Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^7.0.0 || ^8.0.0
->^7.0.0 || ^8.0.0 || ^10.0.0
Release Notes
npm/cli (npm)
v10.5.0
Compare Source
Features
2366edc
#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb
#5966 add --expect-entries tonpm query
(@wraithgar)Bug Fixes
818957c
#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d
#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0
#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)Documentation
c4741fe
#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622
#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057
#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f
#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9
#7182 fix typos (#7182) (@GoodDaisy)Dependencies
16d4c9f
#7218@npmcli/query@3.1.0
06247d1
#7242spdx-license-ids@3.0.17
79d1e0b
#7242spdx-exceptions@2.5.0
67e853a
#7242socks@2.8.0
4c9fe4b
#7242lru-cache@10.2.0
4a50c5a
#7242https-proxy-agent@7.0.4
ed3f254
#7242http-proxy-agent@7.0.2
8ec4fd5
#7242hasown@2.0.1
98b1189
#7242@npmcli/agent@2.2.1
dafa903
#7242sigstore@2.2.2
d0bcb76
#7242diff@5.2.0
a13808e
#7242semver@7.6.0
d6521ac
#7242@sigstore/tuf@2.3.1
43cac2f
#7242ip@2.0.1
@npmcli/arborist@7.4.0
@npmcli/config@8.2.0
libnpmdiff@6.0.7
libnpmexec@7.0.8
libnpmfund@5.0.5
libnpmpack@6.0.7
Chores
d6bc684
#7242 update devDependencies in lockfile (@wraithgar)v10.4.0
Compare Source
Features
35a098c
#7175 display tree diff on--long
(@wraithgar)dffca29
#7174 format: print--dry-run
diffs in table format (#7174) (@ritaaktay)6d5f9ac
#7133 dedupe - display difference when--dry-run
is enabled (#7133) (@Blaumaus)Bug Fixes
ec06f77
#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba
#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7
#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)Documentation
2b7eaad
#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7
#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc
#7150 config: State default configuration file affected bynpm config set
(#7150) (@DanKaplanSES)44f4518
#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f
#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)Dependencies
ec77e81
#7124promise-call-limit@3.0.1
e32189c
#7173 deduplicate treeb7af4d9
#7173tar-stream@3.1.7
6883743
#7173@npmcli/run-script@7.0.4
739634d
#7157 remove strip-ansi162c82e
#7148pacote@17.0.6
(#7148) (@bdehamer)a50b03b
#7141sigstore@2.2.0
(#7141) (@bdehamer)f696b51
#7132@sigstore/tuf@2.3.0
(#7132) (@bdehamer)@npmcli/arborist@7.3.1
libnpmdiff@6.0.6
libnpmexec@7.0.7
libnpmfund@5.0.4
libnpmpack@6.0.6
libnpmpublish@9.0.4
Chores
a82ccc5
#7173nock@13.5.0
(@wraithgar)dcaa99c
#7173 fix exec test (@wraithgar)0d96080
#7162 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)v10.3.0
Compare Source
Features
6673c77
#6914 add--libc
option to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)Bug Fixes
b7fc10a
#7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)Dependencies
3fd5213
#7121npm-packlist@8.0.2
5698415
#7121postcss-selector-parser@6.0.15
e56a4f3
#7121are-we-there-yet@4.0.2
8495b7c
#7121cacache@18.0.2
796d1c7
#7121@npmcli/run-script@7.0.3
3b7f6f2
#7121@npmcli/promise-spawn@7.0.1
7ecd146
#7121npmcli/git@5.0.4
@npmcli/arborist@7.3.0
@npmcli/config@8.1.0
libnpmdiff@6.0.5
libnpmexec@7.0.6
libnpmfund@5.0.3
libnpmpack@6.0.5
Chores
2fd8292
#7121 work around @npmcli/git lazy loading (@wraithgar)cd9a66d
#7121 update devDependencies in lockfile (@wraithgar)2dda715
#7121tap@16.3.10
(@wraithgar)v10.2.5
Compare Source
Bug Fixes
c7a592c
#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6
#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f
#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d
#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231
#7033 skip creation of log directory iflogs-max
is set to 0 (#7033) (@JJ)6267f54
#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)Dependencies
ff1204a
#7058lru-cache@10.1.0
c648020
#7058json-parse-even-better-errors@3.0.1
53aa8f2
#7058pacote@17.0.5
2e5331c
#7058npm-packlist@8.0.1
937b7b7
#7058ignore-walk@6.0.4
35371c8
#7058cacache@18.0.1
@npmcli/arborist@7.2.2
@npmcli/config@8.0.3
libnpmaccess@8.0.2
libnpmdiff@6.0.4
libnpmexec@7.0.5
libnpmfund@5.0.2
libnpmhook@10.0.1
libnpmorg@6.0.2
libnpmpack@6.0.4
libnpmpublish@9.0.3
libnpmsearch@7.0.1
libnpmteam@6.0.1
libnpmversion@5.0.2
Chores
f656b66
#7062@npmcli/template-oss@4.21.3
(#7062) (@lukekarrys)9754b17
#7051 use global npm for workspace tests (@lukekarrys)3891757
#7051@npmcli/template-oss@4.21.2
(@lukekarrys)71f70fa
#7058nock@13.4.0
(@wraithgar)43674a4
#7058tap@16.3.9
(@wraithgar)4ba585c
#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)v10.2.4
Compare Source
Bug Fixes
cd291e7
#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380
#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b
#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088
#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08
#6951 properly catch missing url opener error (#6951) (@wraithgar)Documentation
a38836c
#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f
#6987 update npm-prune description (#6987) (@Eomm)Dependencies
e9ec2f7
#6994lru-cache@10.0.2
faf9eff
#6994is-core-module@2.13.1
b00e780
#6994@sigstore/sign@2.2.0
4613774
#6994 hoisting newer deps in favor of older ones54c4f7b
#6994signal-exit@4.1.0
8c5882f
#6994strip-ansi@7.1.0
cd0c649
#6994ci-info@4.0.0
a0a58b7
#6994@sigstore/tuf@2.2.0
b3a53c6
#6949is-cidr@5.0.3
(#6949)@npmcli/config@8.0.2
libnpmexec@7.0.4
libnpmpublish@9.0.2
v10.2.3
Compare Source
Dependencies
b5dedf3
#6958node-gyp@10.0.1
v10.2.2
Compare Source
Bug Fixes
8ed6d28
#6910 make npm link respect --no-save (#6910) (@Santoshraj2)eacec5f
#6941 add back bin/node-gyp-bin/node-gyp files (#6941) (@lukekarrys)b776753
#6928 Grammar mistake in authentication error message (#6928) (@Gekuro, gek)Documentation
c422a01
#6924 use markdown links instead of html (@lukekarrys)dd03aa0
#6921 add v9 and above for lockfile version 3 (#6921) (@MikeMcC399)Dependencies
dfb6298
#6937node-gyp@10.0.0
(#6937)@npmcli/arborist@7.2.1
libnpmdiff@6.0.3
libnpmexec@7.0.3
libnpmfund@5.0.1
libnpmpack@6.0.3
libnpmversion@5.0.1
v10.2.1
Compare Source
Bug Fixes
35c92fe
#6902 Add check to pkg command to deal with empty values (#6902) (@NeonArray)5b6172f
#6895 logout from custom registry (@wraithgar)8423d4f
#6895 delete auth from proper location on logout (@wraithgar)0cfe9de
#6873 audit: spelling error in message (#6873) (@Fdawgs)Documentation
5142735
#6894 update npm build description (#6894) (@siemhesda)2e4b4ad
#6861 npm publish content modification (#6861) (@jpg619)Dependencies
96e1637
#6915cmd-shim@6.0.2
(#6915)b405da1
#6899bin-links@4.0.3
ef69d36
#6895npm-registry-fetch@16.1.0
337c903
#6882spdx-license-ids@3.0.16
e6b0be7
#6882socks-proxy-agent@8.0.2
ee6892e
#6882readable-stream@4.4.2
61c3ee9
#6882minipass@7.0.4
14d31fd
#6882is-core-module@2.13.0
03f3d2e
#6882https-proxy-agent@7.0.2
e0163c6
#6882are-we-there-yet@4.0.1
fca804a
#6882ci-info@3.9.0
6af582f
#6882npm-install-checks@6.3.0
@npmcli/config@8.0.1
v10.2.0
Compare Source
Features
7c459d2
#6801 add npm sbom command (#6801) (@bdehamer)81a460f
#6732 add package-lock-only mode to npm query (@wraithgar)0d29855
#6732 add no-package-lock mode to npm audit (@wraithgar)Bug Fixes
2207628
#6823 use strip-ansi module instead of internal regex (#6823) (@wraithgar)d46d052
#6798 tolerate null bugs URLs (#6798) (@vladh)fb1b674
#6758 deprecate: ignore implicit workspace mode (#6758) (@wraithgar)Documentation
68031f2
#6844 updateCONTRIBUTING.md
to prevent errors (#6844) (@darcyclarke)3ac703c
#6831 addinclude
param to commands that haveomit
param (#6831) (@siemhesda)03912db
#6819 add init-specific params to init docs/help (#6819) (@wraithgar)8088325
#6800 Update npm-doctor.md (#6800) (@siemhesda)Dependencies
aa6728b
#6859tar@6.2.0
ce9089f
#6859npm-package-arg@11.0.1
39d7f04
#6859minipass@7.0.4
0a47af5
#6859hosted-git-info@7.0.1
af93130
#6859glob@10.3.10
3ebc474
#6859@npmcli/query@3.0.1
284cbfd
#6858@npmcli/agent@2.2.0
@npmcli/arborist@7.2.0
@npmcli/config@8.0.0
libnpmaccess@8.0.1
libnpmdiff@6.0.2
libnpmexec@7.0.2
libnpmfund@5.0.0
libnpmorg@6.0.1
libnpmpack@6.0.2
libnpmpublish@9.0.1
v10.1.0
Compare Source
Features
1c93c44
#6755 Add--cpu
and--os
option to override platform specific install (#6755) (@yukukotani)Bug Fixes
7bf2374
#6762 make$npm_execpath
always point to npm (@rotu)Documentation
09d8e0a
#6759 fix versions of node.js in readme (#6759) (@JoaoOtavioS)Dependencies
f76066a
#6771@npmcli/agent@2.1.1
@npmcli/arborist@7.1.0
@npmcli/config@7.2.0
libnpmdiff@6.0.1
libnpmexec@7.0.1
libnpmfund@4.1.1
libnpmpack@6.0.1
v10.0.0
Compare Source
Features
48a7b07
remove prerelease flags (@lukekarrys)Dependencies
@npmcli/arborist@7.0.0
@npmcli/config@7.1.0
libnpmaccess@8.0.0
libnpmdiff@6.0.0
libnpmexec@7.0.0
libnpmfund@4.1.0
libnpmhook@10.0.0
libnpmorg@6.0.0
libnpmpack@6.0.0
libnpmpublish@9.0.0
libnpmsearch@7.0.0
libnpmteam@6.0.0
libnpmversion@5.0.0
v9.9.3
Compare Source
Bug Fixes
88ea8c7
#7010 set objectMode for search filter stream (@lukekarrys)8d9d735
#7010 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)e0e75e5
#7010 unpublish bugfixes (#7039) (@wraithgar)4d59ce1
#7047 reverse direction of SPDX SBOM dep rels (#7047) (@bdehamer, @antonbauhofer)878f22b
#7008 properly catch missing url opener error (@wraithgar)91a8eca
#7008 properly catch missing url opener error on interactive prompt (@wraithgar)Dependencies
1968e0e
#7010spdx-license-ids@3.0.17
d130576
#7010spdx-exceptions@2.5.0
00f28b8
#7010signal-exit@4.1.0
57096c3
#7010postcss-selector-parser@6.0.15
3ce677e
#7010minipass-fetch@3.0.4
89757ed
#7010is-core-module@2.13.1
bc1e841
#7010socks@2.8.1
01f4049
#7010ignore-walk@6.0.4
15f8982
#7010function-bind@1.1.2
88ff949
#7010cmd-shim@6.0.2
3e298f6
#7010bin-links@4.0.3
35a6286
#7010are-we-there-yet@4.0.2
aeb28c4
#7010agentkeepalive@4.5.0
edc7e23
#7010@npmcli/query@3.1.0
00a3a08
#7010tar@6.2.0
7f424c3
#7010ssri@10.0.5
79b8538
#7010semver@7.6.0
b5faf10
#7010npm-install-checks@6.3.0
2c62266
#7010node-gyp@9.4.1
cc0516b
#7010minipass@7.0.4
651d362
#7010json-parse-even-better-errors@3.0.1
4b239c6
#7010glob@10.3.10
2f65b46
#7010fs-minipass@3.0.3
6c73ddf
#7010diff@5.2.0
73ee6cc
#7010ci-info@4.0.0
64715a4
#7010cacache@17.1.4
@npmcli/arborist@6.5.1
@npmcli/config@6.4.1
libnpmaccess@7.0.3
libnpmdiff@5.0.21
libnpmexec@6.0.5
libnpmfund@4.2.2
libnpmhook@9.0.4
libnpmorg@5.0.5
libnpmpack@5.0.21
libnpmpublish@7.5.2
libnpmsearch@6.0.3
libnpmteam@5.0.4
libnpmversion@4.0.3
Chores
77fa150
#7252 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)1d4c464
#7252@npmcli/template-oss@4.21.3
(@lukekarrys)6780643
#7010 dev dependency updates (@wraithgar)ce701e9
#7048 fix tests for zlib differences between node versions (#7048) (@wraithgar)v9.9.2
Compare Source
Bug Fixes
4c9a5e1
#6993 look in workspace for exec commands (#6993) (@wraithgar)bb6f496
#6992 correctly handle object licenses in SBOM generation (#6992) (@bdehamer, @jamietanna)10db3ca
#6990 pkg: properly output in workspace mode (#6990) (@wraithgar)Documentation
6ab06d7
#6985 update npm-prune description (#6985) (@Eomm)Dependencies
libnpmpublish@7.5.1
v9.9.1
Compare Source
Bug Fixes
0dba79a
#6942 add back bin/node-gyp-bin/node-gyp files (@lukekarrys)c93edb5
#6932 add backbin/node-gyp-bin/node-gyp
files (@lukekarrys)Documentation
e6cce28
#6925 use markdown links instead of html (@lukekarrys)v9.9.0
Compare Source
Features
ecda95a
#6841 add npm sbom command (#6841) (@bdehamer)fdb8a86
#6794 add package-lock-only mode to npm query (@wraithgar)16c04b1
#6877 add no-package-lock mode to npm audit (@wraithgar)66ef765
#6776 Add--cpu
and--os
option to override platform specific install (#6776) (@yukukotani)Bug Fixes
c9406f7
#6791 deprecate: ignore implicit workspace mode (#6758) (#6791) (@wraithgar)0b1d7c3
#6779 allow searching packages with no description (#6779) (@wraithgar, @lukekarrys)Documentation
9750720
#6694 fix example path (#6694) (@fvilers)Dependencies
588a245
#6756npm-pick-manifest@8.0.2
a76b1df
#6877sigstore@1.9.0
95b5ab0
#6877npm-install-checks@6.2.0
@npmcli/arborist@6.5.0
@npmcli/config@6.4.0
libnpmdiff@5.0.20
libnpmexec@6.0.4
libnpmfund@4.2.1
libnpmpack@5.0.20
v9.8.1
Compare Source
Bug Fixes
38351c9
#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb
#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe
#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3
#6651@npmcli/package-json@4.0.1
24f5a8b
](https://togithub.com/npm/cliConfiguration
📅 Schedule: Branch creation - "before 4am on Monday" in timezone Europe/Lisbon, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.