dependabot: bump npm from 10.8.3 to 10.9.0

[dependabot[bot]]

Bumps npm from 10.8.3 to 10.9.0.

Changelog

Sourced from npm's changelog.

10.9.0 (2024-10-03)

Features

• 4d57928 #7766 devEngines (#7766) (@​reggi)

Bug Fixes

• 6ca609e #7789 ping and doctor commands fix for checking if registry is online (#7789) (@​milaninfy)

Documentation

• 63d6a73 #7783 package.json: add brief section on exports, link to Node.js docs (#7783) (@​wheresrhys)
• 366c07e #7776 remove incorrect note about npm install (#7776) (@​wraithgar)

Dependencies

• 60a7ee5 #7803 hoist npm-normalize-package-bin
• 20dd44f #7803 hoist minipass-fetch
• 5795987 #7803 update proggy@3.0.0
• 99ccae3 #7803 update bin-links@5.0.0
• 75786ad #7803 update @npmcli/query@4.0.0
• 1c25a1d #7803 update @npmcli/node-gyp@4.0.0
• 2d7fc3d #7803 update @npmcli/name-from-folder@3.0.0
• 1e09334 #7803 update @npmcli/metavuln-calculator@8.0.0
• 820e983 #7803 update @npmcli/installed-package-contents@3.0.0
• 9cd6603 #7803 update read-package-json-fast@4.0.0
• b84d907 #7803 update @npmcli/git@6.0.1
• 53ed632 #7803 update write-file-atomic@6.0.0
• ab40dab #7803 update which@5.0.0
• b1c4770 #7803 update validate-npm-package-name@6.0.0
• 8206c4f #7803 update ssri@12.0.0
• 8b7dbc8 #7803 update read@4.0.0
• f6909a0 #7803 update proc-log@5.0.0
• f9b2e18 #7803 update parse-conflict-json@4.0.0
• e7ab206 #7803 update pacote@19.0.0
• b28dbb1 #7803 update npm-user-validate@3.0.0
• d13a20b #7803 update npm-registry-fetch@18.0.1
• 5208f74 #7803 update npm-profile@11.0.1
• 092f41f #7803 update npm-pick-manifest@10.0.0
• 50a7bc8 #7803 update npm-package-arg@12.0.0
• 591130d #7803 update npm-install-checks@7.1.0
• be6ae96 #7803 update npm-audit-report@6.0.0
• 8d4060a #7803 update normalize-package-data@7.0.0
• 105fa2b #7803 update nopt@8.0.0
• eae4f57 #7803 update make-fetch-happen@14.0.1
• 7214149 #7803 update json-parse-even-better-errors@4.0.0
• c4bed31 #7803 update init-package-json@7.0.1
• f54b155 #7803 update ini@5.0.0
• 6deae9e #7803 update hosted-git-info@8.0.0
• 034c729 #7803 update cacache@19.0.1
• ddb8be0 #7803 update abbrev@3.0.0
• 538a4cc #7803 update @npmcli/run-script@9.0.1
• b80d048 #7803 update @npmcli/redact@3.0.0
• 81137fc #7803 update @npmcli/promise-spawn@8.0.1
• 2076368 #7803 update @npmcli/package-json@6.0.1
• feac87c #7803 update @npmcli/map-workspaces@4.0.1
• dd90f9e #7803 update @npmcli/fs@4.0.0

... (truncated)

Commits

• 977fd57 chore: release 10.9.0
• 4d57928 feat: devEngines (#7766)
• 95e2cb1 chore: ignore .github folder in release-please
• 60a7ee5 deps: hoist npm-normalize-package-bin
• 20dd44f deps: hoist minipass-fetch
• be1e6da chore: update minify-registry-metadata@4.0.0
• 43f2374 chore: update ignore-walk@7.0.0
• bb03036 chore: update npm-packlist@9.0.0
• 2072705 chore: update @​npmcli/eslint-config@​5.0.1
• 5795987 deps: update proggy@3.0.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot[bot]]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.