npm pack ignores root-level .gitignore & .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. --workspaces, --workspace=<name>). Anyone who has run npm pack or npm publish with workspaces, as of v7.9.0 & v7.13.0 respectively, may be affected and have published files into the npm registry they did not intend to include.
Patch
Upgrade to the latest, patched version of npm (v8.11.0 or greater), run: npm i -g npm@latest
Run npm publish --dry-run or npm pack with an npm version >=7.9.0 & <8.11.0 inside the project's root directory using a workspace flag like: --workspaces or --workspace=<name> (ex. npm pack --workspace=foo)
Check the output in your terminal which will list the package contents (note: tar -tvf <package-on-disk> also works)
If you find that there are files included you did not expect, you should:
3.1. Create & publish a new release excluding those files (ref. "Keeping files out of your Package")
3.2. Deprecate the old package (ex. npm deprecate <pkg>[@​<version>] <message>)
3.3. Revoke or rotate any sensitive information (ex. passwords, tokens, secrets etc.) which might have been exposed
This PR contains the following updates:
^7.7.5
->^8.0.0
GitHub Vulnerability Alerts
CVE-2022-29244
Impact
npm pack
ignores root-level.gitignore
&.npmignore
file exclusion directives when run in a workspace or with a workspace flag (ie.--workspaces
,--workspace=<name>
). Anyone who has runnpm pack
ornpm publish
with workspaces, as of v7.9.0 & v7.13.0 respectively, may be affected and have published files into the npm registry they did not intend to include.Patch
npm
(v8.11.0
or greater), run:npm i -g npm@latest
v16.15.1
,v17.19.1
&v18.3.0
include the patchedv8.11.0
version ofnpm
Steps to take to see if you're impacted
npm publish --dry-run
ornpm pack
with annpm
version>=7.9.0
&<8.11.0
inside the project's root directory using a workspace flag like:--workspaces
or--workspace=<name>
(ex.npm pack --workspace=foo
)tar -tvf <package-on-disk>
also works)npm deprecate <pkg>[@​<version>] <message>
) 3.3. Revoke or rotate any sensitive information (ex. passwords, tokens, secrets etc.) which might have been exposedReferences
npm-packlist
libnpmpack
libnpmpublish
Release Notes
npm/cli
### [`v8.11.0`](https://togithub.com/npm/cli/releases/tag/v8.11.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.10.0...v8.11.0) #### v8.11.0 (2022-05-25) ##### Features - [`8898710`](https://togithub.com/npm/cli/commit/8898710220a3d84b0a9ea2a6d9cf880e50b94c9e) [#4879](https://togithub.com/npm/cli/pull/4879) feat: deprecated set-script, birthday, --global, and --local ([@fritzy](https://togithub.com/fritzy)) - [`7307c8d`](https://togithub.com/npm/cli/commit/7307c8de388cd14c96c42d70b7e567ec343ad084) [#4940](https://togithub.com/npm/cli/pull/4940) feat(libnpmpack): bump pacote for better workspace awareness ([@nlf](https://togithub.com/nlf)) ##### Bug Fixes - [`400c80f`](https://togithub.com/npm/cli/commit/400c80f570228a2c0ffe09d6564cc88dc2f356c3) [#4913](https://togithub.com/npm/cli/pull/4913) fix(ci): remove node_modules post-validation ([@wraithgar](https://togithub.com/wraithgar)) - [`124df81`](https://togithub.com/npm/cli/commit/124df81391ea5810b29d2af9500ed597f076d597) [#4910](https://togithub.com/npm/cli/pull/4910) fix: clean up npm cache tests ([@wraithgar](https://togithub.com/wraithgar)) - [`ee3308a`](https://togithub.com/npm/cli/commit/ee3308a7a08799ec7e86237165ebaf278d9a4f9f) fix: remove dead code from get-identity ([@wraithgar](https://togithub.com/wraithgar)) - [`357b0af`](https://togithub.com/npm/cli/commit/357b0af2af2b07a58d2d837043d1d77c9495d8b5) [#4917](https://togithub.com/npm/cli/pull/4917) fix: pass prefix and workspaces to libnpmpack ([@nlf](https://togithub.com/nlf)) - [`0f89e07`](https://togithub.com/npm/cli/commit/0f89e0750f2ac9b5b4794b5718d047b5286283c8) [#4935](https://togithub.com/npm/cli/pull/4935) fix: add global getter to npm class ([@nlf](https://togithub.com/nlf)) ##### Documentation - [`83ed8d0`](https://togithub.com/npm/cli/commit/83ed8d0d4fb51716fa58608fa3c1ee8eb0a93571) [#4922](https://togithub.com/npm/cli/pull/4922) docs: update roadmap link in readme ([@OmriBarZik](https://togithub.com/OmriBarZik)) - [`ed054d4`](https://togithub.com/npm/cli/commit/ed054d477093be3da96968d217c244cf2efd3ef1) [#4933](https://togithub.com/npm/cli/pull/4933) docs: fix broken link in changelog ([@yonran](https://togithub.com/yonran)) ##### Dependencies - [`632ce87`](https://togithub.com/npm/cli/commit/632ce87bbd23707cba2c49b95d5db755b3d68638) [#4915](https://togithub.com/npm/cli/pull/4915) deps: `cacache@16.1.0` - [`7b2b77a`](https://togithub.com/npm/cli/commit/7b2b77adca730e516c1b187092374a01de7f0f56) [#4915](https://togithub.com/npm/cli/pull/4915) deps: `make-fetch-happen@10.1.5` - [`f3b0a24`](https://togithub.com/npm/cli/commit/f3b0a2407c7e213b1660ef7024c861dcb0eacb50) [#4915](https://togithub.com/npm/cli/pull/4915) deps: `pacote@13.4.1` - [`0df3011`](https://togithub.com/npm/cli/commit/0df3011ec59ba76c12fb8fbfb29ff4d601cc4bdb) [#4915](https://togithub.com/npm/cli/pull/4915) deps: `ssri@9.0.1` - [`dc38ab9`](https://togithub.com/npm/cli/commit/dc38ab96fca99069449e6c5e492062b94a1264b6) [#4919](https://togithub.com/npm/cli/pull/4919) deps: `npm-packlist@5.0.4` - [`353e2f9`](https://togithub.com/npm/cli/commit/353e2f9dc60a5d319d4105822a9e0b2ddbf82bc0) [#4940](https://togithub.com/npm/cli/pull/4940) deps: `pacote@13.5.0 npm-packlist@5.1.0` - [`f4d4126`](https://togithub.com/npm/cli/commit/f4d41265931c3c2eee433e27f4535c7a209e69fa) [#4941](https://togithub.com/npm/cli/pull/4941) deps: `libnpmpack@4.1.0` ### [`v8.10.0`](https://togithub.com/npm/cli/releases/tag/v8.10.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.9.0...v8.10.0) #### v8.10.0 (2022-05-11) ##### Features - [`911f55d`](https://togithub.com/npm/cli/commit/911f55dc6ac3672f48740d0675f67c934c01aaf4) [#4864](https://togithub.com/npm/cli/pull/4864) feat: add --iwr alias for --include-workspace-root ([@fritzy](https://togithub.com/fritzy)) - [`bfb8bcc`](https://togithub.com/npm/cli/commit/bfb8bccbe83753e527b43c8a3889696087dbe8f1) [#4874](https://togithub.com/npm/cli/pull/4874) feat: add flag --omit-lockfile-registry-resolved ([@fritzy](https://togithub.com/fritzy)) ([Caleb ツ Everett](mailto:calebev@amazon.com)) ##### Bug Fixes - [`48d2db6`](https://togithub.com/npm/cli/commit/48d2db6037487fd782f67bbcd2cf12e009ece17b) [#4862](https://togithub.com/npm/cli/pull/4862) fix: remove test coverage map ([@wraithgar](https://togithub.com/wraithgar)) - [`38cf29a`](https://togithub.com/npm/cli/commit/38cf29a0054544c575b6bce953f1d433dbb6a3b5) [#4868](https://togithub.com/npm/cli/pull/4868) fix: cleanup star/unstar ([@wraithgar](https://togithub.com/wraithgar)) - [`5baa4a7`](https://togithub.com/npm/cli/commit/5baa4a7c64319485604982f9060702a7cee8a85c) [#4857](https://togithub.com/npm/cli/pull/4857) fix: consolidate bugs, docs, repo command logic ([@wraithgar](https://togithub.com/wraithgar)) - [`5a50762`](https://togithub.com/npm/cli/commit/5a50762faa37ae5964ae6f12595b20b367056c0a) [#4875](https://togithub.com/npm/cli/pull/4875) fix(arborist): link deps lifecycle scripts ([@ruyadorno](https://togithub.com/ruyadorno)) ##### Dependencies - [`d58bf40`](https://togithub.com/npm/cli/commit/d58bf40abf7c3ff8ae400f50e5e5a19c33138707) [#4856](https://togithub.com/npm/cli/pull/4856) deps: `npm-packlist@5.0.3` - [`86f443e`](https://togithub.com/npm/cli/commit/86f443e97aa58c1a06b8eb6f523656274234bb71) [#4872](https://togithub.com/npm/cli/pull/4872) deps: `make-fetch-happen@10.1.3` - [`f9984e6`](https://togithub.com/npm/cli/commit/f9984e64e714937fa69f14850a1d3ed7ccfc934c) [#4880](https://togithub.com/npm/cli/pull/4880) deps: `@npmcli/arborist@5.2.0` - [`ba59915`](https://togithub.com/npm/cli/commit/ba599154dc8ea9f424410fb7dc382d5829215920) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `socks-proxy-agent@6.2.0` - [`c0806ba`](https://togithub.com/npm/cli/commit/c0806ba2b325456199069b245446c8a86e7feae2) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `http-proxy-agent@5.0.1` - [`cc7be6b`](https://togithub.com/npm/cli/commit/cc7be6b8b63a7314066e8763589a57e5a6e77d30) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `is-core-module@2.9.0` - [`0432c7d`](https://togithub.com/npm/cli/commit/0432c7d8a22ddbfdf238c2b22dd3c7bd263e2d6c) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `lru-cache@7.9.0` - [`5778820`](https://togithub.com/npm/cli/commit/57788204646a6aa5a384630a5640bf00efa25ce0) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `just-diff@5.0.2` - [`893dd00`](https://togithub.com/npm/cli/commit/893dd0066e2315f0d9937fe05879957e1446b755) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `ip@1.1.8` - [`6ab85bd`](https://togithub.com/npm/cli/commit/6ab85bd5df88ade023f7e4895d07a39228d23a33) [#4881](https://togithub.com/npm/cli/pull/4881) deps: `builtins@5.0.1` ### [`v8.9.0`](https://togithub.com/npm/cli/releases/tag/v8.9.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.8.0...v8.9.0) #### v8.9.0 (2022-05-04) ##### Features - [`62af3a1`](https://togithub.com/npm/cli/commit/62af3a1dc003cf23c563d18437be81f61e65cb49) [#4835](https://togithub.com/npm/cli/pull/4835) feat: make npm owner workspace aware ([@wraithgar](https://togithub.com/wraithgar)) ##### Bug Fixes - [`d654e7e`](https://togithub.com/npm/cli/commit/d654e7e9146f123a9806cfd9a17150eb1f6075a4) [#4781](https://togithub.com/npm/cli/pull/4781) fix: start consolidating color output ([@wraithgar](https://togithub.com/wraithgar)) - [`b9a966c`](https://togithub.com/npm/cli/commit/b9a966cf33cfa9b1e5f16c16219f63633bbe19d6) [#4843](https://togithub.com/npm/cli/pull/4843) fix(exec): ignore packageLockOnly flag ([@nlf](https://togithub.com/nlf)) ##### Documentation - [`8fd7eec`](https://togithub.com/npm/cli/commit/8fd7eec8ef76224dd8a9874a1044a0cc8f5e1c49) [#4845](https://togithub.com/npm/cli/pull/4845) docs: remove incorrect v6 auto prune info ([@wraithgar](https://togithub.com/wraithgar)) - [`5f59f80`](https://togithub.com/npm/cli/commit/5f59f803d1c6cdc690d4d7016990ca0e20c6706f) [#4847](https://togithub.com/npm/cli/pull/4847) docs: show complex object interactions in npm pkg ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`62faf8a`](https://togithub.com/npm/cli/commit/62faf8adba19d6ef26238887a453d013fe58ae75) [#4837](https://togithub.com/npm/cli/pull/4837) deps: `pacote@13.2.0` - [`4ff7d3d`](https://togithub.com/npm/cli/commit/4ff7d3d993533d6407fa69c5e6dd00f95090a280) [#4816](https://togithub.com/npm/cli/pull/4816) deps: `cacache@16.0.7` - [`e2e9c81`](https://togithub.com/npm/cli/commit/e2e9c8152e2d2adcb7e2dfc90f61353d50e433ba) [#4852](https://togithub.com/npm/cli/pull/4852) deps: `pacote@13.3.0` ### [`v8.8.0`](https://togithub.com/npm/cli/releases/tag/v8.8.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.7.0...v8.8.0) #### v8.8.0 (2022-04-27) ##### Features - [`bedd8a1`](https://togithub.com/npm/cli/commit/bedd8a1f5844b5b379af5a756baa70821d78c610) [#4745](https://togithub.com/npm/cli/pull/4745) feat: add install-links config definition ([@nlf](https://togithub.com/nlf)) ##### Bug Fixes - [`6253d19`](https://togithub.com/npm/cli/commit/6253d1968d8390ea6b16604ff3abb5e6509349c9) [#4643](https://togithub.com/npm/cli/pull/4643) fix(exec): workspaces support ([@ruyadorno](https://togithub.com/ruyadorno)) - [`e9163b4`](https://togithub.com/npm/cli/commit/e9163b48d8e46a80d2a4cc98c492b94dfa152cb8) [#4657](https://togithub.com/npm/cli/pull/4657) fix(libnpmpublish): unpublish from custom registry ([@ruyadorno](https://togithub.com/ruyadorno)) - [`a677f49`](https://togithub.com/npm/cli/commit/a677f49e29ee9d472c8c9aa1c9eb3d5d8b4ee4a9) [#4778](https://togithub.com/npm/cli/pull/4778) fix: Use node in and fallback to PATH if not found ([@elibus](https://togithub.com/elibus)) - [`b10462e`](https://togithub.com/npm/cli/commit/b10462ed156ada4d4ad90e6cf613e292a9361a87) [#4752](https://togithub.com/npm/cli/pull/4752) fix: completion for `deprecate` cmd ([@wraithgar](https://togithub.com/wraithgar)) - [`ced0acf`](https://togithub.com/npm/cli/commit/ced0acfe5998a5be9313815f76f5c1439a09db78) [#4775](https://togithub.com/npm/cli/pull/4775) fix: consolidate registryConfig application logic ([@wraithgar](https://togithub.com/wraithgar)) - [`b06e89f`](https://togithub.com/npm/cli/commit/b06e89f434fe8f104e71d4d8b5c98f1e866efdfa) [#4679](https://togithub.com/npm/cli/pull/4679) fix(install): do not install invalid package name ([@ruyadorno](https://togithub.com/ruyadorno)) - [`9ea2603`](https://togithub.com/npm/cli/commit/9ea26038ad4d3dc971d442cba2bb02a35755c07a) [#4786](https://togithub.com/npm/cli/pull/4786) fix: normalize win32 paths before globbing ([@lukekarrys](https://togithub.com/lukekarrys)) - [`8da28b4`](https://togithub.com/npm/cli/commit/8da28b403f32d2e99c842893bdc40429b8ffa9a7) [#4757](https://togithub.com/npm/cli/pull/4757) fix: remove `lib/utils/read-package-name.js` ([@wraithgar](https://togithub.com/wraithgar)) ##### Documentation - [`a6ea884`](https://togithub.com/npm/cli/commit/a6ea8843a9761d4392b3344400eb56e07691a91d) [#4745](https://togithub.com/npm/cli/pull/4745) docs: add some more docs for --install-links ([@nlf](https://togithub.com/nlf)) - [`6cd6831`](https://togithub.com/npm/cli/commit/6cd6831eaa9e1681e07f6646e6f13cce344e1250) [#4782](https://togithub.com/npm/cli/pull/4782) docs: explain that \_auth only goes to npm registry ([@wraithgar](https://togithub.com/wraithgar)) - [`fa3d829`](https://togithub.com/npm/cli/commit/fa3d82989df7071cfe500c5f9cc09c597bcc17ee) [#4772](https://togithub.com/npm/cli/pull/4772) docs: include org instructions in scoped publish ([@bnb](https://togithub.com/bnb)) ##### Dependencies - [`36899d1`](https://togithub.com/npm/cli/commit/36899d193b8e8ee6019b04aa5e6a3a9a641a3172) [#4807](https://togithub.com/npm/cli/pull/4807) deps: `@npmcli/arborist@5.1.1` - [`0ebadf5`](https://togithub.com/npm/cli/commit/0ebadf5b603368557e9e837a46ea5c59c2677a81) [#4745](https://togithub.com/npm/cli/pull/4745) add support for installLinks ([@nlf](https://togithub.com/nlf)) - [`3d96494`](https://togithub.com/npm/cli/commit/3d964940f410052918e37a9b05818fe9dc4cd86a) [#4745](https://togithub.com/npm/cli/pull/4745) when replacing a Link with a Node, make sure to remove the Link target from the root ([@nlf](https://togithub.com/nlf)) - [`3f2b24a`](https://togithub.com/npm/cli/commit/3f2b24afe205547dbbadf5a6313e95f6b565fb49) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `@npmcli/map-workspaces@2.0.3` - [`b1b6948`](https://togithub.com/npm/cli/commit/b1b69487637ce99192dc930257eebae9eed4fe7f) [#4808](https://togithub.com/npm/cli/pull/4808) deps: `libnpmexec@4.0.5` - [`4a46a27`](https://togithub.com/npm/cli/commit/4a46a27f2b968e2f8c1f4821508f93013738c482) [#4777](https://togithub.com/npm/cli/pull/4777) fix read mixed local/registry pkg ([@ruyadorno](https://togithub.com/ruyadorno)) - [`9f57404`](https://togithub.com/npm/cli/commit/9f57404dc148835d7393b5fe617c8c5e2c958061) [#4743](https://togithub.com/npm/cli/pull/4743) deps: `npm-registry-fetch@13.1.1` - [`532883f`](https://togithub.com/npm/cli/commit/532883ffc35fc1cc9aec09f03bf5ee0f256b94a4) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `cacache@16.0.6` - [`4d1398e`](https://togithub.com/npm/cli/commit/4d1398e347ed56464d7afd8ef0b3a3bc82b2f19f) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `npm-profile@6.0.3` - [`5e31322`](https://togithub.com/npm/cli/commit/5e313223100db1207818d756b081eaba3468b273) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `npmlog@6.0.2` - [`4eb2ccb`](https://togithub.com/npm/cli/commit/4eb2ccbacbd2ca55f2a41a104ee20578542fc52f) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `read-package-json@5.0.1` - [`aeb54e4`](https://togithub.com/npm/cli/commit/aeb54e41b613f4a98d1f02d255b3a564c43270d8) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `glob@8.0.1` - [`252b2b1`](https://togithub.com/npm/cli/commit/252b2b1e8caaf1c26e5ab6836a83ec430d2a699a) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `npm-packlist@5.0.2` - [`c51e553`](https://togithub.com/npm/cli/commit/c51e553a32315e4f1b703ca9030eb7ade91d1a85) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `semver@7.3.7` - [`13299ee`](https://togithub.com/npm/cli/commit/13299eed80db9a05f0b0a063b8936c0148ec3037) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `lru-cache@7.8.1` - [`0f2da5d`](https://togithub.com/npm/cli/commit/0f2da5dca54862707a00d2254bf4c0b4c2e0be60) [#4786](https://togithub.com/npm/cli/pull/4786) deps: `cli-table3@0.6.2` - [`0ee57f1`](https://togithub.com/npm/cli/commit/0ee57f1492893da84686f4340feeb0469fb751f8) [#4805](https://togithub.com/npm/cli/pull/4805) deps: `libnpmpublish@6.0.4` - [`8a633a4`](https://togithub.com/npm/cli/commit/8a633a436cf37dad293af3aaf8ea9a0b5badf314) [#4806](https://togithub.com/npm/cli/pull/4806) deps: `libnpmversion@3.0.4` ### [`v8.7.0`](https://togithub.com/npm/cli/releases/tag/v8.7.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.6.0...v8.7.0) #### v8.7.0 (2022-04-13) ##### Features - [`6611e91`](https://togithub.com/npm/cli/commit/6611e9147f1726ab4537a7fe3b9e3beb6728f700) [#4723](https://togithub.com/npm/cli/pull/4723) feat(config): add more npm/node information to config ls ([@lukekarrys](https://togithub.com/lukekarrys)) - [`c057b90`](https://togithub.com/npm/cli/commit/c057b90d0954ff5b6f2973748ae5d41885b99213) [#4740](https://togithub.com/npm/cli/pull/4740) feat(config): warn on deprecated configs ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Bug Fixes - [`2829cb2`](https://togithub.com/npm/cli/commit/2829cb28a432b5ff7beeeb3bf3e7e2e174c1121d) [#4658](https://togithub.com/npm/cli/pull/4658) fix: update readme badges ([@lukekarrys](https://togithub.com/lukekarrys)) - [`e3da5df`](https://togithub.com/npm/cli/commit/e3da5df4152fbe547f7871547165328e1bf06262) [#4667](https://togithub.com/npm/cli/pull/4667) fix: replace deprecated String.prototype.substr() ([@CommanderRoot](https://togithub.com/CommanderRoot)) - [`2a26e5e`](https://togithub.com/npm/cli/commit/2a26e5e21af788f025a5731d88f15f6dc88b4c0c) [#4645](https://togithub.com/npm/cli/pull/4645) fix: remove dedupe --save ([@wraithgar](https://togithub.com/wraithgar)) - [`47438ff`](https://togithub.com/npm/cli/commit/47438ff19f4b6e84a0325ed73b97999ce34bc789) [#4645](https://togithub.com/npm/cli/pull/4645) fix: do not export npm_config_include_workspace_root ([@wraithgar](https://togithub.com/wraithgar)) - [`840c338`](https://togithub.com/npm/cli/commit/840c338aa6aba7dc39d9d3afba075701e3979362) [#4678](https://togithub.com/npm/cli/pull/4678) fix(run-script): don't cascade if-present config ([@ruyadorno](https://togithub.com/ruyadorno)) - [`4d676e3`](https://togithub.com/npm/cli/commit/4d676e31a68f081b8553eff4e79db1f29acf47e1) [#4709](https://togithub.com/npm/cli/pull/4709) fix(arborist): when reloading an edge, also refresh overrides ([@nlf](https://togithub.com/nlf)) - [`3f7fe17`](https://togithub.com/npm/cli/commit/3f7fe17d1ea743b3ce1f27b9156e9fa0e358a7df) [#4659](https://togithub.com/npm/cli/pull/4659) fix: skip update notifier file if not requested ([@lukekarrys](https://togithub.com/lukekarrys)) - [`5ba7f0c`](https://togithub.com/npm/cli/commit/5ba7f0cef753d4af0bc02ca7d6dd0ac1bdd11ffe) [#4726](https://togithub.com/npm/cli/pull/4726) fix: show more information during publish dry-run ([@lukekarrys](https://togithub.com/lukekarrys)) - [`aa4a4da`](https://togithub.com/npm/cli/commit/aa4a4da336a6ec1963394fdbd06acb173c842d26) [#4735](https://togithub.com/npm/cli/pull/4735) fix(arborist): dont skip adding advisories to audit based on name/range ([@lukekarrys](https://togithub.com/lukekarrys)) - [`0cd852f`](https://togithub.com/npm/cli/commit/0cd852f62e1453e647a2551e98c78ce7e0c8ea03) [#4741](https://togithub.com/npm/cli/pull/4741) fix: mitigate doctor test race condition ([@wraithgar](https://togithub.com/wraithgar)) - [`ba8b2a7`](https://togithub.com/npm/cli/commit/ba8b2a753d63c8a8c7a44a48c2e13626b12025fe) [#4744](https://togithub.com/npm/cli/pull/4744) fix(ls): make `--omit` filter `npm ls` ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Documentation - [`85b3c48`](https://togithub.com/npm/cli/commit/85b3c48d2c9bc4199aed699cc4c00ac96c5feebd) [#4666](https://togithub.com/npm/cli/pull/4666) docs(ci): add note that configuration must be consistent between install and ci ([@nlf](https://togithub.com/nlf)) - [`44108f7`](https://togithub.com/npm/cli/commit/44108f7be5e1e928d8aa3eda3c5c177bcd216c99) [#4670](https://togithub.com/npm/cli/pull/4670) docs: fix npm-uninstall typo ([@JSKitty](https://togithub.com/JSKitty)) ##### Dependencies - [`aaf86f6`](https://togithub.com/npm/cli/commit/aaf86f61836c45b254794785f0a2e8f43dc38800) [#4674](https://togithub.com/npm/cli/pull/4674) deps: `@npmcli/metavuln-calculator@3.1.0` - [`4a9a705`](https://togithub.com/npm/cli/commit/4a9a705de6992a3e9eefecc6c0cf8da45a527c7a) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/package-json@2.0.0` - [`1a90b9e`](https://togithub.com/npm/cli/commit/1a90b9e9ebe98cce83591e11312aaf41c830f835) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `treeverse@2.0.0` - [`f86f1af`](https://togithub.com/npm/cli/commit/f86f1af636f39d7d30a97873bbb6652416f68013) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/disparity-colors@2.0.0` - [`3a76dff`](https://togithub.com/npm/cli/commit/3a76dff3f49af9688a44a508d956f2091363b66d) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `make-fetch-happen@10.1.2` - [`0230428`](https://togithub.com/npm/cli/commit/02304284ddd147e604835a000d3a28a2deb65702) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/config@4.0.2` - [`82dc75f`](https://togithub.com/npm/cli/commit/82dc75fe62466714ea59accf245a6f9d6d111e17) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `npm-pick-manifest@7.0.1` - [`ad99360`](https://togithub.com/npm/cli/commit/ad9936063f20829eb9d5358d056593883f17a57b) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `npm-install-checks@5.0.0` - [`79fc706`](https://togithub.com/npm/cli/commit/79fc706f9c389a17ba50dd8835223160b8b0c3fb) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `bin-links@3.0.1` - [`1f2fb1e`](https://togithub.com/npm/cli/commit/1f2fb1e07b752ee34867c271a0fd1f186397d8ec) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/git@3.0.1` - [`0f23c33`](https://togithub.com/npm/cli/commit/0f23c3378c991b2a482463ce7f700829a3752940) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/run-script@3.0.2` - [`485753d`](https://togithub.com/npm/cli/commit/485753df44e66921dcb593e1bcbb39de79c6dc11) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `cacache@16.0.4` - [`e9b25cd`](https://togithub.com/npm/cli/commit/e9b25cd66bef17e807a84e7b10384f5f4d0064b7) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/move-file@2.0.0` - [`0e87cac`](https://togithub.com/npm/cli/commit/0e87cac8b6f09692f6bd1bf086aadbe323d127b5) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/node-gyp@2.0.0` - [`b632746`](https://togithub.com/npm/cli/commit/b632746b99121b5a271c75b985a849dfd75b6c57) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `@npmcli/promise-spawn@3.0.0` - [`b1863bf`](https://togithub.com/npm/cli/commit/b1863bf87adeb6deec83869f0f7bb1df4a5731ef) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `pacote@13.1.1` - [`a2781a3`](https://togithub.com/npm/cli/commit/a2781a367d62328d7f870de878f1b63d66593f4f) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `ssri@9.0.0` - [`5172e03`](https://togithub.com/npm/cli/commit/5172e03a572c99159568861049e4c2a536922f50) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `ini@3.0.0` - [`71296d5`](https://togithub.com/npm/cli/commit/71296d5ca4ace5805e1061c1a58878939c1c32f3) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `npm-package-arg@9.0.2` - [`69d8343`](https://togithub.com/npm/cli/commit/69d834319a9d668bd451600ab6e124a8819b284d) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `graceful-fs@4.2.10` - [`c44c2b0`](https://togithub.com/npm/cli/commit/c44c2b02920854897ba7a663ef705b9b474c2250) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `lru-cache@7.7.3` - [`38029ed`](https://togithub.com/npm/cli/commit/38029edea846ffe81768d7073d4ec09a4b129c24) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `dezalgo@1.0.4` - [`e57353c`](https://togithub.com/npm/cli/commit/e57353c78e798afbd3eb4390a42da5d5076be45d) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `semver@7.3.6` - [`1b30c72`](https://togithub.com/npm/cli/commit/1b30c725ecd0f03f55e3c0576962972748eec238) [#4691](https://togithub.com/npm/cli/pull/4691) deps: `minimatch@5.0.1` - [`c70232c`](https://togithub.com/npm/cli/commit/c70232cc12fd9b3b024c2c759edd708af2367b8d) [#4706](https://togithub.com/npm/cli/pull/4706) deps: `@npmcli/arborist@5.0.5` - [`baff482`](https://togithub.com/npm/cli/commit/baff4828f733efee0a569e00f87d25f06f2b384b) [#4705](https://togithub.com/npm/cli/pull/4705) deps: `libnpmdiff@4.0.3` - [`dda8a97`](https://togithub.com/npm/cli/commit/dda8a976a9dd696cf2b2e2be5b55b2048e768768) [#4704](https://togithub.com/npm/cli/pull/4704) deps: `libnpmorg@4.0.3` - [`8914864`](https://togithub.com/npm/cli/commit/891486451f1c34a2e7649b0a76c6c0d611ce3d39) [#4703](https://togithub.com/npm/cli/pull/4703) deps: `libnpmaccess@6.0.3` - [`3516f61`](https://togithub.com/npm/cli/commit/3516f61e415d9ce6e9b00378c45791e33bb99fc9) [#4702](https://togithub.com/npm/cli/pull/4702) deps: `libnpmfund@3.0.2` - [`ecd22b0`](https://togithub.com/npm/cli/commit/ecd22b07af515d86b77248e6a4cc2dec57bafd50) [#4701](https://togithub.com/npm/cli/pull/4701) deps: `libnpmversion@3.0.2` - [`7ed9faf`](https://togithub.com/npm/cli/commit/7ed9fafaa951071a7988a3ec4ca3a5e01756b11d) [#4700](https://togithub.com/npm/cli/pull/4700) deps: `libnpmhook@8.0.3` - [`df92e23`](https://togithub.com/npm/cli/commit/df92e23af63ca07bb4c261abd7365530529d3fd2) [#4699](https://togithub.com/npm/cli/pull/4699) deps: `libnpmexec@4.0.3` - [`5074adc`](https://togithub.com/npm/cli/commit/5074adc5e17d1b0ec753cde3b7efd96c2fc7c4a3) [#4698](https://togithub.com/npm/cli/pull/4698) deps: `libnpmsearch@5.0.3` - [`35e5100`](https://togithub.com/npm/cli/commit/35e5100e287925d19df4aab98de96cf70a6ff5a6) [#4697](https://togithub.com/npm/cli/pull/4697) deps: `libnpmteam@4.0.3` - [`86f5b27`](https://togithub.com/npm/cli/commit/86f5b273fc57118b8b1a5e53ec3ca49d94d81601) [#4696](https://togithub.com/npm/cli/pull/4696) deps: `libnpmpack@4.0.3` - [`1617bce`](https://togithub.com/npm/cli/commit/1617bce61663a743435d162b003d3b99376d426f) [#4695](https://togithub.com/npm/cli/pull/4695) deps: `libnpmpublish@6.0.3` - [`e33aa0f`](https://togithub.com/npm/cli/commit/e33aa0f94f87ae4f9d2a73781e84832ef61d1855) [#4714](https://togithub.com/npm/cli/pull/4714) deps: remove stringify-package - [`98377d1`](https://togithub.com/npm/cli/commit/98377d159f72a5b6073f07235b057984eb09a85c) [#4740](https://togithub.com/npm/cli/pull/4740) deps: `@npmcli/config@4.1.0` - [`605ccef`](https://togithub.com/npm/cli/commit/605ccef6916c170f6d0c53775614f8a02682262a) [#4728](https://togithub.com/npm/cli/pull/4728) deps: remove ansistyles - [`c22fb1e`](https://togithub.com/npm/cli/commit/c22fb1e756d43b54fefd826f2c3f459d4f1204b5) [#4728](https://togithub.com/npm/cli/pull/4728) deps: remove ansicolors - [`970244c`](https://togithub.com/npm/cli/commit/970244c415da91b98ca3b200d88c1206ba81d774) [#4734](https://togithub.com/npm/cli/pull/4734) deps: `libnpmversion@3.0.3` - [`42dc0b0`](https://togithub.com/npm/cli/commit/42dc0b03d60dc27602dab26a2f8cbfc17bf4ab40) [#4733](https://togithub.com/npm/cli/pull/4733) deps: `@npmcli/arborist@5.0.6` ### [`v8.6.0`](https://togithub.com/npm/cli/releases/tag/v8.6.0) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.5...v8.6.0) #### v8.6.0 (2022-03-31) ##### Features - [`723a0918a`](https://togithub.com/npm/cli/commit/723a0918a5a9d9f795584f85d04506fafda9ca42) [#4588](https://togithub.com/npm/cli/pull/4588) feat(version): reify on workspace version change ([@ruyadorno](https://togithub.com/ruyadorno)) - [`cc6c09431`](https://togithub.com/npm/cli/commit/cc6c09431d7fe2db8ac1dc7a707f2dab7a7a1f83) [#4594](https://togithub.com/npm/cli/pull/4594) feat: add logs-dir config to set custom logging location ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Bug Fixes - [`98bfd9a8c`](https://togithub.com/npm/cli/commit/98bfd9a8cc23930e6becd15fffabadd1c269b0a2) fix: remove always true condition ([#4590](https://togithub.com/npm/cli/issues/4590)) ([@XhmikosR](https://togithub.com/XhmikosR)) - [`81afa5a88`](https://togithub.com/npm/cli/commit/81afa5a8838c71a3a5037e2c8b4ae196e19fe0d7) [#4601](https://togithub.com/npm/cli/pull/4601) fix(unpublish): properly apply publishConfig ([@wraithgar](https://togithub.com/wraithgar)) - [`716a07fde`](https://togithub.com/npm/cli/commit/716a07fde7905bb69e4c6f1991bb7289589a6669) [#4607](https://togithub.com/npm/cli/pull/4607) fix: 100% coverage in tests ([@wraithgar](https://togithub.com/wraithgar)) - [`6f9cb490e`](https://togithub.com/npm/cli/commit/6f9cb490e7299976c43c6a118036c130671fe188) [#4614](https://togithub.com/npm/cli/pull/4614) fix(arborist): handle link nodes in old lockfiles correctly ([@nlf](https://togithub.com/nlf)) - [`18b8b9435`](https://togithub.com/npm/cli/commit/18b8b94357d8f57301fbaa0f1e5dc2cf1128bf3e) [#4617](https://togithub.com/npm/cli/pull/4617) fix(arborist): make sure resolveParent exists before checking props ([@nlf](https://togithub.com/nlf)) - [`bd96ae407`](https://togithub.com/npm/cli/commit/bd96ae4071f9cc8a65e741f414db12e98537971d) [#4599](https://togithub.com/npm/cli/pull/4599) fix(arborist): identify and repair invalid nodes in the virtual tree ([@nlf](https://togithub.com/nlf)) - [`99d884542`](https://togithub.com/npm/cli/commit/99d88454248f950b82652b592fe2b4d019c1060b) [#4599](https://togithub.com/npm/cli/pull/4599) fix: make sure we loadOverrides on the root node in loadVirtual() ([@nlf](https://togithub.com/nlf)) - [`45dd8b861`](https://togithub.com/npm/cli/commit/45dd8b8615bb1d7a93e1733746581049a1f399e6) [#4609](https://togithub.com/npm/cli/pull/4609) fix: move shellout logic into commands ([@wraithgar](https://togithub.com/wraithgar)) - [`a64acc0bf`](https://togithub.com/npm/cli/commit/a64acc0bf01e4bc68b26ead5b2d5c6db47ef16c2) [#4609](https://togithub.com/npm/cli/pull/4609) fix: really load all commands in tests, add description to birthday ([@wraithgar](https://togithub.com/wraithgar)) - [`d8dcc02cf`](https://togithub.com/npm/cli/commit/d8dcc02cfd354c1314c45d6530ec926cd138210c) [#4609](https://togithub.com/npm/cli/pull/4609) fix: consolidate command alias code ([@wraithgar](https://togithub.com/wraithgar)) - [`f76d4f2f6`](https://togithub.com/npm/cli/commit/f76d4f2f661bcc2534f541ee0e7d683155372baf) [#4609](https://togithub.com/npm/cli/pull/4609) fix: consolidate is-windows code ([@wraithgar](https://togithub.com/wraithgar)) - [`57d8f75eb`](https://togithub.com/npm/cli/commit/57d8f75eb864486f6aa17bb3dd2f213b5c148073) [#4609](https://togithub.com/npm/cli/pull/4609) fix: consolidate node version support logic ([@wraithgar](https://togithub.com/wraithgar)) - [`0a957f5e2`](https://togithub.com/npm/cli/commit/0a957f5e2fbcce51c407d22b19e38004d09c51af) [#4609](https://togithub.com/npm/cli/pull/4609) fix: consolidate path delimiter logic ([@wraithgar](https://togithub.com/wraithgar)) - [`738a40445`](https://togithub.com/npm/cli/commit/738a404454677b78b25ce82a8d2e4c1f46d57ffa) [#4609](https://togithub.com/npm/cli/pull/4609) fix: bump knownBroken to <12.5.0 ([@wraithgar](https://togithub.com/wraithgar)) - [`8b65bfd5d`](https://togithub.com/npm/cli/commit/8b65bfd5d610a70e1a860936be1a47f3a3df7f32) [#4629](https://togithub.com/npm/cli/pull/4629) fix: return otplease fn results ([@wraithgar](https://togithub.com/wraithgar)) - [`d8d374d23`](https://togithub.com/npm/cli/commit/d8d374d23d34c17e22b52afc1cfb5247cc7c3e1d) [#4632](https://togithub.com/npm/cli/pull/4632) fix: consolidate split-package-names ([@wraithgar](https://togithub.com/wraithgar)) - [`cc0a2ec99`](https://togithub.com/npm/cli/commit/cc0a2ec9999b956ea654deaf68fd49ae4bf1a1c0) [#4611](https://togithub.com/npm/cli/pull/4611) fix: work better with system manpages ([#4610](https://togithub.com/npm/cli/issues/4610)) ([@d0sboots](https://togithub.com/d0sboots)) - [`668ec7f33`](https://togithub.com/npm/cli/commit/668ec7f33b7a76f5e86a59f7e5a6c0e068a242b1) [#4644](https://togithub.com/npm/cli/pull/4644) fix: only call npmlog progress methods if explicitly requested ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Documentation - [`ff1367f01`](https://togithub.com/npm/cli/commit/ff1367f01b9dd924d039b5a6b58399101cac99ca) [#4641](https://togithub.com/npm/cli/pull/4641) docs: recommend prepare over prepublish ([@verhovsky](https://togithub.com/verhovsky)) ##### Dependencies - [`6df061ec2`](https://togithub.com/npm/cli/commit/6df061ec2a52882693ed86a3524ac6af0f88acd8) [#4594](https://togithub.com/npm/cli/pull/4594) deps: `npm-registry-fetch@13.1.0` - [`6dd1139c9`](https://togithub.com/npm/cli/commit/6dd1139c9f302ac71f47a75e70bbe9cdf2e64960) [#4594](https://togithub.com/npm/cli/pull/4594) deps: `cacache@16.0.3` - [`feb4446d5`](https://togithub.com/npm/cli/commit/feb4446d50a7b6a61e44a92b78e1e1af2d89a725) [#4616](https://togithub.com/npm/cli/pull/4616) deps: `make-fetch-happen@10.1.0` - [`c33b53311`](https://togithub.com/npm/cli/commit/c33b5331120d8304e0f090ceda55e19cc6f451f4) [#4613](https://togithub.com/npm/cli/pull/4613) deps: `minipass-fetch@2.1.0` - [`6a4c8ff89`](https://togithub.com/npm/cli/commit/6a4c8ff89acc98409060f5aa55b2f1a795a6b66c) [#4606](https://togithub.com/npm/cli/pull/4606) deps: `npm-audit-report@3.0.0` - [`6e0a131d2`](https://togithub.com/npm/cli/commit/6e0a131d2ff3143856f388bb42c6568d5312c451) [#4627](https://togithub.com/npm/cli/pull/4627) deps: `debug@4.3.4` - [`0f1cd60a1`](https://togithub.com/npm/cli/commit/0f1cd60a1cdb643782ae86a5a7fce84e357dbf10) [#4627](https://togithub.com/npm/cli/pull/4627) deps: `proc-log@2.0.1` - [`da377eed5`](https://togithub.com/npm/cli/commit/da377eed5cba72185b90f5fc32ef288331c856ef) [#4627](https://togithub.com/npm/cli/pull/4627) deps: `parse-conflict-json@2.0.2` - [`726a8a07a`](https://togithub.com/npm/cli/commit/726a8a07afeb3bd24979307679ce7e63c73b178e) [#4627](https://togithub.com/npm/cli/pull/4627) deps: `gauge@4.0.4` - [`aac01b89c`](https://togithub.com/npm/cli/commit/aac01b89caf6336a2eb34d696296303cdadd5c08) [#4628](https://togithub.com/npm/cli/pull/4628) deps: `@npmcli/template-oss@3.2.1` - [`52dfaf239`](https://togithub.com/npm/cli/commit/52dfaf239a3f66a05ee9d6148bc41a46b5adffd6) [#4630](https://togithub.com/npm/cli/pull/4630) deps: `make-fetch-happen@10.1.1` - [`9778a5387`](https://togithub.com/npm/cli/commit/9778a5387771256fc81e3587922c12ec47f750ea) [#4635](https://togithub.com/npm/cli/pull/4635) deps: `init-package-json@3.0.2` - [`86eff5dcc`](https://togithub.com/npm/cli/commit/86eff5dccb9bce2eb8d80706e8dea855faf753b3) [#4635](https://togithub.com/npm/cli/pull/4635) deps: `npm-package-arg@9.0.2` - [`5b4cbb217`](https://togithub.com/npm/cli/commit/5b4cbb2175bfa35e347fe94e21d49a05ea64ead1) [#4635](https://togithub.com/npm/cli/pull/4635) deps: `validate-npm-package-name@4.0.0` - [`a59fd2cb8`](https://togithub.com/npm/cli/commit/a59fd2cb863245fce56f96c90ac854e62c5c4d6f) [#4639](https://togithub.com/npm/cli/pull/4639) deps: `@npmcli/template-oss@3.2.2` - [`679e569d5`](https://togithub.com/npm/cli/commit/679e569d5778aef312b37c1ba3bda0171366c9fb) [#4655](https://togithub.com/npm/cli/pull/4655) deps: `@npmcli/arborist@5.0.4` ### [`v8.5.5`](https://togithub.com/npm/cli/releases/tag/v8.5.5) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.4...v8.5.5) #### v8.5.5 (2022-03-17) ##### Bug Fixes - [`0e7511d14`](https://togithub.com/npm/cli/commit/0e7511d144bdb6624e4c0fdfb31b4b42ed2954c9) [#4261](https://togithub.com/npm/cli/pull/4261) fix(arborist): \_findMissingEdges missing dependency due to inconsistent path separators ([@salvadorj](https://togithub.com/salvadorj)) - [`c83069436`](https://togithub.com/npm/cli/commit/c83069436ef4af75eaef071bc181ba1ab49729e9) [#4547](https://togithub.com/npm/cli/pull/4547) fix: omit bots from authors ([@wraithgar](https://togithub.com/wraithgar)) - [`f66da2ed8`](https://togithub.com/npm/cli/commit/f66da2ed8948fbfa919dd5debe52eafe2018735c) [#4565](https://togithub.com/npm/cli/pull/4565) fix(owner): bypass cache when fetching packument ([@wraithgar](https://togithub.com/wraithgar)) - [`f0c6e86ca`](https://togithub.com/npm/cli/commit/f0c6e86ca5920baa85355af3ea50ed13f7429a10) [#4572](https://togithub.com/npm/cli/pull/4572) fix: remove name from unpublished message ([@wraithgar](https://togithub.com/wraithgar)) - [`f7e58fa74`](https://togithub.com/npm/cli/commit/f7e58fa74d9008731b86c82f75251ca295056cf1) [#4572](https://togithub.com/npm/cli/pull/4572) fix: remove "bug the author" message from package 404 ([@wraithgar](https://togithub.com/wraithgar)) - [`5471ff5fe`](https://togithub.com/npm/cli/commit/5471ff5fe8f74f46cdc2bb056ba9b496c7dd1a78) [#4573](https://togithub.com/npm/cli/pull/4573) fix: add isntall alias to install ([@wraithgar](https://togithub.com/wraithgar)) - [`84d19210e`](https://togithub.com/npm/cli/commit/84d19210e5604775a3a413aa32cbba2c103933f2) [#4576](https://togithub.com/npm/cli/pull/4576) fix: properly show `npm view ./directory` ([@wraithgar](https://togithub.com/wraithgar)) - [`e9a2981f5`](https://togithub.com/npm/cli/commit/e9a2981f55f84ff521ef597883a4e732d08ce1c1) [#4578](https://togithub.com/npm/cli/pull/4578) fix(arborist): save workspace version ([@ruyadorno](https://togithub.com/ruyadorno)) ##### Documentation - [`a30405258`](https://togithub.com/npm/cli/commit/a304052580c070a1f8c1c0cf8cbeec615c46af02) [#4580](https://togithub.com/npm/cli/pull/4580) docs: add foreground-scripts and ignore-scripts to commands ([@wraithgar](https://togithub.com/wraithgar)) - [`2361a68e1`](https://togithub.com/npm/cli/commit/2361a68e14f893e97dad53d66fde32082e23521a) [#4582](https://togithub.com/npm/cli/pull/4582) docs: add isntall alias to install command ([@wraithgar](https://togithub.com/wraithgar)) - [`8ff1dfaae`](https://togithub.com/npm/cli/commit/8ff1dfaaeeb32e88c879b96a786835fe13526a88) [#4575](https://togithub.com/npm/cli/pull/4575) docs: explain that linked deps need `npm install` ran in them ([@wraithgar](https://togithub.com/wraithgar)) - [`ddbb505ec`](https://togithub.com/npm/cli/commit/ddbb505ec6077576e0a9d00a14b43d32d69e4f9e) [#4574](https://togithub.com/npm/cli/pull/4574) docs: explain that git-tag-version=false does not commit ([@wraithgar](https://togithub.com/wraithgar)) - [`7c878b978`](https://togithub.com/npm/cli/commit/7c878b9781be2e2151f41bd29d46c33e421aeb10) [#4584](https://togithub.com/npm/cli/pull/4584) docs: fix unpublish docs to auto generate usage ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`fcc6acfa8`](https://togithub.com/npm/cli/commit/fcc6acfa808aa556748544edf4e9b73262f77608) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `@npmcli/metavuln-calculator@3.0.1` - [`6d3145014`](https://togithub.com/npm/cli/commit/6d3145014861b4198c16d7772d809fd037ece289) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `pacote@13.0.4` - [`f6b771aab`](https://togithub.com/npm/cli/commit/f6b771aabece09dca2231426d4f681d3578e5ab7) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `make-fetch-happen@10.0.6` - [`e26548fb1`](https://togithub.com/npm/cli/commit/e26548fb12a3bb23fbe32a336f1305e083aa51c0) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `cacache@16.0.0` - [`915dda7ab`](https://togithub.com/npm/cli/commit/915dda7abeedf79cfe0dde1bd55d80115e2a795d) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `init-package-json@3.0.1` - [`f2ec2ef1f`](https://togithub.com/npm/cli/commit/f2ec2ef1f7a639ea292d6ab442d588ed72198857) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `read-package-json@5.0.0` - [`340fa51f4`](https://togithub.com/npm/cli/commit/340fa51f423a518a96c8015a67d8f6144a2e8051) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `pacote@13.0.5` - [`9555a5f1d`](https://togithub.com/npm/cli/commit/9555a5f1d135aa1b8f7374273403efe41e99ee26) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `npm-package-arg@9.0.1` - [`b2a494283`](https://togithub.com/npm/cli/commit/b2a494283f45a25d1b87bc40bf2d68812871e89c) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `normalize-package-data@4.0.0` - [`1cb88f4b3`](https://togithub.com/npm/cli/commit/1cb88f4b31019af9cb8eac8a46433b44bba9d061) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `hosted-git-info@5.0.0` - [`f95396a03`](https://togithub.com/npm/cli/commit/f95396a033b75e2a3e9aa83f0b06c527641027a4) [#4562](https://togithub.com/npm/cli/pull/4562) deps: `cacache@16.0.1` - [`aec2bfecc`](https://togithub.com/npm/cli/commit/aec2bfecca4ad3ee7db4481cf068add9c42e7160) [#4585](https://togithub.com/npm/cli/pull/4585) deps: `cacache@16.0.2` - [`ed8ab63e4`](https://togithub.com/npm/cli/commit/ed8ab63e4a2c8e6527bf7d49736d1bbb6f0aead2) deps: `libnpmpack@4.0.2` - [`0b73bfa82`](https://togithub.com/npm/cli/commit/0b73bfa82d4eb826ec0dbda4cc457c94580e0d64) deps: `libnpmteam@4.0.2` - [`475d59b36`](https://togithub.com/npm/cli/commit/475d59b361ef9e260e21d39361baf92f2272f1d7) deps: `libnpmaccess@6.0.2` - [`7201c7395`](https://togithub.com/npm/cli/commit/7201c7395f66d3faf24b361e69555490d606ed91) deps: `libnpmsearch@5.0.2` - [`f5df358c3`](https://togithub.com/npm/cli/commit/f5df358c3af2c23e7818105608bcceabdd8b62fa) deps: `libnpmorg@4.0.2` - [`472e7dd7a`](https://togithub.com/npm/cli/commit/472e7dd7aa6935cb6b89ec78cbce45f75f3f0044) deps: `libnpmhook@8.0.2` - [`c901d7290`](https://togithub.com/npm/cli/commit/c901d7290ed09aefe3ba6e8c09cb3126f0d92f95) deps: `libnpmpublish@6.0.2` - [`aad53327f`](https://togithub.com/npm/cli/commit/aad53327f23b123d0e017338a9a1b65d40f21efe) deps: `@npmcli/arborist@5.0.3` - [`b40136bca`](https://togithub.com/npm/cli/commit/b40136bcaf32232e4cacdb517ce40f61871da159) deps: `libnpmdiff@4.0.2` - [`5d91201d1`](https://togithub.com/npm/cli/commit/5d91201d1c69e3c095a4eedf0f1d702f35b0d8c1) deps: `libnpmexec@4.0.2` ### [`v8.5.4`](https://togithub.com/npm/cli/releases/tag/v8.5.4) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.3...v8.5.4) #### v8.5.4 (2022-03-10) ##### Bug Fixes - [`fbdb43138`](https://togithub.com/npm/cli/commit/fbdb43138ab8e682efb7668767465e7066d43b9f) [#4529](https://togithub.com/npm/cli/pull/4529) fix(rebuild): don't run lifecycle scripts twice on linked deps ([@wraithgar](https://togithub.com/wraithgar)) - [`1c182e11d`](https://togithub.com/npm/cli/commit/1c182e11d524294d85348a3c2566f266bd281c00) [#4495](https://togithub.com/npm/cli/pull/4495) fix(doctor): don't retry ping ([@wraithgar](https://togithub.com/wraithgar)) - [`55ab38c53`](https://togithub.com/npm/cli/commit/55ab38c5337de76b739c4f0cdfb8932dc5420ce4) [#4495](https://togithub.com/npm/cli/pull/4495) fix(doctor): allow for missing local bin and `node_modules` ([@wraithgar](https://togithub.com/wraithgar)) - [`5c06a33e6`](https://togithub.com/npm/cli/commit/5c06a33e641594c5617a0606c338fc54c64d623b) [#4528](https://togithub.com/npm/cli/pull/4528) fix: clean up owner command and otplease ([@wraithgar](https://togithub.com/wraithgar)) ##### Documentation - [`2485064da`](https://togithub.com/npm/cli/commit/2485064da590ef787e94a952e0bbdcd9f4880703) [#4524](https://togithub.com/npm/cli/pull/4524) docs: fix typo in configuring-npm/package-json.md ([@dlcmh](https://togithub.com/dlcmh)) - [`91f03ee61`](https://togithub.com/npm/cli/commit/91f03ee618bc635f9cfbded735fe98bbfa9d643f) [#4510](https://togithub.com/npm/cli/pull/4510) docs: standardize changelog heading ([@wraithgar](https://togithub.com/wraithgar)) ##### Dependencies - [`377f55e0e`](https://togithub.com/npm/cli/commit/377f55e0e786ac6c26d64848a89ce720c5d478eb) [#4530](https://togithub.com/npm/cli/pull/4530) deps: `make-fetch-happen@10.0.5` - add code property to unsupported proxy url error - [`40b7fbf67`](https://togithub.com/npm/cli/commit/40b7fbf670c8ba064b3a771981fa0510d63fb6ef) [#4531](https://togithub.com/npm/cli/pull/4531) deps: `read-package-json@4.1.2` - don't throw exception on invalid main attr - [`d9dc70ce4`](https://togithub.com/npm/cli/commit/d9dc70ce4d632b8b0401c41e9a015b8083e87db1) [#4545](https://togithub.com/npm/cli/pull/4545) deps: `map-workspaces@2.0.2` - evaluate all patterns before throwing `EDUPLICATEWORKSPACE` - [`70fcfb46b`](https://togithub.com/npm/cli/commit/70fcfb46bebc777e0ef6b36a47d9620807488acd) deps: `libnpmfund@3.0.1` - [`621cd033f`](https://togithub.com/npm/cli/commit/621cd033f64f101084af83ff8a797f5415a3b70d) deps: `@npmcli/arborist@5.0.2` - [`087fdc4cb`](https://togithub.com/npm/cli/commit/087fdc4cb4d6582b2b628087f866e8ca8bc00934) deps: `libnpmpublish@6.0.1` - [`d24c6d288`](https://togithub.com/npm/cli/commit/d24c6d288b1cfe6dd893a8ffedb15cbe6837d545) deps: `libnpmhook@8.0.1` - [`fa59830fc`](https://togithub.com/npm/cli/commit/fa59830fc429d354179853e8f9b9a32ef3444067) deps: `libnpmsearch@5.0.1` - [`6d5f22b86`](https://togithub.com/npm/cli/commit/6d5f22b86006e7c563161837f56e47079e0fde4a) deps: `libnpmexec@4.0.1` - [`69ea54350`](https://togithub.com/npm/cli/commit/69ea5435016a9d1c454af7253a80204dc9941380) deps: `libnpmaccess@6.0.1` - [`4742d7cf3`](https://togithub.com/npm/cli/commit/4742d7cf3ad15f5263fd5fefd15c04f9871c58af) deps: `libnpmteam@4.0.1` - [`fdd255ae9`](https://togithub.com/npm/cli/commit/fdd255ae9ebf41147085e74cec5c9f65eb5ff1de) deps: `libnpmorg@4.0.1` - [`ed41bc101`](https://togithub.com/npm/cli/commit/ed41bc10182ffd1db66181c20db6c348dba6783e) deps: `libnpmdiff@4.0.1` - [`21e241025`](https://togithub.com/npm/cli/commit/21e24102564e2f3c795312d256fade4228e67776) deps: `libnpmversion@3.0.1` - [`ec7f36ff9`](https://togithub.com/npm/cli/commit/ec7f36ff9e6c973ae5d5998a783bcff16027c282) deps: `libnpmpack@4.0.1` - [`ad4b56414`](https://togithub.com/npm/cli/commit/ad4b564148eaa6fdfe68e5b68f910e41e4e8ee14) deps: `gauge@4.0.3` ### [`v8.5.3`](https://togithub.com/npm/cli/releases/tag/v8.5.3) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.2...v8.5.3) #### v8.5.3 (2022-03-03) ##### Bug Fixes - [`defe79ad6`](https://togithub.com/npm/cli/commit/defe79ad6f2f4216bf5e0188256c77b49164eb94) [#4480](https://togithub.com/npm/cli/pull/4480) fix: publish of tarballs includes README in packument ([@fritzy](https://togithub.com/fritzy)) - [`45fc297f1`](https://togithub.com/npm/cli/commit/45fc297f12e63c026715945a186ba0ec4efbdedb) [#4479](https://togithub.com/npm/cli/pull/4479) fix: ignore implict workspace for some commands ([@fritzy](https://togithub.com/fritzy)) - [`a0900bdf1`](https://togithub.com/npm/cli/commit/a0900bdf1ab7a68988984735f1f3885d02ffb67f) [#4481](https://togithub.com/npm/cli/pull/4481) fix(ls): respect `--include-workspace-root` ([@fritzy](https://togithub.com/fritzy)) - [`0cfc155db`](https://togithub.com/npm/cli/commit/0cfc155db5f11ce23419e440111d99a63bf39754) [#4476](https://togithub.com/npm/cli/pull/4476) fix: set proper workspace repo urls in package.json ([@ljharb](https://togithub.com/ljharb)) - [`9e43de8a5`](https://togithub.com/npm/cli/commit/9e43de8a59e5bf354a9595ed8a79fedcec085aaa) [#4493](https://togithub.com/npm/cli/pull/4493) fix: ignore implicit workspace for whoami ([@nlf](https://togithub.com/nlf)) ##### Dependencies - [`d13f067d9`](https://togithub.com/npm/cli/commit/d13f067d91283e1dec94780a3c007883de9edc46) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `@npmcli/run-script@3.0.1` ([@wraithgar](https://togithub.com/wraithgar)) - [`ce9a6eac0`](https://togithub.com/npm/cli/commit/ce9a6eac0c8329871664167c37f4982c5e443a2a) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `node-gyp@9.0.0` ([@wraithgar](https://togithub.com/wraithgar)) - [`bd660f5f1`](https://togithub.com/npm/cli/commit/bd660f5f1ccc1d9fa88085b168ea05b6dcf5826a) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `@npmcli/config@4.0.1` - [`3c17b6965`](https://togithub.com/npm/cli/commit/3c17b6965f0c5fffd5ac908388568a307466a73f) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `make-fetch-happen@10.0.4` - [`e9b69c4c5`](https://togithub.com/npm/cli/commit/e9b69c4c5454cc8b7d6cf2cbf1f09313f0d20afc) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `npm-registry-fetch@13.0.1` - [`cf27ca888`](https://togithub.com/npm/cli/commit/cf27ca8884387f2b82f8f6900a29e4e41693e774) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `write-file-atomic@4.0.1` - [`f3421921a`](https://togithub.com/npm/cli/commit/f3421921aa72ef570105474cdb2e48cec80de796) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `gauge@4.0.2` - [`1dd2f7ee1`](https://togithub.com/npm/cli/commit/1dd2f7ee16a61024e520b3efa54f8cdba5458a16) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `socks@2.6.2` - [`236e3b403`](https://togithub.com/npm/cli/commit/236e3b4030dd91397713eb02cdf2737dcc988fd7) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `minimatch@3.1.2` ([@wraithgar](https://togithub.com/wraithgar)) - [`10e1326d2`](https://togithub.com/npm/cli/commit/10e1326d2eb7ff2c70ee19907991b369476ccdd0) [#4490](https://togithub.com/npm/cli/pull/4490) deps: `lru-cache@7.4.0` ### [`v8.5.2`](https://togithub.com/npm/cli/releases/tag/v8.5.2) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.1...v8.5.2) #### v8.5.2 (2022-02-24) ##### Bug Fixes - [`9bdd1ace8`](https://togithub.com/npm/cli/commit/9bdd1ace86300a8ee562027bbc5cb57d62dc7ba8) [#4300](https://togithub.com/npm/cli/pull/4300) fix(arborist): use full location as tracker key when inflating ([@lukekarrys](https://togithub.com/lukekarrys)) ([@kirtangajjar](https://togithub.com/kirtangajjar)) - [`c9ff797e8`](https://togithub.com/npm/cli/commit/c9ff797e8b5e5a7b39ced04b1d3f8a0006993a1f) [#4457](https://togithub.com/npm/cli/pull/4457) fix: remove html comments from man entries ([@wraithgar](https://togithub.com/wraithgar)) - [`f4c5f0e52`](https://togithub.com/npm/cli/commit/f4c5f0e52679b1aa42db833fc23dc07d96cc904e) [#4462](https://togithub.com/npm/cli/pull/4462) fix(arborist): fix unescaped periods ([@XhmikosR](https://togithub.com/XhmikosR)) - [`c608512ed`](https://togithub.com/npm/cli/commit/c608512ed03ccf87dc989cec2849d14bf034513a) [#4468](https://togithub.com/npm/cli/pull/4468) fix: ignore integrity values for git dependencies ([@lukekarrys](https://togithub.com/lukekarrys)) ##### Documentation - [`e83e5c9ba`](https://togithub.com/npm/cli/commit/e83e5c9bad93e598969088ae780149dbe34c6b5c) [#4435](https://togithub.com/npm/cli/pull/4435) docs: clarify npm init `@latest` behavior ([@wraithgar](https://togithub.com/wraithgar)) - [`d8fa9fa5e`](https://togithub.com/npm/cli/commit/d8fa9fa5e44d91e1c0170628d4839f7802c65a7f) [#4436](https://togithub.com/npm/cli/pull/4436) docs: explain $INIT_CWD on using scripts page ([@wraithgar](https://togithub.com/wraithgar)) - [`6b68c1aaa`](https://togithub.com/npm/cli/commit/6b68c1aaa282205eb4d47dbc81909c11851f7e06) [#4450](https://togithub.com/npm/cli/pull/4450) docs: auto-generate npm usage for each command ([@manekinekko](https://togithub.com/manekinekko)) ##### Dependencies - [`d58e4442b`](https://togithub.com/npm/cli/commit/d58e4442b0a16c84219d5f80ab88ef68ad209918) deps `@npmcli/arborist@5.0.0` - [`77399cb98`](https://togithub.com/npm/cli/commit/77399cb988d984133bfc2885a6407ffc56b9152d) deps: `libnpmaccess@6.0.0` - [`9633752cd`](https://togithub.com/npm/cli/commit/9633752cd5c4a0d240adcb24f0ae7e3fafd122ba) deps: `libnpmdiff@4.0.0` - [`938750581`](https://togithub.com/npm/cli/commit/9387505819f0e7e4b3d76dd3e2bd8636a1bb6306) deps: `libnpmexec@4.0.0` - [`2c86feaf1`](https://togithub.com/npm/cli/commit/2c86feaf1f974ee510563c7d93c0dd26f6355b15) deps: `libnpmfund@3.0.0` - [`1dab29805`](https://togithub.com/npm/cli/commit/1dab29805c820f82e4bae18123e911fec6948dfd) deps: `libnpmhook@8.0.0` - [`cf273f1cf`](https://togithub.com/npm/cli/commit/cf273f1cf31775c8a73cc67b654faf87b44f7f79) deps: `libnpmorg@4.0.0` - [`8b1d9636a`](https://togithub.com/npm/cli/commit/8b1d9636ad2374254263d154f2b4ca8ea6416f4c) deps: `libnpmpack@4.0.0` - [`67aed0542`](https://togithub.com/npm/cli/commit/67aed05429163fc120e05e6fb15f8f3cd9c6ef22) deps: `libnpmpublish@6.0.0` - [`8b26a6db1`](https://togithub.com/npm/cli/commit/8b26a6db13c37a6f0df86c54ca859ad2f9627825) deps: `libnpmsearch@5.0.0` - [`0b2fa7fed`](https://togithub.com/npm/cli/commit/0b2fa7feda4643fe16c9a492497908f94d310dbd) deps: `libnpmteam@4.0.0` - [`2646d199f`](https://togithub.com/npm/cli/commit/2646d199f26f77c4197ec0bcf30c3e452844c1ab) deps: `libnpmversion@3.0.0` - [`5b29666e5`](https://togithub.com/npm/cli/commit/5b29666e566c09dc685108daaa20163dd58ade2b) [#4459](https://togithub.com/npm/cli/pull/4459) deps: `columnify@1.6.0 and dedupe vulnerable deps` ### [`v8.5.1`](https://togithub.com/npm/cli/releases/tag/v8.5.1) [Compare Source](https://togithub.com/npm/cli/compare/v8.5.0...v8.5.1) #### v8.5.1 (2022-02-17) ##### Dependencies - [`54cda9697`](https://togithub.com/npm/cli/commit/54cda9697b776fae807966097315c7b836623743) [#4410](https://togithub.com/npm/cli/pull/4410) fix(arborist): do not audit in offline mode ([@mohd-akram](https://togithub.com/mohd-akram)) - [`fb13bdaf1`](https://togithub.com/npm/cli/commit/fb13bdaf12dde3ef5685a77354e51a9cfa579879) [#4403](https://togithub.com/npm/cli/pull/4403) deps: `@npmcli/ci-detect@2.0.0` - [`702801002`](https://togithub.com/npm/cli/commit/702801002e99bf02dd4d6d1e447a5ab332d56c79) [#4415](https://togithub.com/npm/cli/pull/4415) deps: `make-fetch-happen@10.0.3` - [`88bab3540`](https://togithub.com/npm/cli/commit/88bab354097023c96c49e78d7ee54159f495bf73) [#4416](https://togithub.com/npm/cli/pull/4416) deps: `gauge@4.0.1` ##### Documentation - [`20378c67c`](https://togithub.com/npm/cli/commit/20378c67cd533db514dd2aec7828c6d119e9d6c7) [#4423](https://togithub.com/npm/cli/pull/4423) docs: update documentation for ping ([@fhinkel](https://togithub.com/fhinkel)) - [`408d2fc15`](https://togithub.com/npm/cli/commit/408d2fc150185ef66125f7d6bdb1c25edb71bba3) [#4426](https://togithub.com/npm/cli/pull/4426) docs: update workspaces guide for consistency ([@bnb](https://togithub.com/bnb)) - [`9275856eb`](https://togithub.com/npm/cli/commit/9275856eb75e7c394a3c7617c2b495aba35ee2de) [#4424](https://togithub.com/npm/cli/pull/4424) docs: update usage example for npm pkg ([@manekinekko](https://togithub.com/manekinekko)) - [`20c83fae7`](https://togithub.com/npm/cli/commit/20c83fae76ff4a051e4f6542a328f1c00cf071bb) [#4428](https://togithub.com/npm/cli/pull/4428) docs: update docs for npm installConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.