chore: release 10.9.1 - Githubissues

github-actions[bot] commented 5 days ago

:robot: I have created a release beep boop

10.9.1

## [10.9.1](https://github.com/npm/cli/compare/v10.9.0...v10.9.1) (2024-11-21) ### Bug Fixes * [`c7fe0db`](https://github.com/npm/cli/commit/c7fe0db8c99233f8709c5e7a90578db6828353fd) [#7924](https://github.com/npm/cli/pull/7924) perf: enable compile cache if present (#7924) (@H4ad) ### Dependencies * [`a221db7`](https://github.com/npm/cli/commit/a221db75b60d801b66089e915ed648c71d7799fd) [#7931](https://github.com/npm/cli/pull/7931) `npm-install-checks@7.1.1` * [`fbad17a`](https://github.com/npm/cli/commit/fbad17aa990d78642836bd97faed71d3e0ca8eab) [#7931](https://github.com/npm/cli/pull/7931) `hosted-git-info@8.0.2` * [`65d2a86`](https://github.com/npm/cli/commit/65d2a86a372d9e814f56f1c0d9ce8d73ca392696) [#7922](https://github.com/npm/cli/pull/7922) `@sigstore/tuf@3.0.0` * [`be45963`](https://github.com/npm/cli/commit/be45963ecf9f7c3dac85dc19696b82646c28a18e) [#7922](https://github.com/npm/cli/pull/7922) `sigstore@3.0.0` * [`fb0bfbd`](https://github.com/npm/cli/commit/fb0bfbd2647cf07081582b462fba869f39018c36) [#7922](https://github.com/npm/cli/pull/7922) `spdx-license-ids@3.0.20` * [`ccadf2a`](https://github.com/npm/cli/commit/ccadf2aa519e5de5d6b9ff62be5d2d25985b7c0f) [#7922](https://github.com/npm/cli/pull/7922) `promise-call-limit@3.0.2` * [`b25712e`](https://github.com/npm/cli/commit/b25712e1888d829393b9a708835ee69ec8ea1e70) [#7922](https://github.com/npm/cli/pull/7922) `package-json-from-dist@1.0.1` * [`1c9e96f`](https://github.com/npm/cli/commit/1c9e96fb9db044ff4cfb4bb5db9b8fc4d4073e13) [#7922](https://github.com/npm/cli/pull/7922) `negotiator@0.6.4` * [`f13bc9c`](https://github.com/npm/cli/commit/f13bc9c22a35fe97ba81e38d87f61c287d7ee0a9) [#7922](https://github.com/npm/cli/pull/7922) `debug@4.3.7` * [`029060c`](https://github.com/npm/cli/commit/029060c5e16aee4d8345635862c5fb0612f58162) [#7922](https://github.com/npm/cli/pull/7922) `cross-spawn@7.0.6` * [`9350950`](https://github.com/npm/cli/commit/93509509b01e8c9a1cedfb991e48e3cf0e8cbad2) [#7922](https://github.com/npm/cli/pull/7922) `@npmcli/metavuln-calculator@8.0.1` * [`c003827`](https://github.com/npm/cli/commit/c003827e3f5c20ec2b9a4c1631fd1dfbb5b6fb27) [#7922](https://github.com/npm/cli/pull/7922) `ansi-regex@6.1.0` * [`d6194f5`](https://github.com/npm/cli/commit/d6194f5774d037f474339ed47713e2809c39e735) [#7922](https://github.com/npm/cli/pull/7922) `pacote@19.0.1` * [`4ff29f6`](https://github.com/npm/cli/commit/4ff29f6a7ee052649d41a4084f1940d957f7959d) [#7922](https://github.com/npm/cli/pull/7922) `npm-registry-fetch@18.0.2` * [`fd6f4fb`](https://github.com/npm/cli/commit/fd6f4fb08f62ed5e8442528c7d532d7d064df1aa) [#7922](https://github.com/npm/cli/pull/7922) `make-fetch-happen@14.0.3` * [`b3f3004`](https://github.com/npm/cli/commit/b3f3004f1769d212240b40f1122d67f213073aec) [#7922](https://github.com/npm/cli/pull/7922) `ci-info@4.1.0` * [`a1f9d48`](https://github.com/npm/cli/commit/a1f9d482f567336d0fb802b7b67da1e71120ddd8) [#7922](https://github.com/npm/cli/pull/7922) `promise-spawn@8.0.2` ### Chores * [`3ace1c1`](https://github.com/npm/cli/commit/3ace1c103d7cf769acd86e1c23b39c96cec2f763) [#7922](https://github.com/npm/cli/pull/7922) update arborist in mock-registry (@wraithgar) * [workspace](https://github.com/npm/cli/releases/tag/libnpmpublish-v10.0.1): `libnpmpublish@10.0.1`

libnpmpublish: 10.0.1

## [10.0.1](https://github.com/npm/cli/compare/libnpmpublish-v10.0.0...libnpmpublish-v10.0.1) (2024-11-21) ### Dependencies * [`be45963`](https://github.com/npm/cli/commit/be45963ecf9f7c3dac85dc19696b82646c28a18e) [#7922](https://github.com/npm/cli/pull/7922) `sigstore@3.0.0`

This PR was generated with Release Please. See documentation.

github-actions[bot] commented 5 days ago

Release Manager

Release workflow run: https://github.com/npm/cli/actions/runs/11961924871

Release Checklist for v10.9.1

[ ] 1. Checkout the release branch

Ensure git status is not dirty on this branch after resetting deps. If it is, then something is probably wrong with the automated release process.
```
gh pr checkout 7923 --force
```
```
npm run resetdeps
```
```
node scripts/git-dirty.js
```
[ ] 2. Check CI status
```
gh pr checks --watch
```
[ ] 3. Publish the CLI and workspaces

Warning: This will publish all updated workspaces to latest, prerelease or backport depending on their version, and will publish the CLI with the dist-tag set to next-10.

Note: The --test argument can optionally be omitted to run the publish process without running any tests locally.
```
node scripts/publish.js --test
```

[ ] 4. Optionally install and test npm@10.9.1 locally

npm i -g npm@10.9.1

npm --version
npm whoami
npm help install
# etc

[ ] 5. Set latest dist-tag to newly published version

Warning: NOT FOR PRERELEASE: Do not run this step for prereleases or if 10 is not being set to latest.
```
node . dist-tag add npm@10.9.1 latest
```

[ ] 6. Trigger docs.npmjs.com update

gh workflow run update-cli.yml --repo npm/documentation

[ ] 7. Approve and Merge release PR

gh pr review --approve
```sh

```sh
gh pr merge --rebase

git checkout release/v10

git fetch

git reset --hard origin/release/v10

node . run resetdeps

[ ] 8. Wait For Release Tags

Warning: The remaining steps all require the GitHub tags and releases to be created first. These are done once this PR has been labelled with autorelease: tagged.

Release Please will run on the just merged release commit and create GitHub releases and tags for each package. The release bot will will comment on this PR when the releases and tags are created.

Note: The release workflow also includes the Node integration tests which do not need to finish before continuing.

You can watch the release workflow in your terminal with the following command:
```
gh run watch `gh run list -R npm/cli -w release -b release/v10 -L 1 --json databaseId -q ".[0].databaseId"`
```
[ ] 9. Mark GitHub Release as latest

Warning: You must wait for CI to create the release tags before running this step. These are done once this PR has been labelled with autorelease: tagged.

Release Please will make GitHub Releases for the CLI and all workspaces, but GitHub has UI affordances for which release should appear as the "latest", which should always be the CLI. To mark the CLI release as latest run this command:
```
gh release -R npm/cli edit v10.9.1 --latest
```
[ ] 10. Open nodejs/node PR to update npm to latest

Warning: You must wait for CI to create the release tags before running this step. These are done once this PR has been labelled with autorelease: tagged.

Trigger the Create Node PR action. This will open a PR on nodejs/node to the main branch.

Note: The resulting PR may need to be labelled if it is not intended to land on old Node versions.

First, sync our fork of node with the upstream source:
```
gh repo sync npm/node --source nodejs/node --force
```
Then, if we are opening a PR against the latest version of node:
```
gh workflow run create-node-pr.yml -f spec=next-10
```
If the PR should be opened on a different branch (such as when doing backports) then run it with -f branch=<BRANCH_NAME>. There is also a shortcut to target a specific Node version by specifying a major version number with -f branch=18 (or similar).

For example, this will create a PR on nodejs/node to the v16.x-staging branch:
```
gh workflow run create-node-pr.yml -f spec=next-10 -f branch=16
```
[ ] 11. Label and fast-track nodejs/node PR

Note: This requires being a nodejs collaborator. This could be you!
- Thumbs-up reaction on the Fast-track comment
- Add an LGTM / Approval
- Add request-ci label to get it running CI
- Add commit-queue label once everything is green