fix(deps): update all package managers (master) (#4511)

* fix(deps): update all package managers

* fix tests

* test

* improve ci

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Juan Picado <juanpicado19@gmail.com>

.github/workflows/e2e-ci.yml

@@ -3,6 +3,9 @@ name: E2E CLI
 on: [pull_request]
 permissions:
   contents: read
+concurrency:
+  group: e2e
+  cancel-in-progress: true
 jobs:
   prepare:
     runs-on: ubuntu-latest

.github/workflows/e2e-ui.yml

@@ -3,6 +3,9 @@ name: E2E UI
 on: [pull_request]
 permissions:
   contents: read
+concurrency:
+  group: e2e
+  cancel-in-progress: true  
 jobs:
   test:
     runs-on: ubuntu-latest

e2e/cli/e2e-npm10/package.json

@@ -4,7 +4,7 @@
   "version": "1.0.1",
   "dependencies": {
     "@verdaccio/test-cli-commons": "workspace:1.1.0",
-    "npm": "10.3.0"
+    "npm": "10.4.0"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-yarn2/audit.spec.ts

@@ -18,7 +18,7 @@ describe('audit a package yarn 2', () => {
       {
         packageName: '@scope/name',
         version: '1.0.0',
-        dependencies: { jquery: '3.0.0' },
+        dependencies: { aaa: 'latest' },
         devDependencies: {},
       }
     );
@@ -27,6 +27,9 @@ describe('audit a package yarn 2', () => {
 
   test('should run yarn npm audit info json body', async () => {
     await yarn(projectFolder, 'install');
+    // this might fails if the dependency used above has vulnerabilities
+    // always try to use ar real dependency that does not have such issues
+    // yarn berry uses exit 1 if has error https://github.com/yarnpkg/berry/pull/4358
     const resp = await yarn(projectFolder, 'npm', 'audit', '--json');
     const parsedBody = JSON.parse(resp.stdout as string);
     expect(parsedBody.advisories).toBeDefined();

e2e/cli/e2e-yarn3/audit.spec.ts

@@ -12,13 +12,13 @@ describe('audit a package yarn 3', () => {
     registry = setup.registry;
     await registry.init();
     const { tempFolder } = await yarnModernUtils.prepareYarnModernProject(
-      'yarn-2',
+      'yarn-3',
       registry.getRegistryUrl(),
       getYarnCommand(),
       {
         packageName: '@scope/name',
         version: '1.0.0',
-        dependencies: { jquery: '3.0.0' },
+        dependencies: { aaa: 'latest' },
         devDependencies: {},
       }
     );
@@ -27,6 +27,9 @@ describe('audit a package yarn 3', () => {
 
   test('should run yarn npm audit info json body', async () => {
     await yarn(projectFolder, 'install');
+    // this might fails if the dependency used above has vulnerabilities
+    // always try to use ar real dependency that does not have such issues
+    // yarn berry uses exit 1 if has error https://github.com/yarnpkg/berry/pull/4358
     const resp = await yarn(projectFolder, 'npm', 'audit', '--json');
     const parsedBody = JSON.parse(resp.stdout as string);
     expect(parsedBody.advisories).toBeDefined();

e2e/cli/e2e-yarn3/package.json

@@ -4,7 +4,7 @@
   "version": "1.0.1",
   "dependencies": {
     "@verdaccio/test-cli-commons": "workspace:1.1.0",
-    "@yarnpkg/cli-dist": "3.4.1"
+    "@yarnpkg/cli-dist": "3.8.0"
   },
   "scripts": {
     "test": "jest"

e2e/cli/e2e-yarn4/package.json

@@ -3,7 +3,7 @@
   "name": "@verdaccio/e2e-cli-yarn4",
   "version": "1.0.1",
   "dependencies": {
-    "@yarnpkg/cli-dist": "4.0.0-rc.39",
+    "@yarnpkg/cli-dist": "4.1.0",
     "@verdaccio/test-cli-commons": "workspace:1.1.0"
   },
   "scripts": {

package.json

@@ -110,7 +110,7 @@
     "lint-staged": "11.2.6",
     "nock": "13.5.1",
     "nodemon": "3.0.3",
-    "npm-run-all2": "5.0.0",
+    "npm-run-all2": "5.0.2",
     "prettier": "3.2.2",
     "react": "18.2.0",
     "react-dom": "18.2.0",

pnpm-lock.yaml

@@ -294,8 +294,8 @@ importers:
         specifier: 3.0.3
         version: 3.0.3
       npm-run-all2:
-        specifier: 5.0.0
+        specifier: 5.0.2
-        version: 5.0.0
+        version: 5.0.2
       prettier:
         specifier: 3.2.2
         version: 3.2.2
@@ -381,8 +381,8 @@ importers:
         specifier: workspace:1.1.0
         version: link:../cli-commons
       npm:
-        specifier: 10.3.0
+        specifier: 10.4.0
-        version: 10.3.0
+        version: 10.4.0
 
   e2e/cli/e2e-npm6:
     dependencies:
@@ -471,8 +471,8 @@ importers:
         specifier: workspace:1.1.0
         version: link:../cli-commons
       '@yarnpkg/cli-dist':
-        specifier: 3.4.1
+        specifier: 3.8.0
-        version: 3.4.1
+        version: 3.8.0
 
   e2e/cli/e2e-yarn4:
     dependencies:
@@ -480,8 +480,8 @@ importers:
         specifier: workspace:1.1.0
         version: link:../cli-commons
       '@yarnpkg/cli-dist':
-        specifier: 4.0.0-rc.39
+        specifier: 4.1.0
-        version: 4.0.0-rc.39
+        version: 4.1.0
 
   e2e/ui:
     devDependencies:
@@ -6145,7 +6145,7 @@ packages:
     dependencies:
       '@babel/core': 7.23.7
       '@babel/helper-plugin-utils': 7.22.5
-      '@babel/helper-validator-option': 7.23.5
+      '@babel/helper-validator-option': 7.22.15
       '@babel/plugin-transform-react-display-name': 7.23.3(@babel/core@7.23.7)
       '@babel/plugin-transform-react-jsx': 7.22.15(@babel/core@7.23.7)
       '@babel/plugin-transform-react-jsx-development': 7.22.5(@babel/core@7.23.7)
@@ -12804,15 +12804,15 @@ packages:
     hasBin: true
     dev: false
 
-  /@yarnpkg/cli-dist@3.4.1:
+  /@yarnpkg/cli-dist@3.8.0:
-    resolution: {integrity: sha512-165Y6mm0chgIcjdY2MsJJbm9eYFqnpU2HN+xy6yEltngxld11EBdGCNCHXzL2pvxqlHzL2V3OnIDa7diov1wng==}
+    resolution: {integrity: sha512-4F7xnr7HfyXaKSe2fuAaQcb9qPlGUWFo421uPJf8PDt5seOBDXsQ5nub1KS4lKHjL922D/T5Ff2dGBkD0kAYIA==}
     engines: {node: '>=12 <14 || 14.2 - 14.9 || >14.10.0'}
     hasBin: true
     dev: false
 
-  /@yarnpkg/cli-dist@4.0.0-rc.39:
+  /@yarnpkg/cli-dist@4.1.0:
-    resolution: {integrity: sha512-+0+bPZ8/2CSaRrG+2XE6p3noeOzaQpjBZI37ieBkG0BOc+jKGtjhJDxrO4LO1BRRdTQcPqX3nI5U1BxOMGMRfQ==}
+    resolution: {integrity: sha512-wp1+8TqjlwB4uV73KlDX6iSNWzcUSCsR1nwG5nPUOYbqIoWomJ4A57jP0wU+mdtGRy+hlKrK6XR6WD/vvKy2YQ==}
-    engines: {node: '>=14.15.0'}
+    engines: {node: '>=18.12.0'}
     hasBin: true
     dev: false
 
@@ -23288,12 +23288,12 @@ packages:
   /normalize.css@8.0.1:
     resolution: {integrity: sha512-qizSNPO93t1YUuUhP22btGOo3chcvDFqFaj2TRybP0DMxkHOCTYwp3n34fel4a31ORXy4m1Xq0Gyqpb5m33qIg==}
 
-  /npm-run-all2@5.0.0:
+  /npm-run-all2@5.0.2:
-    resolution: {integrity: sha512-twczQhEpj55UROtg0Xz0nzn83TanS5Re12g5g1hcdnyAhlWOt9VNHdSHf2Z6MO3/wOVqy9tEdi0ruJt5NnMgmw==}
+    resolution: {integrity: sha512-S2G6FWZ3pNWAAKm2PFSOtEAG/N+XO/kz3+9l6V91IY+Y3XFSt7Lp7DV92KCgEboEW0hRTu0vFaMe4zXDZYaOyA==}
     engines: {node: '>= 10'}
     hasBin: true
     dependencies:
-      ansi-styles: 4.3.0
+      ansi-styles: 5.2.0
       cross-spawn: 7.0.3
       memorystream: 0.3.1
       minimatch: 3.1.2
@@ -23319,8 +23319,8 @@ packages:
     engines: {node: '>=6.0.0'}
     dev: false
 
-  /npm@10.3.0:
+  /npm@10.4.0:
-    resolution: {integrity: sha512-9u5GFc1UqI2DLlGI7QdjkpIaBs3UhTtY8KoCqYJK24gV/j/tByaI4BA4R7RkOc+ASqZMzFPKt4Pj2Z8JcGo//A==}
+    resolution: {integrity: sha512-RS7Mx0OVfXlOcQLRePuDIYdFCVBPCNapWHplDK+mh7GDdP/Tvor4ocuybRRPSvfcRb2vjRJt1fHCqw3cr8qACQ==}
     engines: {node: ^18.17.0 || >=20.5.0}
     hasBin: true
     dev: false
@@ -23387,7 +23387,6 @@ packages:
       - semver
       - spdx-expression-parse
       - ssri
-      - strip-ansi
       - supports-color
       - tar
       - text-table