npm
Advanced tools
Changelog
10.6.0 (2024-04-25)
9123de4
#7373 do all ouput over proc-log events (@lukekarrys)9622597
#7339 refactor terminal display (#7339) (@lukekarrys)0e74ee4
#7416 clean up npm object (#7416) (@wraithgar)c060e60
#7415 return command and argv from load (@lukekarrys)180b919
#7415 remove unused npm.setCmd method (@lukekarrys)0708b3b
#7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)7f4e667
#7403 redact when displaying non-ascii arguments (@lukekarrys)06202f0
#7403 store unref promises for awaiting in tests (@lukekarrys)e5f1948
#7403 run update notifier after exec but before waiting (@lukekarrys)f309c1c
#7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)43e6194
#7403 dont show run script banners in silent (@lukekarrys)694dba9
#7403 dont expose as many public properties of timers (@lukekarrys)7ca6d84
#7403 use proc-log META for flush and force (@lukekarrys)2538438
#7403 dont write timing logs to file unless requested (@lukekarrys)7e04417
#7403 rename base-cmd to match other commands (@lukekarrys)fc68547
#7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)28019d5
#7403 cleanup: move cli specific files to separate dir (@lukekarrys)469f788
#7403 cleanup: newlines and whitespace (@lukekarrys)4ab6401
#7403 cleanup: dont nest files utils dir (@lukekarrys)78447d7
#7399 prefer fs/promises over promisify (#7399) (@lukekarrys)d531f8b
#7407 Remove table output from search and tar summary (@wraithgar)c209e98
#7401 Remove table output from many commands (@wraithgar)ad7ab8c
#7388 perf: lazy loading optimizations (#7388) (@wraithgar)8eae4b3
#7385 token: properly await registry request (#7385) (@wraithgar)9216d59
#7377 better output colors (#7377) (@wraithgar)6512112
#7378 use proc-log for all timers (@lukekarrys)2a80dab
#7370 typo in npm access
usage (#7370) (@mbtools)dfa4cab
#7401 update output examples (@wraithgar)140b9c9
#7382 package-json: note that line endings are inferred (#7382) (@ertw)c16dd4e
#7367 Document that overrides only work in the root package.json
(#7367) (@s100)36adff3
#7408 pacote@18.0.2
486d46c
#7408 @npmcli/installed-package-contents@2.1.0
157d0ae
#7408 @npmcli/package-json@5.1.0
b0ca163
#7409 remove @npmcli/disparity-colorsc77f035
#7407 remove columnify2ec690d
#7401 move cli-table3 to devDependenciesfc6e291
#7392 proc-log@4.2.0
(#7392)38ed048
#7378 @npmcli/metavuln-calculator@7.1.0
7678a3d
#7378 proc-log@4.1.0
87f6c09
#7373 @npmcli/metavuln-calculator@7.0.1
b8f8b41
#7373 @npmcli/run-script@8.0.0
79f79c7
#7373 proc-log@4.0.0
9027266
#7373 pacote@18.0.0
ee4b3e0
#7373 npm-registry-fetch@16.2.1
0e7789b
#7373 npm-profile@9.0.1
ac98fd3
#7373 npm-package-arg@11.0.2
9351570
#7373 @npmcli/package-json@5.0.3
d3a0cfa
#7373 @npmcli/git@5.0.6
@npmcli/arborist@7.5.0
@npmcli/config@8.3.0
libnpmaccess@8.0.4
libnpmdiff@6.1.0
libnpmexec@8.0.0
libnpmfund@5.0.8
libnpmhook@10.0.3
libnpmorg@6.0.4
libnpmpack@7.0.0
libnpmpublish@9.0.6
libnpmsearch@7.0.3
libnpmteam@6.0.3
libnpmversion@6.0.0
Changelog
10.5.2 (2024-04-10)
ef381b1
#7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)3760dd2
#7361 perf: do less work loading config (#7361) (@wraithgar)64bcf4c
#7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)5a28a29
#7352 perf: lazy load workspace dependency (#7352) (@H4ad)5fc0f9d
#7347 lazy load validate npm package name on error message (#7347) (@H4ad)c929ed1
#7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)70497cb
#7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)699a1de
#7362 @npmcli/map-workspaces@3.0.6
49fb9b7
#7362 socks@2.8.3
f69052e
#7362 @npmcli/package-json@5.0.2
c18a0ad
#7357 sigstore@2.3.0
fd4153b
#7357 socks@2.8.2
d6b705a
#7357 postcss-selector-parser@6.0.16
248c177
#7357 hasown@2.0.2
4af9e86
#7357 builtins@5.1.0
7546b56
#7357 @npmcli/agent@2.2.2
d38fd4f
#7357 spdx-expression-parse@4.0.0
913b326
#7357 is-cidr@5.0.5
84bbbd4
#7357 @npmcli/package-json@5.0.1
a0f5048
#7357 @npmcli/git@5.0.5
@npmcli/arborist@7.4.2
@npmcli/config@8.2.2
libnpmdiff@6.0.9
libnpmexec@7.0.10
libnpmfund@5.0.7
libnpmpack@6.0.9
Changelog
10.5.1 (2024-04-03)
17d97d2
#7334 use @npmcli/redact for log redactions (@lukekarrys)8cab136
#7324 ensure maxSockets is respected (#7324) (@lukekarrys)9bffa13
#7320 query: properly return :missing nodes (#7320) (@wraithgar)9d4e85f
#7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)bdb3c28
#7274 added check for dry-run (#7274) (@cod1r)7f1ab88
#7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)1da5cf0
#7198 add link to engines section (#7198) (@uiolee)1114a12
#7307 fix incorrect npm audit key response link (#7307) (@davidlj95)9807caf
#7304 update audit docs with provenance info (#7304) (@bdehamer)e1ecfa7
#7285 Correct capitalization for URL (#7285) (@coliff)87a61fc
#7334 npm-registry-fetch@16.2.0
5469614
#7327 init-package-json@6.0.2
5469614
#7327 promzard@1.0.1
5469614
#7327 read@3.0.1
(#7327)9ccff72
#7329 tar@6.2.1
7201a00
#7329 node-gyp@10.1.0
6fd94f2
#7329 minimatch@9.0.4
b048592
#7329 ini@4.1.2
c54a84a
#7329 glob@10.3.12
6853531
#7329 cli-table3@0.6.4
c9315cb
#7329 binary-extensions@2.3.0
5bb0031
#7329 @sigstore/tuf@2.3.2
8cab136
#7324 agent-base@7.1.1
(@lukekarrys)@npmcli/arborist@7.4.1
@npmcli/config@8.2.1
libnpmaccess@8.0.3
libnpmdiff@6.0.8
libnpmexec@7.0.9
libnpmfund@5.0.6
libnpmhook@10.0.2
libnpmorg@6.0.3
libnpmpack@6.0.8
libnpmpublish@9.0.5
libnpmsearch@7.0.2
libnpmteam@6.0.2
Changelog
10.5.0 (2024-02-28)
2366edc
#7218 query: add :vuln pseudo selector (@wraithgar)4f3ddbb
#5966 add --expect-entries to npm query
(@wraithgar)818957c
#7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)d04111d
#7197 view: filter out invalid semver (#7197) (@wraithgar)b0a3ba0
#7195 prevent adding invalid dist-tag (#7195) (@wraithgar)c4741fe
#7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)686a622
#7247 scope: update example command to work in windows (#7247) (@robertobasile84)95b5057
#5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)5b7184f
#7190 workspaces: fix grammar (#7190) (@alekstech)0dd03f9
#7182 fix typos (#7182) (@GoodDaisy)16d4c9f
#7218 @npmcli/query@3.1.0
06247d1
#7242 spdx-license-ids@3.0.17
79d1e0b
#7242 spdx-exceptions@2.5.0
67e853a
#7242 socks@2.8.0
4c9fe4b
#7242 lru-cache@10.2.0
4a50c5a
#7242 https-proxy-agent@7.0.4
ed3f254
#7242 http-proxy-agent@7.0.2
8ec4fd5
#7242 hasown@2.0.1
98b1189
#7242 @npmcli/agent@2.2.1
dafa903
#7242 sigstore@2.2.2
d0bcb76
#7242 diff@5.2.0
a13808e
#7242 semver@7.6.0
d6521ac
#7242 @sigstore/tuf@2.3.1
43cac2f
#7242 ip@2.0.1
@npmcli/arborist@7.4.0
@npmcli/config@8.2.0
libnpmdiff@6.0.7
libnpmexec@7.0.8
libnpmfund@5.0.5
libnpmpack@6.0.7
Changelog
10.4.0 (2024-01-24)
35a098c
#7175 display tree diff on --long
(@wraithgar)dffca29
#7174 format: print --dry-run
diffs in table format (#7174) (@ritaaktay)6d5f9ac
#7133 dedupe - display difference when --dry-run
is enabled (#7133) (@Blaumaus)ec06f77
#7175 inline diff table code w/ summary code (@wraithgar)d4ebfba
#7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)81c95c7
#7063 don't reset update notifier duration on every check (#7063) (@wraithgar)2b7eaad
#7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)67ab0f7
#7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)05c69dc
#7150 config: State default configuration file affected by npm config set
(#7150) (@DanKaplanSES)44f4518
#7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)dd5699f
#7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)ec77e81
#7124 promise-call-limit@3.0.1
e32189c
#7173 deduplicate treeb7af4d9
#7173 tar-stream@3.1.7
6883743
#7173 @npmcli/run-script@7.0.4
739634d
#7157 remove strip-ansi162c82e
#7148 pacote@17.0.6
(#7148) (@bdehamer)a50b03b
#7141 sigstore@2.2.0
(#7141) (@bdehamer)f696b51
#7132 @sigstore/tuf@2.3.0
(#7132) (@bdehamer)@npmcli/arborist@7.3.1
libnpmdiff@6.0.6
libnpmexec@7.0.7
libnpmfund@5.0.4
libnpmpack@6.0.6
libnpmpublish@9.0.4
Changelog
10.3.0 (2024-01-10)
6673c77
#6914 add --libc
option to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)3fd5213
#7121 npm-packlist@8.0.2
5698415
#7121 postcss-selector-parser@6.0.15
e56a4f3
#7121 are-we-there-yet@4.0.2
8495b7c
#7121 cacache@18.0.2
796d1c7
#7121 @npmcli/run-script@7.0.3
3b7f6f2
#7121 @npmcli/promise-spawn@7.0.1
7ecd146
#7121 npmcli/git@5.0.4
@npmcli/arborist@7.3.0
@npmcli/config@8.1.0
libnpmdiff@6.0.5
libnpmexec@7.0.6
libnpmfund@5.0.3
libnpmpack@6.0.5
Changelog
10.2.5 (2023-12-06)
c7a592c
#7061 dont use cache for update notifier manifest request (@lukekarrys)7b952f6
#7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)be4741f
#7039 unpublish bugfixes (#7039) (@wraithgar)bc7f53d
#7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)11ec231
#7033 skip creation of log directory if logs-max
is set to 0 (#7033) (@JJ)6267f54
#7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)ff1204a
#7058 lru-cache@10.1.0
c648020
#7058 json-parse-even-better-errors@3.0.1
53aa8f2
#7058 pacote@17.0.5
2e5331c
#7058 npm-packlist@8.0.1
937b7b7
#7058 ignore-walk@6.0.4
35371c8
#7058 cacache@18.0.1
@npmcli/arborist@7.2.2
@npmcli/config@8.0.3
libnpmaccess@8.0.2
libnpmdiff@6.0.4
libnpmexec@7.0.5
libnpmfund@5.0.2
libnpmhook@10.0.1
libnpmorg@6.0.2
libnpmpack@6.0.4
libnpmpublish@9.0.3
libnpmsearch@7.0.1
libnpmteam@6.0.1
libnpmversion@5.0.2
f656b66
#7062 @npmcli/template-oss@4.21.3
(#7062) (@lukekarrys)9754b17
#7051 use global npm for workspace tests (@lukekarrys)3891757
#7051 @npmcli/template-oss@4.21.2
(@lukekarrys)71f70fa
#7058 nock@13.4.0
(@wraithgar)43674a4
#7058 tap@16.3.9
(@wraithgar)4ba585c
#7040 fix tests for zlib differences between node versions (#7040) (@wraithgar)Changelog
10.2.4 (2023-11-14)
cd291e7
#6995 refactor search formatting code (#6995) (@wraithgar)f3a7380
#6973 look in workspace for exec commands (#6973) (@wraithgar)d11496b
#6977 pkg: properly output in workspace mode (#6977) (@wraithgar)0f70088
#6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)dce3b08
#6951 properly catch missing url opener error (#6951) (@wraithgar)a38836c
#6616 add path usage for view command (#6616) (@RobinKnipe)da18e4f
#6987 update npm-prune description (#6987) (@Eomm)e9ec2f7
#6994 lru-cache@10.0.2
faf9eff
#6994 is-core-module@2.13.1
b00e780
#6994 @sigstore/sign@2.2.0
4613774
#6994 hoisting newer deps in favor of older ones54c4f7b
#6994 signal-exit@4.1.0
8c5882f
#6994 strip-ansi@7.1.0
cd0c649
#6994 ci-info@4.0.0
a0a58b7
#6994 @sigstore/tuf@2.2.0
b3a53c6
#6949 is-cidr@5.0.3
(#6949)@npmcli/config@8.0.2
libnpmexec@7.0.4
libnpmpublish@9.0.2