chore(deps): update dependency npm to v10

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	9.9.2 -> 10.7.0

---

Release Notes

npm/cli (npm)

v10.7.0

Compare Source

Features

• 7e349f4 #​7432 add spinner (#​7432) (@​lukekarrys)

Bug Fixes

• d679ce8 #​7449 linting: no-unused-vars (@​wraithgar)
• 2558283 #​7450 powershell: fallback to script root if globalPrefix does not exist (#​7450) (@​lukekarrys)
• bc4c342 #​7448 account for registries with no publisher in search (#​7448) (@​wraithgar)
• bcc781a #​7439 move run-script banners to stderr when in json mode (#​7439) (@​lukekarrys)
• 104fcb5 #​7438 remove doctor log for each file permission check (#​7438) (@​lukekarrys)
• 5230647 #​7422 rewrite powershell scripts to use PSScriptRoot (#​7422) (@​lukekarrys)
• 71cbd91 #​7421 hide banner for exec and explore (#​7421) (@​lukekarrys)
• 57ebebf #​7418 update repository.url in package.json (#​7418) (@​wraithgar)

Documentation

• 1674136 #​7441 correct search help output (#​7441) (@​wraithgar)

Dependencies

• 80eec03 #​7453 @npmcli/redact@2.0.0
• a7145d4 #​7453 npm-registry-fetch@17.0.0
• a785766 #​7453 pacote@18.0.3
• 65d76db #​7453 npm-profile@9.0.2
• cadc0f0 #​7449 hoist production copy of sprintf-js
• 2cffdfe #​7449 lru-cache@10.2.2
• 432efb5 #​7449 make-fetch-happen@13.0.1
• 9da5738 #​7437 @npmcli/run-script@8.1.0 (#​7437)
• 762888a #​7429 update dependencies for workspaces (#​7429)
• workspace: @npmcli/arborist@7.5.1
• workspace: @npmcli/config@8.3.1
• workspace: libnpmaccess@8.0.5
• workspace: libnpmdiff@6.1.1
• workspace: libnpmexec@8.1.0
• workspace: libnpmfund@5.0.9
• workspace: libnpmhook@10.0.4
• workspace: libnpmorg@6.0.5
• workspace: libnpmpack@7.0.1
• workspace: libnpmpublish@9.0.7
• workspace: libnpmsearch@7.0.4
• workspace: libnpmteam@6.0.4
• workspace: libnpmversion@6.0.1

Chores

• 356c374 #​7453 fix test fixture for new redact behavior (@​wraithgar)
• 2fba4b7 #​7449 update devDependencies in lockfile (@​wraithgar)

v10.6.0

Compare Source

Features

• 9123de4 #​7373 do all ouput over proc-log events (@​lukekarrys)
• 9622597 #​7339 refactor terminal display (#​7339) (@​lukekarrys)

Bug Fixes

• 0e74ee4 #​7416 clean up npm object (#​7416) (@​wraithgar)
• c060e60 #​7415 return command and argv from load (@​lukekarrys)
• 180b919 #​7415 remove unused npm.setCmd method (@​lukekarrys)
• 0708b3b #​7414 use name of level instead of label for logging prefixes (#​7414) (@​lukekarrys)
• 7f4e667 #​7403 redact when displaying non-ascii arguments (@​lukekarrys)
• 06202f0 #​7403 store unref promises for awaiting in tests (@​lukekarrys)
• e5f1948 #​7403 run update notifier after exec but before waiting (@​lukekarrys)
• f309c1c #​7403 refactor: move timer and error logfile messages to lib/npm (@​lukekarrys)
• 43e6194 #​7403 dont show run script banners in silent (@​lukekarrys)
• 694dba9 #​7403 dont expose as many public properties of timers (@​lukekarrys)
• 7ca6d84 #​7403 use proc-log META for flush and force (@​lukekarrys)
• 2538438 #​7403 dont write timing logs to file unless requested (@​lukekarrys)
• 7e04417 #​7403 rename base-cmd to match other commands (@​lukekarrys)
• fc68547 #​7403 remove some npm.load timers and exit earlier for --versions (@​lukekarrys)
• 28019d5 #​7403 cleanup: move cli specific files to separate dir (@​lukekarrys)
• 469f788 #​7403 cleanup: newlines and whitespace (@​lukekarrys)
• 4ab6401 #​7403 cleanup: dont nest files utils dir (@​lukekarrys)
• 78447d7 #​7399 prefer fs/promises over promisify (#​7399) (@​lukekarrys)
• d531f8b #​7407 Remove table output from search and tar summary (@​wraithgar)
• c209e98 #​7401 Remove table output from many commands (@​wraithgar)
• ad7ab8c #​7388 perf: lazy loading optimizations (#​7388) (@​wraithgar)
• 8eae4b3 #​7385 token: properly await registry request (#​7385) (@​wraithgar)
• 9216d59 #​7377 better output colors (#​7377) (@​wraithgar)
• 6512112 #​7378 use proc-log for all timers (@​lukekarrys)
• 2a80dab #​7370 typo in npm access usage (#​7370) (@​mbtools)

Documentation

• dfa4cab #​7401 update output examples (@​wraithgar)
• 140b9c9 #​7382 package-json: note that line endings are inferred (#​7382) (@​ertw)
• c16dd4e #​7367 Document that overrides only work in the root package.json (#​7367) (@​s100)

Dependencies

• 36adff3 #​7408 pacote@18.0.2
• 486d46c #​7408 @npmcli/installed-package-contents@2.1.0
• 157d0ae #​7408 @npmcli/package-json@5.1.0
• b0ca163 #​7409 remove @​npmcli/disparity-colors
• c77f035 #​7407 remove columnify
• 2ec690d #​7401 move cli-table3 to devDependencies
• fc6e291 #​7392 proc-log@4.2.0 (#​7392)
• 38ed048 #​7378 @npmcli/metavuln-calculator@7.1.0
• 7678a3d #​7378 proc-log@4.1.0
• 87f6c09 #​7373 @npmcli/metavuln-calculator@7.0.1
• b8f8b41 #​7373 @npmcli/run-script@8.0.0
• 79f79c7 #​7373 proc-log@4.0.0
• 9027266 #​7373 pacote@18.0.0
• ee4b3e0 #​7373 npm-registry-fetch@16.2.1
• 0e7789b #​7373 npm-profile@9.0.1
• ac98fd3 #​7373 npm-package-arg@11.0.2
• 9351570 #​7373 @npmcli/package-json@5.0.3
• d3a0cfa #​7373 @npmcli/git@5.0.6
• workspace: @npmcli/arborist@7.5.0
• workspace: @npmcli/config@8.3.0
• workspace: libnpmaccess@8.0.4
• workspace: libnpmdiff@6.1.0
• workspace: libnpmexec@8.0.0
• workspace: libnpmfund@5.0.8
• workspace: libnpmhook@10.0.3
• workspace: libnpmorg@6.0.4
• workspace: libnpmpack@7.0.0
• workspace: libnpmpublish@9.0.6
• workspace: libnpmsearch@7.0.3
• workspace: libnpmteam@6.0.3
• workspace: libnpmversion@6.0.0

Chores

• 3cbc258 #​7403 test for early version exit (@​lukekarrys)
• 08e0c0e #​7403 move sigstore json files to fixtures dir (@​lukekarrys)
• ea66e95 #​7380 remove licensee as a devDependency (#​7380) (@​lukekarrys, @​wraithgar)
• 9333e9d #​7386 reduce windows shim test flakes (#​7386) (@​lukekarrys)

v10.5.2

Compare Source

Bug Fixes

• ef381b1 #​7363 use @​npmcli/redact for url cleaning (#​7363) (@​lukekarrys)
• 3760dd2 #​7361 perf: do less work loading config (#​7361) (@​wraithgar)
• 64bcf4c #​7360 perf: only initialize workpaces when we are inside a workspace (#​7360) (@​H4ad)
• 5a28a29 #​7352 perf: lazy load workspace dependency (#​7352) (@​H4ad)
• 5fc0f9d #​7347 lazy load validate npm package name on error message (#​7347) (@​H4ad)
• c929ed1 #​7321 prioritize CLI flags over publishConfig settings (#​7321) (@​roni-berlin)
• 70497cb #​7346 perf: avoid importing the entire semver package for update-notifier (#​7346) (@​H4ad)

Documentation

• 90ba1c9 #​7340 fix incorrect ISO 8601 reference (#​7340) (@​emmanuel-ferdman)

Dependencies

• 699a1de #​7362 @npmcli/map-workspaces@3.0.6
• 49fb9b7 #​7362 socks@2.8.3
• f69052e #​7362 @npmcli/package-json@5.0.2
• c18a0ad #​7357 sigstore@2.3.0
• fd4153b #​7357 socks@2.8.2
• d6b705a #​7357 postcss-selector-parser@6.0.16
• 248c177 #​7357 hasown@2.0.2
• 4af9e86 #​7357 builtins@5.1.0
• 7546b56 #​7357 @npmcli/agent@2.2.2
• d38fd4f #​7357 spdx-expression-parse@4.0.0
• 913b326 #​7357 is-cidr@5.0.5
• 84bbbd4 #​7357 @npmcli/package-json@5.0.1
• a0f5048 #​7357 @npmcli/git@5.0.5
• workspace: @npmcli/arborist@7.4.2
• workspace: @npmcli/config@8.2.2
• workspace: libnpmdiff@6.0.9
• workspace: libnpmexec@7.0.10
• workspace: libnpmfund@5.0.7
• workspace: libnpmpack@6.0.9

Chores

• 81be28d #​7357 dev dependency updates (@​wraithgar)

v10.5.1

Compare Source

Bug Fixes

• 17d97d2 #​7334 use @​npmcli/redact for log redactions (@​lukekarrys)
• 8cab136 #​7324 ensure maxSockets is respected (#​7324) (@​lukekarrys)
• 9bffa13 #​7320 query: properly return :missing nodes (#​7320) (@​wraithgar)
• 9d4e85f #​7297 search: include searchlimit option in help output (#​7297) (@​10xLaCroixDrinker)
• bdb3c28 #​7274 added check for dry-run (#​7274) (@​cod1r)
• 7f1ab88 #​7271 more lightweight npm bin discovery in windows (#​7271) (@​wraithgar)

Documentation

• 1da5cf0 #​7198 add link to engines section (#​7198) (@​uiolee)
• 1114a12 #​7307 fix incorrect npm audit key response link (#​7307) (@​davidlj95)
• 9807caf #​7304 update audit docs with provenance info (#​7304) (@​bdehamer)
• e1ecfa7 #​7285 Correct capitalization for URL (#​7285) (@​coliff)

Dependencies

• 87a61fc #​7334 npm-registry-fetch@16.2.0
• 5469614 #​7327 init-package-json@6.0.2
• 5469614 #​7327 promzard@1.0.1
• 5469614 #​7327 read@3.0.1 (#​7327)
• 9ccff72 #​7329 tar@6.2.1
• 7201a00 #​7329 node-gyp@10.1.0
• 6fd94f2 #​7329 minimatch@9.0.4
• b048592 #​7329 ini@4.1.2
• c54a84a #​7329 glob@10.3.12
• 6853531 #​7329 cli-table3@​0.6.4
• c9315cb #​7329 binary-extensions@2.3.0
• 5bb0031 #​7329 @sigstore/tuf@2.3.2
• 8cab136 #​7324 agent-base@7.1.1 (@​lukekarrys)
• workspace: @npmcli/arborist@7.4.1
• workspace: @npmcli/config@8.2.1
• workspace: libnpmaccess@8.0.3
• workspace: libnpmdiff@6.0.8
• workspace: libnpmexec@7.0.9
• workspace: libnpmfund@5.0.6
• workspace: libnpmhook@10.0.2
• workspace: libnpmorg@6.0.3
• workspace: libnpmpack@6.0.8
• workspace: libnpmpublish@9.0.5
• workspace: libnpmsearch@7.0.2
• workspace: libnpmteam@6.0.2

Chores

• 8cab136 #​7324 add smoke-test for large prod installs (@​lukekarrys)
• 0dab381 #​7258 jsdom@24.0.0 (#​7258) (@​wraithgar)
• af3c48e #​7262 test refactor (#​7262) (@​wraithgar)

v10.5.0

Compare Source

Features

• 2366edc #​7218 query: add :vuln pseudo selector (@​wraithgar)
• 4f3ddbb #​5966 add --expect-entries to npm query (@​wraithgar)

Bug Fixes

• 818957c #​7158 pack, publish: default foreground-scripts to true (#​7158) (@​ljharb)
• d04111d #​7197 view: filter out invalid semver (#​7197) (@​wraithgar)
• b0a3ba0 #​7195 prevent adding invalid dist-tag (#​7195) (@​wraithgar)

Documentation

• c4741fe #​7254 Remove additional example and comments about uninstall script (#​7254) (@​rveerd)
• 686a622 #​7247 scope: update example command to work in windows (#​7247) (@​robertobasile84)
• 95b5057 #​5966 clarify in-range and out-of-range in dependency selectors (@​wraithgar)
• 5b7184f #​7190 workspaces: fix grammar (#​7190) (@​alekstech)
• 0dd03f9 #​7182 fix typos (#​7182) (@​GoodDaisy)

Dependencies

• 16d4c9f #​7218 @npmcli/query@3.1.0
• 06247d1 #​7242 spdx-license-ids@3.0.17
• 79d1e0b #​7242 spdx-exceptions@2.5.0
• 67e853a #​7242 socks@2.8.0
• 4c9fe4b #​7242 lru-cache@10.2.0
• 4a50c5a #​7242 https-proxy-agent@7.0.4
• ed3f254 #​7242 http-proxy-agent@7.0.2
• 8ec4fd5 #​7242 hasown@2.0.1
• 98b1189 #​7242 @npmcli/agent@2.2.1
• dafa903 #​7242 sigstore@2.2.2
• d0bcb76 #​7242 diff@5.2.0
• a13808e #​7242 semver@7.6.0
• d6521ac #​7242 @sigstore/tuf@2.3.1
• 43cac2f #​7242 ip@2.0.1
• workspace: @npmcli/arborist@7.4.0
• workspace: @npmcli/config@8.2.0
• workspace: libnpmdiff@6.0.7
• workspace: libnpmexec@7.0.8
• workspace: libnpmfund@5.0.5
• workspace: libnpmpack@6.0.7

Chores

• d6bc684 #​7242 update devDependencies in lockfile (@​wraithgar)

v10.4.0

Compare Source

Features

• 35a098c #​7175 display tree diff on --long (@​wraithgar)
• dffca29 #​7174 format: print --dry-run diffs in table format (#​7174) (@​ritaaktay)
• 6d5f9ac #​7133 dedupe - display difference when --dry-run is enabled (#​7133) (@​Blaumaus)

Bug Fixes

• ec06f77 #​7175 inline diff table code w/ summary code (@​wraithgar)
• d4ebfba #​7157 use util.stripVTControlCharacters instead of strip-ansi (@​wraithgar)
• 81c95c7 #​7063 don't reset update notifier duration on every check (#​7063) (@​wraithgar)

Documentation

• 2b7eaad #​7168 package-json: Reword warning about publishing local dependencies (#​7168) (@​DanKaplanSES)
• 67ab0f7 #​7142 update: Replace comma with period in run on sentence (#​7142) (@​DanKaplanSES)
• 05c69dc #​7150 config: State default configuration file affected by npm config set (#​7150) (@​DanKaplanSES)
• 44f4518 #​7149 Link to the config command in the npm configuration description (#​7149) (@​DanKaplanSES)
• dd5699f #​7152 update: Fix a typo and remove unneeded statement (#​7152) (@​DanKaplanSES)

Dependencies

• ec77e81 #​7124 promise-call-limit@3.0.1
• e32189c #​7173 deduplicate tree
• b7af4d9 #​7173 tar-stream@3.1.7
• 6883743 #​7173 @npmcli/run-script@7.0.4
• 739634d #​7157 remove strip-ansi
• 162c82e #​7148 pacote@17.0.6 (#​7148) (@​bdehamer)
• a50b03b #​7141 sigstore@2.2.0 (#​7141) (@​bdehamer)
• f696b51 #​7132 @sigstore/tuf@2.3.0 (#​7132) (@​bdehamer)
• workspace: @npmcli/arborist@7.3.1
• workspace: libnpmdiff@6.0.6
• workspace: libnpmexec@7.0.7
• workspace: libnpmfund@5.0.4
• workspace: libnpmpack@6.0.6
• workspace: libnpmpublish@9.0.4

Chores

• a82ccc5 #​7173 nock@13.5.0 (@​wraithgar)
• dcaa99c #​7173 fix exec test (@​wraithgar)
• 0d96080 #​7162 release: do not exclude docs directory from CLI release commits (#​7162) (@​lukekarrys)

v10.3.0

Compare Source

Features

• 6673c77 #​6914 add --libc option to override platform specific install (#​6914) (@​wraithgar, @​Brooooooklyn)

Bug Fixes

• b7fc10a #​7113 filter C0 and C1 control characters from logs and cli output (#​7113) (@​wraithgar)

Dependencies

• 3fd5213 #​7121 npm-packlist@8.0.2
• 5698415 #​7121 postcss-selector-parser@6.0.15
• e56a4f3 #​7121 are-we-there-yet@4.0.2
• 8495b7c #​7121 cacache@18.0.2
• 796d1c7 #​7121 @npmcli/run-script@7.0.3
• 3b7f6f2 #​7121 @npmcli/promise-spawn@7.0.1
• 7ecd146 #​7121 npmcli/git@5.0.4
• workspace: @npmcli/arborist@7.3.0
• workspace: @npmcli/config@8.1.0
• workspace: libnpmdiff@6.0.5
• workspace: libnpmexec@7.0.6
• workspace: libnpmfund@5.0.3
• workspace: libnpmpack@6.0.5

Chores

• 2fd8292 #​7121 work around @​npmcli/git lazy loading (@​wraithgar)
• cd9a66d #​7121 update devDependencies in lockfile (@​wraithgar)
• 2dda715 #​7121 tap@16.3.10 (@​wraithgar)

v10.2.5

Compare Source

Bug Fixes

• c7a592c #​7061 dont use cache for update notifier manifest request (@​lukekarrys)
• 7b952f6 #​7049 unpublish: bubble up all errors parsing local package.json (#​7049) (@​wraithgar)
• be4741f #​7039 unpublish bugfixes (#​7039) (@​wraithgar)
• bc7f53d #​7036 reverse direction of SPDX SBOM dependency rels (#​7036) (@​bdehamer, @​antonbauhofer)
• 11ec231 #​7033 skip creation of log directory if logs-max is set to 0 (#​7033) (@​JJ)
• 6267f54 #​7005 properly catch missing url opener error on interactive prompt (#​7005) (@​wraithgar)

Dependencies

• ff1204a #​7058 lru-cache@10.1.0
• c648020 #​7058 json-parse-even-better-errors@3.0.1
• 53aa8f2 #​7058 pacote@17.0.5
• 2e5331c #​7058 npm-packlist@8.0.1
• 937b7b7 #​7058 ignore-walk@6.0.4
• 35371c8 #​7058 cacache@18.0.1
• workspace: @npmcli/arborist@7.2.2
• workspace: @npmcli/config@8.0.3
• workspace: libnpmaccess@8.0.2
• workspace: libnpmdiff@6.0.4
• workspace: libnpmexec@7.0.5
• workspace: libnpmfund@5.0.2
• workspace: libnpmhook@10.0.1
• workspace: libnpmorg@6.0.2
• workspace: libnpmpack@6.0.4
• workspace: libnpmpublish@9.0.3
• workspace: libnpmsearch@7.0.1
• workspace: libnpmteam@6.0.1
• workspace: libnpmversion@5.0.2

Chores

• f656b66 #​7062 @npmcli/template-oss@4.21.3 (#​7062) (@​lukekarrys)
• 9754b17 #​7051 use global npm for workspace tests (@​lukekarrys)
• 3891757 #​7051 @npmcli/template-oss@4.21.2 (@​lukekarrys)
• 71f70fa #​7058 nock@13.4.0 (@​wraithgar)
• 43674a4 #​7058 tap@16.3.9 (@​wraithgar)
• 4ba585c #​7040 fix tests for zlib differences between node versions (#​7040) (@​wraithgar)

v10.2.4

Compare Source

Bug Fixes

• cd291e7 #​6995 refactor search formatting code (#​6995) (@​wraithgar)
• f3a7380 #​6973 look in workspace for exec commands (#​6973) (@​wraithgar)
• d11496b #​6977 pkg: properly output in workspace mode (#​6977) (@​wraithgar)
• 0f70088 #​6969 correctly handle object licenses in SBOM generation (#​6969) (@​jamietanna)
• dce3b08 #​6951 properly catch missing url opener error (#​6951) (@​wraithgar)

Documentation

• a38836c #​6616 add path usage for view command (#​6616) (@​RobinKnipe)
• da18e4f #​6987 update npm

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[netlify]

✅ Deploy Preview for apollo-server-docs ready!

Name	Link
🔨 Latest commit	f125fab
🔍 Latest deploy log	https://app.netlify.com/sites/apollo-server-docs/deploys/663614173047cf0008a8cbb8
😎 Deploy Preview	https://deploy-preview-7718--apollo-server-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.

[codesandbox-ci]

This pull request is automatically built and testable in CodeSandbox.

To see build info of the built libraries, click here or the icon next to each commit SHA.