Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v18.x] deps: upgrade npm to 10.1.0 #49611

Closed
wants to merge 109 commits into from
Closed

[v18.x] deps: upgrade npm to 10.1.0 #49611

wants to merge 109 commits into from

Conversation

npm-cli-bot
Copy link
Contributor

This PR contains changes from: npm@10.0.0 npm@10.1.0

10.0.0

10.0.0 (2023-08-31)

⚠️ BREAKING CHANGES

  • support for node 14 and 16 has been dropped. npm now supports node ^18.17.0 || >=20.5.0
  • npm no longer treats missing scripts as a special case in workspace mode. Use if-present to ignore missing scripts.
  • @npmcli/agent is now used as the agent for network requests
  • the ci-name config has been removed
  • the hard-coded hashAlgorithm value is no longer being passed through flatOptions
  • the unused tmp config has been removed
  • the hard-coded metrics-registry config has been removed.
  • libnpmpublish will no longer attempt a single automatic retry on 409 responses during publish.
  • support for the strict RFC 8909 mode has been removed. this mode was only enabled when the environ NPM_PACKAGE_ARG_8909_STRICT=1 was set.

Bug Fixes

Documentation

Dependencies

10.1.0

10.1.0 (2023-09-08)

Features

Bug Fixes

Documentation

Dependencies

Linkgoron and others added 30 commits September 6, 2023 22:54
@Linkgoron @ruyadorno
https: fix connection checking interval not clearing on server close
2fd05a0 
The connection interval should close when httpsServer.close is called
similarly to how it gets cleared when httpServer.close is called.

fixes: nodejs#48373
PR-URL: nodejs#48383
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Minwoo Jung <nodecorelab@gmail.com>
@HerrCai0907 @ruyadorno
src: handle wasm out of bound in osx will raise SIGBUS correctly
cb3abcb 
fix: nodejs#46559
OSX will raise both SIGBUS and SIGSEGV when out of bound memory visit,
This commit set sigaction in OSX for two signals to handle this.

PR-URL: nodejs#46561
Fixes: nodejs#46559
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Darshan Sen <raisinten@gmail.com>
Reviewed-By: Minwoo Jung <nodecorelab@gmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
@RaisinTen @ruyadorno
doc: fix typo in events.md
7292bb7 
Signed-off-by: Darshan Sen <raisinten@gmail.com>
PR-URL: nodejs#48436
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@mhdawson @ruyadorno
doc: add link for news from security wg
6f28f4c 
Signed-off-by: Michael Dawson <mdawson@devrus.com>

PR-URL: nodejs#48396
Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
@mhdawson @ruyadorno
doc: add additional info on TSFN dispatch
a8db331 
Refs: nodejs#48356

Signed-off-by: Michael Dawson <mdawson@devrus.com>

PR-URL: nodejs#48367
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
@MoLow @ruyadorno
test: fix flaky test-watch-mode
4892dc5 
PR-URL: nodejs#48147
Backport-PR-URL: nodejs#49468
Fixes: nodejs#44898
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
@ronag @ruyadorno
stream: fix deadlock when pipeing to full sink
097dea0 
When piping a paused Readable to a full Writable we didn't
register a drain listener which cause the src to never
resume.

Refs: nodejs#48666
PR-URL: nodejs#48691
Backport-PR-URL: nodejs#49323
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
@MoLow @ruyadorno
esm: add --import flag
1f396d2 
PR-URL: nodejs#43942
Backport-PR-URL: nodejs#49539
Fixes: nodejs#40110
Reviewed-By: Geoffrey Booth <webadmin@geoffreybooth.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Jacob Smith <jacob@frende.me>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
@MoLow @ruyadorno
doc: mark --import as experimental
aaaa54d 
PR-URL: nodejs#44067
Backport-PR-URL: nodejs#49539
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Michaël Zasso <targos@protonmail.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
@nodejs-github-bot @ruyadorno
deps: update corepack to 0.18.1
6147ff2 
PR-URL: nodejs#48483
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Mestery <mestery@protonmail.com>
@nodejs-github-bot @ruyadorno
deps: update corepack to 0.19.0
9da7103 
PR-URL: nodejs#48540
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@nodejs-github-bot @ruyadorno
deps: update ada to 2.6.0
e7019da 
PR-URL: nodejs#48896
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
@npm-cli-bot @ruyadorno
deps: upgrade npm to 9.7.2
35512ca 
PR-URL: nodejs#48514
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@npm-cli-bot @ruyadorno
deps: upgrade npm to 9.8.0
e8d5d06 
PR-URL: nodejs#48665
Reviewed-By: Luke Karrys <luke@lukekarrys.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@npm-cli-bot @ruyadorno
deps: upgrade npm to 9.8.1
a2bfe6c 
PR-URL: nodejs#48838
Reviewed-By: Luke Karrys <luke@lukekarrys.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@richardlau @ruyadorno
crypto: remove OPENSSL_FIPS guard for OpenSSL 3
aa08460 
The OPENSSL_FIPS guard is only needed for versions of OpenSSL earlier
than 3.0.

Removing the guard for OpenSSL 3 fixes `parallel/test-crypto-fips`
when run with a FIPS enabled OpenSSL 3 configuration.

PR-URL: nodejs#48392
Refs: nodejs#48379
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Michael Dawson <midawson@redhat.com>
@nodejs-github-bot @ruyadorno
deps: update zlib to 1.2.13.1-motley-3ca9f16
71db13a 
PR-URL: nodejs#48413
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
@nodejs-github-bot @ruyadorno
crypto: update root certificates to NSS 3.90
10a5bee 
This is the certdata.txt[0] from NSS 3.90, released on 2023-04-06.

This is the version of NSS that shipped in Firefox 113 on
2023-05-09.

Certificates added:
- BJCA Global Root CA1
- BJCA Global Root CA2

[0] https://hg.mozilla.org/projects/nss/raw-file/NSS_3_90_RTM/lib/ckfw/builtins/certdata.txt

PR-URL: nodejs#48416
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
@kvakil @ruyadorno
doc: add kvakil to collaborators
d9ab855 
...and remove them triagers

Fixes: nodejs#48155
PR-URL: nodejs#48449
Reviewed-By: Joyee Cheung <joyeec9h3@gmail.com>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@gabrielschulhof @ruyadorno
node-api: implement external strings
f93102c 
Introduce APIs that allow for the creation of JavaScript strings without
copying the underlying native string into the engine. The APIs fall back
to regular string creation if the engine's external string APIs are
unavailable. In this case, an optional boolean out-parameter indicates
that the string was copied, and the optional finalizer is called if
given.

PR-URL: nodejs#48339
Fixes: nodejs#48198
Reviewed-By: Daeyeon Jeong <daeyeon.dev@gmail.com>
Signed-off-by: Gabriel Schulhof <gabrielschulhof@gmail.com>
@MoLow @ruyadorno
doc: refine when file is undefined in test events
e86be12 
PR-URL: nodejs#48451
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@nodejs-github-bot @ruyadorno
tools: update lint-md-dependencies
9db17f0 
- `@rollup/plugin-commonjs@25.0.1`
- `rollup@3.24.1`

PR-URL: nodejs#48417
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@preveen-stack @ruyadorno
doc: add preveen-stack to triagers
6f5f4aa 
PR-URL: nodejs#48387
Reviewed-By: Gireesh Punathil <gpunathi@in.ibm.com>
Reviewed-By: Qingyu Deng <i@ayase-lab.com>
@aduh95 @ruyadorno
doc: revise error.md introduction
ebe5416 
PR-URL: nodejs#48423
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mestery <mestery@protonmail.com>
@gabrielschulhof @ruyadorno
node-api: provide napi_define_properties fast path
f5892b4 
Implement defining properties via V8's
`v8::Object::CreateDataProperty()`, which is faster for data-valued,
writable, configurable, and enumerable properties.

Re: nodejs#45905
Signed-off-by: Gabriel Schulhof <gabrielschulhof@gmail.com>
PR-URL: nodejs#48440
Reviewed-By: Yagiz Nizipli <yagiz@nizipli.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Chengzhong Wu <legendecas@gmail.com>
@sinkhaha @ruyadorno
doc: update fs flags documentation
9e94b65 
PR-URL: nodejs#48463
Fixes: nodejs#48452
Reviewed-By: Antoine du Hamel <duhamelantoine1995@gmail.com>
Reviewed-By: LiviaMedeiros <livia@cirno.name>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mestery <mestery@protonmail.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
@Trott @ruyadorno
tools: prepare tools/doc for to-vfile 8.0.0
76b1a4a 
toVFile.readSync() is removed in favor of readSync().

PR-URL: nodejs#48485
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
@nodejs-github-bot @ruyadorno
tools: update doc to to-vfile@8.0.0
0c780d0 
PR-URL: nodejs#48485
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
@nodejs-github-bot @ruyadorno
tools: update eslint to 8.43.0
bb96b80 
PR-URL: nodejs#48487
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Moshe Atlow <moshe@atlow.co.il>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
@franciszek-koltuniuk-red @ruyadorno
http: fix for handling on boot timers headers and request
68052fb 
This change is a fix for handling headersTimeout and requestTimeout
that causes unexpected behavior if the HTTP server is started on boot:

 - the connections to the server can be closed immediately
   with the status HTTP 408

This issue usually happens on IoT or embedded devices where
the reference timestamp (returned by uv_hrtime()) is counted since boot
and can be smaller than the headersTimeout or the requestTimeout value.

Additionally added performance improvement to process the list of
connection only if one of the timers should be processed

PR-URL: nodejs#48291
Reviewed-By: Robert Nagy <ronagy@icloud.com>
Reviewed-By: Benjamin Gruenbaum <benjamingr@gmail.com>
Reviewed-By: James M Snell <jasnell@gmail.com>
Reviewed-By: Paolo Insogna <paolo@cowtech.it>
Reviewed-By: Marco Ippolito <marcoippolito54@gmail.com>
Reviewed-By: Matteo Collina <matteo.collina@gmail.com>
@nodejs-github-bot nodejs-github-bot added fast-track PRs that do not need to wait for 48 hours to land. needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. v18.x Issues that can be reproduced on v18.x or PRs targeting the v18.x-staging branch. labels Sep 11, 2023
@github-actions
Copy link
Contributor

Fast-track has been requested by @nodejs-github-bot. Please 👍 to approve.

@lukekarrys lukekarrys mentioned this pull request Sep 11, 2023
Closed
@lukekarrys lukekarrys marked this pull request as draft September 11, 2023 16:34
@lukekarrys lukekarrys added the request-ci Add this label to start a Jenkins CI on a PR. label Sep 11, 2023
@github-actions github-actions bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Sep 11, 2023
@nodejs-github-bot
Copy link
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/53895/

@lukekarrys
Copy link
Member

Converting to draft to make it clear that this is not intended to merge. Opened to get CI running as early as possible.

Criteria for possibly merge in the future are:

@ruyadorno
Copy link
Member

heads up @lukekarrys you'll need to also include the commit with npm@10.0.0 in this PR

@ruyadorno ruyadorno added the release-agenda Issues and PRs to discuss during the meetings of the Release team. label Sep 11, 2023
@ruyadorno ruyadorno changed the title deps: upgrade npm to 10.1.0 [v18.x] deps: upgrade npm to 10.1.0 Sep 11, 2023
@ruyadorno ruyadorno added baking-for-lts PRs that need to wait before landing in a LTS release. and removed fast-track PRs that do not need to wait for 48 hours to land. labels Sep 11, 2023
@lukekarrys
Copy link
Member

@ruyadorno the commit was created automatically by our CI to include both 10.0.0 and 10.1.0, so its not a cherry pick from #49569.

apologies if this makes it more confusing. i can close this and open a new PR with the cherry picked commits that already landed on main from #49569 and #49423.

@github-actions github-actions bot mentioned this pull request Sep 12, 2023
Open
19 tasks
@ruyadorno
Copy link
Member

oh I see! personally I find that cherry-picking the commits is going to be less confusing 😊

mcollina
mcollina requested changes Sep 12, 2023
View reviewed changes
Copy link
Member

@mcollina mcollina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would prefer if this is delayed while we sort out a licensing question.

cc @nodejs/tsc

@github-actions github-actions bot mentioned this pull request Sep 13, 2023
Open
14 tasks
This was referenced Sep 14, 2023
Open
Open
@ruyadorno
Copy link
Member

Any news on the license front @mcollina ?

@lukekarrys lukekarrys closed this Oct 3, 2023
@lukekarrys
Copy link
Member

@ruyadorno I think I messed up trying to make this PR use the cherry picked commit to backport. We also just released npm@10.2.0 so a new PR to main (#50027) has been opened as well as a new PR to v18.x (#50030), so I have closed this PR.

@richardlau richardlau removed the baking-for-lts PRs that need to wait before landing in a LTS release. label May 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@mcollina mcollina mcollina requested changes

Assignees
No one assigned
Labels
needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. release-agenda Issues and PRs to discuss during the meetings of the Release team. v18.x Issues that can be reproduced on v18.x or PRs targeting the v18.x-staging branch.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.