Bump npm from 6.14.10 to 8.5.0

[dependabot[bot]]

Bumps npm from 6.14.10 to 8.5.0.

Release notes

Sourced from npm's releases.

v8.5.0 (2022-02-10)

Features

• 0cc9d4c51 #4372 feat(deps): @npmcli/config@3.0.0 - introduce automatic workspace roots (@​nlf)

Bug Fixes

• fb6e2ddf9 #4386 fix(log): pass in logger to more external modules (@​wraithgar)
• 0e231d4a4 #4389 fix(pack): let libnpmpack take care of file writes (@​nlf)
• e2f1f7b04 #4389 fix(publish): pass dryRun: true to libnpmpack so it doesnt write a tarball (@​nlf)
• 2937b43d4 #4389 fix(config): add pack-destination flattener (@​nlf)

Documentation

• b836d596f #4384 docs: add cross-references between npx and npm exec (@​Delapouite)
• f3fbeea5a #4388 docs: add --save-bundle to --save usage output (@​wraithgar)

Dependencies

• 8732f393e deps: @npmcli/arborist@4.3.1
  • 2ba09cc0d #4371 fix(arborist): check if a spec is a workspace before fetching a manifest, closes #3637 (@​nlf)
  • e631faf7b #4387 fix(arborist): save bundleDependencies to package.json when reifying (@​wraithgar)
• d3a7c15e1 deps: libnpmpack@3.1.0
  • 4884821f6 #4389 feat(libnpmpack): write tarball file when dryRun === false (@​nlf)
• ab926995e #4393 deps: npm-registry-fetch@12.0.2
• 1c0d0699c #4394 deps: npmlog@6.0.1
  • changed notice color from blue to cyan for improved readability
• 3c33a5842 #4400 deps: make-fetch-happen@10.0.2

v8.4.1 (2022-02-03)

Bug Fixes

• 1b9338554 #4359 fix(log): pass in logger to external modules (@​wraithgar)
• 457e0ae61 #4363 fix(ci): lock file validation (@​ruyadorno)
• c0519edc1 #4364 fix(ci): should not use package-lock config (@​ruyadorno)
• ebb428375 #4365 fix(outdated): parse aliased modules (@​ruyadorno)

Documentation

• 0b0a7cc76 #4361 docs: bundleDependencies can be a boolean. (@​forty)

Dependencies

• 3d41447b9 #4353 deps: wide-align@1.1.5
• dc1a0573a #4353 deps: socks-proxy-agent@6.1.1
• adcefef6b #4353 deps: spdx-license-ids@3.0.11
• d7e2499e0 #4353 deps: debug@4.3.3
• f0f307140 #4353 deps: @npmcli/fs@1.1.0

... (truncated)

Changelog

Sourced from npm's changelog.

v8.5.0 (2022-02-10)

Features

• 0cc9d4c51 #4372 feat(deps): @npmcli/config@3.0.0 - introduce automatic workspace roots (@​nlf)

Bug Fixes

• fb6e2ddf9 #4386 fix(log): pass in logger to more external modules (@​wraithgar)
• 0e231d4a4 #4389 fix(pack): let libnpmpack take care of file writes (@​nlf)
• e2f1f7b04 #4389 fix(publish): pass dryRun: true to libnpmpack so it doesnt write a tarball (@​nlf)
• 2937b43d4 #4389 fix(config): add pack-destination flattener (@​nlf)

Documentation

• b836d596f #4384 docs: add cross-references between npx and npm exec (@​Delapouite)
• f3fbeea5a #4388 docs: add --save-bundle to --save usage output (@​wraithgar)

Dependencies

• 8732f393e deps: @npmcli/arborist@4.3.1
  • 2ba09cc0d #4371 fix(arborist): check if a spec is a workspace before fetching a manifest, closes #3637 (@​nlf)
  • e631faf7b #4387 fix(arborist): save bundleDependencies to package.json when reifying

... (truncated)

Commits

• 20a9818 8.5.0
• 5769ef4 update AUTHORS
• 509ff0e docs: changelog for v8.5.0
• 3c33a58 deps: make-fetch-happen@10.0.2 (#4400)
• 1c0d069 deps: npmlog@6.0.1
• ab92699 deps: npm-registry-fetch@12.0.2
• 2786578 deps: make-fetch-happen@10.0.1
• d3a7c15 deps: libnpmpack@3.1.0
• 2937b43 fix(config): add pack-destination flattener
• e2f1f7b fix(publish): pass dryRun: true to libnpmpack so it doesnt write a tarball
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #864.