Table of contents

Changelog

Select CLI Version:

Table of contents

v7.24.2 (2021-10-04)

BUG FIXES

DEPENDENCIES

  • 69ab10bbf is-core-module@2.7.0
  • e94ddeaca @npmcli/arborist@2.9.0:
    • fix: avoid infinite loops in peer dep replacements
    • fix: use Intl.Collator for string sorting when available
    • feat(vuln): expose isDirect

DOCUMENTATION

v7.24.1 (2021-09-23)

DEPENDENCIES

  • 1be8d41e6 socks-proxy-agent@6.1.0:
    • feat: allow passing tls connection options
  • eafd55eae glob@7.2.0

DOCS

v7.24.0 (2021-09-16)

FEATURES

BUG FIXES

DEPENDENCIES

  • 59743972c #3747 fix(did-you-mean): succeed if cwd is not a package (@wraithgar)
  • ac8e4ad18 init-package-json@2.0.5:
    • fix: bin script path
  • 371655a6b minipass@3.1.5:
    • fix: re-emit 'error' event if missed and new listener added
    • fix: do not blow up if process is missing

DOCUMENTATION

v7.23.0 (2021-09-09)

FEATURES

BUG FIXES

DOCUMENTATION

v7.22.0 (2021-09-02)

BUG FIXES

DEPENDENCIES

  • 033e948c9 read-package-json@4.1.1:
    • feat: add types lookup
    • fix(man): don't lose relative man path
  • 1fa549db0 @npmcli/config@2.3.0:
    • feat: export npm_config_local_prefix and npm_config_global_prefix to the environment
  • e91578d10 minpass-fetch@1.4.1:
    • Made rejectUnauthorized depend on NODE_TLS_REJECT_UNAUTHORIZED
  • 6125db545 are-we-there-yet@1.1.6
  • 0dcda73b0 string_decoder@1.3.0
  • 4b913417c npmlog@5.0.1
  • 876c755eb @npmcli/arborist@2.8.3:
    • fix: do not fail adding unresolvable optional dep

v7.21.1 (2021-08-26)

BUG FIXES

DEPENDENCIES

  • e3878536f make-fetch-happen@9.1.0:
    • fix: use the same strictSSL default as tls.connect
  • 145f70cc1 read-package-json@4.0.1:
    • fix: Add gitHead in subdirectories too
    • fix(man): don't resolve paths to man files
  • 3f4d37143 tar@6.1.11:
    • fix: perf regression on hot string munging path
  • e63a942c6 cacache@15.3.0:
    • feat: introduce @npmcli/fs for tmp dir methods

DOCUMENTATION

v7.21.0 (2021-08-19)

FEATURES

BUG FIXES

DEPENDENCIES

  • df57f0d53 @npmcli/run-script@1.8.6
  • 8183976cf normalize-package-data@3.0.3:
    • fix: account for "licence" as spelling variant
  • f07772401 init-package-json@2.0.4
  • 991a3bd39 read-package-json@4.0.0
  • e9e5ee560 @npmcli/arborist@2.8.2:
    • fix: treat top-level global packages as "top" nodes
    • fix: load global symlinks implicitly as file: deps
    • fix(reify): debug crash when extracting into symlink
    • fix: node_modules must be a directory
    • fix: make Node.children() a case-insensitive Map
    • fix(reify): verify existing deps in nm are dirs
  • b6f40b5f8 tar@6.1.10:
    • fix: prune dirCache properly for unicode, windows
    • fix: reserve paths properly for unicode, windows
    • fix: prevent path escape using drive-relative paths
    • fix: drop dirCache for symlink on all platforms
  • 218cacadc is-core-module@2.6.0
  • 7ac621cd1 smart-buffer@4.2.0
  • 94f92de13 make-fetch-happen@9.0.5
  • 71cdfd898 spdx-license-ids@3.0.10:
    • update license list to v3.14

DOCUMENTATION

v7.20.6 (2021-08-12)

DEPENDENCIES

  • 5bebf280f tar@6.1.8
    • fix: reserve paths case-insensitively
  • 5d89de44d tar@6.1.7:
    • fix: normalize paths on Windows systems
  • a1bdbea97 #3569
  • 61782fa85 @npmcli/map-workspaces@1.0.4:
    • fix: better error message for duplicate workspace names
  • b88f770fa @npmcli/arborist@2.8.1:
    • [#3632] Fix "cannot read property path of null" error in 'npm dedupe'
    • fix(shrinkwrap): always set name on the root node

DOCUMENTATION

v7.20.5 (2021-08-05)

DEPENDENCIES

  • 44377738e graceful-fs@4.2.8
    • fix: start retrying immediately, stop after 60 seconds

v7.20.4 (2021-08-05)

BUG FIXES

DEPENDENCIES

  • 15fae4941 tar@6.1.6:
    • fix: properly handle top-level files when using strip
    • Avoid an unlikely but theoretically possible redos
    • WriteEntry backpressure
    • fix(unpack): always resume parsing after an entry error
    • fix(unpack): fix hang on large file on open() fail
    • fix: properly prefix hard links
  • 745326de0 libnpmexec@2.0.1:
    • Clear progress bar which overlays confirm prompt
  • e82bcd4e8 graceful-fs@4.2.7:
    • fix: start retrying immediately, stop after 10 attempts

v7.20.3 (2021-07-29)

BUG FIXES

DEPENDENCIES

  • 97cb5ec31 @npmcli/arborist@2.8.0:
    • Refactor ideal tree building to handle more complicated peerDependencies use cases.
    • Do not modify ideal tree while checking if a peerSet can be placed.
  • 7db1a0a26 chore(deps): mime-types@1.49.0 mime-db@1.49.0

v7.20.2 (2021-07-27)

DEPENDENCIES

  • f5aab1f88 tar@6.1.1
    • fix: strip absolute paths more comprehensively
  • ce8fb0f69 tar@6.1.2
    • fix: Remove paths from dirCache when no longer dirs
  • ced85087a gauge@3.0.1
    • add missing dependency to package.json

v7.20.1 (2021-07-22)

BUG FIXES

DOCUMENTATION

DEPENDENCIES

v7.20.0 (2021-07-15)

FEATURES

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • 691816f3d @npmcli/arborist@2.7.1
    • fixes running prepare scripts for workspaces on reify
    • ensure pacote always compares correct integrity values
  • b9597e944 make-fetch-happen@9.0.4
    • fix: retry socket timeout failures
    • fix: clean up invalid indexes and content after cacache read errors
  • f573e7c56 minipass-fetch@1.3.4
    • fix: correctly handle error events that happen after response events
  • 2d5797ea0 pacote@11.3.5
    • fix: show more actionable messages for git pathspec errors
    • fix: include all dep types when building for prepare
    • fix: do not set mtime when unpacking

v7.19.1 (2021-07-01)

BUG FIXES

TESTING

v7.19.0 (2021-06-24)

FEATURES

BUG FIXES

DEPENDENCIES

  • fe4138381 @npmcli/arborist@2.6.4:
    • bin: allow turning off timer display with --timers=false
    • fix: do not try to inflate a fresh lockfile
    • fix(diff): walk target children if root is a link
    • chore: @npmcli/package-json refactor

v7.18.1 (2021-06-17)

BUG FIXES

v7.18.0 (2021-06-17)

FEATURES

BUG FIXES

DEPENDENCIES

  • 6b951c042 libnpmversion@1.2.1:
    • fix(retrieve-tag): pass match in a way git accepts
  • de820a021 npm-package-arg@8.1.5:
    • fix: Make file: URLs (mostly) RFC 8909 compliant
  • 16a95c647 @npmcli/arborist@2.6.3:
    • fix(inventory) handle old and british forms of 'license'
    • fix: removes [_complete] check to apply correct metadata
    • ensure node.fsParent is not set to node itself
    • fix extraneous deps on load-actual
  • d341bd86c make-fetch-happen@9.0.3:
    • fix: implement cache modes correctly
  • c90612cf5 libnpmexec@2.0.0:
    • use new npxCache option

v7.17.0 (2021-06-10)

FEATURES

BUG FIXES

DOCUMENTATION

  • 844229519 #3392 docs(workspaces): update using npm section Added examples of using npm init to bootstrap a new workspace and a section on how to add/manage dependencies to workspaces. (@ruyadorno)

DEPENDENCIES

v7.16.0 (2021-06-03)

FEATURES

  • e92b5f2ba npm-registry-fetch@11.0.0
    • feat: improved logging of cache status

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • 54de5c6a4 npm-package-arg@8.1.4:
    • fix: trim whitespace from fetchSpec
    • fix: handle file: when root directory begins with a special character
  • e92b5f2ba make-fetch-happen@9.0.1
    • breaking: complete refactor of caching. drops warning headers, prevents cache indexes from growing for every request, correctly handles varied requests to the same url, and now caches redirects.
    • fix: support url-encoded proxy authorization
    • fix: do not lazy-load proxy agents or agentkeepalive. fixes the intermittent failures to update npm on slower connections. npm-registry-fetch@11.0.0
    • breaking: drop handling of deprecated warning headers
    • docs: fix header type for npm-command
    • docs: update registry param
    • feat: improved logging of cache status
  • 23c50a45f make-fetch-happen@9.0.2:
    • fix: work around negotiator's lazy loading

AUTOMATION

v7.15.1 (2021-05-31)

BUG FIXES

DEPENDENCIES

  • c4fc03e9e @npmcli/arborist@2.6.1
    • fixes reifying deps with mismatching version ranges between actual and virtual trees
  • 9159fa62a libnpmexec@1.2.0

v7.15.0 (2021-05-27)

FEATURES

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • 7b56bfdf3 cacache@15.2.0:
    • feat: allow fully deleting indices
    • feat: add a validateEntry option to compact
    • chore: lint
    • chore: use standard npm style release scripts
  • dbbc151a3 npm-audit-report@2.1.5:
    • fix(exit-code): account for null auditLevel default (#46)
  • 5b2604507 chore(package-lock): update devDependencies (@Gar)

AUTOMATION

v7.14.0 (2021-05-20)

FEATURES

BUG FIXES

DEPENDENCIES

v7.13.0 (2021-05-13)

FEATURES

DEPENDENCIES

v7.12.1 (2021-05-10)

BUG FIXES

DEPENDENCIES

  • 285976fd1 @npmcli/arborist@2.4.4
    • fix(reify): properly save spec if prerelease
  • f9f24d17c libnpmexec@1.1.1
    • fix(add): Specify 'en' locale to String.localeCompare
  • cb9f17499 glob@7.1.7
    • force 'en' locale in string sorting
  • 24b4e4a41 ignore-walk@3.0.4
    • Avoid locale-specific sorting issues
  • 1eb7e5c7d @npmcli/arborist@2.4.3
    • guard against locale-specific sorting
  • a6a826067 npm-packlist@2.2.2:
    • fix(sort): avoid locale-dependent sorting issues

v7.12.0 (2021-05-06)

FEATURES

BUG FIXES

DEPENDENCIES

  • d01ce5e13 libnpmexec@1.1.0:
    • feat: add walk up dir lookup to satisfy local bins
  • 81c1dfaaa @npmcli/arborist@2.4.2:
    • fix(add): save packages in the right place
    • fix(reify): do not clean up nodes with no parent
    • fix(audit): support alias specs & root package names
  • 87c2303ea @npmcli/git@2.0.9:
    • fix(clone): Do not allow git replacement objects by default
  • 99ff40dff npm-packlist@2.2.0:
    • feat(npmignore): Do not force include history, changelogs, notice
    • fix(package.json): add missing bin/index.js to files

v7.11.2 (2021-04-29)

BUG FIXES

DEPENDENCIES

  • fb79d89a0 tap@15.0.6
  • ce3820043 @npmcli/arborist@2.4.1
    • fix: prevent and eliminate unnecessary duplicates
    • fix: support resolvable partial intersecting peerSets

DOCUMENTATION

v7.11.1 (2021-04-23)

DEPENDENCIES

DOCUMENTATION

  • efdd7dd44 Remove unused and incorrectly documented --always-auth config definition (@isaacs)

v7.11.0 (2021-04-22)

FEATURES

BUG FIXES

DOCUMENTATION

DEPENDENCIES

v7.10.0 (2021-04-15)

FEATURES

DEPENDENCIES

  • f1e6743a6 libnpmversion@1.2.0
    • feat(retrieve-tag): retrieve unannotated git tags
    • fix(retrieve-tag): use semver to look for semver
  • 3b476a24c @npmcl/git@2.0.8
    • fix(git): do not use shell when calling git
  • dfcd0c1e2 #3069 tap@15.0.2

DOCUMENTATION

v7.9.0 (2021-04-08)

FEATURES

DEPENDENCIES

v7.8.0 (2021-04-01)

FEATURES

BUG FIXES

DEPENDENCIES

  • 61da39beb @npmcli/config@2.1.0
    • feat(config): add support for envExport:false
  • fb095a708 @npmcli/arborist@2.3.0:
    • #2896 Provide currentEdge in ERESOLVE if known, and address self-linking edge case.
    • Add/remove dependencies to/from workspaces when set, not root project
    • Only reify the portions of the dependency graph identified by the workspace configuration value.
    • Do not recursively chown the project root path.

v7.7.6 (2021-03-29)

BUG FIXES

DEPENDENCIES

  • a28f89572 libnpmversion@1.1.0
    • fix reading script-shell config on npm version lifecycle scripts
  • 03734c29e npm-packlist@2.1.5
    • fix packaging bundledDependencies
  • 80ce2a019 @npmcli/metavuln-calculator@1.1.1
    • fix error auditing package documents with missing dependencies

v7.7.5 (2021-03-25)

BUG FIXES

TESTS

v7.7.4 (2021-03-24)

BUG FIXES

v7.7.3 (2021-03-24)

BUG FIXES

  • c76f04ac2 #2925 fix(set-script): add completion (@Yash-Singh1)
  • 0379eab69 #2929 fix(install): ignore auditLevel npm install should not be affected by the auditLevel config, as the results of audit do not change its exit status. (@wraithgar)
  • 98efadeb4 #2923 fix(audit-level): add info audit level This is a valid level but wasn't configured to be allowed. Also added this param to the usage output for npm audit (@wraithgar)
  • e8d2adcf4 #2945 config should not error when workspaces are configured (@nlf)
  • aba2bc623 #2944 fix(progress): re-add progress bar to reify The logger was no longer in flatOptions, we pass it in explicitly now (@wraithgar)
  • 877b4ed29 #2946 fix(flatOptions): re-add _auth This was not being added to flatOptions, and things like npm-registry-fetch are looking for it. (@wraithgar)

v7.7.2 (2021-03-24)

BUG FIXES

DEPENDENCIES

v7.7.1 (2021-03-24)

BUG FIXES

v7.7.0 (2021-03-23)

FEATURES

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • 7b5606b93 @npmcli/arborist@2.2.9
    • #254 Honor explicit prefix when saving dependencies (@jameschensmith)
    • #255 Never save to bundleDependencies when saving a peer or peerOptional dependency. (@isaacs)
  • f76e7c21f pacote@11.3.1
    • increases tarball compression level
  • 4928512bc semver@7.3.5
    • fix handling prereleases/ANY ranges in subset
  • 1924eb457 libnpmversion@1.0.12
    • fix removing undescored-prefixed package.json properties in npm version
  • 916623056 @npmcli/run-script@1.8.4
    • fix expanding windows-style environment variables
  • a8d0751e4 npm-pick-manifest@6.1.1
    • fix running packages with a single executable binary with npm exec
  • af7eaac50 hosted-git-info@4.0.1
  • f52c51db1 @npmcli/config@2.0.0

v7.6.3 (2021-03-11)

DOCUMENTATION

DEPENDENCIES

  • 57ed390d6 @npmcli/arborist@2.2.8
    • Respect link deps when calculating peerDep sets

v7.6.2 (2021-03-09)

BUG FIXES

DEPENDENCIES

  • 7f470b5c2 @npmcli/arborist@2.2.7
    • fix(install): Do not revert a file: dep to version on bare name re-install
  • e9b7fc275 libnpmdiff@2.0.4
    • fix(diff): Gracefully handle packages with prepare script
  • c7314aa62 byte-size@7.0.1
  • 864f48d43 pacote@11.3.0

v7.6.1 (2021-03-04)

BUG FIXES

DOCUMENTATION

DEPENDENCIES

v7.6.0 (2021-02-25)

FEATURES

DEPENDENCIES

  • b9fa7e32a chore(package-lock): resetdeps and eslint@7.20.0 (@wraithgar)
  • 28d036ae9 arborist@2.2.5
    • fix: hidden lockfiles were not respected on Node v10.0-10.12

DOCUMENTATION

v7.5.6 (2021-02-22)

BUG FIXES

DOCS

DEPENDENCIES

  • f3ae6ed0d read-package-json@3.0.1, read-package-json-fast@2.0.2
  • 9b311fe52 #2736 @npmcli/arborist@2.2.4:
    • Do not rely on underscore fields in package.json files
    • Do not remove global packages when updating by name
    • Keep yarn.lock and package-lock.json more in sync

v7.5.5 (2021-02-22)

BUG FIXES

DEPENDENCIES

  • 8c36697df @npmcli/arborist@2.2.3
  • d865b101f libnpmpack@2.0.1
    • respect silent loglevel
  • e606953e5 libnpmversion@1.0.11
    • respect silent loglevel
  • 9c51005a1 npm-package-arg@8.1.1
    • do a better job of detecting git specifiers like git@github.com:npm/cli
  • 8b6bf0db4 pacote@11.2.7
    • respect silent loglevel
    • fix INVALID_URL errors for certain git dependencies

TESTS

DOCUMENTATION

v7.5.4 (2021-02-12)

BUG FIXES

DEPENDENCIES

TESTS

DOCUMENTATION

v7.5.3 (2021-02-08)

BUG FIXES

DEPENDENCIES

  • 3294fed6f pacote@11.2.5
    • prevent infinite recursion in git dep preparation
  • 0f7a3a87c read-package-json-fast@2.0.1
    • avoid duplicating optionalDependencies as dependencies in package.json
  • 6f46b0f7f init-package-json@2.0.2
  • df4f65acc @npmcli/arborist@2.2.0
  • 7038c2ff4 @npmcli/run-script@1.8.2
  • 54cd4c87a libnpmversion@1.0.8
  • 9ab36aae4 graceful-fs@4.2.5
  • e1822cf27 @npmcli/installed-package-contents@1.0.7

v7.5.2 (2021-02-02)

BUG FIXES

DEPENDENCIES

v7.5.1 (2021-02-01

BUG FIXES

DEPENDENCIES

  • 7e4e88e93 @npmcli/arborist@2.1.1, pacote@11.2.4
    • Properly raise ERESOLVE errors on root dev dependencies
    • Ignore ERESOLVE errors when performing git dep 'prepare' scripts
    • Always reinstall packages that are explicitly requested
    • fix global update all so it actually updates things
    • Install bins properly when global root is a link (@isaacs)

DOCUMENTATION

v7.5.0 (2021-01-28)

FEATURES

BUG FIXES

  • d2f8af2da #2445 publish: don't complain about missing auth until after registry is chosen (@dr-js)

DOCUMENTATION

DEPENDENCIES

  • 56c08863e hosted-git-info@3.0.8
  • 18a93f06b ssri@8.0.1
  • cb768f671 @npmcli/move-file@1.1.1
  • 32cc0a4be minipass-fetch@1.3.3
    • fixes ssl settings passthrough
  • 530997968 @npmcli/arborist@2.1.0
    • added signal handler to rollback when possible
    • prevent ERESOLVEs caused by loose root dep specs
    • detect conflicts among nested peerOptional deps
    • properly buildIdealTree when root is a symlink

v7.4.3 (2021-01-21)

DOCUMENTATION

DEPENDENCIES

v7.4.2 (2021-01-15)

DEPENDENCIES

  • e5ce6bbba
    • @npmcli/arborist@2.0.5
      • fix creating missing dirs when using --prefix and --global
      • fix omit types of deps in global installs
      • fix prioritizing npm-shrinkwrap.json over package-lock.json
      • better cache system for packuments
      • improves audit performance

v7.4.1 (2021-01-14)

BUG FIXES

  • 23df96d33 #2486 npm link no longer deletes entire project when global prefix is a symlink (@nlf)

DOCUMENTATION

DEPENDENCIES

v7.4.0 (2021-01-07)

FEATURES

BUG FIXES

DEPENDENCIES

DOCUMENTATION

7.3.0 (2020-12-18)

FEATURES

BUG FIXES

DOCS

TESTING

DEPENDENCIES

  • 4fc2f3e05 #2300 @npmcli/config@1.2.8:
    • Support setting email without username/password

7.2.0 (2020-12-15)

FEATURES

DEPENDENCIES

TESTING

7.1.2 (2020-12-11)

DEPENDENCIES

BUGFIXES

TESTING

DOCUMENTATION

7.1.1 (2020-12-08)

DEPENDENCIES

  • bf09e719c @npmcli/arborist@2.0.0
    • Much stricter tree integrity guarantees
    • Fix issues where the root project is a symlink, or linked as a workspace
  • 7ceb5b728 ini@1.3.6
  • 77c6ced2a make-fetch-happen@8.0.11
    • Avoid caching headers that are hazardous or unnecessary to leave lying around (authorization, npm-session, etc.)
    • #38 Include query string in cache key (@jpb)
  • 0ef25b6cd libnpmsearch@3.1.0:
    • Update to accept query params as options, so we can paginate. (@nlf)
  • 518a66450 @npmcli/config@1.2.4:
    • Do not allow path options to be set to a boolean false value
  • 3d7aff9d8 update all dependencies using latest npm to install them

TESTS

FEATURES

7.1.0 (2020-12-04)

FEATURES

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • def85c726 @npmcli/arborist@1.0.14
    • fixes running npm exec from file system root folder
  • 4c94673ab semver@7.3.4

7.0.15 (2020-11-27)

DEPENDENCIES

  • 00e6028ef @npmcli/arborist@1.0.13
    • do not override user-defined shorthand values when saving package.json

BUG FIXES

DOCUMENTATION

7.0.14 (2020-11-23)

DEPENDENCIES

  • 09d21ab90 @npmcli/run-script@1.8.1
    • fix a regression in how scripts are escaped

7.0.13 (2020-11-20)

BUG FIXES

DEPENDENCIES

  • 3daaf000a @npmcli/arborist@1.0.12
    • fixes some windows specific bugs in how paths are handled and compared

DOCUMENTATION

7.0.12 (2020-11-17)

BUG FIXES

DEPENDENCIES

  • b74c05d88 @npmcli/run-script@1.8.0
    • fix windows command-line argument escaping

DOCUMENTATION

7.0.11 (2020-11-13)

DEPENDENCIES

BUG FIXES

7.0.10 (2020-11-10)

DOCUMENTATION

BUG FIXES

DEPENDENCIES

  • 04a3e8c10 #1962 @npmcli/arborist@1.0.10:
    • prevent self-assignment of parent/fsParent
    • Support update options in global package space

7.0.9 (2020-11-06)

BUG FIXES

DEPENDENCIES

  • 74325f53b #2124 @npmcli/run-script@1.7.5:
    • Export the isServerPackage method
    • Proxy signals to and from foreground child processes
  • 0e58e6f6b #1984 #2079 #1923 #606 #2031 @npmcli/arborist@1.0.9:
    • Process deps for all link nodes
    • Use junctions instead of symlinks
    • Use @npmcli/move-file instead of fs.rename
  • 1dad328a1 #1865 #2106 #2084 pacote@11.1.13:
    • Properly set the installation command for prepare scripts when installing git/dir deps
  • e090d706c #2097 libnpmversion@1.0.7:
    • Do not crash when the package.json file lacks a 'version' field
  • 8fa541a10 cmark-gfm@0.8.4

7.0.8 (2020-11-03)

DOCUMENTATION

BUG FIXES

  • 6cd3cd08a Support all conf keys in publishConfig
  • a1f9be8a7 #2074 Support publishing any kind of spec, not just directories

DEPENDENCIES

  • 545382df6 libnpmpublish@4.0.0:
    • Support publishing things other than folders
  • 7d88f1719 npm-registry-fetch@9.0.0
  • 823b40a4e pacote@11.1.12
  • 90bf57826 npm-profile@5.0.2
  • e5a413577 libnpmteam@2.0.2
  • fc5aa7b4a libnpmsearch@3.0.1
  • 9fc1dee13 libnpmorg@2.0.1
  • 0ea870ec5 libnpmhook@6.0.1
  • 32fd744ea libnpmaccess@4.0.1
  • fc76f3d9f @npmcli/arborist@1.0.8
    • Fix cannot read property 'description' of undefined in npm ls when package-lock.json is corrupted
    • Do not allow peerDependencies to be nested under dependents in any circumstances
    • Always resolve peerDependencies in --prefer-dedupe mode

7.0.7 (2020-10-30)

BUG FIXES

DEPENDENCIES

  • 4156f053e @npmcli/run-script@1.7.4
    • restore the default npm start script
  • 1900ae9ad @npmcli/promise-spawn@1.3.2
    • fix errors when processing scripts as root
  • 8cb0c166c @npmcli/arborist@1.0.6
    • make sure missing bin links get set on reify

7.0.6 (2020-10-27)

BUG FIXES

DEPENDENCIES

  • 99ae633f6 libnpmversion@1.0.6
    • respect gitTagVersion = false
  • d4173f58d @npmcli/promise-spawn@1.3.1
    • do not return empty buffer when stdio is inherited
    • attach child process to returned promise
  • c09380fa5 @npmcli/run-script@1.7.3
    • forward SIGINT and SIGTERM to children that inherit stdio
  • b154861ad @npmcli/arborist@1.0.5
  • ffea6596b agent-base@6.0.2
    • support http proxy for https registries

7.0.5 (2020-10-23)

  • 77ad86b5e Merge docs deps with main project

7.0.4 (2020-10-23)

DOCUMENTATION

BUG FIXES

TESTS

DEPENDENCIES

  • ed6e6a9d3 eslint-plugin-standard@4.0.2

  • b737ee999 #2009 #2007 npm-packlist@2.1.4:

    • Maintain order in package.json files array globs
    • Strip slashes from package files list results

  • 783965508 #1997 #2000 #2005 @npmcli/arborist@1.0.4

    • Ensure that root is added when root.meta is set
    • Include all edges in explain() output when a root edge exists
    • Do not conflict on meta-peers that will not be replaced
    • Install peerOptionals if explicitly requested, or dev

7.0.3 (2020-10-20)

BUG FIXES

DOCUMENTATION

DEPENDENCIES

7.0.2 (2020-10-16)

DOCUMENTATION

BUG FIXES

DEPENDENCIES

7.0.1 (2020-10-15)

DOCUMENTATION

  • 03fca6a3b Adds docs on workspaces, explaining its basic concept and how to use it. (@ruyadorno)

BUG FIXES

DEPENDENCIES

  • 120e62736 node-gyp@7.1.1
  • 6560b8d95 @npmcli/arborist@1.0.2
    • do not drop scope information when fetching scoped package tarballs
    • fix cycles/ordering resolution when peer deps require nesting
  • 282a1e008 npm-user-validate@1.0.1
  • b259edcb4 hosted-git-info@3.0.7

v7.0.0 (2020-10-12)

BUG FIXES

DOCUMENTATION

DEPENDENCIES

  • 15366a1cf npm-registry-fetch@8.1.5
  • f04a74140 init-package-json@2.0.0
    • 1de21dce0 fix: support dot-separated aliases defined in a .npmrc ini files for init-* configs (@ruyadorno)
  • a67275cd9 eslint@7.11.0
  • 6fb83b78d hosted-git-info@3.0.6
  • 1ca30cc9b libnpmfund@1.0.0
  • 28a2d2ba4 @npmcli/arborist@1.0.0
    • npm/rfcs#239 Improve handling of conflicting peerDependencies in transitive dependencies, so that --force will always accept a best effort override, and --strict-peer-deps will fail faster on conflicts.
  • 9306c6833 libnpmfund@1.0.1
  • fafb348ef npm-package-arg@8.1.0
  • 365f2e756 read-package-json@3.0.0

v7.0.0-rc.4 (2020-10-09)

  • 09b456f2d @npmcli/config@1.2.1
    • #1919 exposes npm_config_user_agent env variable (@nlf)
  • e859fba9e #1936 fix npx for non-interactive shells (@nlf)
  • 9320b8e4f #1906 restore old npx behavior of running existing bins first (@nlf)
  • 7bd47ca2c @npmcli/arborist@0.0.33
    • fixed handling of invalid package.json file
  • 02737453b make-fetch-happen@8.0.10
    • do not calculate integrity values of http errors

v7.0.0-rc.3 (2020-10-06)

v7.0.0-rc.2 (2020-10-02)

  • 6de81a013 @npmcli/run-script@1.7.2
    • Fix regression running 'install' scripts when package.json does not contain a scripts object

v7.0.0-rc.1 (2020-10-02)

  • 281a7f39a @npmcli/arborist@0.0.31
    • Allow npm update to update bundled root dependencies
    • Only do implicit node-gyp build for gyp files named binding.gyp
  • 384f5ec47 update minipass-fetch to fix many 'cb() never called' errors
  • 7b1e75906 @npmcli/run-script@1.7.1
    • Only do implicit node-gyp build for gyp files named binding.gyp
  • c20e2f0c7 #1892 Support --omit options in npm outdated

v7.0.0-rc.0 (2020-10-01)

v7.0.0-beta.13 (2020-09-29)

v7.0.0-beta.12 (2020-09-22)

  • 24f3a5448 #1811 npm ci should never save package.json or lockfile (@isaacs)
  • 5e780a5f0 remove unused spec parameter, assign error code (@nlf)
  • f019a248a Remove unused npx binary (@isaacs)
  • db157b3ce @npmcli/arborist@0.0.27
    • Resolve race condition with conflicting bin links in local installs
    • #1812 Log engine mismatches more usefully
    • #1814 Do not loop trying to resolve dependencies that fail to load
    • npm/rfcs#224 Do not automatically install optional peer dependencies
    • Add the strictPeerDeps option, defaulting to false
    • fix forwarding configs to resolve pkg spec when adding new deps
  • b3a50d275 #1846 @npmcli/run-script@1.6.0
    • This updates node-gyp to v7, allowing us to deduplicate a lot of significant dependencies.
  • a1d375f6b #1819 Add --strict-peer-deps option (@isaacs)
  • 5837a4843 #1699 Use allow/deny list in docs (@luciomartinez)

v7.0.0-beta.11 (2020-09-16)

  • 63005f4a9 #1639 npm view should not output extra newline (@MylesBorins)
  • 3743a42c8 #1750 add outdated tests (@claudiahdz)
  • 2019abdf1 #1786 add lib/link.js tests (@ruyadorno)
  • 2f8d11968 @npmcli/arborist@0.0.25
    • add meta vulnerability calculator for faster audits
    • changed parsing specs to be relative to cwd
    • fix logging script execution
    • fix properly following resolved symlinks
    • fix package.json dependencies order
  • 49b2bf5a7 @npmcli/config@1.1.8
    • fix unknown envs to be passed through
    • fix setting correct globalPrefix on load
  • f9aac351d libnpmversion@1.0.5
    • fix git ignored lockfiles

v7.0.0-beta.10 (2020-09-08)

v7.0.0-beta.9 (2020-09-04)

  • ef8f5676b #1757 view: always fetch fullMetadata, and preferOnline

  • ac5aa709a #1758 fix scope config

  • a36e2537f outdated: don't throw on non-version/tag/range dep

  • 371f0f062 @npmcli/arborist@0.0.20

    • Provide explanation objects for ERESOLVE errors
    • Support overriding certain classes of ERESOLVE errors with --force
    • Detect changes to package.json requiring package-lock dependency flag re-evaluation

  • 2a4e2e9ef #1761 Explain ERESOLVE errors

  • 8e3e83bd4 @npmcli/arborist@0.0.21

    • Remove bin links on prune
    • Remove unnecessary tree walk for workspace projects
    • Install workspaces on update:true

  • d6b134fd9 #1738 #1734 fix package spec parsing during cache add process (@mjeanroy)

  • f105eb833 npm-audit-report@2.1.4:

    • Do not crash on cyclical meta-vulnerability references

  • 03a9f569b opener@1.5.2

  • 5616a23b4 @npmcli/git@2.0.4

    • Support .git files, so that git worktrees are respected

v7.0.0-beta.8 (2020-09-01)

v7.0.0-beta.7 (2020-08-25)

v7.0.0-beta.6 (2020-08-21)

  • 707207bdd add @npmcli/config dependency

  • 5cb9a1d4d #1688 use @npmcli/config for configuration (@isaacs)

  • a4295f5db npm-registry-fetch@8.1.4:

    • Redact passwords from HTTP logs

  • a5a6a516d json-parse-even-better-errors@2.3.0:

    • Adds support for indentation/newline formatting preservation

  • a14054558 read-package-json-fast@1.2.1:

    • Adds support for indentation/newline formatting preservation

  • f8603c8af libnpmversion@1.0.4:

    • Adds support for indentation/newline formatting preservation

  • 9891fa71c read-package-json@2.1.2:

    • Adds support for indentation/newline formatting preservation

  • b44768aac #1662 #1693 #1690 @npmcli/arborist@0.0.17:

    • Load root project package.json when running loadVirtual.
    • Fetch metadata from registry when loading tree from outdated package-lock.json file. This avoids a situation where a lockfile or shrinkwrap from npm v5 would result in deleting dependencies on install.
    • Preserve package.json and package-lock.json formatting in all places where these files are written.

  • 281da6fdc tar@6.0.5

  • 1faa5b33d #1655 show usage when help-search finds no results

  • 10fcff73a #1695 fix pulseWhileDone promise handling

  • 88e4241c5 #1698 add lib/logout.js unit tests (@ruyadorno)

v7.0.0-beta.5 (2020-08-18)

v7.0.0-beta.4 (2020-08-11)

Replace some environment variables that were excluded. This implements the amendment to RFC0021.

v7.0.0-beta.3 (2020-08-10)

Bring back support for npm audit --production, fix a minor npm version annoyance, and track down a very serious issue where a project could be blown away when it matches a meta-dep in the tree.

v7.0.0-beta.2 (2020-08-07)

New notification style for updates, and a working doctor.