TASK: Update dependency @semantic-release/npm to v12

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@semantic-release/npm	5.1.13 -> 12.0.1

---

Release Notes

semantic-release/npm (@​semantic-release/npm)

v12.0.1

Compare Source

v12.0.0

Compare Source

Features

• exports: defined exports to point at ./index.js (9e193c2)
• node-versions: dropped support for node v18 and v19 (2df962b)

BREAKING CHANGES

• exports: exports has been defined, which prevents access to private apis (which arent
  intended for consumption anyway)
• node-versions: node v18 and v19 are no longer supported

v11.0.3

Compare Source

Bug Fixes

• deps: raised the minimum accepted range of npm to v10.5.0 (#​759) (a0313f8), closes semantic-release/semantic-release#3202

even though our existing range allowed anyone to update as soon as the new npm version was available, this will encourage being on a version that does not report the ip vulnerability a bit more forcefully

v11.0.2

Compare Source

Bug Fixes

• deps: update dependency npm to v10.2.5 (42b5dec)

v11.0.1

Compare Source

Bug Fixes

• deps: update dependency read-pkg to v9 (#​703) (6e84013)

v11.0.0

Compare Source

Bug Fixes

• deps: update dependency npm to v10 (819f257)

Features

• node-versions: raised the minimum required node version to v18.17 and dropped v19 support (6413130)

BREAKING CHANGES

• node-versions: node v18.17 is now the minimum required version and support for v19 has been dropped

v10.0.6

Compare Source

Bug Fixes

• deps: update dependency aggregate-error to v5 (#​676) (f2bc9e7)

v10.0.5

Compare Source

Bug Fixes

• deps: update dependency execa to v8 (#​659) (502d5ba)

v10.0.4

Compare Source

Bug Fixes

• deps: update dependency @​semantic-release/error to v4 (#​628) (53a1012)

v10.0.3

Compare Source

Bug Fixes

• deps: update dependency read-pkg to v8 (#​602) (aaddc5c)

v10.0.2

Compare Source

Bug Fixes

• deps: update dependency fs-extra to v11.1.1 (#​591) (31e0e27)

v10.0.1

Compare Source

Bug Fixes

• deps: update dependency execa to v7 (#​575) (4c11706)

v10.0.0

Compare Source

Bug Fixes

• aggregate-error: upgraded to the latest version (7285e05)
• deps: upgraded npm to v9 (2a79f80)
• execa: upgraded to the latest version (7c74660)
• normalize-url: upgraded to the latest version (b55bb01)
• remove support for legacy auth (51ab3c8)
• tempy: upgraded to the latest version of tempy (f1992a5)

Code Refactoring

• esm: converted the package to esm (2d8ff15)

Features

• node-versions: dropped support for node versions below v18 (aff3574)
• semantic-release-peer: raised the minimum peer requirement to the first version that supports loading esm plugins (22e70ad)

BREAKING CHANGES

• deps: the direct dependency on npm has been upgraded to v9. details of breaking changes
  can be found at https://github.com/npm/cli/releases/tag/v9.0.0
• semantic-release-peer: the required version of semantic-release has been
  raised to v20.1.0 in order to support loading of ESM plugins
• aggregate-error: due to the aggregate-error upgrade, thrown errors are no longer iterable, but instead list the errors under an errors property
• legacy authentication using NPM_USERNAME and NPM_PASSWORD is no longer supported. Use NPM_TOKEN instead.
• node-versions: node v18 is now the minimum required node version
• esm: @semantic-release/npm is now a native ES Module. It
  has named exports for each plugin hook (verifyConditions, prepare,
  publish, addChannel)

v9.0.2

Compare Source

Bug Fixes

• deps: update dependency fs-extra to v11 (7157d76)
• deps: update dependency npm to v9 (28265ec)
• deps: update dependency registry-auth-token to v5 (187671f)
• revert): "fix(deps: update dependency npm to v9" (#​561) (c28a848)

v9.0.1

Compare Source

Bug Fixes

• add missed preferLocal option for execa call (#​458) (c817a88)

v9.0.0

Compare Source

Bug Fixes

• add preferLocal option to allow execa to use local npm version (#​445) (002439e)
• updated the peer requirement for semantic-release to the new stable version (575a5a4)
• updated the peer requirement on semantic-release to a version matching the engines definition of this package (2d1f5f2)
• upgrade npm dependency to v8 (a12d6e5)

BREAKING CHANGES

• the minimum required peer of semantic-release has been raised to match the engines.node requirements of this package
• npm v8 dropped support for node v15, so it is no longer supported in this plugin. this should be low impact since node v15 is already EOL

Co-authored-by: Matt Travi programmer@travi.org

v8.0.3

Compare Source

Reverts

• Revert "chore(deps): update dependency p-retry to v5 (#​424)" (#​425) (df11027), closes #​424 #​425

v8.0.2

Compare Source

Bug Fixes

• README: correct docs on authentication (#​413) (f089d9d)

v8.0.1

Compare Source

Bug Fixes

• deps: update dependency @​semantic-release/error to v3 (#​402) (60832fb)

v8.0.0

Compare Source

Features

• node-version: raised the minimum required version to v14.17 (#​387) (#​399) (f65e49d)

BREAKING CHANGES

• node-version: the minimum required version of node is now v14.17

Co-authored-by: Matt Travi programmer@travi.org

v7.1.3

Compare Source

Bug Fixes

• use NPM_CONFIG_USERCONFIG in get-registry to match auth (#​362) (13200ca)

v7.1.2

Compare Source

Bug Fixes

• deps: update dependency fs-extra to v10 (80fde1e)

v7.1.1

Compare Source

Bug Fixes

• deps: update dependency normalize-url to v6 (97ca719)

v7.1.0

Compare Source

Features

• use npm v7 (#​304) (a15c017)

v7.0.10

Compare Source

Bug Fixes

• improve error message text for npm tokens (#​323) (88e5862)

v7.0.9

Compare Source

Bug Fixes

• deps: update dependency execa to v5 (#​299) (d4e5bb2)

v7.0.8

Compare Source

Bug Fixes

• deps: update dependency tempy to v1 (#​289) (5a1dbb8)

v7.0.7

Compare Source

Bug Fixes

• deps: update dependency tempy to ^0.7.0 (#​287) (dd25707)

v7.0.6

Compare Source

Bug Fixes

• update required node and npm version (#​273) (493fbad)

v7.0.5

Compare Source

Bug Fixes

• package: update fs-extra to version 9.0.0 (67a3109)

v7.0.4

Compare Source

Bug Fixes

• package: update tempy to version 0.5.0 (6ffff19)

v7.0.3

Compare Source

Bug Fixes

• package: update tempy to version 0.4.0 (4874bf6)

v7.0.2

Compare Source

Bug Fixes

• package: update normalize-url to version 5.0.0 (a554580)

v7.0.1

Compare Source

Bug Fixes

• package: update semver to version 7.1.2 (a58b30b)

v7.0.0

Compare Source

chore

• require Node.js >=10.18 (8140f0f)

BREAKING CHANGES

• Require Node.js >= 10.18

v6.0.0

Compare Source

Bug Fixes

• package: update execa to version 4.0.0 (d97dee5)
• package: update semver to version 6.3.0 (c515862)
• add dist-tag to publish and add-channel logs (db6ccd2)
• use correct peerDependencies for semantic-release (8b47e7b)
• package: pin npm to 6.5.0 (ddab7b7)
• package: update aggregate-error to version 2.0.0 (df53298)
• package: update aggregate-error to version 3.0.0 (3e0d5d0)
• package: update execa to version 3.0.0 (b1780c1)
• package: update npm to version 6.8.0 (2b0492e)
• package: update read-pkg to version 5.0.0 (877ce40)
• package: update vulnerable dependencies (#​185) (a96c6da)
• skip tarball move if config is cwd (a224497)
• package: update execa to version 2.0.2 (d2932ba)
• package: update registry-auth-token to version 4.0.0 (2868b2c)
• add dist-tag to publish log (2de37a1)
• Honor NPM_CONFIG_USERCONFIG setting (932ea5e)
• package: update fs-extra to version 8.0.0 (bf603e5)
• return false if the npm publish is skipped (4a41228)
• return false in addChannel if package is not published on npm (5434bab)

Features

• add addChannel plugin step (fb96126)
• require Node.js >=10.13 (6426458)
• require Node.js >=8.15 (4caf538)
• support nextRelease.channel property in publish step (b8deba7)

BREAKING CHANGES

• Require Node.js >= 10.13
• Require Node.js => 8.15

v5.3.5

Compare Source

Bug Fixes

• include version in npm release URL (827fcb3)

v5.3.4

Compare Source

Bug Fixes

• log the output of npm whoami command (cd1ecaa)

v5.3.3

Compare Source

Bug Fixes

• avoid adding unnecessary new line to .npmrc (6189ee7)
• log the path of existing .npmrc files (a0120d2)

v5.3.2

Compare Source

Bug Fixes

• preserve config in both home and local .npmrc (de677ea)

v5.3.1

Compare Source

Bug Fixes

• package: update execa to version 3.2.0 (7db019f)
• require Node.js >=8.16 (fce3a67)

v5.3.0

Compare Source

Features

• preserve local .npmrc file (8726eff)

v5.2.0

Compare Source

Features

• allow to configure the registry via NPM_CONFIG_REGISTRY (0126704)

v5.1.15

Compare Source

Bug Fixes

• package: update vulnerable dependencies (#​185) (c663276)

v5.1.14

Compare Source

Bug Fixes

• package: update execa to version 2.0.2 (2a45e25)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.