build: update dependency npm to v10 #27508
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^8.11.0
->^10.0.0
Release Notes
npm/cli (npm)
v10.7.0
Compare Source
Features
7e349f4
#7432 add spinner (#7432) (@lukekarrys)Bug Fixes
d679ce8
#7449 linting: no-unused-vars (@wraithgar)2558283
#7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)bc4c342
#7448 account for registries with no publisher in search (#7448) (@wraithgar)bcc781a
#7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)104fcb5
#7438 remove doctor log for each file permission check (#7438) (@lukekarrys)5230647
#7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)71cbd91
#7421 hide banner for exec and explore (#7421) (@lukekarrys)57ebebf
#7418 update repository.url in package.json (#7418) (@wraithgar)Documentation
1674136
#7441 correct search help output (#7441) (@wraithgar)Dependencies
80eec03
#7453@npmcli/redact@2.0.0
a7145d4
#7453npm-registry-fetch@17.0.0
a785766
#7453pacote@18.0.3
65d76db
#7453npm-profile@9.0.2
cadc0f0
#7449 hoist production copy of sprintf-js2cffdfe
#7449lru-cache@10.2.2
432efb5
#7449make-fetch-happen@13.0.1
9da5738
#7437@npmcli/run-script@8.1.0
(#7437)762888a
#7429 update dependencies for workspaces (#7429)@npmcli/arborist@7.5.1
@npmcli/config@8.3.1
libnpmaccess@8.0.5
libnpmdiff@6.1.1
libnpmexec@8.1.0
libnpmfund@5.0.9
libnpmhook@10.0.4
libnpmorg@6.0.5
libnpmpack@7.0.1
libnpmpublish@9.0.7
libnpmsearch@7.0.4
libnpmteam@6.0.4
libnpmversion@6.0.1
Chores
356c374
#7453 fix test fixture for new redact behavior (@wraithgar)2fba4b7
#7449 update devDependencies in lockfile (@wraithgar)v10.6.0
Compare Source
Features
9123de4
#7373 do all ouput over proc-log events (@lukekarrys)9622597
#7339 refactor terminal display (#7339) (@lukekarrys)Bug Fixes
0e74ee4
#7416 clean up npm object (#7416) (@wraithgar)c060e60
#7415 return command and argv from load (@lukekarrys)180b919
#7415 remove unused npm.setCmd method (@lukekarrys)0708b3b
#7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)7f4e667
#7403 redact when displaying non-ascii arguments (@lukekarrys)06202f0
#7403 store unref promises for awaiting in tests (@lukekarrys)e5f1948
#7403 run update notifier after exec but before waiting (@lukekarrys)f309c1c
#7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)43e6194
#7403 dont show run script banners in silent (@lukekarrys)694dba9
#7403 dont expose as many public properties of timers (@lukekarrys)7ca6d84
#7403 use proc-log META for flush and force (@lukekarrys)2538438
#7403 dont write timing logs to file unless requested (@lukekarrys)7e04417
#7403 rename base-cmd to match other commands (@lukekarrys)fc68547
#7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)28019d5
#7403 cleanup: move cli specific files to separate dir (@lukekarrys)469f788
#7403 cleanup: newlines and whitespace (@lukekarrys)4ab6401
#7403 cleanup: dont nest files utils dir (@lukekarrys)78447d7
#7399 prefer fs/promises over promisify (#7399) (@lukekarrys)d531f8b
#7407 Remove table output from search and tar summary (@wraithgar)c209e98
#7401 Remove table output from many commands (@wraithgar)ad7ab8c
#7388 perf: lazy loading optimizations (#7388) (@wraithgar)8eae4b3
#7385 token: properly await registry request (#7385) (@wraithgar)9216d59
#7377 better output colors (#7377) (@wraithgar)6512112
#7378 use proc-log for all timers (@lukekarrys)2a80dab
#7370 typo innpm access
usage (#7370) (@mbtools)Documentation
dfa4cab
#7401 update output examples (@wraithgar)140b9c9
#7382 package-json: note that line endings are inferred (#7382) (@ertw)c16dd4e
#7367 Document that overrides only work in the rootpackage.json
(#7367) (@s100)Dependencies
36adff3
#7408pacote@18.0.2
486d46c
#7408@npmcli/installed-package-contents@2.1.0
157d0ae
#7408@npmcli/package-json@5.1.0
b0ca163
#7409 remove @npmcli/disparity-colorsc77f035
#7407 remove columnify2ec690d
#7401 move cli-table3 to devDependenciesfc6e291
#7392proc-log@4.2.0
(#7392)38ed048
#7378@npmcli/metavuln-calculator@7.1.0
7678a3d
#7378proc-log@4.1.0
87f6c09
#7373@npmcli/metavuln-calculator@7.0.1
b8f8b41
#7373@npmcli/run-script@8.0.0
79f79c7
#7373proc-log@4.0.0
9027266
#7373pacote@18.0.0
ee4b3e0
#7373npm-registry-fetch@16.2.1
0e7789b
#7373npm-profile@9.0.1
ac98fd3
#7373npm-package-arg@11.0.2
9351570
#7373@npmcli/package-json@5.0.3
d3a0cfa
#7373@npmcli/git@5.0.6
@npmcli/arborist@7.5.0
@npmcli/config@8.3.0
libnpmaccess@8.0.4
libnpmdiff@6.1.0
libnpmexec@8.0.0
libnpmfund@5.0.8
libnpmhook@10.0.3
libnpmorg@6.0.4
libnpmpack@7.0.0
libnpmpublish@9.0.6
libnpmsearch@7.0.3
libnpmteam@6.0.3
libnpmversion@6.0.0
Chores
3cbc258
#7403 test for early version exit (@lukekarrys)08e0c0e
#7403 move sigstore json files to fixtures dir (@lukekarrys)ea66e95
#7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)9333e9d
#7386 reduce windows shim test flakes (#7386) (@lukekarrys)v10.5.2
Compare Source
Bug Fixes
ef381b1
#7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)3760dd2
#7361 perf: do less work loading config (#7361) (@wraithgar)64bcf4c
#7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)5a28a29
#7352 perf: lazy load workspace dependency (#7352) (@H4ad)5fc0f9d
#7347 lazy load validate npm package name on error message (#7347) (@H4ad)c929ed1
#7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)70497cb
#7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)Documentation
90ba1c9
#7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)Dependencies
699a1de
#7362@npmcli/map-workspaces@3.0.6
49fb9b7
#7362socks@2.8.3
f69052e
#7362@npmcli/package-json@5.0.2
c18a0ad
#7357sigstore@2.3.0
fd4153b
#7357socks@2.8.2
d6b705a
#7357postcss-selector-parser@6.0.16
248c177
#7357hasown@2.0.2
4af9e86
#7357builtins@5.1.0
7546b56
#7357@npmcli/agent@2.2.2
d38fd4f
#7357spdx-expression-parse@4.0.0
913b326
#7357is-cidr@5.0.5
84bbbd4
#7357@npmcli/package-json@5.0.1
a0f5048
#7357@npmcli/git@5.0.5
@npmcli/arborist@7.4.2
@npmcli/config@8.2.2
libnpmdiff@6.0.9
libnpmexec@7.0.10
libnpmfund@5.0.7
libnpmpack@6.0.9
Chores
81be28d
#7357 dev dependency updates (@wraithgar)v10.5.1
Compare Source
Bug Fixes
17d97d2
#7334 use @npmcli/redact for log redactions (@lukekarrys)8cab136
#7324 ensure maxSockets is respected (#7324) (@lukekarrys)9bffa13
#7320 query: properly return :missing nodes (#7320) (@wraithgar)9d4e85f
#7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)bdb3c28
#7274 added check for dry-run (#7274) (@cod1r)7f1ab88
#7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)Documentation
1da5cf0
#7198 add link to engines section (#7198) (@uiolee)1114a12
#7307 fix incorrect npm audit key response link (#7307) (@davidlj95)9807caf
#7304 update audit docs with provenance info (#7304) (@bdehamer)e1ecfa7
#7285 Correct capitalization for URL (#7285) (@coliff)Dependencies
87a61fc
#7334npm-registry-fetch@16.2.0
5469614
#7327init-package-json@6.0.2
5469614
#7327promzard@1.0.1
5469614
#7327read@3.0.1
(#7327)9ccff72
#7329tar@6.2.1
7201a00
#7329node-gyp@10.1.0
6fd94f2
#7329minimatch@9.0.4
b048592
#7329ini@4.1.2
c54a84a
#7329glob@10.3.12
6853531
#7329cli-table3@​0.6.4
c9315cb
#7329binary-extensions@2.3.0
5bb0031
#7329@sigstore/tuf@2.3.2
8cab136
#7324agent-base@7.1.1
(@lukekarrys)@npmcli/arborist@7.4.1
@npmcli/config@8.2.1
libnpmaccess@8.0.3
libnpmdiff@6.0.8
libnpmexec@7.0.9
libnpmfund@5.0.6
libnpmhook@10.0.2
libnpmorg@6.0.3
libnpmpack@6.0.8
libnpmpublish@9.0.5
libnpmsearch@7.0.2
libnpmteam@6.0.2
Chores
8cab136
#7324 add smoke-test for large prod installs (@lukekarrys)0dab381
#7258jsdom@24.0.0
(#7258) (@wraithgar)af3c48e
#7262 test refactor (#7262) (@wraithgar)v10.5.0
Compare Source
Features
2366edc
#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb
#5966 add --expect-entries tonpm query
(@wraithgar)Bug Fixes
818957c
#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d
#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0
#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)Documentation
c4741fe
#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622
#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057
#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f
#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9
#7182 fix typos (#7182) (@GoodDaisy)Dependencies
16d4c9f
#7218@npmcli/query@3.1.0
06247d1
#7242spdx-license-ids@3.0.17
79d1e0b
#7242spdx-exceptions@2.5.0
67e853a
#7242socks@2.8.0
4c9fe4b
#7242lru-cache@10.2.0
4a50c5a
#7242https-proxy-agent@7.0.4
ed3f254
#7242http-proxy-agent@7.0.2
8ec4fd5
#7242hasown@2.0.1
98b1189
#7242@npmcli/agent@2.2.1
dafa903
#7242sigstore@2.2.2
d0bcb76
#7242diff@5.2.0
a13808e
#7242semver@7.6.0
d6521ac
#7242@sigstore/tuf@2.3.1
43cac2f
#7242ip@2.0.1
@npmcli/arborist@7.4.0
@npmcli/config@8.2.0
libnpmdiff@6.0.7
libnpmexec@7.0.8
libnpmfund@5.0.5
libnpmpack@6.0.7
Chores
d6bc684
#7242 update devDependencies in lockfile (@wraithgar)v10.4.0
Compare Source
Features
35a098c
#7175 display tree diff on--long
(@wraithgar)dffca29
#7174 format: print--dry-run
diffs in table format (#7174) (@ritaaktay)6d5f9ac
#7133 dedupe - display difference when--dry-run
is enabled (#7133) (@Blaumaus)Bug Fixes
ec06f77
#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba
#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7
#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)Documentation
2b7eaad
#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7
#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc
#7150 config: State default configuration file affected bynpm config set
(#7150) (@DanKaplanSES)44f4518
#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f
#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)Dependencies
ec77e81
#7124promise-call-limit@3.0.1
e32189c
#7173 deduplicate treeb7af4d9
#7173tar-stream@3.1.7
6883743
#7173@npmcli/run-script@7.0.4
739634d
#7157 remove strip-ansi162c82e
#7148pacote@17.0.6
(#7148) (@bdehamer)a50b03b
#7141sigstore@2.2.0
(#7141) (@bdehamer)f696b51
#7132@sigstore/tuf@2.3.0
(#7132) (@bdehamer)@npmcli/arborist@7.3.1
libnpmdiff@6.0.6
libnpmexec@7.0.7
libnpmfund@5.0.4
libnpmpack@6.0.6
libnpmpublish@9.0.4
Chores
a82ccc5
#7173nock@13.5.0
(@wraithgar)dcaa99c
#7173 fix exec test (@wraithgar)0d96080
#7162 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)v10.3.0
Compare Source
Features
6673c77
#6914 add--libc
option to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)Bug Fixes
b7fc10a
#7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)Dependencies
3fd5213
#7121npm-packlist@8.0.2
5698415
#7121postcss-selector-parser@6.0.15
e56a4f3
#7121are-we-there-yet@4.0.2
8495b7c
#7121cacache@18.0.2
796d1c7
#7121@npmcli/run-script@7.0.3
3b7f6f2
#7121@npmcli/promise-spawn@7.0.1
7ecd146
#7121npmcli/git@5.0.4
@npmcli/arborist@7.3.0
@npmcli/config@8.1.0
libnpmdiff@6.0.5
libnpmexec@7.0.6
libnpmfund@5.0.3
libnpmpack@6.0.5
Chores
2fd8292
#7121 work around @npmcli/git lazy loading (@wraithgar)cd9a66d
#7121 update devDependencies in lockfile (@wraithgar)2dda715
#7121tap@16.3.10
(@wraithgar)v10.2.5
Compare Source
Bug Fixes
c7a592c
#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6
#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f
#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d
#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231
#7033 skip creation of log directory iflogs-max
is set to 0 (#7033) (@JJ)6267f54
#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)Dependencies
ff1204a
#7058lru-cache@10.1.0
c648020
#7058json-parse-even-better-errors@3.0.1
53aa8f2
#7058pacote@17.0.5
2e5331c
#7058npm-packlist@8.0.1
937b7b7
#7058ignore-walk@6.0.4
35371c8
#7058cacache@18.0.1
@npmcli/arborist@7.2.2
@npmcli/config@8.0.3
libnpmaccess@8.0.2
libnpmdiff@6.0.4
libnpmexec@7.0.5
libnpmfund@5.0.2
libnpmhook@10.0.1
libnpmorg@6.0.2
libnpmpack@6.0.4
libnpmpublish@9.0.3
libnpmsearch@7.0.1
libnpmteam@6.0.1
libnpmversion@5.0.2
Chores
f656b66
#7062@npmcli/template-oss@4.21.3
(#7062) (@lukekarrys)9754b17
#7051 use global npm for workspace tests (@lukekarrys)3891757
#7051@npmcli/template-oss@4.21.2
(@lukekarrys)71f70fa
#7058nock@13.4.0
(@wraithgar)43674a4
#7058tap@16.3.9
(@wraithgar)4ba585c
#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)v10.2.4
Compare Source
Bug Fixes
cd291e7
#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380
#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b
#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088
#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08
#6951 properly catch missing url opener error (#6951) (@wraithgar)Documentation
a38836c
#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f
#6987 update npm-prune description (#6987) (@Eomm)Dependencies
e9ec2f7
#6994lru-cache@10.0.2
faf9eff
#6994is-core-module@2.13.1
b00e780
#6994@sigstore/sign@2.2.0
Configuration
📅 Schedule: Branch creation - "after 10:00pm every weekday,before 4:00am every weekday,every weekend" in timezone America/Tijuana, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.