Update npm to v10 #26
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
|
Important Auto Review SkippedBot user detected. To trigger a single review, invoke the Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on X ? TipsChat with CodeRabbit Bot (
|
Apply Sweep Rules to your PR?
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
>=6 <7->>=6 <11Release Notes
npm/cli (npm)
v10.5.0Compare Source
Features
2366edc#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb#5966 add --expect-entries tonpm query(@wraithgar)Bug Fixes
818957c#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)Documentation
c4741fe#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9#7182 fix typos (#7182) (@GoodDaisy)Dependencies
16d4c9f#7218@npmcli/query@3.1.006247d1#7242spdx-license-ids@3.0.1779d1e0b#7242spdx-exceptions@2.5.067e853a#7242socks@2.8.04c9fe4b#7242lru-cache@10.2.04a50c5a#7242https-proxy-agent@7.0.4ed3f254#7242http-proxy-agent@7.0.28ec4fd5#7242hasown@2.0.198b1189#7242@npmcli/agent@2.2.1dafa903#7242sigstore@2.2.2d0bcb76#7242diff@5.2.0a13808e#7242semver@7.6.0d6521ac#7242@sigstore/tuf@2.3.143cac2f#7242ip@2.0.1@npmcli/arborist@7.4.0@npmcli/config@8.2.0libnpmdiff@6.0.7libnpmexec@7.0.8libnpmfund@5.0.5libnpmpack@6.0.7Chores
d6bc684#7242 update devDependencies in lockfile (@wraithgar)v10.4.0Compare Source
Features
35a098c#7175 display tree diff on--long(@wraithgar)dffca29#7174 format: print--dry-rundiffs in table format (#7174) (@ritaaktay)6d5f9ac#7133 dedupe - display difference when--dry-runis enabled (#7133) (@Blaumaus)Bug Fixes
ec06f77#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)Documentation
2b7eaad#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc#7150 config: State default configuration file affected bynpm config set(#7150) (@DanKaplanSES)44f4518#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)Dependencies
ec77e81#7124promise-call-limit@3.0.1e32189c#7173 deduplicate treeb7af4d9#7173tar-stream@3.1.76883743#7173@npmcli/run-script@7.0.4739634d#7157 remove strip-ansi162c82e#7148pacote@17.0.6(#7148) (@bdehamer)a50b03b#7141sigstore@2.2.0(#7141) (@bdehamer)f696b51#7132@sigstore/tuf@2.3.0(#7132) (@bdehamer)@npmcli/arborist@7.3.1libnpmdiff@6.0.6libnpmexec@7.0.7libnpmfund@5.0.4libnpmpack@6.0.6libnpmpublish@9.0.4Chores
a82ccc5#7173nock@13.5.0(@wraithgar)dcaa99c#7173 fix exec test (@wraithgar)0d96080#7162 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)v10.3.0Compare Source
Features
6673c77#6914 add--libcoption to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)Bug Fixes
b7fc10a#7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)Dependencies
3fd5213#7121npm-packlist@8.0.25698415#7121postcss-selector-parser@6.0.15e56a4f3#7121are-we-there-yet@4.0.28495b7c#7121cacache@18.0.2796d1c7#7121@npmcli/run-script@7.0.33b7f6f2#7121@npmcli/promise-spawn@7.0.17ecd146#7121npmcli/git@5.0.4@npmcli/arborist@7.3.0@npmcli/config@8.1.0libnpmdiff@6.0.5libnpmexec@7.0.6libnpmfund@5.0.3libnpmpack@6.0.5Chores
2fd8292#7121 work around @npmcli/git lazy loading (@wraithgar)cd9a66d#7121 update devDependencies in lockfile (@wraithgar)2dda715#7121tap@16.3.10(@wraithgar)v10.2.5Compare Source
Bug Fixes
c7a592c#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231#7033 skip creation of log directory iflogs-maxis set to 0 (#7033) (@JJ)6267f54#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)Dependencies
ff1204a#7058lru-cache@10.1.0c648020#7058json-parse-even-better-errors@3.0.153aa8f2#7058pacote@17.0.52e5331c#7058npm-packlist@8.0.1937b7b7#7058ignore-walk@6.0.435371c8#7058cacache@18.0.1@npmcli/arborist@7.2.2@npmcli/config@8.0.3libnpmaccess@8.0.2libnpmdiff@6.0.4libnpmexec@7.0.5libnpmfund@5.0.2libnpmhook@10.0.1libnpmorg@6.0.2libnpmpack@6.0.4libnpmpublish@9.0.3libnpmsearch@7.0.1libnpmteam@6.0.1libnpmversion@5.0.2Chores
f656b66#7062@npmcli/template-oss@4.21.3(#7062) (@lukekarrys)9754b17#7051 use global npm for workspace tests (@lukekarrys)3891757#7051@npmcli/template-oss@4.21.2(@lukekarrys)71f70fa#7058nock@13.4.0(@wraithgar)43674a4#7058tap@16.3.9(@wraithgar)4ba585c#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)v10.2.4Compare Source
Bug Fixes
cd291e7#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08#6951 properly catch missing url opener error (#6951) (@wraithgar)Documentation
a38836c#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f#6987 update npm-prune description (#6987) (@Eomm)Dependencies
e9ec2f7#6994lru-cache@10.0.2faf9eff#6994is-core-module@2.13.1b00e780#6994@sigstore/sign@2.2.04613774#6994 hoisting newer deps in favor of older ones54c4f7b#6994signal-exit@4.1.08c5882f#6994strip-ansi@7.1.0cd0c649#6994ci-info@4.0.0a0a58b7#6994@sigstore/tuf@2.2.0b3a53c6#6949is-cidr@5.0.3(#6949)@npmcli/config@8.0.2libnpmexec@7.0.4libnpmpublish@9.0.2v10.2.3Compare Source
Dependencies
b5dedf3#6958node-gyp@10.0.1v10.2.2Compare Source
Bug Fixes
8ed6d28#6910 make npm link respect --no-save (#6910) (@Santoshraj2)eacec5f#6941 add back bin/node-gyp-bin/node-gyp files (#6941) (@lukekarrys)b776753#6928 Grammar mistake in authentication error message (#6928) (@Gekuro, gek)Documentation
c422a01#6924 use markdown links instead of html (@lukekarrys)dd03aa0#6921 add v9 and above for lockfile version 3 (#6921) (@MikeMcC399)Dependencies
dfb6298#6937node-gyp@10.0.0(#6937)@npmcli/arborist@7.2.1libnpmdiff@6.0.3libnpmexec@7.0.3libnpmfund@5.0.1libnpmpack@6.0.3libnpmversion@5.0.1v10.2.1Compare Source
Bug Fixes
35c92fe#6902 Add check to pkg command to deal with empty values (#6902) (@NeonArray)5b6172f#6895 logout from custom registry (@wraithgar)8423d4f#6895 delete auth from proper location on logout (@wraithgar)0cfe9de#6873 audit: spelling error in message (#6873) (@Fdawgs)Documentation
5142735#6894 update npm build description (#6894) (@siemhesda)2e4b4ad#6861 npm publish content modification (#6861) (@jpg619)Dependencies
96e1637#6915cmd-shim@6.0.2(#6915)b405da1#6899bin-links@4.0.3ef69d36#6895npm-registry-fetch@16.1.0337c903#6882spdx-license-ids@3.0.16e6b0be7#6882socks-proxy-agent@8.0.2ee6892e#6882readable-stream@4.4.261c3ee9#6882minipass@7.0.414d31fd#6882is-core-module@2.13.003f3d2e#6882https-proxy-agent@7.0.2e0163c6#6882are-we-there-yet@4.0.1fca804a#6882ci-info@3.9.06af582f#6882npm-install-checks@6.3.0@npmcli/config@8.0.1v10.2.0Compare Source
Features
7c459d2#6801 add npm sbom command (#6801) (@bdehamer)81a460f#6732 add package-lock-only mode to npm query (@wraithgar)0d29855#6732 add no-package-lock mode to npm audit (@wraithgar)Bug Fixes
2207628#6823 use strip-ansi module instead of internal regex (#6823) (@wraithgar)d46d052#6798 tolerate null bugs URLs (#6798) (@vladh)fb1b674#6758 deprecate: ignore implicit workspace mode (#6758) (@wraithgar)Documentation
68031f2#6844 updateCONTRIBUTING.mdto prevent errors (#6844) (@darcyclarke)3ac703c#6831 addincludeparam to commands that haveomitparam (#6831) (@siemhesda)03912db#6819 add init-specific params to init docs/help (#6819) (@wraithgar)8088325#6800 Update npm-doctor.md (#6800) (@siemhesda)Dependencies
aa6728b#6859tar@6.2.0ce9089f#6859npm-package-arg@11.0.139d7f04#6859minipass@7.0.40a47af5#6859hosted-git-info@7.0.1af93130#6859glob@10.3.103ebc474#6859@npmcli/query@3.0.1284cbfd#6858@npmcli/agent@2.2.0@npmcli/arborist@7.2.0@npmcli/config@8.0.0libnpmaccess@8.0.1libnpmdiff@6.0.2libnpmexec@7.0.2libnpmfund@5.0.0libnpmorg@6.0.1libnpmpack@6.0.2libnpmpublish@9.0.1v10.1.0Compare Source
Features
1c93c44#6755 Add--cpuand--osoption to override platform specific install (#6755) (@yukukotani)Bug Fixes
7bf2374#6762 make$npm_execpathalways point to npm (@rotu)Documentation
09d8e0a#6759 fix versions of node.js in readme (#6759) (@JoaoOtavioS)Dependencies
f76066a#6771@npmcli/agent@2.1.1@npmcli/arborist@7.1.0@npmcli/config@7.2.0libnpmdiff@6.0.1libnpmexec@7.0.1libnpmfund@4.1.1libnpmpack@6.0.1v10.0.0Compare Source
Features
48a7b07remove prerelease flags (@lukekarrys)Dependencies
@npmcli/arborist@7.0.0@npmcli/config@7.1.0libnpmaccess@8.0.0libnpmdiff@6.0.0libnpmexec@7.0.0libnpmfund@4.1.0libnpmhook@10.0.0libnpmorg@6.0.0libnpmpack@6.0.0libnpmpublish@9.0.0libnpmsearch@7.0.0libnpmteam@6.0.0libnpmversion@5.0.0v9.9.3Compare Source
Bug Fixes
88ea8c7#7010 set objectMode for search filter stream (@lukekarrys)8d9d735#7010 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)e0e75e5#7010 unpublish bugfixes (#7039) (@wraithgar)4d59ce1#7047 reverse direction of SPDX SBOM dep rels (#7047) (@bdehamer, @antonbauhofer)878f22b#7008 properly catch missing url opener error (@wraithgar)91a8eca#7008 properly catch missing url opener error on interactive prompt (@wraithgar)Dependencies
1968e0e#7010spdx-license-ids@3.0.17d130576#7010spdx-exceptions@2.5.000f28b8#7010signal-exit@4.1.057096c3#7010postcss-selector-parser@6.0.153ce677e#7010minipass-fetch@3.0.489757ed#7010is-core-module@2.13.1bc1e841#7010socks@2.8.101f4049#7010ignore-walk@6.0.415f8982#7010function-bind@1.1.288ff949#7010cmd-shim@6.0.23e298f6#7010bin-links@4.0.335a6286#7010are-we-there-yet@4.0.2aeb28c4#7010agentkeepalive@4.5.0edc7e23#7010@npmcli/query@3.1.000a3a08#7010tar@6.2.07f424c3#7010ssri@10.0.579b8538#7010semver@7.6.0b5faf10#7010npm-install-checks@6.3.02c62266#7010node-gyp@9.4.1cc0516b#7010minipass@7.0.4651d362#7010json-parse-even-better-errors@3.0.14b239c6#7010glob@10.3.102f65b46#7010fs-minipass@3.0.36c73ddf#7010diff@5.2.073ee6cc#7010ci-info@4.0.064715a4#7010cacache@17.1.4@npmcli/arborist@6.5.1@npmcli/config@6.4.1libnpmaccess@7.0.3libnpmdiff@5.0.21libnpmexec@6.0.5libnpmfund@4.2.2libnpmhook@9.0.4libnpmorg@5.0.5libnpmpack@5.0.21libnpmpublish@7.5.2libnpmsearch@6.0.3libnpmteam@5.0.4libnpmversion@4.0.3Chores
77fa150#7252 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)1d4c464#7252@npmcli/template-oss@4.21.3(@lukekarrys)6780643#7010 dev dependency updates (@wraithgar)ce701e9#7048 fix tests for zlib differences between node versions (#7048) (@wraithgar)v9.9.2Compare Source
Bug Fixes
4c9a5e1#6993 look in workspace for exec commands (#6993) (@wraithgar)bb6f496#6992 correctly handle object licenses in SBOM generation (#6992) (@bdehamer, @jamietanna)10db3ca#6990 pkg: properly output in workspace mode (#6990) (@wraithgar)Documentation
6ab06d7#6985 update npm-prune description (#6985) (@Eomm)Dependencies
libnpmpublish@7.5.1v9.9.1Compare Source
Bug Fixes
0dba79a#6942 add back bin/node-gyp-bin/node-gyp files (@lukekarrys)c93edb5#6932 add backbin/node-gyp-bin/node-gypfiles (@lukekarrys)Documentation
e6cce28#6925 use markdown links instead of html (@lukekarrys)v9.9.0Compare Source
Features
ecda95a#6841 add npm sbom command (#6841) (@bdehamer)fdb8a86#6794 add package-lock-only mode to npm query (@wraithgar)16c04b1#6877 add no-package-lock mode to npm audit (@wraithgar)66ef765#6776 Add--cpuand--osoption to override platform specific install (#6776) (@yukukotani)Bug Fixes
c9406f7#6791 deprecate: ignore implicit workspace mode (#6758) (#6791) (@wraithgar)0b1d7c3#6779 allow searching packages with no description (#6779) (@wraithgar, @lukekarrys)Documentation
9750720#6694 fix example path (#6694) (@fvilers)Dependencies
588a245#6756npm-pick-manifest@8.0.2a76b1df#6877sigstore@1.9.095b5ab0#6877npm-install-checks@6.2.0@npmcli/arborist@6.5.0@npmcli/config@6.4.0libnpmdiff@5.0.20libnpmexec@6.0.4libnpmfund@4.2.1libnpmpack@5.0.20v9.8.1Compare Source
Bug Fixes
38351c9#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3#6651@npmcli/package-json@4.0.124f5a8b[#6653]Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.