3.16.0 (2019-07-18)

Bug Fixes

• command: Bump minimum range of lodash, silence dumb 'security' warning (c405871)
• conventional-commits: Hard-pin lodash.template dependency to silence 'helpful' security warning (c54ad68)
• deps: Bump @evocateur/pacote (03e4797)
• deps: Update forked npm libs (4d67426)
• npm-conf: OTP should default to undefined, figgy pudding is very strict (2fa02a8)
• pack-directory: Bump npm-packlist + tar dependencies (59ebd19)
• package-graph: Flatten cycles to avoid skipping packages (#2185) (b335763)
• project: Ensure deprecated githubRelease config is also remapped from command.publish namespace (a3d264e), closes #2177
• publish: Add --graph-type option to control packages included in topological sort (#2152) (ae87669), closes #1437
• publish: Allow --no-verify-access to prevent checking for account-level 2FA (ce58d8f)
• publish: OTP cache should be seeded from conf value, not CLI directly (cf56622)
• publish: Propagate root license into custom publish directories (d410a58), closes #2157

Features

• bootstrap: Add --strict option to enable throwing when --hoist warns (#2140) (91437b5)
• deps: @octokit/plugin-enterprise-rest@^3.6.1 (74a3890)
• deps: @octokit/rest@^16.28.4 (5f09f50)
• deps: byte-size@^5.0.1 (ed51ddd)
• deps: conventional-recommended-bump@^5.0.0 (2a0ed60)
• deps: fs-extra@^8.1.0 (313287f)
• deps: get-port@^4.2.0 (778ae6a)
• deps: glob-parent@^5.0.0 (c6bc218)
• deps: globby@^9.2.0 (d9aa249)
• deps: import-local@^2.0.0 (14d2c66)
• deps: is-ci@^2.0.0 (ab2ad83)
• deps: load-json-file@^5.3.0 (3718cc9)
• deps: multimatch@^3.0.0 (968b0d7)
• deps: p-map@^2.1.0 (9e58394)
• deps: pify@^4.0.1 (f8ee7e6)
• deps: semver@^6.2.0 (d8016d9)
• deps: slash@^2.0.0 (bedd6af)
• deps: write-json-file@^3.2.0 (4fa7dea)
• listable: Output JSON adjacency list with --graph (9457a21), closes #1970
• otplease: Expose getOneTimePassword() helper (44b9f70)
• publish: Eager prompt for OTP when account-level 2FA is enabled (4f893d1)
• run-lifecycle: Upgrade npm-lifecycle@^3.1.0 (e015a74)

3.14.0 (2019-05-14)

Bug Fixes

• add: Never pass filter options to nested bootstrap (9a5a29c), closes #1989
• run-lifecycle: Bump npm-lifecycle dependency to avoid noisy audit warning (ea7c20d)

Features

• conventional-commits: Add conventional prerelease/graduation (#1991) (5d84b61), closes #1433 #1675
• dist-tag: Prompt for OTP when required (af870bb)
• exec: Add just-in-time queue management (23736e5)
• import: Add --preserve-commit option (#2079) (6a7448d)
• link: generate shims for missing 'bin' scripts (#2059) (90acdde), closes #1444
• listable: Use QueryGraph.toposort() helper (84ce674)
• publish: Add --otp option (6fcbc36), closes #2076
• publish: Add just-in-time queue management (ae6471c)
• publish: Add OTP prompt during publish (#2084) (c56bda1), closes #1091
• publish: Display uncommitted changes when validation fails (#2066) (ea41fe9)
• query-graph: Add toposort() helper (90759c2)
• run: Add just-in-time queue management (#2045) (6eca172)
• run: Extract @lerna/run-topologically (3a8b175)
• version: Add just-in-time queue management (290539b)

3.13.0 (2019-02-15)

Features

• conventional-commits: Bump conventional-changelog dependencies to pick up security fixes (d632d1b)
• listable: Output newline-delimited JSON with --ndjson (742781b)
• meta: Add repository.directory field to package.json (aec5023)
• meta: Normalize package.json homepage field (abeb4dc)

3.11.0 (2019-02-08)

Bug Fixes

• collect-updates: Improve logging, making ignored globs explicit (42e4a5c)
• collect-updates: Match dotfiles when ignoring changes (99eadc6)
• create: Bump camelcase (e58a1d0)
• deps: Explicit libnpmaccess ^3.0.1 (6ba3d1d)
• deps: Explicit libnpmpublish ^1.1.1 (a506d96)
• deps: Explicit npm-lifecycle ^2.1.0 (506ad6d)
• deps: Explicit npm-package-arg ^6.1.0 (4b20791)
• deps: Explicit npm-registry-fetch ^3.9.0 (a83c487)
• deps: Explicit npmlog ^4.1.2 (571c2e2)
• deps: Explicit pacote ^9.4.1 (44d05bf)
• deps: Explicit read-package-json ^2.0.13 (2695a90)
• deps: Remove unused libnpm (replaced by direct sub-packages) (1caeb28)
• filter-options: Require arguments to --scope and --ignore (4b81dad)
• publish: Correct silly log heading (f1dc3fc)

Features

• version: Create Github releases with --github-release (#1864) (f84a631), closes #1513

3.10.6 (2019-01-19)

Bug Fixes

• exec: Tweak description (68a0685)
• import: Ensure compatibility with root-level package globs (#1875) (16ab98d), closes #1872
• options: Document negated boolean options explicitly (8bc9669)
• package-graph: Ensure cycle paths are always names, not objects (ae81a76)
• package-graph: Use correct property when testing for duplicates (ef33cb7)
• publish: Map packument requests concurrently directly from package graph (c79a827)
• run: Re-order --npm-client in help output (bfa89bf)

3.10.0 (2019-01-08)

Bug Fixes

• publish: Correctly determine canary version when --include-merged-tags present (fb2a1b2), closes #1820

Features

• lerna: Use --exact version ranges between sibling dependencies (02a067f)
• version: Add --no-changelog option (#1854) (d73d823), closes #1852

3.6.0 (2018-12-07)

Bug Fixes

• add: Validate local package version (#1804) (ed6e2db), closes #1799
• bootstrap: Omit local bundled dependencies (#1805) (8f5bdbb), closes #1775
• pkg: Exclude mocks from package tarball (4017f37)

Features

• add: Add --no-bootstrap option (89bb928)
• bootstrap: Support --force-local option (#1807) (25572af), closes #1763
• Migrate existing usage to libnpm (0d3a786), closes #1767
• create: Migrate npm info subprocess to libnpm.manifest (65a1d1b)
• listable: Add --toposort option (b387881), closes #1652
• npm-dist-tag: Use fetch API instead of CLI to make changes (54008c6)
• publish: Add a "from-package" positional argument (#1708) (16611be), closes #1648
• publish: Attempt profile retrieval before whoami endpoint during user validation (38097d8)

3.1.2 (2018-08-20)

Bug Fixes

• Setup instance.filteredPackages explicitly (32357f8)
• Use packageGraph.rawPackageList instead of misleading instance.filteredPackages (2e2abdc)
• bootstrap: Remove redundant duplicate name check (c2405a1)
• command: Remove redundant filteredPackages calculation (e0a361f)
• filter-options: Move filterPackages logic into named export (e863c28)
• package-graph: Throw errors when package names are not unique (387df2b)
• publish: Allow composed version command to decide when to verify working tree (e61aa67)

<a name="3.1.1"></a>

3.0.0 (2018-08-10)

Bug Fixes

• add: Always use POSIX paths when computing relative file: specifiers (ffe354f)
• add: Support explicit & implicit relative file: specifiers (41f231f)
• create: Use filename without scope when generating imports from test file (acfd48b)
• publish: Improve npm pack experience (627cfc2)

Features

• changed: Support list output options (6ecdd83)
• list: Extract @lerna/listable utility (bf56018)
• list: Improve scriptability with several new options (2e204af)
• npm-publish: Add npmPack export (088ea54)
• package: Add tarball property (be453cd)
• publish: Run npm pack before npm publish (8d80b2c)
• publish: Validate npm registry and package access prerequisites (ebc8ba6), closes #55 #1045 #1347
• Add @lerna/log-packed module, extracted from npm (9c767ac)
• Split lerna version from of lerna publish (#1522) (8b97394), closes #277 #936 #956 #961 #1056 #1118 #1385 #1483 #1494

BREAKING CHANGES

• changed: The package names emitted to stdout are no longer prefixed by a "- ", and private packages are no longer displayed by default.

• list: The default output of lerna ls no longer shows version strings or private packages.

• The new alias lerna la resembles the old output, with the addition of relative path to the package

• The new alias lerna ll is a shortcut for the new --long option

• A new --parseable option has been added to aid magical piping incantations

• • --preid now defaults to "alpha" during prereleases:

  The previous default for this option was undefined, which led to an awkward "1.0.1-0" result when passed to semver.inc().

  The new default "alpha" yields a much more useful "1.0.1-alpha.0" result. Any previous prerelease ID will be preserved, just as it was before.

• --no-verify is no longer passed to git commit by default, but controlled by the new --commit-hooks option:

  The previous behavior was too overzealous, and the new option operates exactly like the corresponding npm version option of the same name.

  As long as your pre-commit hooks are properly scoped to ignore changes in package.json files, this change should not affect you. If that is not the case, you may pass --no-commit-hooks to restore the previous behavior.

<a name="3.0.0-rc.0"></a>

3.0.0-rc.0 (2018-07-27)

Bug Fixes

• changed: Clarify early exit log message (b132c3a)
• cli: Pass global defaults into option factory instead of yargs.config() (cf4008a), closes #1449
• command: Prevent premature resolution during tests from nested commands (151363f)
• core/package: Serialize hosted git URLs with original protocol/shorthand (60ff432), closes #1499
• project: Report syntax errors in root package.json (f674f35), closes #1452
• publish: Add default description 'npm' for --npm-client (649048c)
• publish: Avoid fs-extra warning on 32-bit machines (e908d23)
• publish: Do not leave unstaged changes with --skip-git (2d497ed)
• publish: Exit early when publishing w/o commits (#1453) (6cbae35), closes #773
• publish: Pass --repo-version argument through semver.valid() (272e9f1), closes #1483
• publish: Update lerna.json version after root preversion lifecycle (7b3817c), closes #1495
• tests: Special handling for Windows CI issues (#1441) (1a01125)

Code Refactoring

• collect-updates: Make argument signature explicit (e6ba19f)
• command: Do not store raw packages list as instance property (32a211a)

Features

• Add description from --help summary [skip ci] (9b65d8e)
• Count packages affected in command summary logging (5f5e585)
• publish: Ensure published packages contain a LICENSE file (#1465) (5863564), closes #1213
• Upgrade to fs-extra 6 (079d873)
• add: Add --exact option to lerna add (#1478) (346d156), closes #1470
• cli: Upgrade to Yargs 12 (7899ab8)
• command: Remove .defaultOptions() from option resolution stack (2b27a54)
• ls: Log number of packages listed (855fff6)
• package-graph: Add rawPackageList getter (0ad5faf)
• project: Move collect-packages into getPackages() method (06b88d4)
• publish: Add --require-scripts option to opt-in to raw JS lifecycle scripts (054392b)
• publish: Add --amend flag (#1422) (ef5f0db)
• run-lifecycle: Encapsulate npm-conf with createRunner() factory (488f98d)

BREAKING CHANGES

• publish: External $PKGDIR/scripts/{pre,post}publish.js lifecycles are now opt-in instead of automatic. Pass --require-scripts explicitly to restore previous functionality.
• collect-updates: Instead of an opaque command instance, distinct positional arguments are required.
• command: this.packages no longer exists in Command subclasses, use this.packageGraph.rawPackageList

<a name="3.0.0-beta.21"></a>