chore(deps): update npm to v9 #509
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/npm-9.x
branch
from
8e8fc86
to
a1692e0
Compare
Renovate Ignore NotificationBecause you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 9.x releases. But if you manually upgrade to 9.x then Renovate will re-enable If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^8.19.4->^9.8.1Release Notes
npm/cli (npm)
v9.8.1Compare Source
Bug Fixes
38351c9#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3#6651@npmcli/package-json@4.0.124f5a8b#6653supports-color@9.4.0f45498b#6653chalk@5.3.044d60eb#6653minimatch@9.0.3fc9a843#6653bin-links@3.0.2daad9ad#6653semver@7.5.4c1ffd6a#6653 move @npmcli/fs, @npmcli/promise-spawn into dependencieslibnpmexec@6.0.3v9.8.0Compare Source
Features
67459e7#6626 addpkg fixsubcommand (@wraithgar)89b2741#6548 add ps1 scripts (#6548) (@mribbons, @lukekarrys)Dependencies
b252164#6626@npmcli/package-json@4.0.09238682#6623sigstore@1.7.0(#6623)@npmcli/arborist@6.3.0libnpmdiff@5.0.19libnpmexec@6.0.2libnpmfund@4.0.19libnpmpack@5.0.19libnpmpublish@7.5.0v9.7.2Compare Source
Bug Fixes
939a188#6574 ignore node prereleases in npm engines check (#6574) (@wraithgar)d980405#6556 better color support detection (#6556) (@lukekarrys)40d7e09#6555 remove unnecessary package.json values (#6555) (@lukekarrys)3a7378d#6554 cleanup bin contents (@lukekarrys)e722439#6497 move all definitions to @npmcli/config package (@lukekarrys)Documentation
405ffbf#6557 remove redundant statement about files attribute (#6557) (@DaviDevMod)cd1e6aa#6551 add flagpackage-lock-onlyfornpm install(#6551) (@m4rch3n1ng)Dependencies
aebc523#6585safe-buffer@5.2.1string_decoder@1.3.0(#6585)bb6054b#6573tuf-js@1.1.7aee4a30#6573strip-ansi@7.1.06105dbc#6573path-scurry@1.9.222d44e8#6573read-package-json@6.0.4fdd02fd#6573jackspeak@2.2.17797075#6573is-core-module@2.12.1f9780cc#6573sigstore@1.6.072d6a79#6573semver@7.5.298f1f5f#6573nopt@7.2.08710ff8#6573pacote@15.2.00cb539d#6573node-gyp@9.4.039ad586#6573ini@4.1.15e0070c#6573glob@10.2.7minimatch@9.0.126cf235#6573cacache@17.1.3@npmcli/arborist@6.2.10@npmcli/config@6.2.1libnpmdiff@5.0.18libnpmexec@6.0.1libnpmfund@4.0.18libnpmpack@5.0.18libnpmpublish@7.4.0v9.7.1Compare Source
Dependencies
7467ff6#6518@npmcli/package-json@3.1.1,@npmcli/git@4.1.0v9.7.0Compare Source
Features
a63a6d8#6490 add provenanceFile option for libnpmpublish (@bdehamer)2a8f4f2#6490 add new exclusive config item publish-file (@wraithgar)361e194#6483 implement flag --prefer-dedupe fornpm install(#6483) (@m4rch3n1ng)Bug Fixes
38eb39b#6514 strip ansi characters from search results (#6514) (@wraithgar)4b5ccfc#6477 make usage and completion static functions (#6477) (@lukekarrys)4f39e8c#6479 refactor engines validation to lint syntax (#6479) (@lukekarrys)f3cfe12#6482 remove unused lib/npm relics (#6482) (@lukekarrys)87de0c7#6472 move explore command to @npmcli/package-json (@wraithgar)636e29e#6472 move to @npmcli/package-json where possible (@wraithgar)37cc797#6418 retrieve registry keys via TUF (#6418) (@bdehamer)Documentation
83cd5bd#6480 add global option for uninstall (#6480) (@m4rch3n1ng)0400ce3#6481 add cli params tonpm set,npm get(#6481) (@m4rch3n1ng)c3638ce#6468 removepackage-lockoption fornpm ci(#6468) (@m4rch3n1ng)Dependencies
060d587chalk@5.2.0,npm-audit-report@5.0.0fc52ca8#6472 remove read-package-json-fast3238aa7#6472 remove read-package-json@npmcli/config@6.2.0libnpmexec@6.0.0libnpmpublish@7.3.0v9.6.7Compare Source
Bug Fixes
9202c7d#6464 npm cache completion (#6464) (@m4rch3n1ng)6ce99a8#6461 exit codes in node v20 (#6461) (@MichaelBitard)23c865f#6434 deprecate ci-name config (#6434) (@wraithgar)Documentation
7751dd4#6413 add a comma (#6413) (@darryltec)Dependencies
afc38a5#6458cacache@17.1.2afb936c#6458tuf-js@1.1.6f6a0884#6458readable-stream@4.4.0858f0ca#6458postcss-selector-parser@6.0.1353ecb84#6458path-scurry@1.9.1d93f70c#6458signal-exit@4.0.219214b5#6458@npmcli/package-json@3.1.0f53e6ff#6458sigstore@1.5.294d6ee7#6458glob@10.2.4902cb80#6458semver@7.5.135e2e9a#6458@npmcli/run-script@6.0.2@npmcli/config@6.1.7libnpmpublish@7.2.0v9.6.6Compare Source
Dependencies
70e65b1#6423tuf-js@1.1.5(#6423)72291f7#6416read-package-json@6.0.3e498f82#6416minimatch@9.0.013aa7b7#6416minipass@5.0.0f2a5678#6416tar@6.1.1469d4dd2#6416 npm updateabdca39#6416sigstore@1.4.016f68fb#6416glob@10.2.267fcfb1#6416ignore-walk@6.0.3bfa2ff3#6416make-fetch-happen@11.1.1877591a#6416npm-registry-fetch@14.0.57630517#6416pacote@15.1.3c2d6e0a#6416write-file-atomic@5.0.1acdf97e#6416which@3.0.100c541a#6416ssri@10.0.41b95e73#6416read-package-json@6.0.26927fd3#6416fs-minipass@3.0.23eec56e#6416cacache@17.1.07a2ce3f#6416@npmcli/run-script@6.0.13881770#6416@npmcli/map-workspaces@3.0.4@npmcli/arborist@6.2.9libnpmdiff@5.0.17libnpmexec@5.0.17libnpmfund@4.0.17libnpmorg@5.0.4libnpmpack@5.0.17libnpmpublish@7.1.4v9.6.5Compare Source
Bug Fixes
33dc428#6374 account for npx package-name with no spec (@wraithgar)82879f6#6225 lazy loading of arborist and pacote (#6225) (@wraithgar)f4e73ab#6322 remove incompatible params from ci (#6322) (@wraithgar)c7fe1c7#6328 save raw data to file, not parsed data (@wraithgar)Documentation
31214a6#6381 Update description for publish --provenance flag (#6381) (@feelepxyz)997bcdf#6329 fix npm cache folder location for windows (#6329) (@charlie-wong)Dependencies
fae5e00#6372sigstore@1.3.0(#6372)3fa9542#6363semver@7.5.0e49844e#6363minipass-fetch@3.0.2357cc29#6363walk-up-path@3.0.12c80b1e#6363ini@4.1.05933841#6363minipass@4.2.8b39d54e#6363minimatch@7.4.6201aa5a#6363ssri@10.0.3acb9120#6363read@2.1.02472205#6363npm-registry-fetch@14.0.42780714#6363npm-install-checks@6.1.1b5af015#6363make-fetch-happen@11.1.014c498d#6363@npmcli/metavuln-calculator@5.0.1@npmcli/arborist@6.2.8@npmcli/config@6.1.6libnpmdiff@5.0.16libnpmexec@5.0.16libnpmfund@4.0.16libnpmpack@5.0.16v9.6.4Compare Source
Documentation
54795a3#6312 filter archives out of version manager search (#6312) (@ljharb)530c285#6306 remove reference to npm-packlist (#6306) (@staff0rd)Dependencies
85935ac#6325ssri@10.0.2(#6325)f1388b4#6317 npm update7dd0129#6317glob@9.3.2deca335#6317promise-call-limit@1.0.2@npmcli/arborist@6.2.7libnpmdiff@5.0.15libnpmexec@5.0.15libnpmfund@4.0.15libnpmpack@5.0.15v9.6.3Compare Source
Bug Fixes
829503b#6304 don't break up log message across lines (@wraithgar)1435fcf#6304 do less work loading ./lib/npm.js (@wraithgar)09b58e4#6284 make all color output use an npm instance of chalk (#6284) (@lukekarrys)e252532#6283 do less work looking up commands (#6283) (@wraithgar)6a4bcba#6275 clean up man sorting (@wraithgar)8a96b65#6275 ignore ts and map files (@wraithgar)94d2b39#6271 Do not log warnings about log cleanup when logs_max=0 (#6271) (@jmealo)2def359#6277 updated ebadplatform messaging to be generated based on the error (#6277) (@nlf)Documentation
1e2eb81#6311 replace version manager list with a github search (#6311) (@wraithgar)9d2be4e#6289 remove npm bin link (#6289) (@KevinRouchut)Dependencies
e652dbd#6308minimatch@7.4.3(#6308)01986d1#6307sigstore@1.2.0(#6307)ea12627#6275minimatch@7.4.2ec3e020#6275glob@9.3.1952fbed#6275read-package-json@6.0.1dd43d30#6275parse-conflict-json@3.0.1d5ce7ca#6275npm-install-checks@6.1.0704cd1e#6275nopt@7.1.0a6da22a#6275ignore-walk@6.0.255955fd#6275cacache@17.0.5839b670#6275@npmcli/map-workspaces@3.0.39a7b8e8#6275@npmcli/git@4.0.457c0a55#6275 npm update74c80f5#6275minipass@4.2.5b174c90#6275graceful-fs@4.2.11@npmcli/arborist@6.2.6@npmcli/config@6.1.5libnpmdiff@5.0.14libnpmexec@5.0.14libnpmfund@4.0.14libnpmpack@5.0.14libnpmpublish@7.1.3v9.6.2Compare Source
Bug Fixes
4622b42#6247 add provenance publish notice (#6247) (@bdehamer)Dependencies
434b461#6255sigstore@1.1.1(#6255)@npmcli/config@6.1.4libnpmpublish@7.1.2v9.6.1Compare Source
Bug Fixes
e455e3f#6211 send options with grant/revoke requests (#6211) (@DavidTanner)e4de224#6220 clean uri from audit error (#6220) (@wraithgar)Dependencies
cb45b21#6231 npm update1f60a7e#6231minipass@4.2.4@npmcli/arborist@6.2.5libnpmdiff@5.0.13libnpmexec@5.0.13libnpmfund@4.0.13libnpmpack@5.0.13libnpmpublish@7.1.1v9.6.0Compare Source
Features
84fbaf2#6216 add preliminary fish shell completion (@wraithgar)Bug Fixes
c4c8754audit: add signatures to completion (@wraithgar)fc46489access: only complete once (@wraithgar)b43961acmd-list: alias only to real commands (@wraithgar)Documentation
2695e1f#6187 npm v9 creates package-lock.json v3 (#6187) (@tuukka)Dependencies
71ae406#6218@npmcli/installed-package-contents@2.0.2@npmcli/arborist@6.2.4libnpmdiff@5.0.12libnpmexec@5.0.12libnpmfund@4.0.12libnpmpack@5.0.12v9.5.1Compare Source
Documentation
9bc455b#6188 fixing typos (#6188) (@deining)ec8c95c#6186 update OSI link (#6186) (@roerohan)Dependencies
7ba3e17#6189 npm updatef7a5200pacote@15.1.1@npmcli/arborist@6.2.3libnpmdiff@5.0.11libnpmexec@5.0.11libnpmfund@4.0.11libnpmpack@5.0.11v9.5.0Compare Source
Features
79bfd03#6153 audit signatures verifies attestations (@feelepxyz)5fc6473add provenance attestation (@bdehamer)Bug Fixes
53f75a4#6158 gracefully fallback from auth-type=web (#6158) (@MylesBorins)ed59aae#6162 refactor error reporting in audit command (@bdehamer)Dependencies
fad0473minipass@4.0.3678c6bfminimatch@6.2.09b4b366ci-info@3.8.0d20ee2apacote@15.1.0libnpmpublish@7.1.0libnpmteam@5.0.3v9.4.2Compare Source
Bug Fixes
d02da52#6142 revertinstall-linksdefault back tofalse(#6142) (@nlf)Documentation
6ea2cd7#6134 update references to OTP to be accurate (#6134) (@MylesBorins)Dependencies
cb6713d#6143 rebuild package-lock (#6143)8200f4f#6133ignore-walk@6.0.1d43f881map-workspaces@3.0.299457f1minimatch@6.1.6f4c8c62init-package-json@5.0.03c6615fnpm-user-validate@2.0.010445caremove mkdirpab82492node-gyp@9.3.174c5cbbminipass@4.0.21138038make-fetch-happen@11.0.3c1ccfa1glob@8.1.03dc17cefs-minipass@3.0.15c84a99ci-info@3.7.1fc5332fread@2.0.0@npmcli/arborist@6.2.2@npmcli/config@6.1.3libnpmdiff@5.0.10libnpmexec@5.0.10libnpmfund@4.0.10libnpmhook@9.0.3libnpmorg@5.0.3libnpmpack@5.0.10libnpmpublish@7.0.8v9.4.1Compare Source
Bug Fixes
1525a5e#6082 unpublish with scoped registry (@wraithgar)Dependencies
721fe3f#6118read-package-json-fast@3.0.26e4a649pacote@15.0.81820afecacache@17.0.424b2ec4@npmcli/promise-spawn@6.0.24b8046e@npmcli/name-from-folder@2.0.01d4be7a@npmcli/map-workspaces@3.0.1a39556f@npmcli/template-oss@4.11.364b06ed#6115http-cache-semantics@4.1.1@npmcli/arborist@6.2.1@npmcli/config@6.1.2libnpmaccess@7.0.2libnpmdiff@5.0.9libnpmexec@5.0.9libnpmfund@4.0.9libnpmhook@9.0.2libnpmorg@5.0.2libnpmpack@5.0.9libnpmpublish@7.0.7libnpmsearch@6.0.2libnpmteam@5.0.2libnpmversion@4.0.2v9.4.0Compare Source
Features
8d6d851#6078 added --install-strategy=linked (#6078) (@fritzy)Dependencies
@npmcli/arborist@6.2.0libnpmdiff@5.0.8libnpmexec@5.0.8libnpmfund@4.0.8libnpmpack@5.0.8v9.3.1Compare Source
Bug Fixes
8be672b#6050 don't try to deprecate nonexistant versions (#6050) (@wraithgar)1c3612c#6054 use recursive rm in ci command (#6054) (@jamesshaw1987, @burkel24)v9.3.0Compare Source
Features
753b98e#5261 rootless workspace init provides suggestion (@fritzy)Bug Fixes
cf175fb#6044 default auth-type to legacy if otp is configured (#6044) (@wraithgar)2383deb#6037 clean urls from arborist, owner, and ping commands (#6037) (@lukekarrys)69f5ff8view: convert command to use output instead of console (@lukekarrys)dc52222init: write package.json workspaces paths with / separators (@lukekarrys)31af1aarefactorhelpto use@npmcli/promise-spawn(@lukekarrys)669ef94fund: correctly parse and usewhichconfig (@lukekarrys)72e6d6fgenerate workspace support for docs pages (@lukekarrys)450e50fevaluate configs in command class (@lukekarrys)28ec922#5946 replace rimraf with fs.rm (@lukekarrys)Documentation
f0038e5#6048 missing backtick in synopsis of npm init (#5837) (#6048) (@Peallyz)ca8ff00#6045 update outdated file path to definitions.js (@ericmutta)fe9debd#6038 fix typos in definitions.js (#6038) (@lukekarrys, @ericmutta)fa27aca#6018 fix typo in removal.md (@ericmutta)82f69d9#6026 fix typo in registry.md (@ericmutta)Dependencies
ec09474#5945minipass-fetch@3.0.1@npmcli/arborist@6.1.6@npmcli/config@6.1.1libnpmdiff@5.0.7libnpmexec@5.0.7libnpmfund@4.0.7libnpmpack@5.0.7v9.2.0Compare Source
Features
cf57ffa#5888 discrete npm doctor commands (#5888) (@wraithgar)Bug Fixes
dfd5d46#5932 ignore implicit workspaces for completion (#5932) (@wraithgar)Dependencies
2f2b146#5936npm-packlist@7.0.4(#5936)372d158#5935minimatch@5.1.1(#5935)0e6c28b#5934ci-info@3.7.0([#5934](https://togithub.cConfiguration
📅 Schedule: Branch creation - "after 6am and before 10am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.