[Snyk] Upgrade npm from 6.10.1 to 6.10.3 #104

snyk-bot · 2019-08-16T00:52:04Z

Snyk have raised this PR to upgrade npm from 6.10.1 to 6.10.3.

The recommended version is 6 minor versions ahead of your current version.
The recommended version was released 9 days ago, on 2019-08-06.

Release notes

6.10.3 - 2019-08-06
v6.10.3 (2019-08-06):

BUGFIXES
- 27cccfbda #223 vulns → vulnerabilities in npm audit output (@sapegin)
- d5e865eb7 #222 #226 install, doctor: don't crash if registry unset (@dmitrydvorkin, @isaacs)
- 5b3890226 #227 npm.community#9167 Handle unhandledRejections, tell user what to do when encountering an EACCES error in the cache. (@isaacs)
DEPENDENCIES
- 77516df6e licensee@7.0.3 (@isaacs)
- ceb993590 query-string@6.8.2 (@isaacs)
- 4050b9189 hosted-git-info@2.8.2
  - #46 #43 #47 #44 Add support for GitLab subgroups (@mterrel, @isaacs, @ybiquitous)
  - 3b1d629 #48 fix http protocol using sshurl by default (@fengmk2)
  - 5d4a8d7 ignore noCommittish on tarball url generation (@isaacs)
  - 1692435 use gist tarball url that works for anonymous gists (@isaacs)
  - d5cf830 Do not allow invalid gist urls (@isaacs)
  - e518222 Use LRU cache to prevent unbounded memory consumption (@iarna)
6.10.2 - 2019-07-23
v6.10.2 (2019-07-23):

tl;dr - Fixes several issues with the cache when npm is run as sudo on Unix systems.

TESTING
- 2a78b96f8 check test cache for root-owned files (@isaacs)
- 108646ebc run sudo tests on Travis-CI (@isaacs)
- cf984e946 set --no-esm tap flag (@isaacs)
- 8e0a3100d add script to run tests and leave fixtures for inspection and debugging (@isaacs)
BUGFIXES
- 25f4f73f6 add a util for writing arbitrary files to cache This prevents metrics timing and debug logs from becoming root-owned. (@isaacs)
- 2c61ce65d infer cache owner from parent dir in correct-mkdir util (@isaacs)
- 235e5d6df ensure correct owner on cached all-packages metadata (@isaacs)
- e2d377bb6 npm.community#8540 audit: report server error on failure (@isaacs)
- 52576a39e #216 npm.community#5385 npm.community#6076 Fix npm ci with file: dependencies. Partially reverts #40/#86, recording dependencies of linked deps in order for npm ci to work. (@jfirebaugh)
DEPENDENCIES
- 0fefdee13 cacache@12.0.2 (@isaacs)
  - infer uid/gid instead of accepting as options, preventing the overwhelming majority of cases where root-owned files end up in the cache folder. (ac84d14) (@isaacs) (#1)
  - i18n: add another error message (676cb32) (@zkat)
- e1d87a392 pacote@9.5.4 (@isaacs)
  - git: ensure stream failures are reported (7f07b5d) #1 (@lddubeau)
- 3f035bf09 infer-owner@1.0.4 (@isaacs)
- ba3283112 npm-registry-fetch@4.0.0 (@isaacs)
- ee90c334d libnpm@3.0.1 (@isaacs)
- 1e480c384 libnpmaccess@3.0.2 (@isaacs)
- 7662ee850 libnpmhook@5.0.3 (@isaacs)
- 1357fadc6 libnpmorg@1.0.1 (@isaacs)
- a621b5cb6 libnpmsearch@2.0.2 (@isaacs)
- 560cd31dd libnpmteam@1.0.2 (@isaacs)
- de7ae0867 npm-profile@4.0.2 (@isaacs)
- e95da463c libnpm@3.0.1 (@isaacs)
- 554b641d4 npm-registry-fetch@4.0.0 (@isaacs)
- 06772f34a node-gyp@5.0.3 (@isaacs)
- 85358db80 npm-lifecycle@3.1.2 (@isaacs)
  - 051cf20 #26 fix switches for alternative shells on Windows (@gucong3000)
  - 3aaf954 #25 set only one PATH env variable for child process on Windows (@zkochan)
  - ea18ed2 #36 #11 #18 remove procInterrupt listener on SIGINT in procError (@mattshin)
  - 5523951 #29 #30 Use platform specific path casing if present (@mattezell)
6.10.2-next.3 - 2019-07-22
6.10.2-next.3
6.10.2-next.2 - 2019-07-21
v6.10.2-next.2
6.10.2-next.1 - 2019-07-17
6.10.2-next.1
6.10.2-next.0 - 2019-07-16
v6.10.2-next.0
6.10.1 - 2019-07-11
BUGFIXES
- 3cbd57712 fix(git): strip GIT environs when running git (@isaacs)
- a81a8c4c4 #206 improve isOnly(Dev,Optional) (@larsgw)
- 172f9aca6 #179 fix-xmas-underline (@raywu0123)
- f52673fc7 #212 build: use /usr/bin/env to load bash (@rsmarples)
DEPENDENCIES
- ef4445ad3 #208 node-gyp@5.0.2 (@irega)
- c0d611356 npm-lifecycle@3.0.0 (@isaacs)
- 7716ba972 libcipm@4.0.0 (@isaacs)
- 42d22e837 libnpm@3.0.0 (@isaacs)
- a2ea7f9ff semver@5.7.0 (@isaacs)
- 429226a5e lru-cache@5.1.1 (@isaacs)
- 175670ea6 npm-registry-fetch@3.9.1: (@isaacs)
- 0d0517f7f call-limit@1.1.1 (@isaacs)
- 741400429 glob@7.1.4 (@isaacs)
- bddd60e30 inherits@2.0.4 (@isaacs)
- 4acf03fd1 libnpmsearch@2.0.1 (@isaacs)
- c2bd17291 marked@0.6.3 (@isaacs)
- 7f0221bb1 marked-man@0.6.0 (@isaacs)
- f458fe7dd npm-lifecycle@2.1.1 (@isaacs)
- 009752978 node-gyp@4.0.0 (@isaacs)
- 0fa2bb438 query-string@6.8.1 (@isaacs)
- b86450929 tar-stream@2.1.0 (@isaacs)
- 25db00fe9 worker-farm@1.7.0 (@isaacs)
- 8dfbe8610 readable-stream@3.4.0 (@isaacs)
- f6164d5dd isaacs/chownr#21 isaacs/chownr#20 npm.community#7901 npm.community#8203 chownr@1.1.2 This fixes an EISDIR error from cacache on Darwin in Node versions prior to 10.6. (@isaacs)