Skip to content

Update dependency npm to v7

Tobinsk requested to merge renovate/npm-7.x into master

This MR contains the following updates:

Package Change Age Adoption Passing Confidence
npm (source) ^6.14.11 -> 7.24.1 age adoption passing confidence

Release Notes

npm/cli

v7.24.1

Compare Source

DEPENDENCIES
  • 1be8d41e6 socks-proxy-agent@6.1.0:
    • feat: allow passing tls connection options
  • eafd55eae glob@7.2.0
DOCS

v7.24.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
  • 59743972c #​3747 fix(did-you-mean): succeed if cwd is not a package (@​wraithgar)
  • ac8e4ad18 init-package-json@2.0.5:
    • fix: bin script path
  • 371655a6b minipass@3.1.5:
    • fix: re-emit 'error' event if missed and new listener added
    • fix: do not blow up if process is missing
DOCUMENTATION

v7.23.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION

v7.22.0

Compare Source

BUG FIXES
DEPENDENCIES
  • 033e948c9 read-package-json@4.1.1:
    • feat: add types lookup
    • fix(man): don't lose relative man path
  • 1fa549db0 @npmcli/config@2.3.0:
    • feat: export npm_config_local_prefix and npm_config_global_prefix to the environment
  • e91578d10 minpass-fetch@1.4.1:
    • Made rejectUnauthorized depend on NODE_TLS_REJECT_UNAUTHORIZED
  • 6125db545 are-we-there-yet@1.1.6
  • 0dcda73b0 string_decoder@1.3.0
  • 4b913417c npmlog@5.0.1
  • 876c755eb @npmcli/arborist@2.8.3:
    • fix: do not fail adding unresolvable optional dep

v7.21.1

Compare Source

BUG FIXES
DEPENDENCIES
  • e3878536f make-fetch-happen@9.1.0:
    • fix: use the same strictSSL default as tls.connect
  • 145f70cc1 read-package-json@4.0.1:
    • fix: Add gitHead in subdirectories too
    • fix(man): don't resolve paths to man files
  • 3f4d37143 tar@6.1.11:
    • fix: perf regression on hot string munging path
  • e63a942c6 cacache@15.3.0:
DOCUMENTATION

v7.21.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
  • df57f0d53 @npmcli/run-script@1.8.6
  • 8183976cf normalize-package-data@3.0.3:
    • fix: account for "licence" as spelling variant
  • f07772401 init-package-json@2.0.4
  • 991a3bd39 read-package-json@4.0.0
  • e9e5ee560 @npmcli/arborist@2.8.2:
    • fix: treat top-level global packages as "top" nodes
    • fix: load global symlinks implicitly as file: deps
    • fix(reify): debug crash when extracting into symlink
    • fix: node_modules must be a directory
    • fix: make Node.children() a case-insensitive Map
    • fix(reify): verify existing deps in nm are dirs
  • b6f40b5f8 tar@6.1.10:
    • fix: prune dirCache properly for unicode, windows
    • fix: reserve paths properly for unicode, windows
    • fix: prevent path escape using drive-relative paths
    • fix: drop dirCache for symlink on all platforms
  • 218cacadc is-core-module@2.6.0
  • 7ac621cd1 smart-buffer@4.2.0
  • 94f92de13 make-fetch-happen@9.0.5
  • 71cdfd898 spdx-license-ids@3.0.10:
    • update license list to v3.14
DOCUMENTATION

v7.20.6

Compare Source

DEPENDENCIES
  • 5bebf280f tar@6.1.8
    • fix: reserve paths case-insensitively
  • 5d89de44d tar@6.1.7:
    • fix: normalize paths on Windows systems
  • a1bdbea97 #​3569
  • 61782fa85 @npmcli/map-workspaces@1.0.4:
    • fix: better error message for duplicate workspace names
  • b88f770fa @npmcli/arborist@2.8.1:
    • [#​3632] Fix "cannot read property path of null" error in 'npm dedupe'
    • fix(shrinkwrap): always set name on the root node
DOCUMENTATION

v7.20.5

Compare Source

DEPENDENCIES
  • 44377738e graceful-fs@4.2.8
    • fix: start retrying immediately, stop after 60 seconds

v7.20.4

Compare Source

BUG FIXES
DEPENDENCIES
  • 15fae4941 tar@6.1.6:
    • fix: properly handle top-level files when using strip
    • Avoid an unlikely but theoretically possible redos
    • WriteEntry backpressure
    • fix(unpack): always resume parsing after an entry error
    • fix(unpack): fix hang on large file on open() fail
    • fix: properly prefix hard links
  • 745326de0 libnpmexec@2.0.1:
    • Clear progress bar which overlays confirm prompt
  • e82bcd4e8 graceful-fs@4.2.7:
    • fix: start retrying immediately, stop after 10 attempts

v7.20.3

Compare Source

BUG FIXES
DEPENDENCIES
  • 97cb5ec31 @npmcli/arborist@2.8.0:
    • Refactor ideal tree building to handle more complicated peerDependencies use cases.
    • Do not modify ideal tree while checking if a peerSet can be placed.
  • 7db1a0a26 chore(deps): mime-types@1.49.0 mime-db@1.49.0

v7.20.2

Compare Source

DEPENDENCIES
  • f5aab1f88 tar@6.1.1
    • fix: strip absolute paths more comprehensively
  • ce8fb0f69 tar@6.1.2
    • fix: Remove paths from dirCache when no longer dirs
  • ced85087a gauge@3.0.1
    • add missing dependency to package.json

v7.20.1

Compare Source

BUG FIXES
DOCUMENTATION
DEPENDENCIES

v7.20.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • 691816f3d @npmcli/arborist@2.7.1
    • fixes running prepare scripts for workspaces on reify
    • ensure pacote always compares correct integrity values
  • b9597e944 make-fetch-happen@9.0.4
    • fix: retry socket timeout failures
    • fix: clean up invalid indexes and content after cacache read errors
  • f573e7c56 minipass-fetch@1.3.4
    • fix: correctly handle error events that happen after response events
  • 2d5797ea0 pacote@11.3.5
    • fix: show more actionable messages for git pathspec errors
    • fix: include all dep types when building for prepare
    • fix: do not set mtime when unpacking

v7.19.1

Compare Source

BUG FIXES
DOCUMENTATION
TESTING

v7.19.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
  • fe4138381 @npmcli/arborist@2.6.4:
    • bin: allow turning off timer display with --timers=false
    • fix: do not try to inflate a fresh lockfile
    • fix(diff): walk target children if root is a link
    • chore: @​npmcli/package-json refactor

v7.18.1

Compare Source

v7.18.0

Compare Source

v7.17.0

Compare Source

v7.16.0

Compare Source

v7.15.1

Compare Source

BUG FIXES
DEPENDENCIES
  • c4fc03e9e @npmcli/arborist@2.6.1
    • fixes reifying deps with mismatching version ranges between actual and virtual trees
  • 9159fa62a libnpmexec@1.2.0

v7.15.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • 7b56bfdf3 cacache@15.2.0:
    • feat: allow fully deleting indices
    • feat: add a validateEntry option to compact
    • chore: lint
    • chore: use standard npm style release scripts
  • dbbc151a3 npm-audit-report@2.1.5:
    • fix(exit-code): account for null auditLevel default (#​46)
  • 5b2604507 chore(package-lock): update devDependencies (@​Gar)
AUTOMATION

v7.14.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES

v7.13.0

Compare Source

FEATURES
DEPENDENCIES

v7.12.1

Compare Source

BUG FIXES
DEPENDENCIES
  • 285976fd1 @npmcli/arborist@2.4.4
    • fix(reify): properly save spec if prerelease
  • f9f24d17c libnpmexec@1.1.1
    • fix(add): Specify 'en' locale to String.localeCompare
  • cb9f17499 glob@7.1.7
    • force 'en' locale in string sorting
  • 24b4e4a41 ignore-walk@3.0.4
    • Avoid locale-specific sorting issues
  • 1eb7e5c7d @npmcli/arborist@2.4.3
    • guard against locale-specific sorting
  • a6a826067 npm-packlist@2.2.2:
    • fix(sort): avoid locale-dependent sorting issues

v7.12.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
  • d01ce5e13 libnpmexec@1.1.0:
    • feat: add walk up dir lookup to satisfy local bins
  • 81c1dfaaa @npmcli/arborist@2.4.2:
    • fix(add): save packages in the right place
    • fix(reify): do not clean up nodes with no parent
    • fix(audit): support alias specs & root package names
  • 87c2303ea @npmcli/git@2.0.9:
    • fix(clone): Do not allow git replacement objects by default
  • 99ff40dff npm-packlist@2.2.0:
    • feat(npmignore): Do not force include history, changelogs, notice
    • fix(package.json): add missing bin/index.js to files

v7.11.2

Compare Source

BUG FIXES
DEPENDENCIES
  • fb79d89a0 tap@15.0.6
  • ce3820043 @npmcli/arborist@2.4.1
    • fix: prevent and eliminate unnecessary duplicates
    • fix: support resolvable partial intersecting peerSets
DOCUMENTATION

v7.11.1

Compare Source

DEPENDENCIES
DOCUMENTATION
  • efdd7dd44 Remove unused and incorrectly documented --always-auth config definition (@​isaacs)

v7.11.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES

v7.10.0

Compare Source

FEATURES
DEPENDENCIES
  • f1e6743a6 libnpmversion@1.2.0
    • feat(retrieve-tag): retrieve unannotated git tags
    • fix(retrieve-tag): use semver to look for semver
  • 3b476a24c @npmcl/git@2.0.8
    • fix(git): do not use shell when calling git
  • dfcd0c1e2 #​3069 tap@15.0.2
DOCUMENTATION

v7.9.0

Compare Source

FEATURES
DEPENDENCIES

v7.8.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
  • 61da39beb @npmcli/config@2.1.0
    • feat(config): add support for envExport:false
  • fb095a708 @npmcli/arborist@2.3.0:
    • #​2896 Provide currentEdge in ERESOLVE if known, and address self-linking edge case.
    • Add/remove dependencies to/from workspaces when set, not root project
    • Only reify the portions of the dependency graph identified by the workspace configuration value.
    • Do not recursively chown the project root path.

v7.7.6

Compare Source

BUG FIXES
DEPENDENCIES
  • a28f89572 libnpmversion@1.1.0
    • fix reading script-shell config on npm version lifecycle scripts
  • 03734c29e npm-packlist@2.1.5
    • fix packaging bundledDependencies
  • 80ce2a019 @npmcli/metavuln-calculator@1.1.1
    • fix error auditing package documents with missing dependencies

v7.7.5

Compare Source

BUG FIXES
TESTS

v7.7.4

Compare Source

BUG FIXES

v7.7.3

Compare Source

BUG FIXES

v7.7.2

Compare Source

BUG FIXES
DEPENDENCIES

v7.7.1

Compare Source

BUG FIXES

v7.7.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • 7b5606b93 @npmcli/arborist@2.2.9
  • f76e7c21f pacote@11.3.1
    • increases tarball compression level
  • 4928512bc semver@7.3.5
    • fix handling prereleases/ANY ranges in subset
  • 1924eb457 libnpmversion@1.0.12
    • fix removing undescored-prefixed package.json properties in npm version
  • 916623056 @npmcli/run-script@1.8.4
    • fix expanding windows-style environment variables
  • a8d0751e4 npm-pick-manifest@6.1.1
    • fix running packages with a single executable binary with npm exec
  • af7eaac50 hosted-git-info@4.0.1
  • f52c51db1 @npmcli/config@2.0.0

v7.6.3

Compare Source

DOCUMENTATION
DEPENDENCIES
  • 57ed390d6 @npmcli/arborist@2.2.8
    • Respect link deps when calculating peerDep sets

v7.6.2

Compare Source

BUG FIXES
DEPENDENCIES
  • 7f470b5c2 @npmcli/arborist@2.2.7
    • fix(install): Do not revert a file: dep to version on bare name re-install
  • e9b7fc275 libnpmdiff@2.0.4
    • fix(diff): Gracefully handle packages with prepare script
  • c7314aa62 byte-size@7.0.1
  • 864f48d43 pacote@11.3.0

v7.6.1

Compare Source

BUG FIXES
DOCUMENTATION
DEPENDENCIES

v7.6.0

Compare Source

FEATURES
DEPENDENCIES
  • b9fa7e32a chore(package-lock): resetdeps and eslint@7.20.0 (@​wraithgar)
  • 28d036ae9 arborist@2.2.5
    • fix: hidden lockfiles were not respected on Node v10.0-10.12
DOCUMENTATION

v7.5.6

Compare Source

BUG FIXES
DOCS
DEPENDENCIES
  • f3ae6ed0d read-package-json@3.0.1, read-package-json-fast@2.0.2
  • 9b311fe52 #​2736 @npmcli/arborist@2.2.4:
    • Do not rely on underscore fields in package.json files
    • Do not remove global packages when updating by name
    • Keep yarn.lock and package-lock.json more in sync

v7.5.5

Compare Source

BUG FIXES
DEPENDENCIES
TESTS
DOCUMENTATION

v7.5.4

Compare Source

BUG FIXES
DEPENDENCIES
TESTS
DOCUMENTATION

v7.5.3

Compare Source

BUG FIXES
DEPENDENCIES
  • 3294fed6f pacote@11.2.5
    • prevent infinite recursion in git dep preparation
  • 0f7a3a87c read-package-json-fast@2.0.1
    • avoid duplicating optionalDependencies as dependencies in package.json
  • 6f46b0f7f init-package-json@2.0.2
  • df4f65acc @npmcli/arborist@2.2.0
  • 7038c2ff4 @npmcli/run-script@1.8.2
  • 54cd4c87a libnpmversion@1.0.8
  • 9ab36aae4 graceful-fs@4.2.5
  • e1822cf27 @npmcli/installed-package-contents@1.0.7

v7.5.2

Compare Source

BUG FIXES
DEPENDENCIES

v7.5.1

Compare Source

BUG FIXES
DEPENDENCIES
  • 7e4e88e93 @npmcli/arborist@2.1.1, pacote@11.2.4
    • Properly raise ERESOLVE errors on root dev dependencies
    • Ignore ERESOLVE errors when performing git dep 'prepare' scripts
    • Always reinstall packages that are explicitly requested
    • fix global update all so it actually updates things
    • Install bins properly when global root is a link (@​isaacs)
DOCUMENTATION

v7.5.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • 56c08863e hosted-git-info@3.0.8
  • 18a93f06b ssri@8.0.1
  • cb768f671 @npmcli/move-file@1.1.1
  • 32cc0a4be minipass-fetch@1.3.3
    • fixes ssl settings passthrough
  • 530997968 @npmcli/arborist@2.1.0
    • added signal handler to rollback when possible
    • prevent ERESOLVEs caused by loose root dep specs
    • detect conflicts among nested peerOptional deps
    • properly buildIdealTree when root is a symlink

v7.4.3

Compare Source

DOCUMENTATION
DEPENDENCIES

v7.4.2

Compare Source

DEPENDENCIES
  • e5ce6bbba
    • @npmcli/arborist@2.0.5
      • fix creating missing dirs when using --prefix and --global
      • fix omit types of deps in global installs
      • fix prioritizing npm-shrinkwrap.json over package-lock.json
      • better cache system for packuments
      • improves audit performance

v7.4.1

Compare Source

BUG FIXES
DOCUMENTATION
DEPENDENCIES

v7.4.0

Compare Source

FEATURES
BUG FIXES
DEPENDENCIES
DOCUMENTATION

v7.3.0

Compare Source

FEATURES
BUG FIXES
DOCS
TESTING
DEPENDENCIES
  • 4fc2f3e05 #​2300 @npmcli/config@1.2.8:
    • Support setting email without username/password

v7.2.0

Compare Source

FEATURES
DEPENDENCIES
TESTING

v7.1.2

Compare Source

DEPENDENCIES
BUGFIXES
TESTING
DOCUMENTATION

v7.1.1

Compare Source

DEPENDENCIES
  • bf09e719c @npmcli/arborist@2.0.0
    • Much stricter tree integrity guarantees
    • Fix issues where the root project is a symlink, or linked as a workspace
  • 7ceb5b728 ini@1.3.6
  • 77c6ced2a make-fetch-happen@8.0.11
    • Avoid caching headers that are hazardous or unnecessary to leave lying around (authorization, npm-session, etc.)
    • #​38 Include query string in cache key (@​jpb)
  • 0ef25b6cd libnpmsearch@3.1.0:
    • Update to accept query params as options, so we can paginate. (@​nlf)
  • 518a66450 @npmcli/config@1.2.4:
    • Do not allow path options to be set to a boolean false value
  • 3d7aff9d8 update all dependencies using latest npm to install them
TESTS
FEATURES

v7.1.0

Compare Source

FEATURES
BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • def85c726 @npmcli/arborist@1.0.14
    • fixes running npm exec from file system root folder
  • 4c94673ab semver@7.3.4

v7.0.15

Compare Source

DEPENDENCIES
  • 00e6028ef @npmcli/arborist@1.0.13
    • do not override user-defined shorthand values when saving package.json
BUG FIXES
DOCUMENTATION

v7.0.14

Compare Source

DEPENDENCIES
  • 09d21ab90 @npmcli/run-script@1.8.1
    • fix a regression in how scripts are escaped

v7.0.13

Compare Source

BUG FIXES
DEPENDENCIES
  • 3daaf000a @npmcli/arborist@1.0.12
    • fixes some windows specific bugs in how paths are handled and compared
DOCUMENTATION

v7.0.12

Compare Source

BUG FIXES
DEPENDENCIES
  • b74c05d88 @npmcli/run-script@1.8.0
    • fix windows command-line argument escaping
DOCUMENTATION

v7.0.11

Compare Source

DEPENDENCIES
BUG FIXES

v7.0.10

Compare Source

DOCUMENTATION
BUG FIXES
DEPENDENCIES
  • 04a3e8c10 #​1962 @npmcli/arborist@1.0.10:
    • prevent self-assignment of parent/fsParent
    • Support update options in global package space

v7.0.9

Compare Source

BUG FIXES
DEPENDENCIES

v7.0.8

Compare Source

DOCUMENTATION
BUG FIXES
DEPENDENCIES
  • 545382df6 libnpmpublish@4.0.0:
    • Support publishing things other than folders
  • 7d88f1719 npm-registry-fetch@9.0.0
  • 823b40a4e pacote@11.1.12
  • 90bf57826 npm-profile@5.0.2
  • e5a413577 libnpmteam@2.0.2
  • fc5aa7b4a libnpmsearch@3.0.1
  • 9fc1dee13 libnpmorg@2.0.1
  • 0ea870ec5 libnpmhook@6.0.1
  • 32fd744ea libnpmaccess@4.0.1
  • fc76f3d9f @npmcli/arborist@1.0.8
    • Fix cannot read property 'description' of undefined in npm ls when package-lock.json is corrupted
    • Do not allow peerDependencies to be nested under dependents in any circumstances
    • Always resolve peerDependencies in --prefer-dedupe mode

v7.0.7

Compare Source

BUG FIXES
DEPENDENCIES
  • 4156f053e @npmcli/run-script@1.7.4
    • restore the default npm start script
  • 1900ae9ad @npmcli/promise-spawn@1.3.2
    • fix errors when processing scripts as root
  • 8cb0c166c @npmcli/arborist@1.0.6
    • make sure missing bin links get set on reify

v7.0.6

Compare Source

BUG FIXES
DEPENDENCIES
  • 99ae633f6 libnpmversion@1.0.6
    • respect gitTagVersion = false
  • d4173f58d @npmcli/promise-spawn@1.3.1
    • do not return empty buffer when stdio is inherited
    • attach child process to returned promise
  • c09380fa5 @npmcli/run-script@1.7.3
    • forward SIGINT and SIGTERM to children that inherit stdio
  • b154861ad @npmcli/arborist@1.0.5
  • ffea6596b agent-base@6.0.2
    • support http proxy for https registries

v7.0.5

Compare Source

  • 77ad86b5e Merge docs deps with main project

v7.0.4

Compare Source

DOCUMENTATION
BUG FIXES
TESTS
DEPENDENCIES
  • ed6e6a9d3 eslint-plugin-standard@4.0.2

  • b737ee999 #​2009 #​2007 npm-packlist@2.1.4:

    • Maintain order in package.json files array globs
    • Strip slashes from package files list results
  • 783965508 #​1997 #​2000 #​2005 @npmcli/arborist@1.0.4

    • Ensure that root is added when root.meta is set
    • Include all edges in explain() output when a root edge exists
    • Do not conflict on meta-peers that will not be replaced
    • Install peerOptionals if explicitly requested, or dev

v7.0.3

Compare Source

BUG FIXES
DOCUMENTATION
DEPENDENCIES

v7.0.2

Compare Source

DOCUMENTATION
BUG FIXES
DEPENDENCIES

v7.0.1

Compare Source

DEPENDENCIES
  • 00e6028ef @npmcli/arborist@1.0.13
    • do not override user-defined shorthand values when saving package.json
BUG FIXES
DOCUMENTATION

v7.0.0

Compare Source

BUG FIXES
DOCUMENTATION
DEPENDENCIES
  • 15366a1cf npm-registry-fetch@8.1.5
  • f04a74140 init-package-json@2.0.0
    • 1de21dce0 fix: support dot-separated aliases defined in a .npmrc ini files for init-* configs (@​ruyadorno)
  • a67275cd9 eslint@7.11.0
  • 6fb83b78d hosted-git-info@3.0.6
  • 1ca30cc9b libnpmfund@1.0.0
  • 28a2d2ba4 @npmcli/arborist@1.0.0
    • npm/rfcs#​239 Improve handling of conflicting peerDependencies in transitive dependencies, so that --force will always accept a best effort override, and --strict-peer-deps will fail faster on conflicts.
  • 9306c6833 libnpmfund@1.0.1
  • fafb348ef npm-package-arg@8.1.0
  • 365f2e756 read-package-json@3.0.0

v6.14.15

Compare Source

6.14.15 (2021-08-23)

DEPENDENCIES

v6.14.14

Compare Source

v6.14.13

Compare Source

6.14.13 (2021-04-08)

DEPENDENCIES

v6.14.12

Compare Source

6.14.12 (2021-03-25)

DEPENDENCIES

Configuration

📅 Schedule: At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box.

This MR has been generated by Renovate Bot.

Edited by Tobinsk

Merge request reports