chore(deps): update npm to v10.8.0 #107
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/npm-10.x-lockfile
branch
from
6d4d14e
to
69f2317
Compare
renovate
bot
changed the title
|
🎉 This PR is included in version 8.4.2 🎉 The release is available on: Your semantic-release bot 📦🚀 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.5.0->10.8.0Release Notes
npm/cli (npm)
v10.8.0Compare Source
Features
1e375c1#7442 create exit handler class (#7442) (@lukekarrys)Bug Fixes
d5c3289#7513 refactor: use output buffer and error for more commands (#7513) (@lukekarrys)12f103c#7533 add first param titles to logs where missing (#7533) (@lukekarrys)badeac2#7521 config: use redact on config output (#7521) (@lukekarrys)76aef74#7520 view: refactor exec and execWorkspaces to call same methods (#7520) (@lukekarrys)b54cdb8#7515 refactor: create new error output primitives (#7515) (@lukekarrys)e40454c#7506 view: dont unwrap arrays in json mode (#7506) (@lukekarrys)6f64148require stdout to be a TTY for progress (#7507) (@lukekarrys)db62910#7504 config: be more aggressive about hiding protected values (#7504) (@wraithgar)6d456bb#7497 dont write log file for completion commands (#7497) (@lukekarrys)722c0fa#7463 limit packument cache size based on heap size (@wraithgar)ca1a68d#7474 log ifnpm deprecatedoes not match any version (#7474) (@mbtools)261ea19#7457 run input.start around help and openining urls (@lukekarrys)4ab6cf4#7459 publish: validate dist-tag (#7459) (@reggi)Documentation
b2ce025#7518 suggest correct bin entry (#7518) (@Santoshraj2)bdd2aae#7502 remove obsolete removal using make uninstall (#7502) (@avinal)c3d2819#7496 npm help json/global command on windows (#7496) (@klm-turing, @lukekarrys)268303c#7479 add npm version to every local help output (#7479) (@klm-turing)e39d422#7473 suggest "npm repo" for showing the repo of a package (#7473) (@full-stop)f6fff32#7433 clarify what peerDependenciesMeta does (#7433) (@xuhdev, @wraithgar)Dependencies
1cdc662#7522@tufjs/repo-mock@2.0.1898bcfd#7522@sigstore/protobuf-specs@0.3.2fec3c94#7522path-scurry@1.11.1cb85973#7522glob@10.3.15e189873#7498@sigstore/sign@2.3.1c2b28f9#7498minipass@7.1.19064ffc#7498@sigstore/tuf@2.3.3fd42986#7498@npmcli/fs@3.1.14e53e33#7498semver@7.6.2f078c82#7495glob@10.3.1458f773c#7495path-scurry@1.11.0ea0b07d#7482pacote@18.0.68d161a4#7482semver@7.6.15b2317b#7463 add lru-cache26fefb8#7480promzard@1.0.22146e1f#7480npm-bundled@3.0.1ff6c5d1#7480minipass-fetch@3.0.5419f9b9#7480cmd-shim@6.0.3dade2c8#7480minipass@7.1.018e5312#7480validate-npm-package-name@5.0.1d440011#7480npm-user-validate@2.0.1552113e#7480ignore-walk@6.0.57e15b6d#7480@npmcli/metavuln-calculator@7.1.18b20f8c#7480ssri@10.0.6a9a6dcd#7480pacote@18.0.5e2fdb65#7480npm-pick-manifest@9.0.1310a7a5#7480normalize-package-data@6.0.1e71f541#7480nopt@7.2.118c3b40#7480json-parse-even-better-errors@3.0.24c5bf77#7480init-package-json@6.0.3714e3e1#7480hosted-git-info@7.0.2f94d672#7480cacache@18.0.343331e4#7480bin-links@4.0.48234412#7480@npmcli/promise-spawn@7.0.26dfaebb#7480@npmcli/git@5.0.763ef498#7457npm-registry-fetch@17.0.14cbc2d4#7457npm-profile@10.0.0v10.7.0Compare Source
Features
7e349f4#7432 add spinner (#7432) (@lukekarrys)Bug Fixes
d679ce8#7449 linting: no-unused-vars (@wraithgar)2558283#7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)bc4c342#7448 account for registries with no publisher in search (#7448) (@wraithgar)bcc781a#7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)104fcb5#7438 remove doctor log for each file permission check (#7438) (@lukekarrys)5230647#7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)71cbd91#7421 hide banner for exec and explore (#7421) (@lukekarrys)57ebebf#7418 update repository.url in package.json (#7418) (@wraithgar)Documentation
1674136#7441 correct search help output (#7441) (@wraithgar)Dependencies
80eec03#7453@npmcli/redact@2.0.0a7145d4#7453npm-registry-fetch@17.0.0a785766#7453pacote@18.0.365d76db#7453npm-profile@9.0.2cadc0f0#7449 hoist production copy of sprintf-js2cffdfe#7449lru-cache@10.2.2432efb5#7449make-fetch-happen@13.0.19da5738#7437@npmcli/run-script@8.1.0(#7437)762888a#7429 update dependencies for workspaces (#7429)@npmcli/arborist@7.5.1@npmcli/config@8.3.1libnpmaccess@8.0.5libnpmdiff@6.1.1libnpmexec@8.1.0libnpmfund@5.0.9libnpmhook@10.0.4libnpmorg@6.0.5libnpmpack@7.0.1libnpmpublish@9.0.7libnpmsearch@7.0.4libnpmteam@6.0.4libnpmversion@6.0.1Chores
356c374#7453 fix test fixture for new redact behavior (@wraithgar)2fba4b7#7449 update devDependencies in lockfile (@wraithgar)v10.6.0Compare Source
Features
9123de4#7373 do all ouput over proc-log events (@lukekarrys)9622597#7339 refactor terminal display (#7339) (@lukekarrys)Bug Fixes
0e74ee4#7416 clean up npm object (#7416) (@wraithgar)c060e60#7415 return command and argv from load (@lukekarrys)180b919#7415 remove unused npm.setCmd method (@lukekarrys)0708b3b#7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)7f4e667#7403 redact when displaying non-ascii arguments (@lukekarrys)06202f0#7403 store unref promises for awaiting in tests (@lukekarrys)e5f1948#7403 run update notifier after exec but before waiting (@lukekarrys)f309c1c#7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)43e6194#7403 dont show run script banners in silent (@lukekarrys)694dba9#7403 dont expose as many public properties of timers (@lukekarrys)7ca6d84#7403 use proc-log META for flush and force (@lukekarrys)2538438#7403 dont write timing logs to file unless requested (@lukekarrys)7e04417#7403 rename base-cmd to match other commands (@lukekarrys)fc68547#7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)28019d5#7403 cleanup: move cli specific files to separate dir (@lukekarrys)469f788#7403 cleanup: newlines and whitespace (@lukekarrys)4ab6401#7403 cleanup: dont nest files utils dir (@lukekarrys)78447d7#7399 prefer fs/promises over promisify (#7399) (@lukekarrys)d531f8b#7407 Remove table output from search and tar summary (@wraithgar)c209e98#7401 Remove table output from many commands (@wraithgar)ad7ab8c#7388 perf: lazy loading optimizations (#7388) (@wraithgar)8eae4b3#7385 token: properly await registry request (#7385) (@wraithgar)9216d59#7377 better output colors (#7377) (@wraithgar)6512112#7378 use proc-log for all timers (@lukekarrys)2a80dab#7370 typo innpm accessusage (#7370) (@mbtools)Documentation
dfa4cab#7401 update output examples (@wraithgar)140b9c9#7382 package-json: note that line endings are inferred (#7382) (@ertw)c16dd4e#7367 Document that overrides only work in the rootpackage.json(#7367) (@s100)Dependencies
36adff3#7408pacote@18.0.2486d46c#7408@npmcli/installed-package-contents@2.1.0157d0ae#7408@npmcli/package-json@5.1.0b0ca163#7409 remove @npmcli/disparity-colorsc77f035#7407 remove columnify2ec690d#7401 move cli-table3 to devDependenciesfc6e291#7392proc-log@4.2.0(#7392)38ed048#7378@npmcli/metavuln-calculator@7.1.07678a3d#7378proc-log@4.1.087f6c09#7373@npmcli/metavuln-calculator@7.0.1b8f8b41#7373@npmcli/run-script@8.0.079f79c7#7373proc-log@4.0.09027266#7373pacote@18.0.0ee4b3e0#7373npm-registry-fetch@16.2.10e7789b#7373npm-profile@9.0.1ac98fd3#7373npm-package-arg@11.0.29351570#7373@npmcli/package-json@5.0.3d3a0cfa#7373@npmcli/git@5.0.6@npmcli/arborist@7.5.0@npmcli/config@8.3.0libnpmaccess@8.0.4libnpmdiff@6.1.0libnpmexec@8.0.0libnpmfund@5.0.8libnpmhook@10.0.3libnpmorg@6.0.4libnpmpack@7.0.0libnpmpublish@9.0.6libnpmsearch@7.0.3libnpmteam@6.0.3libnpmversion@6.0.0Chores
3cbc258#7403 test for early version exit (@lukekarrys)08e0c0e#7403 move sigstore json files to fixtures dir (@lukekarrys)ea66e95#7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)9333e9d#7386 reduce windows shim test flakes (#7386) (@lukekarrys)v10.5.2Compare Source
Bug Fixes
ef381b1#7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)3760dd2#7361 perf: do less work loading config (#7361) (@wraithgar)64bcf4c#7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)5a28a29#7352 perf: lazy load workspace dependency (#7352) (@H4ad)5fc0f9d#7347 lazy load validate npm package name on error message (#7347) (@H4ad)c929ed1#7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)70497cb#7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)Documentation
90ba1c9#7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)Dependencies
699a1de#7362@npmcli/map-workspaces@3.0.649fb9b7#7362socks@2.8.3f69052e#7362@npmcli/package-json@5.0.2c18a0ad#7357sigstore@2.3.0fd4153b#7357socks@2.8.2d6b705a#7357postcss-selector-parser@6.0.16248c177#7357hasown@2.0.24af9e86#7357builtins@5.1.07546b56#7357@npmcli/agent@2.2.2d38fd4f#7357spdx-expression-parse@4.0.0913b326#7357is-cidr@5.0.584bbbd4#7357@npmcli/package-json@5.0.1a0f5048#7357@npmcli/git@5.0.5@npmcli/arborist@7.4.2@npmcli/config@8.2.2libnpmdiff@6.0.9libnpmexec@7.0.10libnpmfund@5.0.7libnpmpack@6.0.9Chores
81be28d#7357 dev dependency updates (@wraithgar)v10.5.1Compare Source
Bug Fixes
17d97d2#7334 use @npmcli/redact for log redactions (@lukekarrys)8cab136#7324 ensure maxSockets is respected (#7324) (@lukekarrys)9bffa13#7320 query: properly return :missing nodes (#7320) (@wraithgar)9d4e85f#7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)bdb3c28#7274 added check for dry-run (#7274) (@cod1r)7f1ab88#7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)Documentation
1da5cf0#7198 add link to engines section (#7198) (@uiolee)1114a12#7307 fix incorrect npm audit key response link (#7307) (@davidlj95)9807caf#7304 update audit docs with provenance info (#7304) (@bdehamer)e1ecfa7#7285 Correct capitalization for URL (#7285) (@coliff)Dependencies
87a61fc#7334npm-registry-fetch@16.2.05469614#7327init-package-json@6.0.25469614#7327promzard@1.0.15469614#7327read@3.0.1(#7327)9ccff72#7329tar@6.2.17201a00#7329node-gyp@10.1.06fd94f2#7329minimatch@9.0.4b048592#7329ini@4.1.2c54a84a#7329glob@10.3.126853531#7329cli-table3@​0.6.4c9315cb#7329binary-extensions@2.3.05bb0031#7329@sigstore/tuf@2.3.28cab136#7324agent-base@7.1.1(@lukekarrys)@npmcli/arborist@7.4.1@npmcli/config@8.2.1libnpmaccess@8.0.3libnpmdiff@6.0.8libnpmexec@7.0.9libnpmfund@5.0.6libnpmhook@10.0.2libnpmorg@6.0.3libnpmpack@6.0.8libnpmpublish@9.0.5libnpmsearch@7.0.2libnpmteam@6.0.2Chores
8cab136#7324 add smoke-test for large prod installs (@lukekarrys)0dab381#7258jsdom@24.0.0(#7258) (@wraithgar)af3c48e#7262 test refactor (#7262) (@wraithgar)Configuration
📅 Schedule: Branch creation - "monthly" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.