Bump npm from 7.20.5 to 8.7.0

[dependabot[bot]]

Bumps npm from 7.20.5 to 8.7.0.

Release notes

Sourced from npm's releases.

libnpmhook: v8.0.3

8.0.3 (2022-04-06)

Bug Fixes

• replace deprecated String.prototype.substr() (#4667) (e3da5df)
• update readme badges (#4658) (2829cb2)

Dependencies

• @​npmcli/template-oss@​3.2.1 (aac01b8)
• @​npmcli/template-oss@​3.2.2 (#4639) (a59fd2c)

libnpmhook libnpmhook-v8.0.2

Documentation

• standardize changelog heading (#4510) (91f03ee)

libnpmhook libnpmhook-v8.0.1

Bug Fixes

• set proper workspace repo urls in package.json (#4476) (0cfc155)

Changelog

Sourced from npm's changelog.

v8.7.0 (2022-04-13)

Features

• 6611e91 #4723 feat(config): add more npm/node information to config ls (@​lukekarrys)
• c057b90 #4740 feat(config): warn on deprecated configs (@​lukekarrys)

Bug Fixes

• 2829cb2 #4658 fix: update readme badges (@​lukekarrys)
• e3da5df #4667 fix: replace deprecated String.prototype.substr() (@​CommanderRoot)
• 2a26e5e #4645 fix: remove dedupe --save (@​wraithgar)
• 47438ff #4645 fix: do not export npm_config_include_workspace_root (@​wraithgar)
• 840c338 #4678 fix(run-script): don't cascade if-present config (@​ruyadorno)
• 4d676e3 #4709 fix(arborist): when reloading an edge, also refresh overrides (@​nlf)
• 3f7fe17 #4659 fix: skip update notifier file if not requested (@​lukekarrys)
• 5ba7f0c #4726 fix: show more information during publish dry-run (@​lukekarrys)
• aa4a4da #4735 fix(arborist): dont skip adding advisories to audit based on name/range (@​lukekarrys)
• 0cd852f #4741 fix: mitigate doctor test race condition (@​wraithgar)
• ba8b2a7 #4744 fix(ls): make --omit filter npm ls (@​lukekarrys)

Documentation

• 85b3c48 #4666 docs(ci): add note that configuration must be consistent between install and ci (@​nlf)
• 44108f7 #4670 docs: fix npm-uninstall typo (@​JSKitty)

Dependencies

• aaf86f6 #4674 deps: @npmcli/metavuln-calculator@3.1.0
• 4a9a705 #4691 deps: @npmcli/package-json@2.0.0
• 1a90b9e #4691 deps: treeverse@2.0.0
• f86f1af #4691 deps: @npmcli/disparity-colors@2.0.0
• 3a76dff #4691 deps: make-fetch-happen@10.1.2
• 0230428 #4691 deps: @npmcli/config@4.0.2
• 82dc75f #4691 deps: npm-pick-manifest@7.0.1
• ad99360 #4691 deps: npm-install-checks@5.0.0
• 79fc706 #4691 deps: bin-links@3.0.1
• 1f2fb1e #4691 deps: @npmcli/git@3.0.1
• 0f23c33 #4691 deps: @npmcli/run-script@3.0.2
• 485753d #4691 deps: cacache@16.0.4
• e9b25cd #4691 deps: @npmcli/move-file@2.0.0
• 0e87cac #4691 deps: @npmcli/node-gyp@2.0.0
• b632746 #4691 deps: @npmcli/promise-spawn@3.0.0
• b1863bf #4691 deps: pacote@13.1.1
• a2781a3 #4691 deps: ssri@9.0.0
• 5172e03 #4691 deps: ini@3.0.0
• 71296d5 #4691 deps: npm-package-arg@9.0.2
• 69d8343 #4691 deps: graceful-fs@4.2.10
• c44c2b0 #4691 deps: lru-cache@7.7.3
• 38029ed #4691 deps: dezalgo@1.0.4

... (truncated)

Commits

• 7c4ee92 8.7.0
• 8731990 chore: update AUTHORS
• ac761fb chore: changelog for v8.7.0
• 91741ee chore: increase smoke test timeout
• 1f9eaba chore: make sure to build markdown docs for all commands as part of the docs ...
• ec065b2 chore: fix Makefile for building markdown docs
• 6b5c7df chore: fix reading latest release from changelog
• 42dc0b0 deps: @​npmcli/arborist@​5.0.6
• 4a0e005 chore(latest): release arborist 5.0.6
• 970244c deps: libnpmversion@3.0.3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

Superseded by #333.