `algorithm` to choose the way you want to hash passwords.
+- `rounds` is used to determine `bcrypt` complexity. So one can improve security according to increasing computational power.
+
+Example of the new `auth` config file section:
+
+```yaml
+auth:
+htpasswd:
+  file: ./htpasswd
+  max_users: 1000
+  # Hash algorithm, possible options are: "bcrypt", "md5", "sha1", "crypt".
+  algorithm: bcrypt
+  # Rounds number for "bcrypt", will be ignored for other algorithms.
+  rounds: 10
+```

.changeset/strange-pants-chew.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/web': patch
----
-
-feat: show version-specific readmes in web ui

.changeset/stupid-camels-build.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/api': patch
----
-
-chore(api): fix void return for some tests

.changeset/sweet-crabs-deliver.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-components': patch
----
-
-chore(ui): typing for Theme

.changeset/tender-bags-call.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/logger': major
+---
+
+logging prettifier only in development mode
+
+- Verdaccio prettify `@verdaccio/logger-prettify` the logging which looks beautiful. But there are scenarios which does not make sense in production. This feature enables disable by default the prettifies if production `NODE_ENV` is enabled.
+- Updates pino.js to `^6.7.0`.
+- Suppress the warning when prettifier is enabled `suppressFlushSyncWarning`

.changeset/thirty-comics-trade.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/local-storage': patch
----
-
-chore: local storage debug messages

.changeset/three-pots-sit.md

@@ -0,0 +1,33 @@
+---
+'@verdaccio/api': patch
+'@verdaccio/auth': patch
+'@verdaccio/cli': patch
+'@verdaccio/config': patch
+'@verdaccio/commons-api': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/local-storage': patch
+'@verdaccio/readme': patch
+'@verdaccio/types': patch
+'@verdaccio/hooks': patch
+'@verdaccio/loaders': patch
+'@verdaccio/logger': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/mock': patch
+'@verdaccio/node-api': patch
+'@verdaccio/proxy': patch
+'@verdaccio/server': patch
+'@verdaccio/store': patch
+'@verdaccio/dev-types': patch
+'@verdaccio/utils': patch
+'verdaccio': patch
+---
+
+ESLint Warnings Fixed
+
+Related to issue #1461
+
+- max-len: most of the sensible max-len errors are fixed
+- no-unused-vars: most of these types of errors are fixed by deleting not needed declarations
+- @typescript-eslint/no-unused-vars: same as above

.changeset/tricky-impalas-shake.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/local-storage': patch
-'@verdaccio/store': patch
----
-
-chore: tweak error logging messages

.changeset/tricky-knives-end.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/store': patch
----
-
-fix(store): update deprecate state

.changeset/violet-baboons-beg.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/middleware': patch
-'@verdaccio/web': patch
----
-
-chore: middleware package update

.changeset/violet-bobcats-allow.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/core': patch
-'@verdaccio/store': patch
----
-
-chore: add package parameter to storage plugin interface

.changeset/violet-boxes-float.md

@@ -1,6 +0,0 @@
----
-'@verdaccio/store': patch
-'@verdaccio/tarball': patch
----
-
-fix(api): add logging when requesting tarball

.changeset/weak-cherries-serve.md

@@ -1,18 +0,0 @@
----
-'@verdaccio/logger-commons': patch
-'@verdaccio/file-locking': patch
-'@verdaccio/ui-theme': patch
-'@verdaccio/search-indexer': patch
-'@verdaccio/server': patch
-'@verdaccio/server-fastify': patch
-'@verdaccio/test-helper': patch
-'@verdaccio/middleware': patch
-'verdaccio': patch
-'@verdaccio/node-api': patch
-'@verdaccio/auth': patch
-'@verdaccio/api': patch
-'@verdaccio/cli': patch
-'@verdaccio/web': patch
----
-
-chore: auth package requires logger as parameter

.changeset/wet-cats-behave.md

@@ -1,5 +0,0 @@
----
-'@verdaccio/ui-i18n': patch
----
-
-fix: ignore duplicted files

.dockerignore

@@ -22,6 +22,7 @@ jest
 docs
 contrib
 docker-examples
+website
 systemd
 
 # output from test runs and similar things

.eslintignore

@@ -1,21 +1,11 @@
-assets/**/*
 **/fixtures/**
 **/mock/store/**
 **/partials/**
 **/types/custom.d.ts
 build/
 coverage/
+flow-typed/
 node_modules/
 static/
 website/
 wiki/
-dist/
-docs/
-test/functional/store/*
-docker-examples/**/lib/**/*.js
-test/cli/e2e-yarn4/bin/yarn-4.0.0-rc.14.cjs
-yarn.js
-# storybook
-packages/ui-components/storybook-static
-dist.js
-bundle.js

.eslintrc

@@ -0,0 +1,102 @@
+{
+  "extends": [
+    "eslint:recommended",
+    "google",
+    "plugin:react/recommended",
+    "plugin:jest/recommended",
+    "plugin:@typescript-eslint/eslint-recommended",
+    "plugin:@typescript-eslint/recommended",
+    "plugin:import/typescript",
+    "plugin:jsx-a11y/recommended",
+    "prettier"
+  ],
+  "plugins": ["import", "jest", "jsx-a11y", "react-hooks"],
+  "env": {
+    "es6": true,
+    "node": true,
+    "jest": true
+  },
+  "globals": {
+    "__APP_VERSION__": true
+  },
+  "parserOptions": {
+    "allowImportExportEverywhere": true,
+    "sourceType": "module",
+    "ecmaVersion": 11,
+    "ecmaFeatures": {
+      "impliedStrict": true,
+      "jsx": true
+    }
+  },
+  "settings": {
+    "import/resolver": {
+      "node": {
+        "extensions": [".js", ".jsx", ".ts", ".tsx"]
+      }
+    }
+  },
+  "parser": "@typescript-eslint/parser",
+  "rules": {
+    "curly": ["error", "all"],
+    "react/prop-types": 0,
+    "jest/no-export": 0,
+    "jest/no-test-callback": 0,
+    "jest/expect-expect": 0,
+    "jest/no-try-expect": 0,
+    "jest/no-done-callback": "off",
+    "jest/no-conditional-expect": "off",
+    "keyword-spacing": "off",
+    "no-tabs": "off",
+    "no-useless-escape": "off",
+    "padded-blocks": "off",
+    "require-jsdoc": "off",
+    "valid-jsdoc": "off",
+    "import/order": ["error"],
+    "eol-last": "error",
+    "no-irregular-whitespace": "error",
+    "no-mixed-spaces-and-tabs": ["error", "smart-tabs"],
+    "no-trailing-spaces": "error",
+    "camelcase": "off",
+    "guard-for-in": "error",
+    "new-cap": "error",
+    "max-len": ["error", 100],
+    "no-console": ["error", { "allow": ["warn"] }],
+    "no-constant-condition": "error",
+    "no-debugger": "error",
+    "no-empty": "error",
+    "no-fallthrough": "error",
+    "no-invalid-this": "error",
+    "no-new-require": "error",
+    "no-undef": "error",
+    "no-unreachable": "error",
+    "no-var": "error",
+    "one-var": "error",
+    "prefer-rest-params": "error",
+    "prefer-spread": "error",
+    "handle-callback-err": 0,
+    "prefer-const": 0,
+    "@typescript-eslint/camelcase": 0,
+    "@typescript-eslint/ban-ts-ignore": 0,
+    "@typescript-eslint/no-var-requires": 0,
+    "@typescript-eslint/no-inferrable-types": 0,
+    "@typescript-eslint/no-empty-function": 0,
+    "@typescript-eslint/no-this-alias": 0,
+    "@typescript-eslint/no-use-before-define": 0,
+    "@typescript-eslint/array-type": ["error"],
+    "@typescript-eslint/no-explicit-any": 0,
+    "@typescript-eslint/indent": 0,
+    "@typescript-eslint/ban-ts-comment": 0,
+    "@typescript-eslint/ban-types": 0,
+    "@typescript-eslint/explicit-module-boundary-types": 0,
+
+    // rules to fix
+    "no-unused-vars": ["warn", { "vars": "all", "args": "none" }],
+    "jest/no-identical-title": ["warn"],
+    "prefer-promise-reject-errors": ["warn"],
+    "jest/no-disabled-tests": ["warn"],
+    "jest/no-commented-out-tests": ["warn"],
+    "@typescript-eslint/prefer-optional-chain": ["warn"],
+    "@typescript-eslint/explicit-member-accessibility": ["warn"],
+    "@typescript-eslint/no-unused-vars": ["warn"]
+  }
+}

.eslintrc.js

@@ -1,3 +0,0 @@
-module.exports = {
-  extends: ['@verdaccio/eslint-config'],
-};

.gitattributes

@@ -13,7 +13,7 @@
 ##   Handle line endings automatically for files detected as
 ##   text and leave all files detected as binary untouched.
 ##   This will handle all files NOT defined below.
-*                 text eol=lf
+*                 text=lf
 
 # Source code
 *.bash            text eol=lf
@@ -197,6 +197,3 @@ Procfile          text eol=lf
 
 # Ignore files (like .npmignore or .gitignore)
 *.*ignore         text eol=lf
-
-# Test Snapshots
-*.snap            text eol=lf

.github/ISSUE_TEMPLATE/bug_report.md

@@ -6,25 +6,6 @@ title: ''
 assignees: ''
 ---
 
-<!-- PLEASE READ THIS:  
- - If you are not sure is a bug, OPEN a DISCUSSION, if is a legitimate bug, is easy to create a bug from a discussion.
- - Empty reports won't be considered and eventually be closed by a bot.
- - Include debugging notes will help to fix it faster, HOW TO: https://github.com/verdaccio/verdaccio/wiki/Debugging-Verdaccio 
- - If you remove this template, ticket will be closed immediately.
- - No English perfect is required, use public translators if is need it, we will do our best to help you.
- - Extra bonus: The most complete this report is delivered, the faster you will get a response.
- - Extra bonus: include screenshots, logs (remove sensitive data).
- - If you are willing to fix it, there is a checkbox at the bottom.
--->
-
-**Your Environment**
-  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
- * **verdaccio version**: 5.x.x
- * **node version** [12.x.x, 14.x.x]:
- * **package manager**: [npm@7, pnpm@6, yarn@2]
- * **os**: [mac, windows@10, linux]
- * **platform**: [npm, docker, helm, other]
-
 **Describe the bug**
 
 <!-- A clear and concise description of what the bug is. -->
@@ -42,7 +23,7 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots, server logs, package manager log**
+**Screenshots**
 
 <!-- If applicable, add screenshots to help explain your problem.  -->
 
@@ -57,14 +38,10 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 **Debugging output**
 
 - `$ NODE_DEBUG=request verdaccio` display request calls (verdaccio <--> uplinks)
-- `$ DEBUG=verdaccio* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
+- `$ DEBUG=express:* verdaccio` enable extreme verdaccio debug mode (verdaccio api)
 - `$ npm -ddd` prints:
 - `$ npm config get registry` prints:
 
-**Contribute to Verdaccio**
-
-- [ ] I'm willing to fix this bug 🥇 
-
 <!--
 
 IMPORTANT: please do not attach external files, all content should be visible from any device.

.github/ISSUE_TEMPLATE/config.yml

@@ -7,5 +7,8 @@ contact_links:
     url: https://github.com/verdaccio/verdaccio/security/policy
     about: I want to report a security vulnerability
   - name: Chat 🏘
-    url: https://discord.gg/7qWJxBf
-    about: Quick question? Try out Discord chat, you can get faster feedback
+    url: http://chat.verdaccio.org
+    about: For a quick question you should do it through our community chat
+  - name: User Interface Report 👩🏼‍🎨👨🏼‍🎨
+    url: https://github.com/verdaccio/ui/issues/new/choose
+    about: Any report related with the User Interface should be posted in another repository

.github/ISSUE_TEMPLATE/feature.md

@@ -7,18 +7,14 @@ assignees: ''
 ---
 
 <!--
-IMPORTANT: If you don't have an action plan, please consider create a DISCUSSION (idea) instead for an open a feature request issue.
-
-https://github.com/verdaccio/verdaccio/discussions/new
 
 Verdaccio is a project addressed for voluntaries, if you appreciate this project consider to donate.
-1$/5$ or custom amount single contribution
-
-or monthly
 1$/month - minimal contribution
 5$/month - nice contribution
+500$ - help to promote this project, marketing, stickers.
+2000$/year - sponsor status, your company logo will be in our readme, meetups talks and your request will have high priority
 
-https://github.com/sponsors/verdaccio
+https://opencollective.com/verdaccio
 
 As reminder, the Open Source must be sustainable.
 -->

.github/actions/build-app/action.yml

@@ -1,22 +0,0 @@
-name: 'Build app'
-description: 'build verdaccio application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  node-version:
-    description: 'Node.js version to use'
-    required: true
-
-runs:
-  using: composite
-  steps:
-    - name: Install dependencies with a custom registry version ${{ inputs.node-version }}
-      uses: ./.github/actions/install-app-node
-      with:
-        node-version: ${{ inputs.node_version }}
-    - name: build
-      run: pnpm build
-      shell: bash

.github/actions/cache-packages/action.yml

@@ -1,12 +0,0 @@
-name: 'Cache packages'
-description: 'get or set cache packages'
-
-runs:
-  using: composite
-  steps:
-    - name: Cache Packages
-      id: cache-packages
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
-      with:
-        path: ./packages/
-        key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -1,15 +0,0 @@
-name: 'Cache build'
-description: 'get or set cache build'
-
-runs:
-  using: composite
-  steps:
-    - name: Cache .pnpm-store
-      id: cache-npm
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
-      with:
-        path: ~/.pnpm-store
-        key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}
-        restore-keys: |
-          pnpm-
-

.github/actions/install-app-node/action.yml

@@ -1,51 +0,0 @@
-name: 'Install app with Node specific version'
-description: 'install application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  reporter:
-    description: 'Reporter for pnpm'
-    required: false
-    default: 'silent'
-  loglevel:
-    description: 'Log level for pnpm'
-    required: false
-    default: 'error'
-  node-version:
-    description: 'Node.js version to use'
-    required: true
-
-runs:
-  using: composite
-  steps:
-    - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
-      with:
-        node-version: ${{ inputs.node-version }}
-    - name: Install pnpm
-      run: |
-        npm install --global corepack@latest
-        corepack enable
-        corepack prepare
-      shell: bash
-    - name: set store
-      run: |
-        if [ ! -d "$HOME/.pnpm-store" ]; then
-          mkdir -p $HOME/.pnpm-store
-          pnpm config set store-dir $HOME/.pnpm-store
-        else
-          echo "Store directory already exists. Skipping configuration."
-        fi
-      shell: bash
-    - name: Restore cache pnpm store
-      uses: ./.github/actions/cache-store
-    - name: Install
-      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }} --loglevel=${{ inputs.loglevel }}
-      shell: bash
-    - name: Save cache pnpm store
-      if: steps.cache-npm.outputs.cache-hit == 'false'
-      uses: ./.github/actions/cache-store
-

.github/actions/install-app/action.yml

@@ -1,40 +0,0 @@
-name: 'Install app'
-description: 'install application'
-
-inputs:
-  registry-url:
-    description: 'Registry URL for pnpm'
-    required: false
-    default: 'http://localhost:4873'
-  reporter:
-    description: 'Reporter for pnpm'
-    required: false
-    default: 'silent'
-
-runs:
-  using: composite
-  steps:
-    - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
-      with:
-        node-version-file: '.nvmrc'
-    - name: Install pnpm
-      run: |
-        npm install --global corepack@latest
-        corepack enable
-        corepack prepare
-      shell: bash
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store
-      shell: bash
-    - name: Restore cache pnpm store
-      uses: ./.github/actions/cache-store
-    - name: Install
-      run: pnpm install --reporter=${{inputs.reporter}} --ignore-scripts --registry ${{ inputs.registry-url }}
-      shell: bash
-    - name: Save cache pnpm store
-      if: steps.cache-npm.outputs.cache-hit == 'false'
-      uses: ./.github/actions/cache-store
-

.github/dependabot.yml

@@ -8,11 +8,18 @@ updates:
   # Maintain dependencies for GitHub Actions
   - package-ecosystem: 'github-actions'
     directory: '/'
-    open-pull-requests-limit: 1
-    prefix: "[github-actions] "
-    assignees:
-      - 'verdacciobot'    
     schedule:
-      interval: 'monthly'
+      interval: 'weekly'
+
+  # Maintain dependencies for npm
+  - package-ecosystem: 'npm'
+    directory: '/'
+    schedule:
+      interval: 'daily'
+    allow:
+      - dependency-name: '@verdaccio/*'
+      - dependency-name: 'verdaccio-*'
+    assignees:
+      - 'verdacciobot'
     labels:
       - 'bot: dependencies'

.github/disabled/ci-windows.yml

@@ -1,149 +0,0 @@
-name: CI windows
-
-on:
-  workflow_dispatch:
-  schedule:
-    - cron: '5 0 * * SUN' 
-permissions:
-  contents: read
-jobs:
-  prepare:
-    runs-on: ubuntu-latest
-    name: setup verdaccio
-    services:
-      verdaccio:
-        image: verdaccio/verdaccio:nightly-master
-        ports:
-          - 4873:4873
-        env:
-          NODE_ENV: production          
-    steps:
-    - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
-    - name: Node
-      uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-      with:
-        node-version-file: '.nvmrc'
-    - name: Install pnpm
-      run: |
-        npm install --global corepack@latest
-        corepack enable
-        corepack install
-    - name: set store
-      run: |
-        mkdir ~/.pnpm-store
-        pnpm config set store-dir ~/.pnpm-store
-    - name: Install
-      run: pnpm install  --registry http://localhost:4873
-    - name: Cache .pnpm-store
-      uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
-      with:
-        path: ~/.pnpm-store
-        key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-        restore-keys: |
-          pnpm-
-  lint:
-    runs-on: windows-latest
-    name: Lint
-    needs: prepare
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
-      - name: Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store              
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts
-      - name: Lint
-        run: pnpm lint
-  format:
-    runs-on: windows-latest
-    name: Format
-    needs: prepare
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
-      - name: Use Node
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store          
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts
-      - name: Lint
-        run: pnpm format:check
-  build:
-    needs: [format, lint]
-    strategy:
-      fail-fast: true
-      matrix:
-        os: [windows-latest]
-        node_version: [18]
-    name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
-    runs-on: ${{ matrix.os }}
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
-      - name: Use Node ${{ matrix.node_version }}
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version: ${{ matrix.node_version }}
-      - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store          
-      - name: Install
-        run: pnpm install --offline --reporter=silence --ignore-scripts --registry http://localhost:4873
-      - name: build
-        run: pnpm build
-      - name: Test
-        run: pnpm test
-  ci-e2e-ui:
-    needs: [format, lint]
-    runs-on: windows-latest
-    name: UI Test E2E
-    steps:
-      - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v3
-      - uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v3
-        with:
-          node-version-file: '.nvmrc'
-      - name: Install pnpm
-        run: npm i pnpm@latest-8 -g
-      - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v3
-        with:
-          path: ~/.pnpm-store
-          key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}
-      - name: set store
-        run: |
-          mkdir ~/.pnpm-store
-          pnpm config set store-dir ~/.pnpm-store              
-      - name: Install
-        run: pnpm install --offline --reporter=silence --registry http://localhost:4873
-      - name: build
-        run: pnpm build
-      - name: Test UI
-        run: pnpm test:e2e:ui
-        # env:
-        #  DEBUG: verdaccio:e2e*