9.0.0-pre.5 (2022-10-13)
- the presence of auth related settings that are not scoped to a specific registry found in a config file is no longer supported and will throw errors
- the
node-versionandnpm-versionconfigs have been removed. - links generated from git urls will now use
HEADinstead ofmasteras the default ref
a09e19d#5696 introduce thenpm config fixcommand (@nlf)d2963c6explicitly validate config within the cli (@nlf)a5fec08rewrite docs generation (@lukekarrys)
a8532eb#5661 typo missing parentheses (@hbrls)542efdbupdatefolderspage for modern npm (@shalvah)
cee3fd9@npmcli/config@5.0.02a740b1#5692hosted-git-info@6.0.0- Workspace:
libnpmpack@5.0.0-pre.3 - Workspace:
libnpmpublish@7.0.0-pre.3
9.0.0-pre.4 (2022-10-05)
e4e8ae2libnpmpack: obey foregroundScripts (@winterqt)07fabc9#5633npm linkshould override--install-links(#5633) (@fritzy)02fcbb6#5634 ensure Arborist constructor gets passed around everywhere for pacote (#5634) (@nlf)
f37caad#5606 accurately describe install-links effect on relative paths (#5606) (@lukekarrys)97c32ed#5637 remove link to cache command (#5637) (@wraithgar)130bc9f#5626 Remove circular reference (#5626) (@giovanniPepi)
5344d2c#5644pacote@14.0.06a43b31@npmcli/metavuln-calculator@4.0.0501f8ca#5640semver@7.3.8(#5640)8b072dc#5639@npmcli/ci-detect@3.0.0(#5639)1ebbb44#5638npm-profile@7.0.0(#5638)- Workspace:
@npmcli/arborist@6.0.0-pre.4 - Workspace:
libnpmdiff@5.0.0-pre.2 - Workspace:
libnpmexec@5.0.0-pre.4 - Workspace:
libnpmfund@4.0.0-pre.4 - Workspace:
libnpmpack@5.0.0-pre.2 - Workspace:
libnpmpublish@7.0.0-pre.2
9.0.0-pre.3 (2022-09-30)
npm packnow follows a strict order of operations when applying ignore rules. If a files array is present in the package.json, then rules in .gitignore and .npmignore files from the root will be ignored.--timingfile changes:- When run with the
--timingflag,npmnow writes timing data to a file alongside the debug log data, respecting thelogs-diroption and falling back to<CACHE>/_logs/dir, instead of directly inside the cache directory. - The timing file data is no longer newline delimited JSON, and instead
each run will create a uniquely named
<ID>-timing.jsonfile, with the<ID>portion being the same as the debug log. - Finally, the data inside the file now has three top level keys,
metadata,timers, andunfinishedTimers` instead of everything being a top level key.
- When run with the
3ae796dimplement newnpm-packlistbehavior (@lukekarrys)e64d69a#5581 write eresolve error files to the logs directory (@lukekarrys)3445da0timings are now written alongside debug log files (@lukekarrys)
bc21552#5603npm-package-arg@9.1.2- Workspace:
@npmcli/arborist@6.0.0-pre.3 - Workspace:
libnpmdiff@5.0.0-pre.1 - Workspace:
libnpmexec@5.0.0-pre.3 - Workspace:
libnpmfund@4.0.0-pre.3 - Workspace:
libnpmpack@5.0.0-pre.1 - Workspace:
libnpmpublish@7.0.0-pre.1
9.0.0-pre.2 (2022-09-23)
- the default
auth-typeconfig value is nowweb login,adduser, andauth-typechanges- This removes all
auth-typeconfigs exceptwebandlegacy. loginandadduserare now separate commands that send different data to the registry.auth-typeconfig valueswebandlegacyonly try their respective methods, npm no longer tries them all and waits to see which one doesn't fail.
- This removes all
66ed584#5551 default auth-type to web (#5551) (@wraithgar)6ee5b32query: displayqueryContextin results (@nlf)314311c#5550 separate login/adduser, remove auth types (#5550) (@wraithgar)
0d90a01#5480 audit: add a condition to allow third-party registries returning E400 (#5480) (@juanheyns, Juan Heyns)
2d756cb#5527 add instruction to query objects with npm view (#5527) (@moonith)8743366#5519 add hash to "tag" config link (#5519) (@mrienstra, @lukekarrys)5645c51#5521 link mentions of config parameters (#5521) (@mrienstra)19762b4#5529 modify Misleading doc about bins (@Hafizur046)19762b4#5529 modify misleading doc about package.json:bin (#5529) (@Hafizur046)8402fd8#5547 add:outdatedpseudo selector to docs (@nlf)
d030f10@npmcli/query@2.0.0- Workspace:
@npmcli/arborist@6.0.0-pre.2 - Workspace:
libnpmexec@5.0.0-pre.2 - Workspace:
libnpmfund@4.0.0-pre.2
9.0.0-pre.1 (2022-09-14)
- renames most of the
npm accesssubcommands - the api for libnpmaccess is different now
c3d7549add tag to publish log message (@wraithgar)
fd0eebeupdate registry docs header (@hughlilly)
- Workspace:
@npmcli/arborist@6.0.0-pre.1 - Workspace:
libnpmaccess@7.0.0-pre.1 - Workspace:
libnpmexec@5.0.0-pre.1 - Workspace:
libnpmfund@4.0.0-pre.1
9.0.0-pre.0 (2022-09-08)
- workspaces: all workspace packages are now compatible with the following semver range for node:
^14.17.0 || ^16.13.0 || >=18.0.0 - this removes the
npm birthdaycommand - this removes
npm set-script - this changes the default value of
install-linksto true - this removes the
npm bincommand npmis now compatible with the following semver range for node:^14.17.0 || ^16.13.0 || >=18.0.0
e95017a#5485 feat(workspaces): update supported node engines in package.json (@lukekarrys)49bbb2f#5455 feat: removenpm birthday(@wraithgar)926f0ad#5456 feat: removenpm set-script(@wraithgar)2a8c2fc#5458 feat: defaultinstall-linksto true (@wraithgar)2e92800#5459 feat: removenpm bin(@wraithgar)457d388#5475 feat: update supported node engines in package.json (@wraithgar)
7fc2b6f#5468 docs: remove duplicate description forpreparescript (@kidonng)285b39f#5324 docs: add documentation for expanded :semver selector (@nlf)
- The following workspace dependencies were updated
- dependencies
- @npmcli/arborist bumped from ^5.6.1 to ^6.0.0-pre.0
- libnpmaccess bumped from ^6.0.4 to ^7.0.0-pre.0
- libnpmdiff bumped from ^4.0.5 to ^5.0.0-pre.0
- libnpmexec bumped from ^4.0.12 to ^5.0.0-pre.0
- libnpmfund bumped from ^3.0.3 to ^4.0.0-pre.0
- libnpmhook bumped from ^8.0.4 to ^9.0.0-pre.0
- libnpmorg bumped from ^4.0.4 to ^5.0.0-pre.0
- libnpmpack bumped from ^4.1.3 to ^5.0.0-pre.0
- libnpmpublish bumped from ^6.0.5 to ^7.0.0-pre.0
- libnpmsearch bumped from ^5.0.4 to ^6.0.0-pre.0
- libnpmteam bumped from ^4.0.4 to ^5.0.0-pre.0
- libnpmversion bumped from ^3.0.7 to ^4.0.0-pre.0
- dependencies
8.19.1 (2022-09-01)
8.19.0 (2022-08-31)
3569094#5321 docs: fix link to dependency selectors page (@hghmn)414667a#5328 docs(dependency-selectors): fix Arborist example in docs (@kyle-west)
1286f03#5381 deps:unique-filename@2.0.1d7e9a8e#5381 deps:ini@3.0.12c4e387#5381 deps:hosted-git-info@5.1.0e401a81#5381 deps:npm-bundled@2.0.1f4205e5#5381 deps:diff@5.1.08f7abbe#5381 deps:npm-packlist@5.1.3b12ac01#5381 deps:npm-pick-manifest@7.0.27fbf6f7#5381 deps:bin-links@3.0.37c7f656#5381 deps:read-package-json@5.0.226d2e55#5381 deps:@npmcli/query@1.2.0a79ee00#5381 deps:cacache@16.1.32561822#5378 deps:@npmcli/config@4.2.28ab12dc#5323 deps:@npmcli/eslint-config@3.1.0@npmcli/arborist@^5.6.1libnpmaccess@^6.0.4libnpmdiff@^4.0.5libnpmexec@^4.0.12libnpmfund@^3.0.3libnpmhook@^8.0.4libnpmorg@^4.0.4libnpmpack@^4.1.3libnpmpublish@^6.0.5libnpmsearch@^5.0.4libnpmteam@^4.0.4libnpmversion@^3.0.7
e6d4304#5306 feat(arborist): add overridden getter to Node class (@nlf)d221f72#5306 feat(arborist): add :overridden pseudo selector (@nlf)0d4ed0f#5306 feat(query): support :overridden pseudo selector (@nlf)
05d9bcf#5306 fix(ls): display overridden nodes (@nlf)cd2b1e6#5306 fix(explain): display override information (@nlf)e5a9162#5297 fix: npm exec does not use script-shell option to run commands (@lux01)6eba131#5298 fix: don't prompt onnpm exec [directory](@wraithgar)
bc66ffa#5304 docs: update --no-optional to --omit=optional (@wraithgar)
8460ccf#5311 deps:libnpmexec@4.0.1141d0f51#5310 deps:@npmcli/arborist@5.6.04e08d71#5315 deps:pacote@13.6.246e8753#5316 deps:npm-registry-fetch@13.3.1d39b2ee#5318 deps:normalize-package-data@4.0.17d564bd#5318 deps:make-fetch-happen@10.2.15a56686#5318 deps:@npmcli/git@3.0.23c5a866#5318 deps:bin-links@3.0.207536a4#5318 deps:@npmcli/fs@2.1.28165501#5318 deps:@npmcli/move-file@2.0.1cbee638#5318 deps:cacache@16.1.21f6daf5#5318 deps:write-file-atomic@4.0.2409468f#5318 deps:minipass-fetch@2.1.1
9078e27#5263 fix(query): tell arborist to load an actual tree, not a virtual one (@nlf)c992fd6#5273 fix: look up local command bins from local tree (@wraithgar)95ae9f2#5253 fix: only try to run global bin if the bin name exists (@wraithgar)daaf461#5291 fix: ignore global prefix if --prefix is used (@wraithgar)
741bccf#5284 deps:@npmcli/config@4.2.17f31b85#5284 deps:nopt@6.0.02569d82#5284 deps:node-gyp@9.1.0a396f8d#5284 deps:@npmcli/map-workspaces@2.0.4a9b5306#5284 deps:is-core-module@2.10.0786f753#5284 deps:lru-cache@7.13.27b702b6#5284 deps:are-we-there-yet@3.0.1e74f99e#5284 deps:just-diff@5.1.19833066#5284 deps:just-diff-apply@5.4.14e5dd73#5284 deps:socks@2.7.0d0f5995#5284 deps:@npmcli/run-script@4.2.18d870c5#5275 deps:libnpmexec@4.0.10
3c024ac#5000 feat: add npm query cmd (@ruyadorno) (@wraithgar)703dbbf#4860 feat: add --replace-registry-host=<npmjs|always|never> (@fritzy)
eac1bf2#5164 fix(ls): when filtering workspaces, make sure the edge has a to before checking if its a workspace (@nlf)47cc95d#5227 fix(arborist): use the sourceReference root rather than the node root for overrides (@nlf)050284d#5233 fix(arborist): pass the edge to fromPath in order to determine correct path (@nlf)d315ead#5243 fix: gracefully exit login and publish commands on Ctrl+C (SIGINT) in the new webAuthn flow (@neeldani)ea44995#5244 fix: properly find locally/globally/npxCache packages (@wraithgar)19f1497#5244 fix: use binPaths (@wraithgar)3b30af2#5244 fix: fix exec tests and clean up workspace-location-msg (@wraithgar)8233fca#5248 fix(arborist): fix bare attribute queries (@darcyclarke)19a8346#5250 fix: properly find and run global scoped packages (@wraithgar)
fd030c8#5245 deps:npm-profile@6.2.1c18dbc4#5244 deps: add@npmcli/fs@2.1.1cd6bafd#5244 deps: addsemver@7.3.7d0be9a2#5244 deps:@npmcli/run-script@4.2.0d55007d#5247 deps:@npmcli/query@1.1.1c650a29#5241 deps:@npmcli/arborist@5.4.04b7b48b#5246 deps:libnpmexec@4.0.9
9905d0e#5197 fix: don't fail immediately if cache dir is not accessible (@lukekarrys)0e3660e#5206 fix(init): allow for spec on scope-only arg (@wraithgar)62b95a0#5122 fix: allow hash character in paths (@AgainPsychoX)
f9abee7#5205 docs: update commit-ish default branch (@dijonkitchen)77bf2e1#5218 docs: update npm-ls.md (@MapleCCC)de40c31#5207 docs: sync ci params with install (@wraithgar)4d1d8a9#5221 docs: describe implicit workspace and prefix configuration (@fritzy) (@lukekarrys) (@wraithgar)
5ef53ee#5160 feat: accept registry-scoped certfile and keyfile as credentials (@jenseng)c8bdb4afeat: Support pure web authentication for commands (@jumoel) (@ljharb) (@hfaulds) (@sandeepmeduru)
9c590fa#5172 fix: disable progress bar on publish (@wraithgar)2fa3271#5196 fix: add missing ` in adduser warning (@MylesBorins)
7efad06#5168 docs: Update audit signatures cmd (@feelepxyz)8ab5fca#5171 docs: correct bundledDependencies -> bundleDependencies (@nlf)
64fe64b#5187 deps:@npmcli/config@4.2.051b12a0#5187 deps:npm-registry-fetch@13.3.03ae1b81#5190 deps:make-fetch-happen@10.2.0
f032e1c#4827 feat: add npm audit signatures (@feelepxyz)e8102c1#5076 feat: Addwebauth type (@jumoel)e9b4214#5094 feat(arborist): add support for dependencies script (@nlf)c6c4ba3#5149 feat: notify on adduser of upcoming cmds, login and register (@fritzy)e58f02f#5149 feat: warn on config --auth-type=sso/saml/oauth, undeprecate --auth-type (@fritzy)
52ec5ec#5154 fix: properly open package arg repo inside workspace (@wraithgar)
9697f16#5118 docs: typo in npm command (@crisanmm)da5a4ba#5079 docs: update reference to deprecated spdx package (@kachick)25b3058#5043 docs: naming of files in example code should be consistent (@xc1427)ac56fc4#5095 docs: documentdependenciesscript (@nlf)
cb0db7c#5147 deps:@npmcli/arborist@5.3.0b8c0580#5156 deps:minipass@3.3.4ad72611#5156 deps:lru-cache@7.12.0c94919d#5156 deps:just-diff@5.0.318ddc57#5156 deps:just-diff-apply@5.3.1a2d700b#5156 deps:npm-package-arg@9.1.099dc697#5156 deps:@npmcli/run-script@4.1.74a9f2dc#5157 deps:npm-registry-fetch@13.2.045a9bde#5158 deps:npm-profile@6.2.0
5be7d6e#5087 docs: add foreground-scripts to run-script page (@ruyadorno)
dd62328#5086 deps:@npmcli/run-script@4.1.45546906#5086 deps:@npmcli/run-script@4.1.5c7d5a69#5102 deps:@npmcli/metavuln-calculator@3.1.17ce66b0#5103 deps:npm-packlist@5.1.1
f59a114#5064 deps:@npmcli/run-script@4.1.3- fix: improves escaping of arguments for run-script, exec and npx (@nlf)
236b4a2#5069 deps:libnpmpack@4.1.20a6664d#5070 deps:@npmcli/arborist@5.2.39f94049#5071 deps:libnpmexec@4.0.88212363#5072 deps:libnpmversion@3.0.6
e03009f#5042 fix: Add space to SemVer log message (@dnicolson)2953983#5035 fix(view): error on missing version (@wraithgar)
69b5a96#5048 docs: consolidate docs and help for package spec (@wraithgar)facba42#5030 docs: fix typo (@westy92)
2e50cb8#5049 deps:pacote@13.6.12c06cee#5049 deps:@npmcli/run-script@4.1.061112f7#5044 deps:make-fetch-happen@10.1.801eef03#5034 deps:npm-profile@6.1.0afa10c7#5063 deps:libnpmdiff@4.0.4a5be4d6#5062 deps:libnpmversion@3.0.53ea332b#5061 deps:libnpmpack@4.1.114a08d6#5060 deps:libnpmexec@4.0.71ab9776#5059 deps:@npmcli/arborist@5.2.2
aee6fc8#4892 feat(init): reify on init new workspace (@ruyadorno)a8ae177#4931 feat: Add--auth-type=webauthnflag (@jumoel)
646b6b5#4963 fix(arborist): use rawSpec for bundled and shrinkwrapped deps (@nlf)fcc72dd#4929 fix(libnpmexec): fix bug not install latest pkg (@jihunleekr)
a6b62b2#4949 deps:make-fetch-happen@10.1.6fb4cc24#4969 deps:pacote@13.6.05b9688c#4971 deps:glob@8.0.3a8bfdd8#4972 deps:minimatch@5.1.066981ec#4973 deps:tap@16.2.0180a7e4#4975 deps:@npmcli/arborist@5.2.10886f7f#4976 deps:libnpmexec@4.0.6
8898710#4879 feat: deprecated set-script, birthday, --global, and --local (@fritzy)7307c8d#4940 feat(libnpmpack): bump pacote for better workspace awareness (@nlf)
400c80f#4913 fix(ci): remove node_modules post-validation (@wraithgar)124df81#4910 fix: clean up npm cache tests (@wraithgar)ee3308afix: remove dead code from get-identity (@wraithgar)357b0af#4917 fix: pass prefix and workspaces to libnpmpack (@nlf)0f89e07#4935 fix: add global getter to npm class (@nlf)
83ed8d0#4922 docs: update roadmap link in readme (@OmriBarZik)ed054d4#4933 docs: fix broken link in changelog (@yonran)
632ce87#4915 deps:cacache@16.1.07b2b77a#4915 deps:make-fetch-happen@10.1.5f3b0a24#4915 deps:pacote@13.4.10df3011#4915 deps:ssri@9.0.1dc38ab9#4919 deps:npm-packlist@5.0.4353e2f9#4940 deps:pacote@13.5.0 npm-packlist@5.1.0f4d4126#4941 deps:libnpmpack@4.1.0
911f55d#4864 feat: add --iwr alias for --include-workspace-root (@fritzy)bfb8bcc#4874 feat: add flag --omit-lockfile-registry-resolved (@fritzy) (Caleb ツ Everett)
48d2db6#4862 fix: remove test coverage map (@wraithgar)38cf29a#4868 fix: cleanup star/unstar (@wraithgar)5baa4a7#4857 fix: consolidate bugs, docs, repo command logic (@wraithgar)5a50762#4875 fix(arborist): link deps lifecycle scripts (@ruyadorno)
d58bf40#4856 deps:npm-packlist@5.0.386f443e#4872 deps:make-fetch-happen@10.1.3f9984e6#4880 deps:@npmcli/arborist@5.2.0ba59915#4881 deps:socks-proxy-agent@6.2.0c0806ba#4881 deps:http-proxy-agent@5.0.1cc7be6b#4881 deps:is-core-module@2.9.00432c7d#4881 deps:lru-cache@7.9.05778820#4881 deps:just-diff@5.0.2893dd00#4881 deps:ip@1.1.86ab85bd#4881 deps:builtins@5.0.1
62af3a1#4835 feat: make npm owner workspace aware (@wraithgar)
d654e7e#4781 fix: start consolidating color output (@wraithgar)b9a966c#4843 fix(exec): ignore packageLockOnly flag (@nlf)
8fd7eec#4845 docs: remove incorrect v6 auto prune info (@wraithgar)5f59f80#4847 docs: show complex object interactions in npm pkg (@wraithgar)
62faf8a#4837 deps:pacote@13.2.04ff7d3d#4816 deps:cacache@16.0.7e2e9c81#4852 deps:pacote@13.3.0
6253d19#4643 fix(exec): workspaces support (@ruyadorno)e9163b4#4657 fix(libnpmpublish): unpublish from custom registry (@ruyadorno)a677f49#4778 fix: Use node in and fallback to PATH if not found (@elibus)b10462e#4752 fix: completion fordeprecatecmd (@wraithgar)ced0acf#4775 fix: consolidate registryConfig application logic (@wraithgar)b06e89f#4679 fix(install): do not install invalid package name (@ruyadorno)9ea2603#4786 fix: normalize win32 paths before globbing (@lukekarrys)8da28b4#4757 fix: removelib/utils/read-package-name.js(@wraithgar)
a6ea884#4745 docs: add some more docs for --install-links (@nlf)6cd6831#4782 docs: explain that _auth only goes to npm registry (@wraithgar)fa3d829#4772 docs: include org instructions in scoped publish (@bnb)
36899d1#4807 deps:@npmcli/arborist@5.1.13f2b24a#4786 deps:@npmcli/map-workspaces@2.0.3b1b6948#4808 deps:libnpmexec@4.0.54a46a27#4777 fix read mixed local/registry pkg (@ruyadorno)
9f57404#4743 deps:npm-registry-fetch@13.1.1532883f#4786 deps:cacache@16.0.64d1398e#4786 deps:npm-profile@6.0.35e31322#4786 deps:npmlog@6.0.24eb2ccb#4786 deps:read-package-json@5.0.1aeb54e4#4786 deps:glob@8.0.1252b2b1#4786 deps:npm-packlist@5.0.2c51e553#4786 deps:semver@7.3.713299ee#4786 deps:lru-cache@7.8.10f2da5d#4786 deps:cli-table3@0.6.20ee57f1#4805 deps:libnpmpublish@6.0.48a633a4#4806 deps:libnpmversion@3.0.4
6611e91#4723 feat(config): add more npm/node information to config ls (@lukekarrys)c057b90#4740 feat(config): warn on deprecated configs (@lukekarrys)
2829cb2#4658 fix: update readme badges (@lukekarrys)e3da5df#4667 fix: replace deprecated String.prototype.substr() (@CommanderRoot)2a26e5e#4645 fix: remove dedupe --save (@wraithgar)47438ff#4645 fix: do not export npm_config_include_workspace_root (@wraithgar)840c338#4678 fix(run-script): don't cascade if-present config (@ruyadorno)4d676e3#4709 fix(arborist): when reloading an edge, also refresh overrides (@nlf)3f7fe17#4659 fix: skip update notifier file if not requested (@lukekarrys)5ba7f0c#4726 fix: show more information during publish dry-run (@lukekarrys)aa4a4da#4735 fix(arborist): dont skip adding advisories to audit based on name/range (@lukekarrys)0cd852f#4741 fix: mitigate doctor test race condition (@wraithgar)ba8b2a7#4744 fix(ls): make--omitfilternpm ls(@lukekarrys)
85b3c48#4666 docs(ci): add note that configuration must be consistent between install and ci (@nlf)44108f7#4670 docs: fix npm-uninstall typo (@JSKitty)
aaf86f6#4674 deps:@npmcli/metavuln-calculator@3.1.04a9a705#4691 deps:@npmcli/package-json@2.0.01a90b9e#4691 deps:treeverse@2.0.0f86f1af#4691 deps:@npmcli/disparity-colors@2.0.03a76dff#4691 deps:make-fetch-happen@10.1.20230428#4691 deps:@npmcli/config@4.0.282dc75f#4691 deps:npm-pick-manifest@7.0.1ad99360#4691 deps:npm-install-checks@5.0.079fc706#4691 deps:bin-links@3.0.11f2fb1e#4691 deps:@npmcli/git@3.0.10f23c33#4691 deps:@npmcli/run-script@3.0.2485753d#4691 deps:cacache@16.0.4e9b25cd#4691 deps:@npmcli/move-file@2.0.00e87cac#4691 deps:@npmcli/node-gyp@2.0.0b632746#4691 deps:@npmcli/promise-spawn@3.0.0b1863bf#4691 deps:pacote@13.1.1a2781a3#4691 deps:ssri@9.0.05172e03#4691 deps:ini@3.0.071296d5#4691 deps:npm-package-arg@9.0.269d8343#4691 deps:graceful-fs@4.2.10c44c2b0#4691 deps:lru-cache@7.7.338029ed#4691 deps:dezalgo@1.0.4e57353c#4691 deps:semver@7.3.61b30c72#4691 deps:minimatch@5.0.1c70232c#4706 deps:@npmcli/arborist@5.0.5baff482#4705 deps:libnpmdiff@4.0.3dda8a97#4704 deps:libnpmorg@4.0.38914864#4703 deps:libnpmaccess@6.0.33516f61#4702 deps:libnpmfund@3.0.2ecd22b0#4701 deps:libnpmversion@3.0.27ed9faf#4700 deps:libnpmhook@8.0.3df92e23#4699 deps:libnpmexec@4.0.35074adc#4698 deps:libnpmsearch@5.0.335e5100#4697 deps:libnpmteam@4.0.386f5b27#4696 deps:libnpmpack@4.0.31617bce#4695 deps:libnpmpublish@6.0.3e33aa0f#4714 deps: remove stringify-package98377d1#4740 deps:@npmcli/config@4.1.0605ccef#4728 deps: remove ansistylesc22fb1e#4728 deps: remove ansicolors970244c#4734 deps:libnpmversion@3.0.342dc0b0#4733 deps:@npmcli/arborist@5.0.6
723a0918a#4588 feat(version): reify on workspace version change (@ruyadorno)cc6c09431#4594 feat: add logs-dir config to set custom logging location (@lukekarrys)
98bfd9a8cfix: remove always true condition (#4590) (@XhmikosR)81afa5a88#4601 fix(unpublish): properly apply publishConfig (@wraithgar)716a07fde#4607 fix: 100% coverage in tests (@wraithgar)6f9cb490e#4614 fix(arborist): handle link nodes in old lockfiles correctly (@nlf)18b8b9435#4617 fix(arborist): make sure resolveParent exists before checking props (@nlf)bd96ae407#4599 fix(arborist): identify and repair invalid nodes in the virtual tree (@nlf)99d884542#4599 fix: make sure we loadOverrides on the root node in loadVirtual() (@nlf)45dd8b861#4609 fix: move shellout logic into commands (@wraithgar)a64acc0bf#4609 fix: really load all commands in tests, add description to birthday (@wraithgar)d8dcc02cf#4609 fix: consolidate command alias code (@wraithgar)f76d4f2f6#4609 fix: consolidate is-windows code (@wraithgar)57d8f75eb#4609 fix: consolidate node version support logic (@wraithgar)0a957f5e2#4609 fix: consolidate path delimiter logic (@wraithgar)738a40445#4609 fix: bump knownBroken to <12.5.0 (@wraithgar)8b65bfd5d#4629 fix: return otplease fn results (@wraithgar)d8d374d23#4632 fix: consolidate split-package-names (@wraithgar)cc0a2ec99#4611 fix: work better with system manpages (#4610) (@d0sboots)668ec7f33#4644 fix: only call npmlog progress methods if explicitly requested (@lukekarrys)
ff1367f01#4641 docs: recommend prepare over prepublish (@verhovsky)
6df061ec2#4594 deps:npm-registry-fetch@13.1.06dd1139c9#4594 deps:cacache@16.0.3feb4446d5#4616 deps:make-fetch-happen@10.1.0c33b53311#4613 deps:minipass-fetch@2.1.06a4c8ff89#4606 deps:npm-audit-report@3.0.06e0a131d2#4627 deps:debug@4.3.40f1cd60a1#4627 deps:proc-log@2.0.1da377eed5#4627 deps:parse-conflict-json@2.0.2726a8a07a#4627 deps:gauge@4.0.4aac01b89c#4628 deps:@npmcli/template-oss@3.2.152dfaf239#4630 deps:make-fetch-happen@10.1.19778a5387#4635 deps:init-package-json@3.0.286eff5dcc#4635 deps:npm-package-arg@9.0.25b4cbb217#4635 deps:validate-npm-package-name@4.0.0a59fd2cb8#4639 deps:@npmcli/template-oss@3.2.2679e569d5#4655 deps:@npmcli/arborist@5.0.4
0e7511d14#4261 fix(arborist): _findMissingEdges missing dependency due to inconsistent path separators (@salvadorj)c83069436#4547 fix: omit bots from authors (@wraithgar)f66da2ed8#4565 fix(owner): bypass cache when fetching packument (@wraithgar)f0c6e86ca#4572 fix: remove name from unpublished message (@wraithgar)f7e58fa74#4572 fix: remove "bug the author" message from package 404 (@wraithgar)5471ff5fe#4573 fix: add isntall alias to install (@wraithgar)84d19210e#4576 fix: properly shownpm view ./directory(@wraithgar)e9a2981f5#4578 fix(arborist): save workspace version (@ruyadorno)
a30405258#4580 docs: add foreground-scripts and ignore-scripts to commands (@wraithgar)2361a68e1#4582 docs: add isntall alias to install command (@wraithgar)8ff1dfaae#4575 docs: explain that linked deps neednpm installran in them (@wraithgar)ddbb505ec#4574 docs: explain that git-tag-version=false does not commit (@wraithgar)7c878b978#4584 docs: fix unpublish docs to auto generate usage (@wraithgar)
fcc6acfa8#4562 deps:@npmcli/metavuln-calculator@3.0.16d3145014#4562 deps:pacote@13.0.4f6b771aab#4562 deps:make-fetch-happen@10.0.6e26548fb1#4562 deps:cacache@16.0.0915dda7ab#4562 deps:init-package-json@3.0.1f2ec2ef1f#4562 deps:read-package-json@5.0.0340fa51f4#4562 deps:pacote@13.0.59555a5f1d#4562 deps:npm-package-arg@9.0.1b2a494283#4562 deps:normalize-package-data@4.0.01cb88f4b3#4562 deps:hosted-git-info@5.0.0f95396a03#4562 deps:cacache@16.0.1aec2bfecc#4585 deps:cacache@16.0.2ed8ab63e4deps:libnpmpack@4.0.20b73bfa82deps:libnpmteam@4.0.2475d59b36deps:libnpmaccess@6.0.27201c7395deps:libnpmsearch@5.0.2f5df358c3deps:libnpmorg@4.0.2472e7dd7adeps:libnpmhook@8.0.2c901d7290deps:libnpmpublish@6.0.2aad53327fdeps:@npmcli/arborist@5.0.3b40136bcadeps:libnpmdiff@4.0.25d91201d1deps:libnpmexec@4.0.2
fbdb43138#4529 fix(rebuild): don't run lifecycle scripts twice on linked deps (@wraithgar)1c182e11d#4495 fix(doctor): don't retry ping (@wraithgar)55ab38c53#4495 fix(doctor): allow for missing local bin andnode_modules(@wraithgar)5c06a33e6#4528 fix: clean up owner command and otplease (@wraithgar)
2485064da#4524 docs: fix typo in configuring-npm/package-json.md (@dlcmh)91f03ee61#4510 docs: standardize changelog heading (@wraithgar)
377f55e0e#4530 deps:make-fetch-happen@10.0.5- add code property to unsupported proxy url error
40b7fbf67#4531 deps:read-package-json@4.1.2- don't throw exception on invalid main attr
d9dc70ce4#4545 deps:map-workspaces@2.0.2- evaluate all patterns before throwing
EDUPLICATEWORKSPACE
- evaluate all patterns before throwing
70fcfb46bdeps:libnpmfund@3.0.1621cd033fdeps:@npmcli/arborist@5.0.2087fdc4cbdeps:libnpmpublish@6.0.1d24c6d288deps:libnpmhook@8.0.1fa59830fcdeps:libnpmsearch@5.0.16d5f22b86deps:libnpmexec@4.0.169ea54350deps:libnpmaccess@6.0.14742d7cf3deps:libnpmteam@4.0.1fdd255ae9deps:libnpmorg@4.0.1ed41bc101deps:libnpmdiff@4.0.121e241025deps:libnpmversion@3.0.1ec7f36ff9deps:libnpmpack@4.0.1ad4b56414deps:gauge@4.0.3
defe79ad6#4480 fix: publish of tarballs includes README in packument (@fritzy)45fc297f1#4479 fix: ignore implict workspace for some commands (@fritzy)a0900bdf1#4481 fix(ls): respect--include-workspace-root(@fritzy)0cfc155db#4476 fix: set proper workspace repo urls in package.json (@ljharb)9e43de8a5#4493 fix: ignore implicit workspace for whoami (@nlf)
d13f067d9#4490 deps:@npmcli/run-script@3.0.1(@wraithgar)ce9a6eac0#4490 deps:node-gyp@9.0.0(@wraithgar)bd660f5f1#4490 deps:@npmcli/config@4.0.13c17b6965#4490 deps:make-fetch-happen@10.0.4e9b69c4c5#4490 deps:npm-registry-fetch@13.0.1cf27ca888#4490 deps:write-file-atomic@4.0.1f3421921a#4490 deps:gauge@4.0.21dd2f7ee1#4490 deps:socks@2.6.2236e3b403#4490 deps:minimatch@3.1.2(@wraithgar)10e1326d2#4490 deps:lru-cache@7.4.0
9bdd1ace8#4300 fix(arborist): use full location as tracker key when inflating (@lukekarrys) (@kirtangajjar)c9ff797e8#4457 fix: remove html comments from man entries (@wraithgar)f4c5f0e52fix(arborist): fix unescaped periods (#4462) (@lukekarrys)c608512ed#4468 fix: ignore integrity values for git dependencies (@lukekarrys)
e83e5c9ba#4435 docs: clarify npm init @latest behavior (@wraithgar)d8fa9fa5e#4436 docs: explain $INIT_CWD on using scripts page (@wraithgar)6b68c1aaa#4450 docs: auto-generate npm usage for each command (@manekinekko)
d58e4442bdeps@npmcli/arborist@5.0.077399cb98deps:libnpmaccess@6.0.09633752cddeps:libnpmdiff@4.0.0938750581deps:libnpmexec@4.0.02c86feaf1deps:libnpmfund@3.0.01dab29805deps:libnpmhook@8.0.0cf273f1cfdeps:libnpmorg@4.0.08b1d9636adeps:libnpmpack@4.0.067aed0542deps:libnpmpublish@6.0.08b26a6db1deps:libnpmsearch@5.0.00b2fa7feddeps:libnpmteam@4.0.02646d199fdeps:libnpmversion@3.0.05b29666e5#4459 deps:columnify@1.6.0 and dedupe vulnerable deps
54cda9697#4410 fix(arborist): do not audit in offline mode (@mohd-akram)fb13bdaf1#4403 deps:@npmcli/ci-detect@2.0.0702801002#4415 deps:make-fetch-happen@10.0.388bab3540#4416 deps:gauge@4.0.1
20378c67c#4423 docs: update documentation for ping (@fhinkel)408d2fc15#4426 docs: update workspaces guide for consistency (@bnb)9275856eb#4424 docs: update usage example for npm pkg (@manekinekko)20c83fae7#4428 docs: update docs for npm install (@manekinekko)
fb6e2ddf9#4386 fix(log): pass in logger to more external modules (@wraithgar)0e231d4a4#4389 fix(pack): let libnpmpack take care of file writes (@nlf)e2f1f7b04#4389 fix(publish): pass dryRun: true to libnpmpack so it doesnt write a tarball (@nlf)2937b43d4#4389 fix(config): add pack-destination flattener (@nlf)
b836d596f#4384 docs: add cross-references between npx and npm exec (@Delapouite)f3fbeea5a#4388 docs: add --save-bundle to --save usage output (@wraithgar)
8732f393edeps:@npmcli/arborist@4.3.1d3a7c15e1deps:libnpmpack@3.1.0ab926995e#4393 deps:npm-registry-fetch@12.0.21c0d0699c#4394 deps:npmlog@6.0.1- changed notice color from blue to cyan for improved readability
3c33a5842#4400 deps:make-fetch-happen@10.0.2
1b9338554#4359 fix(log): pass in logger to external modules (@wraithgar)457e0ae61#4363 fix(ci): lock file validation (@ruyadorno)c0519edc1#4364 fix(ci): should not use package-lock config (@ruyadorno)ebb428375#4365 fix(outdated): parse aliased modules (@ruyadorno)
3d41447b9#4353 deps:wide-align@1.1.5dc1a0573a#4353 deps:socks-proxy-agent@6.1.1adcefef6b#4353 deps:spdx-license-ids@3.0.11d7e2499e0#4353 deps:debug@4.3.3f0f307140#4353 deps:@npmcli/fs@1.1.01cb107d33#4353 deps:is-core-module@2.8.1e198ac0d1#4354 deps:cli-table3@0.6.15a84e6515#4355 deps:graceful-fs@4.2.9
fbe48a840#4307 feat(arborist): add named updates validation (@ruyadorno)
1f853f8bf#4306 fix(arborist): load actual tree on named updates (@ruyadorno)90c384ccc#4326 fix(logout): require proper auth.js from npm-registry-fetch (@wraithgar)fabcf431a#4327 fix(arborist): correctly load overrides on workspace edges, closes #4205 (@nlf)8c3b143ca#4258 fix(arborist): shrinkwrap throws when trying to read a folder without permissions (@Linkgoron)b51b29c56#4334 fix(arborist): update save exact (@ruyadorno)
8558527c7#4333 deps:make-fetch-happen@10.0.0- compress option and accept/content encoding header edge cases
- strip cookie header on redirect across hostnames
1bfc507f2#4326 deps:npm-registry-fetch@12.0.152c9608e7#4326 deps:pacote@12.0.32bbeedfeb#4326 deps:npm-profile@6.0.09652d685bchore(release):@npmcli/arborist@4.3.0(@wraithgar)0ee4927d2chore(release):libnpmaccess@5.0.1(@wraithgar)6c0dc1ffbchore(release):libnpmexec@3.0.3(@wraithgar)41b8f7b6fchore(release):libnpmorg@3.0.1(@wraithgar)433e6aafbchore(release):libnpmpublish@5.0.1(@wraithgar)6654b6efechore(release):libnpmsearch@4.0.1(@wraithgar)3423a9804chore(release):libnpmteam@3.0.1(@wraithgar)fb03e485dchore(release):libnpmhook@7.0.1(@wraithgar)
cfd59b8c8#4223 fix: npm update --save (@ruyadorno)510f0ecbc#4218 fix(arborist): ensure indentation is preserved (@ljharb)c99c2151a#4230 fix(arborist): prioritize valid workspace nodes (@nlf)14a3d9500#4265 fix: resolve workspace paths from cwd when possible (@nlf)
da80d579d#4211 deps:hosted-git-info@4.1.0- feat: Support Sourcehut
5a87d190f#4228 deps:@npmcli/config@2.4.01f0d1370fchore(release):@npmcli/arborist@4.2.0
4b0c29a7c#4116 feat:@npmcli/arborist@4.1.0- introduces overrides (@nlf)
166d9e144npm/statusboard#416 #4143 feat: output configured registry during publish (@lukekarrys)71777be17npm/statusboard#417 #4146 feat: displaypublishConfigduringconfig list(@lukekarrys)
08c663931#4128 #4134 fix: dont warn on error cleaning individual log files (@lukekarrys)e605b128c#4142 fix: redact all private keys from config output (@lukekarrys)
e1da1fa4b#4141 deps:@npmcli/arborist@4.1.1:parse-conflict-json@2.0.1- Fixes object property assignment bug in resolving package-locks with conflicts
1d8bec566#4144 #3884 deps:minipass@3.1.6- fixes some TAR_ENTRY_INVALID and Z_DATA_ERROR errors
6734ba36d#4062 feat: streaming debug logfile (@lukekarrys)
5f4040aa0chore: remove get-project-scope utils ([@Yucel Okcu](https://github.com/Yucel Okcu))c5c6d1603#4060 fix: add missing scope on flat options (@yuqu)47828b766chore: update one-time password prompt ([@Darcy Clarke](https://github.com/Darcy Clarke))
fc46a7926#4072 docs: fix typo insave-peerdescription (@chalkygames123)2fbf1576f#4081 docs: Fix typo (@idleberg)a8bc95f11#4089 docs(workspaces): Fix typo (@yotamselementor)31b098ee2#4113 docs: add logging docs (@darcyclarke)cbae0fb71#4114 docs: update description about where/when debug log is written (@lukekarrys)
7887fb3d7#4025 fix: don't try to open file:/// urls (@wraithgar)cd6d3a90d#4026 fix: explicitly allownpm helpto open file:/// man pages (@wraithgar)72ca4a4e3#4020 #4032 fix: command completion (@wraithgar)b78949134#4023 fix(install): command completion with single match (@wraithgar)44bfa3787#4065 @npmcli/arborist 4.0.5- fix: accurate filtering of workspaces
--no-workspaces(@fritzy)
- fix: accurate filtering of workspaces
225645420#3995 update to latest eslint and linting rules (@wraithgar)203fedf5b#4016eslint@8.0.0:@npmcli/eslint-config@2.0.0- Update to eslint@8 and and
@npmcli/eslint-config@2.0.0 - Remove eslint-plugin-node. Also remove an unused script that was failing linting. We don't use the update-dist-tags script anymore as part of our release process. (@wraithgar)
- Update to eslint@8 and and
7b4aa59b6signal-exit@3.0.6:,tap@15.1.2(@isaacs)08015859c#4049npmlog@6.0.0088c11694#4045node-gyp@8.4.0:- feat: support vs2022
- feat: build with config.gypi from node headers
8ffeb71df#3959 fix: refactor commands (@wraithgar)e5bfdaca4#3978 fix: shrinkwrap setting incorrect lockfileVersion (@lukekarrys)32ccd3c27#3988 fix: remove usage of unnecessary util.promisify (@lukekarrys)1e9c31c4e#3994 fix: npm help on windows (@wraithgar)22230ef3d#3987 fix: make prefixed usage errors more consistent (@lukekarrys)
ac2fabb86#3990@npmcli/arborist@4.0.4- fix: don't compare spec for local dep vs existing
- fix: stop pruning peerSets when entryEdge is from a workspace
a0d35ff20#3996@npmcli/config@2.3.1:- fix: dont load project configs in global mode
cb9f43551#3949 allow--lockfile-versionconfig to be string and coerce to number (@lukekarrys)070901d7a#3943 fix(publish): clean args before logging (@wraithgar)
51fb83ce9#3921@npmcli/arborist@4.0.2:- fix: skip peer conflict check if there is a current node
1d07f2187#3913node-gyp@8.3.0:- feat(gyp): update gyp to v0.10.0
24273a862#3890 feat(workspaces): add --include-workspace-root and explicit --no-workspaces (@fritzy)d559d6da8#3880 feat(config): Add --lockfile-version config option (@isaacs)
ae4bf013d#3883pacote@12.0.2:- fix: preserve git+ssh url for non-hosted repos
- deps: update
npm-packlist@3.0.0 - fix: no longer include ignored bundled link deps
fbc5a3d08#3889@npmcli/ci-detect@1.4.0b6bc279e5@npmcli/arborist@4.0.10f69d295b#3893@npmcli/map-workspaces@2.0.0
f77932ca1#3861 fix(docs): Update Node support in README (@gfyoung)a190f422a#3878 fix(docs): grammar fix (@XhmikosR)
The purpose of this release is to drop support for old node versions and
to remove support for require('npm'). There are no other breaking
changes.
- Drop support for node 10 and 11
- Raise support ceiling in node 12 and 14 to LTS (^12.13.0/^14.15.0)
- Drop support to
require('npm') - Update subdependencies that also dropped node10 support