diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 05a0be595655a..528215a99b52d 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,12 +1,12 @@ { - ".": "12.0.2", - "workspaces/arborist": "10.0.2", + ".": "12.1.0", + "workspaces/arborist": "10.0.3", "workspaces/libnpmaccess": "11.0.0", - "workspaces/libnpmdiff": "9.0.2", - "workspaces/libnpmexec": "11.0.2", - "workspaces/libnpmfund": "8.0.2", + "workspaces/libnpmdiff": "9.0.3", + "workspaces/libnpmexec": "11.0.3", + "workspaces/libnpmfund": "8.0.3", "workspaces/libnpmorg": "9.0.0", - "workspaces/libnpmpack": "10.0.2", + "workspaces/libnpmpack": "10.0.3", "workspaces/libnpmpublish": "12.0.0", "workspaces/libnpmsearch": "10.0.0", "workspaces/libnpmteam": "9.0.0", diff --git a/AUTHORS b/AUTHORS index 2ea18078d9632..32409fb22cdc8 100644 --- a/AUTHORS +++ b/AUTHORS @@ -1038,3 +1038,8 @@ Justin Clark James Prevett martin Hashim Khan <64767361+Hashim1999164@users.noreply.github.com> +Lazizbek Ergashev +Daniel Roe +Joel Verhagen +Yashas Gunderia <68075205+ychampion@users.noreply.github.com> +Martin Ruiz diff --git a/CHANGELOG.md b/CHANGELOG.md index abdce3b0422a2..cd01cd61896b8 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,30 @@ # Changelog +## [12.1.0](https://github.com/npm/cli/compare/v12.0.2...v12.1.0) (2026-08-25) +### Features +* [`8723f53`](https://github.com/npm/cli/commit/8723f539061eb8034a690f412ec8ccaa1529febc) [#9898](https://github.com/npm/cli/pull/9898) stage: display staged package status (#9898) (@joelverhagen) +### Bug Fixes +* [`d6c6122`](https://github.com/npm/cli/commit/d6c612258c571c71a00f496c1f8980ed13b8a4d9) [#9914](https://github.com/npm/cli/pull/9914) arborist: match allowScripts keys for local paths (#9914) (@martinrrm, @Copilot) +* [`a8c9b2f`](https://github.com/npm/cli/commit/a8c9b2fe25342967be48eba3f792218c6becca8a) [#9823](https://github.com/npm/cli/pull/9823) keep dry-run output valid json (#9823) (@martinrrm) +* [`da50c34`](https://github.com/npm/cli/commit/da50c3479b556da74f88ff0b579d5191a7db0a24) [#9881](https://github.com/npm/cli/pull/9881) arborist: reject uninstall args that carry a version (#9881) (@lazerg) +* [`71915e8`](https://github.com/npm/cli/commit/71915e8e7d6ac57f60c827274a95db786802e410) [#9756](https://github.com/npm/cli/pull/9756) exempt explicit pack targets from allow-directory (#9756) (@ychampion, @ychampion) +* [`51c2bf8`](https://github.com/npm/cli/commit/51c2bf81fa2c31547d0fec44fff2aaac3d9a9862) [#9864](https://github.com/npm/cli/pull/9864) don't print the funding message for global installs (#9864) (@lazerg) +### Documentation +* [`bea9066`](https://github.com/npm/cli/commit/bea9066c7d1fe09d6475bbe391f28116aa6a83a6) [#9838](https://github.com/npm/cli/pull/9838) document npm 12 install script blocking (#9838) (@reggi) +### Dependencies +* [`6e40f73`](https://github.com/npm/cli/commit/6e40f7399cebd4f699ce5988c10b935f08f747ff) [#9871](https://github.com/npm/cli/pull/9871) `undici@6.28.0` (@martinrrm, @Copilot) +* [`05bd2a4`](https://github.com/npm/cli/commit/05bd2a49fc89ca5a4dcf8c15e69ebfbdffd32dd9) [#9871](https://github.com/npm/cli/pull/9871) `ip-address@10.5.0` (@martinrrm, @Copilot) +* [`b7c490d`](https://github.com/npm/cli/commit/b7c490d19299f15101f41a86667bd34b14717eb0) [#9871](https://github.com/npm/cli/pull/9871) `brace-expansion@5.0.9` (@martinrrm, @Copilot) +* [`75a943d`](https://github.com/npm/cli/commit/75a943ded97e8d00a484d3d64cadc9aa013bd268) [#9843](https://github.com/npm/cli/pull/9843) `tar@7.5.22` (#9843) (@martinrrm, @Copilot) +### Chores +* [`4cdccea`](https://github.com/npm/cli/commit/4cdcceac047f82571d0ec734e18b87d1d130e042) [#9836](https://github.com/npm/cli/pull/9836) update `node-integration` workflow template to latest actions (#9836) (@MikeMcC399) +* [`278df04`](https://github.com/npm/cli/commit/278df04d3f25d391af3213a243bb9f89e1d11899) [#9822](https://github.com/npm/cli/pull/9822) pass nodedir to node-gyp via npm_package_config env in node integration (#9822) (@reggi, @Copilot) +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.3): `libnpmdiff@9.0.3` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.3): `libnpmexec@11.0.3` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.3): `libnpmfund@8.0.3` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.3): `libnpmpack@10.0.3` + ## [12.0.2](https://github.com/npm/cli/compare/v12.0.1...v12.0.2) (2026-07-27) ### Bug Fixes * [`834408e`](https://github.com/npm/cli/commit/834408e8f0f2295d02205d8ff5d011c859835225) [#9760](https://github.com/npm/cli/pull/9760) pack: honor min-release-age-exclude (#9760) (@martinrrm, @Copilot) diff --git a/package-lock.json b/package-lock.json index b89c557ca9bbc..de9eb3260c7b8 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "npm", - "version": "12.0.2", + "version": "12.1.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "npm", - "version": "12.0.2", + "version": "12.1.0", "bundleDependencies": [ "@isaacs/string-locale-compare", "@npmcli/arborist", @@ -87,7 +87,7 @@ ], "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/config": "^11.0.1", "@npmcli/fs": "^6.0.0", "@npmcli/git": "^8.0.0", @@ -115,11 +115,11 @@ "is-cidr": "^7.0.0", "json-parse-even-better-errors": "^6.0.0", "libnpmaccess": "^11.0.0", - "libnpmdiff": "^9.0.2", - "libnpmexec": "^11.0.2", - "libnpmfund": "^8.0.2", + "libnpmdiff": "^9.0.3", + "libnpmexec": "^11.0.3", + "libnpmfund": "^8.0.3", "libnpmorg": "^9.0.0", - "libnpmpack": "^10.0.2", + "libnpmpack": "^10.0.3", "libnpmpublish": "^12.0.0", "libnpmsearch": "^10.0.0", "libnpmteam": "^9.0.0", @@ -14947,7 +14947,7 @@ }, "workspaces/arborist": { "name": "@npmcli/arborist", - "version": "10.0.2", + "version": "10.0.3", "license": "ISC", "dependencies": { "@gar/promise-retry": "^1.0.0", @@ -15047,10 +15047,10 @@ } }, "workspaces/libnpmdiff": { - "version": "9.0.2", + "version": "9.0.3", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/installed-package-contents": "^5.0.0", "binary-extensions": "^3.0.0", "diff": "^8.0.2", @@ -15069,11 +15069,11 @@ } }, "workspaces/libnpmexec": { - "version": "11.0.2", + "version": "11.0.3", "license": "ISC", "dependencies": { "@gar/promise-retry": "^1.0.0", - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/package-json": "^8.0.0", "@npmcli/run-script": "^11.0.0", "ci-info": "^4.0.0", @@ -15100,10 +15100,10 @@ } }, "workspaces/libnpmfund": { - "version": "8.0.2", + "version": "8.0.3", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^10.0.2" + "@npmcli/arborist": "^10.0.3" }, "devDependencies": { "@npmcli/eslint-config": "^5.0.1", @@ -15133,10 +15133,10 @@ } }, "workspaces/libnpmpack": { - "version": "10.0.2", + "version": "10.0.3", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/run-script": "^11.0.0", "npm-package-arg": "^14.0.0", "pacote": "^22.0.0" diff --git a/package.json b/package.json index 319ba92041664..26ed22853c1cc 100644 --- a/package.json +++ b/package.json @@ -1,5 +1,5 @@ { - "version": "12.0.2", + "version": "12.1.0", "name": "npm", "description": "a package manager for JavaScript", "workspaces": [ @@ -48,7 +48,7 @@ }, "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/config": "^11.0.1", "@npmcli/fs": "^6.0.0", "@npmcli/git": "^8.0.0", @@ -76,11 +76,11 @@ "is-cidr": "^7.0.0", "json-parse-even-better-errors": "^6.0.0", "libnpmaccess": "^11.0.0", - "libnpmdiff": "^9.0.2", - "libnpmexec": "^11.0.2", - "libnpmfund": "^8.0.2", + "libnpmdiff": "^9.0.3", + "libnpmexec": "^11.0.3", + "libnpmfund": "^8.0.3", "libnpmorg": "^9.0.0", - "libnpmpack": "^10.0.2", + "libnpmpack": "^10.0.3", "libnpmpublish": "^12.0.0", "libnpmsearch": "^10.0.0", "libnpmteam": "^9.0.0", diff --git a/workspaces/arborist/CHANGELOG.md b/workspaces/arborist/CHANGELOG.md index 377a37be1ed80..963bc19a61751 100644 --- a/workspaces/arborist/CHANGELOG.md +++ b/workspaces/arborist/CHANGELOG.md @@ -1,5 +1,11 @@ # Changelog +## [10.0.3](https://github.com/npm/cli/compare/arborist-v10.0.2...arborist-v10.0.3) (2026-08-25) +### Bug Fixes +* [`d6c6122`](https://github.com/npm/cli/commit/d6c612258c571c71a00f496c1f8980ed13b8a4d9) [#9914](https://github.com/npm/cli/pull/9914) arborist: match allowScripts keys for local paths (#9914) (@martinrrm, @Copilot) +* [`da50c34`](https://github.com/npm/cli/commit/da50c3479b556da74f88ff0b579d5191a7db0a24) [#9881](https://github.com/npm/cli/pull/9881) arborist: reject uninstall args that carry a version (#9881) (@lazerg) +* [`dc43591`](https://github.com/npm/cli/commit/dc43591e6e08e9857c787116b1ed12f074e68c3c) [#9877](https://github.com/npm/cli/pull/9877) arborist: don't fetch packuments for uninstallable optional peer dependencies (#9877) (@danielroe) + ## [10.0.2](https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2) (2026-07-27) ### Bug Fixes * [`74eff59`](https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50) [#9770](https://github.com/npm/cli/pull/9770) arborist: avoid crash when peer back-off detaches a node (#9770) (@manzoorwanijk) diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json index 2d2d440fffc82..3a136df4f7722 100644 --- a/workspaces/arborist/package.json +++ b/workspaces/arborist/package.json @@ -1,6 +1,6 @@ { "name": "@npmcli/arborist", - "version": "10.0.2", + "version": "10.0.3", "description": "Manage node_modules trees", "dependencies": { "@gar/promise-retry": "^1.0.0", diff --git a/workspaces/libnpmdiff/CHANGELOG.md b/workspaces/libnpmdiff/CHANGELOG.md index c340bd44558a3..ced06af39f63f 100644 --- a/workspaces/libnpmdiff/CHANGELOG.md +++ b/workspaces/libnpmdiff/CHANGELOG.md @@ -80,6 +80,10 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.2): `@npmcli/arborist@10.0.2` +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3` + ## [9.0.0](https://github.com/npm/cli/compare/libnpmdiff-v9.0.0-pre.1...libnpmdiff-v9.0.0) (2026-07-08) ### ⚠️ BREAKING CHANGES * `npm` now supports node `^22.22.2 || ^24.15.0 || >=26.0.0` diff --git a/workspaces/libnpmdiff/package.json b/workspaces/libnpmdiff/package.json index b51f162fe1329..d36879f339bfa 100644 --- a/workspaces/libnpmdiff/package.json +++ b/workspaces/libnpmdiff/package.json @@ -1,6 +1,6 @@ { "name": "libnpmdiff", - "version": "9.0.2", + "version": "9.0.3", "description": "The registry diff", "repository": { "type": "git", @@ -47,7 +47,7 @@ "tap": "^16.3.8" }, "dependencies": { - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/installed-package-contents": "^5.0.0", "binary-extensions": "^3.0.0", "diff": "^8.0.2", diff --git a/workspaces/libnpmexec/CHANGELOG.md b/workspaces/libnpmexec/CHANGELOG.md index f737c283335ec..c028bdcf3505a 100644 --- a/workspaces/libnpmexec/CHANGELOG.md +++ b/workspaces/libnpmexec/CHANGELOG.md @@ -48,6 +48,10 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.2): `@npmcli/arborist@10.0.2` +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3` + ## [11.0.0](https://github.com/npm/cli/compare/libnpmexec-v11.0.0-pre.1...libnpmexec-v11.0.0) (2026-07-08) ### ⚠️ BREAKING CHANGES * `npm` now supports node `^22.22.2 || ^24.15.0 || >=26.0.0` diff --git a/workspaces/libnpmexec/package.json b/workspaces/libnpmexec/package.json index e959132757412..f7a5e16db364c 100644 --- a/workspaces/libnpmexec/package.json +++ b/workspaces/libnpmexec/package.json @@ -1,6 +1,6 @@ { "name": "libnpmexec", - "version": "11.0.2", + "version": "11.0.3", "files": [ "bin/", "lib/" @@ -65,7 +65,7 @@ }, "dependencies": { "@gar/promise-retry": "^1.0.0", - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/package-json": "^8.0.0", "@npmcli/run-script": "^11.0.0", "ci-info": "^4.0.0", diff --git a/workspaces/libnpmfund/CHANGELOG.md b/workspaces/libnpmfund/CHANGELOG.md index 2090ef101a1b0..1d36ecd5a2266 100644 --- a/workspaces/libnpmfund/CHANGELOG.md +++ b/workspaces/libnpmfund/CHANGELOG.md @@ -104,6 +104,10 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.2): `@npmcli/arborist@10.0.2` +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3` + ## [8.0.0](https://github.com/npm/cli/compare/libnpmfund-v8.0.0-pre.1...libnpmfund-v8.0.0) (2026-07-08) ### ⚠️ BREAKING CHANGES * `npm` now supports node `^22.22.2 || ^24.15.0 || >=26.0.0` diff --git a/workspaces/libnpmfund/package.json b/workspaces/libnpmfund/package.json index 1baf7ce372d87..7946efb2a2217 100644 --- a/workspaces/libnpmfund/package.json +++ b/workspaces/libnpmfund/package.json @@ -1,6 +1,6 @@ { "name": "libnpmfund", - "version": "8.0.2", + "version": "8.0.3", "main": "lib/index.js", "files": [ "bin/", @@ -46,7 +46,7 @@ "tap": "^16.3.8" }, "dependencies": { - "@npmcli/arborist": "^10.0.2" + "@npmcli/arborist": "^10.0.3" }, "engines": { "node": "^22.22.2 || ^24.15.0 || >=26.0.0" diff --git a/workspaces/libnpmpack/CHANGELOG.md b/workspaces/libnpmpack/CHANGELOG.md index 0f6aaef099d22..639fc33b45c20 100644 --- a/workspaces/libnpmpack/CHANGELOG.md +++ b/workspaces/libnpmpack/CHANGELOG.md @@ -84,6 +84,15 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.2): `@npmcli/arborist@10.0.2` +## [10.0.3](https://github.com/npm/cli/compare/libnpmpack-v10.0.2...libnpmpack-v10.0.3) (2026-08-25) +### Bug Fixes +* [`71915e8`](https://github.com/npm/cli/commit/71915e8e7d6ac57f60c827274a95db786802e410) [#9756](https://github.com/npm/cli/pull/9756) exempt explicit pack targets from allow-directory (#9756) (@ychampion, @ychampion) + + +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3` + ## [10.0.0](https://github.com/npm/cli/compare/libnpmpack-v10.0.0-pre.2...libnpmpack-v10.0.0) (2026-07-08) ### ⚠️ BREAKING CHANGES * npm pack and npm publish now error when a package's overrides apply to one or more of its bundled packages (bundledDependencies / bundleDependencies). Defining both fields is still allowed as long as no override actually targets a bundled package. To resolve the error, remove the affected entries from either overrides or the bundle. diff --git a/workspaces/libnpmpack/package.json b/workspaces/libnpmpack/package.json index 4445340f5b486..fd5150a7b64cb 100644 --- a/workspaces/libnpmpack/package.json +++ b/workspaces/libnpmpack/package.json @@ -1,6 +1,6 @@ { "name": "libnpmpack", - "version": "10.0.2", + "version": "10.0.3", "description": "Programmatic API for the bits behind npm pack", "author": "GitHub Inc.", "main": "lib/index.js", @@ -37,7 +37,7 @@ "bugs": "https://github.com/npm/libnpmpack/issues", "homepage": "https://npmjs.com/package/libnpmpack", "dependencies": { - "@npmcli/arborist": "^10.0.2", + "@npmcli/arborist": "^10.0.3", "@npmcli/run-script": "^11.0.0", "npm-package-arg": "^14.0.0", "pacote": "^22.0.0"