chore: update versions (next-8) (#5193)

Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

.changeset/afraid-cars-sneeze.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': minor
+---
+
+feat(loader): support scoped plugins in plugin folder

.changeset/afraid-cheetahs-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): check token expiry on refresh/timer

.changeset/brave-ears-drive.md

@@ -0,0 +1,18 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/server': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'verdaccio': patch
+'@verdaccio/config': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+---
+
+chore(utils): replace @verdaccio/utils dependency with core

.changeset/breezy-toys-judge.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/server': patch
+---
+
+fix(server): web-enabled test

.changeset/clean-rings-listen.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/ui-theme': minor
+'@verdaccio/ui-components': minor
+'@verdaccio/middleware': patch
+'@verdaccio/ui-i18n': patch
+---
+
+feat: web v1 login frontend (experimental)

.changeset/dirty-countries-play.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): avoid ts error for Alerts

.changeset/early-trainers-grin.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+chore(api): avoid double registration of JSON bodyParser

.changeset/eight-countries-think.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): start storybook on windows

.changeset/eighty-apes-think.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): update react-json-view

.changeset/few-beds-itch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/store': patch
+'@verdaccio/types': patch
+---
+
+chore(types): use "Person" instead of "Author"

.changeset/few-ears-deny.md

@@ -0,0 +1,13 @@
+---
+'@verdaccio/local-storage': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/middleware': patch
+'@verdaccio/core': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/utils': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+chore: cleanup utils

.changeset/four-buttons-remember.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/web': patch
+---
+
+chore(web): move utils to web package

.changeset/fresh-owls-hunt.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/config': patch
+---
+
+chore: expose config utils

.changeset/giant-years-appear.md

@@ -1,7 +0,0 @@
----
-'verdaccio-auth-memory': minor
-'@verdaccio/core': minor
-'@verdaccio/auth': minor
----
-
-fix: auth callback types

.changeset/gold-files-speak.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/config': patch
+'@verdaccio/search': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/utils': patch
+---
+
+fix: uplink processing order

.changeset/great-candles-hang.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-theme': patch
+---
+
+chore(ui): minor app improvements

.changeset/hip-deers-join.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/core': patch
+---
+
+chore(core): http status codes

.changeset/hip-suns-jam.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/e2e-cli-npm10': patch
+---
+
+fix(e2e): name for npm10 test

.changeset/hungry-dolls-destroy.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+fix(local-storage): uncontrolled data used in path expression

.changeset/large-turkeys-change.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/auth': patch
+---
+
+feat: add legacyMergeConfigs as option

.changeset/loud-dingos-cough.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/e2e-cli-npm-common': patch
+---
+
+fix(e2e): test.each was not working as expected

.changeset/modern-llamas-know.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/website': patch
+---
+
+- Updated the docs to show how we can make AWS CodeArtifact work with Verdaccio
+- Added the example uplinks configuration

.changeset/nasty-cooks-watch.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/e2e-cli-npm11': patch
+'@verdaccio/e2e-cli-npm-common': patch
+---
+
+feat(e2e): add npm11

.changeset/nasty-experts-bow.md

@@ -0,0 +1,8 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/ui-components': patch
+---
+
+chore(config): harmonize configuration options

.changeset/nice-garlics-tie.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/ui-theme': patch
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): flags import and minor updates

.changeset/nine-onions-talk.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): search chips when showUplinks is false

.changeset/ninety-hotels-dance.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+---
+
+fix: handling for uplink timeouts

.changeset/odd-fishes-cry.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): scoped package for allow checks

.changeset/old-clocks-destroy.md

@@ -0,0 +1,5 @@
+---
+'verdaccio-memory': patch
+---
+
+fix: memory plugin limit error message

.changeset/pink-pants-try.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/loaders': patch
+---
+
+fix(express): error loading middleware plugins

.changeset/poor-hats-smile.md

@@ -0,0 +1,9 @@
+---
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/core': patch
+'@verdaccio/config': patch
+'@verdaccio/api': patch
+---
+
+feat: web v1 login backend (experimental)

.changeset/poor-queens-shop.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/signature': patch
+'@verdaccio/config': patch
+---
+
+chore(signature): remove duplicate code

.changeset/pre.json

@@ -60,67 +60,118 @@
     "@verdaccio/e2e-cli-pnpm-common": "1.0.2-next-8.0",
     "@verdaccio/e2e-cli-pnpm10": "1.0.0",
     "docusaurus-plugin-downloads": "2.0.0",
-    "@verdaccio/local-publish": "0.0.2"
+    "@verdaccio/local-publish": "0.0.2",
+    "@verdaccio/e2e-cli-npm10": "1.0.1",
+    "@verdaccio/e2e-cli-npm11": "1.0.2-next-8.0"
   },
   "changesets": [
+    "afraid-cars-sneeze",
+    "afraid-cheetahs-rule",
     "angry-doors-tan",
     "beige-lions-type",
     "blue-paws-cheer",
+    "brave-ears-drive",
     "breezy-geckos-search",
+    "breezy-toys-judge",
     "bright-bobcats-ring",
+    "brown-lions-talk",
     "brown-planets-approve",
     "calm-mangos-compare",
     "chatty-apricots-report",
     "clean-beds-wash",
+    "clean-rings-listen",
     "clever-bees-happen",
     "cool-seals-watch",
     "curly-mirrors-smile",
     "curvy-rockets-camp",
     "cyan-snakes-kiss",
+    "dirty-countries-play",
     "early-eyes-float",
+    "early-trainers-grin",
+    "eight-countries-think",
+    "eighty-apes-think",
     "eleven-rocks-dream",
+    "few-beds-itch",
+    "few-ears-deny",
     "fifty-falcons-design",
     "forty-hounds-matter",
+    "four-buttons-remember",
+    "fresh-owls-hunt",
     "funny-fireants-tan",
     "gentle-stingrays-repeat",
+    "gold-files-speak",
     "gold-squids-watch",
+    "great-candles-hang",
     "green-eagles-boil",
     "healthy-ducks-drive",
     "healthy-zoos-lie",
+    "hip-deers-join",
     "hip-eggs-serve",
+    "hip-suns-jam",
     "hot-crews-live",
+    "hungry-dolls-destroy",
     "itchy-glasses-end",
+    "large-turkeys-change",
     "long-eyes-drum",
     "long-singers-drive",
+    "loud-dingos-cough",
     "lucky-crabs-enjoy",
+    "modern-llamas-know",
+    "nasty-cooks-watch",
+    "nasty-experts-bow",
+    "nice-garlics-tie",
     "nine-countries-remember",
+    "nine-onions-talk",
     "ninety-geese-do",
+    "ninety-hotels-dance",
+    "odd-fishes-cry",
+    "old-clocks-destroy",
+    "pink-jeans-lick",
+    "pink-pants-try",
+    "poor-hats-smile",
+    "poor-queens-shop",
     "popular-trees-grin",
     "proud-houses-switch",
+    "purple-planes-do",
     "quick-avocados-type",
     "quick-seas-deny",
     "real-seahorses-change",
+    "red-dolls-repair",
     "rotten-melons-notice",
     "rotton-readers-shave",
     "rude-birds-design",
     "rude-socks-walk",
     "serious-apes-rule",
+    "sharp-queens-rhyme",
+    "shiny-buttons-laugh",
     "short-mails-smoke",
+    "short-turkeys-boil",
     "silent-bags-listen",
     "silent-tips-admire",
     "silver-houses-remain",
+    "silver-insects-train",
     "slow-cars-guess",
     "smooth-games-share",
     "strange-pants-chew",
     "stupid-camels-build",
     "sweet-crabs-deliver",
+    "swift-knives-shop",
+    "swift-mangos-grab",
+    "swift-zebras-cheer",
+    "ten-jeans-approve",
+    "tender-buckets-smoke",
+    "thick-dolphins-rule",
     "thirty-comics-trade",
     "tricky-impalas-shake",
     "tricky-knives-end",
+    "twelve-games-wonder",
     "violet-baboons-beg",
     "violet-bobcats-allow",
     "violet-boxes-float",
     "weak-cherries-serve",
-    "wet-cats-behave"
+    "wet-cats-behave",
+    "wicked-points-relate",
+    "wild-coins-lie",
+    "yellow-flies-sniff"
   ]
 }

.changeset/purple-planes-do.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+fix(ui): format date distance test

.changeset/red-dolls-repair.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/loaders': patch
+---
+
+chore: debug messages in loader

.changeset/sharp-queens-rhyme.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): avoid ts errors for CircularProgress

.changeset/shiny-buttons-laugh.md

@@ -0,0 +1,41 @@
+---
+'generator-verdaccio-plugin': patch
+'@verdaccio/logger-prettify': patch
+'@verdaccio/logger-commons': patch
+'@verdaccio/local-storage': patch
+'verdaccio-auth-memory': patch
+'@verdaccio/local-publish': patch
+'@verdaccio/local-scripts': patch
+'@verdaccio/file-locking': patch
+'verdaccio-htpasswd': patch
+'@verdaccio/ui-theme': patch
+'verdaccio-memory': patch
+'@verdaccio/search-indexer': patch
+'@verdaccio/server': patch
+'@verdaccio/server-fastify': patch
+'@verdaccio/logger': patch
+'verdaccio-audit': patch
+'@verdaccio/test-helper': patch
+'@verdaccio/ui-components': patch
+'@verdaccio/tarball': patch
+'@verdaccio/eslint-config': patch
+'@verdaccio/types': patch
+'@verdaccio/middleware': patch
+'@verdaccio/cli-standalone': patch
+'@verdaccio/core': patch
+'verdaccio': patch
+'@verdaccio/url': patch
+'@verdaccio/node-api': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+'@verdaccio/hooks': patch
+'@verdaccio/proxy': patch
+'@verdaccio/store': patch
+'@verdaccio/utils': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/cli': patch
+'@verdaccio/website': patch
+---
+
+chore: update readme badges and license files

.changeset/short-turkeys-boil.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): reduce build size

.changeset/silver-insects-train.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore(ui): fix ts error due to excluded test folder

.changeset/swift-knives-shop.md

@@ -0,0 +1,6 @@
+---
+'@verdaccio/core': patch
+'@verdaccio/utils': patch
+---
+
+chore(core): move more utils to core

.changeset/swift-mangos-grab.md

@@ -0,0 +1,12 @@
+---
+'@verdaccio/server': patch
+'@verdaccio/core': patch
+'@verdaccio/loaders': patch
+'@verdaccio/config': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/api': patch
+'@verdaccio/web': patch
+---
+
+fix(config): server settings

.changeset/swift-zebras-cheer.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/api': patch
+---
+
+fix(api): cidr whitelist for tokens

.changeset/ten-jeans-approve.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/local-storage': patch
+---
+
+chore: remove obsolete test data from local-storage

.changeset/tender-buckets-smoke.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-components': patch
+---
+
+chore: fix ui-component npmignore and readme

.changeset/thick-dolphins-rule.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/middleware': patch
+---
+
+fix(middleware): properly derive the html cache key

.changeset/twelve-games-wonder.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/ui-i18n': patch
+---
+
+fix(i18n): avoid fallback for en-us

.changeset/wicked-points-relate.md

@@ -0,0 +1,7 @@
+---
+'@verdaccio/auth': patch
+'@verdaccio/signature': patch
+'@verdaccio/types': patch
+---
+
+fix: support JWT sign and verify options

.changeset/wild-coins-lie.md

@@ -0,0 +1,5 @@
+---
+'@verdaccio/tarball': patch
+---
+
+chore(tarball): remove lodash, fix typing

.changeset/yellow-flies-sniff.md

@@ -0,0 +1,10 @@
+---
+'@verdaccio/search-indexer': patch
+'@verdaccio/server': patch
+'@verdaccio/loaders': patch
+'@verdaccio/store': patch
+'@verdaccio/auth': patch
+'@verdaccio/web': patch
+---
+
+fix: add legacyMergeConfigs legacy plugins

.github/ISSUE_TEMPLATE/bug_report.md

@@ -17,24 +17,27 @@ assignees: ''
  - If you are willing to fix it, there is a checkbox at the bottom.
 -->
 
-**Your Environment**
-  <!-- bug below the version 5.x will be closed, see SECURITY.md for more details -->
- * **verdaccio version**: 5.x.x
- * **node version** [12.x.x, 14.x.x]:
- * **package manager**: [npm@7, pnpm@6, yarn@2]
- * **os**: [mac, windows@10, linux]
- * **platform**: [npm, docker, helm, other]
+**Your environment**
+
+<!-- bugs below the version 6.x will be closed, see SECURITY.md and VERSIONS.md for more details -->
+<!-- Please paste the results of running `verdaccio --version` --> 
+* **verdaccio version**: 6.x.x
+
+<!-- Please paste the results of running `verdaccio --info` --> 
+* **node version** [20.x.x, 22.x.x]:
+* **package manager**: [npm@10.x.x, pnpm@10.x.x, yarn@2.x.x]
+* **os**: [mac, windows@11, linux]
+* **platform**: [node, docker, helm, other]
+* **reverse proxy**: [yes, no]
 
 **Describe the bug**
 
 <!-- A clear and concise description of what the bug is. -->
 
-**To Reproduce**
+**Steps to reproduce**
 
 <!-- IMPORTANT:
- - How to reproduce the issue
- - Steps to reproduce the issue
-
+Add step-by-step instructions on how to reproduce the bug.
 Be aware, the lack of reproducible steps the issue might cause your ticket to be closed.
 -->
 
@@ -42,17 +45,14 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 
 <!-- A clear and concise description of what you expected to happen. -->
 
-**Screenshots, server logs, package manager log**
+**Screenshots, Verdaccio server log, package manager log**
 
-<!-- If applicable, add screenshots to help explain your problem.  -->
+<!-- If applicable, add screenshots to help explain your problem. -->
 
-**Configuration File (cat ~/.config/verdaccio/config.yaml)**
+**Configuration file**
 
-<!-- Please be careful do not leak any sensitive information, remove tokens -->
-
-**Environment information**
-
-<!-- Please paste the results of running `verdaccio --info` -->
+<!-- cat ~/.config/verdaccio/config.yaml -->
+<!-- Please be careful do not leak any sensitive information, remove usernames and tokens -->
 
 **Debugging output**
 
@@ -66,6 +66,5 @@ Be aware, the lack of reproducible steps the issue might cause your ticket to be
 - [ ] I'm willing to fix this bug 🥇 
 
 <!--
-
 IMPORTANT: please do not attach external files, all content should be visible from any device.
 -->

.github/actions/cache-packages/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache Packages
       id: cache-packages
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ./packages/
         key: pkg-${{ hashFiles('pnpm-lock.yaml') }}-${{ github.run_id }}-${{ github.sha }}

.github/actions/cache-store/action.yml

@@ -6,7 +6,7 @@ runs:
   steps:
     - name: Cache .pnpm-store
       id: cache-npm
-      uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4.2.0
+      uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
       with:
         path: ~/.pnpm-store
         key: pnpm-${{ hashFiles('**/pnpm-lock.yaml') }}-${{ github.event.pull_request.number }}-${{ runner.os }}

.github/actions/install-app-node/action.yml

@@ -22,7 +22,7 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: ${{ inputs.node-version }}
     - name: Install pnpm

.github/actions/install-app/action.yml

@@ -15,7 +15,7 @@ runs:
   using: composite
   steps:
     - name: Use Node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: Install pnpm

.github/workflows/ci.yml

@@ -68,9 +68,7 @@ jobs:
       fail-fast: true
       matrix:
         os: [ubuntu-latest]
-        ## updated according official maintained releases
-        ## https://nodejs.org/en/about/previous-releases
-        node_version: [18, 20, 22, 23]
+        node_version: [18, 20, 21, 22, 23, 24]
     name: ${{ matrix.os }} / Node ${{ matrix.node_version }}
     runs-on: ${{ matrix.os }}
     steps:
@@ -88,7 +86,7 @@ jobs:
     if: (github.event_name == 'push' && github.ref == 'refs/heads/master' && github.repository == 'verdaccio/verdaccio') || github.event_name == 'workflow_dispatch'
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Install pnpm
@@ -96,7 +94,7 @@ jobs:
           npm install --global corepack@latest
           corepack enable
           corepack install
-      - uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
+      - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: ~/.pnpm-store
           key: pnpm-${{ hashFiles('pnpm-lock.yaml') }}

.github/workflows/codeql-analysis.yml

@@ -37,7 +37,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/init@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
         with:
           config: |
             paths-ignore:
@@ -50,7 +50,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
 
       # ℹ️ Command-line programs to run using the OS shell.
       # 📚 https://git.io/JvXDl
@@ -64,4 +64,4 @@ jobs:
       #   make release
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@b56ba49b26e50535fa1e7f7db0f4f7b4bf65d80d # v3.28.10
+        uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18

.github/workflows/docker-proxy-apache-e2e.yml

@@ -26,7 +26,7 @@ jobs:
       run: docker compose -f "./e2e/docker/apache-verdaccio/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-proxy-nginx-e2e.yml

@@ -24,7 +24,7 @@ jobs:
       run: docker compose -f "./e2e/docker/proxy-nginx/docker-compose.yaml" up -d --build
 
     - name: Install node
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: npm setup

.github/workflows/docker-publish.yml

@@ -2,50 +2,49 @@ name: Docker publish to docker.io
 
 on:
   push:
-    paths:
-      - .github/workflows/docker-publish.yml
-      - .github/workflows/docker-publish.yml
-      - 'packages/**'
-      - 'docker-bin/**'
-      - 'package.json'
-      - 'pnpm-*.yaml'
-      - 'Dockerfile'
-      - '.dockerignore'
     branches:
       - 'master'
     tags:
       - 'v*'
 
 permissions:
-  contents: read  #  to fetch code (actions/checkout)
+  contents: read
 
 jobs:
   docker:
     runs-on: ubuntu-latest
     if: github.repository == 'verdaccio/verdaccio'
     steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
-      - uses: docker/setup-buildx-action@v1
+      - name: Checkout repository
+        uses: actions/checkout@v4
+
+      - name: Set up QEMU
+        uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
+
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
         with:
           driver-opts: network=host
-      - uses: docker/login-action@v1
-        name: Login Docker Hub
+
+      - name: Log in to Docker Hub
+        uses: docker/login-action@v3
         with:
           username: ${{ secrets.DOCKER_USERNAME }}
           password: ${{ secrets.DOCKER_PASSWORD }}
-      - name: Prepare docker image tags
+
+      - name: Prepare Docker image tags
         id: docker_meta
-        uses: crazy-max/ghaction-docker-meta@v1
+        uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5
         with:
           images: ${{ github.repository }}
-          tag-custom: nightly-master
-          tag-custom-only: ${{ github.ref == 'refs/heads/master' }}
-          tag-latest: false
-          tag-semver: |
-            {{version}}
-            {{major}}
-            {{major}}.{{minor}}
+          tags: |
+            type=raw,value=nightly-master
+            type=raw,value=latest,enable=false
+          labels: |
+            org.opencontainers.image.source=${{ github.repositoryUrl }}
+            org.opencontainers.image.created=${{ steps.docker_meta.outputs.created }}
+            org.opencontainers.image.version=${{ steps.docker_meta.outputs.version }}
+
       - name: Build & Push
         uses: docker/build-push-action@v6
         with:

.github/workflows/e2e-ci.yml

@@ -43,9 +43,10 @@ jobs:
             npm7,
             npm8,
             npm9,
-            npm10
+            npm10,
+            npm11,
           ]
-        node: [22]
+        node: [22, 24]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
@@ -72,7 +73,7 @@ jobs:
             pnpm9,
             pnpm10,
           ]
-        node: [22]
+        node: [2, 24]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:
@@ -99,7 +100,7 @@ jobs:
             yarn3,
             yarn4
           ]
-        node: [22]
+        node: [22, 24]
     name: ${{ matrix.pkg }}/ ubuntu-latest / ${{ matrix.node }}
     runs-on: ubuntu-latest
     steps:

.github/workflows/e2e-ui.yml

@@ -26,7 +26,7 @@ jobs:
           node-version: 20
       - name: Test UI
         run: pnpm test:e2e:ui
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         with:
           name: videos
           path: /home/runner/work/verdaccio/verdaccio/e2e/ui/cypress/videos

.github/workflows/static-data.yml

@@ -36,7 +36,7 @@ jobs:
       - name: Get docker downloads
         run: pnpm --filter @verdaccio/local-scripts run pull:docker
       - name: Get npmjs monhtly downloads
-        run: pnpm --filter @verdaccio/local-scripts run downloads:mounthly
+        run: pnpm --filter @verdaccio/local-scripts run downloads:monthly
       - name: Get npmjs year downloads
         run: pnpm --filter @verdaccio/local-scripts run downloads:yearly
       - name: update contributors

.github/workflows/website.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Build Translations percentage
         run: pnpm --filter @verdaccio/local-scripts build
       - name: Cache Docusaurus Build
-        uses: actions/cache@d4323d4df104b026a6aa633fdb11d772146be0bf # v4.2.2
+        uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
         with:
           path: website/node_modules/.cache/webpack
           key: cache/webpack-${{github.ref}}-${{ hashFiles('**/pnpm-lock.yaml') }}

.github/workflows/x-e2e-angular-cli-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -47,7 +47,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -83,7 +83,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-audit-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'

.github/workflows/x-e2e-gatsbyjs-cli-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 9'
@@ -45,7 +45,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install npm 10'

.github/workflows/x-e2e-jest-workflow.yml

@@ -10,7 +10,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -41,7 +41,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Install Dependencies
@@ -75,7 +75,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm'
@@ -108,7 +108,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 9'
@@ -141,7 +141,7 @@ jobs:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: 'install latest npm 10'
@@ -166,69 +166,4 @@ jobs:
           yarn add left-pad --registry http://localhost:4873 --verbose
           echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
           yarn jest module.test.js
-  pnpm8:
-    name: 'pnpm8:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
-        with:
-          node-version-file: '.nvmrc'
-      - name: 'install latest pnpm'
-        run: npm i -g pnpm@10.5.2
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          nohup yarn node ./scripts/run-verdaccio.js &
-      - name: 'Ping to verdaccio'
-        run: |
-          pnpm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          pnpm init
-          pnpm install jest@29.5.0 --registry http://localhost:4873  --loglevel info 
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
-  pnpm9:
-    name: 'pnpm:9:jest example'
-    runs-on: ubuntu-latest
-
-    steps:
-      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-
-      - name: 'Use Node.js'
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
-        with:
-          node-version-file: '.nvmrc'
-      - name: 'install latest pnpm'
-        run: npm i -g pnpm@10.5.2
-      - name: Install Dependencies
-        run: yarn install
-      - name: 'Run verdaccio in the background'
-        run: |
-          yarn node ./scripts/run-verdaccio.js &
-      - name: 'Ping to verdaccio'
-        run: |
-          pnpm ping --registry http://localhost:4873
-      - name: 'Running the integration test'
-        run: |
-          source scripts/e2e-setup-ci.sh
-          pnpm init
-          pnpm install jest@29.5.0 --registry http://localhost:4873 --loglevel info 
-
-          echo "it('should pass', () => { expect(true).toBeTruthy(); });" | tee pass.test.js
-          yarn jest pass.test.js
-
-          yarn add left-pad --registry http://localhost:4873 --verbose
-          echo "const leftPad = require('left-pad'); it('should resolve a module', () => { expect(typeof leftPad).toBe('function');});" | tee module.test.js
-          yarn jest module.test.js
+          

.github/workflows/x-release-snapshot.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node (latest)
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/x-release.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node (latest)
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/x-smok-test-docker.yml

@@ -16,7 +16,8 @@ jobs:
   test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
+      - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/x-smok-test-module.yml

@@ -12,7 +12,7 @@ jobs:
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       - name: Use Node (latest)
-        uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+        uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
           node-version-file: '.nvmrc'
       - name: Docker test

.github/workflows/yarn-ci-lint.yml

@@ -8,7 +8,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node 
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version-file: '.nvmrc'
     - name: Install

.github/workflows/yarn-ci.yml

@@ -11,7 +11,7 @@ jobs:
     steps:
     - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
     - name: Use Node ${{ inputs.node_version }}
-      uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4.2.0
+      uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
       with:
         node-version: ${{ inputs.node_version }}
     - name: Install

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${BUILDPLATFORM:-linux/amd64} node:22-alpine AS builder
+FROM --platform=${BUILDPLATFORM:-linux/amd64} node:24-alpine AS builder
 
 ENV NODE_ENV=development \
     VERDACCIO_BUILD_REGISTRY=https://registry.npmjs.org
@@ -21,7 +21,7 @@ RUN npm -g i corepack && \
 # NODE_ENV=production pnpm install --frozen-lockfile --ignore-scripts
 # RUN pnpm install --prod --ignore-scripts
 
-FROM node:22-alpine
+FROM node:24-alpine
 LABEL maintainer="https://github.com/verdaccio/verdaccio"
 
 ENV VERDACCIO_APPDIR=/opt/verdaccio \

README.md

@@ -22,17 +22,20 @@ For those looking to extend their storage capabilities, Verdaccio
 **supports various community-made plugins to hook into services such as Amazon's s3,
 Google Cloud Storage** or create your own plugin.
 
-[![verdaccio (latest)](https://img.shields.io/npm/v/verdaccio/latest.svg)](https://www.npmjs.com/package/verdaccio)
-[![verdaccio (downloads)](https://img.shields.io/npm/dy/verdaccio.svg)](https://www.npmjs.com/package/verdaccio)
-[![docker pulls](https://img.shields.io/docker/pulls/verdaccio/verdaccio.svg?maxAge=43200)](https://verdaccio.org/docs/en/docker.html)
-[![backers](https://opencollective.com/verdaccio/tiers/backer/badge.svg?label=Backer&color=brightgreen)](https://opencollective.com/verdaccio)
-[![stackshare](https://img.shields.io/badge/Follow%20on-StackShare-blue.svg?logo=stackshare&style=flat)](https://stackshare.io/verdaccio)
+[![Verdaccio Home](https://img.shields.io/badge/Homepage-Verdaccio-405236?style=flat)](https://verdaccio.org)
+[![MIT License](https://img.shields.io/github/license/verdaccio/verdaccio?label=License&color=405236)](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
+[![Verdaccio Latest](https://img.shields.io/npm/v/verdaccio?label=Latest%20Version&color=405236)](https://github.com/verdaccio/verdaccio)
 
-[![discord](https://img.shields.io/discord/388674437219745793.svg)](http://chat.verdaccio.org/)
-[![MIT](https://img.shields.io/github/license/mashape/apistatus.svg)](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
-[![Crowdin](https://d322cqt584bo4o.cloudfront.net/verdaccio/localized.svg)](https://crowdin.com/project/verdaccio)
+[![Documentation](https://img.shields.io/badge/Help-Verdaccio?style=flat&logo=Verdaccio&label=Verdaccio&color=cd4000)](https://verdaccio.org/docs)
+[![Discord](https://img.shields.io/badge/Chat-Discord?style=flat&logo=Discord&label=Discord&color=cd4000)](https://discord.com/channels/388674437219745793)
+[![Bluesky](https://img.shields.io/badge/Follow-Bluesky?style=flat&logo=Bluesky&label=Bluesky&color=cd4000)](https://bsky.app/profile/verdaccio.org)
+[![Backers](https://img.shields.io/opencollective/backers/verdaccio?style=flat&logo=opencollective&label=Join%20Backers&color=cd4000)](https://opencollective.com/verdaccio/contribute)
+[![Sponsors](https://img.shields.io/opencollective/sponsors/verdaccio?style=flat&logo=opencollective&label=Sponsor%20Us&color=cd4000)](https://opencollective.com/verdaccio/contribute)
+
+[![Verdaccio Downloads](https://img.shields.io/npm/dm/verdaccio?style=flat&logo=npm&label=Npm%20Downloads&color=lightgrey)](https://www.npmjs.com/package/verdaccio)
+[![Docker Pulls](https://img.shields.io/docker/pulls/verdaccio/verdaccio?style=flat&logo=docker&label=Docker%20Pulls&color=lightgrey)](https://hub.docker.com/r/verdaccio/verdaccio)
+[![GitHub Stars](https://img.shields.io/github/stars/verdaccio?style=flat&logo=github&label=GitHub%20Stars%20%E2%AD%90&color=lightgrey)](https://github.com/verdaccio/verdaccio/stargazers)
 
-[![Github](https://img.shields.io/github/stars/verdaccio/verdaccio.svg?style=social&label=Stars)](https://github.com/verdaccio/verdaccio/stargazers)
 [![StandWithUkraine](https://raw.githubusercontent.com/vshymanskyy/StandWithUkraine/main/badges/StandWithUkraine.svg)](https://github.com/vshymanskyy/StandWithUkraine/blob/main/docs/README.md)
 
 ## Versions
@@ -97,19 +100,21 @@ Our goal is to give you the confidence to use your preferred package manager wit
 
 ### Commands
 
-| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | pnpm8 | pnpm9 | pnpm10 | yarn1 | yarn2 | yarn3 | yarn4 |
-| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ------ | ----- | ----- | ----- | ----- |
-| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| unpublish | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ❌     | ❌    | ❌    | ❌    | ❌    |
-| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ❌    |
-| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
-| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
-| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅     | ✅    | ❌    | ❌    | ❌    |
+| cmd       | npm6 | npm7 | npm8 | npm9 | npm10 | npm11 | pnpm8 | pnpm9 | pnpm10 | yarn1 | yarn2 | yarn3 | yarn4 |
+| --------- | ---- | ---- | ---- | ---- | ----- | ----- | ----- | ----- | ------ | ----- | ----- | ----- | ----- |
+| publish   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| unpublish | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ❌    | ❌    | ❌    | ❌    |
+| info      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| audit     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ❌    |
+| install   | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ✅    | ✅    | ✅    | ✅    |
+| deprecate | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| ping      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| search    | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| star      | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| stars     | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ⛔    | ⛔    | ⛔    | ⛔    |
+| dist-tag  | ✅   | ✅   | ✅   | ✅   | ✅    | ✅    | ✅    | ✅    | ✅     | ✅    | ❌    | ❌    | ❌    |
+
+<!--          n6      n7     n8      n9     n10      n11     p8       p9      p10       y1      y2       y3      y4 -->
 
 > notes:
 >
@@ -285,14 +290,14 @@ If you want to report a security vulnerability, please follow the steps which we
 
 Thanks to the following companies to help us to achieve our goals providing free open source licenses. Every company provides enough resources to move this project forward.
 
-| Company      | Logo                                                                                                                            | License                                                                           |
-| ------------ | ------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
-| JetBrains    | [![jetbrain](assets/thanks/jetbrains/logo.png)](https://www.jetbrains.com/)                                                     | JetBrains provides licenses for products for active maintainers, renewable yearly |
-| Crowdin      | [![crowdin](assets/thanks/crowdin/logo.png)](https://crowdin.com/)                                                              | Crowdin provides platform for translations                                        |
-| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                        | BrowserStack provides plan to run End to End testing for the UI                   |
-| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                      | Netlify provides pro plan for website deployment                                  |
-| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                     | Algolia provides search services for the website                                  |
-| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application) | Docker offers unlimited pulls and unlimited egress to any and all users           |
+| Company      | Logo                                                                                                                                    | License                                                                           |
+| ------------ | --------------------------------------------------------------------------------------------------------------------------------------- | --------------------------------------------------------------------------------- |
+| JetBrains    | [![jetbrain](https://github.com/verdaccio/verdaccio/blob/master/assets/thanks/jetbrains/logo.png?raw=true)](https://www.jetbrains.com/) | JetBrains provides licenses for products for active maintainers, renewable yearly |
+| Crowdin      | [![crowdin](https://github.com/verdaccio/verdaccio/blob/master/assets/thanks/crowdin/logo.png?raw=true)](https://crowdin.com/)          | Crowdin provides platform for translations                                        |
+| BrowserStack | [![browserstack](https://cdn.verdaccio.dev/readme/browserstack_logo.png)](https://www.browserstack.com/)                                | BrowserStack provides plan to run End to End testing for the UI                   |
+| Netlify      | [![netlify](https://www.netlify.com/img/global/badges/netlify-color-accent.svg)](https://www.netlify.com/)                              | Netlify provides pro plan for website deployment                                  |
+| Algolia      | [![algolia](https://cdn.verdaccio.dev/sponsor/logo/algolia/logo.png)](https://algolia.com/)                                             | Algolia provides search services for the website                                  |
+| Docker       | [![docker](https://cdn.verdaccio.dev/sponsor/logo/docker/docker.png)](https://www.docker.com/community/open-source/application)         | Docker offers unlimited pulls and unlimited egress to any and all users           |
 
 ## Maintainers
 
@@ -331,7 +336,7 @@ You can find and chat with them over Discord, click [here](http://chat.verdaccio
 
 ## Open Collective Sponsors
 
-Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/verdaccio#sponsor)]
+Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [[Become a sponsor](https://opencollective.com/verdaccio/contribute)]
 
 [![sponsor](https://opencollective.com/verdaccio/sponsor/0/avatar.svg)](https://opencollective.com/verdaccio/sponsor/0/website)
 [![sponsor](https://opencollective.com/verdaccio/sponsor/1/avatar.svg)](https://opencollective.com/verdaccio/sponsor/1/website)
@@ -346,32 +351,32 @@ Support this project by becoming a sponsor. Your logo will show up here with a l
 
 ## Open Collective Backers
 
-Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com/verdaccio#backer)]
+Thank you to all our backers! 🙏 [[Become a backer](https://opencollective.com/verdaccio/contribute)]
 
-[![backers](https://opencollective.com/verdaccio/backers.svg?width=890)](https://opencollective.com/verdaccio#backers)
+[![backers](https://opencollective.com/verdaccio/backers.svg?width=890)](https://opencollective.com/verdaccio/contributes)
 
 ## Contributors
 
-This project exists thanks to all the people who contribute. [[Contribute](CONTRIBUTING.md)].
+This project exists thanks to all the people who contribute. [[Contribute](https://github.com/verdaccio/verdaccio/blob/master/CONTRIBUTING.md)].
 
-[![contributors](https://opencollective.com/verdaccio/contributors.svg?width=890&button=true)](../../graphs/contributors)
+[![contributors](https://opencollective.com/verdaccio/contributors.svg?width=890&button=true)](https://github.com/verdaccio/verdaccio/graphs/contributors)
 
-### FAQ / Contact / Troubleshoot
+## FAQ / Contact / Troubleshoot
 
 If you have any issue you can try the following options. Do no hesitate to ask or check our issues database. Perhaps someone has asked already what you are looking for.
 
 - [Blog](https://verdaccio.org/blog/)
 - [Donations](https://github.com/sponsors/verdaccio)
 - [Reporting an issue](https://github.com/verdaccio/verdaccio/issues/new/choose)
-- [Running discussions](https://github.com/verdaccio/verdaccio/issues?q=is%3Aissue+is%3Aopen+label%3Adiscuss)
+- [Running discussions](https://github.com/orgs/verdaccio/discussions)
 - [Chat](https://discord.gg/7qWJxBf)
-- [Logos](https://verdaccio.org/docs/en/logo)
+- [Logos](https://verdaccio.org/docs/logo)
 - [Docker Examples](https://github.com/verdaccio/verdaccio/tree/master/docker-examples)
 - [FAQ](https://github.com/verdaccio/verdaccio/discussions/categories/q-a)
 
-### License
+## License
 
 Verdaccio is [MIT licensed](https://github.com/verdaccio/verdaccio/blob/master/LICENSE)
 
-The Verdaccio documentation and logos (excluding /thanks, e.g., .md, .png, .sketch) files within the /assets folder) is
+The Verdaccio documentation and logos (excluding /thanks, e.g., .md, .png, .sketch files within the /assets folder) are
 [Creative Commons licensed](https://creativecommons.org/licenses/by/4.0/).

docker-examples/v6/README.md

@@ -1,6 +1,6 @@
 # Verdaccio 6 Examples
 
-> We recommend to have installed [docker-compose >= 1.29.0](https://github.com/docker/compose/releases/tag/1.29.2)
+> We recommend to have installed the latest docker-compose
 
 ## Mapping Volumes
 
@@ -20,3 +20,5 @@ Using plugins without `docker-compose` mapping volumes, all withing the `Dockerf
 
 - [Docker + Local Build Auth Plugin (local development)](plugins/docker-build-install-plugin/README.md)
 - [Docker + Auth Plugin (from a registry)](plugins/docker-local-plugin/README.md)
+- [Docker + Localstack S3 + Verdaccio](amazon-s3-docker-example/README.md)
+- [Docker + GitHub OAuth + verdaccio-github-oauth-ui + Verdaccio](verdaccio-github-oauth-ui/README.md)

docker-examples/v6/amazon-s3-docker-example/README.md

@@ -0,0 +1,17 @@
+# Amazon S3 Bucket (Localstack) and Verdaccio 6.x
+
+This setup runs Verdaccio alongside Localstack, providing a simple test/mocking environment for
+developing cloud applications. In this case, we are simulating AWS S3 functionality.
+
+## Usage
+
+> You might need to create bucket manually here
+> aws --endpoint-url=http://localhost:4566 s3 mb s3://localstack.s3.plugin.test
+
+```
+docker-compose up --force-recreate --build --always-recreate-deps
+```
+
+## Articles
+
+- [Set up S3 bucket using Docker / Compose](https://discuss.localstack.cloud/t/set-up-s3-bucket-using-docker-compose/646.html)

docker-examples/v6/amazon-s3-docker-example/docker-compose.yaml

@@ -0,0 +1,29 @@
+version: '3.8'
+
+services:
+  localstack-s3:
+    container_name: '${LOCALSTACK_DOCKER_NAME-localstack-main}'
+    image: localstack/localstack:s3-latest
+    ports:
+      - '127.0.0.1:4566:4566'
+    volumes:
+      - './init-s3.py:/etc/localstack/init/ready.d/init-s3.py'
+  verdaccio:
+    container_name: verdaccio-s3-plugin
+    build: s3Plugin/
+    environment:
+      - DEBUG=verdaccio:*
+      - AWS_ACCESS_KEY_ID=foobar
+      - AWS_SECRET_ACCESS_KEY=foobar
+      - AWS_DEFAULT_REGION=eu-west-2
+      - AWS_S3_ENDPOINT=http://localstack-s3:4566
+      - AWS_S3_PATH_STYLE=true
+    ports:
+      - '4874:4873'
+    depends_on:
+      - localstack-s3
+    networks:
+      - default
+networks:
+  default:
+    name: verdaccio-network

docker-examples/v6/amazon-s3-docker-example/init-s3.py

@@ -0,0 +1,10 @@
+import boto3
+
+s3_client = boto3.client(
+    "s3",
+    endpoint_url=f"http://localhost:4566",
+    aws_access_key_id="test",
+    aws_secret_access_key="test"
+)
+
+s3_client.create_bucket(Bucket="localstack.s3.plugin.test")

docker-examples/v6/amazon-s3-docker-example/s3Plugin/Dockerfile

@@ -0,0 +1,9 @@
+FROM verdaccio/verdaccio:6.x-next
+LABEL Juan Picado <jotadeveloper@gmail.com>
+# Copy the configuration file into the container
+ADD config.yaml /verdaccio/conf/config.yaml
+USER root
+# This is the best way to install a plugin in Verdaccio
+RUN npm install --global verdaccio-aws-s3-storage
+USER $VERDACCIO_USER_UID
+

docker-examples/v6/amazon-s3-docker-example/s3Plugin/config.yaml

@@ -0,0 +1,27 @@
+storage: /verdaccio/storage
+
+store:
+  aws-s3-storage:
+    bucket: localstack.s3.plugin.test
+    keyPrefix: docker-test-prefix
+    region: eu-west-2
+    endpoint: http://localstack-s3:4566
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    proxy: npmjs
+  '**':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+log: { type: stdout, format: pretty, level: trace }
+
+listen:
+  - 0.0.0.0:4873

docker-examples/v6/verdaccio-github-oauth-ui/README.md

@@ -0,0 +1,17 @@
+# GitHub OAuth Login with verdaccio-github-oauth-ui plugin and Verdaccio 6.x
+
+This setup runs Verdaccio alongside verdaccio-github-oauth-ui plugin.
+
+https://github.com/n4bb12/verdaccio-github-oauth-ui
+
+## Configuration
+
+Open `config.yaml` and modify the required properties follow the official documentation.
+
+https://github.com/n4bb12/verdaccio-github-oauth-ui/blob/main/docs/configuration.md
+
+## Usage
+
+```bash
+docker-compose up --force-recreate --build --always-recreate-deps
+```

docker-examples/v6/verdaccio-github-oauth-ui/docker-compose.yaml

@@ -0,0 +1,15 @@
+version: '3.8'
+
+services:
+  verdaccio:
+    container_name: verdaccio-oauth-plugin
+    build: plugin/
+    environment:
+      - DEBUG=verdaccio:*
+    ports:
+      - '4874:4873'
+    networks:
+      - default
+networks:
+  default:
+    name: verdaccio-network

docker-examples/v6/verdaccio-github-oauth-ui/plugin/Dockerfile

@@ -0,0 +1,9 @@
+FROM verdaccio/verdaccio:6.x-next
+LABEL Juan Picado <jotadeveloper@gmail.com>
+# Copy the configuration file into the container
+ADD config.yaml /verdaccio/conf/config.yaml
+USER root
+# This is the best way to install a plugin in Verdaccio
+RUN npm install --global verdaccio-github-oauth-ui
+USER $VERDACCIO_USER_UID
+

docker-examples/v6/verdaccio-github-oauth-ui/plugin/config.yaml

@@ -0,0 +1,34 @@
+storage: /verdaccio/storage
+
+middlewares:
+  github-oauth-ui:
+    enabled: true
+
+auth:
+  # READ HERE https://github.com/n4bb12/verdaccio-github-oauth-ui/blob/main/docs/configuration.md
+  github-oauth-ui:
+    client-id: take_this_from_github
+    client-secret: take_this_from_github
+    token: my_github_token
+
+uplinks:
+  npmjs:
+    url: https://registry.npmjs.org/
+
+packages:
+  '@*/*':
+    access: $all
+    publish: $all
+    proxy: npmjs
+  jquery:
+    # Limit access to users:
+    access: github/user/GITHUB_USER
+  '**':
+    access: $all
+    publish: $all
+    proxy: npmjs
+
+log: { type: stdout, format: pretty, level: trace }
+
+listen:
+  - 0.0.0.0:4873

e2e/cli/cli-commons/package.json

@@ -4,16 +4,16 @@
   "version": "2.0.0-next-8.0",
   "main": "src/index.ts",
   "devDependencies": {
-    "@verdaccio/config": "workspace:8.0.0-next-8.12",
-    "@verdaccio/core": "workspace:8.0.0-next-8.12",
-    "@verdaccio/types": "workspace:13.0.0-next-8.3",
+    "@verdaccio/config": "workspace:8.0.0-next-8.16",
+    "@verdaccio/core": "workspace:8.0.0-next-8.16",
+    "@verdaccio/types": "workspace:13.0.0-next-8.6",
     "debug": "4.4.0",
     "fs-extra": "11.2.0",
     "get-port": "5.1.1",
     "got": "11.8.6",
     "js-yaml": "4.1.0",
     "lodash": "4.17.21",
-    "verdaccio": "workspace:8.0.0-next-8.12"
+    "verdaccio": "workspace:8.0.0-next-8.16"
   },
   "scripts": {
     "test": "echo no test",

e2e/cli/e2e-npm-commons/CHANGELOG.md

@@ -0,0 +1,9 @@
+# @verdaccio/e2e-cli-npm-common
+
+## 1.0.1-next-8.0
+
+### Patch Changes
+
+- d945bfe: fix(e2e): test.each was not working as expected
+- 534fafd: feat(e2e): add npm11
+  - @verdaccio/test-cli-commons@2.0.0-next-8.0

e2e/cli/e2e-npm-commons/audit.ts

@@ -12,7 +12,7 @@ export function runAudit(npm) {
       await registry.init();
     });
 
-    test.each([['verdaccio-memory', '@verdaccio/cli']])(
+    test.each([['verdaccio-memory'], ['@verdaccio/cli']])(
       'should audit a package %s',
       async (pkgName) => {
         const { tempFolder } = await prepareGenericEmptyProject(

e2e/cli/e2e-npm-commons/dist-tags.ts

@@ -17,26 +17,30 @@ export function runDistTag(npm) {
       await registry.init();
     });
 
-    test.each([['@foo/foo', 'foo']])('should list dist-tags for %s', async (pkgName) => {
-      const { tempFolder } = await prepareGenericEmptyProject(
-        pkgName,
-        '1.0.0',
-        registry.port,
-        registry.getToken(),
-        registry.getRegistryUrl()
-      );
-      await npmUtils.publish(npm, tempFolder, pkgName, registry);
-      await npmUtils.bumbUp(npm, tempFolder, registry);
-      await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
-      const resp2 = await npm(
-        { cwd: tempFolder },
-        'dist-tag',
-        'ls',
-        '--json',
-        ...addRegistry(registry.getRegistryUrl())
-      );
-      expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
-    });
+    test.each([['@foo/verdaccio-foo'], ['verdaccio-foo']])(
+      'should list dist-tags for %s',
+      async (pkgName) => {
+        // Packages must not exist in npm registry to avoid conflicts with data from uplink
+        const { tempFolder } = await prepareGenericEmptyProject(
+          pkgName,
+          '1.0.0',
+          registry.port,
+          registry.getToken(),
+          registry.getRegistryUrl()
+        );
+        await npmUtils.publish(npm, tempFolder, pkgName, registry);
+        await npmUtils.bumbUp(npm, tempFolder, registry);
+        await npmUtils.publish(npm, tempFolder, pkgName, registry, ['--tag', 'beta']);
+        const resp2 = await npm(
+          { cwd: tempFolder },
+          'dist-tag',
+          'ls',
+          '--json',
+          ...addRegistry(registry.getRegistryUrl())
+        );
+        expect(resp2.stdout).toEqual('beta: 1.1.0latest: 1.0.0');
+      }
+    );
 
     test.each([['@verdaccio/bar']])('should remove tag with dist-tags for %s', async (pkgName) => {
       const { tempFolder } = await prepareGenericEmptyProject(

e2e/cli/e2e-npm-commons/package.json

@@ -1,7 +1,7 @@
 {
   "private": true,
   "name": "@verdaccio/e2e-cli-npm-common",
-  "version": "1.0.0",
+  "version": "1.0.1-next-8.0",
   "dependencies": {
     "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0"
   },

e2e/cli/e2e-npm-commons/publish.ts

@@ -12,12 +12,18 @@ export function runPublish(npm) {
       await registry.init();
     });
 
-    test.each([['verdaccio-memory', 'verdaccio', '@verdaccio/foo', '@verdaccio/some-foo']])(
+    test.each([['verdaccio-memory'], ['verdaccio'], ['@verdaccio/foo'], ['@verdaccio/some-foo']])(
       'should publish a package %s',
       async (pkgName) => {
+        // As of npm v11, npm will fetch the packument from the npm registry before publishing (from the uplink),
+        // and there are more checks in the client:
+        // - "You cannot publish over the previously published versions"
+        // - "You must specify a tag using --tag when publishing a prerelease version"
+        // - "Cannot implicitly apply the 'latest' tag because previously published version x.y.z is higher than the new version a.b.c"
+        // Therefore, we pick a version that is higher than any of the published versions for the test packages (and not a pre-release).
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-patch',
+          '99.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -31,7 +37,6 @@ export function runPublish(npm) {
         const parsedBody = JSON.parse(resp.stdout as string);
         expect(parsedBody.name).toEqual(pkgName);
         expect(parsedBody.files).toBeDefined();
-        expect(parsedBody.files).toBeDefined();
       }
     );
 

e2e/cli/e2e-npm-commons/star.ts

@@ -20,7 +20,7 @@ export function runStar(npm) {
     test.each([['@verdaccio/foo']])('should star a package %s', async (pkgName) => {
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()
@@ -39,7 +39,7 @@ export function runStar(npm) {
     test.each([['@verdaccio/bar']])('should unstar a package %s', async (pkgName) => {
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()
@@ -67,7 +67,7 @@ export function runStar(npm) {
       const pkgName = '@verdaccio/stars';
       const { tempFolder } = await prepareGenericEmptyProject(
         pkgName,
-        '1.0.0-patch',
+        '1.0.0',
         registry.port,
         registry.getToken(),
         registry.getRegistryUrl()

e2e/cli/e2e-npm-commons/unpublish.ts

@@ -17,12 +17,12 @@ export function runUnpublish(npm) {
       await registry.init();
     });
 
-    test.each([['@verdaccio/test1', 'super-package-do-not-exist-spam']])(
+    test.each([['@verdaccio/test1'], ['super-package-do-not-exist-spam']])(
       'should unpublish a full package %s',
       async (pkgName) => {
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-beta',
+          '1.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -44,16 +44,16 @@ export function runUnpublish(npm) {
           '--json',
           ...addRegistry(registry.getRegistryUrl())
         );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1');
+        expect(resp2.stdout).toEqual(`- ${pkgName}`);
       }
     );
 
-    test.each([['@verdaccio/test1', 'super-package-do-not-exist-spam']])(
+    test.each([['@verdaccio/test1'], ['super-package-do-not-exist-spam']])(
       'should unpublish a package %s version',
       async (pkgName) => {
         const { tempFolder } = await prepareGenericEmptyProject(
           pkgName,
-          '1.0.0-beta',
+          '1.0.0',
           registry.port,
           registry.getToken(),
           registry.getRegistryUrl()
@@ -69,13 +69,13 @@ export function runUnpublish(npm) {
         const resp2 = await npm(
           { cwd: tempFolder },
           'unpublish',
-          `${pkgName}@1.0.0-beta`,
+          `${pkgName}@1.0.0`,
           '--force',
           '--loglevel=info',
           '--json',
           ...addRegistry(registry.getRegistryUrl())
         );
-        expect(resp2.stdout).toEqual('- @verdaccio/test1@1.0.0-beta');
+        expect(resp2.stdout).toEqual(`- ${pkgName}@1.0.0`);
       }
     );
 

e2e/cli/e2e-npm10/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @verdaccio/e2e-cli-npm9
 
+## 1.0.2-next-8.1
+
+### Patch Changes
+
+- Updated dependencies [d945bfe]
+- Updated dependencies [534fafd]
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.0
+  - @verdaccio/test-cli-commons@2.0.0-next-8.0
+
+## 1.0.2-next-8.0
+
+### Patch Changes
+
+- d4fc827: fix(e2e): name for npm10 test
+  - @verdaccio/test-cli-commons@2.0.0-next-8.0
+
 ## 1.0.1
 
 ### Patch Changes

e2e/cli/e2e-npm10/package.json

@@ -1,7 +1,7 @@
 {
   "private": true,
-  "name": "@verdaccio/e2e-cli-npm9",
-  "version": "1.0.1",
+  "name": "@verdaccio/e2e-cli-npm10",
+  "version": "1.0.2-next-8.1",
   "dependencies": {
     "@verdaccio/test-cli-commons": "workspace:2.0.0-next-8.0",
     "@verdaccio/e2e-cli-npm-common": "workspace:*",

e2e/cli/e2e-npm11/.babelrc

@@ -0,0 +1,3 @@
+{
+  "extends": "../../../.babelrc"
+}

e2e/cli/e2e-npm11/.eslintrc

@@ -0,0 +1,7 @@
+{
+  "rules": {
+    "no-console": 0,
+    "@typescript-eslint/no-var-requires": 0,
+    "@typescript-eslint/explicit-member-accessibility": 0
+  }
+}

e2e/cli/e2e-npm11/CHANGELOG.md

@@ -0,0 +1,79 @@
+# @verdaccio/e2e-cli-npm9
+
+## 1.0.2-next-8.1
+
+### Patch Changes
+
+- 534fafd: feat(e2e): add npm11
+- Updated dependencies [d945bfe]
+- Updated dependencies [534fafd]
+  - @verdaccio/e2e-cli-npm-common@1.0.1-next-8.0
+  - @verdaccio/test-cli-commons@2.0.0-next-8.0
+
+## 1.0.2-next-8.0
+
+### Patch Changes
+
+- d4fc827: fix(e2e): name for npm10 test
+  - @verdaccio/test-cli-commons@2.0.0-next-8.0
+
+## 1.0.1
+
+### Patch Changes
+
+- Updated dependencies [351aeeaa8]
+- Updated dependencies [d167f92e1]
+- Updated dependencies [c383eb68c]
+  - @verdaccio/test-cli-commons@1.1.0
+
+## 1.0.1-6-next.7
+
+### Patch Changes
+
+- Updated dependencies [c383eb68]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.7
+
+## 1.0.1-6-next.6
+
+### Patch Changes
+
+- Updated dependencies [d167f92e]
+  - @verdaccio/test-cli-commons@1.1.0-6-next.6
+
+## 1.0.1-6-next.5
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.5
+
+## 1.0.1-6-next.4
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.4
+
+## 1.0.1-6-next.3
+
+### Patch Changes
+
+- 351aeeaa: fix(deps): @verdaccio/utils should be a prod dep of local-storage
+- Updated dependencies [351aeeaa]
+  - @verdaccio/test-cli-commons@1.0.1-6-next.3
+
+## 1.0.1-6-next.2
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.2
+
+## 1.0.1-6-next.1
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.1
+
+## 1.0.1-6-next.0
+
+### Patch Changes
+
+- @verdaccio/test-cli-commons@1.0.1-6-next.0

e2e/cli/e2e-npm11/audit.spec.ts

@@ -0,0 +1,9 @@
+import { describe } from 'vitest';
+
+import { runAudit } from '@verdaccio/e2e-cli-npm-common';
+
+import { npm } from './utils';
+
+describe('audit a package', () => {
+  runAudit(npm);
+});