This repository was archived by the owner on Jul 20, 2022. It is now read-only.
fix(deps): update dependency npm to v8 #221
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^6.14.2->^8.14.0Test plan: CI should pass with updated dependencies. No review required: this is an automated dependency update PR.
Release Notes
npm/cli
v8.14.0Compare Source
Features
f032e1c#4827 feat: add npm audit signatures (@feelepxyz)e8102c1#5076 feat: Addwebauth type (@jumoel)e9b4214#5094 feat(arborist): add support for dependencies script (@nlf)c6c4ba3#5149 feat: notify on adduser of upcoming cmds, login and register (@fritzy)e58f02f#5149 feat: warn on config --auth-type=sso/saml/oauth, undeprecate --auth-type (@fritzy)Bug Fixes
52ec5ec#5154 fix: properly open package arg repo inside workspace (@wraithgar)Documentation
9697f16#5118 docs: typo in npm command (@crisanmm)da5a4ba#5079 docs: update reference to deprecated spdx package (@kachick)25b3058#5043 docs: naming of files in example code should be consistent (@xc1427)ac56fc4#5095 docs: documentdependenciesscript (@nlf)Dependencies
cb0db7c#5147 deps:@npmcli/arborist@5.3.0b8c0580#5156 deps:minipass@3.3.4ad72611#5156 deps:lru-cache@7.12.0c94919d#5156 deps:just-diff@5.0.318ddc57#5156 deps:just-diff-apply@5.3.1a2d700b#5156 deps:npm-package-arg@9.1.099dc697#5156 deps:@npmcli/run-script@4.1.74a9f2dc#5157 deps:npm-registry-fetch@13.2.045a9bde#5158 deps:npm-profile@6.2.0v8.13.2Compare Source
Documentation
5be7d6e#5087 docs: add foreground-scripts to run-script page (@ruyadorno)Dependencies
dd62328#5086 deps:@npmcli/run-script@4.1.45546906#5086 deps:@npmcli/run-script@4.1.5c7d5a69#5102 deps:@npmcli/metavuln-calculator@3.1.17ce66b0#5103 deps:npm-packlist@5.1.1v8.13.1Compare Source
Dependencies
f59a114#5064 deps:@npmcli/run-script@4.1.3236b4a2#5069 deps:libnpmpack@4.1.20a6664d#5070 deps:@npmcli/arborist@5.2.39f94049#5071 deps:libnpmexec@4.0.88212363#5072 deps:libnpmversion@3.0.6v8.13.0Compare Source
Features
06fd788#4960 feat: prompt before opening web-login URL when performinglogin/adduser(@jumoel)Bug Fixes
e03009f#5042 fix: Add space to SemVer log message (@dnicolson)2953983#5035 fix(view): error on missing version (@wraithgar)Documentation
69b5a96#5048 docs: consolidate docs and help for package spec (@wraithgar)facba42#5030 docs: fix typo (@westy92)Dependencies
2e50cb8#5049 deps:pacote@13.6.12c06cee#5049 deps:@npmcli/run-script@4.1.061112f7#5044 deps:make-fetch-happen@10.1.801eef03#5034 deps:npm-profile@6.1.0afa10c7#5063 deps:libnpmdiff@4.0.4a5be4d6#5062 deps:libnpmversion@3.0.53ea332b#5061 deps:libnpmpack@4.1.114a08d6#5060 deps:libnpmexec@4.0.71ab9776#5059 deps:@npmcli/arborist@5.2.2v8.12.2Compare Source
Dependencies
053dffe#4986 deps:make-fetch-happen@10.1.7d404c8c#4985 deps:cacache@16.1.1v8.12.1Compare Source
Bug Fixes
40c823c#4982 fix: undeprecate and remove warnings for --global, -g, --local (@fritzy)v8.12.0Compare Source
Features
aee6fc8#4892 feat(init): reify on init new workspace (@ruyadorno)a8ae177#4931 feat: Add--auth-type=webauthnflag (@jumoel)Bug Fixes
646b6b5#4963 fix(arborist): use rawSpec for bundled and shrinkwrapped deps (@nlf)fcc72dd#4929 fix(libnpmexec): fix bug not install latest pkg (@jihunleekr)Dependencies
a6b62b2#4949 deps:make-fetch-happen@10.1.6fb4cc24#4969 deps:pacote@13.6.05b9688c#4971 deps:glob@8.0.3a8bfdd8#4972 deps:minimatch@5.1.066981ec#4973 deps:tap@16.2.0180a7e4#4975 deps:@npmcli/arborist@5.2.10886f7f#4976 deps:libnpmexec@4.0.6v8.11.0Compare Source
Features
8898710#4879 feat: deprecated set-script, birthday, --global, and --local (@fritzy)7307c8d#4940 feat(libnpmpack): bump pacote for better workspace awareness (@nlf)Bug Fixes
400c80f#4913 fix(ci): remove node_modules post-validation (@wraithgar)124df81#4910 fix: clean up npm cache tests (@wraithgar)ee3308afix: remove dead code from get-identity (@wraithgar)357b0af#4917 fix: pass prefix and workspaces to libnpmpack (@nlf)0f89e07#4935 fix: add global getter to npm class (@nlf)Documentation
83ed8d0#4922 docs: update roadmap link in readme (@OmriBarZik)ed054d4#4933 docs: fix broken link in changelog (@yonran)Dependencies
632ce87#4915 deps:cacache@16.1.07b2b77a#4915 deps:make-fetch-happen@10.1.5f3b0a24#4915 deps:pacote@13.4.10df3011#4915 deps:ssri@9.0.1dc38ab9#4919 deps:npm-packlist@5.0.4353e2f9#4940 deps:pacote@13.5.0 npm-packlist@5.1.0f4d4126#4941 deps:libnpmpack@4.1.0v8.10.0Compare Source
Features
911f55d#4864 feat: add --iwr alias for --include-workspace-root (@fritzy)bfb8bcc#4874 feat: add flag --omit-lockfile-registry-resolved (@fritzy) (Caleb ツ Everett)Bug Fixes
48d2db6#4862 fix: remove test coverage map (@wraithgar)38cf29a#4868 fix: cleanup star/unstar (@wraithgar)5baa4a7#4857 fix: consolidate bugs, docs, repo command logic (@wraithgar)5a50762#4875 fix(arborist): link deps lifecycle scripts (@ruyadorno)Dependencies
d58bf40#4856 deps:npm-packlist@5.0.386f443e#4872 deps:make-fetch-happen@10.1.3f9984e6#4880 deps:@npmcli/arborist@5.2.0ba59915#4881 deps:socks-proxy-agent@6.2.0c0806ba#4881 deps:http-proxy-agent@5.0.1cc7be6b#4881 deps:is-core-module@2.9.00432c7d#4881 deps:lru-cache@7.9.05778820#4881 deps:just-diff@5.0.2893dd00#4881 deps:ip@1.1.86ab85bd#4881 deps:builtins@5.0.1v8.9.0Compare Source
Features
62af3a1#4835 feat: make npm owner workspace aware (@wraithgar)Bug Fixes
d654e7e#4781 fix: start consolidating color output (@wraithgar)b9a966c#4843 fix(exec): ignore packageLockOnly flag (@nlf)Documentation
8fd7eec#4845 docs: remove incorrect v6 auto prune info (@wraithgar)5f59f80#4847 docs: show complex object interactions in npm pkg (@wraithgar)Dependencies
62faf8a#4837 deps:pacote@13.2.04ff7d3d#4816 deps:cacache@16.0.7e2e9c81#4852 deps:pacote@13.3.0v8.8.0Compare Source
Features
bedd8a1#4745 feat: add install-links config definition (@nlf)Bug Fixes
6253d19#4643 fix(exec): workspaces support (@ruyadorno)e9163b4#4657 fix(libnpmpublish): unpublish from custom registry (@ruyadorno)a677f49#4778 fix: Use node in and fallback to PATH if not found (@elibus)b10462e#4752 fix: completion fordeprecatecmd (@wraithgar)ced0acf#4775 fix: consolidate registryConfig application logic (@wraithgar)b06e89f#4679 fix(install): do not install invalid package name (@ruyadorno)9ea2603#4786 fix: normalize win32 paths before globbing (@lukekarrys)8da28b4#4757 fix: removelib/utils/read-package-name.js(@wraithgar)Documentation
a6ea884#4745 docs: add some more docs for --install-links (@nlf)6cd6831#4782 docs: explain that _auth only goes to npm registry (@wraithgar)fa3d829#4772 docs: include org instructions in scoped publish (@bnb)Dependencies
36899d1#4807 deps:@npmcli/arborist@5.1.10ebadf5#4745 add support for installLinks (@nlf)3d96494#4745 when replacing a Link with a Node, make sure to remove the Link target from the root (@nlf)3f2b24a#4786 deps:@npmcli/map-workspaces@2.0.3b1b6948#4808 deps:libnpmexec@4.0.54a46a27#4777 fix read mixed local/registry pkg (@ruyadorno)9f57404#4743 deps:npm-registry-fetch@13.1.1532883f#4786 deps:cacache@16.0.64d1398e#4786 deps:npm-profile@6.0.35e31322#4786 deps:npmlog@6.0.24eb2ccb#4786 deps:read-package-json@5.0.1aeb54e4#4786 deps:glob@8.0.1252b2b1#4786 deps:npm-packlist@5.0.2c51e553#4786 deps:semver@7.3.713299ee#4786 deps:lru-cache@7.8.10f2da5d#4786 deps:cli-table3@​0.6.20ee57f1#4805 deps:libnpmpublish@6.0.48a633a4#4806 deps:libnpmversion@3.0.4v8.7.0Compare Source
Features
6611e91#4723 feat(config): add more npm/node information to config ls (@lukekarrys)c057b90#4740 feat(config): warn on deprecated configs (@lukekarrys)Bug Fixes
2829cb2#4658 fix: update readme badges (@lukekarrys)e3da5df#4667 fix: replace deprecated String.prototype.substr() (@CommanderRoot)2a26e5e#4645 fix: remove dedupe --save (@wraithgar)47438ff#4645 fix: do not export npm_config_include_workspace_root (@wraithgar)840c338#4678 fix(run-script): don't cascade if-present config (@ruyadorno)4d676e3#4709 fix(arborist): when reloading an edge, also refresh overrides (@nlf)3f7fe17#4659 fix: skip update notifier file if not requested (@lukekarrys)5ba7f0c#4726 fix: show more information during publish dry-run (@lukekarrys)aa4a4da#4735 fix(arborist): dont skip adding advisories to audit based on name/range (@lukekarrys)0cd852f#4741 fix: mitigate doctor test race condition (@wraithgar)ba8b2a7#4744 fix(ls): make--omitfilternpm ls(@lukekarrys)Documentation
85b3c48#4666 docs(ci): add note that configuration must be consistent between install and ci (@nlf)44108f7#4670 docs: fix npm-uninstall typo (@JSKitty)Dependencies
aaf86f6#4674 deps:@npmcli/metavuln-calculator@3.1.04a9a705#4691 deps:@npmcli/package-json@2.0.01a90b9e#4691 deps:treeverse@2.0.0f86f1af#4691 deps:@npmcli/disparity-colors@2.0.03a76dff#4691 deps:make-fetch-happen@10.1.20230428#4691 deps:@npmcli/config@4.0.282dc75f#4691 deps:npm-pick-manifest@7.0.1ad99360#4691 deps:npm-install-checks@5.0.079fc706#4691 deps:bin-links@3.0.11f2fb1e#4691 deps:@npmcli/git@3.0.10f23c33#4691 deps:@npmcli/run-script@3.0.2485753d#4691 deps:cacache@16.0.4e9b25cd#4691 deps:@npmcli/move-file@2.0.00e87cac#4691 deps:@npmcli/node-gyp@2.0.0b632746#4691 deps:@npmcli/promise-spawn@3.0.0b1863bf#4691 deps:pacote@13.1.1a2781a3#4691 deps:ssri@9.0.05172e03#4691 deps:ini@3.0.071296d5#4691 deps:npm-package-arg@9.0.269d8343#4691 deps:graceful-fs@4.2.10c44c2b0#4691 deps:lru-cache@7.7.338029ed#4691 deps:dezalgo@1.0.4e57353c#4691 deps:semver@7.3.61b30c72#4691 deps:minimatch@5.0.1c70232c#4706 deps:@npmcli/arborist@5.0.5baff482#4705 deps:libnpmdiff@4.0.3dda8a97#4704 deps:libnpmorg@4.0.38914864#4703 deps:libnpmaccess@6.0.33516f61#4702 deps:libnpmfund@3.0.2ecd22b0#4701 deps:libnpmversion@3.0.27ed9faf#4700 deps:libnpmhook@8.0.3df92e23#4699 deps:libnpmexec@4.0.35074adc#4698 deps:libnpmsearch@5.0.335e5100#4697 deps:libnpmteam@4.0.386f5b27#4696 deps:libnpmpack@4.0.31617bce#4695 deps:libnpmpublish@6.0.3e33aa0f#4714 deps: remove stringify-package98377d1#4740 deps:@npmcli/config@4.1.0605ccef#4728 deps: remove ansistylesc22fb1e#4728 deps: remove ansicolors970244c#4734 deps:libnpmversion@3.0.342dc0b0#4733 deps:@npmcli/arborist@5.0.6v8.6.0Compare Source
Features
723a0918a#4588 feat(version): reify on workspace version change (@ruyadorno)cc6c09431#4594 feat: add logs-dir config to set custom logging location (@lukekarrys)Bug Fixes
98bfd9a8cfix: remove always true condition (#4590) (@XhmikosR)81afa5a88#4601 fix(unpublish): properly apply publishConfig (@wraithgar)716a07fde#4607 fix: 100% coverage in tests (@wraithgar)6f9cb490e#4614 fix(arborist): handle link nodes in old lockfiles correctly (@nlf)18b8b9435#4617 fix(arborist): make sure resolveParent exists before checking props (@nlf)bd96ae407#4599 fix(arborist): identify and repair invalid nodes in the virtual tree (@nlf)99d884542#4599 fix: make sure we loadOverrides on the root node in loadVirtual() (@nlf)45dd8b861#4609 fix: move shellout logic into commands (@wraithgar)a64acc0bf#4609 fix: really load all commands in tests, add description to birthday (@wraithgar)d8dcc02cf#4609 fix: consolidate command alias code (@wraithgar)f76d4f2f6#4609 fix: consolidate is-windows code (@wraithgar)57d8f75eb#4609 fix: consolidate node version support logic (@wraithgar)0a957f5e2#4609 fix: consolidate path delimiter logic (@wraithgar)738a40445#4609 fix: bump knownBroken to <12.5.0 (@wraithgar)8b65bfd5d#4629 fix: return otplease fn results (@wraithgar)d8d374d23#4632 fix: consolidate split-package-names (@wraithgar)cc0a2ec99#4611 fix: work better with system manpages (#4610) (@d0sboots)668ec7f33#4644 fix: only call npmlog progress methods if explicitly requested (@lukekarrys)Documentation
ff1367f01#4641 docs: recommend prepare over prepublish (@verhovsky)Dependencies
6df061ec2#4594 deps:npm-registry-fetch@13.1.06dd1139c9#4594 deps:cacache@16.0.3feb4446d5#4616 deps:make-fetch-happen@10.1.0c33b53311#4613 deps:minipass-fetch@2.1.06a4c8ff89#4606 deps:npm-audit-report@3.0.06e0a131d2#4627 deps:debug@4.3.40f1cd60a1#4627 deps:proc-log@2.0.1da377eed5#4627 deps:parse-conflict-json@2.0.2726a8a07a#4627 deps:gauge@4.0.4aac01b89c#4628 deps:@npmcli/template-oss@3.2.152dfaf239#4630 deps:make-fetch-happen@10.1.19778a5387#4635 deps:init-package-json@3.0.286eff5dcc#4635 deps:npm-package-arg@9.0.25b4cbb217#4635 deps:validate-npm-package-name@4.0.0a59fd2cb8#4639 deps:@npmcli/template-oss@3.2.2679e569d5#4655 deps:@npmcli/arborist@5.0.4v8.5.5Compare Source
Bug Fixes
0e7511d14#4261 fix(arborist): _findMissingEdges missing dependency due to inconsistent path separators (@salvadorj)c83069436#4547 fix: omit bots from authors (@wraithgar)f66da2ed8#4565 fix(owner): bypass cache when fetching packument (@wraithgar)f0c6e86ca#4572 fix: remove name from unpublished message (@wraithgar)f7e58fa74#4572 fix: remove "bug the author" message from package 404 (@wraithgar)5471ff5fe#4573 fix: add isntall alias to install (@wraithgar)84d19210e#4576 fix: properly shownpm view ./directory(@wraithgar)e9a2981f5#4578 fix(arborist): save workspace version (@ruyadorno)Documentation
a30405258#4580 docs: add foreground-scripts and ignore-scripts to commands (@wraithgar)2361a68e1#4582 docs: add isntall alias to install command (@wraithgar)8ff1dfaae#4575 docs: explain that linked deps neednpm installran in them (@wraithgar)ddbb505ec#4574 docs: explain that git-tag-version=false does not commit (@wraithgar)7c878b978#4584 docs: fix unpublish docs to auto generate usage (@wraithgar)Dependencies
fcc6acfa8#4562 deps:@npmcli/metavuln-calculator@3.0.16d3145014#4562 deps:pacote@13.0.4f6b771aab#4562 deps:make-fetch-happen@10.0.6e26548fb1#4562 deps:cacache@16.0.0915dda7ab#4562 deps:init-package-json@3.0.1f2ec2ef1f#4562 deps:read-package-json@5.0.0340fa51f4#4562 deps:pacote@13.0.59555a5f1d#4562 deps:npm-package-arg@9.0.1b2a494283#4562 deps:normalize-package-data@4.0.01cb88f4b3#4562 deps:hosted-git-info@5.0.0f95396a03#4562 deps:cacache@16.0.1aec2bfecc#4585 deps:cacache@16.0.2ed8ab63e4deps:libnpmpack@4.0.20b73bfa82deps:libnpmteam@4.0.2475d59b36deps:libnpmaccess@6.0.27201c7395deps:libnpmsearch@5.0.2f5df358c3deps:libnpmorg@4.0.2472e7dd7adeps:libnpmhook@8.0.2c901d7290deps:libnpmpublish@6.0.2aad53327fdeps:@npmcli/arborist@5.0.3b40136bcadeps:libnpmdiff@4.0.25d91201d1deps:libnpmexec@4.0.2v8.5.4Compare Source
Bug Fixes
fbdb43138#4529
fix(rebuild): don't run lifecycle scripts twice on linked deps
(@wraithgar)
1c182e11d#4495
fix(doctor): don't retry ping
(@wraithgar)
55ab38c53#4495
fix(doctor): allow for missing local bin and
node_modules(@wraithgar)
5c06a33e6#4528
fix: clean up owner command and otplease
(@wraithgar)
Documentation
2485064da#4524
docs: fix typo in configuring-npm/package-json.md
(@dlcmh)
91f03ee61#4510
docs: standardize changelog heading
(@wraithgar)
Dependencies
377f55e0e#4530
deps:
make-fetch-happen@10.0.540b7fbf67#4531
deps:
read-package-json@4.1.2d9dc70ce4#4545
deps:
map-workspaces@2.0.2EDUPLICATEWORKSPACE70fcfb46b](https://togithub.com/npm/cli/commit/70fcfb46bebc777e0ef6b36Configuration
📅 Schedule: Branch creation - "on the 1st through 7th day of the month" in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.