chore(deps): update npm to v11

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	9.5.1+sha512.33350b9bd78458fb8fc879910718dc2a6e3b28a6184f582d7953973e53496df75a5cdb69fac3b8cb65f7bf9837ef92ae7440062550d50a816e93b6c59eebaf36 -> 11.4.2

---

Release Notes

npm/cli (npm)

v11.4.2

Compare Source

Bug Fixes

• f2d6947 #​8345 move warning to new line when npm init is canceled (@​mbtools)
• e758dd7 #​8318 powershell: multiple Invoke-Expression fixes (#​8318) (@​alexsch01)

Documentation

• 7233cb3 #​8355 remove deprecated section related temp files (#​8355) (@​milaninfy)
• fb7a498 #​8351 clarify shell used for script (#​8351) (@​milaninfy)
• 8b55d38 #​8329 Rename "command" to "script" (#​8329) (@​DanKaplanSES)

Dependencies

• 7b05420 #​8358 fdir@6.4.6
• e1a3b23 #​8358 tinyglobby@0.2.14
• 522efa2 #​8358 socks@2.8.5
• 7a0723f #​8358 debug@4.4.1
• 9a342a4 #​8358 brace-expansion@2.0.2
• e691ba0 #​8358 @sigstore/protobuf-specs@0.4.3
• 42ef765 #​8358 validate-npm-package-name@6.0.1
• 774c0b1 #​8358 @npmcli/redact@3.2.2
• dda6f87 #​8317 @npmcli/package-json@6.2.0
• bc08ac7 #​8317 remove normalize-package-data

Chores

• 0ad1444 #​8358 dev dependency updates (@​wraithgar)
• workspace: @npmcli/arborist@9.1.2
• workspace: libnpmdiff@8.0.5
• workspace: libnpmexec@10.1.4
• workspace: libnpmfund@7.0.5
• workspace: libnpmpack@9.0.5
• workspace: libnpmpublish@11.0.1

v11.4.1

Compare Source

Documentation

• 3ed764a #​8308 Clarify script working directory behavior (fixes #​8305) (#​8308) (@​tarekwfa0110, @​owlstronaut)

Chores

• 2f30251 #​8314 remove references to skimdb.npmjs.com (#​8314) (@​shmam)
• 9cb9d50 #​8298 add contributor to changelog entry (#​8298) (@​wraithgar)

Dependencies

• workspace: @npmcli/arborist@9.1.1
• workspace: libnpmdiff@8.0.4
• workspace: libnpmexec@10.1.3
• workspace: libnpmfund@7.0.4
• workspace: libnpmpack@9.0.4

v11.4.0

Compare Source

Features

• a0e60fb #​8246 added init-private option (@​owlstronaut)
• 57aa89f #​8265 use run by default and run-script as the alias (#​8265) (@​owlstronaut)
• 0d4c023 #​8234 install: add package info to json output (#​8234) (@​wraithgar)

Bug Fixes

• 8794fd9 #​8297 powershell: support pipeline input with Invoke-Expression (#​8297) (@​alexsch01)
• b5173d1 #​8293 docs: corrected github_path (#​8293) (@​xaos7991)
• 2210d7a #​8278 powershell: use Invoke-Expression to pass args (#​8278) (@​alexsch01, @​mbtools)
• 8669d09 #​8228 add otplease for enable-2fa, disable-2fa, access (#​8228) (@​reggi, @​wraithgar)
• 78b5a6f #​8269 correctly handle scenario where prefix is the cwd (#​8269) (@​owlstronaut, @​ficocelliguy)
• fdc3413 #​8221 exec: Fails to Execute Binaries Named After Shell Keywords (#​8221) (@​13sfaith)
• 4b08e2e #​8245 docs: prepare script runs for local package links (@​milaninfy)
• 1622ac4 #​8241 handle missing time in packument to prevent crash on npm view (@​owlstronaut)
• db8f5da #​8110 outdated: add dependent location in long output (#​8110) (@​milaninfy, @​wraithgar)

Documentation

• d2498df #​8295 Remove CHANGELOG from never-ignored list (#​8295) (@​mrazauskas)
• 4d5c3c1 #​8283 fix overrides example in package-json.md (#​8283) (@​glasser)
• 96cc4f9 #​8226 format publish as code to highlight it (@​LiangYingC)
• 4990ea0 #​8226 clarify legacy token creation in npm login and adduser commands (@​LiangYingC)

Dependencies

• c97ef8a #​8246 init-package-json@8.2.1
• f48613d #​8292 @sigstore/verify@2.1.1
• a4c5e74 #​8292 tinyglobby@0.2.13
• b9156d2 #​8292 http-cache-semantics@4.2.0
• 472a685 #​8292 binary-extensions@3.1.0
• 988696e #​8292 @sigstore/tuf@3.1.1
• 569ac84 #​8292 semver@7.7.2
• 2521c9b #​8233 @sigstore/protobuf-specs@0.4.1
• 3274d68 #​8233 @npmcli/query@4.0.1
• c263626 #​8233 abbrev@3.0.1
• 78df711 #​8233 hosted-git-info@8.1.0

Chores

• e80e38e #​8292 dev dependency updates (@​wraithgar)
• 3231ee9 #​8244 update snapshots (@​owlstronaut)
• c561a33 #​8233 dev dependency updates (@​owlstronaut)
• 7eca19c #​8215 update workflow permissions for updating Node PR (@​owlstronaut)
• workspace: @npmcli/arborist@9.1.0
• workspace: @npmcli/config@10.3.0
• workspace: libnpmaccess@10.0.1
• workspace: libnpmdiff@8.0.3
• workspace: libnpmexec@10.1.2
• workspace: libnpmfund@7.0.3
• workspace: libnpmpack@9.0.3
• workspace: libnpmteam@8.0.1
• workspace: libnpmversion@8.0.1

v11.3.0

Compare Source

Features

• b306d25 #​8129 add node-gyp as actual config (@​wraithgar)

Bug Fixes

• 2f5392a #​8135 make npm run autocomplete work with workspaces (#​8135) (@​terrainvidia)

Documentation

• 26b6454 fix grammer in local path note (@​cgay)
• 1c0e83d #​7886 fix typo in package-json.md (#​7886) (@​stoneLeaf)
• 14efa57 #​8178 fix example package name in overrides explainer (#​8178) (@​G-Rath)
• 4183cba #​8162 logging: replace proceeding with preceding in loglevels details (#​8162) (@​tyleralbee)

Dependencies

• e57f112 #​8207 minipass-fetch@4.0.1
• 3daabb1 #​8207 minizlib@3.0.2
• c7a7527 #​8207 ci-info@4.2.0
• 20b09b6 #​8207 node-gyp@11.2.0
• 679bc4a #​8129 @npmcli/run-script@9.1.0

Chores

• 3fbed84 #​8207 install rimraf as a devdependency for smoke tests (@​owlstronaut)
• 43f0b41 #​8207 dev dependency updates (@​wraithgar)
• 26803bc #​8147 release integration node 23 yml (#​8147) (@​reggi)
• d679a1a #​8146 release integration node 23 (#​8146) (@​reggi)
• workspace: @npmcli/arborist@9.0.2
• workspace: @npmcli/config@10.2.0
• workspace: libnpmdiff@8.0.2
• workspace: libnpmexec@10.1.1
• workspace: libnpmfund@7.0.2
• workspace: libnpmpack@9.0.2

v11.2.0

Compare Source

Features

• 247ee1d #​8100 cache: add npx commands (@​wraithgar)
• 3a80a7b #​8081 add --init-type flag (#​8081) (@​reggi)
• 2a1e11f #​8071 move nerfDart list into @​npmcli/config (@​wraithgar)

Bug Fixes

• 8461186 #​8100 update npx cache if possible when spec is a range (@​wraithgar)
• e345cc5 #​8050 don't suggest npm update outside of valid engine range (#​8050) (@​milaninfy)
• 811ca29 #​8115 stop working around bug fixed in npm-package-arg@12.0.2 (@​TrevorBurnham)
• 879303c #​8078 warn on invalid publishConfig (#​8078) (@​wraithgar)
• 41417de #​8080 warn when TUF fetching of keys fails (#​8080) (@​wraithgar)
• 593c849 #​8076 warn on invalid single-hyphen cli flags (#​8076) (@​wraithgar)

Dependencies

• 3d8b257 #​8100 @npmcli/package-json@6.1.1
• ab17523 #​8134 supports-color@10.0.0
• 3cbe21a #​8134 foreground-child@3.3.1
• ee5e1aa #​8118 @npmcli/redact@3.1.1
• 5df69b4 #​8118 exponential-backoff@3.1.2
• 80c3273 #​8118 read@4.1.0
• 7fd70fa #​8118 node-gyp@11.1.0
• 7aeffff #​8118 cidr-regex@4.1.3
• b0c0490 #​8118 is-cidr@5.1.1
• ef49d6b #​8118 sigstore@3.1.0
• 1399bfb #​8118 socks@2.8.4
• 6b72107 #​8118 semver@7.7.1
• c9ad0c4 #​8118 @npmcli/git@6.0.3
• b153927 #​8115 npm-package-arg@12.0.2
• f0f6265 #​8071 nopt@8.1.0

Chores

• cc72b89 #​8143 fix smoke tests to account for new release versions within a workspace (#​8143) (@​reggi)
• c3810bc #​8134 dev dependency updates (@​wraithgar)
• 9dc40e6 #​8118 dev dependency updates (@​wraithgar)
• 7ec0831 #​8118 update jsonpath-plus (@​wraithgar)
• ed85b01 #​8071 tests for config warnings/changes (@​wraithgar)
• workspace: @npmcli/arborist@9.0.1
• workspace: @npmcli/config@10.1.0
• workspace: libnpmdiff@8.0.1
• workspace: libnpmexec@10.1.0
• workspace: libnpmfund@7.0.1
• workspace: libnpmpack@9.0.1

v11.1.0

Compare Source

Features

• 7f6c997 #​8009 add dry-run to deprecate/undeprecate commands (@​wraithgar)
• 1764a37 #​8009 add npm undeprecate command (@​wraithgar)

Bug Fixes

• 31455b2 #​8054 publish: honor force for no dist tag and registry version check (#​8054) (@​reggi)
• dc31c1b #​8038 remove max-len linting bypasses (@​wraithgar)
• 8a911ff #​8038 publish: disregard deprecated versions when calculating highest version (@​wraithgar)
• 7f72944 #​8038 publish: accept publishConfig.tag to override highes semver check (@​wraithgar)
• ab9ddc0 #​7992 sbom: deduplicate sbom dependencies (#​7992) (@​bdehamer)
• f7da341 #​7980 search: properly display multiple search terms (#​7980) (@​wraithgar)

Documentation

• 3644e79 #​8055 update readme for Node.js versions, remove badges (#​8055) (@​wraithgar)
• f1af61f #​8041 fix typos in "package-json" (#​8041) (@​maxkoryukov)
• e90c6fe #​8051 depth flag default value (#​8051) (@​milaninfy)
• 866b5ee #​8030 safer documentation urls, repos, packages (#​8030) (@​reggi)

Dependencies

• 7ddfbad #​8053 @npmcli/package-json@6.1.1
• 9473a86 #​8053 spdx-license-ids@3.0.21
• a65e5ce #​8053 @sigstore/protobuf-specs@0.3.3
• 215ebe4 #​8053 chalk@5.4.1

Chores

• 61f00e3 #​8069 splits out smoke-tests from publish-dryrun tests (#​8069) (@​reggi)
• 6d0f46e #​8058 stop publish smoke from check git clean (#​8058) (@​reggi)
• 9281ebf #​8057 fix smoke tests prerelease needs separate string args (#​8057) (@​reggi)
• aa202e9 #​8056 smoke tests using a preid (#​8056) (@​reggi)
• 18e0449 #​8053 dev dependency updates (@​wraithgar)
• 859a71c #​8052 update node versions for release integration tests (#​8052) (@​wraithgar)
• 7e7961d #​8038 bump @​npmcli/eslint-config to 5.1.0 (@​wraithgar)
• workspace: @npmcli/config@10.0.1

v11.0.0

Compare Source

Documentation

• 8a911da #​7963 ls: removed design change pending section note (#​7963) (@​milaninfy)

Dependencies

• 5319e48 #​7973 remove unnecessary sprintf-js files in node_modules (#​7973)
• d369c77 #​7976 socks-proxy-agent@8.0.5
• 3b2951a #​7976 https-proxy-agent@7.0.6
• a598b7b #​7976 agent-base@7.1.3
• 52bcaf6 #​7976 debug@4.4.0
• aabf345 #​7976 p-map@7.0.3
• 28e8761 #​7976 npm-package-arg@12.0.1

Chores

• ecd7190 #​7976 dev dependency updates (@​wraithgar)
• a07f4e0 #​7976 @npmcli/template-oss@4.23.6 (@​wraithgar)
• 687ab12 #​7970 remove pre-release mode from npm 11 and workspaces (#​7970) (@​wraithgar)
• workspace: @npmcli/arborist@9.0.0
• workspace: @npmcli/config@10.0.0
• workspace: libnpmaccess@10.0.0
• workspace: libnpmdiff@8.0.0
• workspace: libnpmexec@10.0.0
• workspace: libnpmfund@7.0.0
• workspace: libnpmorg@8.0.0
• workspace: libnpmpack@9.0.0
• workspace: libnpmpublish@11.0.0
• workspace: libnpmsearch@9.0.0
• workspace: libnpmteam@8.0.0
• workspace: libnpmversion@8.0.0

v10.9.2

Compare Source

Dependencies

• ae9345e #​7959 @npmcli/run-script@9.0.2
• 39a19b3 #​7959 node-gyp@11.0.0
• 93e2186 #​7956 @npmcli/map-workspaces@4.0.2
• bf0ea00 #​7956 @npmcli/package-json@6.1.0
• c84baa3 #​7956 init-package-json@7.0.2
• e642099 #​7956 node-gyp@10.3.1

v10.9.1

Compare Source

Bug Fixes

• c7fe0db #​7924 perf: enable compile cache if present (#​7924) (@​H4ad)

Dependencies

• a221db7 #​7931 npm-install-checks@7.1.1
• fbad17a #​7931 hosted-git-info@8.0.2
• 65d2a86 #​7922 @sigstore/tuf@3.0.0
• be45963 #​7922 sigstore@3.0.0
• fb0bfbd #​7922 spdx-license-ids@3.0.20
• ccadf2a #​7922 promise-call-limit@3.0.2
• b25712e #​7922 package-json-from-dist@1.0.1
• 1c9e96f #​7922 negotiator@0.6.4
• f13bc9c #​7922 debug@4.3.7
• 029060c #​7922 cross-spawn@7.0.6
• 9350950 #​7922 @npmcli/metavuln-calculator@8.0.1
• c003827 #​7922 ansi-regex@6.1.0
• d6194f5 #​7922 pacote@19.0.1
• 4ff29f6 #​7922 npm-registry-fetch@18.0.2
• fd6f4fb #​7922 make-fetch-happen@14.0.3
• b3f3004 #​7922 ci-info@4.1.0
• a1f9d48 #​7922 promise-spawn@8.0.2

Chores

• 3ace1c1 #​7922 update arborist in mock-registry (@​wraithgar)
• workspace: libnpmpublish@10.0.1

v10.9.0

Compare Source

Features

• 4d57928 #​7766 devEngines (#​7766) (@​reggi)

Bug Fixes

• 6ca609e #​7789 ping and doctor commands fix for checking if registry is online (#​7789) (@​milaninfy)

Documentation

• 63d6a73 #​7783 package.json: add brief section on exports, link to Node.js docs (#​7783) (@​wheresrhys)
• 366c07e #​7776 remove incorrect note about npm install (#​7776) (@​wraithgar)

Dependencies

• 60a7ee5 #​7803 hoist npm-normalize-package-bin
• 20dd44f #​7803 hoist minipass-fetch
• 5795987 #​7803 update proggy@3.0.0
• 99ccae3 #​7803 update bin-links@5.0.0
• 75786ad #​7803 update @npmcli/query@4.0.0
• 1c25a1d #​7803 update @npmcli/node-gyp@4.0.0
• 2d7fc3d #​7803 update @npmcli/name-from-folder@3.0.0
• 1e09334 #​7803 update @npmcli/metavuln-calculator@8.0.0
• 820e983 #​7803 update @npmcli/installed-package-contents@3.0.0
• 9cd6603 #​7803 update read-package-json-fast@4.0.0
• b84d907 #​7803 update @npmcli/git@6.0.1
• 53ed632 #​7803 update write-file-atomic@6.0.0
• ab40dab #​7803 update which@5.0.0
• b1c4770 #​7803 update validate-npm-package-name@6.0.0
• 8206c4f #​7803 update ssri@12.0.0
• 8b7dbc8 #​7803 update read@4.0.0
• f6909a0 #​7803 update proc-log@5.0.0
• f9b2e18 #​7803 update parse-conflict-json@4.0.0
• e7ab206 #​7803 update pacote@19.0.0
• b28dbb1 #​7803 update npm-user-validate@3.0.0
• d13a20b #​7803 update npm-registry-fetch@18.0.1
• 5208f74 #​7803 update npm-profile@11.0.1
• 092f41f #​7803 update npm-pick-manifest@10.0.0
• 50a7bc8 #​7803 update npm-package-arg@12.0.0
• 591130d #​7803 update npm-install-checks@7.1.0
• be6ae96 #​7803 update npm-audit-report@6.0.0
• 8d4060a #​7803 update normalize-package-data@7.0.0
• 105fa2b #​7803 update nopt@8.0.0
• eae4f57 #​7803 update make-fetch-happen@14.0.1
• 7214149 #​7803 update json-parse-even-better-errors@4.0.0
• c4bed31 #​7803 update init-package-json@7.0.1
• f54b155 #​7803 update ini@5.0.0
• 6deae9e #​7803 update hosted-git-info@8.0.0
• 034c729 #​7803 update cacache@19.0.1
• ddb8be0 #​7803 update abbrev@3.0.0
• 538a4cc #​7803 update @npmcli/run-script@9.0.1
• b80d048 #​7803 update @npmcli/redact@3.0.0
• 81137fc #​7803 update @npmcli/promise-spawn@8.0.1
• 2076368 #​7803 update @npmcli/package-json@6.0.1
• feac87c #​7803 update @npmcli/map-workspaces@4.0.1
• dd90f9e #​7803 update @npmcli/fs@4.0.0

Chores

• 95e2cb1 #​7810 ignore .github folder in release-please (@​reggi)
• be1e6da #​7803 update minify-registry-metadata@4.0.0 (@​reggi)
• 43f2374 #​7803 update ignore-walk@7.0.0 (@​reggi)
• bb03036 #​7803 update npm-packlist@9.0.0 (@​reggi)
• 2072705 #​7803 update @npmcli/eslint-config@5.0.1 (@​reggi)
• 949d8f8 #​7803 engine ^18.17.0 || >=20.5.0 in package template (@​reggi)
• fefd509 #​7764 deps: bump actions/download-artifact from 3 to 4 in /.github/workflows (#​7764) (@​dependabot[bot], @​wraithgar)
• workspace: @npmcli/arborist@8.0.0
• workspace: @npmcli/config@9.0.0
• workspace: libnpmaccess@9.0.0
• workspace: libnpmdiff@7.0.0
• workspace: libnpmexec@9.0.0
• workspace: libnpmfund@6.0.0
• workspace: libnpmhook@11.0.0
• workspace: libnpmorg@7.0.0
• workspace: libnpmpack@8.0.0
• workspace: libnpmpublish@10.0.0
• workspace: libnpmsearch@8.0.0
• workspace: libnpmteam@7.0.0
• workspace: libnpmversion@7.0.0

v10.8.3

Compare Source

Bug Fixes

• 7e61151 [#​7759](https://redi

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Explain this complex logic.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
  • @coderabbitai explain this code block.
  • @coderabbitai modularize this function.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read src/utils.ts and explain its main purpose.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
  • @coderabbitai help me debug CodeRabbit configuration file.

Support

Need help? Join our Discord community for assistance with any issues or questions.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (Invoked using PR comments)

• @coderabbitai pause to pause the reviews on a PR.
• @coderabbitai resume to resume the paused reviews.
• @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
• @coderabbitai full review to do a full review from scratch and review all the files again.
• @coderabbitai summary to regenerate the summary of the PR.
• @coderabbitai generate sequence diagram to generate a sequence diagram of the changes in this PR.
• @coderabbitai resolve resolve all the CodeRabbit review comments.
• @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
• @coderabbitai help to get help.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.