[Snyk] Upgrade npm from 8.0.0 to 8.1.3 #305
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk has created this PR to upgrade npm from 8.0.0 to 8.1.3. See this package in npm: https://www.npmjs.com/package/npm See this project in Snyk: https://app.snyk.io/org/tosh.koevoets/project/9d6a8206-fd8c-4886-bb42-d1b06e7431c7?utm_source=github&utm_medium=referral&page=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk has created this PR to upgrade npm from 8.0.0 to 8.1.3.
ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.
Release notes
Package name: npm
-
8.1.3 - 2021-11-04
- fix: don't compare spec for local dep vs existing
- fix: stop pruning peerSets when entryEdge is from a workspace
- fix: dont load project configs in global mode
-
8.1.2 - 2021-10-28
-
8.1.1 - 2021-10-21
- fix: skip peer conflict check if there is a current node
- feat(gyp): update gyp to v0.10.0
-
8.1.0 - 2021-10-14
- fix: preserve git+ssh url for non-hosted repos
- deps: update
- fix: no longer include ignored bundled link deps
-
8.0.0 - 2021-10-07
- Drop support for node 10 and 11
- Raise support ceiling in node 12 and 14 to LTS (^12.13.0/^14.15.0)
- Drop support to
- Update subdependencies that also dropped node10 support
- The following dependencies were updated to drop node10 support and
- libnpmversion@2.0.1
- pacote@12.0.0
- libnpmpack@3.0.0
- @ npmcli/arborist@3.0.0
- libnpmfund@2.0.0
- libnpmexec@3.0.0
- node-gyp@8.2.0
from npm GitHub release notesv8.1.3 (2021-11-04)
BUG FIXES
8ffeb71df#3959 fix: refactor commands (@ wraithgar)e5bfdaca4#3978 fix: shrinkwrap setting incorrect lockfileVersion (@ lukekarrys)32ccd3c27#3988 fix: remove usage of unnecessary util.promisify (@ lukekarrys)1e9c31c4e#3994 fix: npm help on windows (@ wraithgar)22230ef3d#3987 fix: make prefixed usage errors more consistent (@ lukekarrys)DEPENDENCIES
ac2fabb86#3990@ npmcli/arborist@4.0.4a0d35ff20#3996@ npmcli/config@2.3.1:BUG FIXES
cb9f43551#3949 allow--lockfile-versionconfig to be string and coerce to number (@ lukekarrys)070901d7a#3943 fix(publish): clean args before logging (@ wraithgar)DEPENDENCIES
8af94726b#3953arborist@4.0.338cee94#340 fix: set lockfileVersion from file during resetd310bd3#339 fix: always set originalLockfileVersion when doing shrinkwrap resetv8.1.1 (2021-10-21)
DEPENDENCIES
51fb83ce9#3921@ npmcli/arborist@4.0.2:1d07f2187#3913node-gyp@8.3.0:v8.1.0 (2021-10-14)
FEATURES
24273a862#3890 feat(workspaces): add --include-workspace-root and explicit --no-workspaces (@ fritzy)d559d6da8#3880 feat(config): Add --lockfile-version config option (@ isaacs)DEPENDENCIES
ae4bf013d#3883pacote@12.0.2:npm-packlist@3.0.0fbc5a3d08#3889@ npmcli/ci-detect@1.4.0b6bc279e5#3893@ npmcli/arborist@4.0.10f69d295b#3893@ npmcli/map-workspaces@2.0.0DOCUMENTATION
f77932ca1#3861 fix(docs): Update Node support in README (@ gfyoung)a190f422a#3878 fix(docs): grammar fix (@ XhmikosR)v8.0.0 (2021-10-07)
The purpose of this release is to drop support for old node versions and
to remove support for
require('npm'). There are no other breakingchanges.
BREAKING CHANGES
require('npm')DEPENDENCIES
update to the latest node-gyp
8bd85cdae#3813cli-columns@4.0.0Commit messages
Package name: npm
Compare
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.
For more information:
🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs