chore(deps): update npm to v11 #36
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/npm-11.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
^10.0.0->^11.0.0Release Notes
npm/cli (npm)
v11.0.0Compare Source
Documentation
8a911da#7963 ls: removed design change pending section note (#7963) (@milaninfy)Dependencies
5319e48#7973 remove unnecessary sprintf-js files in node_modules (#7973)d369c77#7976socks-proxy-agent@8.0.53b2951a#7976https-proxy-agent@7.0.6a598b7b#7976agent-base@7.1.352bcaf6#7976debug@4.4.0aabf345#7976p-map@7.0.328e8761#7976npm-package-arg@12.0.1Chores
ecd7190#7976 dev dependency updates (@wraithgar)a07f4e0#7976@npmcli/template-oss@4.23.6(@wraithgar)687ab12#7970 remove pre-release mode from npm 11 and workspaces (#7970) (@wraithgar)@npmcli/arborist@9.0.0@npmcli/config@10.0.0libnpmaccess@10.0.0libnpmdiff@8.0.0libnpmexec@10.0.0libnpmfund@7.0.0libnpmorg@8.0.0libnpmpack@9.0.0libnpmpublish@11.0.0libnpmsearch@9.0.0libnpmteam@8.0.0libnpmversion@8.0.0v10.9.2Compare Source
Dependencies
ae9345e#7959@npmcli/run-script@9.0.239a19b3#7959node-gyp@11.0.093e2186#7956@npmcli/map-workspaces@4.0.2bf0ea00#7956@npmcli/package-json@6.1.0c84baa3#7956init-package-json@7.0.2e642099#7956node-gyp@10.3.1v10.9.1Compare Source
Bug Fixes
c7fe0db#7924 perf: enable compile cache if present (#7924) (@H4ad)Dependencies
a221db7#7931npm-install-checks@7.1.1fbad17a#7931hosted-git-info@8.0.265d2a86#7922@sigstore/tuf@3.0.0be45963#7922sigstore@3.0.0fb0bfbd#7922spdx-license-ids@3.0.20ccadf2a#7922promise-call-limit@3.0.2b25712e#7922package-json-from-dist@1.0.11c9e96f#7922negotiator@0.6.4f13bc9c#7922debug@4.3.7029060c#7922cross-spawn@7.0.69350950#7922@npmcli/metavuln-calculator@8.0.1c003827#7922ansi-regex@6.1.0d6194f5#7922pacote@19.0.14ff29f6#7922npm-registry-fetch@18.0.2fd6f4fb#7922make-fetch-happen@14.0.3b3f3004#7922ci-info@4.1.0a1f9d48#7922promise-spawn@8.0.2Chores
3ace1c1#7922 update arborist in mock-registry (@wraithgar)libnpmpublish@10.0.1v10.9.0Compare Source
Features
4d57928#7766 devEngines (#7766) (@reggi)Bug Fixes
6ca609e#7789 ping and doctor commands fix for checking if registry is online (#7789) (@milaninfy)Documentation
63d6a73#7783 package.json: add brief section on exports, link to Node.js docs (#7783) (@wheresrhys)366c07e#7776 remove incorrect note about npm install (#7776) (@wraithgar)Dependencies
60a7ee5#7803 hoist npm-normalize-package-bin20dd44f#7803 hoist minipass-fetch5795987#7803 updateproggy@3.0.099ccae3#7803 updatebin-links@5.0.075786ad#7803 update@npmcli/query@4.0.01c25a1d#7803 update@npmcli/node-gyp@4.0.02d7fc3d#7803 update@npmcli/name-from-folder@3.0.01e09334#7803 update@npmcli/metavuln-calculator@8.0.0820e983#7803 update@npmcli/installed-package-contents@3.0.09cd6603#7803 updateread-package-json-fast@4.0.0b84d907#7803 update@npmcli/git@6.0.153ed632#7803 updatewrite-file-atomic@6.0.0ab40dab#7803 updatewhich@5.0.0b1c4770#7803 updatevalidate-npm-package-name@6.0.08206c4f#7803 updatessri@12.0.08b7dbc8#7803 updateread@4.0.0f6909a0#7803 updateproc-log@5.0.0f9b2e18#7803 updateparse-conflict-json@4.0.0e7ab206#7803 updatepacote@19.0.0b28dbb1#7803 updatenpm-user-validate@3.0.0d13a20b#7803 updatenpm-registry-fetch@18.0.15208f74#7803 updatenpm-profile@11.0.1092f41f#7803 updatenpm-pick-manifest@10.0.050a7bc8#7803 updatenpm-package-arg@12.0.0591130d#7803 updatenpm-install-checks@7.1.0be6ae96#7803 updatenpm-audit-report@6.0.08d4060a#7803 updatenormalize-package-data@7.0.0105fa2b#7803 updatenopt@8.0.0eae4f57#7803 updatemake-fetch-happen@14.0.17214149#7803 updatejson-parse-even-better-errors@4.0.0c4bed31#7803 updateinit-package-json@7.0.1f54b155#7803 updateini@5.0.06deae9e#7803 updatehosted-git-info@8.0.0034c729#7803 updatecacache@19.0.1ddb8be0#7803 updateabbrev@3.0.0538a4cc#7803 update@npmcli/run-script@9.0.1b80d048#7803 update@npmcli/redact@3.0.081137fc#7803 update@npmcli/promise-spawn@8.0.12076368#7803 update@npmcli/package-json@6.0.1feac87c#7803 update@npmcli/map-workspaces@4.0.1dd90f9e#7803 update@npmcli/fs@4.0.0Chores
95e2cb1#7810 ignore .github folder in release-please (@reggi)be1e6da#7803 updateminify-registry-metadata@4.0.0(@reggi)43f2374#7803 updateignore-walk@7.0.0(@reggi)bb03036#7803 updatenpm-packlist@9.0.0(@reggi)2072705#7803 update@npmcli/eslint-config@5.0.1(@reggi)949d8f8#7803 engine ^18.17.0 || >=20.5.0 in package template (@reggi)fefd509#7764 deps: bump actions/download-artifact from 3 to 4 in /.github/workflows (#7764) (@dependabot[bot], @wraithgar)@npmcli/arborist@8.0.0@npmcli/config@9.0.0libnpmaccess@9.0.0libnpmdiff@7.0.0libnpmexec@9.0.0libnpmfund@6.0.0libnpmhook@11.0.0libnpmorg@7.0.0libnpmpack@8.0.0libnpmpublish@10.0.0libnpmsearch@8.0.0libnpmteam@7.0.0libnpmversion@7.0.0v10.8.3Compare Source
Bug Fixes
7e61151#7759 docs: init usage description corrected (#7759) (@milaninfy)2404c7e#7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)91e46a3#7721 init: use locally installed version of given package (#7721) (@milaninfy)4e81a6a#7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)a947f25#7679 update lifecycle script list in run-script (#7679) (@sonsurim)Documentation
e674987#7743 update docs for npmrc and package-json (#7743) (@milaninfy)24d5350#7742 fix and update scoped configuration example (#7742) (@demedos)Dependencies
3fd7a48#7737lru-cache@10.4.3d7e462b#7737jackspeak@3.4.3df58b0c#7737glob@10.4.57342c24#7737foreground-child@3.3.02986f4e#7737cacache@18.0.4a44ab26#7737postcss-selector-parser@6.1.24e965ad#7737semver@7.6.312587fa#7737npm-package-arg@11.0.31a9ac86#7737debug@4.3.6a303ddd#7737node-gyp@10.2.0Chores
1772276#7756 fix duplicate changelog entries (@wraithgar)8035725#7756@npmcli/template-oss@4.23.3(@wraithgar)ed4add1#7737 dev dependency updates (@wraithgar)86b05fc#7683 allow for longer timer values (#7683) (@wraithgar)libnpmexec@8.1.4v10.8.2Compare Source
Bug Fixes
3101a40#7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)2273183#7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)15be6dd#7574 don't try parsing workspaces if none exist (@wraithgar)Documentation
ac937d4#7616 install: add save-peer flag (#7616) (@drew4237)55639ef#7615 use git+https in package.com url examples (#7615) (@MikeMcC399)93883bb#7582 Improve manpage section forpackage.jsonfundingproperties (#7582) (@kemitchell)92e71e6#7576 fix links to community discussions (#7576) (@leobalter)Dependencies
1c1adae#7636npm-pick-manifest@9.1.05e4fa18#7636socks-proxy-agent@8.0.4d8fa116#7636https-proxy-agent@7.0.576dab91#7636normalize-package-data@6.0.2094c4ea#7636minimatch@9.0.51c8d41d#7636@npmcli/git@5.0.8e5451e1#7605jackspeak@3.4.07b584d3#7605foreground-child@3.2.1941d0d7#7605debug@4.3.58b8ce7a#7605glob@10.4.24646768#7605npm-registry-fetch@17.1.06f0d7ce#7605@npmcli/redact@2.0.129204c8#7605@npmcli/package-json@5.2.004d6910#7574@npmcli/package-json@5.1.14ef4830#7574 remove read-package-json-fastChores
2490b49#7621 remove .github/workflows/benchmark.yml (#7621) (@wraithgar)3b8b111#7605 update devDependencies in lockfile (@wraithgar)v10.8.1Compare Source
Bug Fixes
6b55646#7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)e4c7a41#7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)8f94ae8#7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)2d1d8d0#7559 addsnode:specifier to all native node modules (#7559) (@reggi)7d89b55#7490 ci: rm workspace node_modules (#7490) (@reggi)9122fb6#7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)9e6686b#7545 send proper otp token on web auth (#7545) (@wraithgar)b1db070#7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)53cda32#7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)61d5771#7541 remove json.stringify from all commands (#7541) (@lukekarrys)4dfc7d2#7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)3cefdf6#7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)ef4c975#7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)Documentation
fd6479f#7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)Dependencies
e3f0fd4#7568@npmcli/package-json@5.1.1447a8d7#7566spdx-license-ids@3.0.1883fed2e#7566sigstore@2.3.141291ba#7566@sigstore/tuf@2.3.418b42a4#7566glob@10.4.15c6759d#7566postcss-selector-parser@6.1.02508a83#7566is-cidr@5.1.06278fe4#7566ini@4.1.310.8.1 (2024-05-29)
Bug Fixes
6b55646#7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)e4c7a41#7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)8f94ae8#7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)2d1d8d0#7559 addsnode:specifier to all native node modules (#7559) (@reggi)7d89b55#7490 ci: rm workspace node_modules (#7490) (@reggi)9122fb6#7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)9e6686b#7545 send proper otp token on web auth (#7545) (@wraithgar)b1db070#7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)53cda32#7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)61d5771#7541 remove json.stringify from all commands (#7541) (@lukekarrys)4dfc7d2#7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)3cefdf6#7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)ef4c975#7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)Documentation
fd6479f#7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)Dependencies
e3f0fd4#7568@npmcli/package-json@5.1.1447a8d7#7566spdx-license-ids@3.0.1883fed2e#7566sigstore@2.3.141291ba#7566@sigstore/tuf@2.3.418b42a4#7566glob@10.4.15c6759d#7566postcss-selector-parser@6.1.02508a83#7566is-cidr@5.1.06278fe4#7566ini@4.1.3Chores
2d84091#7568 fix snapshots for updated @npmcli/package-json (@wraithgar)6574dc9#7566 dev dependency updates (@wraithgar)Chores
2d84091#7568 fix snapshots for updated @npmcli/package-json (@wraithgar)6574dc9#7566 dev dependency updates (@wraithgar)v10.8.0Compare Source
Features
1e375c1#7442 create exit handler class (#7442) (@lukekarrys)Bug Fixes
d5c3289#7513 refactor: use output buffer and error for more commands (#7513) (@lukekarrys)12f103c#7533 add first param titles to logs where missing (#7533) (@lukekarrys)badeac2#7521 config: use redact on config output (#7521) (@lukekarrys)76aef74#7520 view: refactor exec and execWorkspaces to call same methods (#7520) (@lukekarrys)b54cdb8#7515 refactor: create new error output primitives (#7515) (@lukekarrys)e40454c#7506 view: dont unwrap arrays in json mode (#7506) (@lukekarrys)6f64148require stdout to be a TTY for progress (#7507) (@lukekarrys)db62910#7504 config: be more aggressive about hiding protected values (#7504) (@wraithgar)6d456bb#7497 dont write log file for completion commands (#7497) (@lukekarrys)722c0fa#7463 limit packument cache size based on heap size (@wraithgar)ca1a68d#7474 log ifnpm deprecatedoes not match any version (#7474) (@mbtools)261ea19#7457 run input.start around help and openining urls (@lukekarrys)4ab6cf4#7459 publish: validate dist-tag (#7459) (@reggi)Documentation
b2ce025#7518 suggest correct bin entry (#7518) (@Santoshraj2)bdd2aae#7502 remove obsolete removal using make uninstall (#7502) (@avinal)c3d2819#7496 npm help json/global command on windows (#7496) (@klm-turing, @lukekarrys)268303c#7479 add npm version to every local help output (#7479) (@klm-turing)e39d422#7473 suggest "npm repo" for showing the repo of a package (#7473) (@full-stop)f6fff32#7433 clarify what peerDependenciesMeta does (#7433) (@xuhdev, @wraithgar)Dependencies
1cdc662#7522@tufjs/repo-mock@2.0.1898bcfd#7522@sigstore/protobuf-specs@0.3.2fec3c94#7522path-scurry@1.11.1cb85973#7522glob@10.3.15e189873#7498@sigstore/sign@2.3.1c2b28f9#7498minipass@7.1.19064ffc#7498@sigstore/tuf@2.3.3fd42986#7498@npmcli/fs@3.1.14e53e33#7498semver@7.6.2f078c82#7495glob@10.3.1458f773c#7495path-scurry@1.11.0ea0b07d#7482pacote@18.0.68d161a4#7482semver@7.6.15b2317b#7463 add lru-cache26fefb8#7480promzard@1.0.22146e1f#7480npm-bundled@3.0.1ff6c5d1#7480minipass-fetch@3.0.5419f9b9#7480cmd-shim@6.0.3dade2c8#7480minipass@7.1.018e5312#7480validate-npm-package-name@5.0.1d440011#7480npm-user-validate@2.0.1552113e#7480ignore-walk@6.0.57e15b6d#7480@npmcli/metavuln-calculator@7.1.18b20f8c#7480ssri@10.0.6a9a6dcd#7480pacote@18.0.5e2fdb65#7480npm-pick-manifest@9.0.1310a7a5#7480normalize-package-data@6.0.1e71f541#7480nopt@7.2.118c3b40#7480json-parse-even-better-errors@3.0.24c5bf77#7480init-package-json@6.0.3714e3e1#7480hosted-git-info@7.0.2f94d672#7480cacache@18.0.343331e4#7480bin-links@4.0.48234412#7480@npmcli/promise-spawn@7.0.26dfaebb#7480@npmcli/git@5.0.763ef498#7457npm-registry-fetch@17.0.14cbc2d4#7457npm-profile@10.0.0Chores
10256e8#7522 dev dependency updates (@wraithgar)dcfc3de#7517 convert run-script tests to snapshots (#7517) (@lukekarrys)8add914#7505 create single bug report issue template (#7505) (@lukekarrys)7c7fba4#7500 benchmarks: fix emoji reaction to comment (#7500) (@lukekarrys)d3b9587#7494 disable progress on npm pack test (@wraithgar)67ebb66#7494 disable color in config tests (@wraithgar)2ec2e75#7494 disable progress on shellout exit tests (@wraithgar)e9fdc9a#7483 create smoke-publish-test.sh script (#7483) (@lukekarrys)1524cfd#7484 remove extra quotes from benchmark event_type (#7484) (@lukekarrys)9c4d3c4#7467 template-oss-apply (@lukekarrys)2b7ec54#7467template-oss@4.22.0(@lukekarrys)8ded848#7457 remove doctor snapshot stack traces (@lukekarrys)v10.7.0Compare Source
Features
7e349f4#7432 add spinner (#7432) (@lukekarrys)Bug Fixes
d679ce8#7449 linting: no-unused-vars (@wraithgar)2558283#7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)bc4c342#7448 account for registries with no publisher in search (#7448) (@wraithgar)bcc781a#7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)104fcb5#7438 remove doctor log for each file permission check (#7438) (@lukekarrys)5230647#7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)71cbd91#7421 hide banner for exec and explore (#7421) (@lukekarrys)57ebebf#7418 update repository.url in package.json (#7418) (@wraithgar)Documentation
1674136#7441 correct search help output (#7441) (@wraithgar)Dependencies
80eec03#7453@npmcli/redact@2.0.0a7145d4#7453npm-registry-fetch@17.0.0a785766#7453pacote@18.0.365d76db#7453npm-profile@9.0.2cadc0f0#7449 hoist production copy of sprintf-js2cffdfe#7449lru-cache@10.2.2432efb5#7449make-fetch-happen@13.0.19da5738#7437@npmcli/run-script@8.1.0(#7437)762888a#7429 update dependencies for workspaces (#7429)@npmcli/arborist@7.5.1@npmcli/config@8.3.1libnpmaccess@8.0.5libnpmdiff@6.1.1libnpmexec@8.1.0libnpmfund@5.0.9libnpmhook@10.0.4libnpmorg@6.0.5libnpmpack@7.0.1libnpmpublish@9.0.7libnpmsearch@7.0.4libnpmteam@6.0.4libnpmversion@6.0.1Chores
356c374#7453 fix test fixture for new redact behavior (@wraithgar)2fba4b7#7449 update devDependencies in lockfile (@wraithgar)v10.6.0Compare Source
Features
9123de4#7373 do all ouput over proc-log events (@lukekarrys)9622597#7339 refactor terminal display (#7339) (@lukekarrys)Bug Fixes
0e74ee4#7416 clean up npm object (#7416) (@wraithgar)c060e60#7415 return command and argv from load (@lukekarrys)180b919#7415 remove unused npm.setCmd method (@lukekarrys)0708b3b#7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)7f4e667#7403 redact when displaying non-ascii arguments (@lukekarrys)06202f0#7403 store unref promises for awaiting in tests (@lukekarrys)e5f1948#7403 run update notifier after exec but before waiting (@lukekarrys)f309c1c#7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)43e6194#7403 dont show run script banners in silent (@lukekarrys)694dba9#7403 dont expose as many public properties of timers (@lukekarrys)7ca6d84#7403 use proc-log META for flush and force (@lukekarrys)2538438#7403 dont write timing logs to file unless requested (@lukekarrys)7e04417#7403 rename base-cmd to match other commands (@lukekarrys)fc68547#7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)28019d5#7403 cleanup: move cli specific files to separate dir (@lukekarrys)469f788#7403 cleanup: newlines and whitespace (@lukekarrys)4ab6401#7403 cleanup: dont nest files utils dir (@lukekarrys)78447d7#7399 prefer fs/promises over promisify (#7399) (@lukekarrys)d531f8b#7407 Remove table output from search and tar summary (@wraithgar)c209e98#7401 Remove table output from many commands (@wraithgar)ad7ab8c#7388 perf: lazy loading optimizations (#7388) (@wraithgar)8eae4b3#7385 token: properly await registry request (#7385) (@wraithgar)9216d59#7377 better output colors (#7377) (@wraithgar)6512112#7378 use proc-log for all timers (@lukekarrys)2a80dab#7370 typo innpm accessusage (#7370) (@mbtools)Documentation
dfa4cab#7401 update output examples (@wraithgar)140b9c9#7382 package-json: note that line endings are inferred (#7382) (@ertw)c16dd4e#7367 Document that overrides only work in the rootpackage.json(#7367) (@s100)Dependencies
36adff3#7408pacote@18.0.2486d46c#7408@npmcli/installed-package-contents@2.1.0157d0ae#7408@npmcli/package-json@5.1.0b0ca163#7409 remove @npmcli/disparity-colorsc77f035#7407 remove columnify2ec690d#7401 move cli-table3 to devDependenciesfc6e291#7392proc-log@4.2.0(#7392)38ed048#7378@npmcli/metavuln-calculator@7.1.07678a3d#7378proc-log@4.1.087f6c09#7373@npmcli/metavuln-calculator@7.0.1b8f8b41#7373@npmcli/run-script@8.0.079f79c7#7373proc-log@4.0.09027266#7373pacote@18.0.0ee4b3e0#7373npm-registry-fetch@16.2.10e7789b#7373npm-profile@9.0.1ac98fd3#7373npm-package-arg@11.0.29351570#7373@npmcli/package-json@5.0.3d3a0cfa#7373@npmcli/git@5.0.6@npmcli/arborist@7.5.0@npmcli/config@8.3.0libnpmaccess@8.0.4libnpmdiff@6.1.0libnpmexec@8.0.0libnpmfund@5.0.8libnpmhook@10.0.3libnpmorg@6.0.4libnpmpack@7.0.0libnpmpublish@9.0.6libnpmsearch@7.0.3libnpmteam@6.0.3libnpmversion@6.0.0Chores
3cbc258#7403 test for early version exit (@lukekarrys)08e0c0e#7403 move sigstore json files to fixtures dir (@lukekarrys)ea66e95#7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)9333e9d#7386 reduce windows shim test flakes (#7386) (@lukekarrys)v10.5.2Compare Source
Bug Fixes
ef381b1#7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)3760dd2#7361 perf: do less work loading config (#7361) (@wraithgar)64bcf4c#7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)5a28a29#7352 perf: lazy load workspace dependency (#7352) (@H4ad)5fc0f9d#7347 lazy load validate npm package name on error message (#7347) (@H4ad)c929ed1#7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)70497cb#7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)Documentation
90ba1c9#7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)Dependencies
699a1de#7362@npmcli/map-workspaces@3.0.649fb9b7#7362socks@2.8.3f69052e#7362@npmcli/package-json@5.0.2c18a0ad#7357sigstore@2.3.0fd4153b#7357socks@2.8.2d6b705a#7357postcss-selector-parser@6.0.16248c177#7357hasown@2.0.24af9e86#7357builtins@5.1.07546b56#7357@npmcli/agent@2.2.2d38fd4f#7357spdx-expression-parse@4.0.0913b326#7357is-cidr@5.0.584bbbd4#7357@npmcli/package-json@5.0.1a0f5048#7357@npmcli/git@5.0.5@npmcli/arborist@7.4.2@npmcli/config@8.2.2libnpmdiff@6.0.9libnpmexec@7.0.10libnpmfund@5.0.7libnpmpack@6.0.9Chores
81be28d#7357 dev dependency updates (@wraithgar)v10.5.1Compare Source
Bug Fixes
17d97d2#7334 use @npmcli/redact for log redactions (@lukekarrys)8cab136#7324 ensure maxSockets is respected (#7324) (@lukekarrys)9bffa13#7320 query: properly return :missing nodes (#7320) (@wraithgar)9d4e85f#7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)bdb3c28#7274 added check for dry-run (#7274) (@cod1r)7f1ab88#7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)Documentation
1da5cf0#7198 add link to engines section (#7198) (@uiolee)1114a12#7307 fix incorrect npm audit key response link (#7307) (@davidlj95)9807caf#7304 update audit docs with provenance info (#7304) (@bdehamer)e1ecfa7#7285 Correct capitalization for URL (#7285) (@coliff)Dependencies
87a61fc#7334npm-registry-fetch@16.2.05469614#7327init-package-json@6.0.25469614#7327promzard@1.0.15469614#7327read@3.0.1(#7327)9ccff72#7329tar@6.2.17201a00#7329node-gyp@10.1.06fd94f2#7329minimatch@9.0.4b048592#7329ini@4.1.2c54a84a#7329glob@10.3.126853531#7329cli-table3@​0.6.4c9315cb#7329binary-extensions@2.3.05bb0031#7329@sigstore/tuf@2.3.28cab136#7324agent-base@7.1.1(@lukekarrys)@npmcli/arborist@7.4.1@npmcli/config@8.2.1libnpmaccess@8.0.3libnpmdiff@6.0.8libnpmexec@7.0.9libnpmfund@5.0.6libnpmhook@10.0.2libnpmorg@6.0.3libnpmpack@6.0.8libnpmpublish@9.0.5libnpmsearch@7.0.2libnpmteam@6.0.2Chores
8cab136#7324 add smoke-test for large prod installs (@lukekarrys)0dab381#7258jsdom@24.0.0(#7258) (@wraithgar)af3c48e#7262 test refactor (#7262) (@wraithgar)v10.5.0Compare Source
Features
2366edc#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb#5966 add --expect-entries tonpm query(@wraithgar)Bug Fixes
818957c#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)Documentation
c4741fe#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9#7182 fix typos (#7182) (@GoodDaisy)Dependencies
16d4c9f#7218@npmcli/query@3.1.006247d1#7242spdx-license-ids@3.0.1779d1e0b#7242spdx-exceptions@2.5.067e853a#7242socks@2.8.04c9fe4b#7242lru-cache@10.2.04a50c5a#7242https-proxy-agent@7.0.4ed3f254#7242http-proxy-agent@7.0.28ec4fd5#7242hasown@2.0.198b1189#7242@npmcli/agent@2.2.1dafa903#7242sigstore@2.2.2d0bcb76#7242diff@5.2.0a13808e#7242semver@7.6.0d6521ac#7242@sigstore/tuf@2.3.143cac2f#7242ip@2.0.1@npmcli/arborist@7.4.0@npmcli/config@8.2.0libnpmdiff@6.0.7libnpmexec@7.0.8libnpmfund@5.0.5libnpmpack@6.0.7Chores
d6bc684#7242 update devDependencies in lockfile (@wraithgar)v10.4.0Compare Source
Features
35a098c#7175 display tree diff on--long(@wraithgar)dffca29#7174 format: print--dry-rundiffs in table format (#7174) (@ritaaktay)6d5f9ac#7133 dedupe - display difference when--dry-runis enabled (#7133) (@Blaumaus)Bug Fixes
ec06f77#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)Documentation
2b7eaad#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc#7150 config: State default configuration file affected bynpm config set(#7150) (@DanKaplanSES)44f4518#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)Dependencies
ec77e81#7124promise-call-limit@3.0.1e32189c#7173 deduplicate treeb7af4d9#7173tar-stream@3.1.76883743#7173@npmcli/run-script@7.0.4739634d#7157 remove strip-ansi162c82e#7148pacote@17.0.6(#7148) (@bdehamer)a50b03b#7141sigstore@2.2.0(#7141) (@bdehamer)f696b51#7132@sigstore/tuf@2.3.0(#7132) (@bdehamer)@npmcli/arborist@7.3.1libnpmdiff@6.0.6libnpmexec@7.0.7libnpmfund@5.0.4libnpmpack@6.0.6libnpmpublish@9.0.4Chores
a82ccc5#7173nock@13.5.0(@wraithgar)dcaa99c#7173 fix exec test (@wraithgar)0d96080#7162 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)v10.3.0Compare Source
Features
6673c77#6914 add--libcoption to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)Bug Fixes
b7fc10a#7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)Dependencies
3fd5213#7121npm-packlist@8.0.25698415#7121postcss-selector-parser@6.0.15e56a4f3#7121are-we-there-yet@4.0.28495b7c#7121cacache@18.0.2796d1c7#7121@npmcli/run-script@7.0.33b7f6f2#7121@npmcli/promise-spawn@7.0.17ecd146#7121npmcli/git@5.0.4@npmcli/arborist@7.3.0@npmcli/config@8.1.0libnpmdiff@6.0.5libnpmexec@7.0.6libnpmfund@5.0.3libnpmpack@6.0.5Chores
2fd8292#7121 work around @npmcli/git lazy loading (@wraithgar)cd9a66d#7121 update devDependencies in lockfile (@wraithgar)2dda715#7121tap@16.3.10(@wraithgar)v10.2.5Compare Source
Bug Fixes
c7a592c#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231#7033 skip creation of log directory iflogs-maxis set to 0 (#7033) (@JJ)6267f54#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)Dependencies
ff1204a#7058lru-cache@10.1.0c648020#7058json-parse-even-better-errors@3.0.153aa8f2#7058pacote@17.0.52e5331c#7058npm-packlist@8.0.1937b7b7#7058ignore-walk@6.0.435371c8#7058cacache@18.0.1@npmcli/arborist@7.2.2@npmcli/config@8.0.3libnpmaccess@8.0.2libnpmdiff@6.0.4libnpmexec@7.0.5libnpmfund@5.0.2libnpmhook@10.0.1libnpmorg@6.0.2libnpmpack@6.0.4libnpmpublish@9.0.3libnpmsearch@7.0.1libnpmteam@6.0.1libnpmversion@5.0.2Chores
f656b66#7062@npmcli/template-oss@4.21.3(#7062) (@lukekarrys)9754b17#7051 use global npm for workspace tests (@lukekarrys)3891757#7051@npmcli/template-oss@4.21.2(@lukekarrys)71f70fa#7058nock@13.4.0(@wraithgar)43674a4#7058tap@16.3.9(@wraithgar)4ba585c#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)v10.2.4Compare Source
Bug Fixes
cd291e7#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08#6951 properly catch missing url opener error (#6951) (@wraithgar)Documentation
a38836c#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f#6987 update npm-prune description (#6987) (@Eomm)Dependencies
e9ec2f7#6994lru-cache@10.0.2faf9eff#6994is-core-module@2.13.1b00e780#6994@sigstore/sign@2.2.04613774#6994 hoisting newer deps in favor of older ones54c4f7b#6994signal-exit@4.1.08c5882f#6994strip-ansi@7.1.0cd0c649#6994ci-info@4.0.0a0a58b7#6994@sigstore/tuf@2.2.0b3a53c6#6949is-cidr@5.0.3(#6949)@npmcli/config@8.0.2libnpmexec@7.0.4libnpmpublish@9.0.2v10.2.3Compare Source
Dependencies
b5dedf3#6958node-gyp@10.0.1v10.2.2Compare Source
Bug Fixes
8ed6d28#6910 make npm link respect --no-save (#6910) (@Santoshraj2)eacec5f#6941 add back bin/node-gyp-bin/node-gyp files (#6941) (@lukekarrys)b776753#6928 Grammar mistake in authentication error message (#6928) (@Gekuro, gek)Documentation
c422a01#6924 use markdown links instead of html (@lukekarrys)dd03aa0#6921 add v9 and above for lockfile version 3 (#6921) (@MikeMcC399)Dependencies
dfb6298#6937node-gyp@10.0.0(#6937)@npmcli/arborist@7.2.1libnpmdiff@6.0.3libnpmexec@7.0.3libnpmfund@5.0.1libnpmpack@6.0.3libnpmversion@5.0.1v10.2.1Compare Source
Bug Fixes
35c92fe#6902 Add check to pkg command to deal with empty values (#6902) (@NeonArray)5b6172f#6895 logout from custom registry (@wraithgar)8423d4f#6895 delete auth from proper location on logout (@wraithgar)0cfe9de#6873 audit: spelling error in message (#6873) (@Fdawgs)Documentation
5142735#6894 update npm build description (#6894) (@siemhesda)2e4b4ad#6861 npm publish content modification (#6861) (@jpg619)Dependencies
96e1637#6915cmd-shim@6.0.2(#6915)b405da1#6899bin-links@4.0.3ef69d36#6895npm-registry-fetch@16.1.0337c903#6882spdx-license-ids@3.0.16e6b0be7#6882socks-proxy-agent@8.0.2ee6892e#6882readable-stream@4.4.261c3ee9#6882minipass@7.0.414d31fd#6882is-core-module@2.13.003f3d2e#6882https-proxy-agent@7.0.2e0163c6#6882are-we-there-yet@4.0.1fca804a#6882ci-info@3.9.06af582f#6882npm-install-checks@6.3.0@npmcli/config@8.0.1v10.2.0Compare Source
Features
7c459d2#6801 add npm sbom command (#6801) (@bdehamer)81a460f#6732 add package-lock-only mode to npm query (@wraithgar)0d29855#6732 add no-package-lock mode to npm audit (@wraithgar)Bug Fixes
2207628#6823 use strip-ansi module instead of internal regex (#6823) (@wraithgar)d46d052#6798 tolerate null bugs URLs (#6798) (@vladh)fb1b674#6758 deprecate: ignore implicit workspace mode (#6758) (@wraithgar)Documentation
68031f2#6844 updateCONTRIBUTING.mdto prevent errors (#6844) (@darcyclarke)3ac703c#6831 addincludeparam to commands that haveomitparam (#6831) (@siemhesda)03912db#6819 add init-specific params to init docs/help (#6819) (@wraithgar)8088325#6800 Update npm-doctor.md (#6800) (@siemhesda)Dependencies
aa6728b#6859tar@6.2.0ce9089f#6859npm-package-arg@11.0.139d7f04#6859minipass@7.0.40a47af5#6859hosted-git-info@7.0.1af93130#6859glob@10.3.103ebc474#6859@npmcli/query@3.0.1284cbfd#6858@npmcli/agent@2.2.0@npmcli/arborist@7.2.0@npmcli/config@8.0.0libnpmaccess@8.0.1libnpmdiff@6.0.2libnpmexec@7.0.2libnpmfund@5.0.0libnpmorg@6.0.1libnpmpack@6.0.2libnpmpublish@9.0.1v10.1.0Compare Source
Features
1c93c44#6755 Add--cpuand--osoption to override platform specific install (#6755) (@yukukotani)Bug Fixes
7bf2374#6762 make$npm_execpathalways point to npm (@rotu)Documentation
09d8e0a#6759 fix versions of node.js in readme (#6759) (@JoaoOtavioS)Dependencies
f76066a#6771@npmcli/agent@2.1.1@npmcli/arborist@7.1.0@npmcli/config@7.2.0libnpmdiff@6.0.1libnpmexec@7.0.1libnpmfund@4.1.1libnpmpack@6.0.1Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
Renovate Ignore Notification
Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future
11.xreleases. But if you manually upgrade to11.xthen Renovate will re-enableminorandpatchupdates automatically.If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.
Pull request closed