Skip to content

Commit 55ed99d

Browse files
github-actions[bot]github-actions[bot]
authored
chore: release 12.0.0-pre.1
1 parent abf78b3 commit 55ed99d

20 files changed

Lines changed: 206 additions & 44 deletions

‎.release-please-manifest.json‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,15 @@
11
{
2-
".": "12.0.0-pre.0",
3-
"workspaces/arborist": "10.0.0-pre.0",
2+
".": "12.0.0-pre.1",
3+
"workspaces/arborist": "10.0.0-pre.1",
44
"workspaces/libnpmaccess": "10.0.3",
5-
"workspaces/libnpmdiff": "8.1.6-pre.0",
6-
"workspaces/libnpmexec": "10.2.6-pre.0",
7-
"workspaces/libnpmfund": "7.0.20-pre.0",
5+
"workspaces/libnpmdiff": "9.0.0-pre.0",
6+
"workspaces/libnpmexec": "10.3.0-pre.0",
7+
"workspaces/libnpmfund": "7.0.20-pre.1",
88
"workspaces/libnpmorg": "8.0.1",
9-
"workspaces/libnpmpack": "10.0.0-pre.0",
10-
"workspaces/libnpmpublish": "11.2.0-pre.0",
9+
"workspaces/libnpmpack": "10.0.0-pre.1",
10+
"workspaces/libnpmpublish": "12.0.0-pre.0",
1111
"workspaces/libnpmsearch": "9.0.1",
1212
"workspaces/libnpmteam": "8.0.2",
13-
"workspaces/libnpmversion": "9.0.0-pre.0",
14-
"workspaces/config": "11.0.0-pre.0"
13+
"workspaces/libnpmversion": "9.0.0-pre.1",
14+
"workspaces/config": "11.0.0-pre.1"
1515
}

‎CHANGELOG.md‎

Lines changed: 61 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,66 @@
11
# Changelog
22

3+
## [12.0.0-pre.1](https://github.com/npm/cli/compare/v12.0.0-pre.0...v12.0.0-pre.1) (2026-06-11)
4+
### ⚠️ BREAKING CHANGES
5+
* allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
6+
* root \`preinstall\` now runs before dependencies are installed.
7+
* unknown configs in .npmrc, unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning.
8+
### Features
9+
* [`c3e1a71`](https://github.com/npm/cli/commit/c3e1a7175c6475553e212e2f7671bd31bfe07aba) [#9532](https://github.com/npm/cli/pull/9532) add min-release-age-exclude config (@JamieMagee, @caseyjhol)
10+
* [`5cd5150`](https://github.com/npm/cli/commit/5cd5150d3e85dcf5d246e7e5c9de216c2ff849db) [#9424](https://github.com/npm/cli/pull/9424) default-deny install scripts (allowScripts opt-in) [v12] (@JamieMagee)
11+
* [`64e3f79`](https://github.com/npm/cli/commit/64e3f798344e66f4c500636cb8aec5c8111a1fe9) [#9480](https://github.com/npm/cli/pull/9480) allowScripts tooling and inBundle hardening (#9480) (@JamieMagee)
12+
* [`caa3295`](https://github.com/npm/cli/commit/caa329568d32587e53f6e098f43b550dd2685034) [#9466](https://github.com/npm/cli/pull/9466) default allow-git and allow-remote to none (@owlstronaut)
13+
* [`f2e4a28`](https://github.com/npm/cli/commit/f2e4a285ec5ed43055462a47db6d330758a16e64) [#9351](https://github.com/npm/cli/pull/9351) add a global npmignore file (#9351) (@ljharb)
14+
* [`c9be2d1`](https://github.com/npm/cli/commit/c9be2d1efadd353e743bcebd52faaa5aa64e2fc0) [#9153](https://github.com/npm/cli/pull/9153) publish --access=private alias for restricted (#9153) (@reggi, @Copilot)
15+
* [`7068d42`](https://github.com/npm/cli/commit/7068d4286eb446fdb0ded08d15d7b5c3883d80f5) [#9360](https://github.com/npm/cli/pull/9360) Phase 1 of `allowScripts` opt-in install-script policy (#9360) (@JamieMagee)
16+
* [`979518d`](https://github.com/npm/cli/commit/979518dd198b9f2beb788c6c3cdcd1e055b03d22) [#9276](https://github.com/npm/cli/pull/9276) error on unknown configs, flags, and abbreviations (#9276) (@owlstronaut)
17+
### Bug Fixes
18+
* [`abf78b3`](https://github.com/npm/cli/commit/abf78b3c143a1825de910c0e401d01c0d3f5199b) [#9540](https://github.com/npm/cli/pull/9540) match dotted and versioned args in approve-scripts/deny-scripts (@owlstronaut)
19+
* [`f6270d1`](https://github.com/npm/cli/commit/f6270d1069dcf60b4798f83eb87b6580162902e6) [#9531](https://github.com/npm/cli/pull/9531) emit valid JSON from approve-scripts/deny-scripts --json (@owlstronaut)
20+
* [`0e55f97`](https://github.com/npm/cli/commit/0e55f97deea0f2395196dd572fac5fd7c9fbee38) [#9492](https://github.com/npm/cli/pull/9492) pass script-shell to publish lifecycle hooks (@Zelys-DFKH)
21+
* [`2cbb13b`](https://github.com/npm/cli/commit/2cbb13b77edd9410704eac6f30ffea30a18c7046) [#9490](https://github.com/npm/cli/pull/9490) recognize allowScripts for local link targets (#9490) (@cyphercodes, @cyphercodes)
22+
* [`bf623e0`](https://github.com/npm/cli/commit/bf623e0a9ea568a47b777c563e48a097cb12e442) [#9473](https://github.com/npm/cli/pull/9473) validate registry path for allow-remote tarballs (@Abhinav-143x)
23+
* [`6be874b`](https://github.com/npm/cli/commit/6be874b88174e87f004b31cbbdda54d0d50cb399) [#9479](https://github.com/npm/cli/pull/9479) list pending scripts in approve-scripts when ignore-scripts is set (#9479) (@JamieMagee)
24+
* [`6603b2c`](https://github.com/npm/cli/commit/6603b2c5fdbb5d4ec504199b2f10b5b378168016) [#9469](https://github.com/npm/cli/pull/9469) suggest --allow-scripts for global installs in unreviewed-scripts warnings (#9469) (@JamieMagee)
25+
* [`fe820b6`](https://github.com/npm/cli/commit/fe820b6f2bbac9fdb3c8937d6d5bf6544bac55fc) [#9442](https://github.com/npm/cli/pull/9442) invalid issue template YAML indentation (#9442) (@fallintoplace)
26+
* [`fe41ae7`](https://github.com/npm/cli/commit/fe41ae7c6b38e7e9957b646bf379e2b5daae03f9) [#9404](https://github.com/npm/cli/pull/9404) show full parent command path in subcommand usage errors (#9404) (@shaanmajid)
27+
* [`75bf7de`](https://github.com/npm/cli/commit/75bf7decec60da0e68296356b8da82d3eb18f0bc) [#9456](https://github.com/npm/cli/pull/9456) respect allowScripts policy in prune, dedupe, uninstall, audit fix, and link (@JamieMagee)
28+
* [`6efac6e`](https://github.com/npm/cli/commit/6efac6ead98af50c5a40fc45cb657bbee496a584) [#9453](https://github.com/npm/cli/pull/9453) config: clarify --all help so it's accurate for approve-scripts and deny-scripts (@JamieMagee)
29+
* [`b97edc0`](https://github.com/npm/cli/commit/b97edc0193017800ecb1f26d212977729ca19739) [#9430](https://github.com/npm/cli/pull/9430) audit: don't apply min-release-age before filter when verifying installed signatures (@JamieMagee)
30+
* [`080e3b2`](https://github.com/npm/cli/commit/080e3b29e69d35d7b0f4823a9ac7ab4e1e4d1af6) [#9425](https://github.com/npm/cli/pull/9425) block forbidden keys in Queryable setter to prevent prototype pollution (@12122J, @claude)
31+
* [`c5292fa`](https://github.com/npm/cli/commit/c5292fa8a09a56b25394d393faf21e47ffb096c0) [#9422](https://github.com/npm/cli/pull/9422) use prerelease strategy without a bug (@owlstronaut)
32+
* [`33aebaa`](https://github.com/npm/cli/commit/33aebaa58541ac0af3882cc0b56f09b1b676740a) [#9410](https://github.com/npm/cli/pull/9410) fix typo of fullMetadata (@owlstronaut)
33+
* [`2a03860`](https://github.com/npm/cli/commit/2a03860fcafe92b22770fc554b25994b29bacbdb) [#9267](https://github.com/npm/cli/pull/9267) run root preinstall before reify (@owlstronaut)
34+
* [`c0fc549`](https://github.com/npm/cli/commit/c0fc54935af8e17a3a96cbdeac52bb4c597803b6) [#9372](https://github.com/npm/cli/pull/9372) config: pause progress spinner during interactive editor spawn (#9372) (@Zelys-DFKH, @claude)
35+
### Documentation
36+
* [`357e8cd`](https://github.com/npm/cli/commit/357e8cdcb8f44326a50cee2539219a91d8bfbbe5) [#9520](https://github.com/npm/cli/pull/9520) approve-scripts only throws EGLOBAL when run with -g (@JamieMagee)
37+
* [`bcf01c6`](https://github.com/npm/cli/commit/bcf01c6b1889ac97cf0f8a339da298a64f0767ef) [#9505](https://github.com/npm/cli/pull/9505) clarify package.json override value specs (#9505) (@ded-furby)
38+
* [`455aa4a`](https://github.com/npm/cli/commit/455aa4a17b92a77ffbd474c4dc17a16f71cfe6b1) [#9401](https://github.com/npm/cli/pull/9401) use the latest version for global update and outdated's `wanted` (#9401) (@liangmiQwQ)
39+
* [`aac80dc`](https://github.com/npm/cli/commit/aac80dc00748863ed4bdec90a49e33b0d9d3ed93) [#9470](https://github.com/npm/cli/pull/9470) update minimum npm required for npm trust (@meeech)
40+
* [`d124c08`](https://github.com/npm/cli/commit/d124c0858da0b138cda2addcb0987b063ca86a47) [#9385](https://github.com/npm/cli/pull/9385) Document `npm_old_version` and `npm_new_version` environment variables (#9385) (@36degrees)
41+
### Dependencies
42+
* [`d28783e`](https://github.com/npm/cli/commit/d28783e3f00feecf4ca76b497e80ffd281af1655) [#9420](https://github.com/npm/cli/pull/9420) `undici@6.26.0`
43+
* [`7f6c6ef`](https://github.com/npm/cli/commit/7f6c6ef49023286bed47a334cc2bd0064cb8ec05) [#9420](https://github.com/npm/cli/pull/9420) `sigstore@4.1.1`
44+
* [`ee61b6e`](https://github.com/npm/cli/commit/ee61b6e8279b1d26d28a47613d66a9deb5c06529) [#9420](https://github.com/npm/cli/pull/9420) `lru-cache@11.5.1`
45+
* [`d5ddef2`](https://github.com/npm/cli/commit/d5ddef2571b5b26dfade31eb040dbd4a096aeed8) [#9420](https://github.com/npm/cli/pull/9420) `@sigstore/verify@3.1.1`
46+
* [`11e7ac7`](https://github.com/npm/cli/commit/11e7ac72c3ea0490f8d5edfb4bd5a60729d25b66) [#9420](https://github.com/npm/cli/pull/9420) `@sigstore/core@3.2.1`
47+
* [`11cd66e`](https://github.com/npm/cli/commit/11cd66e10490af0ef46ceeb5e8764a855580a2de) [#9420](https://github.com/npm/cli/pull/9420) `@npmcli/agent@4.0.2`
48+
* [`8be4c04`](https://github.com/npm/cli/commit/8be4c046fbbbb8ede02a288b727fcbf7470956fb) [#9420](https://github.com/npm/cli/pull/9420) `semver@7.8.1`
49+
* [`577d61d`](https://github.com/npm/cli/commit/577d61da646833994ecfda8b2f1dc993ec9b58d1) [#9420](https://github.com/npm/cli/pull/9420) `make-fetch-happen@15.0.6`
50+
### Chores
51+
* [`4e2496a`](https://github.com/npm/cli/commit/4e2496a6a7ae015483dd9ff9072830c939baddff) [#9513](https://github.com/npm/cli/pull/9513) update issue templates - better language (@owlstronaut)
52+
* [`7a997ac`](https://github.com/npm/cli/commit/7a997ac48ead642efcbb48fc5da5d99f0c850389) [#9512](https://github.com/npm/cli/pull/9512) update issue templates (#9512) (@owlstronaut)
53+
* [`da63c79`](https://github.com/npm/cli/commit/da63c79be758fd9d3faa9f5edf962219c805c579) [#9420](https://github.com/npm/cli/pull/9420) dev dependency updates (@owlstronaut)
54+
* [`5fc9bc0`](https://github.com/npm/cli/commit/5fc9bc0f202aadedd7b123394560047671afca6b) [#9393](https://github.com/npm/cli/pull/9393) sanitize newlines in flags table default and type values (#9393) (@reggi, @Copilot)
55+
* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.0-pre.1): `@npmcli/arborist@10.0.0-pre.1`
56+
* [workspace](https://github.com/npm/cli/releases/tag/config-v11.0.0-pre.1): `@npmcli/config@11.0.0-pre.1`
57+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.0-pre.0): `libnpmdiff@9.0.0-pre.0`
58+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v10.3.0-pre.0): `libnpmexec@10.3.0-pre.0`
59+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.20-pre.1): `libnpmfund@7.0.20-pre.1`
60+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.0-pre.1): `libnpmpack@10.0.0-pre.1`
61+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmpublish-v12.0.0-pre.0): `libnpmpublish@12.0.0-pre.0`
62+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmversion-v9.0.0-pre.1): `libnpmversion@9.0.0-pre.1`
63+
364
## [12.0.0-pre.0.0](https://github.com/npm/cli/compare/v11.12.1...v12.0.0-pre.0.0) (2026-05-20)
465
### ⚠️ BREAKING CHANGES
566
* npm view --json now always returns an array.

‎package-lock.json‎

Lines changed: 14 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
{
22
"name": "npm",
3-
"version": "12.0.0-pre.0",
3+
"version": "12.0.0-pre.1",
44
"lockfileVersion": 3,
55
"requires": true,
66
"packages": {
77
"": {
88
"name": "npm",
9-
"version": "12.0.0-pre.0",
9+
"version": "12.0.0-pre.1",
1010
"bundleDependencies": [
1111
"@isaacs/string-locale-compare",
1212
"@npmcli/arborist",
@@ -14689,7 +14689,7 @@
1468914689
},
1469014690
"workspaces/arborist": {
1469114691
"name": "@npmcli/arborist",
14692-
"version": "10.0.0-pre.0",
14692+
"version": "10.0.0-pre.1",
1469314693
"license": "ISC",
1469414694
"dependencies": {
1469514695
"@gar/promise-retry": "^1.0.0",
@@ -14747,7 +14747,7 @@
1474714747
},
1474814748
"workspaces/config": {
1474914749
"name": "@npmcli/config",
14750-
"version": "11.0.0-pre.0",
14750+
"version": "11.0.0-pre.1",
1475114751
"license": "ISC",
1475214752
"dependencies": {
1475314753
"@npmcli/map-workspaces": "^5.0.0",
@@ -14787,10 +14787,10 @@
1478714787
}
1478814788
},
1478914789
"workspaces/libnpmdiff": {
14790-
"version": "8.1.6-pre.0",
14790+
"version": "9.0.0-pre.0",
1479114791
"license": "ISC",
1479214792
"dependencies": {
14793-
"@npmcli/arborist": "^10.0.0-pre.0",
14793+
"@npmcli/arborist": "^10.0.0-pre.1",
1479414794
"@npmcli/installed-package-contents": "^4.0.0",
1479514795
"binary-extensions": "^3.0.0",
1479614796
"diff": "^8.0.2",
@@ -14809,11 +14809,11 @@
1480914809
}
1481014810
},
1481114811
"workspaces/libnpmexec": {
14812-
"version": "10.2.6-pre.0",
14812+
"version": "10.3.0-pre.0",
1481314813
"license": "ISC",
1481414814
"dependencies": {
1481514815
"@gar/promise-retry": "^1.0.0",
14816-
"@npmcli/arborist": "^10.0.0-pre.0",
14816+
"@npmcli/arborist": "^10.0.0-pre.1",
1481714817
"@npmcli/package-json": "^7.0.0",
1481814818
"@npmcli/run-script": "^10.0.0",
1481914819
"ci-info": "^4.0.0",
@@ -14840,10 +14840,10 @@
1484014840
}
1484114841
},
1484214842
"workspaces/libnpmfund": {
14843-
"version": "7.0.20-pre.0",
14843+
"version": "7.0.20-pre.1",
1484414844
"license": "ISC",
1484514845
"dependencies": {
14846-
"@npmcli/arborist": "^10.0.0-pre.0"
14846+
"@npmcli/arborist": "^10.0.0-pre.1"
1484714847
},
1484814848
"devDependencies": {
1484914849
"@npmcli/eslint-config": "^5.0.1",
@@ -14873,10 +14873,10 @@
1487314873
}
1487414874
},
1487514875
"workspaces/libnpmpack": {
14876-
"version": "10.0.0-pre.0",
14876+
"version": "10.0.0-pre.1",
1487714877
"license": "ISC",
1487814878
"dependencies": {
14879-
"@npmcli/arborist": "^10.0.0-pre.0",
14879+
"@npmcli/arborist": "^10.0.0-pre.1",
1488014880
"@npmcli/run-script": "^10.0.0",
1488114881
"npm-package-arg": "^13.0.0",
1488214882
"pacote": "^21.0.2"
@@ -14893,7 +14893,7 @@
1489314893
}
1489414894
},
1489514895
"workspaces/libnpmpublish": {
14896-
"version": "11.2.0-pre.0",
14896+
"version": "12.0.0-pre.0",
1489714897
"license": "ISC",
1489814898
"dependencies": {
1489914899
"@npmcli/package-json": "^7.0.0",
@@ -14950,7 +14950,7 @@
1495014950
}
1495114951
},
1495214952
"workspaces/libnpmversion": {
14953-
"version": "9.0.0-pre.0",
14953+
"version": "9.0.0-pre.1",
1495414954
"license": "ISC",
1495514955
"dependencies": {
1495614956
"@npmcli/git": "^7.0.0",

‎package.json‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"version": "12.0.0-pre.0",
2+
"version": "12.0.0-pre.1",
33
"name": "npm",
44
"description": "a package manager for JavaScript",
55
"workspaces": [
@@ -48,8 +48,8 @@
4848
},
4949
"dependencies": {
5050
"@isaacs/string-locale-compare": "^1.1.0",
51-
"@npmcli/arborist": "^10.0.0-pre.0",
52-
"@npmcli/config": "^11.0.0-pre.0",
51+
"@npmcli/arborist": "^10.0.0-pre.1",
52+
"@npmcli/config": "^11.0.0-pre.1",
5353
"@npmcli/fs": "^5.0.0",
5454
"@npmcli/map-workspaces": "^5.0.3",
5555
"@npmcli/metavuln-calculator": "^9.0.3",
@@ -73,15 +73,15 @@
7373
"is-cidr": "^6.0.4",
7474
"json-parse-even-better-errors": "^5.0.0",
7575
"libnpmaccess": "^10.0.3",
76-
"libnpmdiff": "^8.1.6-pre.0",
77-
"libnpmexec": "^10.2.6-pre.0",
78-
"libnpmfund": "^7.0.20-pre.0",
76+
"libnpmdiff": "^9.0.0-pre.0",
77+
"libnpmexec": "^10.3.0-pre.0",
78+
"libnpmfund": "^7.0.20-pre.1",
7979
"libnpmorg": "^8.0.1",
80-
"libnpmpack": "^10.0.0-pre.0",
81-
"libnpmpublish": "^11.2.0-pre.0",
80+
"libnpmpack": "^10.0.0-pre.1",
81+
"libnpmpublish": "^12.0.0-pre.0",
8282
"libnpmsearch": "^9.0.1",
8383
"libnpmteam": "^8.0.2",
84-
"libnpmversion": "^9.0.0-pre.0",
84+
"libnpmversion": "^9.0.0-pre.1",
8585
"make-fetch-happen": "^15.0.6",
8686
"minimatch": "^10.2.5",
8787
"minipass": "^7.1.3",

‎workspaces/arborist/CHANGELOG.md‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,26 @@
11
# Changelog
22

3+
## [10.0.0-pre.1](https://github.com/npm/cli/compare/arborist-v10.0.0-pre.0...arborist-v10.0.0-pre.1) (2026-06-11)
4+
### Features
5+
* [`c3e1a71`](https://github.com/npm/cli/commit/c3e1a7175c6475553e212e2f7671bd31bfe07aba) [#9532](https://github.com/npm/cli/pull/9532) add min-release-age-exclude config (@JamieMagee, @caseyjhol)
6+
* [`5cd5150`](https://github.com/npm/cli/commit/5cd5150d3e85dcf5d246e7e5c9de216c2ff849db) [#9424](https://github.com/npm/cli/pull/9424) default-deny install scripts (allowScripts opt-in) [v12] (@JamieMagee)
7+
* [`64e3f79`](https://github.com/npm/cli/commit/64e3f798344e66f4c500636cb8aec5c8111a1fe9) [#9480](https://github.com/npm/cli/pull/9480) allowScripts tooling and inBundle hardening (#9480) (@JamieMagee)
8+
* [`7068d42`](https://github.com/npm/cli/commit/7068d4286eb446fdb0ded08d15d7b5c3883d80f5) [#9360](https://github.com/npm/cli/pull/9360) Phase 1 of `allowScripts` opt-in install-script policy (#9360) (@JamieMagee)
9+
### Bug Fixes
10+
* [`fc6268a`](https://github.com/npm/cli/commit/fc6268ab7fa4ce1dcaefd6cd470a1f73eb192565) [#9523](https://github.com/npm/cli/pull/9523) keep nested file: deps and re-resolve changed git refs (#9523) (@owlstronaut)
11+
* [`34dbdf5`](https://github.com/npm/cli/commit/34dbdf51ce4877055fe46751c15c4a445694256f) [#9525](https://github.com/npm/cli/pull/9525) arborist: enforce allowScripts for file:/link: dep scripts (@JamieMagee)
12+
* [`d70e116`](https://github.com/npm/cli/commit/d70e116f01af63bac49ad611cd63ac7709bb0bc5) [#9510](https://github.com/npm/cli/pull/9510) arborist: honor allow-remote=root for root-direct remote tarballs (#9510) (@manzoorwanijk)
13+
* [`4bcba54`](https://github.com/npm/cli/commit/4bcba546420119ebf9ee73e903b00b757f643fdf) [#9495](https://github.com/npm/cli/pull/9495) arborist: apply registry-tarball allow-remote exemption in linked strategy (#9495) (@manzoorwanijk)
14+
* [`2cbb13b`](https://github.com/npm/cli/commit/2cbb13b77edd9410704eac6f30ffea30a18c7046) [#9490](https://github.com/npm/cli/pull/9490) recognize allowScripts for local link targets (#9490) (@cyphercodes, @cyphercodes)
15+
* [`bf623e0`](https://github.com/npm/cli/commit/bf623e0a9ea568a47b777c563e48a097cb12e442) [#9473](https://github.com/npm/cli/pull/9473) validate registry path for allow-remote tarballs (@Abhinav-143x)
16+
* [`a105799`](https://github.com/npm/cli/commit/a10579959a5ed83d459f4c6d2f039ef5b62b4ff1) [#9461](https://github.com/npm/cli/pull/9461) arborist: link meta-only optional peers in linked strategy (@manzoorwanijk)
17+
* [`275bc69`](https://github.com/npm/cli/commit/275bc6934cc2d7c645e2c18dc2c12dc75d148e61) [#9441](https://github.com/npm/cli/pull/9441) arborist: clean up orphaned scoped store entries in linked strategy (@manzoorwanijk)
18+
* [`9f3c97f`](https://github.com/npm/cli/commit/9f3c97f83443ee00b9ca6beaf3e8cec95d3199ad) [#9452](https://github.com/npm/cli/pull/9452) sanitize package name in linked-strategy path construction (@owlstronaut)
19+
* [`a81f2f8`](https://github.com/npm/cli/commit/a81f2f8f4e89c202e57c32b60ee9d27020b49be0) [#9428](https://github.com/npm/cli/pull/9428) arborist: read install scripts from disk on lockfile installs instead of a sentinel (@JamieMagee)
20+
* [`c5292fa`](https://github.com/npm/cli/commit/c5292fa8a09a56b25394d393faf21e47ffb096c0) [#9422](https://github.com/npm/cli/pull/9422) use prerelease strategy without a bug (@owlstronaut)
21+
* [`dac7ff6`](https://github.com/npm/cli/commit/dac7ff6d3d62422bb8dad136fcb8f48e99a4594a) [#9399](https://github.com/npm/cli/pull/9399) arborist: drop self-link materialization for undeclared workspaces (#9399) (@manzoorwanijk)
22+
* [`b77850e`](https://github.com/npm/cli/commit/b77850e550a15c6205fdafc9e3843323b7135923) [#9395](https://github.com/npm/cli/pull/9395) skip hidden lockfile save on dry run (#9395) (@puneetdixit200, @puneetdixit200)
23+
324
## [10.0.0-pre.0.0](https://github.com/npm/cli/compare/arborist-v9.4.2...arborist-v10.0.0-pre.0.0) (2026-05-20)
425
### ⚠️ BREAKING CHANGES
526
* `npm shrinkwrap` is removed, the `shrinkwrap` config alias is removed, and `npm-shrinkwrap.json` is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root `npm-shrinkwrap.json` to `package-lock.json`; use `bundleDependencies` if you need to ship a locked dependency tree.

‎workspaces/arborist/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@npmcli/arborist",
3-
"version": "10.0.0-pre.0",
3+
"version": "10.0.0-pre.1",
44
"description": "Manage node_modules trees",
55
"dependencies": {
66
"@gar/promise-retry": "^1.0.0",

0 commit comments

Comments
 (0)