npm - npm Package Versions

10.9.0 (2024-10-03)

Features

• 4d57928 #7766 devEngines (#7766) (@reggi)

Bug Fixes

• 6ca609e #7789 ping and doctor commands fix for checking if registry is online (#7789) (@milaninfy)

Documentation

• 63d6a73 #7783 package.json: add brief section on exports, link to Node.js docs (#7783) (@wheresrhys)
• 366c07e #7776 remove incorrect note about npm install (#7776) (@wraithgar)

Dependencies

• 60a7ee5 #7803 hoist npm-normalize-package-bin
• 20dd44f #7803 hoist minipass-fetch
• 5795987 #7803 update proggy@3.0.0
• 99ccae3 #7803 update bin-links@5.0.0
• 75786ad #7803 update @npmcli/query@4.0.0
• 1c25a1d #7803 update @npmcli/node-gyp@4.0.0
• 2d7fc3d #7803 update @npmcli/name-from-folder@3.0.0
• 1e09334 #7803 update @npmcli/metavuln-calculator@8.0.0
• 820e983 #7803 update @npmcli/installed-package-contents@3.0.0
• 9cd6603 #7803 update read-package-json-fast@4.0.0
• b84d907 #7803 update @npmcli/git@6.0.1
• 53ed632 #7803 update write-file-atomic@6.0.0
• ab40dab #7803 update which@5.0.0
• b1c4770 #7803 update validate-npm-package-name@6.0.0
• 8206c4f #7803 update ssri@12.0.0
• 8b7dbc8 #7803 update read@4.0.0
• f6909a0 #7803 update proc-log@5.0.0
• f9b2e18 #7803 update parse-conflict-json@4.0.0
• e7ab206 #7803 update pacote@19.0.0
• b28dbb1 #7803 update npm-user-validate@3.0.0
• d13a20b #7803 update npm-registry-fetch@18.0.1
• 5208f74 #7803 update npm-profile@11.0.1
• 092f41f #7803 update npm-pick-manifest@10.0.0
• 50a7bc8 #7803 update npm-package-arg@12.0.0
• 591130d #7803 update npm-install-checks@7.1.0
• be6ae96 #7803 update npm-audit-report@6.0.0
• 8d4060a #7803 update normalize-package-data@7.0.0
• 105fa2b #7803 update nopt@8.0.0
• eae4f57 #7803 update make-fetch-happen@14.0.1
• 7214149 #7803 update json-parse-even-better-errors@4.0.0
• c4bed31 #7803 update init-package-json@7.0.1
• f54b155 #7803 update ini@5.0.0
• 6deae9e #7803 update hosted-git-info@8.0.0
• 034c729 #7803 update cacache@19.0.1
• ddb8be0 #7803 update abbrev@3.0.0
• 538a4cc #7803 update @npmcli/run-script@9.0.1
• b80d048 #7803 update @npmcli/redact@3.0.0
• 81137fc #7803 update @npmcli/promise-spawn@8.0.1
• 2076368 #7803 update @npmcli/package-json@6.0.1
• feac87c #7803 update @npmcli/map-workspaces@4.0.1
• dd90f9e #7803 update @npmcli/fs@4.0.0

Chores

• 95e2cb1 #7810 ignore .github folder in release-please (@reggi)
• be1e6da #7803 update minify-registry-metadata@4.0.0 (@reggi)
• 43f2374 #7803 update ignore-walk@7.0.0 (@reggi)
• bb03036 #7803 update npm-packlist@9.0.0 (@reggi)
• 2072705 #7803 update @npmcli/eslint-config@5.0.1 (@reggi)
• 949d8f8 #7803 engine ^18.17.0 || >=20.5.0 in package template (@reggi)
• fefd509 #7764 deps: bump actions/download-artifact from 3 to 4 in /.github/workflows (#7764) (@dependabot[bot], @wraithgar)
• workspace: @npmcli/arborist@8.0.0
• workspace: @npmcli/config@9.0.0
• workspace: libnpmaccess@9.0.0
• workspace: libnpmdiff@7.0.0
• workspace: libnpmexec@9.0.0
• workspace: libnpmfund@6.0.0
• workspace: libnpmhook@11.0.0
• workspace: libnpmorg@7.0.0
• workspace: libnpmpack@8.0.0
• workspace: libnpmpublish@10.0.0
• workspace: libnpmsearch@8.0.0
• workspace: libnpmteam@7.0.0
• workspace: libnpmversion@7.0.0

10.8.3 (2024-08-28)

Bug Fixes

• 7e61151 #7759 docs: init usage description corrected (#7759) (@milaninfy)
• 2404c7e #7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)
• 91e46a3 #7721 init: use locally installed version of given package (#7721) (@milaninfy)
• 4e81a6a #7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)
• a947f25 #7679 update lifecycle script list in run-script (#7679) (@sonsurim)

Documentation

• e674987 #7743 update docs for npmrc and package-json (#7743) (@milaninfy)
• 24d5350 #7742 fix and update scoped configuration example (#7742) (@demedos)

Dependencies

• 3fd7a48 #7737 lru-cache@10.4.3
• d7e462b #7737 jackspeak@3.4.3
• df58b0c #7737 glob@10.4.5
• 7342c24 #7737 foreground-child@3.3.0
• 2986f4e #7737 cacache@18.0.4
• a44ab26 #7737 postcss-selector-parser@6.1.2
• 4e965ad #7737 semver@7.6.3
• 12587fa #7737 npm-package-arg@11.0.3
• 1a9ac86 #7737 debug@4.3.6
• a303ddd #7737 node-gyp@10.2.0

Chores

• 1772276 #7756 fix duplicate changelog entries (@wraithgar)
• 8035725 #7756 @npmcli/template-oss@4.23.3 (@wraithgar)
• ed4add1 #7737 dev dependency updates (@wraithgar)
• 86b05fc #7683 allow for longer timer values (#7683) (@wraithgar)
• workspace: libnpmexec@8.1.4

10.8.2 (2024-07-09)

Bug Fixes

• 3101a40 #7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)
• 2273183 #7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)
• 15be6dd #7574 don't try parsing workspaces if none exist (@wraithgar)

Documentation

• ac937d4 #7616 install: add save-peer flag (#7616) (@drew4237)
• 55639ef #7615 use git+https in package.com url examples (#7615) (@MikeMcC399)
• 93883bb #7582 Improve manpage section for package.json funding properties (#7582) (@kemitchell)
• 92e71e6 #7576 fix links to community discussions (#7576) (@leobalter)

Dependencies

• 1c1adae #7636 npm-pick-manifest@9.1.0
• 5e4fa18 #7636 socks-proxy-agent@8.0.4
• d8fa116 #7636 https-proxy-agent@7.0.5
• 76dab91 #7636 normalize-package-data@6.0.2
• 094c4ea #7636 minimatch@9.0.5
• 1c8d41d #7636 @npmcli/git@5.0.8
• e5451e1 #7605 jackspeak@3.4.0
• 7b584d3 #7605 foreground-child@3.2.1
• 941d0d7 #7605 debug@4.3.5
• 8b8ce7a #7605 glob@10.4.2
• 4646768 #7605 npm-registry-fetch@17.1.0
• 6f0d7ce #7605 @npmcli/redact@2.0.1
• 29204c8 #7605 @npmcli/package-json@5.2.0
• 04d6910 #7574 @npmcli/package-json@5.1.1
• 4ef4830 #7574 remove read-package-json-fast

Chores

• 2490b49 #7621 remove .github/workflows/benchmark.yml (#7621) (@wraithgar)
• 3b8b111 #7605 update devDependencies in lockfile (@wraithgar)

10.8.1 (2024-05-29)

Bug Fixes

• 6b55646 #7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)
• e4c7a41 #7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)
• 8f94ae8 #7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)
• 2d1d8d0 #7559 adds node: specifier to all native node modules (#7559) (@reggi)
• 7d89b55 #7490 ci: rm workspace node_modules (#7490) (@reggi)
• 9122fb6 #7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)
• 9e6686b #7545 send proper otp token on web auth (#7545) (@wraithgar)
• b1db070 #7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)
• 53cda32 #7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)
• 61d5771 #7541 remove json.stringify from all commands (#7541) (@lukekarrys)
• 4dfc7d2 #7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)
• 3cefdf6 #7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)
• ef4c975 #7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)

Documentation

• fd6479f #7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)

Dependencies

• e3f0fd4 #7568 @npmcli/package-json@5.1.1
• 447a8d7 #7566 spdx-license-ids@3.0.18
• 83fed2e #7566 sigstore@2.3.1
• 41291ba #7566 @sigstore/tuf@2.3.4
• 18b42a4 #7566 glob@10.4.1
• 5c6759d #7566 postcss-selector-parser@6.1.0
• 2508a83 #7566 is-cidr@5.1.0
• 6278fe4 #7566 ini@4.1.3

Chores

• 2d84091 #7568 fix snapshots for updated @npmcli/package-json (@wraithgar)
• 6574dc9 #7566 dev dependency updates (@wraithgar)

10.8.0 (2024-05-15)

Features

• 1e375c1 #7442 create exit handler class (#7442) (@lukekarrys)

Bug Fixes

• d5c3289 #7513 refactor: use output buffer and error for more commands (#7513) (@lukekarrys)
• 12f103c #7533 add first param titles to logs where missing (#7533) (@lukekarrys)
• badeac2 #7521 config: use redact on config output (#7521) (@lukekarrys)
• 76aef74 #7520 view: refactor exec and execWorkspaces to call same methods (#7520) (@lukekarrys)
• b54cdb8 #7515 refactor: create new error output primitives (#7515) (@lukekarrys)
• e40454c #7506 view: dont unwrap arrays in json mode (#7506) (@lukekarrys)
• 6f64148 require stdout to be a TTY for progress (#7507) (@lukekarrys)
• db62910 #7504 config: be more aggressive about hiding protected values (#7504) (@wraithgar)
• 6d456bb #7497 dont write log file for completion commands (#7497) (@lukekarrys)
• 722c0fa #7463 limit packument cache size based on heap size (@wraithgar)
• ca1a68d #7474 log if npm deprecate does not match any version (#7474) (@mbtools)
• 261ea19 #7457 run input.start around help and openining urls (@lukekarrys)
• 4ab6cf4 #7459 publish: validate dist-tag (#7459) (@reggi)

Documentation

• b2ce025 #7518 suggest correct bin entry (#7518) (@Santoshraj2)
• bdd2aae #7502 remove obsolete removal using make uninstall (#7502) (@avinal)
• c3d2819 #7496 npm help json/global command on windows (#7496) (@klm-turing, @lukekarrys)
• 268303c #7479 add npm version to every local help output (#7479) (@klm-turing)
• e39d422 #7473 suggest "npm repo" for showing the repo of a package (#7473) (@full-stop)
• f6fff32 #7433 clarify what peerDependenciesMeta does (#7433) (@xuhdev, @wraithgar)

Dependencies

• 1cdc662 #7522 @tufjs/repo-mock@2.0.1
• 898bcfd #7522 @sigstore/protobuf-specs@0.3.2
• fec3c94 #7522 path-scurry@1.11.1
• cb85973 #7522 glob@10.3.15
• e189873 #7498 @sigstore/sign@2.3.1
• c2b28f9 #7498 minipass@7.1.1
• 9064ffc #7498 @sigstore/tuf@2.3.3
• fd42986 #7498 @npmcli/fs@3.1.1
• 4e53e33 #7498 semver@7.6.2
• f078c82 #7495 glob@10.3.14
• 58f773c #7495 path-scurry@1.11.0
• ea0b07d #7482 pacote@18.0.6
• 8d161a4 #7482 semver@7.6.1
• 5b2317b #7463 add lru-cache
• 26fefb8 #7480 promzard@1.0.2
• 2146e1f #7480 npm-bundled@3.0.1
• ff6c5d1 #7480 minipass-fetch@3.0.5
• 419f9b9 #7480 cmd-shim@6.0.3
• dade2c8 #7480 minipass@7.1.0
• 18e5312 #7480 validate-npm-package-name@5.0.1
• d440011 #7480 npm-user-validate@2.0.1
• 552113e #7480 ignore-walk@6.0.5
• 7e15b6d #7480 @npmcli/metavuln-calculator@7.1.1
• 8b20f8c #7480 ssri@10.0.6
• a9a6dcd #7480 pacote@18.0.5
• e2fdb65 #7480 npm-pick-manifest@9.0.1
• 310a7a5 #7480 normalize-package-data@6.0.1
• e71f541 #7480 nopt@7.2.1
• 18c3b40 #7480 json-parse-even-better-errors@3.0.2
• 4c5bf77 #7480 init-package-json@6.0.3
• 714e3e1 #7480 hosted-git-info@7.0.2
• f94d672 #7480 cacache@18.0.3
• 43331e4 #7480 bin-links@4.0.4
• 8234412 #7480 @npmcli/promise-spawn@7.0.2
• 6dfaebb #7480 @npmcli/git@5.0.7
• 63ef498 #7457 npm-registry-fetch@17.0.1
• 4cbc2d4 #7457 npm-profile@10.0.0

Chores

• 10256e8 #7522 dev dependency updates (@wraithgar)
• dcfc3de #7517 convert run-script tests to snapshots (#7517) (@lukekarrys)
• 8add914 #7505 create single bug report issue template (#7505) (@lukekarrys)
• 7c7fba4 #7500 benchmarks: fix emoji reaction to comment (#7500) (@lukekarrys)
• d3b9587 #7494 disable progress on npm pack test (@wraithgar)
• 67ebb66 #7494 disable color in config tests (@wraithgar)
• 2ec2e75 #7494 disable progress on shellout exit tests (@wraithgar)
• e9fdc9a #7483 create smoke-publish-test.sh script (#7483) (@lukekarrys)
• 1524cfd #7484 remove extra quotes from benchmark event_type (#7484) (@lukekarrys)
• 9c4d3c4 #7467 template-oss-apply (@lukekarrys)
• 2b7ec54 #7467 template-oss@4.22.0 (@lukekarrys)
• 8ded848 #7457 remove doctor snapshot stack traces (@lukekarrys)

10.7.0 (2024-04-30)

Features

• 7e349f4 #7432 add spinner (#7432) (@lukekarrys)

Bug Fixes

• d679ce8 #7449 linting: no-unused-vars (@wraithgar)
• 2558283 #7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)
• bc4c342 #7448 account for registries with no publisher in search (#7448) (@wraithgar)
• bcc781a #7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)
• 104fcb5 #7438 remove doctor log for each file permission check (#7438) (@lukekarrys)
• 5230647 #7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)
• 71cbd91 #7421 hide banner for exec and explore (#7421) (@lukekarrys)
• 57ebebf #7418 update repository.url in package.json (#7418) (@wraithgar)

Documentation

• 1674136 #7441 correct search help output (#7441) (@wraithgar)

Dependencies

• 80eec03 #7453 @npmcli/redact@2.0.0
• a7145d4 #7453 npm-registry-fetch@17.0.0
• a785766 #7453 pacote@18.0.3
• 65d76db #7453 npm-profile@9.0.2
• cadc0f0 #7449 hoist production copy of sprintf-js
• 2cffdfe #7449 lru-cache@10.2.2
• 432efb5 #7449 make-fetch-happen@13.0.1
• 9da5738 #7437 @npmcli/run-script@8.1.0 (#7437)
• 762888a #7429 update dependencies for workspaces (#7429)
• workspace: @npmcli/arborist@7.5.1
• workspace: @npmcli/config@8.3.1
• workspace: libnpmaccess@8.0.5
• workspace: libnpmdiff@6.1.1
• workspace: libnpmexec@8.1.0
• workspace: libnpmfund@5.0.9
• workspace: libnpmhook@10.0.4
• workspace: libnpmorg@6.0.5
• workspace: libnpmpack@7.0.1
• workspace: libnpmpublish@9.0.7
• workspace: libnpmsearch@7.0.4
• workspace: libnpmteam@6.0.4
• workspace: libnpmversion@6.0.1

Chores

• 356c374 #7453 fix test fixture for new redact behavior (@wraithgar)
• 2fba4b7 #7449 update devDependencies in lockfile (@wraithgar)

10.6.0 (2024-04-25)

Features

• 9123de4 #7373 do all ouput over proc-log events (@lukekarrys)
• 9622597 #7339 refactor terminal display (#7339) (@lukekarrys)

Bug Fixes

• 0e74ee4 #7416 clean up npm object (#7416) (@wraithgar)
• c060e60 #7415 return command and argv from load (@lukekarrys)
• 180b919 #7415 remove unused npm.setCmd method (@lukekarrys)
• 0708b3b #7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)
• 7f4e667 #7403 redact when displaying non-ascii arguments (@lukekarrys)
• 06202f0 #7403 store unref promises for awaiting in tests (@lukekarrys)
• e5f1948 #7403 run update notifier after exec but before waiting (@lukekarrys)
• f309c1c #7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)
• 43e6194 #7403 dont show run script banners in silent (@lukekarrys)
• 694dba9 #7403 dont expose as many public properties of timers (@lukekarrys)
• 7ca6d84 #7403 use proc-log META for flush and force (@lukekarrys)
• 2538438 #7403 dont write timing logs to file unless requested (@lukekarrys)
• 7e04417 #7403 rename base-cmd to match other commands (@lukekarrys)
• fc68547 #7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)
• 28019d5 #7403 cleanup: move cli specific files to separate dir (@lukekarrys)
• 469f788 #7403 cleanup: newlines and whitespace (@lukekarrys)
• 4ab6401 #7403 cleanup: dont nest files utils dir (@lukekarrys)
• 78447d7 #7399 prefer fs/promises over promisify (#7399) (@lukekarrys)
• d531f8b #7407 Remove table output from search and tar summary (@wraithgar)
• c209e98 #7401 Remove table output from many commands (@wraithgar)
• ad7ab8c #7388 perf: lazy loading optimizations (#7388) (@wraithgar)
• 8eae4b3 #7385 token: properly await registry request (#7385) (@wraithgar)
• 9216d59 #7377 better output colors (#7377) (@wraithgar)
• 6512112 #7378 use proc-log for all timers (@lukekarrys)
• 2a80dab #7370 typo in npm access usage (#7370) (@mbtools)

Documentation

• dfa4cab #7401 update output examples (@wraithgar)
• 140b9c9 #7382 package-json: note that line endings are inferred (#7382) (@ertw)
• c16dd4e #7367 Document that overrides only work in the root package.json (#7367) (@s100)

Dependencies

• 36adff3 #7408 pacote@18.0.2
• 486d46c #7408 @npmcli/installed-package-contents@2.1.0
• 157d0ae #7408 @npmcli/package-json@5.1.0
• b0ca163 #7409 remove @npmcli/disparity-colors
• c77f035 #7407 remove columnify
• 2ec690d #7401 move cli-table3 to devDependencies
• fc6e291 #7392 proc-log@4.2.0 (#7392)
• 38ed048 #7378 @npmcli/metavuln-calculator@7.1.0
• 7678a3d #7378 proc-log@4.1.0
• 87f6c09 #7373 @npmcli/metavuln-calculator@7.0.1
• b8f8b41 #7373 @npmcli/run-script@8.0.0
• 79f79c7 #7373 proc-log@4.0.0
• 9027266 #7373 pacote@18.0.0
• ee4b3e0 #7373 npm-registry-fetch@16.2.1
• 0e7789b #7373 npm-profile@9.0.1
• ac98fd3 #7373 npm-package-arg@11.0.2
• 9351570 #7373 @npmcli/package-json@5.0.3
• d3a0cfa #7373 @npmcli/git@5.0.6
• workspace: @npmcli/arborist@7.5.0
• workspace: @npmcli/config@8.3.0
• workspace: libnpmaccess@8.0.4
• workspace: libnpmdiff@6.1.0
• workspace: libnpmexec@8.0.0
• workspace: libnpmfund@5.0.8
• workspace: libnpmhook@10.0.3
• workspace: libnpmorg@6.0.4
• workspace: libnpmpack@7.0.0
• workspace: libnpmpublish@9.0.6
• workspace: libnpmsearch@7.0.3
• workspace: libnpmteam@6.0.3
• workspace: libnpmversion@6.0.0

Chores

• 3cbc258 #7403 test for early version exit (@lukekarrys)
• 08e0c0e #7403 move sigstore json files to fixtures dir (@lukekarrys)
• ea66e95 #7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)
• 9333e9d #7386 reduce windows shim test flakes (#7386) (@lukekarrys)

10.5.2 (2024-04-10)

Bug Fixes

• ef381b1 #7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)
• 3760dd2 #7361 perf: do less work loading config (#7361) (@wraithgar)
• 64bcf4c #7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)
• 5a28a29 #7352 perf: lazy load workspace dependency (#7352) (@H4ad)
• 5fc0f9d #7347 lazy load validate npm package name on error message (#7347) (@H4ad)
• c929ed1 #7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)
• 70497cb #7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)

Documentation

• 90ba1c9 #7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)

Dependencies

• 699a1de #7362 @npmcli/map-workspaces@3.0.6
• 49fb9b7 #7362 socks@2.8.3
• f69052e #7362 @npmcli/package-json@5.0.2
• c18a0ad #7357 sigstore@2.3.0
• fd4153b #7357 socks@2.8.2
• d6b705a #7357 postcss-selector-parser@6.0.16
• 248c177 #7357 hasown@2.0.2
• 4af9e86 #7357 builtins@5.1.0
• 7546b56 #7357 @npmcli/agent@2.2.2
• d38fd4f #7357 spdx-expression-parse@4.0.0
• 913b326 #7357 is-cidr@5.0.5
• 84bbbd4 #7357 @npmcli/package-json@5.0.1
• a0f5048 #7357 @npmcli/git@5.0.5
• workspace: @npmcli/arborist@7.4.2
• workspace: @npmcli/config@8.2.2
• workspace: libnpmdiff@6.0.9
• workspace: libnpmexec@7.0.10
• workspace: libnpmfund@5.0.7
• workspace: libnpmpack@6.0.9

Chores

• 81be28d #7357 dev dependency updates (@wraithgar)

10.5.1 (2024-04-03)

Bug Fixes

• 17d97d2 #7334 use @npmcli/redact for log redactions (@lukekarrys)
• 8cab136 #7324 ensure maxSockets is respected (#7324) (@lukekarrys)
• 9bffa13 #7320 query: properly return :missing nodes (#7320) (@wraithgar)
• 9d4e85f #7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)
• bdb3c28 #7274 added check for dry-run (#7274) (@cod1r)
• 7f1ab88 #7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)

Documentation

• 1da5cf0 #7198 add link to engines section (#7198) (@uiolee)
• 1114a12 #7307 fix incorrect npm audit key response link (#7307) (@davidlj95)
• 9807caf #7304 update audit docs with provenance info (#7304) (@bdehamer)
• e1ecfa7 #7285 Correct capitalization for URL (#7285) (@coliff)

Dependencies

• 87a61fc #7334 npm-registry-fetch@16.2.0
• 5469614 #7327 init-package-json@6.0.2
• 5469614 #7327 promzard@1.0.1
• 5469614 #7327 read@3.0.1 (#7327)
• 9ccff72 #7329 tar@6.2.1
• 7201a00 #7329 node-gyp@10.1.0
• 6fd94f2 #7329 minimatch@9.0.4
• b048592 #7329 ini@4.1.2
• c54a84a #7329 glob@10.3.12
• 6853531 #7329 cli-table3@0.6.4
• c9315cb #7329 binary-extensions@2.3.0
• 5bb0031 #7329 @sigstore/tuf@2.3.2
• 8cab136 #7324 agent-base@7.1.1 (@lukekarrys)
• workspace: @npmcli/arborist@7.4.1
• workspace: @npmcli/config@8.2.1
• workspace: libnpmaccess@8.0.3
• workspace: libnpmdiff@6.0.8
• workspace: libnpmexec@7.0.9
• workspace: libnpmfund@5.0.6
• workspace: libnpmhook@10.0.2
• workspace: libnpmorg@6.0.3
• workspace: libnpmpack@6.0.8
• workspace: libnpmpublish@9.0.5
• workspace: libnpmsearch@7.0.2
• workspace: libnpmteam@6.0.2

Chores

• 8cab136 #7324 add smoke-test for large prod installs (@lukekarrys)
• 0dab381 #7258 jsdom@24.0.0 (#7258) (@wraithgar)
• af3c48e #7262 test refactor (#7262) (@wraithgar)

10.5.0 (2024-02-28)

Features

• 2366edc #7218 query: add :vuln pseudo selector (@wraithgar)
• 4f3ddbb #5966 add --expect-entries to npm query (@wraithgar)

Bug Fixes

• 818957c #7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)
• d04111d #7197 view: filter out invalid semver (#7197) (@wraithgar)
• b0a3ba0 #7195 prevent adding invalid dist-tag (#7195) (@wraithgar)

Documentation

• c4741fe #7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)
• 686a622 #7247 scope: update example command to work in windows (#7247) (@robertobasile84)
• 95b5057 #5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)
• 5b7184f #7190 workspaces: fix grammar (#7190) (@alekstech)
• 0dd03f9 #7182 fix typos (#7182) (@GoodDaisy)

Dependencies

• 16d4c9f #7218 @npmcli/query@3.1.0
• 06247d1 #7242 spdx-license-ids@3.0.17
• 79d1e0b #7242 spdx-exceptions@2.5.0
• 67e853a #7242 socks@2.8.0
• 4c9fe4b #7242 lru-cache@10.2.0
• 4a50c5a #7242 https-proxy-agent@7.0.4
• ed3f254 #7242 http-proxy-agent@7.0.2
• 8ec4fd5 #7242 hasown@2.0.1
• 98b1189 #7242 @npmcli/agent@2.2.1
• dafa903 #7242 sigstore@2.2.2
• d0bcb76 #7242 diff@5.2.0
• a13808e #7242 semver@7.6.0
• d6521ac #7242 @sigstore/tuf@2.3.1
• 43cac2f #7242 ip@2.0.1
• workspace: @npmcli/arborist@7.4.0
• workspace: @npmcli/config@8.2.0
• workspace: libnpmdiff@6.0.7
• workspace: libnpmexec@7.0.8
• workspace: libnpmfund@5.0.5
• workspace: libnpmpack@6.0.7

Chores

• d6bc684 #7242 update devDependencies in lockfile (@wraithgar)