Update npm to v9 #346
Open
Update npm to v9 #346
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
renovate
Type: Dependencies
renovate
bot
force-pushed
the
renovate/npm-9.x
branch
from
800a720
to
3e67efa
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
8.14.0->9.9.3Release Notes
npm/cli (npm)
v9.9.3Compare Source
Bug Fixes
88ea8c7#7010 set objectMode for search filter stream (@lukekarrys)8d9d735#7010 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)e0e75e5#7010 unpublish bugfixes (#7039) (@wraithgar)4d59ce1#7047 reverse direction of SPDX SBOM dep rels (#7047) (@bdehamer, @antonbauhofer)878f22b#7008 properly catch missing url opener error (@wraithgar)91a8eca#7008 properly catch missing url opener error on interactive prompt (@wraithgar)Dependencies
1968e0e#7010spdx-license-ids@3.0.17d130576#7010spdx-exceptions@2.5.000f28b8#7010signal-exit@4.1.057096c3#7010postcss-selector-parser@6.0.153ce677e#7010minipass-fetch@3.0.489757ed#7010is-core-module@2.13.1bc1e841#7010socks@2.8.101f4049#7010ignore-walk@6.0.415f8982#7010function-bind@1.1.288ff949#7010cmd-shim@6.0.23e298f6#7010bin-links@4.0.335a6286#7010are-we-there-yet@4.0.2aeb28c4#7010agentkeepalive@4.5.0edc7e23#7010@npmcli/query@3.1.000a3a08#7010tar@6.2.07f424c3#7010ssri@10.0.579b8538#7010semver@7.6.0b5faf10#7010npm-install-checks@6.3.02c62266#7010node-gyp@9.4.1cc0516b#7010minipass@7.0.4651d362#7010json-parse-even-better-errors@3.0.14b239c6#7010glob@10.3.102f65b46#7010fs-minipass@3.0.36c73ddf#7010diff@5.2.073ee6cc#7010ci-info@4.0.064715a4#7010cacache@17.1.4@npmcli/arborist@6.5.1@npmcli/config@6.4.1libnpmaccess@7.0.3libnpmdiff@5.0.21libnpmexec@6.0.5libnpmfund@4.2.2libnpmhook@9.0.4libnpmorg@5.0.5libnpmpack@5.0.21libnpmpublish@7.5.2libnpmsearch@6.0.3libnpmteam@5.0.4libnpmversion@4.0.3Chores
77fa150#7252 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)1d4c464#7252@npmcli/template-oss@4.21.3(@lukekarrys)6780643#7010 dev dependency updates (@wraithgar)ce701e9#7048 fix tests for zlib differences between node versions (#7048) (@wraithgar)v9.9.2Compare Source
Bug Fixes
4c9a5e1#6993 look in workspace for exec commands (#6993) (@wraithgar)bb6f496#6992 correctly handle object licenses in SBOM generation (#6992) (@bdehamer, @jamietanna)10db3ca#6990 pkg: properly output in workspace mode (#6990) (@wraithgar)Documentation
6ab06d7#6985 update npm-prune description (#6985) (@Eomm)Dependencies
libnpmpublish@7.5.1v9.9.1Compare Source
Bug Fixes
0dba79a#6942 add back bin/node-gyp-bin/node-gyp files (@lukekarrys)c93edb5#6932 add backbin/node-gyp-bin/node-gypfiles (@lukekarrys)Documentation
e6cce28#6925 use markdown links instead of html (@lukekarrys)v9.9.0Compare Source
Features
ecda95a#6841 add npm sbom command (#6841) (@bdehamer)fdb8a86#6794 add package-lock-only mode to npm query (@wraithgar)16c04b1#6877 add no-package-lock mode to npm audit (@wraithgar)66ef765#6776 Add--cpuand--osoption to override platform specific install (#6776) (@yukukotani)Bug Fixes
c9406f7#6791 deprecate: ignore implicit workspace mode (#6758) (#6791) (@wraithgar)0b1d7c3#6779 allow searching packages with no description (#6779) (@wraithgar, @lukekarrys)Documentation
9750720#6694 fix example path (#6694) (@fvilers)Dependencies
588a245#6756npm-pick-manifest@8.0.2a76b1df#6877sigstore@1.9.095b5ab0#6877npm-install-checks@6.2.0@npmcli/arborist@6.5.0@npmcli/config@6.4.0libnpmdiff@5.0.20libnpmexec@6.0.4libnpmfund@4.2.1libnpmpack@5.0.20v9.8.1Compare Source
Bug Fixes
38351c9#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3#6651@npmcli/package-json@4.0.124f5a8b#6653supports-color@9.4.0f45498b#6653chalk@5.3.044d60eb#6653minimatch@9.0.3fc9a843#6653bin-links@3.0.2daad9ad#6653semver@7.5.4c1ffd6a#6653 move @npmcli/fs, @npmcli/promise-spawn into dependencieslibnpmexec@6.0.3v9.8.0Compare Source
Features
67459e7#6626 addpkg fixsubcommand (@wraithgar)89b2741#6548 add ps1 scripts (#6548) (@mribbons, @lukekarrys)Dependencies
b252164#6626@npmcli/package-json@4.0.09238682#6623sigstore@1.7.0(#6623)@npmcli/arborist@6.3.0libnpmdiff@5.0.19libnpmexec@6.0.2libnpmfund@4.0.19libnpmpack@5.0.19libnpmpublish@7.5.0v9.7.2Compare Source
Bug Fixes
939a188#6574 ignore node prereleases in npm engines check (#6574) (@wraithgar)d980405#6556 better color support detection (#6556) (@lukekarrys)40d7e09#6555 remove unnecessary package.json values (#6555) (@lukekarrys)3a7378d#6554 cleanup bin contents (@lukekarrys)e722439#6497 move all definitions to @npmcli/config package (@lukekarrys)Documentation
405ffbf#6557 remove redundant statement about files attribute (#6557) (@DaviDevMod)cd1e6aa#6551 add flagpackage-lock-onlyfornpm install(#6551) (@m4rch3n1ng)Dependencies
aebc523#6585safe-buffer@5.2.1string_decoder@1.3.0(#6585)bb6054b#6573tuf-js@1.1.7aee4a30#6573strip-ansi@7.1.06105dbc#6573path-scurry@1.9.222d44e8#6573read-package-json@6.0.4fdd02fd#6573jackspeak@2.2.17797075#6573is-core-module@2.12.1f9780cc#6573sigstore@1.6.072d6a79#6573semver@7.5.298f1f5f#6573nopt@7.2.08710ff8#6573pacote@15.2.00cb539d#6573node-gyp@9.4.039ad586#6573ini@4.1.15e0070c#6573glob@10.2.7minimatch@9.0.126cf235#6573cacache@17.1.3@npmcli/arborist@6.2.10@npmcli/config@6.2.1libnpmdiff@5.0.18libnpmexec@6.0.1libnpmfund@4.0.18libnpmpack@5.0.18libnpmpublish@7.4.0v9.7.1Compare Source
Dependencies
7467ff6#6518@npmcli/package-json@3.1.1,@npmcli/git@4.1.0v9.7.0Compare Source
Features
a63a6d8#6490 add provenanceFile option for libnpmpublish (@bdehamer)2a8f4f2#6490 add new exclusive config item publish-file (@wraithgar)361e194#6483 implement flag --prefer-dedupe fornpm install(#6483) (@m4rch3n1ng)Bug Fixes
38eb39b#6514 strip ansi characters from search results (#6514) (@wraithgar)4b5ccfc#6477 make usage and completion static functions (#6477) (@lukekarrys)4f39e8c#6479 refactor engines validation to lint syntax (#6479) (@lukekarrys)f3cfe12#6482 remove unused lib/npm relics (#6482) (@lukekarrys)87de0c7#6472 move explore command to @npmcli/package-json (@wraithgar)636e29e#6472 move to @npmcli/package-json where possible (@wraithgar)37cc797#6418 retrieve registry keys via TUF (#6418) (@bdehamer)Documentation
83cd5bd#6480 add global option for uninstall (#6480) (@m4rch3n1ng)0400ce3#6481 add cli params tonpm set,npm get(#6481) (@m4rch3n1ng)c3638ce#6468 removepackage-lockoption fornpm ci(#6468) (@m4rch3n1ng)Dependencies
060d587chalk@5.2.0,npm-audit-report@5.0.0fc52ca8#6472 remove read-package-json-fast3238aa7#6472 remove read-package-json@npmcli/config@6.2.0libnpmexec@6.0.0libnpmpublish@7.3.0v9.6.7Compare Source
Bug Fixes
9202c7d#6464 npm cache completion (#6464) (@m4rch3n1ng)6ce99a8#6461 exit codes in node v20 (#6461) (@MichaelBitard)23c865f#6434 deprecate ci-name config (#6434) (@wraithgar)Documentation
7751dd4#6413 add a comma (#6413) (@darryltec)Dependencies
afc38a5#6458cacache@17.1.2afb936c#6458tuf-js@1.1.6f6a0884#6458readable-stream@4.4.0858f0ca#6458postcss-selector-parser@6.0.1353ecb84#6458path-scurry@1.9.1d93f70c#6458signal-exit@4.0.219214b5#6458@npmcli/package-json@3.1.0f53e6ff#6458sigstore@1.5.294d6ee7#6458glob@10.2.4902cb80#6458semver@7.5.135e2e9a#6458@npmcli/run-script@6.0.2@npmcli/config@6.1.7libnpmpublish@7.2.0v9.6.6Compare Source
Dependencies
70e65b1#6423tuf-js@1.1.5(#6423)72291f7#6416read-package-json@6.0.3e498f82#6416minimatch@9.0.013aa7b7#6416minipass@5.0.0f2a5678#6416tar@6.1.1469d4dd2#6416 npm updateabdca39#6416sigstore@1.4.016f68fb#6416glob@10.2.267fcfb1#6416ignore-walk@6.0.3bfa2ff3#6416make-fetch-happen@11.1.1877591a#6416npm-registry-fetch@14.0.57630517#6416pacote@15.1.3c2d6e0a#6416write-file-atomic@5.0.1acdf97e#6416which@3.0.100c541a#6416ssri@10.0.41b95e73#6416read-package-json@6.0.26927fd3#6416fs-minipass@3.0.23eec56e#6416cacache@17.1.07a2ce3f#6416@npmcli/run-script@6.0.13881770#6416@npmcli/map-workspaces@3.0.4@npmcli/arborist@6.2.9libnpmdiff@5.0.17libnpmexec@5.0.17libnpmfund@4.0.17libnpmorg@5.0.4libnpmpack@5.0.17libnpmpublish@7.1.4v9.6.5Compare Source
Bug Fixes
33dc428#6374 account for npx package-name with no spec (@wraithgar)82879f6#6225 lazy loading of arborist and pacote (#6225) (@wraithgar)f4e73ab#6322 remove incompatible params from ci (#6322) (@wraithgar)c7fe1c7#6328 save raw data to file, not parsed data (@wraithgar)Documentation
31214a6#6381 Update description for publish --provenance flag (#6381) (@feelepxyz)997bcdf#6329 fix npm cache folder location for windows (#6329) (@charlie-wong)Dependencies
fae5e00#6372sigstore@1.3.0(#6372)3fa9542#6363semver@7.5.0e49844e#6363minipass-fetch@3.0.2357cc29#6363walk-up-path@3.0.12c80b1e#6363ini@4.1.05933841#6363minipass@4.2.8b39d54e#6363minimatch@7.4.6201aa5a#6363ssri@10.0.3acb9120#6363read@2.1.02472205#6363npm-registry-fetch@14.0.42780714#6363npm-install-checks@6.1.1b5af015#6363make-fetch-happen@11.1.014c498d#6363@npmcli/metavuln-calculator@5.0.1@npmcli/arborist@6.2.8@npmcli/config@6.1.6libnpmdiff@5.0.16libnpmexec@5.0.16libnpmfund@4.0.16libnpmpack@5.0.16v9.6.4Compare Source
Documentation
54795a3#6312 filter archives out of version manager search (#6312) (@ljharb)530c285#6306 remove reference to npm-packlist (#6306) (@staff0rd)Dependencies
85935ac#6325ssri@10.0.2(#6325)f1388b4#6317 npm update7dd0129#6317glob@9.3.2deca335#6317promise-call-limit@1.0.2@npmcli/arborist@6.2.7libnpmdiff@5.0.15libnpmexec@5.0.15libnpmfund@4.0.15libnpmpack@5.0.15v9.6.3Compare Source
Bug Fixes
829503b#6304 don't break up log message across lines (@wraithgar)1435fcf#6304 do less work loading ./lib/npm.js (@wraithgar)09b58e4#6284 make all color output use an npm instance of chalk (#6284) (@lukekarrys)e252532#6283 do less work looking up commands (#6283) (@wraithgar)6a4bcba#6275 clean up man sorting (@wraithgar)8a96b65#6275 ignore ts and map files (@wraithgar)94d2b39#6271 Do not log warnings about log cleanup when logs_max=0 (#6271) (@jmealo)2def359#6277 updated ebadplatform messaging to be generated based on the error (#6277) (@nlf)Documentation
1e2eb81#6311 replace version manager list with a github search (#6311) (@wraithgar)9d2be4e#6289 remove npm bin link (#6289) (@KevinRouchut)Dependencies
e652dbd#6308minimatch@7.4.3(#6308)01986d1#6307sigstore@1.2.0(#6307)ea12627#6275minimatch@7.4.2ec3e020#6275glob@9.3.1952fbed#6275read-package-json@6.0.1dd43d30#6275parse-conflict-json@3.0.1d5ce7ca#6275npm-install-checks@6.1.0704cd1e#6275nopt@7.1.0a6da22a#6275ignore-walk@6.0.255955fd#6275cacache@17.0.5839b670#6275@npmcli/map-workspaces@3.0.39a7b8e8#6275@npmcli/git@4.0.457c0a55#6275 npm update74c80f5#6275minipass@4.2.5b174c90#6275graceful-fs@4.2.11@npmcli/arborist@6.2.6@npmcli/config@6.1.5libnpmdiff@5.0.14libnpmexec@5.0.14libnpmfund@4.0.14libnpmpack@5.0.14libnpmpublish@7.1.3v9.6.2Compare Source
Bug Fixes
4622b42#6247 add provenance publish notice (#6247) (@bdehamer)Dependencies
434b461#6255sigstore@1.1.1(#6255)@npmcli/config@6.1.4libnpmpublish@7.1.2v9.6.1Compare Source
Bug Fixes
e455e3f#6211 send options with grant/revoke requests (#6211) (@DavidTanner)e4de224#6220 clean uri from audit error (#6220) (@wraithgar)Dependencies
cb45b21#6231 npm update1f60a7e#6231minipass@4.2.4@npmcli/arborist@6.2.5libnpmdiff@5.0.13libnpmexec@5.0.13libnpmfund@4.0.13libnpmpack@5.0.13libnpmpublish@7.1.1v9.6.0Compare Source
Features
84fbaf2#6216 add preliminary fish shell completion (@wraithgar)Bug Fixes
c4c8754audit: add signatures to completion (@wraithgar)fc46489access: only complete once (@wraithgar)b43961acmd-list: alias only to real commands (@wraithgar)Documentation
2695e1f#6187 npm v9 creates package-lock.json v3 (#6187) (@tuukka)Dependencies
71ae406#6218@npmcli/installed-package-contents@2.0.2@npmcli/arborist@6.2.4libnpmdiff@5.0.12libnpmexec@5.0.12libnpmfund@4.0.12libnpmpack@5.0.12v9.5.1Compare Source
Documentation
9bc455b#6188 fixing typos (#6188) (@deining)ec8c95c#6186 update OSI link (#6186) (@roerohan)Dependencies
7ba3e17#6189 npm updatef7a5200pacote@15.1.1@npmcli/arborist@6.2.3libnpmdiff@5.0.11libnpmexec@5.0.11libnpmfund@4.0.11libnpmpack@5.0.11v9.5.0Compare Source
Features
79bfd03#6153 audit signatures verifies attestations (@feelepxyz)5fc6473add provenance attestation (@bdehamer)Bug Fixes
53f75a4#6158 gracefully fallback from auth-type=web (#6158) (@MylesBorins)ed59aae#6162 refactor error reporting in audit command (@bdehamer)Dependencies
fad0473minipass@4.0.3678c6bfminimatch@6.2.09b4b366ci-info@3.8.0d20ee2apacote@15.1.0Configuration
📅 Schedule: Branch creation - "before 4am on the first day of the month" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.