1 | ## v6.10.3 (2019-08-06):
|
2 |
|
3 | ### BUGFIXES
|
4 |
|
5 | * [`27cccfbda`](https://github.com/npm/cli/commit/27cccfbdac8526cc807b07f416355949b1372a9b)
|
6 | [#223](https://github.com/npm/cli/pull/223) vulns → vulnerabilities in
|
7 | npm audit output ([@sapegin](https://github.com/sapegin))
|
8 | * [`d5e865eb7`](https://github.com/npm/cli/commit/d5e865eb79329665a927cc2767b4395c03045dbb)
|
9 | [#222](https://github.com/npm/cli/pull/222)
|
10 | [#226](https://github.com/npm/cli/pull/226) install, doctor: don't crash
|
11 | if registry unset ([@dmitrydvorkin](https://github.com/dmitrydvorkin),
|
12 | [@isaacs](https://github.com/isaacs))
|
13 | * [`5b3890226`](https://github.com/npm/cli/commit/5b389022652abeb0e1c278a152550eb95bc6c452)
|
14 | [#227](https://github.com/npm/cli/pull/227)
|
15 | [npm.community#9167](https://npm.community/t/npm-err-cb-never-called-permission-denied/9167/5)
|
16 | Handle unhandledRejections, tell user what to do when encountering an
|
17 | `EACCES` error in the cache. ([@isaacs](https://github.com/isaacs))
|
18 |
|
19 | ### DEPENDENCIES
|
20 |
|
21 | * [`77516df6e`](https://github.com/npm/cli/commit/77516df6eac94a6d7acb5e9ca06feaa0868d779b)
|
22 | `licensee@7.0.3` ([@isaacs](https://github.com/isaacs))
|
23 | * [`ceb993590`](https://github.com/npm/cli/commit/ceb993590e4e376a9a78264ce7bb4327fbbb37fe)
|
24 | `query-string@6.8.2` ([@isaacs](https://github.com/isaacs))
|
25 | * [`4050b9189`](https://github.com/npm/cli/commit/4050b91898c60e9b22998cf82b70b9b822de592a)
|
26 | `hosted-git-info@2.8.2`
|
27 | * [#46](https://github.com/npm/hosted-git-info/issues/46)
|
28 | [#43](https://github.com/npm/hosted-git-info/issues/43)
|
29 | [#47](https://github.com/npm/hosted-git-info/pull/47)
|
30 | [#44](https://github.com/npm/hosted-git-info/pull/44) Add support for
|
31 | GitLab subgroups ([@mterrel](https://github.com/mterrel),
|
32 | [@isaacs](https://github.com/isaacs),
|
33 | [@ybiquitous](https://github.com/ybiquitous))
|
34 | * [`3b1d629`](https://github.com/npm/hosted-git-info/commit/3b1d629)
|
35 | [#48](https://github.com/npm/hosted-git-info/issues/48) fix http
|
36 | protocol using sshurl by default
|
37 | ([@fengmk2](https://github.com/fengmk2))
|
38 | * [`5d4a8d7`](https://github.com/npm/hosted-git-info/commit/5d4a8d7)
|
39 | ignore noCommittish on tarball url generation
|
40 | ([@isaacs](https://github.com/isaacs))
|
41 | * [`1692435`](https://github.com/npm/hosted-git-info/commit/1692435)
|
42 | use gist tarball url that works for anonymous gists
|
43 | ([@isaacs](https://github.com/isaacs))
|
44 | * [`d5cf830`](https://github.com/npm/hosted-git-info/commit/d5cf8309be7af884032616c63ea302ce49dd321c)
|
45 | Do not allow invalid gist urls ([@isaacs](https://github.com/isaacs))
|
46 | * [`e518222`](https://github.com/npm/hosted-git-info/commit/e5182224351183ce619dd5ef00019ae700ed37b7)
|
47 | Use LRU cache to prevent unbounded memory consumption
|
48 | ([@iarna](https://github.com/iarna))
|
49 |
|
50 | ## v6.10.2 (2019-07-23):
|
51 |
|
52 | tl;dr - Fixes several issues with the cache when npm is run as `sudo` on
|
53 | Unix systems.
|
54 |
|
55 | ### TESTING
|
56 |
|
57 | * [`2a78b96f8`](https://github.com/npm/cli/commit/2a78b96f830bbd834720ccc9eacccc54915ae6f7)
|
58 | check test cache for root-owned files
|
59 | ([@isaacs](https://github.com/isaacs))
|
60 | * [`108646ebc`](https://github.com/npm/cli/commit/108646ebc12f3eeebaa0a45884c45991a45e57e4)
|
61 | run sudo tests on Travis-CI ([@isaacs](https://github.com/isaacs))
|
62 | * [`cf984e946`](https://github.com/npm/cli/commit/cf984e946f453cbea2fcc7a59608de3f24ab74c3)
|
63 | set --no-esm tap flag ([@isaacs](https://github.com/isaacs))
|
64 | * [`8e0a3100d`](https://github.com/npm/cli/commit/8e0a3100dffb3965bb3dc4240e82980dfadf2f3c)
|
65 | add script to run tests and leave fixtures for inspection and debugging
|
66 | ([@isaacs](https://github.com/isaacs))
|
67 |
|
68 | ### BUGFIXES
|
69 |
|
70 | * [`25f4f73f6`](https://github.com/npm/cli/commit/25f4f73f6dc9744757787c82351120cd1baee5f8)
|
71 | add a util for writing arbitrary files to cache This prevents metrics
|
72 | timing and debug logs from becoming root-owned.
|
73 | ([@isaacs](https://github.com/isaacs))
|
74 | * [`2c61ce65d`](https://github.com/npm/cli/commit/2c61ce65d6b67100fdf3fcb9729055b669cb1a1d)
|
75 | infer cache owner from parent dir in `correct-mkdir` util
|
76 | ([@isaacs](https://github.com/isaacs))
|
77 | * [`235e5d6df`](https://github.com/npm/cli/commit/235e5d6df6f427585ec58425f1f3339d08f39d8a)
|
78 | ensure correct owner on cached all-packages metadata
|
79 | ([@isaacs](https://github.com/isaacs))
|
80 | * [`e2d377bb6`](https://github.com/npm/cli/commit/e2d377bb6419d8a3c1d80a73dba46062b4dad336)
|
81 | [npm.community#8540](https://npm.community/t/npm-audit-fails-with-child-requires-fails-because-requires-must-be-an-object/8540)
|
82 | audit: report server error on failure
|
83 | ([@isaacs](https://github.com/isaacs))
|
84 | * [`52576a39e`](https://github.com/npm/cli/commit/52576a39ed75d94c46bb2c482fd38d2c6ea61c56)
|
85 | [#216](https://github.com/npm/cli/pull/216)
|
86 | [npm.community#5385](https://npm.community/t/6-8-0-npm-ci-fails-with-local-dependency/5385)
|
87 | [npm.community#6076](https://npm.community/t/npm-ci-fail-to-local-packages/6076)
|
88 | Fix `npm ci` with `file:` dependencies. Partially reverts
|
89 | [#40](https://github.com/npm/cli/pull/40)/[#86](https://github.com/npm/cli/pull/86),
|
90 | recording dependencies of linked deps in order for `npm ci` to work.
|
91 | ([@jfirebaugh](https://github.com/jfirebaugh))
|
92 |
|
93 | ### DEPENDENCIES
|
94 |
|
95 | * [`0fefdee13`](https://github.com/npm/cli/commit/0fefdee130fd7d0dbb240fb9ecb50a793fbf3d29)
|
96 | `cacache@12.0.2` ([@isaacs](https://github.com/isaacs))
|
97 | * infer uid/gid instead of accepting as options, preventing the
|
98 | overwhelming majority of cases where root-owned files end up in the
|
99 | cache folder.
|
100 | ([ac84d14](https://github.com/npm/cacache/commit/ac84d14))
|
101 | ([@isaacs](https://github.com/isaacs))
|
102 | ([#1](https://github.com/npm/cacache/pull/1))
|
103 | * **i18n:** add another error message
|
104 | ([676cb32](https://github.com/npm/cacache/commit/676cb32))
|
105 | ([@zkat](https://github.com/zkat))
|
106 | * [`e1d87a392`](https://github.com/npm/cli/commit/e1d87a392371a070b0788ab7bfc62be18b21e9ad)
|
107 | `pacote@9.5.4` ([@isaacs](https://github.com/isaacs))
|
108 | * git: ensure stream failures are reported
|
109 | ([7f07b5d](https://github.com/npm/pacote/commit/7f07b5d))
|
110 | [#1](https://github.com/npm/pacote/issues/1)
|
111 | ([@lddubeau](https://github.com/lddubeau))
|
112 | * [`3f035bf09`](https://github.com/npm/cli/commit/3f035bf098e2feea76574cec18b04812659aa16d)
|
113 | `infer-owner@1.0.4` ([@isaacs](https://github.com/isaacs))
|
114 | * [`ba3283112`](https://github.com/npm/cli/commit/ba32831126591d2f6f48e31a4a2329b533b1ff19)
|
115 | `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs))
|
116 | * [`ee90c334d`](https://github.com/npm/cli/commit/ee90c334d271383d0325af42f20f80f34cb61f07)
|
117 | `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs))
|
118 | * [`1e480c384`](https://github.com/npm/cli/commit/1e480c38416982ae28b5cdd48c698ca59d3c0395)
|
119 | `libnpmaccess@3.0.2` ([@isaacs](https://github.com/isaacs))
|
120 | * [`7662ee850`](https://github.com/npm/cli/commit/7662ee850220c71ecaec639adbc7715286f0d28b)
|
121 | `libnpmhook@5.0.3` ([@isaacs](https://github.com/isaacs))
|
122 | * [`1357fadc6`](https://github.com/npm/cli/commit/1357fadc613d0bfeb40f9a8f3ecace2face2fe2c)
|
123 | `libnpmorg@1.0.1` ([@isaacs](https://github.com/isaacs))
|
124 | * [`a621b5cb6`](https://github.com/npm/cli/commit/a621b5cb6c881f95a11af86a8051754a67ae017c)
|
125 | `libnpmsearch@2.0.2` ([@isaacs](https://github.com/isaacs))
|
126 | * [`560cd31dd`](https://github.com/npm/cli/commit/560cd31dd51b6aa2e396ccdd7289fab0a50b5608)
|
127 | `libnpmteam@1.0.2` ([@isaacs](https://github.com/isaacs))
|
128 | * [`de7ae0867`](https://github.com/npm/cli/commit/de7ae0867d4c0180edc283457ce0b4e8e5eee554)
|
129 | `npm-profile@4.0.2` ([@isaacs](https://github.com/isaacs))
|
130 | * [`e95da463c`](https://github.com/npm/cli/commit/e95da463cb7a325457ef411a569d7ef4bf76901d)
|
131 | `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs))
|
132 | * [`554b641d4`](https://github.com/npm/cli/commit/554b641d49d135ae8d137e83aa288897c32dacc6)
|
133 | `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs))
|
134 | * [`06772f34a`](https://github.com/npm/cli/commit/06772f34ab851440dcd78574736936c674a84aed)
|
135 | `node-gyp@5.0.3` ([@isaacs](https://github.com/isaacs))
|
136 | * [`85358db80`](https://github.com/npm/cli/commit/85358db80d6ccb5f7bc9a0b4d558ac6dd2468394)
|
137 | `npm-lifecycle@3.1.2` ([@isaacs](https://github.com/isaacs))
|
138 | * [`051cf20`](https://github.com/npm/npm-lifecycle/commit/051cf20072a01839c17920d2e841756251c4f924)
|
139 | [#26](https://github.com/npm/npm-lifecycle/pull/26) fix switches for
|
140 | alternative shells on Windows
|
141 | ([@gucong3000](https://github.com/gucong3000))
|
142 | * [`3aaf954`](https://github.com/npm/npm-lifecycle/commit/3aaf95435965e8f7acfd955582cf85237afd2c9b)
|
143 | [#25](https://github.com/npm/npm-lifecycle/pull/25) set only one PATH
|
144 | env variable for child process on Windows
|
145 | ([@zkochan](https://github.com/zkochan))
|
146 | * [`ea18ed2`](https://github.com/npm/npm-lifecycle/commit/ea18ed2b754ca7f11998cad70d88e9004c5bef4a)
|
147 | [#36](https://github.com/npm/npm-lifecycle/pull/36)
|
148 | [#11](https://github.com/npm/npm-lifecycle/issue/11)
|
149 | [#18](https://github.com/npm/npm-lifecycle/issue/18) remove
|
150 | procInterrupt listener on SIGINT in procError
|
151 | ([@mattshin](https://github.com/mattshin))
|
152 | * [`5523951`](https://github.com/npm/npm-lifecycle/commit/55239519c57b82521605622e6c71640a31ed4586)
|
153 | [#29](https://github.com/npm/npm-lifecycle/issue/29)
|
154 | [#30](https://github.com/npm/npm-lifecycle/pull/30) Use platform
|
155 | specific path casing if present
|
156 | ([@mattezell](https://github.com/mattezell))
|
157 |
|
158 | ## v6.10.1 (2019-07-11):
|
159 |
|
160 | ### BUGFIXES
|
161 |
|
162 | * [`3cbd57712`](https://github.com/npm/cli/commit/3cbd577120a9da6e51bb8b13534d1bf71ea5712c)
|
163 | fix(git): strip GIT environs when running git
|
164 | ([@isaacs](https://github.com/isaacs))
|
165 | * [`a81a8c4c4`](https://github.com/npm/cli/commit/a81a8c4c466f510215a51cef1bb08544d11844fe)
|
166 | [#206](https://github.com/npm/cli/pull/206) improve isOnly(Dev,Optional)
|
167 | ([@larsgw](https://github.com/larsgw))
|
168 | * [`172f9aca6`](https://github.com/npm/cli/commit/172f9aca67a66ee303c17f90a994cd52fc66552a)
|
169 | [#179](https://github.com/npm/cli/pull/179) fix-xmas-underline
|
170 | ([@raywu0123](https://github.com/raywu0123))
|
171 | * [`f52673fc7`](https://github.com/npm/cli/commit/f52673fc7284e58af8c04533e82b76bf7add72cf)
|
172 | [#212](https://github.com/npm/cli/pull/212) build: use `/usr/bin/env` to
|
173 | load bash ([@rsmarples](https://github.com/rsmarples))
|
174 |
|
175 | ### DEPENDENCIES
|
176 |
|
177 | * [`ef4445ad3`](https://github.com/npm/cli/commit/ef4445ad34a53b5639499c8e3c9752f62ee6f37c)
|
178 | [#208](https://github.com/npm/cli/pull/208) `node-gyp@5.0.2`
|
179 | ([@irega](https://github.com/irega))
|
180 | * [`c0d611356`](https://github.com/npm/cli/commit/c0d611356f7b23077e97574b01c8886e544db425)
|
181 | `npm-lifecycle@3.0.0` ([@isaacs](https://github.com/isaacs))
|
182 | * [`7716ba972`](https://github.com/npm/cli/commit/7716ba9720270d5b780755a5bb1ce79702067f1f)
|
183 | `libcipm@4.0.0` ([@isaacs](https://github.com/isaacs))
|
184 | * [`42d22e837`](https://github.com/npm/cli/commit/42d22e8374c7d303d94e405d7385d94dd2558814)
|
185 | `libnpm@3.0.0` ([@isaacs](https://github.com/isaacs))
|
186 | * [`a2ea7f9ff`](https://github.com/npm/cli/commit/a2ea7f9ff64ae743d05fdbf7d46fb9afafa8aa6f)
|
187 | `semver@5.7.0` ([@isaacs](https://github.com/isaacs))
|
188 | * [`429226a5e`](https://github.com/npm/cli/commit/429226a5e992cd907d4f19bd738037007cf78c1f)
|
189 | `lru-cache@5.1.1` ([@isaacs](https://github.com/isaacs))
|
190 | * [`175670ea6`](https://github.com/npm/cli/commit/175670ea65cca03f8b2e957df3dd4b8b0efd0e1f)
|
191 | `npm-registry-fetch@3.9.1`: ([@isaacs](https://github.com/isaacs))
|
192 | * [`0d0517f7f`](https://github.com/npm/cli/commit/0d0517f7f8c902b5064ac18fb4015b31750ad2b2)
|
193 | `call-limit@1.1.1` ([@isaacs](https://github.com/isaacs))
|
194 | * [`741400429`](https://github.com/npm/cli/commit/74140042917ea241062a812ceb65c5423c2bafa9)
|
195 | `glob@7.1.4` ([@isaacs](https://github.com/isaacs))
|
196 | * [`bddd60e30`](https://github.com/npm/cli/commit/bddd60e302283a4a70d35f8f742e42bd13f4dabf)
|
197 | `inherits@2.0.4` ([@isaacs](https://github.com/isaacs))
|
198 | * [`4acf03fd1`](https://github.com/npm/cli/commit/4acf03fd140ed3ddb2dcf3fdc9756bc3f5a8bcbb)
|
199 | `libnpmsearch@2.0.1` ([@isaacs](https://github.com/isaacs))
|
200 | * [`c2bd17291`](https://github.com/npm/cli/commit/c2bd17291a86bea7ced2fbd07d66d013bd7a7560)
|
201 | `marked@0.6.3` ([@isaacs](https://github.com/isaacs))
|
202 | * [`7f0221bb1`](https://github.com/npm/cli/commit/7f0221bb1bb41ffc933c785940e227feae38c80c)
|
203 | `marked-man@0.6.0` ([@isaacs](https://github.com/isaacs))
|
204 | * [`f458fe7dd`](https://github.com/npm/cli/commit/f458fe7dd3bebddf603aaae183a424ea8aaa018f)
|
205 | `npm-lifecycle@2.1.1` ([@isaacs](https://github.com/isaacs))
|
206 | * [`009752978`](https://github.com/npm/cli/commit/0097529780269c28444f1efa0d7c131d47a933eb)
|
207 | `node-gyp@4.0.0` ([@isaacs](https://github.com/isaacs))
|
208 | * [`0fa2bb438`](https://github.com/npm/cli/commit/0fa2bb4386379d6e9d8c95db08662ec0529964f9)
|
209 | `query-string@6.8.1` ([@isaacs](https://github.com/isaacs))
|
210 | * [`b86450929`](https://github.com/npm/cli/commit/b86450929796950a1fe4b1f9b02b1634c812f3bb)
|
211 | `tar-stream@2.1.0` ([@isaacs](https://github.com/isaacs))
|
212 | * [`25db00fe9`](https://github.com/npm/cli/commit/25db00fe953453198adb9e1bd71d1bc2a9f04aaa)
|
213 | `worker-farm@1.7.0` ([@isaacs](https://github.com/isaacs))
|
214 | * [`8dfbe8610`](https://github.com/npm/cli/commit/8dfbe861085dfa8fa56bb504b4a00fba04c34f9d)
|
215 | `readable-stream@3.4.0` ([@isaacs](https://github.com/isaacs))
|
216 | * [`f6164d5dd`](https://github.com/npm/cli/commit/f6164d5ddd072eabdf2237f1694a31efd746eb1d)
|
217 | [isaacs/chownr#21](https://github.com/isaacs/chownr/pull/21)
|
218 | [isaacs/chownr#20](https://github.com/isaacs/chownr/issues/20)
|
219 | [npm.community#7901](https://npm.community/t/7901/)
|
220 | [npm.community#8203](https://npm.community/t/8203) `chownr@1.1.2` This
|
221 | fixes an EISDIR error from cacache on Darwin in Node versions prior to
|
222 | 10.6. ([@isaacs](https://github.com/isaacs))
|
223 |
|
224 | ## v6.10.0 (2019-07-03):
|
225 |
|
226 | ### FEATURES
|
227 |
|
228 | * [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35)
|
229 | [#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for
|
230 | outdated --json ([@sreeramjayan](https://github.com/sreeramjayan))
|
231 | * [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc)
|
232 | [#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space
|
233 | after hyphen ([@ffflorian](https://github.com/ffflorian))
|
234 | * [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c)
|
235 | [#202](https://github.com/npm/cli/pull/202) enable production flag for
|
236 | npm audit ([@CalebCourier](https://github.com/CalebCourier))
|
237 | * [`d192904d0`](https://github.com/npm/cli/commit/d192904d0)
|
238 | [#178](https://github.com/npm/cli/pull/178) fix: Return a value for
|
239 | `view` when in silent mode
|
240 | ([@stayradiated](https://github.com/stayradiated))
|
241 | * [`39d473adf`](https://github.com/npm/cli/commit/39d473adf)
|
242 | [#185](https://github.com/npm/cli/pull/185) Allow git to follow global
|
243 | tagsign config ([@junderw](https://github.com/junderw))
|
244 |
|
245 | ### BUGFIXES
|
246 |
|
247 | * [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b)
|
248 | [#201](https://github.com/npm/cli/pull/163)
|
249 | [npm/npm#17858](https://github.com/npm/npm/issues/17858)
|
250 | [npm/npm#18042](https://github.com/npm/npm/issues/18042)
|
251 | [npm.community#644](https://npm.community/t/644) do not crash when
|
252 | removing nameless packages
|
253 | ([@SteveVanOpstal](https://github.com/SteveVanOpstal) and
|
254 | [@isaacs](https://github.com/isaacs))
|
255 | * [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111)
|
256 | [#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as
|
257 | `node.exe`) in npm's local dir on Windows
|
258 | ([@rgoulais](https://github.com/rgoulais))
|
259 | * [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789)
|
260 | [#180](https://github.com/npm/cli/pull/180)
|
261 | [npm.community#6187](https://npm.community/t/6187) Fix handling of
|
262 | `remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw))
|
263 |
|
264 | ### TESTING
|
265 |
|
266 | * [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update
|
267 | to include new v12 LTS ([@isaacs](https://github.com/isaacs))
|
268 | * [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky
|
269 | debug-logs test ([@isaacs](https://github.com/isaacs))
|
270 | * [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out
|
271 | waiting for gpg user input ([@isaacs](https://github.com/isaacs))
|
272 | * [`d2d301704`](https://github.com/npm/cli/commit/d2d301704)
|
273 | [#195](https://github.com/npm/cli/pull/195) Add the arm64 check for
|
274 | legacy-platform-all.js test case.
|
275 | ([@ossdev07](https://github.com/ossdev07))
|
276 | * [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests
|
277 | ([@isaacs](https://github.com/isaacs))
|
278 |
|
279 | ### DOCUMENTATION
|
280 |
|
281 | * [`f5857e263`](https://github.com/npm/cli/commit/f5857e263)
|
282 | [#192](https://github.com/npm/cli/pull/192) Clarify usage of
|
283 | bundledDependencies
|
284 | ([@john-osullivan](https://github.com/john-osullivan))
|
285 | * [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66)
|
286 | [#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param
|
287 | ([@ngraef](https://github.com/ngraef))
|
288 |
|
289 | ### DEPENDENCIES
|
290 |
|
291 | * [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320)
|
292 | graceful-fs@4.2.0 ([@isaacs](https://github.com/isaacs))
|
293 | * [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09)
|
294 | read-package-tree@5.3.1 ([@isaacs](https://github.com/isaacs))
|
295 | * [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536)
|
296 | Use custom caching `realpath` implementation, dramatically reducing
|
297 | `lstat` calls when reading the package tree
|
298 | ([@isaacs](https://github.com/isaacs))
|
299 | * [`39538b460`](https://github.com/npm/cli/commit/39538b460)
|
300 | write-file-atomic@2.4.3 ([@isaacs](https://github.com/isaacs))
|
301 | * [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552)
|
302 | [#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors
|
303 | raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage))
|
304 | * [`042193069`](https://github.com/npm/cli/commit/042193069) pacote@9.5.1
|
305 | ([@isaacs](https://github.com/isaacs))
|
306 | * [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051)
|
307 | [#172](https://github.com/zkat/pacote/pull/172) limit git retry
|
308 | times, avoid unlimited retries ([小秦](https://github.com/xqin))
|
309 | * [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c)
|
310 | [#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix
|
311 | "TypeError: err.code.match is not a function" error
|
312 | ([@jviotti](https://github.com/jviotti))
|
313 | * [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) cacache@11.3.3
|
314 | ([@isaacs](https://github.com/isaacs))
|
315 | * [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5)
|
316 | [#146](https://github.com/zkat/cacache/pull/146)
|
317 | [npm.community#2395](https://npm.community/t/2395) fix(config): Add
|
318 | ssri config 'error' option ([@larsgw](https://github.com/larsgw))
|
319 | * [`5156561`](https://github.com/npm/cacache/commit/5156561)
|
320 | fix(write): avoid a `cb never called` situation
|
321 | ([@zkat](https://github.com/zkat))
|
322 | * [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0)
|
323 | [#166](https://github.com/zkat/cacache/pull/166)
|
324 | [#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for
|
325 | `path` property in get.info
|
326 | ([@hdgarrood](https://github.com/hdgarrood))
|
327 | * [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) bluebird@3.5.5
|
328 | ([@isaacs](https://github.com/isaacs))
|
329 | * [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) tar@4.4.10
|
330 | ([@isaacs](https://github.com/isaacs))
|
331 | * [`c80341a`](https://github.com/npm/node-tar/commit/c80341a)
|
332 | [#215](https://github.com/npm/node-tar/pull/215) Fix
|
333 | encoding/decoding of base-256 numbers
|
334 | ([@justfalter](https://github.com/justfalter))
|
335 | * [`77522f0`](https://github.com/npm/node-tar/commit/77522f0)
|
336 | [#204](https://github.com/npm/node-tar/issues/204)
|
337 | [#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead
|
338 | of `lstat` when checking CWD ([@stkb](https://github.com/stkb))
|
339 | * [`ec6236210`](https://github.com/npm/cli/commit/ec6236210)
|
340 | npm-packlist@1.4.4 ([@isaacs](https://github.com/isaacs))
|
341 | * [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e)
|
342 | [#30](https://github.com/npm/npm-packlist/issues/30) Sort package
|
343 | tarball entries by file type for compression benefits
|
344 | ([@isaacs](https://github.com/isaacs))
|
345 | * [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045)
|
346 | Ignore `.DS_Store` files as well as folders
|
347 | ([@isaacs](https://github.com/isaacs))
|
348 | * [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never
|
349 | include .git folders in package root. (Note: this prevents the issue
|
350 | that broke the v6.9.1 release.)
|
351 | ([@isaacs](https://github.com/isaacs))
|
352 | * [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream
|
353 | in node-gyp ([@isaacs](https://github.com/isaacs))
|
354 | * Addresses [security advisory
|
355 | #886](https://www.npmjs.com/advisories/886)
|
356 | * [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee)
|
357 | [#183](https://github.com/npm/cli/pull/183) licensee@7.0.2
|
358 | ([@kemitchell](https://github.com/kemitchell))
|
359 | * [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0)
|
360 | readable-stream@3.3.0 ([@isaacs](https://github.com/isaacs))
|
361 | * [`f5e884909`](https://github.com/npm/cli/commit/f5e884909)
|
362 | npm-registry-mock@1.2.1 ([@isaacs](https://github.com/isaacs))
|
363 | * [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35)
|
364 | npm-registry-couchapp@2.7.2 ([@isaacs](https://github.com/isaacs))
|
365 |
|
366 | ## v6.9.2 (2019-06-27):
|
367 |
|
368 | This release is identical to v6.9.1, but we had to publish a new version
|
369 | due to [a .git directory in the release](https://npm.community/t/8454).
|
370 |
|
371 | ## v6.9.1 (2019-06-26):
|
372 |
|
373 | ### BUGFIXES
|
374 |
|
375 | * [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611)
|
376 | [#165](https://github.com/npm/cli/pull/165)
|
377 | Update `knownBroken` version.
|
378 | ([@ljharb](https://github.com/ljharb))
|
379 | * [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1)
|
380 | [npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929)
|
381 | Fix `outdated` rendering for global dependencies.
|
382 | ([@zkat](https://github.com/zkat))
|
383 | * [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc)
|
384 | [npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259)
|
385 | Fix OTP for token create and remove.
|
386 | ([@zkat](https://github.com/zkat))
|
387 |
|
388 | ### DEPENDENCIES
|
389 |
|
390 | * [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc)
|
391 | `sha@3.0.0`
|
392 | ([@aeschright](https://github.com/aeschright))
|
393 | * [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5)
|
394 | `query-string@6.4.0`
|
395 | ([@aeschright](https://github.com/aeschright))
|
396 | * [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64)
|
397 | `readable-stream@3.2.0`
|
398 | ([@aeschright](https://github.com/aeschright))
|
399 | * [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e)
|
400 | `tacks@1.3.0`
|
401 | ([@aeschright](https://github.com/aeschright))
|
402 | * [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8)
|
403 | `tap@12.6.0`
|
404 | ([@aeschright](https://github.com/aeschright))
|
405 | * [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3)
|
406 | `tar-stream@2.0.1`
|
407 | ([@aeschright](https://github.com/aeschright))
|
408 |
|
409 | ## v6.9.0 (2019-02-20):
|
410 |
|
411 | ### FEATURES
|
412 |
|
413 | * [`2ba3a0f67`](https://github.com/npm/cli/commit/2ba3a0f6721f6d5a16775aebce6012965634fc7c)
|
414 | [#90](https://github.com/npm/cli/pull/90)
|
415 | Time traveling installs using the `--before` flag.
|
416 | ([@zkat](https://github.com/zkat))
|
417 | * [`b7b54f2d1`](https://github.com/npm/cli/commit/b7b54f2d18e2d8d65ec67c850b21ae9f01c60e7e)
|
418 | [#3](https://github.com/npm/cli/pull/3)
|
419 | Add support for package aliases. This allows packages to be installed under a
|
420 | different directory than the package name listed in `package.json`, and adds a
|
421 | new dependency type to allow this to be done for registry dependencies.
|
422 | ([@zkat](https://github.com/zkat))
|
423 | * [`684bccf06`](https://github.com/npm/cli/commit/684bccf061dfc97bb759121bc0ad635e01c65868)
|
424 | [#146](https://github.com/npm/cli/pull/146)
|
425 | Always save `package-lock.json` when using `--package-lock-only`.
|
426 | ([@aeschright](https://github.com/aeschright))
|
427 | * [`b8b8afd40`](https://github.com/npm/cli/commit/b8b8afd4048b4ba1181e00ba2ac49ced43936ce0)
|
428 | [#139](https://github.com/npm/cli/pull/139)
|
429 | Make empty-string run-scripts run successfully as a no-op.
|
430 | ([@vlasy](https://github.com/vlasy))
|
431 | * [`8047b19b1`](https://github.com/npm/cli/commit/8047b19b1b994fd4b4e7b5c91d7cc4e0384bd5e4)
|
432 | [npm.community#3784](https://npm.community/t/3784)
|
433 | Match git semver ranges when flattening the tree.
|
434 | ([@larsgw](https://github.com/larsgw))
|
435 | * [`e135c2bb3`](https://github.com/npm/cli/commit/e135c2bb360dcf00ecee34a95985afec21ba3655)
|
436 | [npm.community#1725](https://npm.community/t/1725?u=larsgw)
|
437 | Re-enable updating local packages.
|
438 | ([@larsgw](https://github.com/larsgw))
|
439 |
|
440 | ### BUGFIXES
|
441 |
|
442 | * [`cf09fbaed`](https://github.com/npm/cli/commit/cf09fbaed489d908e9b551382cc5f61bdabe99a9)
|
443 | [#153](https://github.com/npm/cli/pull/153)
|
444 | Set modified to undefined in `npm view` when `time` is not available. This
|
445 | fixes a bug where `npm view` would crash on certain third-party registries.
|
446 | ([@simonua](https://github.com/simonua))
|
447 | * [`774fc26ee`](https://github.com/npm/cli/commit/774fc26eeb01345c11bd8c97e2c4f328d419d9b5)
|
448 | [#154](https://github.com/npm/cli/pull/154)
|
449 | Print out tar version in `install.sh` only when the flag is supported not all
|
450 | the tar implementations support --version flag. This allows the install script
|
451 | to work in OpenBSD, for example.
|
452 | ([@agudulin](https://github.com/agudulin))
|
453 | * [`863baff11`](https://github.com/npm/cli/commit/863baff11d8c870f1a0d9619bb5133c67d71e407)
|
454 | [#158](https://github.com/npm/cli/pull/158)
|
455 | Fix typo in error message for `npm stars`.
|
456 | ([@phihag](https://github.com/phihag))
|
457 | * [`a805a95ad`](https://github.com/npm/cli/commit/a805a95ad8832ef5008671f4bd4c11b83e32e0f2)
|
458 | [npm.community#4227](https://npm.community/t/4227)
|
459 | Strip version info from pkg on E404. This improves the error messaging format.
|
460 | ([@larsgw](https://github.com/larsgw))
|
461 |
|
462 | ### DOCS
|
463 |
|
464 | * [`5d7633833`](https://github.com/npm/cli/commit/5d76338338621fd0b3d4f7914a51726d27569ee1)
|
465 | [#160](https://github.com/npm/cli/pull/160)
|
466 | Add `npm add` as alias to npm install in docs.
|
467 | ([@ahasall](https://github.com/ahasall))
|
468 | * [`489c2211c`](https://github.com/npm/cli/commit/489c2211c96a01d65df50fd57346c785bcc3efe6)
|
469 | [#162](https://github.com/npm/cli/pull/162)
|
470 | Fix link to RFC #10 in the changelog.
|
471 | ([@mansona](https://github.com/mansona))
|
472 | * [`433020ead`](https://github.com/npm/cli/commit/433020ead5251b562bc3b0f5f55341a5b8cc9023)
|
473 | [#135](https://github.com/npm/cli/pull/135)
|
474 | Describe exit codes in npm-audit docs.
|
475 | ([@emilis-tm](https://github.com/emilis-tm))
|
476 |
|
477 | ### DEPENDENCIES
|
478 |
|
479 | * [`ee6b6746b`](https://github.com/npm/cli/commit/ee6b6746b04f145dfe489af2d26667ac32ba0cef)
|
480 | [zkat/make-fetch-happen#29](https://github.com/zkat/make-fetch-happen/issues/29)
|
481 | `agent-base@4.2.1`
|
482 | ([@TooTallNate](https://github.com/TooTallNate))
|
483 | * [`2ce23baf5`](https://github.com/npm/cli/commit/2ce23baf53b1ce7d11b8efb80c598ddaf9cef9e7)
|
484 | `lock-verify@2.1.0`:
|
485 | Adds support for package aliases
|
486 | ([@zkat](https://github.com/zkat))
|
487 | * [`baaedbc6e`](https://github.com/npm/cli/commit/baaedbc6e2fc370d73b35e7721794719115507cc)
|
488 | `pacote@9.5.0`:
|
489 | Adds opts.before support
|
490 | ([@zkat](https://github.com/zkat))
|
491 | * [`57e771a03`](https://github.com/npm/cli/commit/57e771a032165d1e31e71d0ff7530442139c21a6)
|
492 | [#164](https://github.com/npm/cli/pull/164)
|
493 | `licensee@6.1.0`
|
494 | ([@kemitchell](https://github.com/kemitchell))
|
495 | * [`2b78288d4`](https://github.com/npm/cli/commit/2b78288d4accd10c1b7cc6c36bc28045f5634d91)
|
496 | add core to default inclusion tests in pack
|
497 | ([@Kat Marchán](https://github.com/Kat Marchán))
|
498 | * [`9b8b6513f`](https://github.com/npm/cli/commit/9b8b6513fbce92764b32a067322984985ff683fe)
|
499 | [npm.community#5382](https://npm.community/t/npm-pack-leaving-out-files-6-8-0-only/5382)
|
500 | `npm-packlist@1.4.1`: Fixes bug where `core/` directories were being suddenly excluded.
|
501 | ([@zkat](https://github.com/zkat))
|
502 |
|
503 | ## v6.8.0 (2019-02-07):
|
504 |
|
505 | This release includes an implementation of [RFC #10](https://github.com/npm/rfcs/blob/latest/implemented/0010-monorepo-subdirectory-declaration.md), documenting an optional field that can be used to specify
|
506 | the directory path for a package within a monorepo.
|
507 |
|
508 | ### NEW FEATURES
|
509 |
|
510 | * [`3663cdef2`](https://github.com/npm/cli/commit/3663cdef205fa9ba2c2830e5ef7ceeb31c30298c)
|
511 | [#140](https://github.com/npm/cli/pull/140)
|
512 | Update package.json docs to include repository.directory details.
|
513 | ([@greysteil](https://github.com/greysteil))
|
514 |
|
515 | ### BUGFIXES
|
516 |
|
517 | * [`550bf703a`](https://github.com/npm/cli/commit/550bf703ae3e31ba6a300658ae95b6937f67b68f)
|
518 | Add @types to ignore list to fix git clean -fd.
|
519 | ([@zkat](https://github.com/zkat))
|
520 | * [`cdb059293`](https://github.com/npm/cli/commit/cdb0592939d6256c80f7ec5a2b6251131a512a2a)
|
521 | [#144](https://github.com/npm/cli/pull/144)
|
522 | Fix common.npm callback arguments.
|
523 | ([@larsgw](https://github.com/larsgw))
|
524 | * [`25573e9b9`](https://github.com/npm/cli/commit/25573e9b9d5d26261c68d453f06db5b3b1cd6789)
|
525 | [npm.community#4770](https://npm.community/t/https://npm.community/t/4770)
|
526 | Show installed but unmet peer deps.
|
527 | ([@larsgw](https://github.com/larsgw))
|
528 | * [`ce2c4bd1a`](https://github.com/npm/cli/commit/ce2c4bd1a2ce7ac1727a4ca9a350b743a2e27b2a)
|
529 | [#149](https://github.com/npm/cli/pull/149)
|
530 | Use figgy-config to make sure extra opts are there.
|
531 | ([@zkat](https://github.com/zkat))
|
532 | * [`3c22d1a35`](https://github.com/npm/cli/commit/3c22d1a35878f73c0af8ea5968b962a85a1a9b84)
|
533 | [npm.community#5101](https://npm.community/t/npm-6-6-0-breaks-access-to-ls-collaborators/5101)
|
534 | Fix `ls-collaborators` access error for non-scoped case.
|
535 | ([@zkat](https://github.com/zkat))
|
536 | * [`d5137091d`](https://github.com/npm/cli/commit/d5137091dd695a2980f7ade85fdc56b2421ff677)
|
537 | [npm.community#754](https://npm.community/t/npm-install-for-package-with-local-dependency-fails/754)
|
538 | Fix issue with sub-folder local references.
|
539 | ([@iarna](https://github.com/iarna))
|
540 | ([@jhecking](https://github.com/jhecking))
|
541 |
|
542 | ### DEPENDENCY BUMPS
|
543 |
|
544 | * [`d72141080`](https://github.com/npm/cli/commit/d72141080ec8fcf35bcc5650245efbe649de053e)
|
545 | `npm-registry-couchapp@2.7.1`
|
546 | ([@zkat](https://github.com/zkat))
|
547 | * [`671cad1b1`](https://github.com/npm/cli/commit/671cad1b18239d540da246d6f78de45d9f784396)
|
548 | `npm-registry-fetch@3.9.0`:
|
549 | Make sure publishing with legacy username:password `_auth` works again.
|
550 | ([@zkat](https://github.com/zkat))
|
551 | * [`95ca1aef4`](https://github.com/npm/cli/commit/95ca1aef4077c8e68d9f4dce37f6ba49b591c4ca)
|
552 | `pacote@9.4.1`
|
553 | ([@aeschright](https://github.com/aeschright))
|
554 | * [`322fef403`](https://github.com/npm/cli/commit/322fef40376e71cd100159dc914e7ca89faae327)
|
555 | `normalize-package-data@2.5.0`
|
556 | ([@aeschright](https://github.com/aeschright))
|
557 | * [`32d34c0da`](https://github.com/npm/cli/commit/32d34c0da4f393a74697297667eb9226155ecc6b)
|
558 | `npm-packlist@1.3.0`
|
559 | ([@aeschright](https://github.com/aeschright))
|
560 | * [`338571cf0`](https://github.com/npm/cli/commit/338571cf0bd3a1e2ea800464d57581932ff0fb11)
|
561 | `read-package-tree@5.2.2`
|
562 | ([@zkat](https://github.com/zkat))
|
563 |
|
564 | ### MISC
|
565 |
|
566 | * [`89b23a5f7`](https://github.com/npm/cli/commit/89b23a5f7b0ccdcdda1d7d4d3eafb6903156d186)
|
567 | [#120](https://github.com/npm/cli/pull/120)
|
568 | Use `const` in lib/fetch-package-metadata.md.
|
569 | ([@watilde](https://github.com/watilde))
|
570 | * [`4970d553c`](https://github.com/npm/cli/commit/4970d553c0ea66128931d118469fd31c87cc7986)
|
571 | [#126](https://github.com/npm/cli/pull/126)
|
572 | Replace ronn with marked-man in `.npmignore`.
|
573 | ([@watilde](https://github.com/watilde))
|
574 | * [`d9b6090dc`](https://github.com/npm/cli/commit/d9b6090dc26cd0fded18b4f80248cff3e51bb185)
|
575 | [#138](https://github.com/npm/cli/pull/138)
|
576 | Reduce work to test if executable ends with a 'g'.
|
577 | ([@elidoran](https://github.com/elidoran))
|
578 | ([@larsgw](https://github.com/larsgw))
|
579 |
|
580 | ## v6.7.0 (2019-01-23):
|
581 |
|
582 | Hey y'all! This is a quick hotfix release that includes some important fixes to
|
583 | `npm@6.6.0` related to the large rewrite/refactor. We're tagging it as a feature
|
584 | release because the changes involve some minor new features, and semver is
|
585 | semver, but there's nothing major here.
|
586 |
|
587 | ### NEW FEATURES
|
588 |
|
589 | * [`50463f58b`](https://github.com/npm/cli/commit/50463f58b4b70180a85d6d8c10fcf50d8970ef5e)
|
590 | Improve usage errors to `npm org` commands and add optional filtering to `npm
|
591 | org ls` subcommand.
|
592 | ([@zkat](https://github.com/zkat))
|
593 |
|
594 | ### BUGFIXES
|
595 |
|
596 | * [`4027070b0`](https://github.com/npm/cli/commit/4027070b03be3bdae2515f2291de89b91f901df9)
|
597 | Fix default usage printout for `npm org` so you actually see how it's supposed
|
598 | to be used.
|
599 | ([@zkat](https://github.com/zkat))
|
600 | * [`cfea6ea5b`](https://github.com/npm/cli/commit/cfea6ea5b67ec5e4ec57e3a9cb8c82d018cb5476)
|
601 | fix default usage message for npm hook
|
602 | ([@zkat](https://github.com/zkat))
|
603 |
|
604 | ### DOCS
|
605 |
|
606 | * [`e959e1421`](https://github.com/npm/cli/commit/e959e14217d751ddb295565fd75cc81de1ee0d5b)
|
607 | Add manpage for `npm org` command.
|
608 | ([@zkat](https://github.com/zkat))
|
609 |
|
610 | ### DEPENDENCY BUMPS
|
611 |
|
612 | * [`8543fc357`](https://github.com/npm/cli/commit/8543fc3576f64e91f7946d4c56a5ffb045b55156)
|
613 | `pacote@9.4.0`: Fall back to "fullfat" packuments on ETARGET errors. This will
|
614 | make it so that, when a package is published but the corgi follower hasn't
|
615 | caught up, users can still install a freshly-published package.
|
616 | ([@zkat](https://github.com/zkat))
|
617 | * [`75475043b`](https://github.com/npm/cli/commit/75475043b03a254b2e7db2c04c3f0baea31d8dc5)
|
618 | [npm.community#4752](https://npm.community/t/npm-6-6-0-broke-authentication-with-npm-registry-couchapp/4752)
|
619 | `libnpmpublish@1.1.1`: Fixes auth error for username/password legacy authentication.
|
620 | ([@sreeramjayan](https://github.com/sreeramjayan))
|
621 | * [`0af8c00ac`](https://github.com/npm/cli/commit/0af8c00acb01849362ffca25b567cc62447c7175)
|
622 | [npm.community#4746](https://npm.community/t/npm-6-6-0-release-breaking-docker-npm-ci-commands/4746)
|
623 | `libcipm@3.0.3`: Fixes issue with "cannot run in wd" errors for run-scripts.
|
624 | ([@zkat](https://github.com/zkat))
|
625 | * [`5a7962e46`](https://github.com/npm/cli/commit/5a7962e46f582c6bd91784b0ddc941ed45e9f802)
|
626 | `write-file-atomic@2.4.2`:
|
627 | Fixes issues with leaking `signal-exit` instances and file descriptors.
|
628 | ([@iarna](https://github.com/iarna))
|
629 |
|
630 | ## v6.6.0 (2019-01-17):
|
631 |
|
632 | ### REFACTORING OUT npm-REGISTRY-CLIENT
|
633 |
|
634 | Today is an auspicious day! This release marks the end of a massive internal
|
635 | refactor to npm that means we finally got rid of the legacy
|
636 | [`npm-registry-client`](https://npm.im/npm-registry-client) in favor of the
|
637 | shiny, new, `window.fetch`-like
|
638 | [`npm-registry-fetch`](https://npm.im/npm-registry-fetch).
|
639 |
|
640 | Now, the installer had already done most of this work with the release of
|
641 | `npm@5`, but it turns out _every other command_ still used the legacy client.
|
642 | This release updates all of those commands to use the new client, and while
|
643 | we're at it, adds a few extra goodies:
|
644 |
|
645 | * All OTP-requiring commands will now **prompt**. `--otp` is no longer required for `dist-tag`, `access`, et al.
|
646 | * We're starting to integrate a new config system which will eventually get extracted into a standalone package.
|
647 | * We now use [`libnpm`](https://npm.im/libnpm) for the API functionality of a lot of our commands! That means you can install a library if you want to write your own tooling around them.
|
648 | * There's now an `npm org` command for managing users in your org.
|
649 | * [`pacote`](https://npm.im/pacote) now consumes npm-style configurations, instead of its own naming for various config vars. This will make it easier to load npm configs using `libnpm.config` and hand them directly to `pacote`.
|
650 |
|
651 | There's too many commits to list all of them here, so check out the PR if you're
|
652 | curious about details:
|
653 |
|
654 | * [`c5af34c05`](https://github.com/npm/cli/commit/c5af34c05fd569aecd11f18d6d0ddeac3970b253)
|
655 | [npm-registry-client@REMOVED](https://www.youtube.com/watch\?v\=kPIdRJlzERo)
|
656 | ([@zkat](https://github.com/zkat))
|
657 | * [`4cca9cb90`](https://github.com/npm/cli/commit/4cca9cb9042c0eeb743377e8f1ae1c07733df43f)
|
658 | [`ad67461dc`](https://github.com/npm/cli/commit/ad67461dc3a73d5ae6569fdbee44c67e1daf86e7)
|
659 | [`77625f9e2`](https://github.com/npm/cli/commit/77625f9e20d4285b7726b3bf3ebc10cb21c638f0)
|
660 | [`6e922aefb`](https://github.com/npm/cli/commit/6e922aefbb4634bbd77ed3b143e0765d63afc7f9)
|
661 | [`584613ea8`](https://github.com/npm/cli/commit/584613ea8ff94b927db4957e5647504b30ca2b1f)
|
662 | [`64de4ebf0`](https://github.com/npm/cli/commit/64de4ebf019b217179039124c6621e74651e4d27)
|
663 | [`6cd87d1a9`](https://github.com/npm/cli/commit/6cd87d1a9bb90e795f9891ea4db384435f4a8930)
|
664 | [`2786834c0`](https://github.com/npm/cli/commit/2786834c0257b8bb1bbb115f1ce7060abaab2e17)
|
665 | [`514558e09`](https://github.com/npm/cli/commit/514558e094460fd0284a759c13965b685133b3fe)
|
666 | [`dec07ebe3`](https://github.com/npm/cli/commit/dec07ebe3312245f6421c6e523660be4973ae8c2)
|
667 | [`084741913`](https://github.com/npm/cli/commit/084741913c4fdb396e589abf3440b4be3aa0b67e)
|
668 | [`45aff0e02`](https://github.com/npm/cli/commit/45aff0e02251785a85e56eafacf9efaeac6f92ae)
|
669 | [`846ddcc44`](https://github.com/npm/cli/commit/846ddcc44538f2d9a51ac79405010dfe97fdcdeb)
|
670 | [`8971ba1b9`](https://github.com/npm/cli/commit/8971ba1b953d4f05ff5094f1822b91526282edd8)
|
671 | [`99156e081`](https://github.com/npm/cli/commit/99156e081a07516d6c970685bc3d858f89dc4f9c)
|
672 | [`ab2155306`](https://github.com/npm/cli/commit/ab215530674d7f6123c9572d0ad4ca9e9b5fb184)
|
673 | [`b37a66542`](https://github.com/npm/cli/commit/b37a66542ca2879069b2acd338b1904de71b7f40)
|
674 | [`d2af0777a`](https://github.com/npm/cli/commit/d2af0777ac179ff5009dbbf0354a4a84f151b60f)
|
675 | [`e0b4c6880`](https://github.com/npm/cli/commit/e0b4c6880504fa2e8491c2fbd098efcb2e496849)
|
676 | [`ff72350b4`](https://github.com/npm/cli/commit/ff72350b4c56d65e4a92671d86a33080bf3c2ea5)
|
677 | [`6ed943303`](https://github.com/npm/cli/commit/6ed943303ce7a267ddb26aa25caa035f832895dd)
|
678 | [`90a069e7d`](https://github.com/npm/cli/commit/90a069e7d4646682211f4cabe289c306ee1d5397)
|
679 | [`b24ed5fdc`](https://github.com/npm/cli/commit/b24ed5fdc3a4395628465ae5273bad54eea274c8)
|
680 | [`ec9fcc14f`](https://github.com/npm/cli/commit/ec9fcc14f4e0e2f3967e2fd6ad8b8433076393cb)
|
681 | [`8a56fa39e`](https://github.com/npm/cli/commit/8a56fa39e61136da45565447fe201a57f04ad4cd)
|
682 | [`41d19e18f`](https://github.com/npm/cli/commit/41d19e18f769c6f0acfdffbdb01d12bf332908ce)
|
683 | [`125ff9551`](https://github.com/npm/cli/commit/125ff9551595dda9dab2edaef10f4c73ae8e1433)
|
684 | [`1c3b226ff`](https://github.com/npm/cli/commit/1c3b226ff37159c426e855e83c8f6c361603901d)
|
685 | [`3c0a7b06b`](https://github.com/npm/cli/commit/3c0a7b06b6473fe068fc8ae8466c07a177975b87)
|
686 | [`08fcb3f0f`](https://github.com/npm/cli/commit/08fcb3f0f26e025702b35253ed70a527ab69977f)
|
687 | [`c8135d97a`](https://github.com/npm/cli/commit/c8135d97a424b38363dc4530c45e4583471e9849)
|
688 | [`ae936f22c`](https://github.com/npm/cli/commit/ae936f22ce80614287f2769e9aaa9a155f03cc15)
|
689 | [#2](https://github.com/npm/cli/pull/2)
|
690 | Move rest of commands to `npm-registry-fetch` and use [`figgy-pudding`](https://npm.im/figgy-pudding) for configs.
|
691 | ([@zkat](https://github.com/zkat))
|
692 |
|
693 | ### NEW FEATURES
|
694 |
|
695 | * [`02c837e01`](https://github.com/npm/cli/commit/02c837e01a71a26f37cbd5a09be89df8a9ce01da)
|
696 | [#106](https://github.com/npm/cli/pull/106)
|
697 | Make `npm dist-tags` the same as `npm dist-tag ls`.
|
698 | ([@isaacs](https://github.com/isaacs))
|
699 | * [`1065a7809`](https://github.com/npm/cli/commit/1065a7809161fd4dc23e96b642019fc842fdacf2)
|
700 | [#65](https://github.com/npm/cli/pull/65)
|
701 | Add support for `IBM i`.
|
702 | ([@dmabupt](https://github.com/dmabupt))
|
703 | * [`a22e6f5fc`](https://github.com/npm/cli/commit/a22e6f5fc3e91350d3c64dcc88eabbe0efbca759)
|
704 | [#131](https://github.com/npm/cli/pull/131)
|
705 | Update profile to support new npm-profile API.
|
706 | ([@zkat](https://github.com/zkat))
|
707 |
|
708 | ### BUGFIXES
|
709 |
|
710 | * [`890a74458`](https://github.com/npm/cli/commit/890a74458dd4a55e2d85f3eba9dbf125affa4206)
|
711 | [npm.community#3278](https://npm.community/t/3278)
|
712 | Fix support for passing git binary path config with `--git`.
|
713 | ([@larsgw](https://github.com/larsgw))
|
714 | * [`90e55a143`](https://github.com/npm/cli/commit/90e55a143ed1de8678d65c17bc3c2b103a15ddac)
|
715 | [npm.community#2713](https://npm.community/t/npx-envinfo-preset-jest-fails-on-windows-with-a-stack-trace/2713)
|
716 | Check for `npm.config`'s existence in `error-handler.js` to prevent weird
|
717 | errors when failures happen before config object is loaded.
|
718 | ([@BeniCheni](https://github.com/BeniCheni))
|
719 | * [`134207174`](https://github.com/npm/cli/commit/134207174652e1eb6d7b0f44fd9858a0b6a0cd6c)
|
720 | [npm.community#2569](https://npm.community/t/2569)
|
721 | Fix checking for optional dependencies.
|
722 | ([@larsgw](https://github.com/larsgw))
|
723 | * [`7a2f6b05d`](https://github.com/npm/cli/commit/7a2f6b05d27f3bcf47a48230db62e86afa41c9d3)
|
724 | [npm.community#4172](https://npm.community/t/4172)
|
725 | Remove tink experiments.
|
726 | ([@larsgw](https://github.com/larsgw))
|
727 | * [`c5b6056b6`](https://github.com/npm/cli/commit/c5b6056b6b35eefb81ae5fb00a5c7681c5318c22)
|
728 | [#123](https://github.com/npm/cli/pull/123)
|
729 | Handle git branch references correctly.
|
730 | ([@johanneswuerbach](https://github.com/johanneswuerbach))
|
731 | * [`f58b43ef2`](https://github.com/npm/cli/commit/f58b43ef2c5e3dea2094340a0cf264b2d11a5da4)
|
732 | [npm.community#3983](https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983)
|
733 | Report any errors above 400 as potentially not supporting audit.
|
734 | ([@zkat](https://github.com/zkat))
|
735 | * [`a5c9e6f35`](https://github.com/npm/cli/commit/a5c9e6f35a591a6e2d4b6ace5c01bc03f2b75fdc)
|
736 | [#124](https://github.com/npm/cli/pull/124)
|
737 | Set default homepage to an empty string.
|
738 | ([@anchnk](https://github.com/anchnk))
|
739 | * [`5d076351d`](https://github.com/npm/cli/commit/5d076351d7ec1d3585942a9289548166a7fbbd4c)
|
740 | [npm.community#4054](https://npm.community/t/4054)
|
741 | Fix npm-prefix description.
|
742 | ([@larsgw](https://github.com/larsgw))
|
743 |
|
744 | ### DOCS
|
745 |
|
746 | * [`31a7274b7`](https://github.com/npm/cli/commit/31a7274b70de18b24e7bee51daa22cc7cbb6141c)
|
747 | [#71](https://github.com/npm/cli/pull/71)
|
748 | Fix typo in npm-token documentation.
|
749 | ([@GeorgeTaveras1231](https://github.com/GeorgeTaveras1231))
|
750 | * [`2401b7592`](https://github.com/npm/cli/commit/2401b7592c6ee114e6db7077ebf8c072b7bfe427)
|
751 | Correct docs for fake-registry interface.
|
752 | ([@iarna](https://github.com/iarna))
|
753 |
|
754 | ### DEPENDENCIES
|
755 |
|
756 | * [`9cefcdc1d`](https://github.com/npm/cli/commit/9cefcdc1d2289b56f9164d14d7e499e115cfeaee)
|
757 | `npm-registry-fetch@3.8.0`
|
758 | ([@zkat](https://github.com/zkat))
|
759 | * [`1c769c9b3`](https://github.com/npm/cli/commit/1c769c9b3e431d324c1a5b6dd10e1fddb5cb88c7)
|
760 | `pacote@9.1.0`
|
761 | ([@zkat](https://github.com/zkat))
|
762 | * [`f3bc5539b`](https://github.com/npm/cli/commit/f3bc5539b30446500abcc3873781b2c717f8e22c)
|
763 | `figgy-pudding@3.5.1`
|
764 | ([@zkat](https://github.com/zkat))
|
765 | * [`bf7199d3c`](https://github.com/npm/cli/commit/bf7199d3cbf50545da1ebd30d28f0a6ed5444a00)
|
766 | `npm-profile@4.0.1`
|
767 | ([@zkat](https://github.com/zkat))
|
768 | * [`118c50496`](https://github.com/npm/cli/commit/118c50496c01231cab3821ae623be6df89cb0a32)
|
769 | `semver@5.5.1`
|
770 | ([@isaacs](https://github.com/isaacs))
|
771 | * [`eab4df925`](https://github.com/npm/cli/commit/eab4df9250e9169c694b3f6c287d2932bf5e08fb)
|
772 | `libcipm@3.0.2`
|
773 | ([@zkat](https://github.com/zkat))
|
774 | * [`b86e51573`](https://github.com/npm/cli/commit/b86e515734faf433dc6c457c36c1de52795aa870)
|
775 | `libnpm@1.4.0`
|
776 | ([@zkat](https://github.com/zkat))
|
777 | * [`56fffbff2`](https://github.com/npm/cli/commit/56fffbff27fe2fae8bef27d946755789ef0d89bd)
|
778 | `get-stream@4.1.0`
|
779 | ([@zkat](https://github.com/zkat))
|
780 | * [`df972e948`](https://github.com/npm/cli/commit/df972e94868050b5aa42ac18b527fd929e1de9e4)
|
781 | npm-profile@REMOVED
|
782 | ([@zkat](https://github.com/zkat))
|
783 | * [`32c73bf0e`](https://github.com/npm/cli/commit/32c73bf0e3f0441d0c7c940292235d4b93aa87e2)
|
784 | `libnpm@2.0.1`
|
785 | ([@zkat](https://github.com/zkat))
|
786 | * [`569491b80`](https://github.com/npm/cli/commit/569491b8042f939dc13986b6adb2a0a260f95b63)
|
787 | `licensee@5.0.0`
|
788 | ([@zkat](https://github.com/zkat))
|
789 | * [`a3ba0ccf1`](https://github.com/npm/cli/commit/a3ba0ccf1fa86aec56b1ad49883abf28c1f56b3c)
|
790 | move rimraf to prod deps
|
791 | ([@zkat](https://github.com/zkat))
|
792 | * [`f63a0d6cf`](https://github.com/npm/cli/commit/f63a0d6cf0b7db3dcc80e72e1383c3df723c8119)
|
793 | `spdx-license-ids@3.0.3`:
|
794 | Ref: https://github.com/npm/cli/pull/121
|
795 | ([@zkat](https://github.com/zkat))
|
796 | * [`f350e714f`](https://github.com/npm/cli/commit/f350e714f66a77f71a7ebe17daeea2ea98179a1a)
|
797 | `aproba@2.0.0`
|
798 | ([@aeschright](https://github.com/aeschright))
|
799 | * [`a67e4d8b2`](https://github.com/npm/cli/commit/a67e4d8b214e58ede037c3854961acb33fd889da)
|
800 | `byte-size@5.0.1`
|
801 | ([@aeschright](https://github.com/aeschright))
|
802 | * [`8bea4efa3`](https://github.com/npm/cli/commit/8bea4efa34857c4e547904b3630dd442def241de)
|
803 | `cacache@11.3.2`
|
804 | ([@aeschright](https://github.com/aeschright))
|
805 | * [`9d4776836`](https://github.com/npm/cli/commit/9d4776836a4eaa4b19701b4e4f00cd64578bf078)
|
806 | `chownr@1.1.1`
|
807 | ([@aeschright](https://github.com/aeschright))
|
808 | * [`70da139e9`](https://github.com/npm/cli/commit/70da139e97ed1660c216e2d9b3f9cfb986bfd4a4)
|
809 | `ci-info@2.0.0`
|
810 | ([@aeschright](https://github.com/aeschright))
|
811 | * [`bcdeddcc3`](https://github.com/npm/cli/commit/bcdeddcc3d4dc242f42404223dafe4afdc753b32)
|
812 | `cli-table3@0.5.1`
|
813 | ([@aeschright](https://github.com/aeschright))
|
814 | * [`63aab82c7`](https://github.com/npm/cli/commit/63aab82c7bfca4f16987cf4156ddebf8d150747c)
|
815 | `is-cidr@3.0.0`
|
816 | ([@aeschright](https://github.com/aeschright))
|
817 | * [`d522bd90c`](https://github.com/npm/cli/commit/d522bd90c3b0cb08518f249ae5b90bd609fff165)
|
818 | `JSONStream@1.3.5`
|
819 | ([@aeschright](https://github.com/aeschright))
|
820 | * [`2a59bfc79`](https://github.com/npm/cli/commit/2a59bfc7989bd5575d8cbba912977c6d1ba92567)
|
821 | `libnpmhook@5.0.2`
|
822 | ([@aeschright](https://github.com/aeschright))
|
823 | * [`66d60e394`](https://github.com/npm/cli/commit/66d60e394e5a96330f90e230505758f19a3643ac)
|
824 | `marked@0.6.0`
|
825 | ([@aeschright](https://github.com/aeschright))
|
826 | * [`8213def9a`](https://github.com/npm/cli/commit/8213def9aa9b6e702887e4f2ed7654943e1e4154)
|
827 | `npm-packlist@1.2.0`
|
828 | ([@aeschright](https://github.com/aeschright))
|
829 | * [`e4ffc6a2b`](https://github.com/npm/cli/commit/e4ffc6a2bfb8d0b7047cb6692030484760fc8c91)
|
830 | `unique-filename@1.1.1`
|
831 | ([@aeschright](https://github.com/aeschright))
|
832 | * [`09a5c2fab`](https://github.com/npm/cli/commit/09a5c2fabe0d1c00ec8c99f328f6d28a3495eb0b)
|
833 | `semver@5.6.0`
|
834 | ([@aeschright](https://github.com/aeschright))
|
835 | * [`740e79e17`](https://github.com/npm/cli/commit/740e79e17a78247f73349525043c9388ce94459a)
|
836 | `rimraf@2.6.3`
|
837 | ([@aeschright](https://github.com/aeschright))
|
838 | * [`455476c8d`](https://github.com/npm/cli/commit/455476c8d148ca83a4e030e96e93dcf1c7f0ff5f)
|
839 | `require-inject@1.4.4`
|
840 | ([@aeschright](https://github.com/aeschright))
|
841 | * [`3f40251c5`](https://github.com/npm/cli/commit/3f40251c5868feaacbcdbcb1360877ce76998f5e)
|
842 | `npm-pick-manifest@2.2.3`
|
843 | ([@aeschright](https://github.com/aeschright))
|
844 | * [`4ffa8a8e9`](https://github.com/npm/cli/commit/4ffa8a8e9e80e5562898dd76fe5a49f5694f38c8)
|
845 | `query-string@6.2.0`
|
846 | ([@aeschright](https://github.com/aeschright))
|
847 | * [`a0a0ca9ec`](https://github.com/npm/cli/commit/a0a0ca9ec2a962183d420fa751f4139969760f18)
|
848 | `pacote@9.3.0`
|
849 | ([@aeschright](https://github.com/aeschright))
|
850 | * [`5777ea8ad`](https://github.com/npm/cli/commit/5777ea8ad2058be3166a6dad2d31d2d393c9f778)
|
851 | `readable-stream@3.1.1`
|
852 | ([@aeschright](https://github.com/aeschright))
|
853 | * [`887e94386`](https://github.com/npm/cli/commit/887e94386f42cb59a5628e7762b3662d084b23c8)
|
854 | `lru-cache@4.1.5`
|
855 | ([@aeschright](https://github.com/aeschright))
|
856 | * [`41f15524c`](https://github.com/npm/cli/commit/41f15524c58c59d206c4b1d25ae9e0f22745213b)
|
857 | Updating semver docs.
|
858 | ([@aeschright](https://github.com/aeschright))
|
859 | * [`fb3bbb72d`](https://github.com/npm/cli/commit/fb3bbb72d448ac37a465b31233b21381917422f3)
|
860 | `npm-audit-report@1.3.2`:
|
861 | ([@melkikh](https://github.com/melkikh))
|
862 |
|
863 | ### TESTING
|
864 |
|
865 | * [`f1edffba9`](https://github.com/npm/cli/commit/f1edffba90ebd96cf88675d2e18ebc48954ba50e)
|
866 | Modernize maketest script.
|
867 | ([@iarna](https://github.com/iarna))
|
868 | * [`ae263473d`](https://github.com/npm/cli/commit/ae263473d92a896b482830d4019a04b5dbd1e9d7)
|
869 | maketest: Use promise based example common.npm call.
|
870 | ([@iarna](https://github.com/iarna))
|
871 | * [`d9970da5e`](https://github.com/npm/cli/commit/d9970da5ee97a354eab01cbf16f9101693a15d2d)
|
872 | maketest: Use newEnv for env production.
|
873 | ([@iarna](https://github.com/iarna))
|
874 |
|
875 | ### MISCELLANEOUS
|
876 |
|
877 | * [`c665f35aa`](https://github.com/npm/cli/commit/c665f35aacdb8afdbe35f3dd7ccb62f55ff6b896)
|
878 | [#119](https://github.com/npm/cli/pull/119)
|
879 | Replace var with const/let in lib/repo.js.
|
880 | ([@watilde](https://github.com/watilde))
|
881 | * [`46639ba9f`](https://github.com/npm/cli/commit/46639ba9f04ea729502f1af28b02eb67fb6dcb66)
|
882 | Update package-lock.json for https tarball URLs
|
883 | ([@aeschright](https://github.com/aeschright))
|
884 |
|
885 | ## v6.5.0 (2018-11-28):
|
886 |
|
887 | ### NEW FEATURES
|
888 |
|
889 | * [`fc1a8d185`](https://github.com/npm/cli/commit/fc1a8d185fc678cdf3784d9df9eef9094e0b2dec)
|
890 | Backronym `npm ci` to `npm clean-install`.
|
891 | ([@zkat](https://github.com/zkat))
|
892 | * [`4be51a9cc`](https://github.com/npm/cli/commit/4be51a9cc65635bb26fa4ce62233f26e0104bc20)
|
893 | [#81](https://github.com/npm/cli/pull/81)
|
894 | Adds 'Homepage' to outdated --long output.
|
895 | ([@jbottigliero](https://github.com/jbottigliero))
|
896 |
|
897 | ### BUGFIXES
|
898 |
|
899 | * [`89652cb9b`](https://github.com/npm/cli/commit/89652cb9b810f929f5586fc90cc6794d076603fb)
|
900 | [npm.community#1661](https://npm.community/t/1661)
|
901 | Fix sign-git-commit options. They were previously totally wrong.
|
902 | ([@zkat](https://github.com/zkat))
|
903 | * [`414f2d1a1`](https://github.com/npm/cli/commit/414f2d1a1bdffc02ed31ebb48a43216f284c21d4)
|
904 | [npm.community#1742](https://npm.community/t/npm-audit-making-non-rfc-compliant-requests-to-server-resulting-in-400-bad-request-pr-with-fix/1742)
|
905 | Set lowercase headers for npm audit requests.
|
906 | ([@maartenba](https://github.com/maartenba))
|
907 | * [`a34246baf`](https://github.com/npm/cli/commit/a34246bafe73218dc9e3090df9ee800451db2c7d)
|
908 | [#75](https://github.com/npm/cli/pull/75)
|
909 | Fix `npm edit` handling of scoped packages.
|
910 | ([@larsgw](https://github.com/larsgw))
|
911 | * [`d3e8a7c72`](https://github.com/npm/cli/commit/d3e8a7c7240dd25379a5bcad324a367c58733c73)
|
912 | [npm.community#2303](https://npm.community/t/npm-ci-logs-success-to-stderr/2303)
|
913 | Make summary output for `npm ci` go to `stdout`, not `stderr`.
|
914 | ([@alopezsanchez](https://github.com/alopezsanchez))
|
915 | * [`71d8fb4a9`](https://github.com/npm/cli/commit/71d8fb4a94d65e1855f6d0c5f2ad2b7c3202e3c4)
|
916 | [npm.community#1377](https://npm.community/t/unhelpful-error-message-when-publishing-without-logging-in-error-eperm-operation-not-permitted-unlink/1377/3)
|
917 | Close the file descriptor during publish if exiting upload via an error. This
|
918 | will prevent strange error messages when the upload fails and make sure
|
919 | cleanup happens correctly.
|
920 | ([@macdja38](https://github.com/macdja38))
|
921 |
|
922 | ### DOCS UPDATES
|
923 |
|
924 | * [`b1a8729c8`](https://github.com/npm/cli/commit/b1a8729c80175243fbbeecd164e9ddd378a09a50)
|
925 | [#60](https://github.com/npm/cli/pull/60)
|
926 | Mention --otp flag when prompting for OTP.
|
927 | ([@bakkot](https://github.com/bakkot))
|
928 | * [`bcae4ea81`](https://github.com/npm/cli/commit/bcae4ea8173e489a76cc226bbd30dd9eabe21ec6)
|
929 | [#64](https://github.com/npm/cli/pull/64)
|
930 | Clarify that git dependencies use the default branch, not just `master`.
|
931 | ([@zckrs](https://github.com/zckrs))
|
932 | * [`15da82690`](https://github.com/npm/cli/commit/15da8269032bf509ade3252978e934f2a61d4499)
|
933 | [#72](https://github.com/npm/cli/pull/72)
|
934 | `bash_completion.d` dir is sometimes found in `/etc` not `/usr/local`.
|
935 | ([@RobertKielty](https://github.com/RobertKielty))
|
936 | * [`8a6ecc793`](https://github.com/npm/cli/commit/8a6ecc7936dae2f51638397ff5a1d35cccda5495)
|
937 | [#74](https://github.com/npm/cli/pull/74)
|
938 | Update OTP documentation for `dist-tag add` to clarify `--otp` is needed right
|
939 | now.
|
940 | ([@scotttrinh](https://github.com/scotttrinh))
|
941 | * [`dcc03ec85`](https://github.com/npm/cli/commit/dcc03ec858bddd7aa2173b5a86b55c1c2385a2a3)
|
942 | [#82](https://github.com/npm/cli/pull/82)
|
943 | Note that `prepare` runs when installing git dependencies.
|
944 | ([@seishun](https://github.com/seishun))
|
945 | * [`a91a470b7`](https://github.com/npm/cli/commit/a91a470b71e08ccf6a75d4fb8c9937789fa8d067)
|
946 | [#83](https://github.com/npm/cli/pull/83)
|
947 | Specify that --dry-run isn't available in older versions of npm publish.
|
948 | ([@kjin](https://github.com/kjin))
|
949 | * [`1b2fabcce`](https://github.com/npm/cli/commit/1b2fabccede37242233755961434c52536224de5)
|
950 | [#96](https://github.com/npm/cli/pull/96)
|
951 | Fix inline code tag issue in docs.
|
952 | ([@midare](https://github.com/midare))
|
953 | * [`6cc70cc19`](https://github.com/npm/cli/commit/6cc70cc1977e58a3e1ea48e660ffc6b46b390e59)
|
954 | [#68](https://github.com/npm/cli/pull/68)
|
955 | Add semver link and a note on empty string format to `deprecate` doc.
|
956 | ([@neverett](https://github.com/neverett))
|
957 | * [`61dbbb7c3`](https://github.com/npm/cli/commit/61dbbb7c3474834031bce88c423850047e8131dc)
|
958 | Fix semver docs after version update.
|
959 | ([@zkat](https://github.com/zkat))
|
960 | * [`4acd45a3d`](https://github.com/npm/cli/commit/4acd45a3d0ce92f9999446226fe7dfb89a90ba2e)
|
961 | [#78](https://github.com/npm/cli/pull/78)
|
962 | Correct spelling across various docs.
|
963 | ([@hugovk](https://github.com/hugovk))
|
964 |
|
965 | ### DEPENDENCIES
|
966 |
|
967 | * [`4f761283e`](https://github.com/npm/cli/commit/4f761283e8896d0ceb5934779005646463a030e8)
|
968 | `figgy-pudding@3.5.1`
|
969 | ([@zkat](https://github.com/zkat))
|
970 | * [`3706db0bc`](https://github.com/npm/cli/commit/3706db0bcbc306d167bb902362e7f6962f2fe1a1)
|
971 | [npm.community#1764](https://npm.community/t/crash-invalid-config-key-requested-error/1764)
|
972 | `ssri@6.0.1`
|
973 | ([@zkat](https://github.com/zkat))
|
974 | * [`83c2b117d`](https://github.com/npm/cli/commit/83c2b117d0b760d0ea8d667e5e4bdfa6a7a7a8f6)
|
975 | `bluebird@3.5.2`
|
976 | ([@petkaantonov](https://github.com/petkaantonov))
|
977 | * [`2702f46bd`](https://github.com/npm/cli/commit/2702f46bd7284fb303ca2119d23c52536811d705)
|
978 | `ci-info@1.5.1`
|
979 | ([@watson](https://github.com/watson))
|
980 | * [`4db6c3898`](https://github.com/npm/cli/commit/4db6c3898b07100e3a324e4aae50c2fab4b93a04)
|
981 | `config-chain@1.1.1`:2
|
982 | ([@dawsbot](https://github.com/dawbot))
|
983 | * [`70bee4f69`](https://github.com/npm/cli/commit/70bee4f69bb4ce4e18c48582fe2b48d8b4aba566)
|
984 | `glob@7.1.3`
|
985 | ([@isaacs](https://github.com/isaacs))
|
986 | * [`e469fd6be`](https://github.com/npm/cli/commit/e469fd6be95333dcaa7cf377ca3620994ca8d0de)
|
987 | `opener@1.5.1`:
|
988 | Fix browser opening under Windows Subsystem for Linux (WSL).
|
989 | ([@thijsputman](https://github.com/thijsputman))
|
990 | * [`03840dced`](https://github.com/npm/cli/commit/03840dced865abdca6e6449ea030962e5b19db0c)
|
991 | `semver@5.5.1`
|
992 | ([@iarna](https://github.com/iarna))
|
993 | * [`161dc0b41`](https://github.com/npm/cli/commit/161dc0b4177e76306a0e3b8660b3b496cc3db83b)
|
994 | `bluebird@3.5.3`
|
995 | ([@petkaantonov](https://github.com/petkaantonov))
|
996 | * [`bb6f94395`](https://github.com/npm/cli/commit/bb6f94395491576ec42996ff6665df225f6b4377)
|
997 | `graceful-fs@4.1.1`:5
|
998 | ([@isaacs](https://github.com/isaacs))
|
999 | * [`43b1f4c91`](https://github.com/npm/cli/commit/43b1f4c91fa1d7b3ebb6aa2d960085e5f3ac7607)
|
1000 | `tar@4.4.8`
|
1001 | ([@isaacs](https://github.com/isaacs))
|
1002 | * [`ab62afcc4`](https://github.com/npm/cli/commit/ab62afcc472de82c479bf91f560a0bbd6a233c80)
|
1003 | `npm-packlist@1.1.1`:2
|
1004 | ([@isaacs](https://github.com/isaacs))
|
1005 | * [`027f06be3`](https://github.com/npm/cli/commit/027f06be35bb09f390e46fcd2b8182539939d1f7)
|
1006 | `ci-info@1.6.0`
|
1007 | ([@watson](https://github.com/watson))
|
1008 |
|
1009 | ### MISCELLANEOUS
|
1010 |
|
1011 | * [`27217dae8`](https://github.com/npm/cli/commit/27217dae8adbc577ee9cb323b7cfe9c6b2493aca)
|
1012 | [#70](https://github.com/npm/cli/pull/70)
|
1013 | Automatically audit dependency licenses for npm itself.
|
1014 | ([@kemitchell](https://github.com/kemitchell))
|
1015 |
|
1016 | ## v6.4.1 (2018-08-22):
|
1017 |
|
1018 | ### BUGFIXES
|
1019 |
|
1020 | * [`4bd40f543`](https://github.com/npm/cli/commit/4bd40f543dc89f0721020e7d0bb3497300d74818)
|
1021 | [#42](https://github.com/npm/cli/pull/42)
|
1022 | Prevent blowing up on malformed responses from the `npm audit` endpoint, such
|
1023 | as with third-party registries.
|
1024 | ([@framp](https://github.com/framp))
|
1025 | * [`0e576f0aa`](https://github.com/npm/cli/commit/0e576f0aa6ea02653d948c10f29102a2d4a31944)
|
1026 | [#46](https://github.com/npm/cli/pull/46)
|
1027 | Fix `NO_PROXY` support by renaming npm-side config to `--noproxy`. The
|
1028 | environment variable should still work.
|
1029 | ([@SneakyFish5](https://github.com/SneakyFish5))
|
1030 | * [`d8e811d6a`](https://github.com/npm/cli/commit/d8e811d6adf3d87474982cb831c11316ac725605)
|
1031 | [#33](https://github.com/npm/cli/pull/33)
|
1032 | Disable `update-notifier` checks when a CI environment is detected.
|
1033 | ([@Sibiraj-S](https://github.com/Sibiraj-S))
|
1034 | * [`1bc5b8cea`](https://github.com/npm/cli/commit/1bc5b8ceabc86bfe4777732f25ffef0f3de81bd1)
|
1035 | [#47](https://github.com/npm/cli/pull/47)
|
1036 | Fix issue where `postpack` scripts would break if `pack` was used with
|
1037 | `--dry-run`.
|
1038 | ([@larsgw](https://github.com/larsgw))
|
1039 |
|
1040 | ### DEPENDENCY BUMPS
|
1041 |
|
1042 | * [`4c57316d5`](https://github.com/npm/cli/commit/4c57316d5633e940105fa545b52d8fbfd2eb9f75)
|
1043 | `figgy-pudding@3.4.1`
|
1044 | ([@zkat](https://github.com/zkat))
|
1045 | * [`85f4d7905`](https://github.com/npm/cli/commit/85f4d79059865d5267f3516b6cdbc746012202c6)
|
1046 | `cacache@11.2.0`
|
1047 | ([@zkat](https://github.com/zkat))
|
1048 | * [`d20ac242a`](https://github.com/npm/cli/commit/d20ac242aeb44aa3581c65c052802a02d5eb22f3)
|
1049 | `npm-packlist@1.1.11`:
|
1050 | No real changes in npm-packlist, but npm-bundled included a
|
1051 | circular dependency fix, as well as adding a proper LICENSE file.
|
1052 | ([@isaacs](https://github.com/isaacs))
|
1053 | * [`e8d5f4418`](https://github.com/npm/cli/commit/e8d5f441821553a31fc8cd751670663699d2c8ce)
|
1054 | [npm.community#632](https://npm.community/t/using-npm-ci-does-not-run-prepare-script-for-git-modules/632)
|
1055 | `libcipm@2.0.2`:
|
1056 | Fixes issue where `npm ci` wasn't running the `prepare` lifecycle script when
|
1057 | installing git dependencies
|
1058 | ([@edahlseng](https://github.com/edahlseng))
|
1059 | * [`a5e6f78e9`](https://github.com/npm/cli/commit/a5e6f78e916873f7d18639ebdb8abd20479615a9)
|
1060 | `JSONStream@1.3.4`:
|
1061 | Fixes memory leak problem when streaming large files (like legacy npm search).
|
1062 | ([@daern91](https://github.com/daern91))
|
1063 | * [`3b940331d`](https://github.com/npm/cli/commit/3b940331dcccfa67f92366adb7ffd9ecf7673a9a)
|
1064 | [npm.community#1042](https://npm.community/t/3-path-variables-are-assigned-to-child-process-launched-by-npm/1042)
|
1065 | `npm-lifecycle@2.1.0`:
|
1066 | Fixes issue for Windows user where multiple `Path`/`PATH` variables were being
|
1067 | added to the environment and breaking things in all sorts of fun and
|
1068 | interesting ways.
|
1069 | ([@JimiC](https://github.com/JimiC))
|
1070 | * [`d612d2ce8`](https://github.com/npm/cli/commit/d612d2ce8fab72026f344f125539ecbf3746af9a)
|
1071 | `npm-registry-client@8.6.0`
|
1072 | ([@iarna](https://github.com/iarna))
|
1073 | * [`1f6ba1cb1`](https://github.com/npm/cli/commit/1f6ba1cb174590c1f5d2b00e2ca238dfa39d507a)
|
1074 | `opener@1.5.0`
|
1075 | ([@domenic](https://github.com/domenic))
|
1076 | * [`37b8f405f`](https://github.com/npm/cli/commit/37b8f405f35c861b7beeed56f71ad20b0bf87889)
|
1077 | `request@2.88.0`
|
1078 | ([@mikeal](https://github.com/mikeal))
|
1079 | * [`bb91a2a14`](https://github.com/npm/cli/commit/bb91a2a14562e77769057f1b6d06384be6d6bf7f)
|
1080 | `tacks@1.2.7`
|
1081 | ([@iarna](https://github.com/iarna))
|
1082 | * [`30bc9900a`](https://github.com/npm/cli/commit/30bc9900ae79c80bf0bdee0ae6372da6f668124c)
|
1083 | `ci-info@1.4.0`:
|
1084 | Adds support for two more CI services
|
1085 | ([@watson](https://github.com/watson))
|
1086 | * [`1d2fa4ddd`](https://github.com/npm/cli/commit/1d2fa4dddcab8facfee92096cc24b299387f3182)
|
1087 | `marked@0.5.0`
|
1088 | ([@joshbruce](https://github.com/joshbruce))
|
1089 |
|
1090 | ### DOCUMENTATION
|
1091 |
|
1092 | * [`08ecde292`](https://github.com/npm/cli/commit/08ecde2928f8c89a2fdaa800ae845103750b9327)
|
1093 | [#54](https://github.com/npm/cli/pull/54)
|
1094 | Mention registry terms of use in manpage and registry docs and update language
|
1095 | in README for it.
|
1096 | ([@kemitchell](https://github.com/kemitchell))
|
1097 | * [`de956405d`](https://github.com/npm/cli/commit/de956405d8b72354f98579d00c6dd30ac3b9bddf)
|
1098 | [#41](https://github.com/npm/cli/pull/41)
|
1099 | Add documentation for `--dry-run` in `install` and `pack` docs.
|
1100 | ([@reconbot](https://github.com/reconbot))
|
1101 | * [`95031b90c`](https://github.com/npm/cli/commit/95031b90ce0b0c4dcd5e4eafc86e3e5bfd59fb3e)
|
1102 | [#48](https://github.com/npm/cli/pull/48)
|
1103 | Update republish time and lightly reorganize republish info.
|
1104 | ([@neverett](https://github.com/neverett))
|
1105 | * [`767699b68`](https://github.com/npm/cli/commit/767699b6829b8b899d5479445e99b0ffc43ff92d)
|
1106 | [#53](https://github.com/npm/cli/pull/53)
|
1107 | Correct `npm@6.4.0` release date in changelog.
|
1108 | ([@charmander](https://github.com/charmander))
|
1109 | * [`3fea3166e`](https://github.com/npm/cli/commit/3fea3166eb4f43f574fcfd9ee71a171feea2bc29)
|
1110 | [#55](https://github.com/npm/cli/pull/55)
|
1111 | Align command descriptions in help text.
|
1112 | ([@erik](https://github.com/erik))
|
1113 |
|
1114 | ## v6.4.0 (2018-08-09):
|
1115 |
|
1116 | ### NEW FEATURES
|
1117 |
|
1118 | * [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)
|
1119 | [npm/cli#8](https://github.com/npm/cli/pull/8)
|
1120 | Search for authentication token defined by environment variables by preventing
|
1121 | the translation layer from env variable to npm option from breaking
|
1122 | `:_authToken`.
|
1123 | ([@mkhl](https://github.com/mkhl))
|
1124 | * [`84bfd23e7`](https://github.com/npm/cli/commit/84bfd23e7d6434d30595594723a6e1976e84b022)
|
1125 | [npm/cli#35](https://github.com/npm/cli/pull/35)
|
1126 | Stop filtering out non-IPv4 addresses from `local-addrs`, making npm actually
|
1127 | use IPv6 addresses when it must.
|
1128 | ([@valentin2105](https://github.com/valentin2105))
|
1129 | * [`792c8c709`](https://github.com/npm/cli/commit/792c8c709dc7a445687aa0c8cba5c50bc4ed83fd)
|
1130 | [npm/cli#31](https://github.com/npm/cli/pull/31)
|
1131 | configurable audit level for non-zero exit
|
1132 | `npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level.
|
1133 | Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found.
|
1134 | Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected.
|
1135 | ([@lennym](https://github.com/lennym))
|
1136 |
|
1137 | ### BUGFIXES
|
1138 |
|
1139 | * [`d81146181`](https://github.com/npm/cli/commit/d8114618137bb5b9a52a86711bb8dc18bfc8e60c)
|
1140 | [npm/cli#32](https://github.com/npm/cli/pull/32)
|
1141 | Don't check for updates to npm when we are updating npm itself.
|
1142 | ([@olore](https://github.com/olore))
|
1143 |
|
1144 | ### DEPENDENCY UPDATES
|
1145 |
|
1146 | A very special dependency update event! Since the [release of
|
1147 | `node-gyp@3.8.0`](https://github.com/nodejs/node-gyp/pull/1521), an awkward
|
1148 | version conflict that was preventing `request` from begin flattened was
|
1149 | resolved. This means two things:
|
1150 |
|
1151 | 1. We've cut down the npm tarball size by another 200kb, to 4.6MB
|
1152 | 2. `npm audit` now shows no vulnerabilities for npm itself!
|
1153 |
|
1154 | Thanks, [@rvagg](https://github.com/rvagg)!
|
1155 |
|
1156 | * [`866d776c2`](https://github.com/npm/cli/commit/866d776c27f80a71309389aaab42825b2a0916f6)
|
1157 | `request@2.87.0`
|
1158 | ([@simov](https://github.com/simov))
|
1159 | * [`f861c2b57`](https://github.com/npm/cli/commit/f861c2b579a9d4feae1653222afcefdd4f0e978f)
|
1160 | `node-gyp@3.8.0`
|
1161 | ([@rvagg](https://github.com/rvagg))
|
1162 | * [`32e6947c6`](https://github.com/npm/cli/commit/32e6947c60db865257a0ebc2f7e754fedf7a6fc9)
|
1163 | [npm/cli#39](https://github.com/npm/cli/pull/39)
|
1164 | `colors@1.1.2`:
|
1165 | REVERT REVERT, newer versions of this library are broken and print ansi
|
1166 | codes even when disabled.
|
1167 | ([@iarna](https://github.com/iarna))
|
1168 | * [`beb96b92c`](https://github.com/npm/cli/commit/beb96b92caf061611e3faafc7ca10e77084ec335)
|
1169 | `libcipm@2.0.1`
|
1170 | ([@zkat](https://github.com/zkat))
|
1171 | * [`348fc91ad`](https://github.com/npm/cli/commit/348fc91ad223ff91cd7bcf233018ea1d979a2af1)
|
1172 | `validate-npm-package-license@3.0.4`: Fixes errors with empty or string-only
|
1173 | license fields.
|
1174 | ([@Gudahtt](https://github.com/Gudahtt))
|
1175 | * [`e57d34575`](https://github.com/npm/cli/commit/e57d3457547ef464828fc6f82ae4750f3e511550)
|
1176 | `iferr@1.0.2`
|
1177 | ([@shesek](https://github.com/shesek))
|
1178 | * [`46f1c6ad4`](https://github.com/npm/cli/commit/46f1c6ad4b2fd5b0d7ec879b76b76a70a3a2595c)
|
1179 | `tar@4.4.6`
|
1180 | ([@isaacs](https://github.com/isaacs))
|
1181 | * [`50df1bf69`](https://github.com/npm/cli/commit/50df1bf691e205b9f13e0fff0d51a68772c40561)
|
1182 | `hosted-git-info@2.7.1`
|
1183 | ([@iarna](https://github.com/iarna))
|
1184 | ([@Erveon](https://github.com/Erveon))
|
1185 | ([@huochunpeng](https://github.com/huochunpeng))
|
1186 |
|
1187 | ### DOCUMENTATION
|
1188 |
|
1189 | * [`af98e76ed`](https://github.com/npm/cli/commit/af98e76ed96af780b544962aa575585b3fa17b9a)
|
1190 | [npm/cli#34](https://github.com/npm/cli/pull/34)
|
1191 | Remove `npm publish` from list of commands not affected by `--dry-run`.
|
1192 | ([@joebowbeer](https://github.com/joebowbeer))
|
1193 | * [`e2b0f0921`](https://github.com/npm/cli/commit/e2b0f092193c08c00f12a6168ad2bd9d6e16f8ce)
|
1194 | [npm/cli#36](https://github.com/npm/cli/pull/36)
|
1195 | Tweak formatting in repository field examples.
|
1196 | ([@noahbenham](https://github.com/noahbenham))
|
1197 | * [`e2346e770`](https://github.com/npm/cli/commit/e2346e7702acccefe6d711168c2b0e0e272e194a)
|
1198 | [npm/cli#14](https://github.com/npm/cli/pull/14)
|
1199 | Used `process.env` examples to make accessing certain `npm run-scripts`
|
1200 | environment variables more clear.
|
1201 | ([@mwarger](https://github.com/mwarger))
|
1202 |
|
1203 | ## v6.3.0 (2018-08-01):
|
1204 |
|
1205 | This is basically the same as the prerelease, but two dependencies have been
|
1206 | bumped due to bugs that had been around for a while.
|
1207 |
|
1208 | * [`0a22be42e`](https://github.com/npm/cli/commit/0a22be42eb0d40cd0bd87e68c9e28fc9d72c0e19)
|
1209 | `figgy-pudding@3.2.0`
|
1210 | ([@zkat](https://github.com/zkat))
|
1211 | * [`0096f6997`](https://github.com/npm/cli/commit/0096f69978d2f40b170b28096f269b0b0008a692)
|
1212 | `cacache@11.1.0`
|
1213 | ([@zkat](https://github.com/zkat))
|
1214 |
|
1215 | ## v6.3.0-next.0 (2018-07-25):
|
1216 |
|
1217 | ### NEW FEATURES
|
1218 |
|
1219 | * [`ad0dd226f`](https://github.com/npm/cli/commit/ad0dd226fb97a33dcf41787ae7ff282803fb66f2)
|
1220 | [npm/cli#26](https://github.com/npm/cli/pull/26)
|
1221 | `npm version` now supports a `--preid` option to specify the preid for
|
1222 | prereleases. For example, `npm version premajor --preid rc` will tag a version
|
1223 | like `2.0.0-rc.0`.
|
1224 | ([@dwilches](https://github.com/dwilches))
|
1225 |
|
1226 | ### MESSAGING IMPROVEMENTS
|
1227 |
|
1228 | * [`c1dad1e99`](https://github.com/npm/cli/commit/c1dad1e994827f2eab7a13c0f6454f4e4c22ebc2)
|
1229 | [npm/cli#6](https://github.com/npm/cli/pull/6)
|
1230 | Make `npm audit fix` message provide better instructions for vulnerabilities
|
1231 | that require manual review.
|
1232 | ([@bradsk88](https://github.com/bradsk88))
|
1233 | * [`15c1130fe`](https://github.com/npm/cli/commit/15c1130fe81961706667d845aad7a5a1f70369f3)
|
1234 | Fix missing colon next to tarball url in new `npm view` output.
|
1235 | ([@zkat](https://github.com/zkat))
|
1236 | * [`21cf0ab68`](https://github.com/npm/cli/commit/21cf0ab68cf528d5244ae664133ef400bdcfbdb6)
|
1237 | [npm/cli#24](https://github.com/npm/cli/pull/24)
|
1238 | Use the default OTP explanation everywhere except when the context is
|
1239 | "OTP-aware" (like when setting double-authentication). This improves the
|
1240 | overall CLI messaging when prompting for an OTP code.
|
1241 | ([@jdeniau](https://github.com/jdeniau))
|
1242 |
|
1243 | ### MISC
|
1244 |
|
1245 | * [`a9ac8712d`](https://github.com/npm/cli/commit/a9ac8712dfafcb31a4e3deca24ddb92ff75e942d)
|
1246 | [npm/cli#21](https://github.com/npm/cli/pull/21)
|
1247 | Use the extracted `stringify-package` package.
|
1248 | ([@dpogue](https://github.com/dpogue))
|
1249 | * [`9db15408c`](https://github.com/npm/cli/commit/9db15408c60be788667cafc787116555507dc433)
|
1250 | [npm/cli#27](https://github.com/npm/cli/pull/27)
|
1251 | `wrappy` was previously added to dependencies in order to flatten it, but we
|
1252 | no longer do legacy-style for npm itself, so it has been removed from
|
1253 | `package.json`.
|
1254 | ([@rickschubert](https://github.com/rickschubert))
|
1255 |
|
1256 | ### DOCUMENTATION
|
1257 |
|
1258 | * [`3242baf08`](https://github.com/npm/cli/commit/3242baf0880d1cdc0e20b546d3c1da952e474444)
|
1259 | [npm/cli#13](https://github.com/npm/cli/pull/13)
|
1260 | Update more dead links in README.md.
|
1261 | ([@u32i64](https://github.com/u32i64))
|
1262 | * [`06580877b`](https://github.com/npm/cli/commit/06580877b6023643ec780c19d84fbe120fe5425c)
|
1263 | [npm/cli#19](https://github.com/npm/cli/pull/19)
|
1264 | Update links in docs' `index.html` to refer to new bug/PR URLs.
|
1265 | ([@watilde](https://github.com/watilde))
|
1266 | * [`ca03013c2`](https://github.com/npm/cli/commit/ca03013c23ff38e12902e9569a61265c2d613738)
|
1267 | [npm/cli#15](https://github.com/npm/cli/pull/15)
|
1268 | Fix some typos in file-specifiers docs.
|
1269 | ([@Mstrodl](https://github.com/Mstrodl))
|
1270 | * [`4f39f79bc`](https://github.com/npm/cli/commit/4f39f79bcacef11bf2f98d09730bc94d0379789b)
|
1271 | [npm/cli#16](https://github.com/npm/cli/pull/16)
|
1272 | Fix some typos in file-specifiers and package-lock docs.
|
1273 | ([@watilde](https://github.com/watilde))
|
1274 | * [`35e51f79d`](https://github.com/npm/cli/commit/35e51f79d1a285964aad44f550811aa9f9a72cd8)
|
1275 | [npm/cli#18](https://github.com/npm/cli/pull/18)
|
1276 | Update build status badge url in README.
|
1277 | ([@watilde](https://github.com/watilde))
|
1278 | * [`a67db5607`](https://github.com/npm/cli/commit/a67db5607ba2052b4ea44f66657f98b758fb4786)
|
1279 | [npm/cli#17](https://github.com/npm/cli/pull/17/)
|
1280 | Replace TROUBLESHOOTING.md with [posts in
|
1281 | npm.community](https://npm.community/c/support/troubleshooting).
|
1282 | ([@watilde](https://github.com/watilde))
|
1283 | * [`e115f9de6`](https://github.com/npm/cli/commit/e115f9de65bf53711266152fc715a5012f7d3462)
|
1284 | [npm/cli#7](https://github.com/npm/cli/pull/7)
|
1285 | Use https URLs in documentation when appropriate. Happy [Not Secure Day](https://arstechnica.com/gadgets/2018/07/todays-the-day-that-chrome-brands-plain-old-http-as-not-secure/)!
|
1286 | ([@XhmikosR](https://github.com/XhmikosR))
|
1287 |
|
1288 | ## v6.2.0 (2018-07-13):
|
1289 |
|
1290 | In case you missed it, [we
|
1291 | moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We
|
1292 | look forward to seeing future PRs landing in
|
1293 | [npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with
|
1294 | you all in [npm.community](https://npm.community). Go check it out!
|
1295 |
|
1296 | This final release of `npm@6.2.0` includes a couple of features that weren't
|
1297 | quite ready on time but that we'd still like to include. Enjoy!
|
1298 |
|
1299 | ### FEATURES
|
1300 |
|
1301 | * [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de)
|
1302 | [#20554](https://github.com/npm/npm/pull/20554)
|
1303 | Add support for tab-separated output for `npm audit` data with the
|
1304 | `--parseable` flag.
|
1305 | ([@luislobo](https://github.com/luislobo))
|
1306 | * [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8)
|
1307 | [#12697](https://github.com/npm/npm/pull/12697)
|
1308 | Add new `sign-git-commit` config to control whether the git commit itself gets
|
1309 | signed, or just the tag (which is the default).
|
1310 | ([@tribou](https://github.com/tribou))
|
1311 |
|
1312 | ### FIXES
|
1313 |
|
1314 | * [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff)
|
1315 | [#19418](https://github.com/npm/npm/pull/19418)
|
1316 | Do not use `SET` to fetch the env in git-bash or Cygwin.
|
1317 | ([@gucong3000](https://github.com/gucong3000))
|
1318 |
|
1319 | ### DEPENDENCY BUMPS
|
1320 |
|
1321 | * [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3)
|
1322 | `request@2.81.0`: Downgraded to allow better deduplication. This does
|
1323 | introduce a bunch of `hoek`-related audit reports, but they don't affect npm
|
1324 | itself so we consider it safe. We'll upgrade `request` again once `node-gyp`
|
1325 | unpins it.
|
1326 | ([@simov](https://github.com/simov))
|
1327 | * [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c)
|
1328 | `node-gyp@3.7.0`
|
1329 | ([@MylesBorins](https://github.com/MylesBorins))
|
1330 | * [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349)
|
1331 | `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With
|
1332 | this dependency bump, we've removed `lodash` from our tree, which cut back
|
1333 | tarball size by another 300kb.
|
1334 | ([@Turbo87](https://github.com/Turbo87))
|
1335 | * [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096)
|
1336 | `npm-audit-report@1.3.1`
|
1337 | ([@zkat](https://github.com/zkat))
|
1338 | * [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c)
|
1339 | Add `cli-table3` to bundleDeps.
|
1340 | ([@iarna](https://github.com/iarna))
|
1341 | * [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d)
|
1342 | Make `standard` happy.
|
1343 | ([@iarna](https://github.com/iarna))
|
1344 |
|
1345 | ### DOCS
|
1346 |
|
1347 | * [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631)
|
1348 | [#21165](https://github.com/npm/npm/pull/21165)
|
1349 | Fix some markdown formatting in npm-disputes.md.
|
1350 | ([@hchiam](https://github.com/hchiam))
|
1351 | * [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171)
|
1352 | [#20920](https://github.com/npm/npm/pull/20920)
|
1353 | Explicitly state that republishing an unpublished package requires a 72h
|
1354 | waiting period.
|
1355 | ([@gmattie](https://github.com/gmattie))
|
1356 | * [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c)
|
1357 | Replace references to the old repo or issue tracker. We're at npm/cli now!
|
1358 | ([@zkat](https://github.com/zkat))
|
1359 |
|
1360 | ## v6.2.0-next.1 (2018-07-05):
|
1361 |
|
1362 | This is a quick patch to the release to fix an issue that was preventing users
|
1363 | from installing `npm@next`.
|
1364 |
|
1365 | * [`ecdcbd745`](https://github.com/npm/npm/commit/ecdcbd745ae1edd9bdd102dc3845a7bc76e1c5fb)
|
1366 | [#21129](https://github.com/npm/npm/pull/21129)
|
1367 | Remove postinstall script that depended on source files, thus preventing
|
1368 | `npm@next` from being installable from the registry.
|
1369 | ([@zkat](https://github.com/zkat))
|
1370 |
|
1371 | ## v6.2.0-next.0 (2018-06-28):
|
1372 |
|
1373 | ### NEW FEATURES
|
1374 |
|
1375 | * [`ce0793358`](https://github.com/npm/npm/commit/ce07933588ec2da1cc1980f93bdaa485d6028ae2)
|
1376 | [#20750](https://github.com/npm/npm/pull/20750)
|
1377 | You can now disable the update notifier entirely by using
|
1378 | `--no-update-notifier` or setting it in your config with `npm config set
|
1379 | update-notifier false`.
|
1380 | ([@travi](https://github.com/travi))
|
1381 | * [`d2ad776f6`](https://github.com/npm/npm/commit/d2ad776f6dcd92ae3937465736dcbca171131343)
|
1382 | [#20879](https://github.com/npm/npm/pull/20879)
|
1383 | When `npm run-script <script>` fails due to a typo or missing script, npm will
|
1384 | now do a "did you mean?..." for scripts that do exist.
|
1385 | ([@watilde](https://github.com/watilde))
|
1386 |
|
1387 | ### BUGFIXES
|
1388 |
|
1389 | * [`8f033d72d`](https://github.com/npm/npm/commit/8f033d72da3e84a9dbbabe3a768693817af99912)
|
1390 | [#20948](https://github.com/npm/npm/pull/20948)
|
1391 | Fix the regular expression matching in `xcode_emulation` in `node-gyp` to also
|
1392 | handle version numbers with multiple-digit major versions which would
|
1393 | otherwise break under use of XCode 10.
|
1394 | ([@Trott](https://github.com/Trott))
|
1395 | * [`c8ba7573a`](https://github.com/npm/npm/commit/c8ba7573a4ea95789f674ce038762d6a77a8b047)
|
1396 | Stop trying to hoist/dedupe bundles dependencies.
|
1397 | ([@iarna](https://github.com/iarna))
|
1398 | * [`cd698f068`](https://github.com/npm/npm/commit/cd698f06840b7c9407ac802efa96d16464722a7d)
|
1399 | [#20762](https://github.com/npm/npm/pull/20762)
|
1400 | Add synopsis to brief help for `npm audit` and suppress trailing newline.
|
1401 | ([@wyardley](https://github.com/wyardley))
|
1402 | * [`6808ee3bd`](https://github.com/npm/npm/commit/6808ee3bd59560b1334a18aa6c6e0120094b03c0)
|
1403 | [#20881](https://github.com/npm/npm/pull/20881)
|
1404 | Exclude /.github directory from npm tarball.
|
1405 | ([@styfle](https://github.com/styfle))
|
1406 | * [`177cbb476`](https://github.com/npm/npm/commit/177cbb4762c1402bfcbf0636c4bc4905fd684fc1)
|
1407 | [#21105](https://github.com/npm/npm/pull/21105)
|
1408 | Add suggestion to use a temporary cache instead of `npm cache clear --force`.
|
1409 | ([@karanjthakkar](https://github.com/karanjthakkar))
|
1410 |
|
1411 | ### DOCS
|
1412 |
|
1413 | * [`7ba3fca00`](https://github.com/npm/npm/commit/7ba3fca00554b884eb47f2ed661693faf2630b27)
|
1414 | [#20855](https://github.com/npm/npm/pull/20855)
|
1415 | Direct people to npm.community instead of the GitHub issue tracker on error.
|
1416 | ([@zkat](https://github.com/zkat))
|
1417 | * [`88efbf6b0`](https://github.com/npm/npm/commit/88efbf6b0b403c5107556ff9e1bb7787a410d14d)
|
1418 | [#20859](https://github.com/npm/npm/pull/20859)
|
1419 | Fix typo in registry docs.
|
1420 | ([@strugee](https://github.com/strugee))
|
1421 | * [`61bf827ae`](https://github.com/npm/npm/commit/61bf827aea6f98bba08a54e60137d4df637788f9)
|
1422 | [#20947](https://github.com/npm/npm/pull/20947)
|
1423 | Fixed a small grammar error in the README.
|
1424 | ([@bitsol](https://github.com/bitsol))
|
1425 | * [`f5230c90a`](https://github.com/npm/npm/commit/f5230c90afef40f445bf148cbb16d6129a2dcc19)
|
1426 | [#21018](https://github.com/npm/npm/pull/21018)
|
1427 | Small typo fix in CONTRIBUTING.md.
|
1428 | ([@reggi](https://github.com/reggi))
|
1429 | * [`833efe4b2`](https://github.com/npm/npm/commit/833efe4b2abcef58806f823d77ab8bb8f4f781c6)
|
1430 | [#20986](https://github.com/npm/npm/pull/20986)
|
1431 | Document current structure/expectations around package tarballs.
|
1432 | ([@Maximaximum](https://github.com/Maximaximum))
|
1433 | * [`9fc0dc4f5`](https://github.com/npm/npm/commit/9fc0dc4f58d728bac6a8db7143d04863d7b653db)
|
1434 | [#21019](https://github.com/npm/npm/pull/21019)
|
1435 | Clarify behavior of `npm link ../path` shorthand.
|
1436 | ([@davidgilbertson](https://github.com/davidgilbertson))
|
1437 | * [`3924c72d0`](https://github.com/npm/npm/commit/3924c72d06b9216ac2b6a9d951fd565a1d5eda89)
|
1438 | [#21064](https://github.com/npm/npm/pull/21064)
|
1439 | Add missing "if"
|
1440 | ([@roblourens](https://github.com/roblourens))
|
1441 |
|
1442 | ### DEPENDENCY SHUFFLE!
|
1443 |
|
1444 | We did some reshuffling and moving around of npm's own dependencies. This
|
1445 | significantly reduces the total bundle size of the npm pack, from 8MB to 4.8MB
|
1446 | for the distributed tarball! We also moved around what we actually commit to the
|
1447 | repo as far as devDeps go.
|
1448 |
|
1449 | * [`0483f5c5d`](https://github.com/npm/npm/commit/0483f5c5deaf18c968a128657923103e49f4e67a)
|
1450 | Flatten and dedupe our dependencies!
|
1451 | ([@iarna](https://github.com/iarna))
|
1452 | * [`ef9fa1ceb`](https://github.com/npm/npm/commit/ef9fa1ceb5f9d175fd453138b1a26d45a5071dfd)
|
1453 | Remove unused direct dependency `ansi-regex`.
|
1454 | ([@iarna](https://github.com/iarna))
|
1455 | * [`0d14b0bc5`](https://github.com/npm/npm/commit/0d14b0bc59812f4e33798194e11ffacbea3c0493)
|
1456 | Reshuffle ansi-regex for better deduping.
|
1457 | ([@iarna](https://github.com/iarna))
|
1458 | * [`68a101859`](https://github.com/npm/npm/commit/68a101859b2b6f78b2e7c3a936492acdb15f7c4a)
|
1459 | Reshuffle strip-ansi for better deduping.
|
1460 | ([@iarna](https://github.com/iarna))
|
1461 | * [`0d5251f97`](https://github.com/npm/npm/commit/0d5251f97dc8b8b143064869e530d465c757ffbb)
|
1462 | Reshuffle is-fullwidth-code-point for better deduping.
|
1463 | ([@iarna](https://github.com/iarna))
|
1464 | * [`2d0886632`](https://github.com/npm/npm/commit/2d08866327013522fc5fbe61ed872b8f30e92775)
|
1465 | Add fake-registry, npm-registry-mock replacement.
|
1466 | ([@iarna](https://github.com/iarna))
|
1467 |
|
1468 | ### DEPENDENCIES
|
1469 |
|
1470 | * [`8cff8eea7`](https://github.com/npm/npm/commit/8cff8eea75dc34c9c1897a7a6f65d7232bb0c64c)
|
1471 | `tar@4.4.3`
|
1472 | ([@zkat](https://github.com/zkat))
|
1473 | * [`bfc4f873b`](https://github.com/npm/npm/commit/bfc4f873bd056b7e3aee389eda4ecd8a2e175923)
|
1474 | `pacote@8.1.6`
|
1475 | ([@zkat](https://github.com/zkat))
|
1476 | * [`532096163`](https://github.com/npm/npm/commit/53209616329119be8fcc29db86a43cc8cf73454d)
|
1477 | `libcipm@2.0.0`
|
1478 | ([@zkat](https://github.com/zkat))
|
1479 | * [`4a512771b`](https://github.com/npm/npm/commit/4a512771b67aa06505a0df002a9027c16a238c71)
|
1480 | `request@2.87.0`
|
1481 | ([@iarna](https://github.com/iarna))
|
1482 | * [`b7cc48dee`](https://github.com/npm/npm/commit/b7cc48deee45da1feab49aa1dd4d92e33c9bcac8)
|
1483 | `which@1.3.1`
|
1484 | ([@iarna](https://github.com/iarna))
|
1485 | * [`bae657c28`](https://github.com/npm/npm/commit/bae657c280f6ea8e677509a9576e1b47c65c5441)
|
1486 | `tar@4.4.4`
|
1487 | ([@iarna](https://github.com/iarna))
|
1488 | * [`3d46e5c4e`](https://github.com/npm/npm/commit/3d46e5c4e3c5fecd9bf05a7425a16f2e8ad5c833)
|
1489 | `JSONStream@1.3.3`
|
1490 | ([@iarna](https://github.com/iarna))
|
1491 | * [`d0a905daf`](https://github.com/npm/npm/commit/d0a905dafc7e3fcd304e8053acbe3da40ba22554)
|
1492 | `is-cidr@2.0.6`
|
1493 | ([@iarna](https://github.com/iarna))
|
1494 | * [`4fc1f815f`](https://github.com/npm/npm/commit/4fc1f815fec5a7f6f057cf305e01d4126331d1f2)
|
1495 | `marked@0.4.0`
|
1496 | ([@iarna](https://github.com/iarna))
|
1497 | * [`f72202944`](https://github.com/npm/npm/commit/f722029441a088d03df94bdfdeeec51cfd318659)
|
1498 | `tap@12.0.1`
|
1499 | ([@iarna](https://github.com/iarna))
|
1500 | * [`bdce96eb3`](https://github.com/npm/npm/commit/bdce96eb3c30fcff873aa3f1190e8ae4928d690b)
|
1501 | `npm-profile@3.0.2`
|
1502 | ([@iarna](https://github.com/iarna))
|
1503 | * [`fe4240e85`](https://github.com/npm/npm/commit/fe4240e852144770bf76d7b1952056ca5baa63cf)
|
1504 | `uuid@3.3.2`
|
1505 | ([@zkat](https://github.com/zkat))
|
1506 |
|
1507 | ## v6.1.0 (2018-05-17):
|
1508 |
|
1509 | ### FIX WRITE AFTER END ERROR
|
1510 |
|
1511 | First introduced in 5.8.0, this finally puts to bed errors where you would
|
1512 | occasionally see `Error: write after end at MiniPass.write`.
|
1513 |
|
1514 | * [`171f3182f`](https://github.com/npm/npm/commit/171f3182f32686f2f94ea7d4b08035427e0b826e)
|
1515 | [node-tar#180](https://github.com/npm/node-tar/issues/180)
|
1516 | [npm.community#35](https://npm.community/t/write-after-end-when-installing-packages-with-5-8-and-later/35)
|
1517 | `pacote@8.1.5`: Fix write-after-end errors.
|
1518 | ([@zkat](https://github.com/zkat))
|
1519 |
|
1520 | ### DETECT CHANGES IN GIT SPECIFIERS
|
1521 |
|
1522 | * [`0e1726c03`](https://github.com/npm/npm/commit/0e1726c0350a02d5a60f5fddb1e69c247538625e)
|
1523 | We can now determine if the commitid of a git dependency in the lockfile is derived
|
1524 | from the specifier in the package.json and if it isn't we now trigger an update for it.
|
1525 | ([@iarna](https://github.com/iarna))
|
1526 |
|
1527 | ### OTHER BUGS
|
1528 |
|
1529 | * [`442d2484f`](https://github.com/npm/npm/commit/442d2484f686e3a371b07f8473a17708f84d9603)
|
1530 | [`2f0c88351`](https://github.com/npm/npm/commit/2f0c883519f17c94411dd1d9877c5666f260c12f)
|
1531 | [`631d30a34`](https://github.com/npm/npm/commit/631d30a340f5805aed6e83f47a577ca4125599b2)
|
1532 | When requesting the update of a direct dependency that was also a
|
1533 | transitive dependency to a version incompatible with the transitive
|
1534 | requirement and you had a lock-file but did not have a `node_modules`
|
1535 | folder then npm would fail to provide a new copy of the transitive
|
1536 | dependency, resulting in an invalid lock-file that could not self heal.
|
1537 | ([@iarna](https://github.com/iarna))
|
1538 | * [`be5dd0f49`](https://github.com/npm/npm/commit/be5dd0f496ec1485b1ea3094c479dfc17bd50d82)
|
1539 | [#20715](https://github.com/npm/npm/pull/20715)
|
1540 | Cleanup output of `npm ci` summary report.
|
1541 | ([@legodude17](https://github.com/legodude17))
|
1542 | * [`98ffe4adb`](https://github.com/npm/npm/commit/98ffe4adb55a6f4459271856de2e27e95ee63375)
|
1543 | Node.js now has a test that scans for things that look like conflict
|
1544 | markers in source code. This was triggering false positives on a fixture in a test
|
1545 | of npm's ability to heal lockfiles with conflicts in them.
|
1546 | ([@iarna](https://github.com/iarna))
|
1547 |
|
1548 | ### DEPENDENCY UPDATES
|
1549 |
|
1550 | * [`3f2e306b8`](https://github.com/npm/npm/commit/3f2e306b884a027df03f64524beb8658ce1772cb)
|
1551 | Using `npm audit fix`, replace some transitive dependencies with security
|
1552 | issues with versions that don't have any.
|
1553 | ([@iarna](https://github.com/iarna))
|
1554 | * [`1d07134e0`](https://github.com/npm/npm/commit/1d07134e0b157f7484a20ce6987ff57951842954)
|
1555 | `tar@4.4.1`:
|
1556 | Dropping to 4.4.1 from 4.4.2 due to https://github.com/npm/node-tar/issues/183
|
1557 | ([@zkat](https://github.com/zkat))
|
1558 |
|
1559 |
|
1560 | ## v6.1.0-next.0 (2018-05-17):
|
1561 |
|
1562 | Look at that! A feature bump! `npm@6` was super-exciting not just because it
|
1563 | used a bigger number than ever before, but also because it included a super
|
1564 | shiny new command: `npm audit`. Well, we've kept working on it since then and
|
1565 | have some really nice improvements for it. You can expect more of them, and the
|
1566 | occasional fix, in the next few releases as more users start playing with it and
|
1567 | we get more feedback about what y'all would like to see from something like
|
1568 | this.
|
1569 |
|
1570 | I, for one, have started running it (and the new subcommand...) in all my
|
1571 | projects, and it's one of those things that I don't know how I ever functioned
|
1572 | -without- it! This will make a world of difference to so many people as far as
|
1573 | making the npm ecosystem a higher-quality, safer commons for all of us.
|
1574 |
|
1575 | This is also a good time to remind y'all that we have a new [RFCs
|
1576 | repository](https://github.com/npm/rfcs), along with a new process for them.
|
1577 | This repo is open to anyone's RFCs, and has already received some great ideas
|
1578 | about where we can take the CLI (and, to a certain extent, the registry). It's a
|
1579 | great place to get feedback, and completely replaces feature requests in the
|
1580 | main repo, so we won't be accepting feature requests there at all anymore. Check
|
1581 | it out if you have something you'd like to suggest, or if you want to keep track
|
1582 | of what the future might look like!
|
1583 |
|
1584 | ### NEW FEATURE: `npm audit fix`
|
1585 |
|
1586 | This is the biggie with this release! `npm audit fix` does exactly what it says
|
1587 | on the tin. It takes all the actionable reports from your `npm audit` and runs
|
1588 | the installs automatically for you, so you don't have to try to do all that
|
1589 | mechanical work yourself!
|
1590 |
|
1591 | Note that by default, `npm audit fix` will stick to semver-compatible changes,
|
1592 | so you should be able to safely run it on most projects and carry on with your
|
1593 | day without having to track down what breaking changes were included. If you
|
1594 | want your (toplevel) dependencies to accept semver-major bumps as well, you can
|
1595 | use `npm audit fix --force` and it'll toss those in, as well. Since it's running
|
1596 | the npm installer under the hood, it also supports `--production` and
|
1597 | `--only=dev` flags, as well as things like `--dry-run`, `--json`, and
|
1598 | `--package-lock-only`, if you want more control over what it does.
|
1599 |
|
1600 | Give it a whirl and tell us what you think! See `npm help audit` for full docs!
|
1601 |
|
1602 | * [`3800a660d`](https://github.com/npm/npm/commit/3800a660d99ca45c0175061dbe087520db2f54b7)
|
1603 | Add `npm audit fix` subcommand to automatically fix detected vulnerabilities.
|
1604 | ([@zkat](https://github.com/zkat))
|
1605 |
|
1606 | ### OTHER NEW `audit` FEATURES
|
1607 |
|
1608 | * [`1854b1c7f`](https://github.com/npm/npm/commit/1854b1c7f09afceb49627e539a086d8a3565601c)
|
1609 | [#20568](https://github.com/npm/npm/pull/20568)
|
1610 | Add support for `npm audit --json` to print the report in JSON format.
|
1611 | ([@finnp](https://github.com/finnp))
|
1612 | * [`85b86169d`](https://github.com/npm/npm/commit/85b86169d9d0423f50893d2ed0c7274183255abe)
|
1613 | [#20570](https://github.com/npm/npm/pull/20570)
|
1614 | Include number of audited packages in `npm install` summary output.
|
1615 | ([@zkat](https://github.com/zkat))
|
1616 | * [`957cbe275`](https://github.com/npm/npm/commit/957cbe27542d30c33e58e7e6f2f04eeb64baf5cd)
|
1617 | `npm-audit-report@1.2.1`:
|
1618 | Overhaul audit install and detail output format. The new format is terser and
|
1619 | fits more closely into the visual style of the CLI, while still providing you
|
1620 | with the important bits of information you need. They also include a bit more
|
1621 | detail on the footer about what actions you can take!
|
1622 | ([@zkat](https://github.com/zkat))
|
1623 |
|
1624 | ### NEW FEATURE: GIT DEPS AND `npm init <pkg>`!
|
1625 |
|
1626 | Another exciting change that came with `npm@6` was the new `npm init` command
|
1627 | that allows for community-authored generators. That means you can, for example,
|
1628 | do `npm init react-app` and it'll one-off download, install, and run
|
1629 | [`create-react-app`](https://npm.im/create-react-app) for you, without requiring
|
1630 | or keeping around any global installs. That is, it basically just calls out to
|
1631 | [`npx`](https://npm.im/npx).
|
1632 |
|
1633 | The first version of this command only really supported registry dependencies,
|
1634 | but now, [@jdalton](https://github.com/jdalton) went ahead and extended this
|
1635 | feature so you can use hosted git dependencies, and their shorthands.
|
1636 |
|
1637 | So go ahead and do `npm init facebook/create-react-app` and it'll grab the
|
1638 | package from the github repo now! Or you can use it with a private github
|
1639 | repository to maintain your organizational scaffolding tools or whatnot. ✨
|
1640 |
|
1641 | * [`483e01180`](https://github.com/npm/npm/commit/483e011803af82e63085ef41b7acce5b22aa791c)
|
1642 | [#20403](https://github.com/npm/npm/pull/20403)
|
1643 | Add support for hosted git packages to `npm init <name>`.
|
1644 | ([@jdalton](https://github.com/jdalton))
|
1645 |
|
1646 | ### BUGFIXES
|
1647 |
|
1648 | * [`a41c0393c`](https://github.com/npm/npm/commit/a41c0393cba710761a15612c6c85c9ef2396e65f)
|
1649 | [#20538](https://github.com/npm/npm/pull/20538)
|
1650 | Make the new `npm view` work when the license field is an object instead of a
|
1651 | string.
|
1652 | ([@zkat](https://github.com/zkat))
|
1653 | * [`eb7522073`](https://github.com/npm/npm/commit/eb75220739302126c94583cc65a5ff12b441e3c6)
|
1654 | [#20582](https://github.com/npm/npm/pull/20582)
|
1655 | Add support for environments (like Docker) where the expected binary for
|
1656 | opening external URLs is not available.
|
1657 | ([@bcoe](https://github.com/bcoe))
|
1658 | * [`212266529`](https://github.com/npm/npm/commit/212266529ae72056bf0876e2cff4b8ba01d09d0f)
|
1659 | [#20536](https://github.com/npm/npm/pull/20536)
|
1660 | Fix a spurious colon in the new update notifier message and add support for
|
1661 | the npm canary.
|
1662 | ([@zkat](https://github.com/zkat))
|
1663 | * [`5ee1384d0`](https://github.com/npm/npm/commit/5ee1384d02c3f11949d7a26ec6322488476babe6)
|
1664 | [#20597](https://github.com/npm/npm/pull/20597)
|
1665 | Infer a version range when a `package.json` has a dist-tag instead of a
|
1666 | version range in one of its dependency specs. Previously, this would cause
|
1667 | dependencies to be flagged as invalid.
|
1668 | ([@zkat](https://github.com/zkat))
|
1669 | * [`4fa68ae41`](https://github.com/npm/npm/commit/4fa68ae41324293e59584ca6cf0ac24b3e0825bb)
|
1670 | [#20585](https://github.com/npm/npm/pull/20585)
|
1671 | Make sure scoped bundled deps are shown in the new publish preview, too.
|
1672 | ([@zkat](https://github.com/zkat))
|
1673 | * [`1f3ee6b7e`](https://github.com/npm/npm/commit/1f3ee6b7e1b36b52bdedeb9241296d4e66561d48)
|
1674 | `cacache@11.0.2`:
|
1675 | Stop dropping `size` from metadata on `npm cache verify`.
|
1676 | ([@jfmartinez](https://github.com/jfmartinez))
|
1677 | * [`91ef93691`](https://github.com/npm/npm/commit/91ef93691a9d6ce7c016fefdf7da97854ca2b2ca)
|
1678 | [#20513](https://github.com/npm/npm/pull/20513)
|
1679 | Fix nested command aliases.
|
1680 | ([@mmermerkaya](https://github.com/mmermerkaya))
|
1681 | * [`18b2b3cf7`](https://github.com/npm/npm/commit/18b2b3cf71a438648ced1bd13faecfb50c71e979)
|
1682 | `npm-lifecycle@2.0.3`:
|
1683 | Make sure different versions of the `Path` env var on Windows all get
|
1684 | `node_modules/.bin` prepended when running lifecycle scripts.
|
1685 | ([@laggingreflex](https://github.com/laggingreflex))
|
1686 |
|
1687 | ### DOCUMENTATION
|
1688 |
|
1689 | * [`a91d87072`](https://github.com/npm/npm/commit/a91d87072f292564e58dcab508b5a8c6702b9aae)
|
1690 | [#20550](https://github.com/npm/npm/pull/20550)
|
1691 | Update required node versions in README.
|
1692 | ([@legodude17](https://github.com/legodude17))
|
1693 | * [`bf3cfa7b8`](https://github.com/npm/npm/commit/bf3cfa7b8b351714c4ec621e1a5867c8450c6fff)
|
1694 | Pull in changelogs from the last `npm@5` release.
|
1695 | ([@iarna](https://github.com/iarna))
|
1696 | * [`b2f14b14c`](https://github.com/npm/npm/commit/b2f14b14ca25203c2317ac2c47366acb50d46e69)
|
1697 | [#20629](https://github.com/npm/npm/pull/20629)
|
1698 | Make tone in `publishConfig` docs more neutral.
|
1699 | ([@jeremyckahn](https://github.com/jeremyckahn))
|
1700 |
|
1701 | ### DEPENDENCY BUMPS
|
1702 |
|
1703 | * [`5fca4eae8`](https://github.com/npm/npm/commit/5fca4eae8a62a7049b1ae06aa0bbffdc6e0ad6cc)
|
1704 | `byte-size@4.0.3`
|
1705 | ([@75lb](https://github.com/75lb))
|
1706 | * [`d9ef3fba7`](https://github.com/npm/npm/commit/d9ef3fba79f87c470889a6921a91f7cdcafa32b9)
|
1707 | `lru-cache@4.1.3`
|
1708 | ([@isaacs](https://github.com/isaacs))
|
1709 | * [`f1baf011a`](https://github.com/npm/npm/commit/f1baf011a0d164f8dc8aa6cd31e89225e3872e3b)
|
1710 | `request@2.86.0`
|
1711 | ([@simonv](https://github.com/simonv))
|
1712 | * [`005fa5420`](https://github.com/npm/npm/commit/005fa542072f09a83f77a9d62c5e53b8f6309371)
|
1713 | `require-inject@1.4.3`
|
1714 | ([@iarna](https://github.com/iarna))
|
1715 | * [`1becdf09a`](https://github.com/npm/npm/commit/1becdf09a2f19716726c88e9a2342e1e056cfc71)
|
1716 | `tap@11.1.5`
|
1717 | ([@isaacs](https://github.com/isaacs))
|
1718 |
|
1719 | ## v6.0.1 (2018-05-09):
|
1720 |
|
1721 | ### AUDIT SHOULDN'T WAIT FOREVER
|
1722 |
|
1723 | This will likely be reduced further with the goal that the audit process
|
1724 | shouldn't noticibly slow down your builds regardless of your network
|
1725 | situation.
|
1726 |
|
1727 | * [`3dcc240db`](https://github.com/npm/npm/commit/3dcc240dba5258532990534f1bd8a25d1698b0bf)
|
1728 | Timeout audit requests eventually.
|
1729 | ([@iarna](https://github.com/iarna))
|
1730 |
|
1731 | ### Looking forward
|
1732 |
|
1733 | We're still a way from having node@11, so now's a good time to ensure we
|
1734 | don't warn about being used with it.
|
1735 |
|
1736 | * [`ed1aebf55`](https://github.com/npm/npm/commit/ed1aebf55)
|
1737 | Allow node@11, when it comes.
|
1738 | ([@iarna](https://github.com/iarna))
|
1739 |
|
1740 | ## v6.0.1-next.0 (2018-05-03):
|
1741 |
|
1742 | ### CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT!
|
1743 |
|
1744 | * [`b267bbbb9`](https://github.com/npm/npm/commit/b267bbbb9ddd551e3dbd162cc2597be041b9382c)
|
1745 | [npm/lockfile#29](https://github.com/npm/lockfile/pull/29)
|
1746 | `lockfile@1.0.4`:
|
1747 | Switches to `signal-exit` to detect abnormal exits and remove locks.
|
1748 | ([@Redsandro](https://github.com/Redsandro))
|
1749 |
|
1750 | ### SHRONKWRAPS AND LACKFILES
|
1751 |
|
1752 | If a published modules had legacy `npm-shrinkwrap.json` we were saving
|
1753 | ordinary registry dependencies (`name@version`) to your `package-lock.json`
|
1754 | as `https://` URLs instead of versions.
|
1755 |
|
1756 | * [`89102c0d9`](https://github.com/npm/npm/commit/89102c0d995c3d707ff2b56995a97a1610f8b532)
|
1757 | When saving the lock-file compute how the dependency is being required instead of using
|
1758 | `_resolved` in the `package.json`. This fixes the bug that was converting
|
1759 | registry dependencies into `https://` dependencies.
|
1760 | ([@iarna](https://github.com/iarna))
|
1761 | * [`676f1239a`](https://github.com/npm/npm/commit/676f1239ab337ff967741895dbe3a6b6349467b6)
|
1762 | When encountering a `https://` URL in our lockfiles that point at our default registry, extract
|
1763 | the version and use them as registry dependencies. This lets us heal
|
1764 | `package-lock.json` files produced by 6.0.0
|
1765 | ([@iarna](https://github.com/iarna))
|
1766 |
|
1767 | ### AUDIT AUDIT EVERYWHERE
|
1768 |
|
1769 | You can't use it _quite_ yet, but we do have a few last moment patches to `npm audit` to make
|
1770 | it even better when it is turned on!
|
1771 |
|
1772 | * [`b2e4f48f5`](https://github.com/npm/npm/commit/b2e4f48f5c07b8ebc94a46ce01a810dd5d6cd20c)
|
1773 | Make sure we hide stream errors on background audit submissions. Previously some classes
|
1774 | of error could end up being displayed (harmlessly) during installs.
|
1775 | ([@iarna](https://github.com/iarna))
|
1776 | * [`1fe0c7fea`](https://github.com/npm/npm/commit/1fe0c7fea226e592c96b8ab22fd9435e200420e9)
|
1777 | Include session and scope in requests (as we do in other requests to the registry).
|
1778 | ([@iarna](https://github.com/iarna))
|
1779 | * [`d04656461`](https://github.com/npm/npm/commit/d046564614639c37e7984fff127c79a8ddcc0c92)
|
1780 | Exit with non-zero status when vulnerabilities are found. So you can have `npm audit` as a test or prepublish step!
|
1781 | ([@iarna](https://github.com/iarna))
|
1782 | * [`fcdbcbacc`](https://github.com/npm/npm/commit/fcdbcbacc16d96a8696dde4b6d7c1cba77828337)
|
1783 | Verify lockfile integrity before running. You'd get an error either way, but this way it's
|
1784 | faster and can give you more concrete instructions on how to fix it.
|
1785 | ([@iarna](https://github.com/iarna))
|
1786 | * [`2ac8edd42`](https://github.com/npm/npm/commit/2ac8edd4248f2393b35896f0300b530e7666bb0e)
|
1787 | Refuse to run in global mode. Audits require a lockfile and globals don't have one. Yet.
|
1788 | ([@iarna](https://github.com/iarna))
|
1789 |
|
1790 | ### DOCUMENTATION IMPROVEMENTS
|
1791 |
|
1792 | * [`b7fca1084`](https://github.com/npm/npm/commit/b7fca1084b0be6f8b87ec0807c6daf91dbc3060a)
|
1793 | [#20407](https://github.com/npm/npm/pull/20407)
|
1794 | Update the lock-file spec doc to mention that we now generate the from field for `git`-type dependencies.
|
1795 | ([@watilde](https://github.com/watilde))
|
1796 | * [`7a6555e61`](https://github.com/npm/npm/commit/7a6555e618e4b8459609b7847a9e17de2d4fa36e)
|
1797 | [#20408](https://github.com/npm/npm/pull/20408)
|
1798 | Describe what the colors in outdated mean.
|
1799 | ([@teameh](https://github.com/teameh))
|
1800 |
|
1801 | ### DEPENDENCY UPDATES
|
1802 |
|
1803 | * [`5e56b3209`](https://github.com/npm/npm/commit/5e56b3209c4719e3c4d7f0d9346dfca3881a5d34)
|
1804 | `npm-audit-report@1.0.8`
|
1805 | ([@evilpacket](https://github.com/evilpacket))
|
1806 | * [`58a0b31b4`](https://github.com/npm/npm/commit/58a0b31b43245692b4de0f1e798fcaf71f8b7c31)
|
1807 | `lock-verify@2.0.2`
|
1808 | ([@iarna](https://github.com/iarna))
|
1809 | * [`e7a8c364f`](https://github.com/npm/npm/commit/e7a8c364f3146ffb94357d8dd7f643e5563e2f2b)
|
1810 | [zkat/pacote#148](https://github.com/zkat/pacote/pull/148)
|
1811 | `pacote@8.1.1`
|
1812 | ([@redonkulus](https://github.com/redonkulus))
|
1813 | * [`46c0090a5`](https://github.com/npm/npm/commit/46c0090a517526dfec9b1b6483ff640227f0cd10)
|
1814 | `tar@4.4.2`
|
1815 | ([@isaacs](https://github.com/isaacs))
|
1816 | * [`8a16db3e3`](https://github.com/npm/npm/commit/8a16db3e39715301fd085a8f4c80ae836f0ec714)
|
1817 | `update-notifier@2.5.0`
|
1818 | ([@alexccl](https://github.com/alexccl))
|
1819 | * [`696375903`](https://github.com/npm/npm/commit/6963759032fe955c1404d362e14f458d633c9444)
|
1820 | `safe-buffer@5.1.2`
|
1821 | ([@feross](https://github.com/feross))
|
1822 | * [`c949eb26a`](https://github.com/npm/npm/commit/c949eb26ab6c0f307e75a546f342bb2ec0403dcf)
|
1823 | `query-string@6.1.0`
|
1824 | ([@sindresorhus](https://github.com/sindresorhus))
|
1825 |
|
1826 | ## v6.0.0 (2018-04-20):
|
1827 |
|
1828 | Hey y'all! Here's another `npm@6` release -- with `node@10` around the corner,
|
1829 | this might well be the last prerelease before we tag `6.0.0`! There's two major
|
1830 | features included with this release, along with a few miscellaneous fixes and
|
1831 | changes.
|
1832 |
|
1833 | ### EXTENDED `npm init` SCAFFOLDING
|
1834 |
|
1835 | Thanks to the wonderful efforts of [@jdalton](https://github.com/jdalton) of
|
1836 | lodash fame, `npm init` can now be used to invoke custom scaffolding tools!
|
1837 |
|
1838 | You can now do things like `npm init react-app` or `npm init esm` to scaffold an
|
1839 | npm package by running `create-react-app` and `create-esm`, respectively. This
|
1840 | also adds an `npm create` alias, to correspond to Yarn's `yarn create` feature,
|
1841 | which inspired this.
|
1842 |
|
1843 | * [`008a83642`](https://github.com/npm/npm/commit/008a83642e04360e461f56da74b5557d5248a726) [`ed81d1426`](https://github.com/npm/npm/commit/ed81d1426776bcac47492cabef43f65e1d4ab536) [`833046e45`](https://github.com/npm/npm/commit/833046e45fe25f75daffd55caf25599a9f98c148)
|
1844 | [#20303](https://github.com/npm/npm/pull/20303)
|
1845 | Add an `npm init` feature that calls out to `npx` when invoked with positional
|
1846 | arguments. ([@jdalton](https://github.com/jdalton))
|
1847 |
|
1848 | ### DEPENDENCY AUDITING
|
1849 |
|
1850 | This version of npm adds a new command, `npm audit`, which will run a security
|
1851 | audit of your project's dependency tree and notify you about any actions you may
|
1852 | need to take.
|
1853 |
|
1854 | The registry-side services required for this command to work will be available
|
1855 | on the main npm registry in the coming weeks. Until then, you won't get much out
|
1856 | of trying to use this on the CLI.
|
1857 |
|
1858 | As part of this change, the npm CLI now sends scrubbed and cryptographically
|
1859 | anonymized metadata about your dependency tree to your configured registry, to
|
1860 | allow notifying you about the existence of critical security flaws. For details
|
1861 | about how the CLI protects your privacy when it shares this metadata, see `npm
|
1862 | help audit`, or [read the docs for `npm audit`
|
1863 | online](https://github.com/npm/npm/blob/release-next/doc/cli/npm-audit.md). You
|
1864 | can disable this altogether by doing `npm config set audit false`, but will no
|
1865 | longer benefit from the service.
|
1866 |
|
1867 | * [`f4bc648ea`](https://github.com/npm/npm/commit/f4bc648ea7b19d63cc9878c9da2cb1312f6ce152)
|
1868 | [#20389](https://github.com/npm/npm/pull/20389)
|
1869 | `npm-registry-fetch@1.1.0`
|
1870 | ([@iarna](https://github.com/iarna))
|
1871 | * [`594d16987`](https://github.com/npm/npm/commit/594d16987465014d573c51a49bba6886cc19f8e8)
|
1872 | [#20389](https://github.com/npm/npm/pull/20389)
|
1873 | `npm-audit-report@1.0.5`
|
1874 | ([@iarna](https://github.com/iarna))
|
1875 | * [`8c77dde74`](https://github.com/npm/npm/commit/8c77dde74a9d8f9007667cd1732c3329e0d52617) [`1d8ac2492`](https://github.com/npm/npm/commit/1d8ac2492196c4752b2e41b23d5ddc92780aaa24) [`552ff6d64`](https://github.com/npm/npm/commit/552ff6d64a5e3bcecb33b2a861c49a3396adad6d) [`09c734803`](https://github.com/npm/npm/commit/09c73480329e75e44fb8e55ca522f798be68d448)
|
1876 | [#20389](https://github.com/npm/npm/pull/20389)
|
1877 | Add new `npm audit` command.
|
1878 | ([@iarna](https://github.com/iarna))
|
1879 | * [`be393a290`](https://github.com/npm/npm/commit/be393a290a5207dc75d3d70a32973afb3322306c)
|
1880 | [#20389](https://github.com/npm/npm/pull/20389)
|
1881 | Temporarily suppress git metadata till there's an opt-in.
|
1882 | ([@iarna](https://github.com/iarna))
|
1883 | * [`8e713344f`](https://github.com/npm/npm/commit/8e713344f6e0828ddfb7733df20d75e95a5382d8)
|
1884 | [#20389](https://github.com/npm/npm/pull/20389)
|
1885 | Document the new command.
|
1886 | ([@iarna](https://github.com/iarna))
|
1887 | *
|
1888 | [#20389](https://github.com/npm/npm/pull/20389)
|
1889 | Default audit to off when running the npm test suite itself.
|
1890 | ([@iarna](https://github.com/iarna))
|
1891 |
|
1892 | ### MORE `package-lock.json` FORMAT CHANGES?!
|
1893 |
|
1894 | * [`820f74ae2`](https://github.com/npm/npm/commit/820f74ae22b7feb875232d46901cc34e9ba995d6)
|
1895 | [#20384](https://github.com/npm/npm/pull/20384)
|
1896 | Add `from` field back into package-lock for git dependencies. This will give
|
1897 | npm the information it needs to figure out whether git deps are valid,
|
1898 | specially when running with legacy install metadata or in
|
1899 | `--package-lock-only` mode when there's no `node_modules`. This should help
|
1900 | remove a significant amount of git-related churn on the lock-file.
|
1901 | ([@zkat](https://github.com/zkat))
|
1902 |
|
1903 | ### BUGFIXES
|
1904 |
|
1905 | * [`9d5d0a18a`](https://github.com/npm/npm/commit/9d5d0a18a5458655275056156b5aa001140ae4d7)
|
1906 | [#20358](https://github.com/npm/npm/pull/20358)
|
1907 | `npm install-test` (aka `npm it`) will no longer generate `package-lock.json`
|
1908 | when running with `--no-package-lock` or `package-lock=false`.
|
1909 | ([@raymondfeng](https://github.com/raymondfeng))
|
1910 | * [`e4ed976e2`](https://github.com/npm/npm/commit/e4ed976e20b7d1114c920a9dc9faf351f89a31c9)
|
1911 | [`2facb35fb`](https://github.com/npm/npm/commit/2facb35fbfbbc415e693d350b67413a66ff96204)
|
1912 | [`9c1eb945b`](https://github.com/npm/npm/commit/9c1eb945be566e24cbbbf186b0437bdec4be53fc)
|
1913 | [#20390](https://github.com/npm/npm/pull/20390)
|
1914 | Fix a scenario where a git dependency had a comittish associated with it
|
1915 | that was not a complete commitid. `npm` would never consider that entry
|
1916 | in the `package.json` as matching the entry in the `package-lock.json` and
|
1917 | this resulted in inappropriate pruning or reinstallation of git
|
1918 | dependencies. This has been addressed in two ways, first, the addition of the
|
1919 | `from` field as described in [#20384](https://github.com/npm/npm/pull/20384) means
|
1920 | we can exactly match the `package.json`. Second, when that's missing (when working with
|
1921 | older `package-lock.json` files), we assume that the match is ok. (If
|
1922 | it's not, we'll fix it up when a real installation is done.)
|
1923 | ([@iarna](https://github.com/iarna))
|
1924 |
|
1925 |
|
1926 | ### DEPENDENCIES
|
1927 |
|
1928 | * [`1c1f89b73`](https://github.com/npm/npm/commit/1c1f89b7319b2eef6adee2530c4619ac1c0d83cf)
|
1929 | `libnpx@10.2.0`
|
1930 | ([@zkat](https://github.com/zkat))
|
1931 | * [`242d8a647`](https://github.com/npm/npm/commit/242d8a6478b725778c00be8ba3dc85f367006a61)
|
1932 | `pacote@8.1.0`
|
1933 | ([@zkat](https://github.com/zkat))
|
1934 |
|
1935 | ### DOCS
|
1936 |
|
1937 | * [`a1c77d614`](https://github.com/npm/npm/commit/a1c77d614adb4fe6769631b646b817fd490d239c)
|
1938 | [#20331](https://github.com/npm/npm/pull/20331)
|
1939 | Fix broken link to 'private-modules' page. The redirect went away when the new
|
1940 | npm website went up, but the new URL is better anyway.
|
1941 | ([@vipranarayan14](https://github.com/vipranarayan14))
|
1942 | * [`ad7a5962d`](https://github.com/npm/npm/commit/ad7a5962d758efcbcfbd9fda9a3d8b38ddbf89a1)
|
1943 | [#20279](https://github.com/npm/npm/pull/20279)
|
1944 | Document the `--if-present` option for `npm run-script`.
|
1945 | ([@aleclarson](https://github.com/aleclarson))
|
1946 |
|
1947 | ## v6.0.0-next.1 (2018-04-12):
|
1948 |
|
1949 | ### NEW FEATURES
|
1950 |
|
1951 | * [`a9e722118`](https://github.com/npm/npm/commit/a9e7221181dc88e14820d0677acccf0648ac3c5a)
|
1952 | [#20256](https://github.com/npm/npm/pull/20256)
|
1953 | Add support for managing npm webhooks. This brings over functionality
|
1954 | previously provided by the [`wombat`](https://www.npmjs.com/package/wombat) CLI.
|
1955 | ([@zkat](https://github.com/zkat))
|
1956 | * [`8a1a64203`](https://github.com/npm/npm/commit/8a1a64203cca3f30999ea9e160eb63662478dcee)
|
1957 | [#20126](https://github.com/npm/npm/pull/20126)
|
1958 | Add `npm cit` command that's equivalent of `npm ci && npm t` that's equivalent of `npm it`.
|
1959 | ([@SimenB](https://github.com/SimenB))
|
1960 | * [`fe867aaf1`](https://github.com/npm/npm/commit/fe867aaf19e924322fe58ed0cf0a570297a96559)
|
1961 | [`49d18b4d8`](https://github.com/npm/npm/commit/49d18b4d87d8050024f8c5d7a0f61fc2514917b1)
|
1962 | [`ff6b31f77`](https://github.com/npm/npm/commit/ff6b31f775f532bb8748e8ef85911ffb35a8c646)
|
1963 | [`78eab3cda`](https://github.com/npm/npm/commit/78eab3cdab6876728798f876d569badfc74ce68f)
|
1964 | The `requires` field in your lock-file will be upgraded to use ranges from
|
1965 | versions on your first use of npm.
|
1966 | ([@iarna](https://github.com/iarna))
|
1967 | * [`cf4d7b4de`](https://github.com/npm/npm/commit/cf4d7b4de6fa241a656e58f662af0f8d7cd57d21)
|
1968 | [#20257](https://github.com/npm/npm/pull/20257)
|
1969 | Add shasum and integrity to the new `npm view` output.
|
1970 | ([@zkat](https://github.com/zkat))
|
1971 |
|
1972 | ### BUG FIXES
|
1973 |
|
1974 | * [`685764308`](https://github.com/npm/npm/commit/685764308e05ff0ddb9943b22ca77b3a56d5c026)
|
1975 | Fix a bug where OTPs passed in via the commandline would have leading
|
1976 | zeros deleted resulted in authentication failures.
|
1977 | ([@iarna](https://github.com/iarna))
|
1978 | * [`8f3faa323`](https://github.com/npm/npm/commit/8f3faa3234b2d2fcd2cb05712a80c3e4133c8f45)
|
1979 | [`6800f76ff`](https://github.com/npm/npm/commit/6800f76ffcd674742ba8944f11f6b0aa55f4b612)
|
1980 | [`ec90c06c7`](https://github.com/npm/npm/commit/ec90c06c78134eb2618612ac72288054825ea941)
|
1981 | [`825b5d2c6`](https://github.com/npm/npm/commit/825b5d2c60e620da5459d9dc13d4f911294a7ec2)
|
1982 | [`4785f13fb`](https://github.com/npm/npm/commit/4785f13fb69f33a8c624ecc8a2be5c5d0d7c94fc)
|
1983 | [`bd16485f5`](https://github.com/npm/npm/commit/bd16485f5b3087625e13773f7251d66547d6807d)
|
1984 | Restore the ability to bundle dependencies that are uninstallable from the
|
1985 | registry. This also eliminates needless registry lookups for bundled
|
1986 | dependencies.
|
1987 |
|
1988 | Fixed a bug where attempting to install a dependency that is bundled
|
1989 | inside another module without reinstalling that module would result in
|
1990 | ENOENT errors.
|
1991 | ([@iarna](https://github.com/iarna))
|
1992 | * [`429498a8c`](https://github.com/npm/npm/commit/429498a8c8d4414bf242be6a3f3a08f9a2adcdf9)
|
1993 | [#20029](https://github.com/npm/npm/pull/20029)
|
1994 | Allow packages with non-registry specifiers to follow the fast path that
|
1995 | the we use with the lock-file for registry specifiers. This will improve install time
|
1996 | especially when operating only on the package-lock (`--package-lock-only`).
|
1997 | ([@zkat](https://github.com/zkat))
|
1998 |
|
1999 | Fix the a bug where `npm i --only=prod` could remove development
|
2000 | dependencies from lock-file.
|
2001 | ([@iarna](https://github.com/iarna))
|
2002 | * [`834b46ff4`](https://github.com/npm/npm/commit/834b46ff48ade4ab4e557566c10e83199d8778c6)
|
2003 | [#20122](https://github.com/npm/npm/pull/20122)
|
2004 | Improve the update-notifier messaging (borrowing ideas from pnpm) and
|
2005 | eliminate false positives.
|
2006 | ([@zkat](https://github.com/zkat))
|
2007 | * [`f9de7ef3a`](https://github.com/npm/npm/commit/f9de7ef3a1089ceb2610cd27bbd4b4bc2979c4de)
|
2008 | [#20154](https://github.com/npm/npm/pull/20154)
|
2009 | Let version succeed when `package-lock.json` is gitignored.
|
2010 | ([@nwoltman](https://github.com/nwoltman))
|
2011 | * [`f8ec52073`](https://github.com/npm/npm/commit/f8ec520732bda687bc58d9da0873dadb2d65ca96)
|
2012 | [#20212](https://github.com/npm/npm/pull/20212)
|
2013 | Ensure that we only create an `etc` directory if we are actually going to write files to it.
|
2014 | ([@buddydvd](https://github.com/buddydvd))
|
2015 | * [`ab489b753`](https://github.com/npm/npm/commit/ab489b75362348f412c002cf795a31dea6420ef0)
|
2016 | [#20140](https://github.com/npm/npm/pull/20140)
|
2017 | Note in documentation that `package-lock.json` version gets touched by `npm version`.
|
2018 | ([@srl295](https://github.com/srl295))
|
2019 | * [`857c2138d`](https://github.com/npm/npm/commit/857c2138dae768ea9798782baa916b1840ab13e8)
|
2020 | [#20032](https://github.com/npm/npm/pull/20032)
|
2021 | Fix bug where unauthenticated errors would get reported as both 404s and
|
2022 | 401s, i.e. `npm ERR! 404 Registry returned 401`. In these cases the error
|
2023 | message will now be much more informative.
|
2024 | ([@iarna](https://github.com/iarna))
|
2025 | * [`d2d290bca`](https://github.com/npm/npm/commit/d2d290bcaa85e44a4b08cc40cb4791dd4f81dfc4)
|
2026 | [#20082](https://github.com/npm/npm/pull/20082)
|
2027 | Allow optional @ prefix on scope with `npm team` commands for parity with other commands.
|
2028 | ([@bcoe](https://github.com/bcoe))
|
2029 | * [`b5babf0a9`](https://github.com/npm/npm/commit/b5babf0a9aa1e47fad8a07cc83245bd510842047)
|
2030 | [#19580](https://github.com/npm/npm/pull/19580)
|
2031 | Improve messaging when two-factor authentication is required while publishing.
|
2032 | ([@jdeniau](https://github.com/jdeniau))
|
2033 | * [`471ee1c5b`](https://github.com/npm/npm/commit/471ee1c5b58631fe2e936e32480f3f5ed6438536)
|
2034 | [`0da38b7b4`](https://github.com/npm/npm/commit/0da38b7b4aff0464c60ad12e0253fd389efd5086)
|
2035 | Fix a bug where optional status of a dependency was not being saved to
|
2036 | the package-lock on the initial install.
|
2037 | ([@iarna](https://github.com/iarna))
|
2038 | * [`b3f98d8ba`](https://github.com/npm/npm/commit/b3f98d8ba242a7238f0f9a90ceea840b7b7070af)
|
2039 | [`9dea95e31`](https://github.com/npm/npm/commit/9dea95e319169647bea967e732ae4c8212608f53)
|
2040 | Ensure that `--no-optional` does not remove optional dependencies from the lock-file.
|
2041 | ([@iarna](https://github.com/iarna))
|
2042 |
|
2043 | ### MISCELLANEOUS
|
2044 |
|
2045 | * [`ec6b12099`](https://github.com/npm/npm/commit/ec6b120995c9c1d17ff84bf0217ba5741365af2d)
|
2046 | Exclude all tests from the published version of npm itself.
|
2047 | ([@iarna](https://github.com/iarna))
|
2048 |
|
2049 | ### DEPENDENCY UPDATES
|
2050 |
|
2051 | * [`73dc97455`](https://github.com/npm/npm/commit/73dc974555217207fb384e39d049da19be2f79ba)
|
2052 | [zkat/cipm#46](https://github.com/zkat/cipm/pull/46)
|
2053 | `libcipm@1.6.2`:
|
2054 | Detect binding.gyp for default install lifecycle. Let's `npm ci` work on projects that
|
2055 | have their own C code.
|
2056 | ([@caleblloyd](https://github.com/caleblloyd))
|
2057 | * [`77c3f7a00`](https://github.com/npm/npm/commit/77c3f7a0091f689661f61182cd361465e2d695d5)
|
2058 | `iferr@1.0.0`
|
2059 | * [`dce733e37`](https://github.com/npm/npm/commit/dce733e37687c21cb1a658f06197c609ac39c793)
|
2060 | [zkat/json-parse-better-errors#1](https://github.com/zkat/json-parse-better-errors/pull/1)
|
2061 | `json-parse-better-errors@1.0.2`
|
2062 | ([@Hoishin](https://github.com/Hoishin))
|
2063 | * [`c52765ff3`](https://github.com/npm/npm/commit/c52765ff32d195842133baf146d647760eb8d0cd)
|
2064 | `readable-stream@2.3.6`
|
2065 | ([@mcollina](https://github.com/mcollina))
|
2066 | * [`e160adf9f`](https://github.com/npm/npm/commit/e160adf9fce09f226f66e0892cc3fa45f254b5e8)
|
2067 | `update-notifier@2.4.0`
|
2068 | ([@sindersorhus](https://github.com/sindersorhus))
|
2069 | * [`9a9d7809e`](https://github.com/npm/npm/commit/9a9d7809e30d1add21b760804be4a829e3c7e39e)
|
2070 | `marked@0.3.1`
|
2071 | ([@joshbruce](https://github.com/joshbruce))
|
2072 | * [`f2fbd8577`](https://github.com/npm/npm/commit/f2fbd857797cf5c12a68a6fb0ff0609d373198b3)
|
2073 | [#20256](https://github.com/npm/npm/pull/20256)
|
2074 | `figgy-pudding@2.0.1`
|
2075 | ([@zkat](https://github.com/zkat))
|
2076 | * [`44972d53d`](https://github.com/npm/npm/commit/44972d53df2e0f0cc22d527ac88045066205dbbf)
|
2077 | [#20256](https://github.com/npm/npm/pull/20256)
|
2078 | `libnpmhook@3.0.0`
|
2079 | ([@zkat](https://github.com/zkat))
|
2080 | * [`cfe562c58`](https://github.com/npm/npm/commit/cfe562c5803db08a8d88957828a2cd1cc51a8dd5)
|
2081 | [#20276](https://github.com/npm/npm/pull/20276)
|
2082 | `node-gyp@3.6.2`
|
2083 | * [`3c0bbcb8e`](https://github.com/npm/npm/commit/3c0bbcb8e5440a3b90fabcce85d7a1d31e2ecbe7)
|
2084 | [zkat/npx#172](https://github.com/zkat/npx/pull/172)
|
2085 | `libnpx@10.1.1`
|
2086 | ([@jdalton](https://github.com/jdalton))
|
2087 | * [`0573d91e5`](https://github.com/npm/npm/commit/0573d91e57c068635a3ad4187b9792afd7b5e22f)
|
2088 | [zkat/cacache#128](https://github.com/zkat/cacache/pull/128)
|
2089 | `cacache@11.0.1`
|
2090 | ([@zkat](https://github.com/zkat))
|
2091 | * [`396afa99f`](https://github.com/npm/npm/commit/396afa99f61561424866d5c8dd7aedd6f91d611a)
|
2092 | `figgy-pudding@3.1.0`
|
2093 | ([@zkat](https://github.com/zkat))
|
2094 | * [`e7f869c36`](https://github.com/npm/npm/commit/e7f869c36ec1dacb630e5ab749eb3bb466193f01)
|
2095 | `pacote@8.0.0`
|
2096 | ([@zkat](https://github.com/zkat))
|
2097 | * [`77dac72df`](https://github.com/npm/npm/commit/77dac72dfdb6add66ec859a949b1d2d788a379b7)
|
2098 | `ssri@6.0.0`
|
2099 | ([@zkat](https://github.com/zkat))
|
2100 | * [`0b802f2a0`](https://github.com/npm/npm/commit/0b802f2a0bfa15c6af8074ebf9347f07bccdbcc7)
|
2101 | `retry@0.12.0`
|
2102 | ([@iarna](https://github.com/iarna))
|
2103 | * [`4781b64bc`](https://github.com/npm/npm/commit/4781b64bcc47d4e7fb7025fd6517cde044f6b5e1)
|
2104 | `libnpmhook@4.0.1`
|
2105 | ([@zkat](https://github.com/zkat))
|
2106 | * [`7bdbaeea6`](https://github.com/npm/npm/commit/7bdbaeea61853280f00c8443a3b2d6e6b893ada9)
|
2107 | `npm-package-arg@6.1.0`
|
2108 | ([@zkat](https://github.com/zkat))
|
2109 | * [`5f2bf4222`](https://github.com/npm/npm/commit/5f2bf4222004117eb38c44ace961bd15a779fd66)
|
2110 | `read-package-tree@5.2.1`
|
2111 | ([@zkat](https://github.com/zkat))
|
2112 |
|
2113 | ## v6.0.0-0 (2018-03-23):
|
2114 |
|
2115 | Sometimes major releases are a big splash, sometimes they're something
|
2116 | smaller. This is the latter kind. That said, we expect to keep this in
|
2117 | release candidate status until Node 10 ships at the end of April. There
|
2118 | will likely be a few more features for the 6.0.0 release line between now
|
2119 | and then. We do expect to have a bigger one later this year though, so keep
|
2120 | an eye out for `npm@7`!
|
2121 |
|
2122 | ### *BREAKING* AVOID DEPRECATED
|
2123 |
|
2124 | When selecting versions to install, we now avoid deprecated versions if
|
2125 | possible. For example:
|
2126 |
|
2127 | ```
|
2128 | Module: example
|
2129 | Versions:
|
2130 | 1.0.0
|
2131 | 1.1.0
|
2132 | 1.1.2
|
2133 | 1.1.3 (deprecated)
|
2134 | 1.2.0 (latest)
|
2135 | ```
|
2136 |
|
2137 | If you ask `npm` to install `example@~1.1.0`, `npm` will now give you `1.1.2`.
|
2138 |
|
2139 | By contrast, if you installed `example@~1.1.3` then you'd get `1.1.3`, as
|
2140 | it's the only version that can match the range.
|
2141 |
|
2142 | * [`78bebc0ce`](https://github.com/npm/npm/commit/78bebc0cedc4ce75c974c47b61791e6ca1ccfd7e)
|
2143 | [#20151](https://github.com/npm/npm/pull/20151)
|
2144 | Skip deprecated versions when possible.
|
2145 | ([@zkat](https://github.com/zkat))
|
2146 |
|
2147 | ### *BREAKING* UPDATE AND OUTDATED
|
2148 |
|
2149 | When `npm install` is finding a version to install, it first checks to see
|
2150 | if the specifier you requested matches the `latest` tag. If it doesn't,
|
2151 | then it looks for the highest version that does. This means you can do
|
2152 | release candidates on tags other than `latest` and users won't see them
|
2153 | unless they ask for them. Promoting them is as easy as setting the `latest`
|
2154 | tag to point at them.
|
2155 |
|
2156 | Historically `npm update` and `npm outdated` worked differently. They just
|
2157 | looked for the most recent thing that matched the semver range, disregarding
|
2158 | the `latest` tag. We're changing it to match `npm install`'s behavior.
|
2159 |
|
2160 | * [`3aaa6ef42`](https://github.com/npm/npm/commit/3aaa6ef427b7a34ebc49cd656e188b5befc22bae)
|
2161 | Make update and outdated respect latest interaction with semver as install does.
|
2162 | ([@iarna](https://github.com/iarna))
|
2163 | * [`e5fbbd2c9`](https://github.com/npm/npm/commit/e5fbbd2c999ab9c7ec15b30d8b4eb596d614c715)
|
2164 | `npm-pick-manifest@2.1.0`
|
2165 | ([@iarna](https://github.com/iarna))
|
2166 |
|
2167 | ### PLUS ONE SMALLER PATCH
|
2168 |
|
2169 | Technically this is a bug fix, but the change in behavior is enough of an
|
2170 | edge case that I held off on bringing it in until a major version.
|
2171 |
|
2172 | When we extract a binary and it starts with a shebang (or "hash bang"), that
|
2173 | is, something like:
|
2174 |
|
2175 | ```
|
2176 | #!/usr/bin/env node
|
2177 | ```
|
2178 |
|
2179 | If the file has Windows line endings we strip them off of the first line.
|
2180 | The reason for this is that shebangs are only used in Unix-like environments
|
2181 | and the files with them can't be run if the shebang has a Windows line ending.
|
2182 |
|
2183 | Previously we converted ALL line endings from Windows to Unix. With this
|
2184 | patch we only convert the line with the shebang. (Node.js works just fine
|
2185 | with either set of line endings.)
|
2186 |
|
2187 | * [`814658371`](https://github.com/npm/npm/commit/814658371bc7b820b23bc138e2b90499d5dda7b1)
|
2188 | [`7265198eb`](https://github.com/npm/npm/commit/7265198ebb32d35937f4ff484b0167870725b054)
|
2189 | `bin-links@1.1.2`:
|
2190 | Only rewrite the CR after a shebang (if any) when fixing up CR/LFs.
|
2191 | ([@iarna](https://github.com/iarna))
|
2192 |
|
2193 | ### *BREAKING* SUPPORTED NODE VERSIONS
|
2194 |
|
2195 | Per our supported Node.js policy, we're dropping support for both Node 4 and
|
2196 | Node 7, which are no longer supported by the Node.js project.
|
2197 |
|
2198 | * [`077cbe917`](https://github.com/npm/npm/commit/077cbe917930ed9a0c066e10934d540e1edb6245)
|
2199 | Drop support for Node 4 and Node 7.
|
2200 | ([@iarna](https://github.com/iarna))
|
2201 |
|
2202 | ### DEPENDENCIES
|
2203 |
|
2204 | * [`478fbe2d0`](https://github.com/npm/npm/commit/478fbe2d0bce1534b1867e0b80310863cfacc01a)
|
2205 | `iferr@1.0.0`
|
2206 | * [`b18d88178`](https://github.com/npm/npm/commit/b18d88178a4cf333afd896245a7850f2f5fb740b)
|
2207 | `query-string@6.0.0`
|
2208 | * [`e02fa7497`](https://github.com/npm/npm/commit/e02fa7497f89623dc155debd0143aa54994ace74)
|
2209 | `is-cidr@2.0.5`
|
2210 | * [`c8f8564be`](https://github.com/npm/npm/commit/c8f8564be6f644e202fccd9e3de01d64f346d870)
|
2211 | [`311e55512`](https://github.com/npm/npm/commit/311e5551243d67bf9f0d168322378061339ecff8)
|
2212 | `standard@11.0.1`
|