chore(core-deps): update npm to v8

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	6.9.0 -> 8.19.4

---

Release Notes

npm/cli (npm)

v8.19.4

Compare Source

Documentation

• dd51f34 #​6155 don't redirect "npm config' to itself (#​6155) (@​ivanosevitch)

Dependencies

• cfab523 #​6166 http-cache-semantics@4.1.1 (#​6166)

v8.19.3

Compare Source

Bug Fixes

• 26f3d0b #​5761 use hosted-git-info to parse registry urls (#​5761) (@​lukekarrys)

Documentation

• bd92aa0 #​5753 name and version description change (#​5753) (@​dominikgorczyca)

Dependencies

• Workspace: @npmcli/arborist@5.6.3
• Workspace: libnpmexec@4.0.14
• Workspace: libnpmfund@3.0.5

v8.19.2

Compare Source

Dependencies

• Workspace: @npmcli/arborist@5.6.2
• Workspace: libnpmexec@4.0.13
• Workspace: libnpmfund@3.0.4

v8.19.1

Compare Source

Bug Fixes

• d60b43f #​5438 fix: Turn off progress bar when using web based authorization (@​sandeepmeduru)

v8.19.0

Compare Source

Features

• d94a9f5 #​5347 feat: add deprecation warnings to access commands (@​wraithgar)

Bug Fixes

• bd2ae5d #​5323 fix: linting (@​wraithgar)

Documentation

• 3569094 #​5321 docs: fix link to dependency selectors page (@​hghmn)
• 414667a #​5328 docs(dependency-selectors): fix Arborist example in docs (@​kyle-west)

Dependencies

• 1286f03 #​5381 deps: unique-filename@2.0.1
• d7e9a8e #​5381 deps: ini@3.0.1
• 2c4e387 #​5381 deps: hosted-git-info@5.1.0
• e401a81 #​5381 deps: npm-bundled@2.0.1
• f4205e5 #​5381 deps: diff@5.1.0
• 8f7abbe #​5381 deps: npm-packlist@5.1.3
• b12ac01 #​5381 deps: npm-pick-manifest@7.0.2
• 7fbf6f7 #​5381 deps: bin-links@3.0.3
• 7c7f656 #​5381 deps: read-package-json@5.0.2
• 26d2e55 #​5381 deps: @npmcli/query@1.2.0
• a79ee00 #​5381 deps: cacache@16.1.3
• 2561822 #​5378 deps: @npmcli/config@4.2.2
• 8ab12dc #​5323 deps: @npmcli/eslint-config@3.1.0
• @npmcli/arborist@^5.6.1
• libnpmaccess@^6.0.4
• libnpmdiff@^4.0.5
• libnpmexec@^4.0.12
• libnpmfund@^3.0.3
• libnpmhook@^8.0.4
• libnpmorg@^4.0.4
• libnpmpack@^4.1.3
• libnpmpublish@^6.0.5
• libnpmsearch@^5.0.4
• libnpmteam@^4.0.4
• libnpmversion@^3.0.7

v8.18.0

Compare Source

v8.18.0 (2022-08-17)

Features

• e6d4304 #​5306 feat(arborist): add overridden getter to Node class (@​nlf)
• d221f72 #​5306 feat(arborist): add :overridden pseudo selector (@​nlf)
• 0d4ed0f #​5306 feat(query): support :overridden pseudo selector (@​nlf)

Bug Fixes

• 05d9bcf #​5306 fix(ls): display overridden nodes (@​nlf)
• cd2b1e6 #​5306 fix(explain): display override information (@​nlf)
• e5a9162 #​5297 fix: npm exec does not use script-shell option to run commands (@​lux01)
• 6eba131 #​5298 fix: don't prompt on npm exec [directory] (@​wraithgar)

Documentation

• bc66ffa #​5304 docs: update --no-optional to --omit=optional (@​wraithgar)

Dependencies

• 8460ccf #​5311 deps: libnpmexec@4.0.11
• 41d0f51 #​5310 deps: @npmcli/arborist@5.6.0
• 4e08d71 #​5315 deps: pacote@13.6.2
• 46e8753 #​5316 deps: npm-registry-fetch@13.3.1
• d39b2ee #​5318 deps: normalize-package-data@4.0.1
• 7d564bd #​5318 deps: make-fetch-happen@10.2.1
• 5a56686 #​5318 deps: @npmcli/git@3.0.2
• 3c5a866 #​5318 deps: bin-links@3.0.2
• 07536a4 #​5318 deps: @npmcli/fs@2.1.2
• 8165501 #​5318 deps: @npmcli/move-file@2.0.1
• cbee638 #​5318 deps: cacache@16.1.2
• 1f6daf5 #​5318 deps: write-file-atomic@4.0.2
• 409468f #​5318 deps: minipass-fetch@2.1.1

v8.17.0

Compare Source

v8.17.0 (2022-08-10)

Features

• 96b6781 #​5263 feat(arborist): add option to forcibly skip loading a virtual tree (@​nlf)

Bug Fixes

• 9078e27 #​5263 fix(query): tell arborist to load an actual tree, not a virtual one (@​nlf)
• c992fd6 #​5273 fix: look up local command bins from local tree (@​wraithgar)
• 95ae9f2 #​5253 fix: only try to run global bin if the bin name exists (@​wraithgar)
• daaf461 #​5291 fix: ignore global prefix if --prefix is used (@​wraithgar)

Documentation

• f281ec8 #​5257 docs: Fix link syntax in dependency-selectors.md (@​aried3r)

Dependencies

• 741bccf #​5284 deps: @npmcli/config@4.2.1
• 7f31b85 #​5284 deps: nopt@6.0.0
• 2569d82 #​5284 deps: node-gyp@9.1.0
• a396f8d #​5284 deps: @npmcli/map-workspaces@2.0.4
• a9b5306 #​5284 deps: is-core-module@2.10.0
• 786f753 #​5284 deps: lru-cache@7.13.2
• 7b702b6 #​5284 deps: are-we-there-yet@3.0.1
• e74f99e #​5284 deps: just-diff@5.1.1
• 9833066 #​5284 deps: just-diff-apply@5.4.1
• 4e5dd73 #​5284 deps: socks@2.7.0
• d0f5995 #​5284 deps: @npmcli/run-script@4.2.1
• 8d870c5 #​5275 deps: libnpmexec@4.0.10

v8.16.0

Compare Source

v8.16.0 (2022-08-03)

Features

• 3c024ac #​5000 feat: add npm query cmd (@​ruyadorno) (@​wraithgar)
• 703dbbf #​4860 feat: add --replace-registry-host=<npmjs|always|never> (@​fritzy)

Bug Fixes

• eac1bf2 #​5164 fix(ls): when filtering workspaces, make sure the edge has a to before checking if its a workspace (@​nlf)
• 47cc95d #​5227 fix(arborist): use the sourceReference root rather than the node root for overrides (@​nlf)
• 050284d #​5233 fix(arborist): pass the edge to fromPath in order to determine correct path (@​nlf)
• d315ead #​5243 fix: gracefully exit login and publish commands on Ctrl+C (SIGINT) in the new webAuthn flow (@​neeldani)
• ea44995 #​5244 fix: properly find locally/globally/npxCache packages (@​wraithgar)
• 19f1497 #​5244 fix: use binPaths (@​wraithgar)
• 3b30af2 #​5244 fix: fix exec tests and clean up workspace-location-msg (@​wraithgar)
• 8233fca #​5248 fix(arborist): fix bare attribute queries (@​darcyclarke)
• 19a8346 #​5250 fix: properly find and run global scoped packages (@​wraithgar)

Documentation

• a6153cf #​5240 docs: Use the full proper name of Travis CI (@​tnir)

Dependencies

• fd030c8 #​5245 deps: npm-profile@6.2.1
• c18dbc4 #​5244 deps: add @npmcli/fs@2.1.1
• cd6bafd #​5244 deps: add semver@7.3.7
• d0be9a2 #​5244 deps: @npmcli/run-script@4.2.0
• d55007d #​5247 deps: @npmcli/query@1.1.1
• c650a29 #​5241 deps: @npmcli/arborist@5.4.0
• 4b7b48b #​5246 deps: libnpmexec@4.0.9

v8.15.1

Compare Source

v8.15.1 (2022-07-27)

Bug Fixes

• 9905d0e #​5197 fix: don't fail immediately if cache dir is not accessible (@​lukekarrys)
• 0e3660e #​5206 fix(init): allow for spec on scope-only arg (@​wraithgar)
• 62b95a0 #​5122 fix: allow hash character in paths (@​AgainPsychoX)

Documentation

• f9abee7 #​5205 docs: update commit-ish default branch (@​dijonkitchen)
• 77bf2e1 #​5218 docs: update npm-ls.md (@​MapleCCC)
• de40c31 #​5207 docs: sync ci params with install (@​wraithgar)
• 4d1d8a9 #​5221 docs: describe implicit workspace and prefix configuration (@​fritzy) (@​lukekarrys) (@​wraithgar)

Dependencies

• 3bbb293 #​5223 deps: @npmcli/arborist@5.3.1

v8.15.0

Compare Source

v8.15.0 (2022-07-20)

Features

• 5ef53ee #​5160 feat: accept registry-scoped certfile and keyfile as credentials (@​jenseng)
• c8bdb4a #​5098 feat: Support pure web authentication for commands (@​jumoel) (@​ljharb) (@​hfaulds) (@​sandeepmeduru)

Bug Fixes

• 9c590fa #​5172 fix: disable progress bar on publish (@​wraithgar)
• 2fa3271 #​5196 fix: add missing ` in adduser warning (@​MylesBorins)

Documentation

• 7efad06 #​5168 docs: Update audit signatures cmd (@​feelepxyz)
• 8ab5fca #​5171 docs: correct bundledDependencies -> bundleDependencies (@​nlf)

Dependencies

• 64fe64b #​5187 deps: @npmcli/config@4.2.0
• 51b12a0 #​5187 deps: npm-registry-fetch@13.3.0
• 3ae1b81 #​5190 deps: make-fetch-happen@10.2.0

v8.14.0

Compare Source

v8.14.0 (2022-07-13)

Features

• f032e1c #​4827 feat: add npm audit signatures (@​feelepxyz)
• e8102c1 #​5076 feat: Add web auth type (@​jumoel)
• e9b4214 #​5094 feat(arborist): add support for dependencies script (@​nlf)
• c6c4ba3 #​5149 feat: notify on adduser of upcoming cmds, login and register (@​fritzy)
• e58f02f #​5149 feat: warn on config --auth-type=sso/saml/oauth, undeprecate --auth-type (@​fritzy)

Bug Fixes

• 52ec5ec #​5154 fix: properly open package arg repo inside workspace (@​wraithgar)

Documentation

• 9697f16 #​5118 docs: typo in npm command (@​crisanmm)
• da5a4ba #​5079 docs: update reference to deprecated spdx package (@​kachick)
• 25b3058 #​5043 docs: naming of files in example code should be consistent (@​xc1427)
• ac56fc4 #​5095 docs: document dependencies script (@​nlf)

Dependencies

• cb0db7c #​5147 deps: @npmcli/arborist@5.3.0
• b8c0580 #​5156 deps: minipass@3.3.4
• ad72611 #​5156 deps: lru-cache@7.12.0
• c94919d #​5156 deps: just-diff@5.0.3
• 18ddc57 #​5156 deps: just-diff-apply@5.3.1
• a2d700b #​5156 deps: npm-package-arg@9.1.0
• 99dc697 #​5156 deps: @npmcli/run-script@4.1.7
• 4a9f2dc #​5157 deps: npm-registry-fetch@13.2.0
• 45a9bde #​5158 deps: npm-profile@6.2.0

v8.13.2

Compare Source

v8.13.2 (2022-06-29)

Documentation

• 5be7d6e #​5087 docs: add foreground-scripts to run-script page (@​ruyadorno)

Dependencies

• dd62328 #​5086 deps: @npmcli/run-script@4.1.4
• 5546906 #​5086 deps: @npmcli/run-script@4.1.5
• c7d5a69 #​5102 deps: @npmcli/metavuln-calculator@3.1.1
• 7ce66b0 #​5103 deps: npm-packlist@5.1.1

v8.13.1

Compare Source

v8.13.1 (2022-06-23)

Dependencies

• f59a114 #​5064 deps: @npmcli/run-script@4.1.3
  • fix: improves escaping of arguments for run-script, exec and npx (@​nlf)
• 236b4a2 #​5069 deps: libnpmpack@4.1.2
• 0a6664d #​5070 deps: @npmcli/arborist@5.2.3
• 9f94049 #​5071 deps: libnpmexec@4.0.8
• 8212363 #​5072 deps: libnpmversion@3.0.6

v8.13.0

Compare Source

v8.13.0 (2022-06-22)

Features

• 06fd788 #​4960 feat: prompt before opening web-login URL when performing login/adduser (@​jumoel)

Bug Fixes

• e03009f #​5042 fix: Add space to SemVer log message (@​dnicolson)
• 2953983 #​5035 fix(view): error on missing version (@​wraithgar)

Documentation

• 69b5a96 #​5048 docs: consolidate docs and help for package spec (@​wraithgar)
• facba42 #​5030 docs: fix typo (@​westy92)

Dependencies

• 2e50cb8 #​5049 deps: pacote@13.6.1
• 2c06cee #​5049 deps: @npmcli/run-script@4.1.0
• 61112f7 #​5044 deps: make-fetch-happen@10.1.8
• 01eef03 #​5034 deps: npm-profile@6.1.0
• afa10c7 #​5063 deps: libnpmdiff@4.0.4
• a5be4d6 #​5062 deps: libnpmversion@3.0.5
• 3ea332b #​5061 deps: libnpmpack@4.1.1
• 14a08d6 #​5060 deps: libnpmexec@4.0.7
• 1ab9776 #​5059 deps: @npmcli/arborist@5.2.2

v8.12.2

Compare Source

v8.12.2 (2022-06-15)

Dependencies

• 053dffe #​4986 deps: make-fetch-happen@10.1.7
• d404c8c #​4985 deps: cacache@16.1.1

v8.12.1

Compare Source

v8.12.1 (2022-06-02)

Bug Fixes

• 40c823c #​4982 fix: undeprecate and remove warnings for --global, -g, --local (@​fritzy)

v8.12.0

Compare Source

v8.12.0 (2022-06-01)

Features

• aee6fc8 #​4892 feat(init): reify on init new workspace (@​ruyadorno)
• a8ae177 #​4931 feat: Add --auth-type=webauthn flag (@​jumoel)

Bug Fixes

• 646b6b5 #​4963 fix(arborist): use rawSpec for bundled and shrinkwrapped deps (@​nlf)
• fcc72dd #​4929 fix(libnpmexec): fix bug not install latest pkg (@​jihunleekr)

Dependencies

• a6b62b2 #​4949 deps: make-fetch-happen@10.1.6
• fb4cc24 #​4969 deps: pacote@13.6.0
• 5b9688c #​4971 deps: glob@8.0.3
• a8bfdd8 #​4972 deps: minimatch@5.1.0
• 66981ec #​4973 deps: tap@16.2.0
• 180a7e4 #​4975 deps: @npmcli/arborist@5.2.1
• 0886f7f #​4976 deps: libnpmexec@4.0.6

v8.11.0

Compare Source

v8.11.0 (2022-05-25)

Features

• 8898710 #​4879 feat: deprecated set-script, birthday, --global, and --local (@​fritzy)
• 7307c8d #​4940 feat(libnpmpack): bump pacote for better workspace awareness (@​nlf)

Bug Fixes

• 400c80f #​4913 fix(ci): remove node_modules post-validation (@​wraithgar)
• 124df81 #​4910 fix: clean up npm cache tests (@​wraithgar)
• ee3308a fix: remove dead code from get-identity (@​wraithgar)
• 357b0af #​4917 fix: pass prefix and workspaces to libnpmpack (@​nlf)
• 0f89e07 #​4935 fix: add global getter to npm class (@​nlf)

Documentation

• 83ed8d0 #​4922 docs: update roadmap link in readme (@​OmriBarZik)
• ed054d4 #​4933 docs: fix broken link in changelog (@​yonran)

Dependencies

• 632ce87 #​4915 deps: cacache@16.1.0
• 7b2b77a #​4915 deps: make-fetch-happen@10.1.5
• f3b0a24 #​4915 deps: pacote@13.4.1
• 0df3011 #​4915 deps: ssri@9.0.1
• dc38ab9 #​4919 deps: npm-packlist@5.0.4
• 353e2f9 #​4940 deps: pacote@13.5.0 npm-packlist@5.1.0
• f4d4126 #​4941 deps: libnpmpack@4.1.0

v8.10.0

Compare Source

v8.10.0 (2022-05-11)

Features

• 911f55d #​4864 feat: add --iwr alias for --include-workspace-root (@​fritzy)
• bfb8bcc #​4874 feat: add flag --omit-lockfile-registry-resolved (@​fritzy) (Caleb ツ Everett)

Bug Fixes

• 48d2db6 #​4862 fix: remove test coverage map (@​wraithgar)
• 38cf29a #​4868 fix: cleanup star/unstar (@​wraithgar)
• 5baa4a7 #​4857 fix: consolidate bugs, docs, repo command logic (@​wraithgar)
• 5a50762 #​4875 fix(arborist): link deps lifecycle scripts (@​ruyadorno)

Dependencies

• d58bf40 #​4856 deps: npm-packlist@5.0.3
• 86f443e #​4872 deps: make-fetch-happen@10.1.3
• f9984e6 #​4880 deps: @npmcli/arborist@5.2.0
• ba59915 #​4881 deps: socks-proxy-agent@6.2.0
• c0806ba #​4881 deps: http-proxy-agent@5.0.1
• cc7be6b #​4881 deps: is-core-module@2.9.0
• 0432c7d #​4881 deps: lru-cache@7.9.0
• 5778820 #​4881 deps: just-diff@5.0.2
• 893dd00 #​4881 deps: ip@1.1.8
• 6ab85bd #​4881 deps: builtins@5.0.1

v8.9.0

Compare Source

v8.9.0 (2022-05-04)

Features

• 62af3a1 #​4835 feat: make npm owner workspace aware (@​wraithgar)

Bug Fixes

• d654e7e #​4781 fix: start consolidating color output (@​wraithgar)
• b9a966c #​4843 fix(exec): ignore packageLockOnly flag (@​nlf)

Documentation

• 8fd7eec #​4845 docs: remove incorrect v6 auto prune info (@​wraithgar)
• 5f59f80 #​4847 docs: show complex object interactions in npm pkg (@​wraithgar)

Dependencies

• 62faf8a #​4837 deps: pacote@13.2.0
• 4ff7d3d #​4816 deps: cacache@16.0.7
• e2e9c81 #​4852 deps: pacote@13.3.0

v8.8.0

Compare Source

v8.8.0 (2022-04-27)

Features

• bedd8a1 #​4745 feat: add install-links config definition (@​nlf)

Bug Fixes

• 6253d19 #​4643 fix(exec): workspaces support (@​ruyadorno)
• e9163b4 #​4657 fix(libnpmpublish): unpublish from custom registry (@​ruyadorno)
• a677f49 #​4778 fix: Use node in and fallback to PATH if not found (@​elibus)
• b10462e #​4752 fix: completion for deprecate cmd (@​wraithgar)
• ced0acf #​4775 fix: consolidate registryConfig application logic (@​wraithgar)
• b06e89f #​4679 fix(install): do not install invalid package name (@​ruyadorno)
• 9ea2603 #​4786 fix: normalize win32 paths before globbing (@​lukekarrys)
• 8da28b4 #​4757 fix: remove lib/utils/read-package-name.js (@​wraithgar)

Documentation

• a6ea884 #​4745 docs: add some more docs for --install-links (@​nlf)
• 6cd6831 #​4782 docs: explain that _auth only goes to npm registry (@​wraithgar)
• fa3d829 #​4772 docs: include org instructions in scoped publish (@​bnb)

Dependencies

• 36899d1 #​4807 deps: @npmcli/arborist@5.1.1
  • 0ebadf5 #​4745 add support for installLinks (@​nlf)
  • 3d96494 #​4745 when replacing a Link with a Node, make sure to remove the Link target from the root (@​nlf)
• 3f2b24a #​4786 deps: @npmcli/map-workspaces@2.0.3
• b1b6948 #​4808 deps: libnpmexec@4.0.5
  • 4a46a27 #​4777 fix read mixed local/registry pkg (@​ruyadorno)
• 9f57404 #​4743 deps: npm-registry-fetch@13.1.1
• 532883f #​4786 deps: cacache@16.0.6
• 4d1398e #​4786 deps: npm-profile@6.0.3
• 5e31322 #​4786 deps: npmlog@6.0.2
• 4eb2ccb #​4786 deps: read-package-json@5.0.1
• aeb54e4 #​4786 deps: glob@8.0.1
• 252b2b1 #​4786 deps: npm-packlist@5.0.2
• c51e553 #​4786 deps: semver@7.3.7
• 13299ee #​4786 deps: lru-cache@7.8.1
• 0f2da5d #​4786 deps: cli-table3@​0.6.2
• 0ee57f1 #​4805 deps: libnpmpublish@6.0.4
• 8a633a4 #​4806 deps: libnpmversion@3.0.4

v8.7.0

Compare Source

v8.7.0 (2022-04-13)

Features

• 6611e91 #​4723 feat(config): add more npm/node information to config ls (@​lukekarrys)
• c057b90 #​4740 feat(config): warn on deprecated configs (@​lukekarrys)

Bug Fixes

• 2829cb2 #​4658 fix: update readme badges (@​lukekarrys)
• e3da5df #​4667 fix: replace deprecated String.prototype.substr() (@​CommanderRoot)
• 2a26e5e #​4645 fix: remove dedupe --save (@​wraithgar)
• 47438ff #​4645 fix: do not export npm_config_include_workspace_root (@​wraithgar)
• 840c338 #​4678 fix(run-script): don't cascade if-present config (@​ruyadorno)
• 4d676e3 #​4709 fix(arborist): when reloading an edge, also refresh overrides (@​nlf)
• 3f7fe17 #​4659 fix: skip update notifier file if not requested (@​lukekarrys)
• 5ba7f0c #​4726 fix: show more information during publish dry-run (@​lukekarrys)
• aa4a4da #​4735 fix(arborist): dont skip adding advisories to audit based on name/range (@​lukekarrys)
• 0cd852f #​4741 fix: mitigate doctor test race condition (@​wraithgar)
• ba8b2a7 #​4744 fix(ls): make --omit filter npm ls (@​lukekarrys)

Documentation

• 85b3c48 #​4666 docs(ci): add note that configuration must be consistent between install and ci (@​nlf)
• 44108f7 #​4670 docs: fix npm-uninstall typo (@​JSKitty)

Dependencies

• aaf86f6 #​4674 deps: @npmcli/metavuln-calculator@3.1.0
• [4a9a705](https://togithub.com/npm/cli/commit/4a9a705de6992a3e9eefecc6c0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm ERR! cb.apply is not a function

npm ERR! A complete log of this run can be found in:
npm ERR!     /tmp/worker/8e516c/e4cdfb/cache/others/npm/_logs/2023-03-12T10_43_47_305Z-debug.log