v11.6.2

Compare Source

Bug Fixes

• c54d1e9#​8633 progress bar code cleanup (#​8633) (@​wraithgar)
• d352e27#​8629 do not redact notice logs going to stdout (#​8629) (@​wraithgar)
• 5ac3678#​8617 spelling in ./lib and ./test/lib (#​8617) (@​jsoref)
• 9197995#​8619 spelling (#​8619) (@​jsoref)
• dd884e3#​8618 spelling (#​8618) (@​jsoref)
• f6028e6#​8614 skip redacting urls meant for opening by the user (#​8614) (@​wraithgar,@​jolyndenning)
• 54fd27f#​8602 refactor node.ideallyInert to node.inert (#​8602) (@​liamcmitchell)
• 79e3c1e#​8593 use@​npmcli/package-json to normalize package data (@​wraithgar)

Documentation

• 0469c5e#​8639 rewrap markdown (#​8639) (@​jsoref)
• 9ceb9c1#​8636 rewrap markdown (#​8636) (@​jsoref)
• 6324370#​8616 fix spelling (#​8616) (@​jsoref)
• 1b0429a#​8607 Fix spelling (#​8607) (@​jsoref)
• 7fbe07a#​8603 clean up deprecatednpm access commands (#​8603) (@​jsoref)

Dependencies

• fa7cc6f#​8662ci-info@4.3.1 (#​8662)
• b05461b#​8663@sigstore/sign@4.0.1 (#​8663)
• c31de22#​8661 downgrade ci-info to 4.3.0 (#​8661) (@​wraithgar)
• c5191b5#​8659ci-info@4.3.1
• f255c92#​8659hosted-git-info@9.0.2
• bdaf323#​8659is-cidr@6.0.1
• a33f106#​8659lru-cache@11.2.2
• 8044e07#​8659npm-package-arg@13.0.1
• f577504#​8659npm-packlist@10.0.2
• 9aa4fa6#​8659semver@7.7.3
• fe9484a#​8593 remove normalize-package-data

Chores

• b3409f4#​8659 dev dependency updates (@​wraithgar)
• e8de81b#​8643 Add automatically generated annotation to dependencies.md (#​8643) (@​jsoref)
• 67cfaf3#​8627 fix spelling: different (#​8627) (@​jsoref)
• 17ddc0d#​8622 fix spelling (#​8622) (@​jsoref)
• c3e1790#​8605 Remove reference to nonexistent calendar (#​8605) (@​jsoref)
• ac9143e#​8604 Improve link accessibility for screen reader users (#​8604) (@​jsoref)
• 62d73e7#​8601 remove references to benchmarks workflow (#​8601) (@​jsoref)
• bb4b739#​8598 remove stale comment (#​8598) (@​jsoref)
• f73e65d#​8592 fix build url code for remark-github@​12 (#​8592) (@​wraithgar)
• workspace:@npmcli/arborist@9.1.6
• workspace:@npmcli/config@10.4.2
• workspace:libnpmaccess@10.0.3
• workspace:libnpmdiff@8.0.9
• workspace:libnpmexec@10.1.8
• workspace:libnpmfund@7.0.9
• workspace:libnpmpack@9.0.9
• workspace:libnpmpublish@11.1.2

v11.6.1

Compare Source

Bug Fixes

• d389614#​8579 corrects peer dependency flag propagation (@​owlstronaut)
• 5db81c3#​8512 allow concurrent non-local npx calls (#​8512) (@​jenseng,@​wraithgar)

Documentation

• 7a09902#​8582 bring back certfile (#​8582) (@​jenseng)

Dependencies

• 849dcb6#​8589tar@7.5.1 (#​8589)
• ea15731#​8576binary-extensions@3.1.0
• 0f41bac#​8576tiny-relative-date@2.0.2
• 07bf540#​8576is-cidr@6.0.0
• ef87ec6#​8576diff@8.0.2
• 48285e0#​8576 add fdir, isexe, and picomatch to node_modules
• 099238a#​8576fdir@6.5.0
• 6e4d673#​8576isexe@3.1.1
• 09a7494#​8576supports-color@10.2.2
• c5157c9#​8576chalk@5.6.2
• 46035db#​8576debug@4.4.3
• 5f6664b#​8576spdx-license-ids@3.0.22
• 5516583#​8576socks@2.8.7
• 6a392f3#​8576tinyglobby@0.2.15
• 9519f18#​8576npm-install-checks@7.1.2
• 34bafd1#​8576node-gyp@11.4.2
• dfd034e#​8576@npmcli/promise-spawn@8.0.3
• d4eef14#​8576rimraf@6.0.1
• 566f1b7#​8576minimatch@10.0.3
• ac33497#​8576mkdirp@3.0.1
• 1676626#​8576glob@11.0.3
• 817f0b1#​8576ignore-walk@8.0.0
• 79a4e67#​8576minizlib@3.0.2
• 38fa2c2#​8576negotiator@1.0.0
• 24252a1#​8576@npmcli/agent@4.0.0
• ea7ca5f#​8576lru-cache@11.2.1
• 521823b#​8576@npmcli/git@7.0.0
• bf6b686#​8576npm-package-arg@13.0.0
• 9392488#​8576npm-package-manifest@11.0.1
• 0082083#​8576normalize-package-data@8.0.0
• 633c4ed#​8576hosted-git-info@9.0.0
• 66f64eb#​8576make-fetch-happen@15.0.2
• 1f85f94#​8576@sigstore/tuf@4.0.0
• a2bdecc#​8576sigstore@4.0.0
• 1149971#​8576npm-registry-fetch@19.0.0
• b5bd5e3#​8576npm-profile@12.0.0
• 6221e27#​8576@npmcli/metavuln-calculator@9.0.2
• da81a37#​8576cacache@20.0.1
• 6b4c5f9#​8576@npmcli/run-script@10.0.0
• cb36a8a#​8576init-package-json@8.2.2
• b6bb9ae#​8576pacote@21.0.3
• 1b4433f#​8576@npmcli/map-workspaces@5.0.0
• ceae674#​8576@npmcli/package-json@7.0.1
• 4f37534#​8576 remove read-package-json-fast

Chores

• 7eb5c09#​8576 update package-lock with peer flag fixes (@​wraithgar)
• 0d00fd8#​8576jsdom@27.0.0 (@​wraithgar)
• 420a569#​8576unified@11.0.5 (@​wraithgar)
• 064deb3#​8576remark-rehype@11.1.2 (@​wraithgar)
• 30fe3ba#​8576remark-man@9.0.0 (@​wraithgar)
• 1c6bb4c#​8576rehype-stringify@10.0.1 (@​wraithgar)
• 208cb93#​8576remark-gfm@4.0.1 (@​wraithgar)
• 4a46b5a#​8576remark-github@12.0.0 (@​wraithgar)
• 93d190b#​8576remark-parse@11.0.0 (@​wraithgar)
• 05301a4#​8576remark@15.0.1 (@​wraithgar)
• 6afdda9#​8576ajv-formats@3.0.1 (@​wraithgar)
• 402a0ab#​8576@npmcli/template-oss@4.25.1 (@​wraithgar)
• 3b43bf7#​8576 dev dependency updates (@​wraithgar)
• 9f9146f#​8576@tufjs/repo-mock@4.0.0 (@​wraithgar)
• eed8a10#​8576 use latest/local arborist in mock-registry (@​wraithgar)
• workspace:@npmcli/arborist@9.1.5
• workspace:@npmcli/config@10.4.1
• workspace:libnpmaccess@10.0.2
• workspace:libnpmdiff@8.0.8
• workspace:libnpmexec@10.1.7
• workspace:libnpmfund@7.0.8
• workspace:libnpmorg@8.0.1
• workspace:libnpmpack@9.0.8
• workspace:libnpmpublish@11.1.1
• workspace:libnpmsearch@9.0.1
• workspace:libnpmteam@8.0.2
• workspace:libnpmversion@8.0.2

v11.6.0

Compare Source

Features

• bdcc10d#​8359 add support for optional env var replacements in .npmrc (#​8359) (@​aczekajski,@​owlstronaut)

Bug Fixes

• dd4cee9#​8539 powershell: improve argument parsing (#​8539) (@​alexsch01)
• 5f18557#​8532 powershell: fix issue with modified InvocationName (#​8532) (@​alexsch01)
• 9e5abf1#​8529 add redaction to log format egress (#​8529) (@​wraithgar)
• 75ce64a#​8524 revert handle signal exits gracefully (#​8524) (@​owlstronaut)
• 5d82d0b#​8469 ps1 scripts in powershell 5.1 (#​8469) (@​splatteredbits)

Dependencies

• workspace:@npmcli/arborist@9.1.4
• workspace:@npmcli/config@10.4.0
• workspace:libnpmdiff@8.0.7
• workspace:libnpmexec@10.1.6
• workspace:libnpmfund@7.0.7
• workspace:libnpmpack@9.0.7

v11.5.2

Compare Source

Bug Fixes

• 7d900c4#​8467 oidc visibility check for provenance (#​8467) (@​reggi,@​wraithgar)

Documentation

• d4e56b2#​8459 update snapshot generation command (#​8459) (@​MikeMcC399)

v11.5.1

Compare Source

Bug Fixes

• 476bf17#​8457 provenance should only default for oidc (@​reggi)

v11.5.0

Compare Source

Features

• 1cce318#​8336 adds support for oidc publish (#​8336) (@​reggi)

Bug Fixes

• 7f66f0a#​8447 add better hint forbefore and clean up description (@​wraithgar)
• 280817a#​8447 add --before param to command help output (@​wraithgar)
• 6e47325#​8441 Makes 404 errors less scary without revealing existence (#​8441) (@​owlstronaut)
• 0a97ffd#​8429 handle signal exits gracefully (@​owlstronaut)
• 5b858c6#​8411 ensure progress bars display consistently across all environments (#​8411) (@​owlstronaut)

Documentation

• ef3529e#​8435 add test snapshot (#​8435) (@​reggi,@​wraithgar)
• b7758d7#​8418 remove reference to Node.js download less common os (#​8418) (@​MikeMcC399)
• 746ac5d#​8380 remove duplicate info (#​8380) (@​alexsch01)
• 4673e9c#​8371 rebrand OS X references to macOS (@​MikeMcC399)

Dependencies

• 398fed4#​8450normalize-package-data@7.0.1
• 5b242c9#​8450validate-npm-package-name@6.0.2
• d4e8a8a#​8450tuf-js@3.1.0
• e1b37b2#​8450picomatch@4.0.3
• 3cb5884#​8450socks@2.8.6
• daea981#​8450ci-info@4.3.0
• 39ad47d#​8450aproba@2.1.0
• a789f33#​8450agent-base@7.1.4
• 1c0d257#​8450@npmcli/metavuln-calculator@9.0.1

Chores

• 804a964#​8450 update devDependencies in lockfile (@​wraithgar)
• 643ae71#​8450 update mock-registry to use local arborist (@​wraithgar)
• cf023d7#​8421 contributing: prepare easier copy-paste contributing commands (#​8421) (@​MikeMcC399)
• 3f60b5f#​8383@npmcli/template-oss@4.24.4 (#​8383) (@​wraithgar)
• 01f8cc6#​8381@npmcli/template-oss@4.24.3 (#​8381) (@​wraithgar)
• workspace:@npmcli/arborist@9.1.3
• workspace:@npmcli/config@10.3.1
• workspace:libnpmdiff@8.0.6
• workspace:libnpmexec@10.1.5
• workspace:libnpmfund@7.0.6
• workspace:libnpmpack@9.0.6
• workspace:libnpmpublish@11.1.0

v11.4.2

Compare Source

Bug Fixes

• d389614#​8579 corrects peer dependency flag propagation (@​owlstronaut)
• 5db81c3#​8512 allow concurrent non-local npx calls (#​8512) (@​jenseng,@​wraithgar)

Documentation

• 7a09902#​8582 bring back certfile (#​8582) (@​jenseng)

Dependencies

• 849dcb6#​8589tar@7.5.1 (#​8589)
• ea15731#​8576binary-extensions@3.1.0
• 0f41bac#​8576tiny-relative-date@2.0.2
• 07bf540#​8576is-cidr@6.0.0
• ef87ec6#​8576diff@8.0.2
• 48285e0#​8576 add fdir, isexe, and picomatch to node_modules
• 099238a#​8576fdir@6.5.0
• 6e4d673#​8576isexe@3.1.1
• 09a7494#​8576supports-color@10.2.2
• c5157c9#​8576chalk@5.6.2
• 46035db#​8576debug@4.4.3
• 5f6664b#​8576spdx-license-ids@3.0.22
• 5516583#​8576socks@2.8.7
• 6a392f3#​8576tinyglobby@0.2.15
• 9519f18#​8576npm-install-checks@7.1.2
• 34bafd1#​8576node-gyp@11.4.2
• dfd034e#​8576@npmcli/promise-spawn@8.0.3
• d4eef14#​8576rimraf@6.0.1
• 566f1b7#​8576minimatch@10.0.3
• ac33497#​8576mkdirp@3.0.1
• 1676626#​8576glob@11.0.3
• 817f0b1#​8576ignore-walk@8.0.0
• 79a4e67#​8576minizlib@3.0.2
• 38fa2c2#​8576negotiator@1.0.0
• 24252a1#​8576@npmcli/agent@4.0.0
• ea7ca5f#​8576lru-cache@11.2.1
• 521823b#​8576@npmcli/git@7.0.0
• bf6b686#​8576npm-package-arg@13.0.0
• 9392488#​8576npm-package-manifest@11.0.1
• 0082083#​8576normalize-package-data@8.0.0
• 633c4ed#​8576hosted-git-info@9.0.0
• 66f64eb#​8576make-fetch-happen@15.0.2
• 1f85f94#​8576@sigstore/tuf@4.0.0
• a2bdecc#​8576sigstore@4.0.0
• 1149971#​8576npm-registry-fetch@19.0.0
• b5bd5e3#​8576npm-profile@12.0.0
• 6221e27#​8576@npmcli/metavuln-calculator@9.0.2
• da81a37#​8576cacache@20.0.1
• 6b4c5f9#​8576@npmcli/run-script@10.0.0
• cb36a8a#​8576init-package-json@8.2.2
• b6bb9ae#​8576pacote@21.0.3
• 1b4433f#​8576@npmcli/map-workspaces@5.0.0
• ceae674#​8576@npmcli/package-json@7.0.1
• 4f37534#​8576 remove read-package-json-fast

Chores

• 7eb5c09#​8576 update package-lock with peer flag fixes (@​wraithgar)
• 0d00fd8#​8576jsdom@27.0.0 (@​wraithgar)
• 420a569#​8576unified@11.0.5 (@​wraithgar)
• 064deb3#​8576remark-rehype@11.1.2 (@​wraithgar)
• 30fe3ba#​8576remark-man@9.0.0 (@​wraithgar)
• 1c6bb4c#​8576rehype-stringify@10.0.1 (@​wraithgar)
• 208cb93#​8576remark-gfm@4.0.1 (@​wraithgar)
• 4a46b5a#​8576remark-github@12.0.0 (@​wraithgar)
• 93d190b#​8576remark-parse@11.0.0 (@​wraithgar)
• 05301a4#​8576remark@15.0.1 (@​wraithgar)
• 6afdda9#​8576ajv-formats@3.0.1 (@​wraithgar)
• 402a0ab#​8576@npmcli/template-oss@4.25.1 (@​wraithgar)
• 3b43bf7#​8576 dev dependency updates (@​wraithgar)
• 9f9146f#​8576@tufjs/repo-mock@4.0.0 (@​wraithgar)
• eed8a10#​8576 use latest/local arborist in mock-registry (@​wraithgar)
• workspace:@npmcli/arborist@9.1.5
• workspace:@npmcli/config@10.4.1
• workspace:libnpmaccess@10.0.2
• workspace:libnpmdiff@8.0.8
• workspace:libnpmexec@10.1.7
• workspace:libnpmfund@7.0.8
• workspace:libnpmorg@8.0.1
• workspace:libnpmpack@9.0.8
• workspace:libnpmpublish@11.1.1
• workspace:libnpmsearch@9.0.1
• workspace:libnpmteam@8.0.2
• workspace:libnpmversion@8.0.2