Update npm to v6.14.18 #7
Open
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
6.4.1->6.14.18Release Notes
npm/cli (npm)
v6.14.18Compare Source
6.14.18 (2022-12-21)
DEPENDENCIES
f55bd65da[email protected]cd4894696[email protected]023d7e96b[email protected]dd2811c0b[email protected]:3e21b6ebd9[email protected]2bec581c6[email protected]273485157[email protected]720f8ae5e[email protected]5f1200e33[email protected]:058b74a38b[email protected]4b609655f[email protected]14c7a1a85[email protected]06d9cefc4[email protected]1d2da355c[email protected]22eda3a26[email protected]b77a7f1b0[email protected]de37398af[email protected]196650baa[email protected]3218c16b5[email protected]0f5d57919[email protected]43ed5c23b[email protected]31b51c564[email protected]209a79d1f[email protected]4778a8d95[email protected]8b357e558[email protected]d3e7eed13[email protected]v6.14.17Compare Source
6.14.17 (2022-04-28)
DEPENDENCIES
a869ec48b[email protected]a869ec48b[email protected]v6.14.16Compare Source
6.14.16 (2022-01-19)
CHORE
0afe4f12fupdate one-time password prompt (@ruyadorno)DEPENDENCIES
2c534f801[email protected]v6.14.15Compare Source
6.14.15 (2021-08-23)
DEPENDENCIES
8160e6e4b[email protected]3079f5038[email protected]v6.14.14Compare Source
6.14.14 (2021-07-27)
DEPENDENCIES
4627c0670[email protected]v6.14.13Compare Source
6.14.13 (2021-04-08)
DEPENDENCIES
285ab3f65[email protected]63b5c56c5[email protected]v6.14.12Compare Source
6.14.12 (2021-03-25)
DEPENDENCIES
e47654048#2737 Update y18n to fix CVE-2020-7774 (@vecerek)v6.14.11Compare Source
6.14.11 (2021-01-07)
DEPENDENCIES
19108ca5b[email protected]7a0574074[email protected]- devDepDOCUMENTATION
1d235b230#1881 docs: update link to CLI issuesTESTING
c0f8ce8fe#1751 add s390x, ppc64 and ppc64el in supported cpu listv6.14.10Compare Source
6.14.10 (2020-12-18)
DEPENDENCIES
906d647e1[email protected]#36445addressingGHSL-2020-145v6.14.9Compare Source
6.14.9 (2020-11-20)
BUG FIXES
4a91e48aafix: docs generation breaking buildsDEPENDDENCIES
ab80a7cf0[email protected]6b2ab9d53[email protected]v6.14.8Compare Source
6.14.8 (2020-08-17)
BUG FIXES
9262e8c88#1575 npm install --dev deprecation message (@sandratatarevicova)765cfe0bc#1658 remove unused broken require (@aduh95)4e28de79a#1663 Do not send user secret in the referer header (@assapir)DOCUMENTATION
8abdf30c9#1572 docs: add missing metadata in semver page (@tripu)8cedcca46#1614 Node-gyp supports both Python and legacy Python (@cclauss)DEPENDENCIES
a303b75fd[email protected]c48600832[email protected]a6e9fc4df[email protected]v6.14.7Compare Source
BUG FIXES
de5108836#784 npm explore spawn shell correctly (@jasisk)36e6c01d3git tag handling regression on shrinkwrap (@claudiahdz)1961c9369#288 Fix package id in shrinkwrap lifecycle step output (@bz2)87888892a#1009 gracefully handle error during npm install (@danielleadams)6fe2bdc25#1547 npm ls --parseable --long output (@ruyadorno)DEPENDENCIES
2d78481c7update mkdirp on tacks (@claudiahdz)4e129d105uninstall npm-registry-couchapp (@claudiahdz)8e1869e27update marked dev dep (@claudiahdz)6a6151f37[email protected](@claudiahdz)dc21422eb[email protected](@claudiahdz)d341f88ce[email protected](@claudiahdz)3e168d49b[email protected](@claudiahdz)6ae942a51[email protected](@claudiahdz)6a35e3dee[email protected](@claudiahdz)v6.14.6Compare Source
6.14.6 (2020-07-07)
BUG FIXES
a9857b8f6chore: remove auth info from logs (@claudiahdz)b7ad77598#1416 fix: wrongnpm doctorcommand result (@vanishcode)DEPENDENCIES
94eca6377[email protected](@claudiahdz)c49b6ae28#1418[email protected](@kemitchell)v6.14.5Compare Source
6.14.5 (2020-05-04)
BUG FIXES
33ec41f18#758 fix: relativize file links when inflating shrinkwrap (@jsnajdr)94ed456df#1162 fix: npm init help output (@mum-never-proud)DEPENDENCIES
5587ac01f[email protected]fc5d94c39fix: removed default timeout07a4d8884[email protected]8228d1f2e[email protected]e6d208317[email protected]v6.14.4Compare Source
6.14.4 (2020-03-25)
DEPENDENCIES
136832dca[email protected][email protected]transitive dep to resolve security issue9c554fd8c[email protected][email protected][email protected][email protected][email protected][email protected][email protected]8bf99b2b5#1053 deps: updates term-size to use signed binaryv6.14.3Compare Source
6.14.3 (2020-03-19)
DOCUMENTATION
4ad221487#1020 docs(teams): updated team docs to reflect MFA workflow (@blkdm0n)4a31a4ba2#1034 docs: cleanup (@ruyadorno)0eac801cd#1013 docs: fix links to cli commands (@alenros)7d8e5b99c#755 docs: correction tonpm update -gbehaviour (@johnkennedy9147)DEPENDENCIES
e11167646[email protected]c5b97d17dfix: bumpminimistdep to resolve security issue (@isaacs)c50d679c6[email protected]a2de99ff9[email protected]217debeb9[email protected]v6.14.2Compare Source
6.14.2 (2020-03-03)
DOCUMENTATION
f9248c0be#730 chore(docs): update unpublish docs & policy reference (@nomadtechie, @mikemimik)DEPENDENCIES
909cc3918[email protected](@darcyclarke)5038b1891fix: regression in old node versions w/ respect to url.URL implmentation9204ffa58[email protected](@isaacs)6bcf0860afix: treat non-http/https login urls as invalid0365d39bd[email protected](@isaacs)dab030536[email protected](@rvagg)v6.14.1Compare Source
6.14.1 (2020-02-26)
303e5c11e[email protected]Fixes a regression where scp-style git urls are passed to the WhatWG URL parser, which does not handle them properly. (@isaacs)v6.14.0Compare Source
6.14.0 (2020-02-25)
FEATURES
30f170877#731 add support for multiple funding sources (@ljharb & @ruyadorno)BUG FIXES
55916b130#508 fix: checknpm.configbefore accessing its members (@kaiyoma)7d0cd65b2#733 fix: access grant with unscoped packages (@netanelgilad)28c3d40d6,0769c5b20#945, #697 fix: allow new major versions of node to be automatically considered "supported" (@isaacs, @ljharb)DEPENDENCIES
6f39e93[email protected](@darcyclarke)f14b594ee[email protected](@isaacs)77044150b[email protected](@isaacs)1d112461a[email protected](@isaacs)ba8b4fefix: always bypass cache when ?write=truea47fed760[email protected]3bbf2d6fix: babel's "loose mode" class transform enbrittles BufferList (@ljharb)DOCUMENTATION
284c1c055,fbb5f0e50#729 update lifecycle hooks docs(@seanhealy, @mikemimik)
1c272832d#787 fix: trademarks typo (@dnicolson)f6ff41776#936 fix: postinstall example (@ajaymathur)373224b16#939 fix: bad links in publish docs (@vit100)MISCELLANEOUS
85c79636d#736 add script to update dist-tags (@mikemimik)v6.13.7Compare Source
6.13.7 (2020-01-28)
BUG FIXES
7dbb91438#655 Update CI detection cases (@isaacs)DEPENDENCIES
0fb1296c7[email protected](@mikemimik)c9b69d569[email protected](@mikemimik)e8dbaf452[email protected](@mikemimik)v6.13.6Compare Source
6.13.6 (2020-01-09)
DEPENDENCIES
6dba897a1[email protected]:d2f4176fix(git): Do not drop uid/gid when executing in root-owned directory (@isaacs)v6.13.5Compare Source
6.13.5 (2020-01-09)
BUG FIXES
fd0a802ec#550 Fix cache location fornpm ci(@zhenyavinogradov)4b30f3cca#648 fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f (@rhengles)TESTING
e16f68d30test(ci): add failing cache config test (@ruyadorno)3f009fbf2#659 test: fix bin-overwriting test on Windows (@isaacs)43ae0791f#601 ci: Allow builds to run even if one fails (@XhmikosR)4a669bee4#603 Remove the unused appveyor.yml (@XhmikosR)9295046ac#600 ci: switch toactions/checkout@v2(@XhmikosR)DOCUMENTATION
f2d770ac7#569 fix netlify publish path config (@claudiahdz)462cf0983#627 update gatsby dependencies (@felixonmars)6fb5dbb72#532 docs: clarify usage of global prefix (@jgehrcke)v6.13.4Compare Source
6.13.4 (2019-12-11)
BUGFIXES
320ac9aeenpm/bin-links#12 npm/gentle-fs#7 Do not remove global bin/man links inappropriately (@isaacs)DEPENDENCIES
52fd21061[email protected](@isaacs)d06f5c0b0[email protected](@isaacs)v6.13.3Compare Source
6.13.3 (2019-12-09)
DEPENDENCIES
19ce061a2[email protected]Properly normalize, sanitize, and verifybinentries inpackage.json.59c836aae[email protected]fb4ecd7d2[email protected]5f33040#476 npm/pacote#22 npm/pacote#14 fix: Do not drop perms in git when not root (isaacs, @darcyclarke)6f229f7sanitize and normalize package bin field (isaacs)1743cb339[email protected]v6.13.2Compare Source
6.13.2 (2019-12-03)
BUG FIXES
4429645b3#546 fix docs target typo (@richardlau)867642942#142 fix(packageRelativePath): fix 'where' for file deps (@larsgw)d480f2c17#527 Revert "windows: Add preliminary WSL support for npm and npx" (@craigloewen-msft)e4b97962e#504 remove unnecessary package.json read when reading shrinkwrap (@Lighting-Jack)1c65d26ac#501 fix(fund): open url for string shorthand (@ruyadorno)ae7afe565#263 Don't log error message if git tagging is disabled (@woppa684)4c1b16f6a#182 Warn the user that it is uninstalling npm-install (@Hoidberg)v6.13.1Compare Source
6.13.1 (2019-11-18)
BUG FIXES
938d6124d#472 fix(fund): support funding string shorthand (@ruyadorno)b49c5535b#471 should not publish tap-snapshot folder (@ruyadorno)3471d5200#253 Add preliminary WSL support for npm and npx (@infinnie)3ef295f23#486 print quick audit report for human output (@isaacs)TESTING
dbbf977ac#278 added workflow to trigger and run benchmarks (@mikemimik)b4f5e3825#457 feat(docs): adding tests and updating docs to reflect changes in registry teams API. (@nomadtechie)454c7dd60#456 fix git configs for git 2.23 and above (@isaacs)DOCUMENTATION
b8c1576a430b013ae826c1b2ef69f943a765c0346b1588e09d5ad64a2f551ee87d67258c5c3b32722b150eaeff7555a743cb89423e2f#463 #285 #268 #232 #485 #453 docs cleanup: typos, styling and content (@claudiahdz) (@XhmikosR) (@mugli) (@brettz9) (@mkotsollaris)DEPENDENCIES
661d86cd2[email protected](@claudiahdz)v6.13.0Compare Source
6.13.0 (2019-11-05)
NEW FEATURES
4414b06d9#273 add fund command (@ruyadorno)DOCUMENTATION
ae4c74d04#274 migrate existing docs to gatsby (@claudiahdz)4ff1bb180#277 updated documentation copy (@oletizi)BUG FIXES
e4455409f#281 delete ps1 files on package removal (@NoDocCat)cd14d4701#279 update supported node list to remove v6.0, v6.1, v9.0 - v9.2 (@ljharb)DEPENDENCIES
a37296b20[email protected]d3cb3abe8[email protected]TESTING
688cd97be#272 use github actions for CI (@JasonEtco)9a2d8af84#240 Clean up some flakiness and inconsistency (@isaacs)v6.12.1Compare Source
6.12.1 (2019-10-29)
BUG FIXES
6508e833d#269 add node v13 as a supported version (@ljharb)b6588a8f7#265 Fix regression in lockfile repair for sub-deps (@feelepxyz)d5dfe57a1#266 resolve circular dependency in pack.js (@addaleax)DEPENDENCIES
73678bb59[email protected]4b76926e2[email protected]c691f36a9[email protected]5e1a14975[email protected]c194482d6[email protected]bc6a8e0ec[email protected]4dcca3cbb[email protected]v6.12.0Compare Source
6.12.0 (2019-10-08):
Now
npm ciruns prepare scripts for git dependencies, and respects the--no-optionalargument. Warnings forenginemismatches are printed again. Various other fixes and cleanups.BUG FIXES
890b245dc#252 ci: add dirPacker to options (@claudiahdz)f3299acd0#257 npm.community#4792 warn message on engine mismatch (@ruyadorno)bbc92fb8f#259 npm.community#10288 Fix figgyPudding error innpm token(@benblank)70f54dcb5#241 doctor: Make OK more consistent (@gemal)FEATURES
ed993a29c#249 Add CI environment variables to user-agent (@isaacs)f6b0459a4#248 Add option to save package-lock without formatting Adds a new config--format-package-lock, which defaults to true. (@bl00mber)DEPENDENCIES
0ca063c5d[email protected]:5df6b0ea2[email protected]:7e04f728c[email protected]5c380e5a3[email protected](@isaacs)62f2ca692[email protected](@isaacs)0ff0ea47a[email protected](@isaacs)f46edae94[email protected](@isaacs)TESTING
44a2b036b#262 fix root-ownership race conditions in meta-test (@isaacs)v6.11.3Compare Source
6.11.3 (2019-09-03):
Fix npm ci regressions and npm outdated depth.
BUG FIXES
235ed1d28#239 Don't override user specified depth in outdated. Restores ability to update packages using--depthas suggested bynpm audit. (@G-Rath)1fafb5151#242 npm.community#9586 Revert "install: do not descend into directory deps' child modules" (@isaacs)cebf542e6#243 npm.community#9720 ci: pass appropriate configs for file/dir modes (@isaacs)DEPENDENCIES
e5fbb7ed1[email protected](@claudiahdz)23ce65616[email protected](@claudiahdz)v6.11.2Compare Source
6.11.2 (2019-08-22):
Fix a recent Windows regression, and two long-standing Windows bugs. Also, get CI running on Windows, so these things are less likely in the future.
DEPENDENCIES
9778a1b87[email protected]: Fix regression where shims fail to preserve exit code (@isaacs)bf93e91d8[email protected]: Properly handle git+file: urls on Windows when a drive letter is included. (@isaacs)BUGFIXES
6cc4cc66fescape args properly on Windows Bash Despite being bash, Node.js running on windows git mingw bash still executes child processes using cmd.exe. As a result, arguments in this environment need to be escaped in the style of cmd.exe, not bash. (@isaacs)TESTS
291aba7b8make tests pass on Windows (@isaacs)fea3a023atravis: run tests on Windows as well (@isaacs)v6.11.1Compare Source
6.11.1 (2019-08-20):
Fix a regression for windows command shim syntax.
37db29647[email protected](@isaacs)v6.11.0Compare Source
v6.11.0 (2019-08-20):
A few meaty bugfixes, and introducing
peerDependenciesMeta.FEATURES
a12341088#224 Implements peerDependenciesMeta (@arcanis)2f3b79bba#234 add new forbidden 403 error code (@claudiahdz)BUGFIXES
24acc9fc8and45772af0d#217 npm.community#8863 npm.community#9327 do not descend into directory deps' child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages (@isaacs and @salomvary)50cfe113d#229 fixed typo in semver doc (@gall0ws)e8fb2a1bd#231 Fix spelling mistakes in CHANGELOG-3.md (@XhmikosR)769d2e057npm/uid-number#7 Better error on invalid--user/--groupconfigs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no 'nobody' user. (@isaacs)8b43c9624nodejs/node#28987 npm.community#6032 npm.community#6658 npm.community#6069 npm.community#9323 Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. (@isaacs)8b85eaa47save files with inferred ownership rather than relying onSUDO_UIDandSUDO_GID. (@isaacs)b7f6e5f02Infer ownership of shrinkwrap files (@isaacs)54b095d77#235 Add spec to dist-tag remove function (@theberbie)DEPENDENCIES
dc8f9e52f[email protected]: Infer the ownership of all unpacked files innode_modules, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. (@isaacs)bb33940c3[email protected]:9c93ac3#2 npm#3380 Handle environment variables properly (@basbossink)2d277f8#25 #36 #35 Fix 'no shebang' case by always providing$basedirin shell script (@igorklopov)adaf20b#26 Fix$*causing an error when arguments contain parentheses (@satazor)49f0c13#30 Fix paths for MSYS/MINGW bash (@dscho)51a8af3#34 Add proper support for PowerShell (@ExE-Boss)4c37e04#10 Work around quoted batch file names (@isaacs)a4e279544[email protected](@isaacs):Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.