Pull requests

• chore(deps): update dependency vite to v8.2.4 [security] (7.x)

  bot: dependencies
  #6378·renovate[bot] opened Oct 21, 2026Bot·1 task·

  ·
  2

• chore(deps): update dependency vite to v8.2.4 [security] (8.x)

  bot: dependencies
  #6377·renovate[bot] opened Oct 21, 2026Bot·1 task·

  ·
  2

• chore(deps): update dependency vite to v8.2.4 [security] (master)

  bot: dependencies
  #6376·renovate[bot] opened Oct 21, 2026Bot·1 task·

  ·
  2

• chore(deps-dev): bump the npm_and_yarn group across 33 directories with 1 update

  dependenciesjavascript
  #6375·dependabot[bot] opened Oct 21, 2026Bot·

  ·
  2

• chore: update versions (next-9)

  #6369·verdacciopack opened Oct 20, 2026Collaborator·

  ·
  1

• fix(store): validate publish attachments and await upload finalization

  7.x branch (next)feat: storageissue: bugplugin: local-storage
  #6367·dianmorales opened Oct 18, 2026Collaborator·

  ·
  3

• fix(ui): move password changes to the authenticated account menu

  7.x branch (next)feat: authissue: bugtopic: web
  #6366·dianmorales opened Oct 18, 2026Collaborator·

  ·
  1

• chore(deps): update all actions (7.x)

  bot: dependencies
  #6364·renovate[bot] opened Oct 18, 2026Bot·1 task·

  ·
  1

• test(auth): cover concurrent lockout for TfaStore.verify()

  7.x branch (next)AI assistedfeat: authskip changesettopic: testing
  #6288·Sajid-Ali opened Sep 29, 2026·

  ·
  4

• chore(deps): update dependency @crowdin/cli to v5 (master)

  bot: dependencies
  #6230·renovate[bot] opened Sep 6, 2026Bot·1 task·

  ·
  2

• fix(local-storage-legacy): confine storage file paths to the storage root

  #6164·jotadeveloper opened Aug 25, 2026Collaborator·

  ·
  2

• Fix: Fallback to the default auth/apiJWTmiddleware if a plugin doesn't authenticate a remote_user.

  #6079·jeroen1602 opened Jul 27, 2026·

  ·
  3

• Docs/verdaccio 7 release

  7.x branch (next)
  #6065·juanpicado opened Jul 26, 2026Member·

  ·
  1

• Speed up npm search with package filter plugins by parallelizing local manifest filtering

  #5881·juanpicado with CopilotAI opened May 16, 2026·

  ·
  1

  5

  

• fix: validate tarball URL origin against configured uplink

  6.x branch (latest)dev: work in progressissue: bug
  #5760·juanpicado opened Mar 29, 2026Member·

  ·