CHANGELOG.md

Changelog

6.1.5 (2022-12-07)

Bug Fixes

• 83fb125 #5923 audit package mismatch in special case (@fritzy)

Dependencies

• 372d158 #5935 minimatch@5.1.1 (#5935)
• 0a3fe00 #5933 minipass@4.0.0
• cf0a174 ssri@10.0.1
• 3da9a1a pacote@15.0.7
• fee9b66 npm-registry-fetch@14.0.3
• e940917 cacache@17.0.3
• 875bd56 npm-package-arg@10.1.0

6.1.4 (2022-11-30)

Bug Fixes

• 80c6c4a #5907 do not reset hidden lockfile data before saving (#5907) (@nlf)

6.1.3 (2022-11-16)

Bug Fixes

• 3f13818 #5859 refactor / inline single use code (#5859) (@wraithgar)

6.1.2 (2022-11-09)

Dependencies

• 335c7e4 #5813 cacache@17.0.2
• 878ddfb @npmcli/fs@3.1.0

6.1.1 (2022-11-02)

Bug Fixes

• 1f5382d #5789 don't set stdioString for any spawn/run-script calls (@lukekarrys)
• 0c5834e #5758 use hosted-git-info to parse registry urls (#5758) (@lukekarrys)

Dependencies

• b89c19e #5795 cli-table3@0.6.3
• 66f9bcd nopt@7.0.0
• abfb28b @npmcli/run-script@6.0.0

6.1.0 (2022-10-26)

Features

• 3dd8d68 #5751 sort and quote yarn lock keys according to yarn rules (#5751) (@wraithgar, @shalvah)

Dependencies

• de6618e #5757 @npmcli/promise-spawn@5.0.0 (#5757)

6.0.0 (2022-10-19)

Features

• 586e78d empty commit to trigger all workspace releases (@lukekarrys)

6.0.0-pre.5 (2022-10-19)

⚠️ BREAKING CHANGES

• deprecate boolean install flags in favor of --install-strategy
  • deprecate --global-style, --global now sets --install-strategy=shallow
  • deprecate --legacy-bundling, now sets --install-strategy=nested
• this package no longer attempts to change file ownership automatically

Features

• de2d33f add --install-strategy=hoisted|nested|shallow, deprecate --global-style, --legacy-bundling (#5709) (@fritzy)
• 475e9b6 #5703 do not alter file ownership (@nlf)

Bug Fixes

• 1afe5ba account for new npm-package-arg behavior (@wraithgar)

Dependencies

• 88137a3 npmlog@7.0.1
• 2008ea6 npm-package-arg@10.0.0, pacote@15.0.2
• aa01072 #5707 update the following dependencies

6.0.0-pre.4 (2022-10-05)

Features

• 9609e9e #5605 use v3 lockfiles by default (#5605) (@fritzy)

Dependencies

• 5344d2c #5644 pacote@14.0.0
• 6a43b31 @npmcli/metavuln-calculator@4.0.0

6.0.0-pre.3 (2022-09-30)

⚠️ BREAKING CHANGES

• npm pack now follows a strict order of operations when applying ignore rules. If a files array is present in the package.json, then rules in .gitignore and .npmignore files from the root will be ignored.

Features

• 3ae796d implement new npm-packlist behavior (@lukekarrys)

6.0.0-pre.2 (2022-09-23)

Features

• ebf167b add :outdated pseudo selector (@nlf)

Documentation

• 8402fd8 #5547 add :outdated pseudo selector to docs (@nlf)

Dependencies

• d030f10 @npmcli/query@2.0.0

6.0.0-pre.1 (2022-09-14)

Bug Fixes

• f3b0c43 keep saveTypes separate for each add (@wraithgar)

6.0.0-pre.0 (2022-09-08)

⚠ BREAKING CHANGES

• workspaces: all workspace packages are now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0

Features

• e95017a #5485 feat(workspaces): update supported node engines in package.json (@lukekarrys)
• 09c46e8 #5324 feat(arborist): allow for selectors and function names with :semver pseudo selector (@nlf)

Bug Fixes

• fe926ed #5484 fix: don't mark workspaces as invalid if installing links (@wraithgar)
• 548e70e #5376 fix: link.target setter (@wraithgar)
• 2db6c08 #5376 fix: loadActual cleanup (@wraithgar)

Documentation

• 285b39f #5324 docs: add documentation for expanded :semver selector (@nlf)

5.6.1 (2022-08-31)

Bug Fixes

• 1e84102 #5350 fix: create links relative to the target (@wraithgar)
• ea5e3a3 #5350 fix: inline single-use functions (@wraithgar)
• 645c680 #5329 fix: update index.js spelling error in comment (@KevinBrother)
• bd2ae5d #5323 fix: linting (@wraithgar)

Dependencies

• 1286f03 #5381 deps: unique-filename@2.0.1
• 2c4e387 #5381 deps: hosted-git-info@5.1.0
• b12ac01 #5381 deps: npm-pick-manifest@7.0.2
• 7fbf6f7 #5381 deps: bin-links@3.0.3
• 26d2e55 #5381 deps: @npmcli/query@1.2.0
• a79ee00 #5381 deps: cacache@16.1.3
• 8ab12dc #5323 deps: @npmcli/eslint-config@3.1.0

5.6.0 (2022-08-17)

Features

• arborist: add :overridden pseudo selector (d221f72)
• arborist: add overridden getter to Node class (e6d4304)
• query: support :overridden pseudo selector (0d4ed0f)

5.5.0 (2022-08-10)

Features

• arborist: add option to forcibly skip loading a virtual tree (96b6781)

Bug Fixes

• query: tell arborist to load an actual tree, not a virtual one (9078e27)

Dependencies

• nopt@6.0.0 (7f31b85)

5.4.0 (2022-08-03)

Features

• add --replace-registry-host=<npmjs|always|never> (#4860) (703dbbf)
• add --replace-registry-host=<npmjs|always|never>| (703dbbf)
• add npm query cmd (#5000) (3c024ac)

Bug Fixes

• arborist: fix bare attribute queries (#5248) (8233fca)
• arborist: pass the edge to fromPath in order to determine correct path (#5233) (050284d)
• arborist: use the sourceReference root rather than the node root for overrides (#5227) (47cc95d), closes #4395

Dependencies

• @npmcli/query@1.1.1 (#5247) (d55007d)

5.3.1 (2022-07-27)

Bug Fixes

• allow hash character in paths (#5122) (62b95a0)

5.3.0 (2022-07-11)

Features

• arborist: add support for dependencies script (#5094) (e9b4214)

5.2.3 (2022-06-23)

Dependencies

• @npmcli/run-script@4.1.3 (#5064) (f59a114)

5.2.2 (2022-06-22)

Bug Fixes

• Add space to SemVer log message (#5042) (e03009f)

Dependencies

• @npmcli/run-script@4.1.0 (2c06cee)
• pacote@13.6.1 (2e50cb8)

5.2.1 (2022-06-01)

Bug Fixes

• arborist: use rawSpec for bundled and shrinkwrapped deps (#4963) (646b6b5)

5.2.0 (2022-05-10)

Features

• add flag --omit-lockfile-registry-resolved (#4874) (bfb8bcc)

Bug Fixes

• arborist: link deps lifecycle scripts (#4875) (5a50762)

5.1.1 (2022-04-26)

Dependencies

• @npmcli/map-workspaces@2.0.3 (3f2b24a)
• cacache@16.0.6 (532883f)
• npmlog@6.0.2 (5e31322)
• semver@7.3.7 (c51e553)

5.1.0 (2022-04-19)

Features

• arborist: add support for installLinks (0ebadf5)

Bug Fixes

• arborist: when replacing a Link with a Node, make sure to remove the Link target from the root (3d96494)

5.0.6 (2022-04-13)

Bug Fixes

• arborist: dont skip adding advisories to audit based on name/range (aa4a4da), closes #4681
• arborist: when reloading an edge, also refresh overrides (4d676e3)

5.0.5 (2022-04-06)

Bug Fixes

• replace deprecated String.prototype.substr() (#4667) (e3da5df)
• update readme badges (#4658) (2829cb2)

Dependencies

• @npmcli/arborist@5.0.4 (679e569)
• @npmcli/move-file@2.0.0 (e9b25cd)
• @npmcli/node-gyp@2.0.0 (0e87cac)
• @npmcli/package-json@2.0.0 (4a9a705)
• npm-install-checks@5.0.0 (ad99360)
• ssri@9.0.0 (a2781a3)
• treeverse@2.0.0 (1a90b9e)

5.0.4 (2022-03-31)

Bug Fixes

• arborist: handle link nodes in old lockfiles correctly (6f9cb49)
• arborist: identify and repair invalid nodes in the virtual tree (bd96ae4)
• arborist: make sure resolveParent exists before checking props (18b8b94)
• make sure we loadOverrides on the root node in loadVirtual() (99d8845)
• only call npmlog progress methods if explicitly requested (#4644) (668ec7f), closes #3314

5.0.3 (2022-03-17)

Bug Fixes

• arborist: _findMissingEdges missing dependency due to inconsistent path separators (#4261) (0e7511d)
• arborist: save workspace version (#4578) (e9a2981)

Dependencies

• @npmcli/metavuln-calculator@3.0.1 (fcc6acf)
• cacache@16.0.0 (e26548f)
• pacote@13.0.5 (340fa51)

5.0.2 (2022-03-10)

Bug Fixes

• rebuild: don't run lifecycle scripts twice on linked deps (#4529) (fbdb431)

Documentation

• standardize changelog heading (#4510) (91f03ee)

5.0.1 (2022-03-08)

Bug Fixes

• set proper workspace repo urls in package.json (#4476) (0cfc155)

2.0.0

• BREAKING CHANGE: root node is now included in inventory
• All parent/target/fsParent/etc. references set in root setter, rather than the hodgepodge of setters that existed before.
• treeCheck function added, to enforce strict correctness guarantees when ARBORIST_DEBUG=1 in the environment (on by default in Arborist tests).

1.0.0

• Release for npm v7 beta
• Fully functional

0.0.0

• Proof of concept
• Before this, it was read-package-tree