Renovate: Update npm to v11 #8
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "renovate/npm-11.x"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
^7.0.0 || ^8.0.0
->^11.0.0
Release Notes
npm/cli (npm)
v11.4.2
Compare Source
Bug Fixes
f2d6947
#8345 move warning to new line whennpm init
is canceled (@mbtools)e758dd7
#8318 powershell: multiple Invoke-Expression fixes (#8318) (@alexsch01)Documentation
7233cb3
#8355 remove deprecated section related temp files (#8355) (@milaninfy)fb7a498
#8351 clarify shell used for script (#8351) (@milaninfy)8b55d38
#8329 Rename "command" to "script" (#8329) (@DanKaplanSES)Dependencies
7b05420
#8358fdir@6.4.6
e1a3b23
#8358tinyglobby@0.2.14
522efa2
#8358socks@2.8.5
7a0723f
#8358debug@4.4.1
9a342a4
#8358brace-expansion@2.0.2
e691ba0
#8358@sigstore/protobuf-specs@0.4.3
42ef765
#8358validate-npm-package-name@6.0.1
774c0b1
#8358@npmcli/redact@3.2.2
dda6f87
#8317@npmcli/package-json@6.2.0
bc08ac7
#8317 remove normalize-package-dataChores
0ad1444
#8358 dev dependency updates (@wraithgar)@npmcli/arborist@9.1.2
libnpmdiff@8.0.5
libnpmexec@10.1.4
libnpmfund@7.0.5
libnpmpack@9.0.5
libnpmpublish@11.0.1
v11.4.1
Compare Source
Documentation
3ed764a
#8308 Clarify script working directory behavior (fixes #8305) (#8308) (@tarekwfa0110, @owlstronaut)Chores
2f30251
#8314 remove references to skimdb.npmjs.com (#8314) (@shmam)9cb9d50
#8298 add contributor to changelog entry (#8298) (@wraithgar)Dependencies
@npmcli/arborist@9.1.1
libnpmdiff@8.0.4
libnpmexec@10.1.3
libnpmfund@7.0.4
libnpmpack@9.0.4
v11.4.0
Compare Source
Features
a0e60fb
#8246 added init-private option (@owlstronaut)57aa89f
#8265 use run by default and run-script as the alias (#8265) (@owlstronaut)0d4c023
#8234 install: add package info to json output (#8234) (@wraithgar)Bug Fixes
8794fd9
#8297 powershell: support pipeline input with Invoke-Expression (#8297) (@alexsch01)b5173d1
#8293 docs: corrected github_path (#8293) (@xaos7991)2210d7a
#8278 powershell: use Invoke-Expression to pass args (#8278) (@alexsch01, @mbtools)8669d09
#8228 add otplease for enable-2fa, disable-2fa, access (#8228) (@reggi, @wraithgar)78b5a6f
#8269 correctly handle scenario where prefix is the cwd (#8269) (@owlstronaut, @ficocelliguy)fdc3413
#8221 exec: Fails to Execute Binaries Named After Shell Keywords (#8221) (@13sfaith)4b08e2e
#8245 docs: prepare script runs for local package links (@milaninfy)1622ac4
#8241 handle missingtime
in packument to prevent crash onnpm view
(@owlstronaut)db8f5da
#8110 outdated: add dependent location in long output (#8110) (@milaninfy, @wraithgar)Documentation
d2498df
#8295 RemoveCHANGELOG
from never-ignored list (#8295) (@mrazauskas)4d5c3c1
#8283 fixoverrides
example in package-json.md (#8283) (@glasser)96cc4f9
#8226 format publish as code to highlight it (@LiangYingC)4990ea0
#8226 clarify legacy token creation in npm login and adduser commands (@LiangYingC)Dependencies
c97ef8a
#8246init-package-json@8.2.1
f48613d
#8292@sigstore/verify@2.1.1
a4c5e74
#8292tinyglobby@0.2.13
b9156d2
#8292http-cache-semantics@4.2.0
472a685
#8292binary-extensions@3.1.0
988696e
#8292@sigstore/tuf@3.1.1
569ac84
#8292semver@7.7.2
2521c9b
#8233@sigstore/protobuf-specs@0.4.1
3274d68
#8233@npmcli/query@4.0.1
c263626
#8233abbrev@3.0.1
78df711
#8233hosted-git-info@8.1.0
Chores
e80e38e
#8292 dev dependency updates (@wraithgar)3231ee9
#8244 update snapshots (@owlstronaut)c561a33
#8233 dev dependency updates (@owlstronaut)7eca19c
#8215 update workflow permissions for updating Node PR (@owlstronaut)@npmcli/arborist@9.1.0
@npmcli/config@10.3.0
libnpmaccess@10.0.1
libnpmdiff@8.0.3
libnpmexec@10.1.2
libnpmfund@7.0.3
libnpmpack@9.0.3
libnpmteam@8.0.1
libnpmversion@8.0.1
v11.3.0
Compare Source
Features
b306d25
#8129 addnode-gyp
as actual config (@wraithgar)Bug Fixes
2f5392a
#8135 makenpm run
autocomplete work with workspaces (#8135) (@terrainvidia)Documentation
26b6454
fix grammer in local path note (@cgay)1c0e83d
#7886 fix typo in package-json.md (#7886) (@stoneLeaf)14efa57
#8178 fix example package name inoverrides
explainer (#8178) (@G-Rath)4183cba
#8162 logging: replace proceeding with preceding in loglevels details (#8162) (@tyleralbee)Dependencies
e57f112
#8207minipass-fetch@4.0.1
3daabb1
#8207minizlib@3.0.2
c7a7527
#8207ci-info@4.2.0
20b09b6
#8207node-gyp@11.2.0
679bc4a
#8129@npmcli/run-script@9.1.0
Chores
3fbed84
#8207 install rimraf as a devdependency for smoke tests (@owlstronaut)43f0b41
#8207 dev dependency updates (@wraithgar)26803bc
#8147 release integration node 23 yml (#8147) (@reggi)d679a1a
#8146 release integration node 23 (#8146) (@reggi)@npmcli/arborist@9.0.2
@npmcli/config@10.2.0
libnpmdiff@8.0.2
libnpmexec@10.1.1
libnpmfund@7.0.2
libnpmpack@9.0.2
v11.2.0
Compare Source
Features
247ee1d
#8100 cache: add npx commands (@wraithgar)3a80a7b
#8081 add --init-type flag (#8081) (@reggi)2a1e11f
#8071 move nerfDart list into @npmcli/config (@wraithgar)Bug Fixes
8461186
#8100 update npx cache if possible when spec is a range (@wraithgar)e345cc5
#8050 don't suggest npm update outside of valid engine range (#8050) (@milaninfy)811ca29
#8115 stop working around bug fixed innpm-package-arg@12.0.2
(@TrevorBurnham)879303c
#8078 warn on invalid publishConfig (#8078) (@wraithgar)41417de
#8080 warn when TUF fetching of keys fails (#8080) (@wraithgar)593c849
#8076 warn on invalid single-hyphen cli flags (#8076) (@wraithgar)Dependencies
3d8b257
#8100@npmcli/package-json@6.1.1
ab17523
#8134supports-color@10.0.0
3cbe21a
#8134foreground-child@3.3.1
ee5e1aa
#8118@npmcli/redact@3.1.1
5df69b4
#8118exponential-backoff@3.1.2
80c3273
#8118read@4.1.0
7fd70fa
#8118node-gyp@11.1.0
7aeffff
#8118cidr-regex@4.1.3
b0c0490
#8118is-cidr@5.1.1
ef49d6b
#8118sigstore@3.1.0
1399bfb
#8118socks@2.8.4
6b72107
#8118semver@7.7.1
c9ad0c4
#8118@npmcli/git@6.0.3
b153927
#8115npm-package-arg@12.0.2
f0f6265
#8071nopt@8.1.0
Chores
cc72b89
#8143 fix smoke tests to account for new release versions within a workspace (#8143) (@reggi)c3810bc
#8134 dev dependency updates (@wraithgar)9dc40e6
#8118 dev dependency updates (@wraithgar)7ec0831
#8118 update jsonpath-plus (@wraithgar)ed85b01
#8071 tests for config warnings/changes (@wraithgar)@npmcli/arborist@9.0.1
@npmcli/config@10.1.0
libnpmdiff@8.0.1
libnpmexec@10.1.0
libnpmfund@7.0.1
libnpmpack@9.0.1
v11.1.0
Compare Source
Features
7f6c997
#8009 add dry-run to deprecate/undeprecate commands (@wraithgar)1764a37
#8009 add npm undeprecate command (@wraithgar)Bug Fixes
31455b2
#8054 publish: honor force for no dist tag and registry version check (#8054) (@reggi)dc31c1b
#8038 remove max-len linting bypasses (@wraithgar)8a911ff
#8038 publish: disregard deprecated versions when calculating highest version (@wraithgar)7f72944
#8038 publish: accept publishConfig.tag to override highes semver check (@wraithgar)ab9ddc0
#7992 sbom: deduplicate sbom dependencies (#7992) (@bdehamer)f7da341
#7980 search: properly display multiple search terms (#7980) (@wraithgar)Documentation
3644e79
#8055 update readme for Node.js versions, remove badges (#8055) (@wraithgar)f1af61f
#8041 fix typos in "package-json" (#8041) (@maxkoryukov)e90c6fe
#8051 depth flag default value (#8051) (@milaninfy)866b5ee
#8030 safer documentation urls, repos, packages (#8030) (@reggi)Dependencies
7ddfbad
#8053@npmcli/package-json@6.1.1
9473a86
#8053spdx-license-ids@3.0.21
a65e5ce
#8053@sigstore/protobuf-specs@0.3.3
215ebe4
#8053chalk@5.4.1
Chores
61f00e3
#8069 splits out smoke-tests from publish-dryrun tests (#8069) (@reggi)6d0f46e
#8058 stop publish smoke from check git clean (#8058) (@reggi)9281ebf
#8057 fix smoke tests prerelease needs separate string args (#8057) (@reggi)aa202e9
#8056 smoke tests using a preid (#8056) (@reggi)18e0449
#8053 dev dependency updates (@wraithgar)859a71c
#8052 update node versions for release integration tests (#8052) (@wraithgar)7e7961d
#8038 bump @npmcli/eslint-config to 5.1.0 (@wraithgar)@npmcli/config@10.0.1
v11.0.0
Compare Source
Documentation
8a911da
#7963 ls: removed design change pending section note (#7963) (@milaninfy)Dependencies
5319e48
#7973 remove unnecessary sprintf-js files in node_modules (#7973)d369c77
#7976socks-proxy-agent@8.0.5
3b2951a
#7976https-proxy-agent@7.0.6
a598b7b
#7976agent-base@7.1.3
52bcaf6
#7976debug@4.4.0
aabf345
#7976p-map@7.0.3
28e8761
#7976npm-package-arg@12.0.1
Chores
ecd7190
#7976 dev dependency updates (@wraithgar)a07f4e0
#7976@npmcli/template-oss@4.23.6
(@wraithgar)687ab12
#7970 remove pre-release mode from npm 11 and workspaces (#7970) (@wraithgar)@npmcli/arborist@9.0.0
@npmcli/config@10.0.0
libnpmaccess@10.0.0
libnpmdiff@8.0.0
libnpmexec@10.0.0
libnpmfund@7.0.0
libnpmorg@8.0.0
libnpmpack@9.0.0
libnpmpublish@11.0.0
libnpmsearch@9.0.0
libnpmteam@8.0.0
libnpmversion@8.0.0
v10.9.3
Compare Source
Bug Fixes
7cff878
#8343 powershell: use Invoke-Expression to pass args (#8343) (@alexsch01)78dc057
#8378 stop working around bug fixed innpm-package-arg@12.0.2
(@TrevorBurnham)e510f14
#8248 docs: 'pacakge' -> 'package' (#8248) (@t3hmrman)Dependencies
c38ec84
#8378validate-npm-package-name@6.0.1
72564c5
#8378spdx-license-ids@3.0.21
20fa199
#8378socks@2.8.5
48c193a
#8378socks-proxy-agent@8.0.5
00fccfb
#8378semver@7.7.2
5ab8aac
#8378read@4.1.0
224c69e
#8378p-map@7.0.3
1e41678
#8378npm-package-arg@12.0.2
e9cf30e
#8378nopt@8.1.0
2bedf25
#8378minizlib@3.0.2
a795ee0
#8378minipass-fetch@4.0.1
8ed043c
#8378https-proxy-agent@7.0.6
74518d0
#8378http-cache-semantics@4.2.0
cc7dcfc
#8378hosted-git-info@8.1.0
13aea40
#8378foreground-child@3.3.1
9c81599
#8378exponential-backoff@3.1.2
b59097f
#8378node-gyp@11.2.0
8b29435
#8378debug@4.4.1
4c8e170
#8378cidr-regex@4.1.3
9bb94a3
#8378is-cidr@5.1.1
a1dbb0b
#8378ci-info@4.2.0
0a5f2ff
#8378chalk@5.4.1
7912c9c
#8378brace-expansion@2.0.2
19028b8
#8378agent-base@7.1.3
fd26776
#8378abbrev@3.0.1
dbb23ab
#8378sigstore@3.1.0
92feb9b
#8378@sigstore/protobuf-specs@0.4.3
4fd7174
#8378@sigstore/tuf@3.1.1
b327bc2
#8378@npmcli/run-script@9.1.0
04e7e1c
#8378@npmcli/redact@3.2.2
.90d2aab
#8378@npmcli/query@4.0.1
2e47537
#8378@npmcli/package-json@6.2.0
a5eb5dd
#8378@npmcli/git@6.0.3
Chores
15e545b
#8384@npmcli/template-oss@4.24.4
(#8384) (@wraithgar)fb5a9f2
#8378@npmcli/template-oss@4.24.3
(@wraithgar)19da79a
#8378 dev dependency updates (@wraithgar)@npmcli/arborist@8.0.1
libnpmdiff@7.0.1
libnpmexec@9.0.1
libnpmfund@6.0.1
libnpmpack@8.0.1
v10.9.2
Compare Source
Dependencies
ae9345e
#7959@npmcli/run-script@9.0.2
39a19b3
#7959node-gyp@11.0.0
93e2186
#7956@npmcli/map-workspaces@4.0.2
bf0ea00
#7956@npmcli/package-json@6.1.0
c84baa3
#7956init-package-json@7.0.2
e642099
#7956node-gyp@10.3.1
v10.9.1
Compare Source
Bug Fixes
c7fe0db
#7924 perf: enable compile cache if present (#7924) (@H4ad)Dependencies
a221db7
#7931npm-install-checks@7.1.1
fbad17a
#7931hosted-git-info@8.0.2
65d2a86
#7922@sigstore/tuf@3.0.0
be45963
#7922sigstore@3.0.0
fb0bfbd
#7922spdx-license-ids@3.0.20
ccadf2a
#7922promise-call-limit@3.0.2
b25712e
#7922package-json-from-dist@1.0.1
1c9e96f
#7922negotiator@0.6.4
f13bc9c
#7922debug@4.3.7
029060c
#7922cross-spawn@7.0.6
9350950
#7922@npmcli/metavuln-calculator@8.0.1
c003827
#7922ansi-regex@6.1.0
d6194f5
#7922pacote@19.0.1
4ff29f6
#7922npm-registry-fetch@18.0.2
fd6f4fb
#7922make-fetch-happen@14.0.3
b3f3004
#7922ci-info@4.1.0
a1f9d48
#7922promise-spawn@8.0.2
Chores
3ace1c1
#7922 update arborist in mock-registry (@wraithgar)libnpmpublish@10.0.1
v10.9.0
Compare Source
Features
4d57928
#7766 devEngines (#7766) (@reggi)Bug Fixes
6ca609e
#7789 ping and doctor commands fix for checking if registry is online (#7789) (@milaninfy)Documentation
63d6a73
#7783 package.json: add brief section on exports, link to Node.js docs (#7783) (@wheresrhys)366c07e
#7776 remove incorrect note about npm install (#7776) (@wraithgar)Dependencies
60a7ee5
#7803 hoist npm-normalize-package-bin20dd44f
#7803 hoist minipass-fetch5795987
#7803 updateproggy@3.0.0
99ccae3
#7803 updatebin-links@5.0.0
75786ad
#7803 update@npmcli/query@4.0.0
1c25a1d
#7803 update@npmcli/node-gyp@4.0.0
2d7fc3d
#7803 update@npmcli/name-from-folder@3.0.0
1e09334
#7803 update@npmcli/metavuln-calculator@8.0.0
820e983
#7803 update@npmcli/installed-package-contents@3.0.0
9cd6603
#7803 updateread-package-json-fast@4.0.0
b84d907
#7803 update@npmcli/git@6.0.1
53ed632
#7803 updatewrite-file-atomic@6.0.0
ab40dab
#7803 updatewhich@5.0.0
b1c4770
#7803 updatevalidate-npm-package-name@6.0.0
8206c4f
#7803 updatessri@12.0.0
8b7dbc8
#7803 updateread@4.0.0
f6909a0
#7803 updateproc-log@5.0.0
f9b2e18
#7803 updateparse-conflict-json@4.0.0
e7ab206
#7803 updatepacote@19.0.0
b28dbb1
#7803 updatenpm-user-validate@3.0.0
d13a20b
#7803 updatenpm-registry-fetch@18.0.1
5208f74
#7803 updatenpm-profile@11.0.1
092f41f
#7803 updatenpm-pick-manifest@10.0.0
50a7bc8
#7803 updatenpm-package-arg@12.0.0
591130d
#7803 updatenpm-install-checks@7.1.0
be6ae96
#7803 updatenpm-audit-report@6.0.0
8d4060a
#7803 updatenormalize-package-data@7.0.0
105fa2b
#7803 updatenopt@8.0.0
eae4f57
#7803 updatemake-fetch-happen@14.0.1
7214149
#7803 updatejson-parse-even-better-errors@4.0.0
c4bed31
#7803 updateinit-package-json@7.0.1
f54b155
#7803 updateini@5.0.0
6deae9e
#7803 updatehosted-git-info@8.0.0
034c729
#7803 updatecacache@19.0.1
ddb8be0
#7803 updateabbrev@3.0.0
538a4cc
#7803 update@npmcli/run-script@9.0.1
b80d048
#7803 update@npmcli/redact@3.0.0
81137fc
#7803 update@npmcli/promise-spawn@8.0.1
2076368
#7803 update@npmcli/package-json@6.0.1
feac87c
#7803 update@npmcli/map-workspaces@4.0.1
dd90f9e
#7803 update@npmcli/fs@4.0.0
Chores
95e2cb1
#7810 ignore .github folder in release-please (@reggi)be1e6da
#7803 updateminify-registry-metadata@4.0.0
(@reggi)43f2374
#7803 updateignore-walk@7.0.0
(@reggi)bb03036
#7803 updatenpm-packlist@9.0.0
(@reggi)2072705
#7803 update@npmcli/eslint-config@5.0.1
(@reggi)949d8f8
#7803 engine ^18.17.0 || >=20.5.0 in package template (@reggi)fefd509
#7764 deps: bump actions/download-artifact from 3 to 4 in /.github/workflows (#7764) (@dependabot[bot], @wraithgar)@npmcli/arborist@8.0.0
@npmcli/config@9.0.0
libnpmaccess@9.0.0
libnpmdiff@7.0.0
libnpmexec@9.0.0
libnpmfund@6.0.0
libnpmhook@11.0.0
libnpmorg@7.0.0
libnpmpack@8.0.0
libnpmpublish@10.0.0
libnpmsearch@8.0.0
libnpmteam@7.0.0
libnpmversion@7.0.0
v10.8.3
Compare Source
Bug Fixes
7e61151
#7759 docs: init usage description corrected (#7759) (@milaninfy)2404c7e
#7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)91e46a3
#7721 init: use locally installed version of given package (#7721) (@milaninfy)4e81a6a
#7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)a947f25
#7679 update lifecycle script list in run-script (#7679) (@sonsurim)Documentation
e674987
#7743 update docs for npmrc and package-json (#7743) (@milaninfy)24d5350
#7742 fix and update scoped configuration example (#7742) (@demedos)Dependencies
3fd7a48
#7737lru-cache@10.4.3
d7e462b
#7737jackspeak@3.4.3
df58b0c
#7737glob@10.4.5
7342c24
#7737foreground-child@3.3.0
2986f4e
#7737cacache@18.0.4
a44ab26
#7737postcss-selector-parser@6.1.2
4e965ad
#7737semver@7.6.3
12587fa
#7737npm-package-arg@11.0.3
1a9ac86
#7737debug@4.3.6
a303ddd
#7737node-gyp@10.2.0
Chores
1772276
#7756 fix duplicate changelog entries (@wraithgar)8035725
#7756@npmcli/template-oss@4.23.3
(@wraithgar)ed4add1
#7737 dev dependency updates (@wraithgar)86b05fc
#7683 allow for longer timer values (#7683) (@wraithgar)libnpmexec@8.1.4
v10.8.2
Compare Source
Bug Fixes
3101a40
#7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)2273183
#7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)15be6dd
#7574 don't try parsing workspaces if none exist (@wraithgar)Documentation
ac937d4
#7616 install: add save-peer flag (#7616) (@drew4237)55639ef
#7615 use git+https in package.com url examples (#7615) (@MikeMcC399)93883bb
#7582 Improve manpage section forpackage.json
funding
properties (#7582) (@kemitchell)92e71e6
#7576 fix links to community discussions (#7576) (@leobalter)Dependencies
1c1adae
#7636npm-pick-manifest@9.1.0
5e4fa18
#7636socks-proxy-agent@8.0.4
d8fa116
#7636https-proxy-agent@7.0.5
76dab91
#7636normalize-package-data@6.0.2
094c4ea
#7636minimatch@9.0.5
1c8d41d
#7636@npmcli/git@5.0.8
e5451e1
#7605jackspeak@3.4.0
7b584d3
#7605foreground-child@3.2.1
941d0d7
#7605debug@4.3.5
8b8ce7a
#7605glob@10.4.2
4646768
#7605npm-registry-fetch@17.1.0
6f0d7ce
#7605@npmcli/redact@2.0.1
29204c8
#7605@npmcli/package-json@5.2.0
04d6910
#7574@npmcli/package-json@5.1.1
4ef4830
#7574 remove read-package-json-fastChores
2490b49
#7621 remove .github/workflows/benchmark.yml (#7621) (@wraithgar)3b8b111
#7605 update devDependencies in lockfile (@wraithgar)v10.8.1
Compare Source
Bug Fixes
6b55646
#7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)e4c7a41
#7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)8f94ae8
#7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)2d1d8d0
#7559 addsnode:
specifier to all native node modules (#7559) (@reggi)7d89b55
#7490 ci: rm workspace node_modules (#7490) (@reggi)9122fb6
#7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)9e6686b
#7545 send proper otp token on web auth (#7545) (@wraithgar)b1db070
#7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)53cda32
#7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)61d5771
#7541 remove json.stringify from all commands (#7541) (@lukekarrys)4dfc7d2
#7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)3cefdf6
#7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)ef4c975
#7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)Documentation
fd6479f
#7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)Dependencies
e3f0fd4
#7568@npmcli/package-json@5.1.1
447a8d7
#7566spdx-license-ids@3.0.18
83fed2e
#7566sigstore@2.3.1
41291ba
#7566@sigstore/tuf@2.3.4
18b42a4
#7566glob@10.4.1
5c6759d
#7566postcss-selector-parser@6.1.0
2508a83
#7566is-cidr@5.1.0
6278fe4
#7566ini@4.1.3
10.8.1 (2024-05-29)
Bug Fixes
6b55646
#7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)e4c7a41
#7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)8f94ae8
#7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)2d1d8d0
#7559 addsnode:
specifier to all native node modules (#7559) (@reggi)7d89b55
#7490 ci: rm workspace node_modules (#7490) (@reggi)9122fb6
#7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)9e6686b
#7545 send proper otp token on web auth (#7545) (@wraithgar)b1db070
#7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)53cda32
#7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)61d5771
#7541 remove json.stringify from all commands (#7541) (@lukekarrys)4dfc7d2
#7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)3cefdf6
#7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)ef4c975
#7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)Documentation
fd6479f
#7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)Dependencies
e3f0fd4
#7568@npmcli/package-json@5.1.1
447a8d7
#7566spdx-license-ids@3.0.18
83fed2e
#7566sigstore@2.3.1
41291ba
#7566@sigstore/tuf@2.3.4
18b42a4
#7566glob@10.4.1
5c6759d
#7566postcss-selector-parser@6.1.0
2508a83
#7566is-cidr@5.1.0
6278fe4
#7566ini@4.1.3
Chores
2d84091
#7568 fix snapshots for updated @npmcli/package-json (@wraithgar)6574dc9
#7566 dev dependency updates (@wraithgar)Chores
2d84091
#7568 fix snapshots for updated @npmcli/package-json (@wraithgar)6574dc9
#7566 dev dependency updates (@wraithgar)v10.8.0
Compare Source
Features
1e375c1
#7442 create exit handler class (#7442) (@lukekarrys)Bug Fixes
d5c3289
#7513 refactor: use output buffer and error for more commands (#7513) (@lukekarrys)12f103c
#7533 add first param titles to logs where missing (#7533) (@lukekarrys)badeac2
#7521 config: use redact on config output (#7521) (@lukekarrys)76aef74
#7520 view: refactor exec and execWorkspaces to call same methods (#7520) (@lukekarrys)b54cdb8
#7515 refactor: create new error output primitives (#7515) (@lukekarrys)e40454c
#7506 view: dont unwrap arrays in json mode (#7506) (@lukekarrys)6f64148
require stdout to be a TTY for progress (#7507) (@lukekarrys)db62910
#7504 config: be more aggressive about hiding protected values (#7504) (@wraithgar)6d456bb
#7497 dont write log file for completion commands (#7497) (@lukekarrys)722c0fa
#7463 limit packument cache size based on heap size (@wraithgar)ca1a68d
#7474 log ifnpm deprecate
does not match any version (#7474) (@mbtools)261ea19
#7457 run input.start around help and openining urls (@lukekarrys)4ab6cf4
#7459 publish: validate dist-tag (#7459) (@reggi)Documentation
b2ce025
#7518 suggest correct bin entry (#7518) (@Santoshraj2)bdd2aae
#7502 remove obsolete removal using make uninstall (#7502) (@avinal)c3d2819
#7496 npm help json/global command on windows (#7496) (@klm-turing, @lukekarrys)268303c
#7479 add npm version to every local help output (#7479) (@klm-turing)e39d422
#7473 suggest "npm repo" for showing the repo of a package (#7473) (@full-stop)f6fff32
#7433 clarify what peerDependenciesMeta does (#7433) (@xuhdev, @wraithgar)Dependencies
1cdc662
#7522@tufjs/repo-mock@2.0.1
898bcfd
#7522@sigstore/protobuf-specs@0.3.2
fec3c94
#7522path-scurry@1.11.1
cb85973
#7522glob@10.3.15
e189873
#7498@sigstore/sign@2.3.1
c2b28f9
#7498minipass@7.1.1
9064ffc
#7498@sigstore/tuf@2.3.3
fd42986
#7498@npmcli/fs@3.1.1
4e53e33
#7498semver@7.6.2
f078c82
#7495glob@10.3.14
58f773c
#7495path-scurry@1.11.0
ea0b07d
#7482pacote@18.0.6
8d161a4
#7482semver@7.6.1
5b2317b
#7463 add lru-cache26fefb8
#7480promzard@1.0.2
2146e1f
#7480npm-bundled@3.0.1
ff6c5d1
#7480minipass-fetch@3.0.5
419f9b9
#7480cmd-shim@6.0.3
dade2c8
#7480minipass@7.1.0
18e5312
#7480validate-npm-package-name@5.0.1
d440011
#7480npm-user-validate@2.0.1
552113e
#7480ignore-walk@6.0.5
7e15b6d
#7480@npmcli/metavuln-calculator@7.1.1
8b20f8c
#7480ssri@10.0.6
a9a6dcd
#7480pacote@18.0.5
e2fdb65
#7480npm-pick-manifest@9.0.1
310a7a5
#7480normalize-package-data@6.0.1
e71f541
#7480nopt@7.2.1
18c3b40
#7480json-parse-even-better-errors@3.0.2
4c5bf77
#7480init-package-json@6.0.3
714e3e1
#7480hosted-git-info@7.0.2
f94d672
#7480cacache@18.0.3
43331e4
#7480bin-links@4.0.4
8234412
#7480@npmcli/promise-spawn@7.0.2
6dfaebb
#7480@npmcli/git@5.0.7
63ef498
#7457npm-registry-fetch@17.0.1
4cbc2d4
#7457npm-profile@10.0.0
Chores
10256e8
#7522 dev dependency updates (@wraithgar)dcfc3de
#7517 convert run-script tests to snapshots (#7517) (@lukekarrys)8add914
#7505 create single bug report issue template (#7505) (@lukekarrys)7c7fba4
#7500 benchmarks: fix emoji reaction to comment (#7500) (@lukekarrys)d3b9587
#7494 disable progress on npm pack test (@wraithgar)67ebb66
#7494 disable color in config tests (@wraithgar)2ec2e75
#7494 disable progress on shellout exit tests (@wraithgar)e9fdc9a
#7483 create smoke-publish-test.sh script (#7483) (@lukekarrys)1524cfd
#7484 remove extra quotes from benchmark event_type (#7484) (@lukekarrys)9c4d3c4
#7467 template-oss-apply (@lukekarrys)2b7ec54
#7467template-oss@4.22.0
(@lukekarrys)8ded848
#7457 remove doctor snapshot stack traces (@lukekarrys)v10.7.0
Compare Source
Features
7e349f4
#7432 add spinner (#7432) (@lukekarrys)Bug Fixes
d679ce8
#7449 linting: no-unused-vars (@wraithgar)2558283
#7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)bc4c342
#7448 account for registries with no publisher in search (#7448) (@wraithgar)bcc781a
#7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)104fcb5
#7438 remove doctor log for each file permission check (#7438) (@lukekarrys)5230647
#7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)71cbd91
#7421 hide banner for exec and explore (#7421) (@lukekarrys)57ebebf
#7418 update repository.url in package.json (#7418) (@wraithgar)Documentation
1674136
#7441 correct search help output (#7441) (@wraithgar)Dependencies
80eec03
#7453@npmcli/redact@2.0.0
a7145d4
#7453npm-registry-fetch@17.0.0
a785766
#7453pacote@18.0.3
65d76db
#7453npm-profile@9.0.2
cadc0f0
#7449 hoist production copy of sprintf-js2cffdfe
#7449lru-cache@10.2.2
432efb5
#7449make-fetch-happen@13.0.1
9da5738
#7437@npmcli/run-script@8.1.0
(#7437)762888a
#7429 update dependencies for workspaces (#7429)@npmcli/arborist@7.5.1
@npmcli/config@8.3.1
libnpmaccess@8.0.5
libnpmdiff@6.1.1
libnpmexec@8.1.0
libnpmfund@5.0.9
libnpmhook@10.0.4
libnpmorg@6.0.5
libnpmpack@7.0.1
libnpmpublish@9.0.7
libnpmsearch@7.0.4
libnpmteam@6.0.4
libnpmversion@6.0.1
Chores
356c374
#7453 fix test fixture for new redact behavior (@wraithgar)2fba4b7
#7449 update devDependencies in lockfile (@wraithgar)v10.6.0
Compare Source
Features
9123de4
#7373 do all ouput over proc-log events (@lukekarrys)9622597
#7339 refactor terminal display (#7339) (@lukekarrys)Bug Fixes
0e74ee4
#7416 clean up npm object (#7416) (@wraithgar)c060e60
#7415 return command and argv from load (@lukekarrys)180b919
#7415 remove unused npm.setCmd method (@lukekarrys)0708b3b
#7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)7f4e667
#7403 redact when displaying non-ascii arguments (@lukekarrys)06202f0
#7403 store unref promises for awaiting in tests (@lukekarrys)e5f1948
#7403 run update notifier after exec but before waiting (@lukekarrys)f309c1c
#7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)43e6194
#7403 dont show run script banners in silent (@lukekarrys)694dba9
#7403 dont expose as many public properties of timers (@lukekarrys)7ca6d84
#7403 use proc-log META for flush and force (@lukekarrys)2538438
#7403 dont write timing logs to file unless requested (@lukekarrys)7e04417
#7403 rename base-cmd to match other commands (@lukekarrys)fc68547
#7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)28019d5
#7403 cleanup: move cli specific files to separate dir (@lukekarrys)469f788
#7403 cleanup: newlines and whitespace (@lukekarrys)4ab6401
#7403 cleanup: dont nest files utils dir (@lukekarrys)78447d7
#7399 prefer fs/promises over promisify (#7399) (@lukekarrys)d531f8b
#7407 Remove table output from search and tar summary (@wraithgar)c209e98
#7401 Remove table output from many commands (@wraithgar)ad7ab8c
#7388 perf: lazy loading optimizations (#7388) (@wraithgar)8eae4b3
#7385 token: properly await registry request (#7385) (@wraithgar)9216d59
#7377 better output colors (#7377) (@wraithgar)6512112
#7378 use proc-log for all timers (@lukekarrys)2a80dab
#7370 typo innpm access
usage (#7370) (@mbtools)Documentation
dfa4cab
#7401 update output examples (@wraithgar)140b9c9
#7382 package-json: note that line endings are inferred (#7382) (@ertw)c16dd4e
#7367 Document that overrides only work in the rootpackage.json
(#7367) (@s100)Dependencies
36adff3
#7408pacote@18.0.2
486d46c
#7408@npmcli/installed-package-contents@2.1.0
157d0ae
#7408@npmcli/package-json@5.1.0
b0ca163
#7409 remove @npmcli/disparity-colorsc77f035
#7407 remove columnify2ec690d
#7401 move cli-table3 to devDependenciesfc6e291
#7392proc-log@4.2.0
(#7392)38ed048
#7378@npmcli/metavuln-calculator@7.1.0
7678a3d
#7378proc-log@4.1.0
87f6c09
#7373@npmcli/metavuln-calculator@7.0.1
b8f8b41
#7373@npmcli/run-script@8.0.0
79f79c7
#7373proc-log@4.0.0
9027266
#7373pacote@18.0.0
ee4b3e0
#7373npm-registry-fetch@16.2.1
0e7789b
#7373npm-profile@9.0.1
ac98fd3
#7373npm-package-arg@11.0.2
9351570
#7373@npmcli/package-json@5.0.3
d3a0cfa
#7373@npmcli/git@5.0.6
@npmcli/arborist@7.5.0
@npmcli/config@8.3.0
libnpmaccess@8.0.4
libnpmdiff@6.1.0
libnpmexec@8.0.0
libnpmfund@5.0.8
libnpmhook@10.0.3
libnpmorg@6.0.4
libnpmpack@7.0.0
libnpmpublish@9.0.6
libnpmsearch@7.0.3
libnpmteam@6.0.3
libnpmversion@6.0.0
Chores
3cbc258
#7403 test for early version exit (@lukekarrys)08e0c0e
#7403 move sigstore json files to fixtures dir (@lukekarrys)ea66e95
#7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)9333e9d
#7386 reduce windows shim test flakes (#7386) (@lukekarrys)v10.5.2
Compare Source
Bug Fixes
ef381b1
#7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)3760dd2
#7361 perf: do less work loading config (#7361) (@wraithgar)64bcf4c
#7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)5a28a29
#7352 perf: lazy load workspace dependency (#7352) (@H4ad)5fc0f9d
#7347 lazy load validate npm package name on error message (#7347) (@H4ad)c929ed1
#7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)70497cb
#7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)Documentation
90ba1c9
#7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)Dependencies
699a1de
#7362@npmcli/map-workspaces@3.0.6
49fb9b7
#7362socks@2.8.3
f69052e
#7362@npmcli/package-json@5.0.2
c18a0ad
#7357sigstore@2.3.0
fd4153b
#7357socks@2.8.2
d6b705a
#7357postcss-selector-parser@6.0.16
248c177
#7357hasown@2.0.2
4af9e86
#7357builtins@5.1.0
7546b56
#7357@npmcli/agent@2.2.2
d38fd4f
#7357spdx-expression-parse@4.0.0
913b326
#7357is-cidr@5.0.5
84bbbd4
#7357@npmcli/package-json@5.0.1
a0f5048
#7357@npmcli/git@5.0.5
@npmcli/arborist@7.4.2
@npmcli/config@8.2.2
libnpmdiff@6.0.9
libnpmexec@7.0.10
libnpmfund@5.0.7
libnpmpack@6.0.9
Chores
81be28d
#7357 dev dependency updates (@wraithgar)v10.5.1
Compare Source
Bug Fixes
17d97d2
#7334 use @npmcli/redact for log redactions (@lukekarrys)8cab136
#7324 ensure maxSockets is respected (#7324) (@lukekarrys)9bffa13
#7320 query: properly return :missing nodes (#7320) (@wraithgar)9d4e85f
#7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)bdb3c28
#7274 added check for dry-run (#7274) (@cod1r)7f1ab88
#7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)Documentation
1da5cf0
#7198 add link to engines section (#7198) (@uiolee)1114a12
#7307 fix incorrect npm audit key response link (#7307) (@davidlj95)9807caf
#7304 update audit docs with provenance info (#7304) (@bdehamer)e1ecfa7
#7285 Correct capitalization for URL (#7285) (@coliff)Dependencies
87a61fc
#7334npm-registry-fetch@16.2.0
5469614
#7327init-package-json@6.0.2
5469614
#7327promzard@1.0.1
5469614
#7327read@3.0.1
(#7327)9ccff72
#7329tar@6.2.1
7201a00
#7329node-gyp@10.1.0
6fd94f2
#7329minimatch@9.0.4
b048592
#7329ini@4.1.2
c54a84a
#7329glob@10.3.12
6853531
#7329cli-table3@​0.6.4
c9315cb
#7329binary-extensions@2.3.0
5bb0031
#7329@sigstore/tuf@2.3.2
8cab136
#7324agent-base@7.1.1
(@lukekarrys)@npmcli/arborist@7.4.1
@npmcli/config@8.2.1
libnpmaccess@8.0.3
libnpmdiff@6.0.8
libnpmexec@7.0.9
libnpmfund@5.0.6
libnpmhook@10.0.2
libnpmorg@6.0.3
libnpmpack@6.0.8
libnpmpublish@9.0.5
libnpmsearch@7.0.2
libnpmteam@6.0.2
Chores
8cab136
#7324 add smoke-test for large prod installs (@lukekarrys)0dab381
#7258jsdom@24.0.0
(#7258) (@wraithgar)af3c48e
#7262 test refactor (#7262) (@wraithgar)v10.5.0
Compare Source
Features
2366edc
#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb
#5966 add --expect-entries tonpm query
(@wraithgar)Bug Fixes
818957c
#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d
#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0
#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)Documentation
c4741fe
#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622
#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057
#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f
#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9
#7182 fix typos (#7182) (@GoodDaisy)Dependencies
16d4c9f
#7218@npmcli/query@3.1.0
06247d1
#7242spdx-license-ids@3.0.17
79d1e0b
#7242spdx-exceptions@2.5.0
67e853a
#7242socks@2.8.0
4c9fe4b
#7242lru-cache@10.2.0
4a50c5a
#7242https-proxy-agent@7.0.4
ed3f254
#7242http-proxy-agent@7.0.2
8ec4fd5
#7242hasown@2.0.1
98b1189
#7242@npmcli/agent@2.2.1
dafa903
#7242sigstore@2.2.2
d0bcb76
#7242diff@5.2.0
a13808e
#7242semver@7.6.0
d6521ac
#7242@sigstore/tuf@2.3.1
43cac2f
#7242ip@2.0.1
@npmcli/arborist@7.4.0
@npmcli/config@8.2.0
libnpmdiff@6.0.7
libnpmexec@7.0.8
libnpmfund@5.0.5
libnpmpack@6.0.7
Chores
d6bc684
#7242 update devDependencies in lockfile (@wraithgar)v10.4.0
Compare Source
Features
35a098c
#7175 display tree diff on--long
(@wraithgar)dffca29
#7174 format: print--dry-run
diffs in table format (#7174) (@ritaaktay)6d5f9ac
#7133 dedupe - display difference when--dry-run
is enabled (#7133) (@Blaumaus)Bug Fixes
ec06f77
#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba
#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7
#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)Documentation
2b7eaad
#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7
#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc
#7150 config: State default configuration file affected bynpm config set
(#7150) (@DanKaplanSES)44f4518
#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f
#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)Dependencies
ec77e81
#7124promise-call-limit@3.0.1
e32189c
#7173 deduplicate treeb7af4d9
#7173tar-stream@3.1.7
6883743
#7173@npmcli/run-script@7.0.4
739634d
#7157 remove strip-ansi162c82e
#7148pacote@17.0.6
(#7148) (@bdehamer)a50b03b
#7141sigstore@2.2.0
(#7141) (@bdehamer)f696b51
#7132@sigstore/tuf@2.3.0
(#7132) (@bdehamer)@npmcli/arborist@7.3.1
libnpmdiff@6.0.6
libnpmexec@7.0.7
libnpmfund@5.0.4
libnpmpack@6.0.6
libnpmpublish@9.0.4
Chores
a82ccc5
#7173nock@13.5.0
(@wraithgar)dcaa99c
#7173 fix exec test (@wraithgar)0d96080
#7162 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)v10.3.0
Compare Source
Features
6673c77
#6914 add--libc
option to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)Bug Fixes
b7fc10a
#7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)Dependencies
3fd5213
#7121npm-packlist@8.0.2
5698415
#7121postcss-selector-parser@6.0.15
e56a4f3
#7121are-we-there-yet@4.0.2
8495b7c
#7121cacache@18.0.2
796d1c7
#7121@npmcli/run-script@7.0.3
3b7f6f2
#7121@npmcli/promise-spawn@7.0.1
7ecd146
#7121npmcli/git@5.0.4
@npmcli/arborist@7.3.0
@npmcli/config@8.1.0
libnpmdiff@6.0.5
libnpmexec@7.0.6
libnpmfund@5.0.3
libnpmpack@6.0.5
Chores
2fd8292
#7121 work around @npmcli/git lazy loading (@wraithgar)cd9a66d
#7121 update devDependencies in lockfile (@wraithgar)2dda715
#7121tap@16.3.10
(@wraithgar)v10.2.5
Compare Source
Bug Fixes
c7a592c
#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6
#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f
#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d
#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231
#7033 skip creation of log directory iflogs-max
is set to 0 (#7033) (@JJ)6267f54
#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)Dependencies
ff1204a
#7058lru-cache@10.1.0
c648020
#7058json-parse-even-better-errors@3.0.1
53aa8f2
#7058pacote@17.0.5
2e5331c
#7058npm-packlist@8.0.1
937b7b7
#7058ignore-walk@6.0.4
35371c8
#7058cacache@18.0.1
@npmcli/arborist@7.2.2
@npmcli/config@8.0.3
libnpmaccess@8.0.2
libnpmdiff@6.0.4
libnpmexec@7.0.5
libnpmfund@5.0.2
libnpmhook@10.0.1
libnpmorg@6.0.2
libnpmpack@6.0.4
libnpmpublish@9.0.3
libnpmsearch@7.0.1
libnpmteam@6.0.1
libnpmversion@5.0.2
Chores
f656b66
#7062@npmcli/template-oss@4.21.3
(#7062) (@lukekarrys)9754b17
#7051 use global npm for workspace tests (@lukekarrys)3891757
#7051@npmcli/template-oss@4.21.2
(@lukekarrys)71f70fa
#7058nock@13.4.0
(@wraithgar)43674a4
#7058tap@16.3.9
(@wraithgar)4ba585c
#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)v10.2.4
Compare Source
Bug Fixes
cd291e7
#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380
#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b
#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088
#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08
#6951 properly catch missing url opener error (#6951) (@wraithgar)Documentation
a38836c
#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f
#6987 update npm-prune description (#6987) (@Eomm)Dependencies
e9ec2f7
#6994lru-cache@10.0.2
faf9eff
#6994is-core-module@2.13.1
b00e780
#6994@sigstore/sign@2.2.0
4613774
#6994 hoisting newer deps in favor of older ones54c4f7b
#6994signal-exit@4.1.0
8c5882f
#6994strip-ansi@7.1.0
cd0c649
#6994ci-info@4.0.0
a0a58b7
#6994@sigstore/tuf@2.2.0
b3a53c6
#6949is-cidr@5.0.3
(#6949)@npmcli/config@8.0.2
libnpmexec@7.0.4
libnpmpublish@9.0.2
v10.2.3
Compare Source
Dependencies
b5dedf3
#6958node-gyp@10.0.1
v10.2.2
Compare Source
Bug Fixes
8ed6d28
#6910 make npm link respect --no-save (#6910) (@Santoshraj2)eacec5f
#6941 add back bin/node-gyp-bin/node-gyp files (#6941) (@lukekarrys)b776753
#6928 Grammar mistake in authentication error message (#6928) (@Gekuro, gek)Documentation
c422a01
#6924 use markdown links instead of html (@lukekarrys)dd03aa0
#6921 add v9 and above for lockfile version 3 (#6921) (@MikeMcC399)Dependencies
dfb6298
#6937node-gyp@10.0.0
(#6937)@npmcli/arborist@7.2.1
libnpmdiff@6.0.3
libnpmexec@7.0.3
libnpmfund@5.0.1
libnpmpack@6.0.3
libnpmversion@5.0.1
v10.2.1
Compare Source
Bug Fixes
35c92fe
#6902 Add check to pkg command to deal with empty values (#6902) (@NeonArray)5b6172f
#6895 logout from custom registry (@wraithgar)8423d4f
#6895 delete auth from proper location on logout (@wraithgar)0cfe9de
#6873 audit: spelling error in message (#6873) (@Fdawgs)Documentation
5142735
#6894 update npm build description (#6894) (@siemhesda)2e4b4ad
#6861 npm publish content modification (#6861) (@jpg619)Dependencies
96e1637
#6915cmd-shim@6.0.2
(#6915)b405da1
#6899bin-links@4.0.3
ef69d36
#6895npm-registry-fetch@16.1.0
337c903
#6882spdx-license-ids@3.0.16
e6b0be7
#6882socks-proxy-agent@8.0.2
ee6892e
#6882readable-stream@4.4.2
61c3ee9
#6882minipass@7.0.4
14d31fd
#6882is-core-module@2.13.0
03f3d2e
#6882https-proxy-agent@7.0.2
e0163c6
#6882are-we-there-yet@4.0.1
fca804a
#6882ci-info@3.9.0
6af582f
#6882npm-install-checks@6.3.0
@npmcli/config@8.0.1
v10.2.0
Compare Source
Features
7c459d2
#6801 add npm sbom command (#6801) (@bdehamer)81a460f
#6732 add package-lock-only mode to npm query (@wraithgar)0d29855
#6732 add no-package-lock mode to npm audit (@wraithgar)Bug Fixes
2207628
#6823 use strip-ansi module instead of internal regex (#6823) (@wraithgar)d46d052
#6798 tolerate null bugs URLs (#6798) (@vladh)fb1b674
#6758 deprecate: ignore implicit workspace mode (#6758) (@wraithgar)Documentation
68031f2
#6844 updateCONTRIBUTING.md
to prevent errors (#6844) (@darcyclarke)3ac703c
#6831 addinclude
param to commands that haveomit
param (#6831) (@siemhesda)03912db
#6819 add init-specific params to init docs/help (#6819) (@wraithgar)8088325
#6800 Update npm-doctor.md (#6800) (@siemhesda)Dependencies
aa6728b
#6859tar@6.2.0
ce9089f
#6859npm-package-arg@11.0.1
39d7f04
#6859minipass@7.0.4
0a47af5
#6859hosted-git-info@7.0.1
af93130
#6859glob@10.3.10
3ebc474
#6859@npmcli/query@3.0.1
284cbfd
#6858@npmcli/agent@2.2.0
@npmcli/arborist@7.2.0
@npmcli/config@8.0.0
libnpmaccess@8.0.1
libnpmdiff@6.0.2
libnpmexec@7.0.2
libnpmfund@5.0.0
libnpmorg@6.0.1
libnpmpack@6.0.2
libnpmpublish@9.0.1
v10.1.0
Compare Source
Features
1c93c44
#6755 Add--cpu
and--os
option to override platform specific install (#6755) (@yukukotani)Bug Fixes
7bf2374
#6762 make$npm_execpath
always point to npm (@rotu)Documentation
09d8e0a
#6759 fix versions of node.js in readme (#6759) (@JoaoOtavioS)Dependencies
f76066a
#6771@npmcli/agent@2.1.1
@npmcli/arborist@7.1.0
@npmcli/config@7.2.0
libnpmdiff@6.0.1
libnpmexec@7.0.1
libnpmfund@4.1.1
libnpmpack@6.0.1
v10.0.0
Compare Source
⚠️ BREAKING CHANGES
npm
now supports node^18.17.0 || >=20.5.0
if-present
to ignore missing scripts.@npmcli/agent
is now used as the agent for network requestsci-name
config has been removedhashAlgorithm
value is no longer being passed through flatOptionstmp
config has been removedmetrics-registry
config has been removed.NPM_PACKAGE_ARG_8909_STRICT=1
was set.Bug Fixes
e0d3edd
#6641 remove "ci-name" config (@wraithgar)0a71ebb
#6641 stop retrying on 409 conflict (@wraithgar)9344167
#135 remove strict 8909 mode (@wraithgar)b34ee65
#6706 set objectMode for search filter stream (@lukekarrys)f916d33
#6715 allow searching packages with no description (@lukekarrys)0318f44
#6641 remove implicit if-present logic from run-script workspaces (@wraithgar)db91a77
#6641 remove "hashAlgorithm" from flatOptions (@wraithgar)ece52a3
#6641 remove "tmp" config (@wraithgar)1f767aa
#6641 remove metric-registry config (@wraithgar)Documentation
c736b62
#6686 add missing bugs key in package-json.md (#6686) (@airscripts)c1e01d9
#6680 Update package-json.md (#6680) (@p-chan, @ljharb)e5338af
#6672 remove link to deprecatednpm set-script
command (#6672) (@emmanuel-ferdman)Dependencies
5ab3f7e
#6706@npmcli/git@5.0.3
eb41977
#6706@npmcli/run-script@7.0.1
f30c9e3
#6706@npmcli/git@5.0.2
f334466
#6706pacote@17.0.4
bb63bf9
#6706@npmcli/run-script@7.0.0
75642c6
#6706@npmcli/promise-spawn@7.0.0
dbb18f4
#6706@npmcli/agent@2.1.0
812aa6d
#6706sigstore@2.1.0
7fab9d3
#6706@sigstore/tuf@2.1.0
12337cc
#6706which@4.0.0
b1ad3ad
#6706npm-packlist@8.0.0
43831d0
#6706pacote@17.0.3
44e8fec
#6706pacote@17.0.2
0d2e2c9
#6706 bump sigstore from 1.7.0 to 2.0.0dbd5885
#6706npm-profile@9.0.0
2ee0fb3
#6706npm-registry-fetch@16.0.0
81ff4df
#6706pacote@17.0.1
2b23d44
#6706 hoistread-package-json@7.0.0
325ed05
#6706 hoistnormalize-package-data@6.0.0
c3a1a02
#6706@npmcli/metavuln-calculator@7.0.0
f1dd130
#6706@npmcli/git@5.0.1
10792ea
#6706init-package-json@6.0.0
cac0725
#6706pacote@17.0.0
fd8beaf
#6706npm-pick-manifest@9.0.0
65f435e
#6706 hoistlru-cache@10.0.1
c784b57
#6706npm-package-arg@11.0.0
d6b1790
#6706normalize-package-data@6.0.0
2f03fb9
#6706make-fetch-happen@13.0.0
729e893
#6706hosted-git-info@7.0.0
7af81c7
#6706cacache@18.0.0
b0849ab
#6706@npmcli/package-json@5.0.0
c9587d7
#6706@npmcli/git@5.0.0
e28d426
#6706minipass-fetch@3.0.4
61e9b00
#6706@npmcli/metavuln-calculator@6.0.1
2c5542d
#6706minipass@7.0.3
ede7f5e
#6706glob@10.3.3
4c9eb17
#6706npm-install-checks@6.2.0
88ece81
#6706npm-pick-manifest@8.0.2
9117a4f
#6706ssri@10.0.5
45f8d6f
#6706make-fetch-happen@12.0.0
f6f6a18
#6706fs-minipass@3.0.3
5eea975
#6706cacache@17.1.4
ca33c98
#6706@npmcli/metavuln-calculator@6.0.0
7be541a
#6706npm-profile@8.0.0
edbc25a
#6706pacote@16.0.0
5d0d859
#6706npm-registry-fetch@15.0.0
@npmcli/arborist@7.0.0
@npmcli/config@7.1.0
libnpmaccess@8.0.0
libnpmdiff@6.0.0
libnpmexec@7.0.0
libnpmfund@4.1.0
libnpmhook@10.0.0
libnpmorg@6.0.0
libnpmpack@6.0.0
libnpmpublish@9.0.0
libnpmsearch@7.0.0
libnpmteam@6.0.0
libnpmversion@5.0.0
v9.9.4
Compare Source
Dependencies
080e201
#7930hosted-git-info@6.1.3
(#7930)401bb86
#7928tar@6.2.1
cfb3b77
#7928cross-spawn@7.0.6
6a5f8a8
#7928debug@4.3.7
72df313
#7928hosted-git-info@6.1.2
v9.9.3
Compare Source
Bug Fixes
88ea8c7
#7010 set objectMode for search filter stream (@lukekarrys)8d9d735
#7010 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)e0e75e5
#7010 unpublish bugfixes (#7039) (@wraithgar)4d59ce1
#7047 reverse direction of SPDX SBOM dep rels (#7047) (@bdehamer, @antonbauhofer)878f22b
#7008 properly catch missing url opener error (@wraithgar)91a8eca
#7008 properly catch missing url opener error on interactive prompt (@wraithgar)Dependencies
1968e0e
#7010spdx-license-ids@3.0.17
d130576
#7010spdx-exceptions@2.5.0
00f28b8
#7010signal-exit@4.1.0
57096c3
#7010postcss-selector-parser@6.0.15
3ce677e
#7010minipass-fetch@3.0.4
89757ed
#7010is-core-module@2.13.1
bc1e841
#7010socks@2.8.1
01f4049
#7010ignore-walk@6.0.4
15f8982
#7010function-bind@1.1.2
88ff949
#7010cmd-shim@6.0.2
3e298f6
#7010bin-links@4.0.3
35a6286
#7010are-we-there-yet@4.0.2
aeb28c4
#7010agentkeepalive@4.5.0
edc7e23
#7010@npmcli/query@3.1.0
00a3a08
#7010tar@6.2.0
7f424c3
#7010ssri@10.0.5
79b8538
#7010semver@7.6.0
b5faf10
#7010npm-install-checks@6.3.0
2c62266
#7010node-gyp@9.4.1
cc0516b
#7010minipass@7.0.4
651d362
#7010json-parse-even-better-errors@3.0.1
4b239c6
#7010glob@10.3.10
2f65b46
#7010fs-minipass@3.0.3
6c73ddf
#7010diff@5.2.0
73ee6cc
#7010ci-info@4.0.0
64715a4
#7010cacache@17.1.4
@npmcli/arborist@6.5.1
@npmcli/config@6.4.1
libnpmaccess@7.0.3
libnpmdiff@5.0.21
libnpmexec@6.0.5
libnpmfund@4.2.2
libnpmhook@9.0.4
libnpmorg@5.0.5
libnpmpack@5.0.21
libnpmpublish@7.5.2
libnpmsearch@6.0.3
libnpmteam@5.0.4
libnpmversion@4.0.3
Chores
77fa150
#7252 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)1d4c464
#7252@npmcli/template-oss@4.21.3
(@lukekarrys)6780643
#7010 dev dependency updates (@wraithgar)ce701e9
#7048 fix tests for zlib differences between node versions (#7048) (@wraithgar)v9.9.2
Compare Source
Bug Fixes
4c9a5e1
#6993 look in workspace for exec commands (#6993) (@wraithgar)bb6f496
#6992 correctly handle object licenses in SBOM generation (#6992) (@bdehamer, @jamietanna)10db3ca
#6990 pkg: properly output in workspace mode (#6990) (@wraithgar)Documentation
6ab06d7
#6985 update npm-prune description (#6985) (@Eomm)Dependencies
libnpmpublish@7.5.1
v9.9.1
Compare Source
Bug Fixes
0dba79a
#6942 add back bin/node-gyp-bin/node-gyp files (@lukekarrys)c93edb5
#6932 add backbin/node-gyp-bin/node-gyp
files (@lukekarrys)Documentation
e6cce28
#6925 use markdown links instead of html (@lukekarrys)v9.9.0
Compare Source
Features
ecda95a
#6841 add npm sbom command (#6841) (@bdehamer)fdb8a86
#6794 add package-lock-only mode to npm query (@wraithgar)16c04b1
#6877 add no-package-lock mode to npm audit (@wraithgar)66ef765
#6776 Add--cpu
and--os
option to override platform specific install (#6776) (@yukukotani)Bug Fixes
c9406f7
#6791 deprecate: ignore implicit workspace mode (#6758) (#6791) (@wraithgar)0b1d7c3
#6779 allow searching packages with no description (#6779) (@wraithgar, @lukekarrys)Documentation
9750720
#6694 fix example path (#6694) (@fvilers)Dependencies
588a245
#6756npm-pick-manifest@8.0.2
a76b1df
#6877sigstore@1.9.0
95b5ab0
#6877npm-install-checks@6.2.0
@npmcli/arborist@6.5.0
@npmcli/config@6.4.0
libnpmdiff@5.0.20
libnpmexec@6.0.4
libnpmfund@4.2.1
libnpmpack@5.0.20
v9.8.1
Compare Source
Bug Fixes
38351c9
#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb
#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe
#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3
#6651@npmcli/package-json@4.0.1
24f5a8b
#6653supports-color@9.4.0
f45498b
#6653chalk@5.3.0
44d60eb
#6653minimatch@9.0.3
fc9a843
#6653bin-links@3.0.2
daad9ad
#6653semver@7.5.4
c1ffd6a
#6653 move @npmcli/fs, @npmcli/promise-spawn into dependencieslibnpmexec@6.0.3
v9.8.0
Compare Source
Features
67459e7
#6626 addpkg fix
subcommand (@wraithgar)89b2741
#6548 add ps1 scripts (#6548) (@mribbons, @lukekarrys)Dependencies
b252164
#6626@npmcli/package-json@4.0.0
9238682
#6623sigstore@1.7.0
(#6623)@npmcli/arborist@6.3.0
libnpmdiff@5.0.19
libnpmexec@6.0.2
libnpmfund@4.0.19
libnpmpack@5.0.19
libnpmpublish@7.5.0
v9.7.2
Compare Source
Bug Fixes
939a188
#6574 ignore node prereleases in npm engines check (#6574) (@wraithgar)d980405
#6556 better color support detection (#6556) (@lukekarrys)40d7e09
#6555 remove unnecessary package.json values (#6555) (@lukekarrys)3a7378d
#6554 cleanup bin contents (@lukekarrys)e722439
#6497 move all definitions to @npmcli/config package (@lukekarrys)Documentation
405ffbf
#6557 remove redundant statement about files attribute (#6557) (@DaviDevMod)cd1e6aa
#6551 add flagpackage-lock-only
fornpm install
(#6551) (@m4rch3n1ng)Dependencies
aebc523
#6585safe-buffer@5.2.1
string_decoder@1.3.0
(#6585)bb6054b
#6573tuf-js@1.1.7
aee4a30
#6573strip-ansi@7.1.0
6105dbc
#6573path-scurry@1.9.2
22d44e8
#6573read-package-json@6.0.4
fdd02fd
#6573jackspeak@2.2.1
7797075
#6573is-core-module@2.12.1
f9780cc
#6573sigstore@1.6.0
72d6a79
#6573semver@7.5.2
98f1f5f
#6573nopt@7.2.0
8710ff8
#6573pacote@15.2.0
0cb539d
#6573node-gyp@9.4.0
39ad586
#6573ini@4.1.1
5e0070c
#6573glob@10.2.7
minimatch@9.0.1
26cf235
#6573cacache@17.1.3
@npmcli/arborist@6.2.10
@npmcli/config@6.2.1
libnpmdiff@5.0.18
libnpmexec@6.0.1
libnpmfund@4.0.18
libnpmpack@5.0.18
libnpmpublish@7.4.0
v9.7.1
Compare Source
Dependencies
7467ff6
#6518@npmcli/package-json@3.1.1
,@npmcli/git@4.1.0
v9.7.0
Compare Source
⚠️ DEPRECATED ⚠️
Features
a63a6d8
#6490 add provenanceFile option for libnpmpublish (@bdehamer)2a8f4f2
#6490 add new exclusive config item publish-file (@wraithgar)361e194
#6483 implement flag --prefer-dedupe fornpm install
(#6483) (@m4rch3n1ng)Bug Fixes
38eb39b
#6514 strip ansi characters from search results (#6514) (@wraithgar)4b5ccfc
#6477 make usage and completion static functions (#6477) (@lukekarrys)4f39e8c
#6479 refactor engines validation to lint syntax (#6479) (@lukekarrys)f3cfe12
#6482 remove unused lib/npm relics (#6482) (@lukekarrys)87de0c7
#6472 move explore command to @npmcli/package-json (@wraithgar)636e29e
#6472 move to @npmcli/package-json where possible (@wraithgar)37cc797
#6418 retrieve registry keys via TUF (#6418) (@bdehamer)Documentation
83cd5bd
#6480 add global option for uninstall (#6480) (@m4rch3n1ng)0400ce3
#6481 add cli params tonpm set
,npm get
(#6481) (@m4rch3n1ng)c3638ce
#6468 removepackage-lock
option fornpm ci
(#6468) (@m4rch3n1ng)Dependencies
060d587
chalk@5.2.0
,npm-audit-report@5.0.0
fc52ca8
#6472 remove read-package-json-fast3238aa7
#6472 remove read-package-json@npmcli/config@6.2.0
libnpmexec@6.0.0
libnpmpublish@7.3.0
v9.6.7
Compare Source
Bug Fixes
9202c7d
#6464 npm cache completion (#6464) (@m4rch3n1ng)6ce99a8
#6461 exit codes in node v20 (#6461) (@MichaelBitard)23c865f
#6434 deprecate ci-name config (#6434) (@wraithgar)Documentation
7751dd4
#6413 add a comma (#6413) (@darryltec)Dependencies
afc38a5
#6458cacache@17.1.2
afb936c
#6458tuf-js@1.1.6
f6a0884
#6458readable-stream@4.4.0
858f0ca
#6458postcss-selector-parser@6.0.13
53ecb84
#6458path-scurry@1.9.1
d93f70c
#6458signal-exit@4.0.2
19214b5
#6458@npmcli/package-json@3.1.0
f53e6ff
#6458sigstore@1.5.2
94d6ee7
#6458glob@10.2.4
902cb80
#6458semver@7.5.1
35e2e9a
#6458@npmcli/run-script@6.0.2
@npmcli/config@6.1.7
libnpmpublish@7.2.0
v9.6.6
Compare Source
Dependencies
70e65b1
#6423tuf-js@1.1.5
(#6423)72291f7
#6416read-package-json@6.0.3
e498f82
#6416minimatch@9.0.0
13aa7b7
#6416minipass@5.0.0
f2a5678
#6416tar@6.1.14
69d4dd2
#6416 npm updateabdca39
#6416sigstore@1.4.0
16f68fb
#6416glob@10.2.2
67fcfb1
#6416ignore-walk@6.0.3
bfa2ff3
#6416make-fetch-happen@11.1.1
877591a
#6416npm-registry-fetch@14.0.5
7630517
#6416pacote@15.1.3
c2d6e0a
#6416write-file-atomic@5.0.1
acdf97e
#6416which@3.0.1
00c541a
#6416ssri@10.0.4
1b95e73
#6416read-package-json@6.0.2
6927fd3
#6416fs-minipass@3.0.2
3eec56e
#6416cacache@17.1.0
7a2ce3f
#6416@npmcli/run-script@6.0.1
3881770
#6416@npmcli/map-workspaces@3.0.4
@npmcli/arborist@6.2.9
libnpmdiff@5.0.17
libnpmexec@5.0.17
libnpmfund@4.0.17
libnpmorg@5.0.4
libnpmpack@5.0.17
libnpmpublish@7.1.4
v9.6.5
Compare Source
Bug Fixes
33dc428
#6374 account for npx package-name with no spec (@wraithgar)82879f6
#6225 lazy loading of arborist and pacote (#6225) (@wraithgar)f4e73ab
#6322 remove incompatible params from ci (#6322) (@wraithgar)c7fe1c7
#6328 save raw data to file, not parsed data (@wraithgar)Documentation
31214a6
#6381 Update description for publish --provenance flag (#6381) (@feelepxyz)997bcdf
#6329 fix npm cache folder location for windows (#6329) (@charlie-wong)Dependencies
fae5e00
#6372sigstore@1.3.0
(#6372)3fa9542
#6363semver@7.5.0
e49844e
#6363minipass-fetch@3.0.2
357cc29
#6363walk-up-path@3.0.1
2c80b1e
#6363ini@4.1.0
5933841
#6363minipass@4.2.8
b39d54e
#6363minimatch@7.4.6
201aa5a
#6363ssri@10.0.3
acb9120
#6363read@2.1.0
2472205
#6363npm-registry-fetch@14.0.4
2780714
#6363npm-install-checks@6.1.1
b5af015
#6363make-fetch-happen@11.1.0
14c498d
#6363@npmcli/metavuln-calculator@5.0.1
@npmcli/arborist@6.2.8
@npmcli/config@6.1.6
libnpmdiff@5.0.16
libnpmexec@5.0.16
libnpmfund@4.0.16
libnpmpack@5.0.16
v9.6.4
Compare Source
Documentation
54795a3
#6312 filter archives out of version manager search (#6312) (@ljharb)530c285
#6306 remove reference to npm-packlist (#6306) (@staff0rd)Dependencies
85935ac
#6325ssri@10.0.2
(#6325)f1388b4
#6317 npm update7dd0129
#6317glob@9.3.2
deca335
#6317promise-call-limit@1.0.2
@npmcli/arborist@6.2.7
libnpmdiff@5.0.15
libnpmexec@5.0.15
libnpmfund@4.0.15
libnpmpack@5.0.15
v9.6.3
Compare Source
Bug Fixes
829503b
#6304 don't break up log message across lines (@wraithgar)1435fcf
#6304 do less work loading ./lib/npm.js (@wraithgar)09b58e4
#6284 make all color output use an npm instance of chalk (#6284) (@lukekarrys)e252532
#6283 do less work looking up commands (#6283) (@wraithgar)6a4bcba
#6275 clean up man sorting (@wraithgar)8a96b65
#6275 ignore ts and map files (@wraithgar)94d2b39
#6271 Do not log warnings about log cleanup when logs_max=0 (#6271) (@jmealo)2def359
#6277 updated ebadplatform messaging to be generated based on the error (#6277) (@nlf)Documentation
1e2eb81
#6311 replace version manager list with a github search (#6311) (@wraithgar)9d2be4e
#6289 remove npm bin link (#6289) (@KevinRouchut)Dependencies
e652dbd
#6308minimatch@7.4.3
(#6308)01986d1
#6307sigstore@1.2.0
(#6307)ea12627
#6275minimatch@7.4.2
ec3e020
#6275glob@9.3.1
952fbed
#6275read-package-json@6.0.1
dd43d30
#6275parse-conflict-json@3.0.1
d5ce7ca
#6275npm-install-checks@6.1.0
704cd1e
#6275nopt@7.1.0
a6da22a
#6275ignore-walk@6.0.2
55955fd
#6275cacache@17.0.5
839b670
#6275@npmcli/map-workspaces@3.0.3
9a7b8e8
#6275@npmcli/git@4.0.4
57c0a55
#6275 npm update74c80f5
#6275minipass@4.2.5
b174c90
#6275graceful-fs@4.2.11
@npmcli/arborist@6.2.6
@npmcli/config@6.1.5
libnpmdiff@5.0.14
libnpmexec@5.0.14
libnpmfund@4.0.14
libnpmpack@5.0.14
libnpmpublish@7.1.3
v9.6.2
Compare Source
Bug Fixes
4622b42
#6247 add provenance publish notice (#6247) (@bdehamer)Dependencies
434b461
#6255sigstore@1.1.1
(#6255)@npmcli/config@6.1.4
libnpmpublish@7.1.2
v9.6.1
Compare Source
Bug Fixes
e455e3f
#6211 send options with grant/revoke requests (#6211) (@DavidTanner)e4de224
#6220 clean uri from audit error (#6220) (@wraithgar)Dependencies
cb45b21
#6231 npm update1f60a7e
#6231minipass@4.2.4
@npmcli/arborist@6.2.5
libnpmdiff@5.0.13
libnpmexec@5.0.13
libnpmfund@4.0.13
libnpmpack@5.0.13
libnpmpublish@7.1.1
v9.6.0
Compare Source
Features
84fbaf2
#6216 add preliminary fish shell completion (@wraithgar)Bug Fixes
c4c8754
audit: add signatures to completion (@wraithgar)fc46489
access: only complete once (@wraithgar)b43961a
cmd-list: alias only to real commands (@wraithgar)Documentation
2695e1f
#6187 npm v9 creates package-lock.json v3 (#6187) (@tuukka)Dependencies
71ae406
#6218@npmcli/installed-package-contents@2.0.2
@npmcli/arborist@6.2.4
libnpmdiff@5.0.12
libnpmexec@5.0.12
libnpmfund@4.0.12
libnpmpack@5.0.12
v9.5.1
Compare Source
Documentation
9bc455b
#6188 fixing typos (#6188) (@deining)ec8c95c
#6186 update OSI link (#6186) (@roerohan)Dependencies
7ba3e17
#6189 npm updatef7a5200
pacote@15.1.1
@npmcli/arborist@6.2.3
libnpmdiff@5.0.11
libnpmexec@5.0.11
libnpmfund@4.0.11
libnpmpack@5.0.11
v9.5.0
Compare Source
Features
79bfd03
#6153 audit signatures verifies attestations (@feelepxyz)5fc6473
add provenance attestation (@bdehamer)Bug Fixes
53f75a4
#6158 gracefully fallback from auth-type=web (#6158) (@MylesBorins)ed59aae
#6162 refactor error reporting in audit command (@bdehamer)Dependencies
fad0473
minipass@4.0.3
678c6bf
minimatch@6.2.0
9b4b366
ci-info@3.8.0
d20ee2a
pacote@15.1.0
libnpmpublish@7.1.0
libnpmteam@5.0.3
v9.4.2
Compare Source
Bug Fixes
d02da52
#6142 revertinstall-links
default back tofalse
(#6142) (@nlf)Documentation
6ea2cd7
#6134 update references to OTP to be accurate (#6134) (@MylesBorins)Dependencies
cb6713d
#6143 rebuild package-lock (#6143)8200f4f
#6133ignore-walk@6.0.1
d43f881
map-workspaces@3.0.2
99457f1
minimatch@6.1.6
f4c8c62
init-package-json@5.0.0
3c6615f
npm-user-validate@2.0.0
10445ca
remove mkdirpab82492
node-gyp@9.3.1
74c5cbb
minipass@4.0.2
1138038
make-fetch-happen@11.0.3
c1ccfa1
glob@8.1.0
3dc17ce
fs-minipass@3.0.1
5c84a99
ci-info@3.7.1
fc5332f
read@2.0.0
@npmcli/arborist@6.2.2
@npmcli/config@6.1.3
libnpmdiff@5.0.10
libnpmexec@5.0.10
libnpmfund@4.0.10
libnpmhook@9.0.3
libnpmorg@5.0.3
libnpmpack@5.0.10
libnpmpublish@7.0.8
v9.4.1
Compare Source
Bug Fixes
1525a5e
#6082 unpublish with scoped registry (@wraithgar)Dependencies
721fe3f
#6118read-package-json-fast@3.0.2
6e4a649
pacote@15.0.8
1820afe
cacache@17.0.4
24b2ec4
@npmcli/promise-spawn@6.0.2
4b8046e
@npmcli/name-from-folder@2.0.0
1d4be7a
@npmcli/map-workspaces@3.0.1
a39556f
@npmcli/template-oss@4.11.3
64b06ed
#6115http-cache-semantics@4.1.1
@npmcli/arborist@6.2.1
@npmcli/config@6.1.2
libnpmaccess@7.0.2
libnpmdiff@5.0.9
libnpmexec@5.0.9
libnpmfund@4.0.9
libnpmhook@9.0.2
libnpmorg@5.0.2
libnpmpack@5.0.9
libnpmpublish@7.0.7
libnpmsearch@6.0.2
libnpmteam@5.0.2
libnpmversion@4.0.2
v9.4.0
Compare Source
Features
8d6d851
#6078 added --install-strategy=linked (#6078) (@fritzy)Dependencies
@npmcli/arborist@6.2.0
libnpmdiff@5.0.8
libnpmexec@5.0.8
libnpmfund@4.0.8
libnpmpack@5.0.8
v9.3.1
Compare Source
Bug Fixes
8be672b
#6050 don't try to deprecate nonexistant versions (#6050) (@wraithgar)1c3612c
#6054 use recursive rm in ci command (#6054) (@jamesshaw1987, @burkel24)v9.3.0
Compare Source
Features
753b98e
#5261 rootless workspace init provides suggestion (@fritzy)Bug Fixes
cf175fb
#6044 default auth-type to legacy if otp is configured (#6044) (@wraithgar)2383deb
#6037 clean urls from arborist, owner, and ping commands (#6037) (@lukekarrys)69f5ff8
view: convert command to use output instead of console (@lukekarrys)dc52222
init: write package.json workspaces paths with / separators (@lukekarrys)31af1aa
refactorhelp
to use@npmcli/promise-spawn
(@lukekarrys)669ef94
fund: correctly parse and usewhich
config (@lukekarrys)72e6d6f
generate workspace support for docs pages (@lukekarrys)450e50f
evaluate configs in command class (@lukekarrys)28ec922
#5946 replace rimraf with fs.rm (@lukekarrys)Documentation
f0038e5
#6048 missing backtick in synopsis of npm init (#5837) (#6048) (@Peallyz)ca8ff00
#6045 update outdated file path to definitions.js (@ericmutta)fe9debd
#6038 fix typos in definitions.js (#6038) (@lukekarrys, @ericmutta)fa27aca
#6018 fix typo in removal.md (@ericmutta)82f69d9
#6026 fix typo in registry.md (@ericmutta)Dependencies
ec09474
#5945minipass-fetch@3.0.1
@npmcli/arborist@6.1.6
@npmcli/config@6.1.1
libnpmdiff@5.0.7
libnpmexec@5.0.7
libnpmfund@4.0.7
libnpmpack@5.0.7
v9.2.0
Compare Source
Features
cf57ffa
#5888 discrete npm doctor commands (#5888) (@wraithgar)Bug Fixes
dfd5d46
#5932 ignore implicit workspaces for completion (#5932) (@wraithgar)Dependencies
2f2b146
#5936npm-packlist@7.0.4
(#5936)372d158
#5935minimatch@5.1.1
(#5935)0e6c28b
#5934ci-info@3.7.0
(#5934)0a3fe00
#5933minipass@4.0.0
6b77340
tar@6.1.13
cf0a174
ssri@10.0.1
3da9a1a
pacote@15.0.7
fee9b66
npm-registry-fetch@14.0.3
e940917
cacache@17.0.3
875bd56
npm-package-arg@10.1.0
280b7a4
#5927npm-packlist@7.0.3
@npmcli/arborist@6.1.5
libnpmaccess@7.0.1
libnpmdiff@5.0.6
libnpmexec@5.0.6
libnpmfund@4.0.6
libnpmhook@9.0.1
libnpmorg@5.0.1
libnpmpack@5.0.6
libnpmpublish@7.0.6
libnpmsearch@6.0.1
libnpmteam@5.0.1
v9.1.3
Compare Source
Bug Fixes
ffbdea2
#5894 npm pack filename on scoped packages (#5894) (@HenryNguyen5)c26d708
#5884 validate username at get-identity (#5884) (@sosoba, @nlf)Documentation
ea948dc
#5881 update description of npm exec (#5881) (@styfle, @wraithgar)40f2c21
#5865 ci-info url (#5865) (@wraithgar)681a45b
#5875 run the comand for directory workspaces (#5875) (@1aron)681a45b
#5875 add workspace directory example (#5875) (@1aron)Dependencies
@npmcli/arborist@6.1.4
libnpmdiff@5.0.5
libnpmexec@5.0.5
libnpmfund@4.0.5
libnpmpack@5.0.5
libnpmpublish@7.0.5
v9.1.2
Compare Source
Bug Fixes
d9654cf
#5861 remove unwanted package.json entries (#5861) (@wraithgar)Dependencies
a351685
#5858 move from @npmcli/ci-detect to ci-info (#5858)@npmcli/arborist@6.1.3
libnpmdiff@5.0.4
libnpmexec@5.0.4
libnpmfund@4.0.4
libnpmpack@5.0.4
libnpmpublish@7.0.4
v9.1.1
Compare Source
Documentation
1bff064
#5819 config: documentnpm config fix
(#5819) (@wraithgar)Dependencies
335c7e4
#5813cacache@17.0.2
878ddfb
@npmcli/fs@3.1.0
@npmcli/arborist@6.1.2
libnpmdiff@5.0.3
libnpmexec@5.0.3
libnpmfund@4.0.3
libnpmpack@5.0.3
libnpmpublish@7.0.3
v9.1.0
Compare Source
Features
706b3d3
#5779 set --no-audit when installing outside of a project (like --global) (@fritzy)Bug Fixes
1f5382d
#5789 don't setstdioString
for any spawn/run-script calls (@lukekarrys)8fd614a
use promiseSpawn.open instead of opener (@nlf)41843ad
use an absolute path to notepad.exe by default, correct docs (@nlf)0c5834e
#5758 use hosted-git-info to parse registry urls (#5758) (@lukekarrys)Documentation
ce6745c
#5763 fixed some typos (#5763) (@AndrewDawes)Dependencies
b89c19e
#5795cli-table3@​0.6.3
6b6dfca
fastest-levenshtein@1.0.16
9972ed1
@npmcli/ci-detect@3.0.1
024e612
abbrev@2.0.0
66f9bcd
nopt@7.0.0
5730d17
tar@6.1.12
2fef570
node-gyp@9.3.0
abfb28b
@npmcli/run-script@6.0.0
205e2fd
pacote@15.0.6
ac25863
remove opener,@npmcli/promise-spawn@6.0.1
,@npmcli/run-script@5.1.1
,@npmcli/git@4.0.3
,pacote@15.0.5
,which@3.0.0
@npmcli/arborist@6.1.1
@npmcli/config@6.1.0
libnpmdiff@5.0.2
libnpmexec@5.0.2
libnpmfund@4.0.2
libnpmpack@5.0.2
libnpmpublish@7.0.2
libnpmversion@4.0.1
v9.0.1
Compare Source
Documentation
b5fadd0
#5742 Better npx link (#5742) (@mrienstra)Dependencies
de6618e
#5757@npmcli/promise-spawn@5.0.0
(#5757)5625274
#5755hosted-git-info@6.1.0
(#5755)32bdd68
#5754npm-packlist@7.0.2
(#5754)@npmcli/arborist@6.1.0
libnpmdiff@5.0.1
libnpmexec@5.0.1
libnpmfund@4.0.1
libnpmpack@5.0.1
libnpmpublish@7.0.1
v9.0.0
Compare Source
⚠️ BREAKING CHANGES
npm
is now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0
npm
will no longer attempt to modify ownership of files it createslogin
,adduser
, andauth-type
changessso
,saml
&legacy
have been consolidated into"legacy"
auth-type
defaults to"web"
login
andadduser
are now separate commands that send different data tothe registry.
auth-type
config valuesweb
andlegacy
only trytheir respective methods, npm no longer tries them all and waits to see
which one doesn't fail.
npm pack
now follows a strict order of operations when applying ignore rules. If afiles
array is present in thepackage.json
, then rules in.gitignore
and.npmignore
files from the root will be ignored.HEAD
instead ofmaster
as the default reftiming
andloglevel
changestiming
has been removed as a value for--loglevel
--timing
will show timing information regardless of--loglevel
, except when--silent
--timing
file changes:--timing
flag,npm
now writes timing data to afile alongside the debug log data, respecting the
logs-dir
option andfalling back to
<CACHE>/_logs/
dir, instead of directly inside thecache directory.
each run will create a uniquely named
<ID>-timing.json
file, with the<ID>
portion being the same as the debug log.metadata
,timers
, andunfinishedTimers
instead of everything beinga top level key.
npm
now outputs some json errors on stdout. Previouslynpm
would output all json formatted errors on stderr, making it difficult to parse as the stderr stream usually has logs already written to it. In the future,npm
will differentiate between errors and crashes. Errors, such asE404
andERESOLVE
, will be handled and will continue to be output on stdout. In the case of a crash,npm
will log the error as usual but will not attempt to display it as json, even in--json
mode. Moving a case from the category of an error to a crash will not be considered a breaking change. For more information see npm/rfcs#482.--install-strategy
--global-style
,--global
now sets--install-strategy=shallow
--legacy-bundling
, now sets--install-strategy=nested
npm config set
will no longer accept deprecated or invalid config optionsinstall-links
config defaults to"true"
node-version
config has been removednpm-version
config has been removednpm access
subcommands have been renamednpm birthday
has been removednpm set-script
has been removednpm bin
has been removed (usenpx
ornpm exec
to execute binaries)Features
a09e19d
#5696 introduce thenpm config fix
command (@nlf)d2963c6
explicitly validate config within the cli (@nlf)a5fec08
rewrite: docs generation (@lukekarrys)9609e9e
#5605 use v3 lockfiles by default (@fritzy)3ae796d
implement newnpm-packlist
behavior (@lukekarrys)e64d69a
#5581 write eresolve error files to the logs directory (@lukekarrys)3445da0
timings are now written alongside debug log files (@lukekarrys)66ed584
#5551 defaultauth-type
to"web"
(@wraithgar)6ee5b32
query: displayqueryContext
in results (@nlf)314311c
#5550 separatelogin
/adduser
& remove unnecessary auth types (@wraithgar)9c32c6c
rewrite:npm access
(@wraithgar)854521b
rewrite:libnpmaccess
(@wraithgar)e95017a
#5485 feat(workspaces): update supported node engines inpackage.json
(@lukekarrys)de2d33f
add--install-strategy=hoisted|nested|shallow
, deprecate--global-style
,--legacy-bundling
(#5709) (@fritzy)49bbb2f
#5455 removenpm birthday
(@wraithgar)926f0ad
#5456 removenpm set-script
(@wraithgar)2a8c2fc
#5458 defaultinstall-links
to"true"
(@wraithgar)2e92800
#5459 removenpm bin
(@wraithgar)457d388
#5475 update supported node engines in package.json (@wraithgar)46d038f
#5716 output json formatted errors onstdout
(@lukekarrys)0a69db4
#5719 refuse to set deprecated/invalid config (@wraithgar)6e4961f
separate configs for--timing
and--loglevel
(@lukekarrys)6a27a7b
#5712 deprecatedkey
,cert
config options and updated registry scoped auth docs (@fritzy)Bug Fixes
c3d7549
add tag to publish log message (@wraithgar)a35c784
#5691 config: removenode-version
andnpm-version
(@wraithgar)e4e8ae2
libnpmpack: obeyforegroundScripts
(@winterqt)07fabc9
#5633npm link
should override--install-links
(@fritzy)02fcbb6
#5634 ensureArborist
constructor gets passed around everywhere forpacote
(@nlf)0d90a01
#5480 audit: add a condition to allow third-party registries returning E400 (@juanheyns, Juan Heyns)41481f8
#5475 attempt more graceful failure in older node versions (@wraithgar)fc82298
#5295npm hook ls
duplicates hook name prefixes (@gennadiygashev)3f1fcf0
account for newnpm-package-arg
behavior (@wraithgar)353b5bb
#5710 removechownr
andmkdirp-infer-owner
(@nlf)Documentation
285b39f
#5324 add documentation for expanded:semver
selector (@nlf)fd0eebe
update registry docs header (@hughlilly)542efdb
updatefolders
page for modern npm (@shalvah)f37caad
#5606 accurately describeinstall-links
effect on relative paths (@lukekarrys)130bc9f
#5626 remove circular reference (#5626) (@giovanniPepi)f0e7584
#5601 update docs/logging for new--access
default (@wraithgar)2d756cb
#5527 add instruction to query objects withnpm view
(@moonith)8743366
#5519 add hash to "tag" config link (@mrienstra, @lukekarrys)5645c51
#5521 link mentions of config parameters (@mrienstra)19762b4
#5529 modify misleading doc about bins (@Hafizur046)19762b4
#5529 modify misleading doc about package.json:bin (@Hafizur046)8402fd8
#5547 add:outdated
pseudo selector to docs (@nlf)Dependencies
df77a1f
#5707 Update Major Versions of DependenciesUpdated:
@npmcli/config@6.0.1
@npmcli/disparity-colors@3.0.0
@npmcli/git@4.0.1
@npmcli/installed-package-contents@2.0.0
@npmcli/map-workspaces@3.0.0
@npmcli/metavuln-calculator@5.0.0
@npmcli/move-file@3.0.0
@npmcli/node-gyp@3.0.0
@npmcli/package-json@3.0.0
@npmcli/promise-spawn@4.0.0
@npmcli/query@3.0.0
@npmcli/run-script@5.0.0
bin-links@4.0.1
cacache@17.0.1
ignore-walk@6.0.0
init-package-json@4.0.1
json-parse-even-better-errors@3.0.0
make-fetch-happen@11.0.1
normalize-package-data@5.0.0
npm-audit-report@4.0.0
npm-install-checks@6.0.0
npm-packlist@7.0.1
npm-pick-manifest@8.0.1
npm-profile@7.0.1
npm-registry-fetch@14.0.2
npmlog@7.0.0
pacote@15.0.1
parse-conflict-json@3.0.0
proc-log@3.0.0
read-package-json-fast@3.0.1
read-package-json@6.0.0
ssri@10.0.0
treeverse@3.0.0
validate-npm-package-name@5.0.0
write-file-atomic@5.0.0
Removed:
@npmcli/fs
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.Merge
Merge the changes and update on Forgejo.Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.