chore: bump @npmcli/arborist from 5.6.2 to 6.0.0

[dependabot[bot]]

Bumps @npmcli/arborist from 5.6.2 to 6.0.0.

Release notes

Sourced from @​npmcli/arborist's releases.

arborist: v6.0.0

6.0.0 (2022-10-19)

Features

• 586e78d empty commit to trigger all workspace releases (@​lukekarrys)

libnpmsearch: v6.0.0

6.0.0 (2022-10-19)

Features

• 586e78d empty commit to trigger all workspace releases (@​lukekarrys)

arborist: v6.0.0-pre.5

6.0.0-pre.5 (2022-10-19)

⚠️ BREAKING CHANGES

• deprecate boolean install flags in favor of --install-strategy
  • deprecate --global-style, --global now sets --install-strategy=shallow
  • deprecate --legacy-bundling, now sets --install-strategy=nested
• this package no longer attempts to change file ownership automatically

Features

• de2d33f add --install-strategy=hoisted|nested|shallow, deprecate --global-style, --legacy-bundling (#5709) (@​fritzy)
• 475e9b6 #5703 do not alter file ownership (@​nlf)

Bug Fixes

• 1afe5ba account for new npm-package-arg behavior (@​wraithgar)

Dependencies

• 88137a3 npmlog@7.0.1
• 2008ea6 npm-package-arg@10.0.0, pacote@15.0.2
• aa01072 #5707 update the following dependencies

arborist: v6.0.0-pre.4

6.0.0-pre.4 (2022-10-05)

Features

• 9609e9e #5605 use v3 lockfiles by default (#5605) (@​fritzy)

Dependencies

• 5344d2c #5644 pacote@14.0.0
• 6a43b31 @npmcli/metavuln-calculator@4.0.0

... (truncated)

Changelog

Sourced from @​npmcli/arborist's changelog.

6.0.0 (2022-10-19)

Features

• 586e78d empty commit to trigger all workspace releases (@​lukekarrys)

6.0.0-pre.5 (2022-10-19)

⚠️ BREAKING CHANGES

• deprecate boolean install flags in favor of --install-strategy
  • deprecate --global-style, --global now sets --install-strategy=shallow
  • deprecate --legacy-bundling, now sets --install-strategy=nested
• this package no longer attempts to change file ownership automatically

Features

• de2d33f add --install-strategy=hoisted|nested|shallow, deprecate --global-style, --legacy-bundling (#5709) (@​fritzy)
• 475e9b6 #5703 do not alter file ownership (@​nlf)

Bug Fixes

• 1afe5ba account for new npm-package-arg behavior (@​wraithgar)

Dependencies

• 88137a3 npmlog@7.0.1
• 2008ea6 npm-package-arg@10.0.0, pacote@15.0.2
• aa01072 #5707 update the following dependencies

6.0.0-pre.4 (2022-10-05)

Features

• 9609e9e #5605 use v3 lockfiles by default (#5605) (@​fritzy)

Dependencies

• 5344d2c #5644 pacote@14.0.0
• 6a43b31 @npmcli/metavuln-calculator@4.0.0

6.0.0-pre.3 (2022-09-30)

⚠️ BREAKING CHANGES

• npm pack now follows a strict order of operations when applying ignore rules. If a files array is present in the package.json, then rules in .gitignore and .npmignore files from the root will be ignored.

Features

• 3ae796d implement new npm-packlist behavior (@​lukekarrys)

... (truncated)

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)