This repository was archived by the owner on Jun 13, 2022. It is now read-only.
chore(deps): update npm to v8 #790
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.








This PR contains the following updates:
>=7.24.2->>=8.5.5Release Notes
npm/cli
v8.5.5Compare Source
Bug Fixes
0e7511d14#4261 fix(arborist): _findMissingEdges missing dependency due to inconsistent path separators (@salvadorj)c83069436#4547 fix: omit bots from authors (@wraithgar)f66da2ed8#4565 fix(owner): bypass cache when fetching packument (@wraithgar)f0c6e86ca#4572 fix: remove name from unpublished message (@wraithgar)f7e58fa74#4572 fix: remove "bug the author" message from package 404 (@wraithgar)5471ff5fe#4573 fix: add isntall alias to install (@wraithgar)84d19210e#4576 fix: properly shownpm view ./directory(@wraithgar)e9a2981f5#4578 fix(arborist): save workspace version (@ruyadorno)Documentation
a30405258#4580 docs: add foreground-scripts and ignore-scripts to commands (@wraithgar)2361a68e1#4582 docs: add isntall alias to install command (@wraithgar)8ff1dfaae#4575 docs: explain that linked deps neednpm installran in them (@wraithgar)ddbb505ec#4574 docs: explain that git-tag-version=false does not commit (@wraithgar)7c878b978#4584 docs: fix unpublish docs to auto generate usage (@wraithgar)Dependencies
fcc6acfa8#4562 deps:@npmcli/[email protected]6d3145014#4562 deps:[email protected]f6b771aab#4562 deps:[email protected]e26548fb1#4562 deps:[email protected]915dda7ab#4562 deps:[email protected]f2ec2ef1f#4562 deps:[email protected]340fa51f4#4562 deps:[email protected]9555a5f1d#4562 deps:[email protected]b2a494283#4562 deps:[email protected]1cb88f4b3#4562 deps:[email protected]f95396a03#4562 deps:[email protected]aec2bfecc#4585 deps:[email protected]ed8ab63e4deps:[email protected]0b73bfa82deps:[email protected]475d59b36deps:[email protected]7201c7395deps:[email protected]f5df358c3deps:[email protected]472e7dd7adeps:[email protected]c901d7290deps:[email protected]aad53327fdeps:@npmcli/[email protected]b40136bcadeps:[email protected]5d91201d1deps:[email protected]v8.5.4Compare Source
Bug Fixes
fbdb43138#4529
fix(rebuild): don't run lifecycle scripts twice on linked deps
(@wraithgar)
1c182e11d#4495
fix(doctor): don't retry ping
(@wraithgar)
55ab38c53#4495
fix(doctor): allow for missing local bin and
node_modules(@wraithgar)
5c06a33e6#4528
fix: clean up owner command and otplease
(@wraithgar)
Documentation
2485064da#4524
docs: fix typo in configuring-npm/package-json.md
(@dlcmh)
91f03ee61#4510
docs: standardize changelog heading
(@wraithgar)
Dependencies
377f55e0e#4530
deps:
[email protected]40b7fbf67#4531
deps:
[email protected]d9dc70ce4#4545
deps:
[email protected]EDUPLICATEWORKSPACE70fcfb46bdeps:
[email protected]621cd033fdeps:
@npmcli/[email protected]087fdc4cbdeps:
[email protected]d24c6d288deps:
[email protected]fa59830fcdeps:
[email protected]6d5f22b86deps:
[email protected]69ea54350deps:
[email protected]4742d7cf3deps:
[email protected]fdd255ae9deps:
[email protected]ed41bc101deps:
[email protected]21e241025deps:
[email protected]ec7f36ff9deps:
[email protected]ad4b56414deps:
[email protected]v8.5.3Compare Source
Bug Fixes
defe79ad6#4480
fix: publish of tarballs includes README in packument
(@fritzy)
45fc297f1#4479
fix: ignore implict workspace for some commands
(@fritzy)
a0900bdf1#4481
fix(ls): respect
--include-workspace-root(@fritzy)
0cfc155db#4476
fix: set proper workspace repo urls in package.json
(@ljharb)
9e43de8a5#4493
fix: ignore implicit workspace for whoami
(@nlf)
Dependencies
d13f067d9#4490
deps:
@npmcli/[email protected](@wraithgar)
ce9a6eac0#4490
deps:
[email protected](@wraithgar)
bd660f5f1#4490
deps:
@npmcli/[email protected]3c17b6965#4490
deps:
[email protected]e9b69c4c5#4490
deps:
[email protected]cf27ca888#4490
deps:
[email protected]f3421921a#4490
deps:
[email protected]1dd2f7ee1#4490
deps:
[email protected]236e3b403#4490
deps:
[email protected](@wraithgar)
10e1326d2#4490
deps:
[email protected]v8.5.2Compare Source
Bug Fixes
9bdd1ace8#4300
fix(arborist): use full location as tracker key when inflating
(@lukekarrys) (@kirtangajjar)
c9ff797e8#4457
fix: remove html comments from man entries
(@wraithgar)
f4c5f0e52fix(arborist): fix unescaped periods (#4462)
(@lukekarrys)
c608512ed#4468
fix: ignore integrity values for git dependencies
(@lukekarrys)
Documentation
e83e5c9ba#4435
docs: clarify npm init @latest behavior
(@wraithgar)
d8fa9fa5e#4436
docs: explain $INIT_CWD on using scripts page
(@wraithgar)
6b68c1aaa#4450
docs: auto-generate npm usage for each command
(@manekinekko)
Dependencies
d58e4442bdeps
@npmcli/[email protected]77399cb98deps:
[email protected]9633752cddeps:
[email protected]938750581deps:
[email protected]2c86feaf1deps:
[email protected]1dab29805deps:
[email protected]cf273f1cfdeps:
[email protected]8b1d9636adeps:
[email protected]67aed0542deps:
[email protected]8b26a6db1deps:
[email protected]0b2fa7feddeps:
[email protected]2646d199fdeps:
[email protected]5b29666e5#4459
deps:
[email protected] and dedupe vulnerable depsv8.5.1Compare Source
Dependencies
54cda9697#4410
fix(arborist): do not audit in offline mode
(@mohd-akram)
fb13bdaf1#4403
deps:
@npmcli/[email protected]702801002#4415
deps:
[email protected]88bab3540#4416
deps:
[email protected]Documentation
20378c67c#4423
docs: update documentation for ping
(@fhinkel)
408d2fc15#4426
docs: update workspaces guide for consistency
(@bnb)
9275856eb#4424
docs: update usage example for npm pkg
(@manekinekko)
20c83fae7#4428
docs: update docs for npm install
(@manekinekko)
v8.5.0Compare Source
Features
0cc9d4c51#4372
feat(deps):
@npmcli/[email protected] - introduce automatic workspace roots(@nlf)
Bug Fixes
fb6e2ddf9#4386
fix(log): pass in logger to more external modules
(@wraithgar)
0e231d4a4#4389
fix(pack): let libnpmpack take care of file writes
(@nlf)
e2f1f7b04#4389
fix(publish): pass dryRun: true to libnpmpack so it doesnt write a tarball
(@nlf)
2937b43d4#4389
fix(config): add pack-destination flattener
(@nlf)
Documentation
b836d596f#4384
docs: add cross-references between npx and npm exec
(@Delapouite)
f3fbeea5a#4388
docs: add --save-bundle to --save usage output
(@wraithgar)
Dependencies
8732f393edeps:
@npmcli/[email protected]2ba09cc0d#4371
fix(arborist): check if a spec is a workspace before fetching a manifest, closes #3637
(@nlf)
e631faf7b#4387
fix(arborist): save bundleDependencies to package.json when reifying
(@wraithgar)
d3a7c15e1deps:
[email protected]4884821f6#4389
feat(libnpmpack): write tarball file when dryRun === false
(@nlf)
ab926995e#4393
deps:
[email protected]1c0d0699c#4394
deps:
[email protected]3c33a5842#4400
deps:
[email protected]v8.4.1Compare Source
Bug Fixes
1b9338554#4359
fix(log): pass in logger to external modules
(@wraithgar)
457e0ae61#4363
fix(ci): lock file validation
(@ruyadorno)
c0519edc1#4364
fix(ci): should not use package-lock config
(@ruyadorno)
ebb428375#4365
fix(outdated): parse aliased modules
(@ruyadorno)
Documentation
0b0a7cc76#4361
docs: bundleDependencies can be a boolean.
(@forty)
Dependencies
3d41447b9#4353
deps:
[email protected]dc1a0573a#4353
deps:
[email protected]adcefef6b#4353
deps:
[email protected]d7e2499e0#4353
deps:
[email protected]f0f307140#4353
deps:
@npmcli/[email protected]1cb107d33#4353
deps:
[email protected]e198ac0d1#4354
deps:
cli-table3@​0.6.15a84e6515#4355
deps:
[email protected]v8.4.0Compare Source
Features
fbe48a840#4307
feat(arborist): add named updates validation
(@ruyadorno)
Bug Fixes
1f853f8bf#4306
fix(arborist): load actual tree on named updates
(@ruyadorno)
90c384ccc#4326
fix(logout): require proper auth.js from npm-registry-fetch
(@wraithgar)
fabcf431a#4327
fix(arborist): correctly load overrides on workspace edges, closes #4205
(@nlf)
8c3b143ca#4258
fix(arborist): shrinkwrap throws when trying to read a folder without permissions
(@Linkgoron)
b51b29c56#4334
fix(arborist): update save exact
(@ruyadorno)
Dependencies
8558527c7#4333
deps:
[email protected]1bfc507f2#4326
deps:
[email protected]52c9608e7#4326
deps:
[email protected]2bbeedfeb#4326
deps:
[email protected]9652d685bchore(release):
@npmcli/[email protected](@wraithgar)
0ee4927d2chore(release):
[email protected](@wraithgar)
6c0dc1ffbchore(release):
[email protected](@wraithgar)
41b8f7b6fchore(release):
[email protected](@wraithgar)
433e6aafbchore(release):
[email protected](@wraithgar)
6654b6efechore(release):
[email protected](@wraithgar)
3423a9804chore(release):
[email protected](@wraithgar)
fb03e485dchore(release):
[email protected](@wraithgar)
v8.3.2Compare Source
Bug Fixes
cfd59b8c8#4223
fix: npm update --save
(@ruyadorno)
510f0ecbc#4218
fix(arborist): ensure indentation is preserved
(@ljharb)
c99c2151a#4230
fix(arborist): prioritize valid workspace nodes
(@nlf)
14a3d9500#4265
fix: resolve workspace paths from cwd when possible
(@nlf)
Dependencies
2ef9f9847#4254
deps:
[email protected] [email protected]v8.3.1Compare Source
Bug Fixes
2ac540b0cfix(unpublish): Show warning on unpublish command when last version (#4191)
(@ebsaral)
Dependencies
da80d579d#4211
deps:
[email protected]5a87d190f#4228
deps:
@npmcli/[email protected]1f0d1370fchore(release):
@npmcli/[email protected]3cfae3840#4181
feat(arborist) add
toJSON/toStringmethods to get shrinkwrap contents without saving(@ljharb)
Chores
d72650457chore: Bring in all libnpm modules + arborist as workspaces (#4166)
(@fritzy)
v8.3.0Compare Source
Features
4b0c29a7c#4116
feat:
@npmcli/[email protected](@nlf)
166d9e144npm/statusboard#416
#4143
feat: output configured registry during publish
(@lukekarrys)
71777be17npm/statusboard#417
#4146
feat: display
publishConfigduringconfig list(@lukekarrys)
Bug Fixes
08c663931#4128
#4134
fix: dont warn on error cleaning individual log files
(@lukekarrys)
e605b128c#4142
fix: redact all private keys from config output
(@lukekarrys)
Documentation
db1885d7f#4092
chore(docs): document overrides
(@nlf)
Dependencies
e1da1fa4b#4141
deps:
@npmcli/[email protected]:[email protected]conflicts
1d8bec566#4144
#3884
deps:
[email protected]v8.2.0Compare Source
Features
6734ba36d#4062
feat: streaming debug logfile
(@lukekarrys)
Bug Fixes
5f4040aa0chore: remove get-project-scope utils
([@Yucel Okcu](https://github.com/Yucel Okcu))
c5c6d1603#4060
fix: add missing scope on flat options
(@yuqu)
47828b766chore: update one-time password prompt
([@Darcy Clarke](https://github.com/Darcy Clarke))
Documentation
fc46a7926#4072
docs: fix typo in
save-peerdescription(@chalkygames123)
2fbf1576f#4081
docs: Fix typo
(@idleberg)
a8bc95f11#4089
docs(workspaces): Fix typo
(@yotamselementor)
31b098ee2#4113
docs: add logging docs
(@darcyclarke)
cbae0fb71#4114
docs: update description about where/when debug log is written
(@lukekarrys)
Dependencies
037f2cc8c#4078
[email protected]0e63df612#4102
@npmcli/[email protected]:v8.1.4Compare Source
BUG FIXES
7887fb3d7#4025
fix: don't try to open file:/// urls
(@wraithgar)
cd6d3a90d#4026
fix: explicitly allow
npm helpto open file:/// man pages(@wraithgar)
72ca4a4e3#4020
#4032
fix: command completion
(@wraithgar)
b78949134#4023
fix(install): command completion with single match
(@wraithgar)
44bfa3787#4065
@npmcli/arborist 4.0.5
--no-workspaces(@fritzy)
DEPENDENCIES
225645420#3995
update to latest eslint and linting rules
(@wraithgar)
203fedf5b#4016
[email protected]:@npmcli/[email protected]@npmcli/[email protected]Also remove an unused script that was failing linting. We don't use the
update-dist-tags script anymore as part of our release process.
(@wraithgar)
7b4aa59b6[email protected]:,[email protected](@isaacs)
08015859c#4049
[email protected]088c11694#4045
[email protected]:v8.1.3Compare Source
BUG FIXES
8ffeb71df#3959
fix: refactor commands
(@wraithgar)
e5bfdaca4#3978
fix: shrinkwrap setting incorrect lockfileVersion
(@lukekarrys)
32ccd3c27#3988
fix: remove usage of unnecessary util.promisify
(@lukekarrys)
1e9c31c4e#3994
fix: npm help on windows
(@wraithgar)
22230ef3d#3987
fix: make prefixed usage errors more consistent
(@lukekarrys)
DEPENDENCIES
ac2fabb86#3990
@npmcli/[email protected]a0d35ff20#3996
@npmcli/[email protected]:v8.1.2Compare Source
BUG FIXES
cb9f43551#3949
allow
--lockfile-versionconfig to be string and coerce to number (@lukekarrys)070901d7a#3943
fix(publish): clean args before logging
(@wraithgar)
DEPENDENCIES
8af94726b#3953
[email protected]38cee94#340
fix: set lockfileVersion from file during reset
d310bd3#339
fix: always set originalLockfileVersion when doing shrinkwrap reset
v8.1.1Compare Source
DEPENDENCIES
51fb83ce9#3921
@npmcli/[email protected]:1d07f2187#3913
[email protected]:v8.1.0Compare Source
FEATURES
24273a862#3890
feat(workspaces): add --include-workspace-root and explicit --no-workspaces
(@fritzy)
d559d6da8#3880
feat(config): Add --lockfile-version config option
(@isaacs)
DEPENDENCIES
ae4bf013d#3883
[email protected]:[email protected]fbc5a3d08#3889
@npmcli/[email protected]b6bc279e5@npmcli/[email protected]0f69d295b#3893
@npmcli/[email protected]DOCUMENTATION
f77932ca1#3861
fix(docs): Update Node support in README
(@gfyoung)
a190f422a#3878
fix(docs): grammar fix
(@XhmikosR)
v8.0.0Compare Source
The purpose of this release is to drop support for old node versions and
to remove support for
require('npm'). There are no other breakingchanges.
BREAKING CHANGES
require('npm')DEPENDENCIES
update to the latest node-gyp
8bd85cdae#3813
[email protected]Configuration
📅 Schedule: "after 10pm every weekday,before 6am every weekday" (UTC).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by WhiteSource Renovate. View repository job log here.