## 6.14.15 (2021-08-23) ### DEPENDENCIES * [`8160e6e4b`](https://github.com/npm/cli/commit/8160e6e4b58c0f76e720183f2057e26c6d9d8470) `path-parse@1.0.7` * [`3079f5038`](https://github.com/npm/cli/commit/3079f503896323ab10bfad5bbdb7fe5ca9207d4b) `tar@4.4.1` ## 6.14.14 (2021-07-27) ### DEPENDENCIES * [`4627c0670`](https://github.com/npm/cli/commit/4627c0670957ee5c5e8506750f4626493aabdc25) `tar@4.4.15` ## 6.14.13 (2021-04-08) ### DEPENDENCIES * [`285ab3f65`](https://github.com/npm/cli/commit/285ab3f654882860246f729eb52e2c8c6a6d6e01) `hosted-git-info@2.8.9` * [`63b5c56c5`](https://github.com/npm/cli/commit/63b5c56c5203c8965c8ddeff28f2a65010b40b7c) `ssri@6.0.2` ## 6.14.12 (2021-03-25) ### DEPENDENCIES * [`e47654048`](https://github.com/npm/cli/commit/e4765404844a0b6795752b2bc6f9b9107fe713be) [#2737](https://github.com/npm/cli/pull/2737) Update y18n to fix CVE-2020-7774 ([@vecerek](https://github.com/vecerek)) ## 6.14.11 (2021-01-07) ### DEPENDENCIES * [`19108ca5b`](https://github.com/npm/cli/commit/19108ca5be1b3e7e9787dac3131aafe2722c6218) `ini@1.3.8`: * addressing [`CVE-2020-7788`](https://github.com/advisories/GHSA-qqgx-2p2h-9c37) * [`7a0574074`](https://github.com/npm/cli/commit/7a05740743ac9d9229e2dc9e1b9ca8b57d58c789) `bl@3.0.1` * addressing [`CVE-2020-8244`](https://github.com/advisories/GHSA-pp7h-53gx-mx7r) ## 6.14.10 (2020-12-18) ### DEPENDENCIES * [`906d647e1`](https://github.com/npm/cli/commit/906d647e1cacd74243abcacba3bade80437f30f5) `opener@1.5.2` * fixes: [`#36445`](https://github.com/nodejs/node/issues/36445) addressing [`GHSL-2020-145`](https://securitylab.github.com/advisories/GHSL-2020-145-domenic-opener) ## 6.14.9 (2020-11-20) ### BUG FIXES * [`4a91e48aa`](https://github.com/npm/cli/commit/4a91e48aa92be5b2739ebcdd8a9a841ff5cb6817) fix: docs generation breaking builds ### DEPENDDENCIES * [`ab80a7cf0`](https://github.com/npm/cli/commit/ab80a7cf092d52f4b055cc6d03c38b6115c4b582) `npm-user-validate@1.0.1` * dep update to resolve security issue [GHSA-xgh6-85xh-479p](https://github.com/advisories/GHSA-xgh6-85xh-479p) * [`6b2ab9d53`](https://github.com/npm/cli/commit/6b2ab9d532ef8ffce326f4caa23eb27f83765acd) `har-validator@5.1.5` * dep update to resolve security issue [SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) ## 6.14.8 (2020-08-17) ### BUG FIXES * [`9262e8c88`](https://github.com/npm/cli/commit/9262e8c88f2f828206423928b8e21eea67f4801a) [#1575](https://github.com/npm/cli/pull/1575) npm install --dev deprecation message ([@sandratatarevicova](https://github.com/sandratatarevicova)) * [`765cfe0bc`](https://github.com/npm/cli/commit/765cfe0bc05a10b72026291ff0ca7c9ca5cb3f57) [#1658](https://github.com/npm/cli/issues/1658) remove unused broken require ([@aduh95](https://github.com/aduh95)) * [`4e28de79a`](https://github.com/npm/cli/commit/4e28de79a3a0aacc7603010a592beb448ceb6f5f) [#1663](https://github.com/npm/cli/pull/1663) Do not send user secret in the referer header ([@assapir](https://github.com/assapir)) ### DOCUMENTATION * [`8abdf30c9`](https://github.com/npm/cli/commit/8abdf30c95ec90331456f3f2ed78e2703939bb74) [#1572](https://github.com/npm/cli/pull/1572) docs: add missing metadata in semver page ([@tripu](https://github.com/tripu)) * [`8cedcca46`](https://github.com/npm/cli/commit/8cedcca464ced5aab58be83dd5049c3df13384de) [#1614](https://github.com/npm/cli/pull/1614) Node-gyp supports both Python and legacy Python ([@cclauss](https://github.com/cclauss)) ### DEPENDENCIES * [`a303b75fd`](https://github.com/npm/cli/commit/a303b75fd7c4b2644da02ad2ad46d80dfceec3c5) `update-notifier@2.5.0` * [`c48600832`](https://github.com/npm/cli/commit/c48600832aff4cc349f59997e08dc4bbde15bd49) `npm-registry-fetch@4.0.7` * [`a6e9fc4df`](https://github.com/npm/cli/commit/a6e9fc4df7092ba3eb5394193638b33c24855c36) `meant@1.0.2`: ## 6.14.7 (2020-07-21) ### BUG FIXES * [`de5108836`](https://github.com/npm/cli/commit/de5108836189bddf28d4d3542f9bd5869cc5c2e9) [#784](https://github.com/npm/cli/pull/784) npm explore spawn shell correctly ([@jasisk](https://github.com/jasisk)) * [`36e6c01d3`](https://github.com/npm/cli/commit/36e6c01d334c4db75018bc6a4a0bef726fd41ce4) git tag handling regression on shrinkwrap ([@claudiahdz](https://github.com/claudiahdz)) * [`1961c9369`](https://github.com/npm/cli/commit/1961c9369c92bf8fe530cecba9834ca3c7f5567c) [#288](https://github.com/npm/cli/pull/288) Fix package id in shrinkwrap lifecycle step output ([@bz2](https://github.com/bz2)) * [`87888892a`](https://github.com/npm/cli/commit/87888892a1282cc3edae968c3ae4ec279189271c) [#1009](https://github.com/npm/cli/pull/1009) gracefully handle error during npm install ([@danielleadams](https://github.com/danielleadams)) * [`6fe2bdc25`](https://github.com/npm/cli/commit/6fe2bdc25e7961956e5c0067fa4db54ff1bd0dbd) [#1547](https://github.com/npm/cli/pull/1547) npm ls --parseable --long output ([@ruyadorno](https://github.com/ruyadorno)) ### DEPENDENCIES * [`2d78481c7`](https://github.com/npm/cli/commit/2d78481c7ec178e628ce23df940f73a05d5c6367) update mkdirp on tacks ([@claudiahdz](https://github.com/claudiahdz)) * [`4e129d105`](https://github.com/npm/cli/commit/4e129d105eba3b12d474caa6e5ca216a98deb75a) uninstall npm-registry-couchapp ([@claudiahdz](https://github.com/claudiahdz)) * [`8e1869e27`](https://github.com/npm/cli/commit/8e1869e278d1dd37ddefd6b4e961d1bb17fc9d09) update marked dev dep ([@claudiahdz](https://github.com/claudiahdz)) * [`6a6151f37`](https://github.com/npm/cli/commit/6a6151f377063c6aca852c859c01910edd235ec6) `libnpx@10.2.4` ([@claudiahdz](https://github.com/claudiahdz)) * [`dc21422eb`](https://github.com/npm/cli/commit/dc21422eb1ca1a4a19f160fad0e924566e08c496) `bin-links@1.1.8` ([@claudiahdz](https://github.com/claudiahdz)) * [`d341f88ce`](https://github.com/npm/cli/commit/d341f88ce6feb3df1dcb37f34910fcc6c1db85f2) `gentle-fs@2.3.1` ([@claudiahdz](https://github.com/claudiahdz)) * [`3e168d49b`](https://github.com/npm/cli/commit/3e168d49b41574809cae2ad013776a00d3f20ff4) `libcipm@4.0.8` ([@claudiahdz](https://github.com/claudiahdz)) * [`6ae942a51`](https://github.com/npm/cli/commit/6ae942a510520b7dff11b5b78eebeff1706e38af) `npm-audit-report@1.3.3` ([@claudiahdz](https://github.com/claudiahdz)) * [`6a35e3dee`](https://github.com/npm/cli/commit/6a35e3deec275bf2ae76603acd424a0640458047) `npm-lifecycle@3.1.5` ([@claudiahdz](https://github.com/claudiahdz)) ## 6.14.6 (2020-07-07) ### BUG FIXES * [`a9857b8f6`](https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc) chore: remove auth info from logs ([@claudiahdz](https://github.com/claudiahdz)) * [`b7ad77598`](https://github.com/npm/cli/commit/b7ad77598112908d60195d0fbc472b3c84275fd5) [#1416](https://github.com/npm/cli/pull/1416) fix: wrong `npm doctor` command result ([@vanishcode](https://github.com/vanishcode)) ### DEPENDENCIES * [`94eca6377`](https://github.com/npm/cli/commit/94eca637756376b949edfb697e179a1fdcc231ee) `npm-registry-fetch@4.0.5` ([@claudiahdz](https://github.com/claudiahdz)) * [`c49b6ae28`](https://github.com/npm/cli/commit/c49b6ae28791ff7184288be16654f97168aa9705) [#1418](https://github.com/npm/cli/pull/1418) `spdx-license-ids@3.0.5` ([@kemitchell](https://github.com/kemitchell)) ### DOCUMENTATION * [`2e052984b`](https://github.com/npm/cli/commit/2e052984b08c09115ed75387fb2c961631d85d77) [#1459](https://github.com/npm/cli/pull/1459) chore(docs): fixed links to cli commands ([@claudiahdz](https://github.com/claudiahdz)) * [`0ca3509ca`](https://github.com/npm/cli/commit/0ca3509ca940865392daeeabb39192f7d5af9f5e) [#1283](https://github.com/npm/cli/pull/1283) Update npm-link.md ([@peterfich](https://github.com/peterfich)) * [`3dd429e9a`](https://github.com/npm/cli/commit/3dd429e9aad760ce2ff9e522b34ebfebd85b460c) [#1377](https://github.com/npm/cli/pull/1377) Add note about dropped `*` filenames ([@maxwellgerber](https://github.com/maxwellgerber)) * [`9a2e2e797`](https://github.com/npm/cli/commit/9a2e2e797e5c91e7f4f261583a1906e2c440cc2f) [#1429](https://github.com/npm/cli/pull/1429) Fix typo ([@seanpoulter](https://github.com/seanpoulter)) ## 6.14.5 (2020-05-01) ### BUG FIXES * [`33ec41f18`](https://github.com/npm/cli/commit/33ec41f18f557146607cb14a7a38c707fce6d42c) [#758](https://github.com/npm/cli/pull/758) fix: relativize file links when inflating shrinkwrap ([@jsnajdr](https://github.com/jsnajdr)) * [`94ed456df`](https://github.com/npm/cli/commit/94ed456dfb0b122fd4192429024f034d06c3c454) [#1162](https://github.com/npm/cli/pull/1162) fix: npm init help output ([@mum-never-proud](https://github.com/mum-never-proud)) ### DEPENDENCIES * [`5587ac01f`](https://github.com/npm/cli/commit/5587ac01ffd0d2ea830a6bbb67bb34a611ffc409) `npm-registry-fetch@4.0.4` * [`fc5d94c39`](https://github.com/npm/npm-registry-fetch/commit/fc5d94c39ca218d78df77249ab3a6bf1d9ed9db1) fix: removed default timeout * [`07a4d8884`](https://github.com/npm/cli/commit/07a4d8884448359bac485a49c05fd2d23d06834b) `graceful-fs@4.2.4` * [`8228d1f2e`](https://github.com/npm/cli/commit/8228d1f2e427ad9adee617266108acd1ee39b4a5) `mkdirp@0.5.5` * [`e6d208317`](https://github.com/npm/cli/commit/e6d20831740a84aea766da2a2913cf82a4d56ada) `nopt@4.0.3` ## 6.14.4 (2020-03-24) ### DEPENDENCIES * Bump `minimist@1.2.5` transitive dep to resolve security issue * [`9c554fd8c`](https://github.com/npm/cli/commit/9c554fd8cd1e9aeb8eb122ccfa3c78d12af4097a) `update-notifier@2.5.0` * bump `deep-extend@1.2.5` * bump `deep-extend@0.6.0` * bump `is-ci@1.2.1` * bump `is-retry-allowed@1.2.0` * bump `rc@1.2.8` * bump `registry-auth-token@3.4.0` * bump `widest-line@2.0.1` * [`136832dca`](https://github.com/npm/cli/commit/136832dcae13cb5518b1fe17bd63ea9b2a195f92) `mkdirp@0.5.4` * [`8bf99b2b5`](https://github.com/npm/cli/commit/8bf99b2b58c14d45dc6739fce77de051ebc8ffb7) [#1053](https://github.com/npm/cli/pull/1053) deps: updates term-size to use signed binary * [`d2f08a1bdb`](https://github.com/nodejs/node/commit/d2f08a1bdb78655c4a3fc49825986c148d14117e) ([@rvagg](https://github.com/rvagg)) ## 6.14.3 (2020-03-19) ### DOCUMENTATION * [`4ad221487`](https://github.com/npm/cli/commit4ad2214873cddfd4a0eff1bd188516b08fae9f9e) [#1020](https://github.com/npm/cli/pull/1020) docs(teams): updated team docs to reflect MFA workflow ([@blkdm0n](https://github.com/blkdm0n)) * [`4a31a4ba2`](https://github.com/npm/cli/commit/4a31a4ba2db0a5db2d1d0890ee934ba1babb73a6) [#1034](https://github.com/npm/cli/pull/1034) docs: cleanup ([@ruyadorno](https://github.com/ruyadorno)) * [`0eac801cd`](https://github.com/npm/cli/commit/0eac801cdef344e9fbda6270145e062211255b0e) [#1013](https://github.com/npm/cli/pull/1013) docs: fix links to cli commands ([@alenros](https://github.com/alenros)) * [`7d8e5b99c`](https://github.com/npm/cli/commit/7d8e5b99c4ef8c394cffa7fc845f54a25ff37e3a) [#755](https://github.com/npm/cli/pull/755) docs: correction to `npm update -g` behaviour ([@johnkennedy9147](https://github.com/johnkennedy9147)) ### DEPENDENCIES * [`e11167646`](https://github.com/npm/cli/commit/e111676467f090f73802b97e8da7ece481b18f99) `mkdirp@0.5.3` * [`c5b97d17d`](https://github.com/isaacs/node-mkdirp/commit/c5b97d17d45a22bcf4c815645cbb989dab57ddd8) fix: bump `minimist` dep to resolve security issue ([@isaacs](https://github.com/isaacs)) * [`c50d679c6`](https://github.com/npm/cli/commit/c50d679c68b39dd03ad127d34f540ddcb1b1e804) `rimraf@2.7.1` * [`a2de99ff9`](https://github.com/npm/cli/commit/a2de99ff9e02425a3ccc25280f390178be755a36) `npm-registry-mock@1.3.1` * [`217debeb9`](https://github.com/npm/cli/commit/217debeb9812e037a6686cbf6ec67a0cd47fa68a) `npm-registry-couchapp@2.7.4` ## 6.14.2 (2020-03-03) ### DOCUMENTATION * [`f9248c0be`](https://github.com/npm/cli/commit/f9248c0be63fba37a30098dc9215c752474380e3) [#730](https://github.com/npm/cli/pull/730) chore(docs): update unpublish docs & policy reference ([@nomadtechie](https://github.com/nomadtechie), [@mikemimik](https://github.com/mikemimik)) ### DEPENDENCIES * [`909cc3918`](https://github.com/npm/cli/commit/909cc39180a352f206898481add5772206c8b65f) `hosted-git-info@2.8.8` ([@darcyclarke](https://github.com/darcyclarke)) * [`5038b1891`](https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb) fix: regression in old node versions w/ respect to url.URL implmentation * [`9204ffa58`](https://github.com/npm/cli/commit/9204ffa584c140c5e22b1ee37f6df2c98f5dc70b) `npm-profile@4.0.4` ([@isaacs](https://github.com/isaacs)) * [`6bcf0860a`](https://github.com/npm/npm-profile/commit/6bcf0860a3841865099d0115dbcbde8b78109bd9) fix: treat non-http/https login urls as invalid * [`0365d39bd`](https://github.com/npm/cli/commit/0365d39bdc74960a18caac674f51d0e2a98b31e6) `glob@7.1.6` ([@isaacs](https://github.com/isaacs)) * [`dab030536`](https://github.com/nodejs/node-gyp/commit/dab030536b6a70ecae37debc74c581db9e5280fd) `node-gyp@5.1.0` ([@rvagg](https://github.com/rvagg)) ## 6.14.1 (2020-02-26) * [`303e5c11e`](https://github.com/npm/cli/commit/303e5c11e7db34cf014107aecd2e81c821bfde8d) `hosted-git-info@2.8.7` Fixes a regression where scp-style git urls are passed to the WhatWG URL parser, which does not handle them properly. ([@isaacs](https://github.com/isaacs)) ## 6.14.0 (2020-02-25) ### FEATURES * [`30f170877`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#731](https://github.com/npm/cli/pull/731) add support for multiple funding sources ([@ljharb](https://github.com/ljharb) & [@ruyadorno](hhttps://github.com/ruyadorno/)) ### BUG FIXES * [`55916b130`](https://github.com/npm/cli/commit/55916b130ef52984584678f2cc17c15c1f031cb5) [#508](https://github.com/npm/cli/pull/508) fix: check `npm.config` before accessing its members ([@kaiyoma](https://github.com/kaiyoma)) * [`7d0cd65b2`](https://github.com/npm/cli/commit/7d0cd65b23c0986b631b9b54d87bbe74902cc023) [#733](https://github.com/npm/cli/pull/733) fix: access grant with unscoped packages ([@netanelgilad](https://github.com/netanelgilad)) * [`28c3d40d6`](https://github.com/npm/cli/commit/28c3d40d65eef63f9d6ccb60b99ac57f5057a46e), [`0769c5b20`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#945](https://github.com/npm/cli/pull/945), [#697](https://github.com/npm/cli/pull/697) fix: allow new major versions of node to be automatically considered "supported" ([@isaacs](https://github.com/isaacs), [@ljharb](https://github.com/ljharb)) ### DEPENDENCIES * [`6f39e93`](https://github.com/npm/hosted-git-info/commit/6f39e93bae9162663af6f15a9d10bce675dd5de3) `hosted-git-info@2.8.6` ([@darcyclarke](https://github.com/darcyclarke)) * fix: passwords & usernames are escaped properly in git deps ([@stevenhilder](https://github.com/stevenhilder)) * [`f14b594ee`](https://github.com/npm/cli/commit/f14b594ee9dbfc98ed0b65c65d904782db4f31ad) `chownr@1.1.4` ([@isaacs](https://github.com/isaacs)) * [`77044150b`](https://github.com/npm/cli/commit/77044150b763d67d997f9ff108219132ea922678) `npm-packlist@1.4.8` ([@isaacs](https://github.com/isaacs)) * [`1d112461a`](https://github.com/npm/cli/commit/1d112461ad8dc99e5ff7fabb5177e8c2f89a9755) `npm-registry-fetch@4.0.3` ([@isaacs](https://github.com/isaacs)) * [`ba8b4fe`](https://github.com/npm/npm-registry-fetch/commit/ba8b4fe60eb6cdf9b39012560aec596eda8ce924) fix: always bypass cache when ?write=true * [`a47fed760`](https://github.com/npm/cli/commit/a47fed7603a6ed31dcc314c0c573805f05a96830) `readable-stream@3.6.0` * [`3bbf2d6`](https://github.com/nodejs/readable-stream/commit/3bbf2d6feb45b03f4e46a2ae8251601ad2262121) fix: babel's "loose mode" class transform enbrittles BufferList ([@ljharb](https://github.com/ljharb)) ### DOCUMENTATION * [`284c1c055`](https://github.com/npm/cli/commit/284c1c055a28c4b334496101799acefe3c54ceb3), [`fbb5f0e50`](https://github.com/npm/cli/commit/fbb5f0e50e54425119fa3f03c5de93e4cb6bfda7) [#729](https://github.com/npm/cli/pull/729) update lifecycle hooks docs ([@seanhealy](https://github.com/seanhealy), [@mikemimik](https://github.com/mikemimik)) * [`1c272832d`](https://github.com/npm/cli/commit/1c272832d048300e409882313305c416dc6f21a2) [#787](https://github.com/npm/cli/pull/787) fix: trademarks typo ([@dnicolson](https://github.com/dnicolson)) * [`f6ff41776`](https://github.com/npm/cli/commit/f6ff417767d52418cc8c9e7b9731ede2c3916d2e) [#936](https://github.com/npm/cli/pull/936) fix: postinstall example ([@ajaymathur](https://github.com/ajaymathur)) * [`373224b16`](https://github.com/npm/cli/commit/373224b16e019b7b63d8f0b4c5d4adb7e5cb80dd) [#939](https://github.com/npm/cli/pull/939) fix: bad links in publish docs ([@vit100](https://github.com/vit100)) ### MISCELLANEOUS * [`85c79636d`](https://github.com/npm/cli/commit/85c79636df31bac586c0e380c4852ee155a7723c) [#736](https://github.com/npm/cli/pull/736) add script to update dist-tags ([@mikemimik](https://github.com/mikemimik)) ## 6.13.7 (2020-01-28) ### BUG FIXES * [`7dbb91438`](https://github.com/npm/cli/commit/7dbb914382ecd2074fffb7eba81d93262e2d23c6) [#655](https://github.com/npm/cli/pull/655) Update CI detection cases ([@isaacs](https://github.com/isaacs)) ### DEPENDENCIES * [`0fb1296c7`](https://github.com/npm/cli/commit/0fb1296c7d6d4bb9e78c96978c433cd65e55c0ea) `libnpx@10.2.2` ([@mikemimik](https://github.com/mikemimik)) * [`c9b69d569`](https://github.com/npm/cli/commit/c9b69d569fec7944375a746e9c08a6fa9bec96ff) `node-gyp@5.0.7` ([@mikemimik](https://github.com/mikemimik)) * [`e8dbaf452`](https://github.com/npm/cli/commit/e8dbaf452a1f6c5350bb0c37059b89a7448e7986) `bin-links@1.1.7` ([@mikemimik](https://github.com/mikemimik)) * [#613](https://github.com/npm/cli/issues/613) Fixes bin entry for package ## 6.13.6 (2020-01-09) ### DEPENDENCIES * [`6dba897a1`](https://github.com/npm/cli/commit/6dba897a1e2d56388fb6df0c814b0bb85af366b4) `pacote@9.5.12`: * [`d2f4176`](https://github.com/npm/pacote/commit/d2f4176b6af393d7e29de27e9b638dbcbab9a0c7) fix(git): Do not drop uid/gid when executing in root-owned directory ([@isaacs](https://github.com/isaacs)) ## 6.13.5 (2020-01-09) ### BUG FIXES * [`fd0a802ec`](https://github.com/npm/cli/commit/fd0a802ec468ec7b98d6c15934c355fef0e7ff60) [#550](https://github.com/npm/cli/pull/550) Fix cache location for `npm ci` ([@zhenyavinogradov](https://github.com/zhenyavinogradov)) * [`4b30f3cca`](https://github.com/npm/cli/commit/4b30f3ccaebf50d6ab3bad130ff94827c017cc16) [#648](https://github.com/npm/cli/pull/648) fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f ([@rhengles](https://github.com/rhengles)) ### TESTING * [`e16f68d30`](https://github.com/npm/cli/commit/e16f68d30d59ce1ddde9fe62f7681b2c07fce84d) test(ci): add failing cache config test ([@ruyadorno](https://github.com/ruyadorno)) * [`3f009fbf2`](https://github.com/npm/cli/commit/3f009fbf2c42f68c5127efecc6e22db105a74fe0) [#659](https://github.com/npm/cli/pull/659) test: fix bin-overwriting test on Windows ([@isaacs](https://github.com/isaacs)) * [`43ae0791f`](https://github.com/npm/cli/commit/43ae0791f74f68e02850201a64a6af693657b241) [#601](https://github.com/npm/cli/pull/601) ci: Allow builds to run even if one fails ([@XhmikosR](https://github.com/XhmikosR)) * [`4a669bee4`](https://github.com/npm/cli/commit/4a669bee4ac54c70adc6979d45cd0605b6dc33fd) [#603](https://github.com/npm/cli/pull/603) Remove the unused appveyor.yml ([@XhmikosR](https://github.com/XhmikosR)) * [`9295046ac`](https://github.com/npm/cli/commit/9295046ac92bbe82f4d84e1ec90cc81d3b80bfc7) [#600](https://github.com/npm/cli/pull/600) ci: switch to `actions/checkout@v2` ([@XhmikosR](https://github.com/XhmikosR)) ### DOCUMENTATION * [`f2d770ac7`](https://github.com/npm/cli/commit/f2d770ac768ea84867772b90a3c9acbdd0c1cb6a) [#569](https://github.com/npm/cli/pull/569) fix netlify publish path config ([@claudiahdz](https://github.com/claudiahdz)) * [`462cf0983`](https://github.com/npm/cli/commit/462cf0983dbc18a3d93f77212ca69f878060b2ec) [#627](https://github.com/npm/cli/pull/627) update gatsby dependencies ([@felixonmars](https://github.com/felixonmars)) * [`6fb5dbb72`](https://github.com/npm/cli/commit/6fb5dbb7213c4c050c9a47a7d5131447b8b7dcc8) [#532](https://github.com/npm/cli/pull/532) docs: clarify usage of global prefix ([@jgehrcke](https://github.com/jgehrcke)) ## 6.13.4 (2019-12-11) ## BUGFIXES * [`320ac9aee`](https://github.com/npm/cli/commit/320ac9aeeafd11bb693c53b31148b8d10c4165e8) [npm/bin-links#12](https://github.com/npm/bin-links/pull/12) [npm/gentle-fs#7](https://github.com/npm/gentle-fs/pull/7) Do not remove global bin/man links inappropriately ([@isaacs](https://github.com/isaacs)) ## DEPENDENCIES * [`52fd21061`](https://github.com/npm/cli/commit/52fd21061ff8b1a73429294620ffe5ebaaa60d3e) `gentle-fs@2.3.0` ([@isaacs](https://github.com/isaacs)) * [`d06f5c0b0`](https://github.com/npm/cli/commit/d06f5c0b0611c43b6e70ded92af24fa5d83a0f48) `bin-links@1.1.6` ([@isaacs](https://github.com/isaacs)) ## 6.13.3 (2019-12-09) ### DEPENDENCIES * [`19ce061a2`](https://github.com/npm/cli/commit/19ce061a2ee165d8de862c8f0f733c222846b9e1) `bin-links@1.1.5` Properly normalize, sanitize, and verify `bin` entries in `package.json`. * [`59c836aae`](https://github.com/npm/cli/commit/59c836aae8d0104a767e80c540b963c91774012a) `npm-packlist@1.4.7` * [`fb4ecd7d2`](https://github.com/npm/cli/commit/fb4ecd7d2810b0b4897daaf081a5e2f3f483b310) `pacote@9.5.11` * [`5f33040`](https://github.com/npm/pacote/commit/5f3304028b6985fd380fc77c4840ff12a4898301) [#476](https://github.com/npm/cli/issues/476) [npm/pacote#22](https://github.com/npm/pacote/issues/22) [npm/pacote#14](https://github.com/npm/pacote/issues/14) fix: Do not drop perms in git when not root ([isaacs](https://github.com/isaacs), [@darcyclarke](https://github.com/darcyclarke)) * [`6f229f7`](https://github.com/npm/pacote/6f229f78d9911b4734f0a19c6afdc5454034c759) sanitize and normalize package bin field ([isaacs](https://github.com/isaacs)) * [`1743cb339`](https://github.com/npm/cli/commit/1743cb339767e86431dcd565c7bdb0aed67b293d) `read-package-json@2.1.1` ## 6.13.2 (2019-12-03) ### BUG FIXES * [`4429645b3`](https://github.com/npm/cli/commit/4429645b3538e1cda54d8d1b7ecb3da7a88fdd3c) [#546](https://github.com/npm/cli/pull/546) fix docs target typo ([@richardlau](https://github.com/richardlau)) * [`867642942`](https://github.com/npm/cli/commit/867642942bec69bb9ab71cff1914fb6a9fe67de8) [#142](https://github.com/npm/cli/pull/142) fix(packageRelativePath): fix 'where' for file deps ([@larsgw](https://github.com/larsgw)) * [`d480f2c17`](https://github.com/npm/cli/commit/d480f2c176e6976b3cca3565e4c108b599b0379b) [#527](https://github.com/npm/cli/pull/527) Revert "windows: Add preliminary WSL support for npm and npx" ([@craigloewen-msft](https://github.com/craigloewen-msft)) * [`e4b97962e`](https://github.com/npm/cli/commit/e4b97962e5fce0d49beb541ce5a0f96aee0525de) [#504](https://github.com/npm/cli/pull/504) remove unnecessary package.json read when reading shrinkwrap ([@Lighting-Jack](https://github.com/Lighting-Jack)) * [`1c65d26ac`](https://github.com/npm/cli/commit/1c65d26ac9f10ac0037094c207d216fbf0e969bf) [#501](https://github.com/npm/cli/pull/501) fix(fund): open url for string shorthand ([@ruyadorno](https://github.com/ruyadorno)) * [`ae7afe565`](https://github.com/npm/cli/commit/ae7afe56504dbffabf9f73d55b6dac1e3e9fed4a) [#263](https://github.com/npm/cli/pull/263) Don't log error message if git tagging is disabled ([@woppa684](https://github.com/woppa684)) * [`4c1b16f6a`](https://github.com/npm/cli/commit/4c1b16f6aecaf78956b9335734cfde2ac076ee11) [#182](https://github.com/npm/cli/pull/182) Warn the user that it is uninstalling npm-install ([@Hoidberg](https://github.com/Hoidberg)) ## 6.13.1 (2019-11-18) ### BUG FIXES * [`938d6124d`](https://github.com/npm/cli/commit/938d6124d6d15d96b5a69d0ae32ef59fceb8ceab) [#472](https://github.com/npm/cli/pull/472) fix(fund): support funding string shorthand ([@ruyadorno](https://github.com/ruyadorno)) * [`b49c5535b`](https://github.com/npm/cli/commit/b49c5535b7c41729a8d167b035924c3c66b36de0) [#471](https://github.com/npm/cli/pull/471) should not publish tap-snapshot folder ([@ruyadorno](https://github.com/ruyadorno)) * [`3471d5200`](https://github.com/npm/cli/commit/3471d5200217bfa612b1a262e36c9c043a52eb09) [#253](https://github.com/npm/cli/pull/253) Add preliminary WSL support for npm and npx ([@infinnie](https://github.com/infinnie)) * [`3ef295f23`](https://github.com/npm/cli/commit/3ef295f23ee1b2300abf13ec19e935c47a455179) [#486](https://github.com/npm/cli/pull/486) print quick audit report for human output ([@isaacs](https://github.com/isaacs)) ### TESTING * [`dbbf977ac`](https://github.com/npm/cli/commit/dbbf977acd1e74bcdec859c562ea4a2bc0536442) [#278](https://github.com/npm/cli/pull/278) added workflow to trigger and run benchmarks ([@mikemimik](https://github.com/mikemimik)) * [`b4f5e3825`](https://github.com/npm/cli/commit/b4f5e3825535256aaada09c5e8f104570a3d96a4) [#457](https://github.com/npm/cli/pull/457) feat(docs): adding tests and updating docs to reflect changes in registry teams API. ([@nomadtechie](https://github.com/nomadtechie)) * [`454c7dd60`](https://github.com/npm/cli/commit/454c7dd60c78371bf606f11a17ed0299025bc37c) [#456](https://github.com/npm/cli/pull/456) fix git configs for git 2.23 and above ([@isaacs](https://github.com/isaacs)) ### DOCUMENTATION * [`b8c1576a4`](https://github.com/npm/cli/commit/b8c1576a448566397c721655b95fc90bf202b35a) [`30b013ae8`](https://github.com/npm/cli/commit/30b013ae8eacd04b1b8a41ce2ed0dd50c8ebae25) [`26c1b2ef6`](https://github.com/npm/cli/commit/26c1b2ef6be1595d28d935d35faa8ec72daae544) [`9f943a765`](https://github.com/npm/cli/commit/9f943a765faf6ebb8a442e862b808dbb630e018d) [`c0346b158`](https://github.com/npm/cli/commit/c0346b158fc25ab6ca9954d4dd78d9e62f573a41) [`8e09d5ad6`](https://github.com/npm/cli/commit/8e09d5ad67d4f142241193cecbce61c659389be3) [`4a2f551ee`](https://github.com/npm/cli/commit/4a2f551eeb3285f6f200534da33644789715a41a) [`87d67258c`](https://github.com/npm/cli/commit/87d67258c213d9ea9a49ce1804294a718f08ff13) [`5c3b32722`](https://github.com/npm/cli/commit/5c3b3272234764c8b4d2d798b69af077b5a529c7) [`b150eaeff`](https://github.com/npm/cli/commit/b150eaeff428180bfa03be53fd741d5625897758) [`7555a743c`](https://github.com/npm/cli/commit/7555a743ce4c3146d6245dd63f91503c7f439a6c) [`b89423e2f`](https://github.com/npm/cli/commit/b89423e2f6a09b290b15254e7ff7e8033b434d83) [#463](https://github.com/npm/cli/pull/463) [#285](https://github.com/npm/cli/pull/285) [#268](https://github.com/npm/cli/pull/268) [#232](https://github.com/npm/cli/pull/232) [#485](https://github.com/npm/cli/pull/485) [#453](https://github.com/npm/cli/pull/453) docs cleanup: typos, styling and content ([@claudiahdz](https://github.com/claudiahdz)) ([@XhmikosR](https://github.com/XhmikosR)) ([@mugli](https://github.com/mugli)) ([@brettz9](https://github.com/brettz9)) ([@mkotsollaris](https://github.com/mkotsollaris)) ### DEPENDENCIES * [`661d86cd2`](https://github.com/npm/cli/commit/661d86cd229b14ddf687b7f25a66941a79d233e7) `make-fetch-happen@5.0.2` ([@claudiahdz](https://github.com/claudiahdz)) ## 6.13.0 (2019-11-05) ### NEW FEATURES * [`4414b06d9`](https://github.com/npm/cli/commit/4414b06d944c56bee05ccfb85260055a767ee334) [#273](https://github.com/npm/cli/pull/273) add fund command ([@ruyadorno](https://github.com/ruyadorno)) ### DOCUMENTATION * [`ae4c74d04`](https://github.com/npm/cli/commit/ae4c74d04f820a0255a92bdfe77ecf97af134fae) [#274](https://github.com/npm/cli/pull/274) migrate existing docs to gatsby ([@claudiahdz](https://github.com/claudiahdz)) * [`4ff1bb180`](https://github.com/npm/cli/commit/4ff1bb180b1db8c72e51b3d57bd4e268b738e049) [#277](https://github.com/npm/cli/pull/277) updated documentation copy ([@oletizi](https://github.com/oletizi)) ### BUG FIXES * [`e4455409f`](https://github.com/npm/cli/commit/e4455409fe6fe9c198b250b488129171f0b4624a) [#281](https://github.com/npm/cli/pull/281) delete ps1 files on package removal ([@NoDocCat](https://github.com/NoDocCat)) * [`cd14d4701`](https://github.com/npm/cli/commit/cd14d47014e8c96ffd6a18791e8752028b19d637) [#279](https://github.com/npm/cli/pull/279) update supported node list to remove v6.0, v6.1, v9.0 - v9.2 ([@ljharb](https://github.com/ljharb)) ### DEPENDENCIES * [`a37296b20`](https://github.com/npm/cli/commit/a37296b20ca3e19c2bbfa78fedcfe695e03fda69) `pacote@9.5.9` * [`d3cb3abe8`](https://github.com/npm/cli/commit/d3cb3abe8cee54bd2624acdcf8043932ef0d660a) `read-cmd-shim@1.0.5` ### TESTING * [`688cd97be`](https://github.com/npm/cli/commit/688cd97be94ca949719424ff69ff515a68c5caba) [#272](https://github.com/npm/cli/pull/272) use github actions for CI ([@JasonEtco](https://github.com/JasonEtco)) * [`9a2d8af84`](https://github.com/npm/cli/commit/9a2d8af84f7328f13d8f578cf4b150b9d5f09517) [#240](https://github.com/npm/cli/pull/240) Clean up some flakiness and inconsistency ([@isaacs](https://github.com/isaacs)) ## 6.12.1 (2019-10-29) ### BUG FIXES * [`6508e833d`](https://github.com/npm/cli/commit/6508e833df35a3caeb2b496f120ce67feff306b6) [#269](https://github.com/npm/cli/pull/269) add node v13 as a supported version ([@ljharb](https://github.com/ljharb)) * [`b6588a8f7`](https://github.com/npm/cli/commit/b6588a8f74fb8b1ad103060b73c4fd5174b1d1f6) [#265](https://github.com/npm/cli/pull/265) Fix regression in lockfile repair for sub-deps ([@feelepxyz](https://github.com/feelepxyz)) * [`d5dfe57a1`](https://github.com/npm/cli/commit/d5dfe57a1d810fe7fd64edefc976633ee3a4da53) [#266](https://github.com/npm/cli/pull/266) resolve circular dependency in pack.js ([@addaleax](https://github.com/addaleax)) ### DEPENDENCIES * [`73678bb59`](https://github.com/npm/cli/commit/73678bb590a8633c3bdbf72e08f1279f9e17fd28) `chownr@1.1.3` * [`4b76926e2`](https://github.com/npm/cli/commit/4b76926e2058ef30ab1d5e2541bb96d847653417) `graceful-fs@4.2.3` * [`c691f36a9`](https://github.com/npm/cli/commit/c691f36a9c108b6267859fe61e4a38228b190c17) `libcipm@4.0.7` * [`5e1a14975`](https://github.com/npm/cli/commit/5e1a14975311bfdc43df8e1eb317ae5690ee580c) `npm-packlist@1.4.6` * [`c194482d6`](https://github.com/npm/cli/commit/c194482d65ee81a5a0a6281c7a9f984462286c56) `npm-registry-fetch@4.0.2` * [`bc6a8e0ec`](https://github.com/npm/cli/commit/bc6a8e0ec966281e49b1dc66f9c641ea661ab7a6) `tar@4.4.1` * [`4dcca3cbb`](https://github.com/npm/cli/commit/4dcca3cbb161da1f261095d9cdd26e1fbb536a8d) `uuid@3.3.3` ## 6.12.0 (2019-10-08): Now `npm ci` runs prepare scripts for git dependencies, and respects the `--no-optional` argument. Warnings for `engine` mismatches are printed again. Various other fixes and cleanups. ### BUG FIXES * [`890b245dc`](https://github.com/npm/cli/commit/890b245dc1f609590d8ab993fac7cf5a37ed46a5) [#252](https://github.com/npm/cli/pull/252) ci: add dirPacker to options ([@claudiahdz](https://github.com/claudiahdz)) * [`f3299acd0`](https://github.com/npm/cli/commit/f3299acd0b4249500e940776aca77cc6c0977263) [#257](https://github.com/npm/cli/pull/257) [npm.community#4792](https://npm.community/t/engines-and-engines-strict-ignored/4792) warn message on engine mismatch ([@ruyadorno](https://github.com/ruyadorno)) * [`bbc92fb8f`](https://github.com/npm/cli/commit/bbc92fb8f3478ff67071ebaff551f01c1ea42ced) [#259](https://github.com/npm/cli/pull/259) [npm.community#10288](https://npm.community/t/npm-token-err-figgypudding-options-cannot-be-modified-use-concat-instead/10288) Fix figgyPudding error in `npm token` ([@benblank](https://github.com/benblank)) * [`70f54dcb5`](https://github.com/npm/cli/commit/70f54dcb5693b301c6b357922b7e8d16b57d8b00) [#241](https://github.com/npm/cli/pull/241) doctor: Make OK more consistent ([@gemal](https://github.com/gemal)) ### FEATURES * [`ed993a29c`](https://github.com/npm/cli/commit/ed993a29ccf923425317c433844d55dbea2f23ee) [#249](https://github.com/npm/cli/pull/249) Add CI environment variables to user-agent ([@isaacs](https://github.com/isaacs)) * [`f6b0459a4`](https://github.com/npm/cli/commit/f6b0459a466a2c663dbd549cdc331e7732552dca) [#248](https://github.com/npm/cli/pull/248) Add option to save package-lock without formatting Adds a new config `--format-package-lock`, which defaults to true. ([@bl00mber](https://github.com/bl00mber)) ### DEPENDENCIES * [`0ca063c5d`](https://github.com/npm/cli/commit/0ca063c5dc961c4aa17373f4b33fb54c51c8c8d6) `npm-lifecycle@3.1.4`: - fix: filter functions and undefined out of makeEnv ([@isaacs](https://github.com/isaacs)) * [`5df6b0ea2`](https://github.com/npm/cli/commit/5df6b0ea2e3106ba65bba649cc8d7f02f4738236) `libcipm@4.0.4`: - fix: pack git directories properly ([@claudiahdz](https://github.com/claudiahdz)) - respect no-optional argument ([@cruzdanilo](https://github.com/cruzdanilo)) * [`7e04f728c`](https://github.com/npm/cli/commit/7e04f728cc4cd4853a8fc99e2df0a12988897589) `tar@4.4.12` * [`5c380e5a3`](https://github.com/npm/cli/commit/5c380e5a33d760bb66a4285b032ae5f50af27199) `stringify-package@1.0.1` ([@isaacs](https://github.com/isaacs)) * [`62f2ca692`](https://github.com/npm/cli/commit/62f2ca692ac0c0467ef4cf74f91777a5175258c4) `node-gyp@5.0.5` ([@isaacs](https://github.com/isaacs)) * [`0ff0ea47a`](https://github.com/npm/cli/commit/0ff0ea47a8840dd7d952bde7f7983a5016cda8ea) `npm-install-checks@3.0.2` ([@isaacs](https://github.com/isaacs)) * [`f46edae94`](https://github.com/npm/cli/commit/f46edae9450b707650a0efab09aa1e9295a18070) `hosted-git-info@2.8.5` ([@isaacs](https://github.com/isaacs)) ### TESTING * [`44a2b036b`](https://github.com/npm/cli/commit/44a2b036b34324ec85943908264b2e36de5a9435) [#262](https://github.com/npm/cli/pull/262) fix root-ownership race conditions in meta-test ([@isaacs](https://github.com/isaacs)) ## 6.11.3 (2019-09-03): Fix npm ci regressions and npm outdated depth. ### BUG FIXES * [`235ed1d28`](https://github.com/npm/cli/commit/235ed1d2838ef302bb995e183980209d16c51b9b) [#239](https://github.com/npm/cli/pull/239) Don't override user specified depth in outdated Restores ability to update packages using `--depth` as suggested by `npm audit`. ([@G-Rath](https://github.com/G-Rath)) * [`1fafb5151`](https://github.com/npm/cli/commit/1fafb51513466cd793866b576dfea9a8963a3335) [#242](https://github.com/npm/cli/pull/242) [npm.community#9586](https://npm.community/t/6-11-1-some-dependencies-are-no-longer-being-installed/9586/4) Revert "install: do not descend into directory deps' child modules" ([@isaacs](https://github.com/isaacs)) * [`cebf542e6`](https://github.com/npm/cli/commit/cebf542e61dcabdd2bd3b876272bf8eebf7d01cc) [#243](https://github.com/npm/cli/pull/243) [npm.community#9720](https://npm.community/t/6-11-2-npm-ci-installs-package-with-wrong-permissions/9720) ci: pass appropriate configs for file/dir modes ([@isaacs](https://github.com/isaacs)) ### DEPENDENCIES * [`e5fbb7ed1`](https://github.com/npm/cli/commit/e5fbb7ed1fc7ef5c6ca4790e2d0dc441e0ac1596) `read-cmd-shim@1.0.4` ([@claudiahdz](https://github.com/claudiahdz)) * [`23ce65616`](https://github.com/npm/cli/commit/23ce65616c550647c586f7babc3c2f60115af2aa) `npm-pick-manifest@3.0.2` ([@claudiahdz](https://github.com/claudiahdz)) ## 6.11.2 (2019-08-22): Fix a recent Windows regression, and two long-standing Windows bugs. Also, get CI running on Windows, so these things are less likely in the future. ### DEPENDENCIES * [`9778a1b87`](https://github.com/npm/cli/commit/9778a1b878aaa817af6e99385e7683c2a389570d) `cmd-shim@3.0.3`: Fix regression where shims fail to preserve exit code ([@isaacs](https://github.com/isaacs)) * [`bf93e91d8`](https://github.com/npm/cli/commit/bf93e91d879c816a055d5913e6e4210d7299f299) `npm-package-arg@6.1.1`: Properly handle git+file: urls on Windows when a drive letter is included. ([@isaacs](https://github.com/isaacs)) ### BUGFIXES * [`6cc4cc66f`](https://github.com/npm/cli/commit/6cc4cc66f1fb050dc4113e35cab59197fd48e04a) escape args properly on Windows Bash Despite being bash, Node.js running on windows git mingw bash still executes child processes using cmd.exe. As a result, arguments in this environment need to be escaped in the style of cmd.exe, not bash. ([@isaacs](https://github.com/isaacs)) ### TESTS * [`291aba7b8`](https://github.com/npm/cli/commit/291aba7b821e247b96240b1ec037310ead69a594) make tests pass on Windows ([@isaacs](https://github.com/isaacs)) * [`fea3a023a`](https://github.com/npm/cli/commit/fea3a023a80863f32a5f97f5132401b1a16161b8) travis: run tests on Windows as well ([@isaacs](https://github.com/isaacs)) ## 6.11.1 (2019-08-20): Fix a regression for windows command shim syntax. * [`37db29647`](https://github.com/npm/cli/commit/37db2964710c80003604b7e3c1527d17be7ed3d0) `cmd-shim@3.0.2` ([@isaacs](https://github.com/isaacs)) ## v6.11.0 (2019-08-20): A few meaty bugfixes, and introducing `peerDependenciesMeta`. ### FEATURES * [`a12341088`](https://github.com/npm/cli/commit/a12341088820c0e7ef6c1c0db3c657f0c2b3943e) [#224](https://github.com/npm/cli/pull/224) Implements peerDependenciesMeta ([@arcanis](https://github.com/arcanis)) * [`2f3b79bba`](https://github.com/npm/cli/commit/2f3b79bbad820fd4a398aa494b19f79b7fd520a1) [#234](https://github.com/npm/cli/pull/234) add new forbidden 403 error code ([@claudiahdz](https://github.com/claudiahdz)) ### BUGFIXES * [`24acc9fc8`](https://github.com/npm/cli/commit/24acc9fc89d99d87cc66206c6c6f7cdc82fbf763) and [`45772af0d`](https://github.com/npm/cli/commit/45772af0ddca54b658cb2ba2182eec26d0a4729d) [#217](https://github.com/npm/cli/pull/217) [npm.community#8863](https://npm.community/t/installing-the-same-module-under-multiple-relative-paths-fails-on-linux/8863) [npm.community#9327](https://npm.community/t/reinstall-breaks-after-npm-update-to-6-10-2/9327,) do not descend into directory deps' child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages ([@isaacs](https://github.com/isaacs) and [@salomvary](https://github.com/salomvary)) * [`50cfe113d`](https://github.com/npm/cli/commit/50cfe113da5fcc59c1d99b0dcf1050ace45803c7) [#229](https://github.com/npm/cli/pull/229) fixed typo in semver doc ([@gall0ws](https://github.com/gall0ws)) * [`e8fb2a1bd`](https://github.com/npm/cli/commit/e8fb2a1bd9785e0092e9926f4fd65ad431e38452) [#231](https://github.com/npm/cli/pull/231) Fix spelling mistakes in CHANGELOG-3.md ([@XhmikosR](https://github.com/XhmikosR)) * [`769d2e057`](https://github.com/npm/cli/commit/769d2e057daf5a2cbfe0ce86f02550e59825a691) [npm/uid-number#7](https://github.com/npm/uid-number/issues/7) Better error on invalid `--user`/`--group` configs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no 'nobody' user. ([@isaacs](https://github.com/isaacs)) * [`8b43c9624`](https://github.com/npm/cli/commit/8b43c962498c8e2707527e4fca442d7a4fa51595) [nodejs/node#28987](https://github.com/nodejs/node/issues/28987) [npm.community#6032](https://npm.community/t/npm-ci-doesnt-respect-npmrc-variables/6032) [npm.community#6658](https://npm.community/t/npm-ci-doesnt-fill-anymore-the-process-env-npm-config-cache-variable-on-post-install-scripts/6658) [npm.community#6069](https://npm.community/t/npm-ci-does-not-compile-native-dependencies-according-to-npmrc-configuration/6069) [npm.community#9323](https://npm.community/t/npm-6-9-x-not-passing-environment-to-node-gyp-regression-from-6-4-x/9323/2) Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. ([@isaacs](https://github.com/isaacs)) * [`8b85eaa47`](https://github.com/npm/cli/commit/8b85eaa47da3abaacc90fe23162a68cc6e1f0404) save files with inferred ownership rather than relying on `SUDO_UID` and `SUDO_GID`. ([@isaacs](https://github.com/isaacs)) * [`b7f6e5f02`](https://github.com/npm/cli/commit/b7f6e5f0285515087b4614d81db17206524c0fdb) Infer ownership of shrinkwrap files ([@isaacs](https://github.com/isaacs)) * [`54b095d77`](https://github.com/npm/cli/commit/54b095d77b3b131622b3cf4cb5c689aa2dd10b6b) [#235](https://github.com/npm/cli/pull/235) Add spec to dist-tag remove function ([@theberbie](https://github.com/theberbie)) ### DEPENDENCIES * [`dc8f9e52f`](https://github.com/npm/cli/commit/dc8f9e52f0bb107c0a6b20cc0c97cbc3b056c1b3) `pacote@9.5.7`: Infer the ownership of all unpacked files in `node_modules`, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. ([@isaacs](https://github.com/isaacs)) * [`bb33940c3`](https://github.com/npm/cli/commit/bb33940c32aad61704084e61ebd1bd8e7cacccc8) `cmd-shim@3.0.0`: * [`9c93ac3`](https://github.com/npm/cmd-shim/commit/9c93ac39e95b0d6ae852e842e4c5dba5e19687c2) [#2](https://github.com/npm/cmd-shim/pull/2) [npm#3380](https://github.com/npm/npm/issues/3380) Handle environment variables properly ([@basbossink](https://github.com/basbossink)) * [`2d277f8`](https://github.com/npm/cmd-shim/commit/2d277f8e84d45401747b0b9470058f168b974ad5) [#25](https://github.com/npm/cmd-shim/pull/25) [#36](https://github.com/npm/cmd-shim/pull/36) [#35](https://github.com/npm/cmd-shim/pull/35) Fix 'no shebang' case by always providing `$basedir` in shell script ([@igorklopov](https://github.com/igorklopov)) * [`adaf20b`](https://github.com/npm/cmd-shim/commit/adaf20b7fa2c09c2111a2506c6a3e53ed0831f88) [#26](https://github.com/npm/cmd-shim/pull/26) Fix `$*` causing an error when arguments contain parentheses ([@satazor](https://github.com/satazor)) * [`49f0c13`](https://github.com/npm/cmd-shim/commit/49f0c1318fd384e0031c3fd43801f0e22e1e555f) [#30](https://github.com/npm/cmd-shim/pull/30) Fix paths for MSYS/MINGW bash ([@dscho](https://github.com/dscho)) * [`51a8af3`](https://github.com/npm/cmd-shim/commit/51a8af30990cb072cb30d67fc1b564b14746bba9) [#34](https://github.com/npm/cmd-shim/pull/34) Add proper support for PowerShell ([@ExE-Boss](https://github.com/ExE-Boss)) * [`4c37e04`](https://github.com/npm/cmd-shim/commit/4c37e048dee672237e8962fdffca28e20e9f976d) [#10](https://github.com/npm/cmd-shim/issues/10) Work around quoted batch file names ([@isaacs](https://github.com/isaacs)) * [`a4e279544`](https://github.com/npm/cli/commit/a4e279544f7983e0adff1e475e3760f1ea85825a) `npm-lifecycle@3.1.3` ([@isaacs](https://github.com/isaacs)): * fail properly if `uid-number` raises an error * [`7086a1809`](https://github.com/npm/cli/commit/7086a1809bbfda9be81344b3949c7d3ac687ffc4) `libcipm@4.0.3` ([@isaacs](https://github.com/isaacs)) * [`8845141f9`](https://github.com/npm/cli/commit/8845141f9d7827dae572c8cf26f2c775db905bd3) `read-package-json@2.1.0` ([@isaacs](https://github.com/isaacs)) * [`51c028215`](https://github.com/npm/cli/commit/51c02821575d80035ebe853492d110db11a7d1b9) `bin-links@1.1.3` ([@isaacs](https://github.com/isaacs)) * [`534a5548c`](https://github.com/npm/cli/commit/534a5548c9ebd59f0dd90e9ccca148ed8946efa6) `read-cmd-shim@1.0.3` ([@isaacs](https://github.com/isaacs)) * [`3038f2fd5`](https://github.com/npm/cli/commit/3038f2fd5b1d7dd886ee72798241d8943690f508) `gentle-fs@2.2.1` ([@isaacs](https://github.com/isaacs)) * [`a609a1648`](https://github.com/npm/cli/commit/a609a16489f76791697d270b499fd4949ab1f8c3) `graceful-fs@4.2.2` ([@isaacs](https://github.com/isaacs)) * [`f0346f754`](https://github.com/npm/cli/commit/f0346f75490619a81b310bfc18646ae5ae2e0ea4) `cacache@12.0.3` ([@isaacs](https://github.com/isaacs)) * [`ca9c615c8`](https://github.com/npm/cli/commit/ca9c615c8cff5c7db125735eb09f84d912d18694) `npm-pick-manifest@3.0.0` ([@isaacs](https://github.com/isaacs)) * [`b417affbf`](https://github.com/npm/cli/commit/b417affbf7133dc7687fd809e4956a43eae3438a) `pacote@9.5.8` ([@isaacs](https://github.com/isaacs)) ### TESTS * [`b6df0913c`](https://github.com/npm/cli/commit/b6df0913ca73246f1fa6cfa0e81e34ba5f2b6204) [#228](https://github.com/npm/cli/pull/228) Proper handing of /usr/bin/node lifecycle-path test ([@olivr70](https://github.com/olivr70)) * [`aaf98e88c`](https://github.com/npm/cli/commit/aaf98e88c78fd6c850d0a3d3ee2f61c02f63bc8c) `npm-registry-mock@1.3.0` ([@isaacs](https://github.com/isaacs)) ## v6.10.3 (2019-08-06): ### BUGFIXES * [`27cccfbda`](https://github.com/npm/cli/commit/27cccfbdac8526cc807b07f416355949b1372a9b) [#223](https://github.com/npm/cli/pull/223) vulns → vulnerabilities in npm audit output ([@sapegin](https://github.com/sapegin)) * [`d5e865eb7`](https://github.com/npm/cli/commit/d5e865eb79329665a927cc2767b4395c03045dbb) [#222](https://github.com/npm/cli/pull/222) [#226](https://github.com/npm/cli/pull/226) install, doctor: don't crash if registry unset ([@dmitrydvorkin](https://github.com/dmitrydvorkin), [@isaacs](https://github.com/isaacs)) * [`5b3890226`](https://github.com/npm/cli/commit/5b389022652abeb0e1c278a152550eb95bc6c452) [#227](https://github.com/npm/cli/pull/227) [npm.community#9167](https://npm.community/t/npm-err-cb-never-called-permission-denied/9167/5) Handle unhandledRejections, tell user what to do when encountering an `EACCES` error in the cache. ([@isaacs](https://github.com/isaacs)) ### DEPENDENCIES * [`77516df6e`](https://github.com/npm/cli/commit/77516df6eac94a6d7acb5e9ca06feaa0868d779b) `licensee@7.0.3` ([@isaacs](https://github.com/isaacs)) * [`ceb993590`](https://github.com/npm/cli/commit/ceb993590e4e376a9a78264ce7bb4327fbbb37fe) `query-string@6.8.2` ([@isaacs](https://github.com/isaacs)) * [`4050b9189`](https://github.com/npm/cli/commit/4050b91898c60e9b22998cf82b70b9b822de592a) `hosted-git-info@2.8.2` * [#46](https://github.com/npm/hosted-git-info/issues/46) [#43](https://github.com/npm/hosted-git-info/issues/43) [#47](https://github.com/npm/hosted-git-info/pull/47) [#44](https://github.com/npm/hosted-git-info/pull/44) Add support for GitLab subgroups ([@mterrel](https://github.com/mterrel), [@isaacs](https://github.com/isaacs), [@ybiquitous](https://github.com/ybiquitous)) * [`3b1d629`](https://github.com/npm/hosted-git-info/commit/3b1d629) [#48](https://github.com/npm/hosted-git-info/issues/48) fix http protocol using sshurl by default ([@fengmk2](https://github.com/fengmk2)) * [`5d4a8d7`](https://github.com/npm/hosted-git-info/commit/5d4a8d7) ignore noCommittish on tarball url generation ([@isaacs](https://github.com/isaacs)) * [`1692435`](https://github.com/npm/hosted-git-info/commit/1692435) use gist tarball url that works for anonymous gists ([@isaacs](https://github.com/isaacs)) * [`d5cf830`](https://github.com/npm/hosted-git-info/commit/d5cf8309be7af884032616c63ea302ce49dd321c) Do not allow invalid gist urls ([@isaacs](https://github.com/isaacs)) * [`e518222`](https://github.com/npm/hosted-git-info/commit/e5182224351183ce619dd5ef00019ae700ed37b7) Use LRU cache to prevent unbounded memory consumption ([@iarna](https://github.com/iarna)) ## v6.10.2 (2019-07-23): tl;dr - Fixes several issues with the cache when npm is run as `sudo` on Unix systems. ### TESTING * [`2a78b96f8`](https://github.com/npm/cli/commit/2a78b96f830bbd834720ccc9eacccc54915ae6f7) check test cache for root-owned files ([@isaacs](https://github.com/isaacs)) * [`108646ebc`](https://github.com/npm/cli/commit/108646ebc12f3eeebaa0a45884c45991a45e57e4) run sudo tests on Travis-CI ([@isaacs](https://github.com/isaacs)) * [`cf984e946`](https://github.com/npm/cli/commit/cf984e946f453cbea2fcc7a59608de3f24ab74c3) set --no-esm tap flag ([@isaacs](https://github.com/isaacs)) * [`8e0a3100d`](https://github.com/npm/cli/commit/8e0a3100dffb3965bb3dc4240e82980dfadf2f3c) add script to run tests and leave fixtures for inspection and debugging ([@isaacs](https://github.com/isaacs)) ### BUGFIXES * [`25f4f73f6`](https://github.com/npm/cli/commit/25f4f73f6dc9744757787c82351120cd1baee5f8) add a util for writing arbitrary files to cache This prevents metrics timing and debug logs from becoming root-owned. ([@isaacs](https://github.com/isaacs)) * [`2c61ce65d`](https://github.com/npm/cli/commit/2c61ce65d6b67100fdf3fcb9729055b669cb1a1d) infer cache owner from parent dir in `correct-mkdir` util ([@isaacs](https://github.com/isaacs)) * [`235e5d6df`](https://github.com/npm/cli/commit/235e5d6df6f427585ec58425f1f3339d08f39d8a) ensure correct owner on cached all-packages metadata ([@isaacs](https://github.com/isaacs)) * [`e2d377bb6`](https://github.com/npm/cli/commit/e2d377bb6419d8a3c1d80a73dba46062b4dad336) [npm.community#8540](https://npm.community/t/npm-audit-fails-with-child-requires-fails-because-requires-must-be-an-object/8540) audit: report server error on failure ([@isaacs](https://github.com/isaacs)) * [`52576a39e`](https://github.com/npm/cli/commit/52576a39ed75d94c46bb2c482fd38d2c6ea61c56) [#216](https://github.com/npm/cli/pull/216) [npm.community#5385](https://npm.community/t/6-8-0-npm-ci-fails-with-local-dependency/5385) [npm.community#6076](https://npm.community/t/npm-ci-fail-to-local-packages/6076) Fix `npm ci` with `file:` dependencies. Partially reverts [#40](https://github.com/npm/cli/pull/40)/[#86](https://github.com/npm/cli/pull/86), recording dependencies of linked deps in order for `npm ci` to work. ([@jfirebaugh](https://github.com/jfirebaugh)) ### DEPENDENCIES * [`0fefdee13`](https://github.com/npm/cli/commit/0fefdee130fd7d0dbb240fb9ecb50a793fbf3d29) `cacache@12.0.2` ([@isaacs](https://github.com/isaacs)) * infer uid/gid instead of accepting as options, preventing the overwhelming majority of cases where root-owned files end up in the cache folder. ([ac84d14](https://github.com/npm/cacache/commit/ac84d14)) ([@isaacs](https://github.com/isaacs)) ([#1](https://github.com/npm/cacache/pull/1)) * **i18n:** add another error message ([676cb32](https://github.com/npm/cacache/commit/676cb32)) ([@zkat](https://github.com/zkat)) * [`e1d87a392`](https://github.com/npm/cli/commit/e1d87a392371a070b0788ab7bfc62be18b21e9ad) `pacote@9.5.4` ([@isaacs](https://github.com/isaacs)) * git: ensure stream failures are reported ([7f07b5d](https://github.com/npm/pacote/commit/7f07b5d)) [#1](https://github.com/npm/pacote/issues/1) ([@lddubeau](https://github.com/lddubeau)) * [`3f035bf09`](https://github.com/npm/cli/commit/3f035bf098e2feea76574cec18b04812659aa16d) `infer-owner@1.0.4` ([@isaacs](https://github.com/isaacs)) * [`ba3283112`](https://github.com/npm/cli/commit/ba32831126591d2f6f48e31a4a2329b533b1ff19) `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) * [`ee90c334d`](https://github.com/npm/cli/commit/ee90c334d271383d0325af42f20f80f34cb61f07) `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) * [`1e480c384`](https://github.com/npm/cli/commit/1e480c38416982ae28b5cdd48c698ca59d3c0395) `libnpmaccess@3.0.2` ([@isaacs](https://github.com/isaacs)) * [`7662ee850`](https://github.com/npm/cli/commit/7662ee850220c71ecaec639adbc7715286f0d28b) `libnpmhook@5.0.3` ([@isaacs](https://github.com/isaacs)) * [`1357fadc6`](https://github.com/npm/cli/commit/1357fadc613d0bfeb40f9a8f3ecace2face2fe2c) `libnpmorg@1.0.1` ([@isaacs](https://github.com/isaacs)) * [`a621b5cb6`](https://github.com/npm/cli/commit/a621b5cb6c881f95a11af86a8051754a67ae017c) `libnpmsearch@2.0.2` ([@isaacs](https://github.com/isaacs)) * [`560cd31dd`](https://github.com/npm/cli/commit/560cd31dd51b6aa2e396ccdd7289fab0a50b5608) `libnpmteam@1.0.2` ([@isaacs](https://github.com/isaacs)) * [`de7ae0867`](https://github.com/npm/cli/commit/de7ae0867d4c0180edc283457ce0b4e8e5eee554) `npm-profile@4.0.2` ([@isaacs](https://github.com/isaacs)) * [`e95da463c`](https://github.com/npm/cli/commit/e95da463cb7a325457ef411a569d7ef4bf76901d) `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) * [`554b641d4`](https://github.com/npm/cli/commit/554b641d49d135ae8d137e83aa288897c32dacc6) `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) * [`06772f34a`](https://github.com/npm/cli/commit/06772f34ab851440dcd78574736936c674a84aed) `node-gyp@5.0.3` ([@isaacs](https://github.com/isaacs)) * [`85358db80`](https://github.com/npm/cli/commit/85358db80d6ccb5f7bc9a0b4d558ac6dd2468394) `npm-lifecycle@3.1.2` ([@isaacs](https://github.com/isaacs)) * [`051cf20`](https://github.com/npm/npm-lifecycle/commit/051cf20072a01839c17920d2e841756251c4f924) [#26](https://github.com/npm/npm-lifecycle/pull/26) fix switches for alternative shells on Windows ([@gucong3000](https://github.com/gucong3000)) * [`3aaf954`](https://github.com/npm/npm-lifecycle/commit/3aaf95435965e8f7acfd955582cf85237afd2c9b) [#25](https://github.com/npm/npm-lifecycle/pull/25) set only one PATH env variable for child process on Windows ([@zkochan](https://github.com/zkochan)) * [`ea18ed2`](https://github.com/npm/npm-lifecycle/commit/ea18ed2b754ca7f11998cad70d88e9004c5bef4a) [#36](https://github.com/npm/npm-lifecycle/pull/36) [#11](https://github.com/npm/npm-lifecycle/issue/11) [#18](https://github.com/npm/npm-lifecycle/issue/18) remove procInterrupt listener on SIGINT in procError ([@mattshin](https://github.com/mattshin)) * [`5523951`](https://github.com/npm/npm-lifecycle/commit/55239519c57b82521605622e6c71640a31ed4586) [#29](https://github.com/npm/npm-lifecycle/issue/29) [#30](https://github.com/npm/npm-lifecycle/pull/30) Use platform specific path casing if present ([@mattezell](https://github.com/mattezell)) ## v6.10.1 (2019-07-11): ### BUGFIXES * [`3cbd57712`](https://github.com/npm/cli/commit/3cbd577120a9da6e51bb8b13534d1bf71ea5712c) fix(git): strip GIT environs when running git ([@isaacs](https://github.com/isaacs)) * [`a81a8c4c4`](https://github.com/npm/cli/commit/a81a8c4c466f510215a51cef1bb08544d11844fe) [#206](https://github.com/npm/cli/pull/206) improve isOnly(Dev,Optional) ([@larsgw](https://github.com/larsgw)) * [`172f9aca6`](https://github.com/npm/cli/commit/172f9aca67a66ee303c17f90a994cd52fc66552a) [#179](https://github.com/npm/cli/pull/179) fix-xmas-underline ([@raywu0123](https://github.com/raywu0123)) * [`f52673fc7`](https://github.com/npm/cli/commit/f52673fc7284e58af8c04533e82b76bf7add72cf) [#212](https://github.com/npm/cli/pull/212) build: use `/usr/bin/env` to load bash ([@rsmarples](https://github.com/rsmarples)) ### DEPENDENCIES * [`ef4445ad3`](https://github.com/npm/cli/commit/ef4445ad34a53b5639499c8e3c9752f62ee6f37c) [#208](https://github.com/npm/cli/pull/208) `node-gyp@5.0.2` ([@irega](https://github.com/irega)) * [`c0d611356`](https://github.com/npm/cli/commit/c0d611356f7b23077e97574b01c8886e544db425) `npm-lifecycle@3.0.0` ([@isaacs](https://github.com/isaacs)) * [`7716ba972`](https://github.com/npm/cli/commit/7716ba9720270d5b780755a5bb1ce79702067f1f) `libcipm@4.0.0` ([@isaacs](https://github.com/isaacs)) * [`42d22e837`](https://github.com/npm/cli/commit/42d22e8374c7d303d94e405d7385d94dd2558814) `libnpm@3.0.0` ([@isaacs](https://github.com/isaacs)) * [`a2ea7f9ff`](https://github.com/npm/cli/commit/a2ea7f9ff64ae743d05fdbf7d46fb9afafa8aa6f) `semver@5.7.0` ([@isaacs](https://github.com/isaacs)) * [`429226a5e`](https://github.com/npm/cli/commit/429226a5e992cd907d4f19bd738037007cf78c1f) `lru-cache@5.1.1` ([@isaacs](https://github.com/isaacs)) * [`175670ea6`](https://github.com/npm/cli/commit/175670ea65cca03f8b2e957df3dd4b8b0efd0e1f) `npm-registry-fetch@3.9.1`: ([@isaacs](https://github.com/isaacs)) * [`0d0517f7f`](https://github.com/npm/cli/commit/0d0517f7f8c902b5064ac18fb4015b31750ad2b2) `call-limit@1.1.1` ([@isaacs](https://github.com/isaacs)) * [`741400429`](https://github.com/npm/cli/commit/74140042917ea241062a812ceb65c5423c2bafa9) `glob@7.1.4` ([@isaacs](https://github.com/isaacs)) * [`bddd60e30`](https://github.com/npm/cli/commit/bddd60e302283a4a70d35f8f742e42bd13f4dabf) `inherits@2.0.4` ([@isaacs](https://github.com/isaacs)) * [`4acf03fd1`](https://github.com/npm/cli/commit/4acf03fd140ed3ddb2dcf3fdc9756bc3f5a8bcbb) `libnpmsearch@2.0.1` ([@isaacs](https://github.com/isaacs)) * [`c2bd17291`](https://github.com/npm/cli/commit/c2bd17291a86bea7ced2fbd07d66d013bd7a7560) `marked@0.6.3` ([@isaacs](https://github.com/isaacs)) * [`7f0221bb1`](https://github.com/npm/cli/commit/7f0221bb1bb41ffc933c785940e227feae38c80c) `marked-man@0.6.0` ([@isaacs](https://github.com/isaacs)) * [`f458fe7dd`](https://github.com/npm/cli/commit/f458fe7dd3bebddf603aaae183a424ea8aaa018f) `npm-lifecycle@2.1.1` ([@isaacs](https://github.com/isaacs)) * [`009752978`](https://github.com/npm/cli/commit/0097529780269c28444f1efa0d7c131d47a933eb) `node-gyp@4.0.0` ([@isaacs](https://github.com/isaacs)) * [`0fa2bb438`](https://github.com/npm/cli/commit/0fa2bb4386379d6e9d8c95db08662ec0529964f9) `query-string@6.8.1` ([@isaacs](https://github.com/isaacs)) * [`b86450929`](https://github.com/npm/cli/commit/b86450929796950a1fe4b1f9b02b1634c812f3bb) `tar-stream@2.1.0` ([@isaacs](https://github.com/isaacs)) * [`25db00fe9`](https://github.com/npm/cli/commit/25db00fe953453198adb9e1bd71d1bc2a9f04aaa) `worker-farm@1.7.0` ([@isaacs](https://github.com/isaacs)) * [`8dfbe8610`](https://github.com/npm/cli/commit/8dfbe861085dfa8fa56bb504b4a00fba04c34f9d) `readable-stream@3.4.0` ([@isaacs](https://github.com/isaacs)) * [`f6164d5dd`](https://github.com/npm/cli/commit/f6164d5ddd072eabdf2237f1694a31efd746eb1d) [isaacs/chownr#21](https://github.com/isaacs/chownr/pull/21) [isaacs/chownr#20](https://github.com/isaacs/chownr/issues/20) [npm.community#7901](https://npm.community/t/7901/) [npm.community#8203](https://npm.community/t/8203) `chownr@1.1.2` This fixes an EISDIR error from cacache on Darwin in Node versions prior to 10.6. ([@isaacs](https://github.com/isaacs)) ## v6.10.0 (2019-07-03): ### FEATURES * [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35) [#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for outdated --json ([@sreeramjayan](https://github.com/sreeramjayan)) * [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc) [#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space after hyphen ([@ffflorian](https://github.com/ffflorian)) * [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c) [#202](https://github.com/npm/cli/pull/202) enable production flag for npm audit ([@CalebCourier](https://github.com/CalebCourier)) * [`d192904d0`](https://github.com/npm/cli/commit/d192904d0) [#178](https://github.com/npm/cli/pull/178) fix: Return a value for `view` when in silent mode ([@stayradiated](https://github.com/stayradiated)) * [`39d473adf`](https://github.com/npm/cli/commit/39d473adf) [#185](https://github.com/npm/cli/pull/185) Allow git to follow global tagsign config ([@junderw](https://github.com/junderw)) ### BUGFIXES * [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b) [#201](https://github.com/npm/cli/pull/163) [npm/npm#17858](https://github.com/npm/npm/issues/17858) [npm/npm#18042](https://github.com/npm/npm/issues/18042) [npm.community#644](https://npm.community/t/644) do not crash when removing nameless packages ([@SteveVanOpstal](https://github.com/SteveVanOpstal) and [@isaacs](https://github.com/isaacs)) * [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111) [#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as `node.exe`) in npm's local dir on Windows ([@rgoulais](https://github.com/rgoulais)) * [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789) [#180](https://github.com/npm/cli/pull/180) [npm.community#6187](https://npm.community/t/6187) Fix handling of `remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw)) ### TESTING * [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update to include new v12 LTS ([@isaacs](https://github.com/isaacs)) * [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky debug-logs test ([@isaacs](https://github.com/isaacs)) * [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out waiting for gpg user input ([@isaacs](https://github.com/isaacs)) * [`d2d301704`](https://github.com/npm/cli/commit/d2d301704) [#195](https://github.com/npm/cli/pull/195) Add the arm64 check for legacy-platform-all.js test case. ([@ossdev07](https://github.com/ossdev07)) * [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests ([@isaacs](https://github.com/isaacs)) ### DOCUMENTATION * [`f5857e263`](https://github.com/npm/cli/commit/f5857e263) [#192](https://github.com/npm/cli/pull/192) Clarify usage of bundledDependencies ([@john-osullivan](https://github.com/john-osullivan)) * [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66) [#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param ([@ngraef](https://github.com/ngraef)) ### DEPENDENCIES * [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320) graceful-fs@4.2.0 ([@isaacs](https://github.com/isaacs)) * [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09) read-package-tree@5.3.1 ([@isaacs](https://github.com/isaacs)) * [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536) Use custom caching `realpath` implementation, dramatically reducing `lstat` calls when reading the package tree ([@isaacs](https://github.com/isaacs)) * [`39538b460`](https://github.com/npm/cli/commit/39538b460) write-file-atomic@2.4.3 ([@isaacs](https://github.com/isaacs)) * [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552) [#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage)) * [`042193069`](https://github.com/npm/cli/commit/042193069) pacote@9.5.1 ([@isaacs](https://github.com/isaacs)) * [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051) [#172](https://github.com/zkat/pacote/pull/172) limit git retry times, avoid unlimited retries ([小秦](https://github.com/xqin)) * [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c) [#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix "TypeError: err.code.match is not a function" error ([@jviotti](https://github.com/jviotti)) * [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) cacache@11.3.3 ([@isaacs](https://github.com/isaacs)) * [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5) [#146](https://github.com/zkat/cacache/pull/146) [npm.community#2395](https://npm.community/t/2395) fix(config): Add ssri config 'error' option ([@larsgw](https://github.com/larsgw)) * [`5156561`](https://github.com/npm/cacache/commit/5156561) fix(write): avoid a `cb never called` situation ([@zkat](https://github.com/zkat)) * [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0) [#166](https://github.com/zkat/cacache/pull/166) [#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for `path` property in get.info ([@hdgarrood](https://github.com/hdgarrood)) * [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) bluebird@3.5.5 ([@isaacs](https://github.com/isaacs)) * [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) tar@4.4.10 ([@isaacs](https://github.com/isaacs)) * [`c80341a`](https://github.com/npm/node-tar/commit/c80341a) [#215](https://github.com/npm/node-tar/pull/215) Fix encoding/decoding of base-256 numbers ([@justfalter](https://github.com/justfalter)) * [`77522f0`](https://github.com/npm/node-tar/commit/77522f0) [#204](https://github.com/npm/node-tar/issues/204) [#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead of `lstat` when checking CWD ([@stkb](https://github.com/stkb)) * [`ec6236210`](https://github.com/npm/cli/commit/ec6236210) npm-packlist@1.4.4 ([@isaacs](https://github.com/isaacs)) * [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e) [#30](https://github.com/npm/npm-packlist/issues/30) Sort package tarball entries by file type for compression benefits ([@isaacs](https://github.com/isaacs)) * [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045) Ignore `.DS_Store` files as well as folders ([@isaacs](https://github.com/isaacs)) * [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never include .git folders in package root. (Note: this prevents the issue that broke the v6.9.1 release.) ([@isaacs](https://github.com/isaacs)) * [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream in node-gyp ([@isaacs](https://github.com/isaacs)) * Addresses [security advisory #886](https://www.npmjs.com/advisories/886) * [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee) [#183](https://github.com/npm/cli/pull/183) licensee@7.0.2 ([@kemitchell](https://github.com/kemitchell)) * [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0) readable-stream@3.3.0 ([@isaacs](https://github.com/isaacs)) * [`f5e884909`](https://github.com/npm/cli/commit/f5e884909) npm-registry-mock@1.2.1 ([@isaacs](https://github.com/isaacs)) * [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35) npm-registry-couchapp@2.7.2 ([@isaacs](https://github.com/isaacs)) ## v6.9.2 (2019-06-27): This release is identical to v6.9.1, but we had to publish a new version due to [a .git directory in the release](https://npm.community/t/8454). ## v6.9.1 (2019-06-26): ### BUGFIXES * [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611) [#165](https://github.com/npm/cli/pull/165) Update `knownBroken` version. ([@ljharb](https://github.com/ljharb)) * [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1) [npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929) Fix `outdated` rendering for global dependencies. ([@zkat](https://github.com/zkat)) * [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc) [npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259) Fix OTP for token create and remove. ([@zkat](https://github.com/zkat)) ### DEPENDENCIES * [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc) `sha@3.0.0` ([@aeschright](https://github.com/aeschright)) * [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5) `query-string@6.4.0` ([@aeschright](https://github.com/aeschright)) * [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64) `readable-stream@3.2.0` ([@aeschright](https://github.com/aeschright)) * [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e) `tacks@1.3.0` ([@aeschright](https://github.com/aeschright)) * [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8) `tap@12.6.0` ([@aeschright](https://github.com/aeschright)) * [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3) `tar-stream@2.0.1` ([@aeschright](https://github.com/aeschright)) ## v6.9.0 (2019-02-20): ### FEATURES * [`2ba3a0f67`](https://github.com/npm/cli/commit/2ba3a0f6721f6d5a16775aebce6012965634fc7c) [#90](https://github.com/npm/cli/pull/90) Time traveling installs using the `--before` flag. ([@zkat](https://github.com/zkat)) * [`b7b54f2d1`](https://github.com/npm/cli/commit/b7b54f2d18e2d8d65ec67c850b21ae9f01c60e7e) [#3](https://github.com/npm/cli/pull/3) Add support for package aliases. This allows packages to be installed under a different directory than the package name listed in `package.json`, and adds a new dependency type to allow this to be done for registry dependencies. ([@zkat](https://github.com/zkat)) * [`684bccf06`](https://github.com/npm/cli/commit/684bccf061dfc97bb759121bc0ad635e01c65868) [#146](https://github.com/npm/cli/pull/146) Always save `package-lock.json` when using `--package-lock-only`. ([@aeschright](https://github.com/aeschright)) * [`b8b8afd40`](https://github.com/npm/cli/commit/b8b8afd4048b4ba1181e00ba2ac49ced43936ce0) [#139](https://github.com/npm/cli/pull/139) Make empty-string run-scripts run successfully as a no-op. ([@vlasy](https://github.com/vlasy)) * [`8047b19b1`](https://github.com/npm/cli/commit/8047b19b1b994fd4b4e7b5c91d7cc4e0384bd5e4) [npm.community#3784](https://npm.community/t/3784) Match git semver ranges when flattening the tree. ([@larsgw](https://github.com/larsgw)) * [`e135c2bb3`](https://github.com/npm/cli/commit/e135c2bb360dcf00ecee34a95985afec21ba3655) [npm.community#1725](https://npm.community/t/1725?u=larsgw) Re-enable updating local packages. ([@larsgw](https://github.com/larsgw)) ### BUGFIXES * [`cf09fbaed`](https://github.com/npm/cli/commit/cf09fbaed489d908e9b551382cc5f61bdabe99a9) [#153](https://github.com/npm/cli/pull/153) Set modified to undefined in `npm view` when `time` is not available. This fixes a bug where `npm view` would crash on certain third-party registries. ([@simonua](https://github.com/simonua)) * [`774fc26ee`](https://github.com/npm/cli/commit/774fc26eeb01345c11bd8c97e2c4f328d419d9b5) [#154](https://github.com/npm/cli/pull/154) Print out tar version in `install.sh` only when the flag is supported not all the tar implementations support --version flag. This allows the install script to work in OpenBSD, for example. ([@agudulin](https://github.com/agudulin)) * [`863baff11`](https://github.com/npm/cli/commit/863baff11d8c870f1a0d9619bb5133c67d71e407) [#158](https://github.com/npm/cli/pull/158) Fix typo in error message for `npm stars`. ([@phihag](https://github.com/phihag)) * [`a805a95ad`](https://github.com/npm/cli/commit/a805a95ad8832ef5008671f4bd4c11b83e32e0f2) [npm.community#4227](https://npm.community/t/4227) Strip version info from pkg on E404. This improves the error messaging format. ([@larsgw](https://github.com/larsgw)) ### DOCS * [`5d7633833`](https://github.com/npm/cli/commit/5d76338338621fd0b3d4f7914a51726d27569ee1) [#160](https://github.com/npm/cli/pull/160) Add `npm add` as alias to npm install in docs. ([@ahasall](https://github.com/ahasall)) * [`489c2211c`](https://github.com/npm/cli/commit/489c2211c96a01d65df50fd57346c785bcc3efe6) [#162](https://github.com/npm/cli/pull/162) Fix link to RFC #10 in the changelog. ([@mansona](https://github.com/mansona)) * [`433020ead`](https://github.com/npm/cli/commit/433020ead5251b562bc3b0f5f55341a5b8cc9023) [#135](https://github.com/npm/cli/pull/135) Describe exit codes in npm-audit docs. ([@emilis-tm](https://github.com/emilis-tm)) ### DEPENDENCIES * [`ee6b6746b`](https://github.com/npm/cli/commit/ee6b6746b04f145dfe489af2d26667ac32ba0cef) [zkat/make-fetch-happen#29](https://github.com/zkat/make-fetch-happen/issues/29) `agent-base@4.2.1` ([@TooTallNate](https://github.com/TooTallNate)) * [`2ce23baf5`](https://github.com/npm/cli/commit/2ce23baf53b1ce7d11b8efb80c598ddaf9cef9e7) `lock-verify@2.1.0`: Adds support for package aliases ([@zkat](https://github.com/zkat)) * [`baaedbc6e`](https://github.com/npm/cli/commit/baaedbc6e2fc370d73b35e7721794719115507cc) `pacote@9.5.0`: Adds opts.before support ([@zkat](https://github.com/zkat)) * [`57e771a03`](https://github.com/npm/cli/commit/57e771a032165d1e31e71d0ff7530442139c21a6) [#164](https://github.com/npm/cli/pull/164) `licensee@6.1.0` ([@kemitchell](https://github.com/kemitchell)) * [`2b78288d4`](https://github.com/npm/cli/commit/2b78288d4accd10c1b7cc6c36bc28045f5634d91) add core to default inclusion tests in pack ([@Kat Marchán](https://github.com/Kat Marchán)) * [`9b8b6513f`](https://github.com/npm/cli/commit/9b8b6513fbce92764b32a067322984985ff683fe) [npm.community#5382](https://npm.community/t/npm-pack-leaving-out-files-6-8-0-only/5382) `npm-packlist@1.4.1`: Fixes bug where `core/` directories were being suddenly excluded. ([@zkat](https://github.com/zkat)) ## v6.8.0 (2019-02-07): This release includes an implementation of [RFC #10](https://github.com/npm/rfcs/blob/latest/implemented/0010-monorepo-subdirectory-declaration.md), documenting an optional field that can be used to specify the directory path for a package within a monorepo. ### NEW FEATURES * [`3663cdef2`](https://github.com/npm/cli/commit/3663cdef205fa9ba2c2830e5ef7ceeb31c30298c) [#140](https://github.com/npm/cli/pull/140) Update package.json docs to include repository.directory details. ([@greysteil](https://github.com/greysteil)) ### BUGFIXES * [`550bf703a`](https://github.com/npm/cli/commit/550bf703ae3e31ba6a300658ae95b6937f67b68f) Add @types to ignore list to fix git clean -fd. ([@zkat](https://github.com/zkat)) * [`cdb059293`](https://github.com/npm/cli/commit/cdb0592939d6256c80f7ec5a2b6251131a512a2a) [#144](https://github.com/npm/cli/pull/144) Fix common.npm callback arguments. ([@larsgw](https://github.com/larsgw)) * [`25573e9b9`](https://github.com/npm/cli/commit/25573e9b9d5d26261c68d453f06db5b3b1cd6789) [npm.community#4770](https://npm.community/t/https://npm.community/t/4770) Show installed but unmet peer deps. ([@larsgw](https://github.com/larsgw)) * [`ce2c4bd1a`](https://github.com/npm/cli/commit/ce2c4bd1a2ce7ac1727a4ca9a350b743a2e27b2a) [#149](https://github.com/npm/cli/pull/149) Use figgy-config to make sure extra opts are there. ([@zkat](https://github.com/zkat)) * [`3c22d1a35`](https://github.com/npm/cli/commit/3c22d1a35878f73c0af8ea5968b962a85a1a9b84) [npm.community#5101](https://npm.community/t/npm-6-6-0-breaks-access-to-ls-collaborators/5101) Fix `ls-collaborators` access error for non-scoped case. ([@zkat](https://github.com/zkat)) * [`d5137091d`](https://github.com/npm/cli/commit/d5137091dd695a2980f7ade85fdc56b2421ff677) [npm.community#754](https://npm.community/t/npm-install-for-package-with-local-dependency-fails/754) Fix issue with sub-folder local references. ([@iarna](https://github.com/iarna)) ([@jhecking](https://github.com/jhecking)) ### DEPENDENCY BUMPS * [`d72141080`](https://github.com/npm/cli/commit/d72141080ec8fcf35bcc5650245efbe649de053e) `npm-registry-couchapp@2.7.1` ([@zkat](https://github.com/zkat)) * [`671cad1b1`](https://github.com/npm/cli/commit/671cad1b18239d540da246d6f78de45d9f784396) `npm-registry-fetch@3.9.0`: Make sure publishing with legacy username:password `_auth` works again. ([@zkat](https://github.com/zkat)) * [`95ca1aef4`](https://github.com/npm/cli/commit/95ca1aef4077c8e68d9f4dce37f6ba49b591c4ca) `pacote@9.4.1` ([@aeschright](https://github.com/aeschright)) * [`322fef403`](https://github.com/npm/cli/commit/322fef40376e71cd100159dc914e7ca89faae327) `normalize-package-data@2.5.0` ([@aeschright](https://github.com/aeschright)) * [`32d34c0da`](https://github.com/npm/cli/commit/32d34c0da4f393a74697297667eb9226155ecc6b) `npm-packlist@1.3.0` ([@aeschright](https://github.com/aeschright)) * [`338571cf0`](https://github.com/npm/cli/commit/338571cf0bd3a1e2ea800464d57581932ff0fb11) `read-package-tree@5.2.2` ([@zkat](https://github.com/zkat)) ### MISC * [`89b23a5f7`](https://github.com/npm/cli/commit/89b23a5f7b0ccdcdda1d7d4d3eafb6903156d186) [#120](https://github.com/npm/cli/pull/120) Use `const` in lib/fetch-package-metadata.md. ([@watilde](https://github.com/watilde)) * [`4970d553c`](https://github.com/npm/cli/commit/4970d553c0ea66128931d118469fd31c87cc7986) [#126](https://github.com/npm/cli/pull/126) Replace ronn with marked-man in `.npmignore`. ([@watilde](https://github.com/watilde)) * [`d9b6090dc`](https://github.com/npm/cli/commit/d9b6090dc26cd0fded18b4f80248cff3e51bb185) [#138](https://github.com/npm/cli/pull/138) Reduce work to test if executable ends with a 'g'. ([@elidoran](https://github.com/elidoran)) ([@larsgw](https://github.com/larsgw)) ## v6.7.0 (2019-01-23): Hey y'all! This is a quick hotfix release that includes some important fixes to `npm@6.6.0` related to the large rewrite/refactor. We're tagging it as a feature release because the changes involve some minor new features, and semver is semver, but there's nothing major here. ### NEW FEATURES * [`50463f58b`](https://github.com/npm/cli/commit/50463f58b4b70180a85d6d8c10fcf50d8970ef5e) Improve usage errors to `npm org` commands and add optional filtering to `npm org ls` subcommand. ([@zkat](https://github.com/zkat)) ### BUGFIXES * [`4027070b0`](https://github.com/npm/cli/commit/4027070b03be3bdae2515f2291de89b91f901df9) Fix default usage printout for `npm org` so you actually see how it's supposed to be used. ([@zkat](https://github.com/zkat)) * [`cfea6ea5b`](https://github.com/npm/cli/commit/cfea6ea5b67ec5e4ec57e3a9cb8c82d018cb5476) fix default usage message for npm hook ([@zkat](https://github.com/zkat)) ### DOCS * [`e959e1421`](https://github.com/npm/cli/commit/e959e14217d751ddb295565fd75cc81de1ee0d5b) Add manpage for `npm org` command. ([@zkat](https://github.com/zkat)) ### DEPENDENCY BUMPS * [`8543fc357`](https://github.com/npm/cli/commit/8543fc3576f64e91f7946d4c56a5ffb045b55156) `pacote@9.4.0`: Fall back to "fullfat" packuments on ETARGET errors. This will make it so that, when a package is published but the corgi follower hasn't caught up, users can still install a freshly-published package. ([@zkat](https://github.com/zkat)) * [`75475043b`](https://github.com/npm/cli/commit/75475043b03a254b2e7db2c04c3f0baea31d8dc5) [npm.community#4752](https://npm.community/t/npm-6-6-0-broke-authentication-with-npm-registry-couchapp/4752) `libnpmpublish@1.1.1`: Fixes auth error for username/password legacy authentication. ([@sreeramjayan](https://github.com/sreeramjayan)) * [`0af8c00ac`](https://github.com/npm/cli/commit/0af8c00acb01849362ffca25b567cc62447c7175) [npm.community#4746](https://npm.community/t/npm-6-6-0-release-breaking-docker-npm-ci-commands/4746) `libcipm@3.0.3`: Fixes issue with "cannot run in wd" errors for run-scripts. ([@zkat](https://github.com/zkat)) * [`5a7962e46`](https://github.com/npm/cli/commit/5a7962e46f582c6bd91784b0ddc941ed45e9f802) `write-file-atomic@2.4.2`: Fixes issues with leaking `signal-exit` instances and file descriptors. ([@iarna](https://github.com/iarna)) ## v6.6.0 (2019-01-17): ### REFACTORING OUT npm-REGISTRY-CLIENT Today is an auspicious day! This release marks the end of a massive internal refactor to npm that means we finally got rid of the legacy [`npm-registry-client`](https://npm.im/npm-registry-client) in favor of the shiny, new, `window.fetch`-like [`npm-registry-fetch`](https://npm.im/npm-registry-fetch). Now, the installer had already done most of this work with the release of `npm@5`, but it turns out _every other command_ still used the legacy client. This release updates all of those commands to use the new client, and while we're at it, adds a few extra goodies: * All OTP-requiring commands will now **prompt**. `--otp` is no longer required for `dist-tag`, `access`, et al. * We're starting to integrate a new config system which will eventually get extracted into a standalone package. * We now use [`libnpm`](https://npm.im/libnpm) for the API functionality of a lot of our commands! That means you can install a library if you want to write your own tooling around them. * There's now an `npm org` command for managing users in your org. * [`pacote`](https://npm.im/pacote) now consumes npm-style configurations, instead of its own naming for various config vars. This will make it easier to load npm configs using `libnpm.config` and hand them directly to `pacote`. There's too many commits to list all of them here, so check out the PR if you're curious about details: * [`c5af34c05`](https://github.com/npm/cli/commit/c5af34c05fd569aecd11f18d6d0ddeac3970b253) [npm-registry-client@REMOVED](https://www.youtube.com/watch\?v\=kPIdRJlzERo) ([@zkat](https://github.com/zkat)) * [`4cca9cb90`](https://github.com/npm/cli/commit/4cca9cb9042c0eeb743377e8f1ae1c07733df43f) [`ad67461dc`](https://github.com/npm/cli/commit/ad67461dc3a73d5ae6569fdbee44c67e1daf86e7) [`77625f9e2`](https://github.com/npm/cli/commit/77625f9e20d4285b7726b3bf3ebc10cb21c638f0) [`6e922aefb`](https://github.com/npm/cli/commit/6e922aefbb4634bbd77ed3b143e0765d63afc7f9) [`584613ea8`](https://github.com/npm/cli/commit/584613ea8ff94b927db4957e5647504b30ca2b1f) [`64de4ebf0`](https://github.com/npm/cli/commit/64de4ebf019b217179039124c6621e74651e4d27) [`6cd87d1a9`](https://github.com/npm/cli/commit/6cd87d1a9bb90e795f9891ea4db384435f4a8930) [`2786834c0`](https://github.com/npm/cli/commit/2786834c0257b8bb1bbb115f1ce7060abaab2e17) [`514558e09`](https://github.com/npm/cli/commit/514558e094460fd0284a759c13965b685133b3fe) [`dec07ebe3`](https://github.com/npm/cli/commit/dec07ebe3312245f6421c6e523660be4973ae8c2) [`084741913`](https://github.com/npm/cli/commit/084741913c4fdb396e589abf3440b4be3aa0b67e) [`45aff0e02`](https://github.com/npm/cli/commit/45aff0e02251785a85e56eafacf9efaeac6f92ae) [`846ddcc44`](https://github.com/npm/cli/commit/846ddcc44538f2d9a51ac79405010dfe97fdcdeb) [`8971ba1b9`](https://github.com/npm/cli/commit/8971ba1b953d4f05ff5094f1822b91526282edd8) [`99156e081`](https://github.com/npm/cli/commit/99156e081a07516d6c970685bc3d858f89dc4f9c) [`ab2155306`](https://github.com/npm/cli/commit/ab215530674d7f6123c9572d0ad4ca9e9b5fb184) [`b37a66542`](https://github.com/npm/cli/commit/b37a66542ca2879069b2acd338b1904de71b7f40) [`d2af0777a`](https://github.com/npm/cli/commit/d2af0777ac179ff5009dbbf0354a4a84f151b60f) [`e0b4c6880`](https://github.com/npm/cli/commit/e0b4c6880504fa2e8491c2fbd098efcb2e496849) [`ff72350b4`](https://github.com/npm/cli/commit/ff72350b4c56d65e4a92671d86a33080bf3c2ea5) [`6ed943303`](https://github.com/npm/cli/commit/6ed943303ce7a267ddb26aa25caa035f832895dd) [`90a069e7d`](https://github.com/npm/cli/commit/90a069e7d4646682211f4cabe289c306ee1d5397) [`b24ed5fdc`](https://github.com/npm/cli/commit/b24ed5fdc3a4395628465ae5273bad54eea274c8) [`ec9fcc14f`](https://github.com/npm/cli/commit/ec9fcc14f4e0e2f3967e2fd6ad8b8433076393cb) [`8a56fa39e`](https://github.com/npm/cli/commit/8a56fa39e61136da45565447fe201a57f04ad4cd) [`41d19e18f`](https://github.com/npm/cli/commit/41d19e18f769c6f0acfdffbdb01d12bf332908ce) [`125ff9551`](https://github.com/npm/cli/commit/125ff9551595dda9dab2edaef10f4c73ae8e1433) [`1c3b226ff`](https://github.com/npm/cli/commit/1c3b226ff37159c426e855e83c8f6c361603901d) [`3c0a7b06b`](https://github.com/npm/cli/commit/3c0a7b06b6473fe068fc8ae8466c07a177975b87) [`08fcb3f0f`](https://github.com/npm/cli/commit/08fcb3f0f26e025702b35253ed70a527ab69977f) [`c8135d97a`](https://github.com/npm/cli/commit/c8135d97a424b38363dc4530c45e4583471e9849) [`ae936f22c`](https://github.com/npm/cli/commit/ae936f22ce80614287f2769e9aaa9a155f03cc15) [#2](https://github.com/npm/cli/pull/2) Move rest of commands to `npm-registry-fetch` and use [`figgy-pudding`](https://npm.im/figgy-pudding) for configs. ([@zkat](https://github.com/zkat)) ### NEW FEATURES * [`02c837e01`](https://github.com/npm/cli/commit/02c837e01a71a26f37cbd5a09be89df8a9ce01da) [#106](https://github.com/npm/cli/pull/106) Make `npm dist-tags` the same as `npm dist-tag ls`. ([@isaacs](https://github.com/isaacs)) * [`1065a7809`](https://github.com/npm/cli/commit/1065a7809161fd4dc23e96b642019fc842fdacf2) [#65](https://github.com/npm/cli/pull/65) Add support for `IBM i`. ([@dmabupt](https://github.com/dmabupt)) * [`a22e6f5fc`](https://github.com/npm/cli/commit/a22e6f5fc3e91350d3c64dcc88eabbe0efbca759) [#131](https://github.com/npm/cli/pull/131) Update profile to support new npm-profile API. ([@zkat](https://github.com/zkat)) ### BUGFIXES * [`890a74458`](https://github.com/npm/cli/commit/890a74458dd4a55e2d85f3eba9dbf125affa4206) [npm.community#3278](https://npm.community/t/3278) Fix support for passing git binary path config with `--git`. ([@larsgw](https://github.com/larsgw)) * [`90e55a143`](https://github.com/npm/cli/commit/90e55a143ed1de8678d65c17bc3c2b103a15ddac) [npm.community#2713](https://npm.community/t/npx-envinfo-preset-jest-fails-on-windows-with-a-stack-trace/2713) Check for `npm.config`'s existence in `error-handler.js` to prevent weird errors when failures happen before config object is loaded. ([@BeniCheni](https://github.com/BeniCheni)) * [`134207174`](https://github.com/npm/cli/commit/134207174652e1eb6d7b0f44fd9858a0b6a0cd6c) [npm.community#2569](https://npm.community/t/2569) Fix checking for optional dependencies. ([@larsgw](https://github.com/larsgw)) * [`7a2f6b05d`](https://github.com/npm/cli/commit/7a2f6b05d27f3bcf47a48230db62e86afa41c9d3) [npm.community#4172](https://npm.community/t/4172) Remove tink experiments. ([@larsgw](https://github.com/larsgw)) * [`c5b6056b6`](https://github.com/npm/cli/commit/c5b6056b6b35eefb81ae5fb00a5c7681c5318c22) [#123](https://github.com/npm/cli/pull/123) Handle git branch references correctly. ([@johanneswuerbach](https://github.com/johanneswuerbach)) * [`f58b43ef2`](https://github.com/npm/cli/commit/f58b43ef2c5e3dea2094340a0cf264b2d11a5da4) [npm.community#3983](https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983) Report any errors above 400 as potentially not supporting audit. ([@zkat](https://github.com/zkat)) * [`a5c9e6f35`](https://github.com/npm/cli/commit/a5c9e6f35a591a6e2d4b6ace5c01bc03f2b75fdc) [#124](https://github.com/npm/cli/pull/124) Set default homepage to an empty string. ([@anchnk](https://github.com/anchnk)) * [`5d076351d`](https://github.com/npm/cli/commit/5d076351d7ec1d3585942a9289548166a7fbbd4c) [npm.community#4054](https://npm.community/t/4054) Fix npm-prefix description. ([@larsgw](https://github.com/larsgw)) ### DOCS * [`31a7274b7`](https://github.com/npm/cli/commit/31a7274b70de18b24e7bee51daa22cc7cbb6141c) [#71](https://github.com/npm/cli/pull/71) Fix typo in npm-token documentation. ([@GeorgeTaveras1231](https://github.com/GeorgeTaveras1231)) * [`2401b7592`](https://github.com/npm/cli/commit/2401b7592c6ee114e6db7077ebf8c072b7bfe427) Correct docs for fake-registry interface. ([@iarna](https://github.com/iarna)) ### DEPENDENCIES * [`9cefcdc1d`](https://github.com/npm/cli/commit/9cefcdc1d2289b56f9164d14d7e499e115cfeaee) `npm-registry-fetch@3.8.0` ([@zkat](https://github.com/zkat)) * [`1c769c9b3`](https://github.com/npm/cli/commit/1c769c9b3e431d324c1a5b6dd10e1fddb5cb88c7) `pacote@9.1.0` ([@zkat](https://github.com/zkat)) * [`f3bc5539b`](https://github.com/npm/cli/commit/f3bc5539b30446500abcc3873781b2c717f8e22c) `figgy-pudding@3.5.1` ([@zkat](https://github.com/zkat)) * [`bf7199d3c`](https://github.com/npm/cli/commit/bf7199d3cbf50545da1ebd30d28f0a6ed5444a00) `npm-profile@4.0.1` ([@zkat](https://github.com/zkat)) * [`118c50496`](https://github.com/npm/cli/commit/118c50496c01231cab3821ae623be6df89cb0a32) `semver@5.5.1` ([@isaacs](https://github.com/isaacs)) * [`eab4df925`](https://github.com/npm/cli/commit/eab4df9250e9169c694b3f6c287d2932bf5e08fb) `libcipm@3.0.2` ([@zkat](https://github.com/zkat)) * [`b86e51573`](https://github.com/npm/cli/commit/b86e515734faf433dc6c457c36c1de52795aa870) `libnpm@1.4.0` ([@zkat](https://github.com/zkat)) * [`56fffbff2`](https://github.com/npm/cli/commit/56fffbff27fe2fae8bef27d946755789ef0d89bd) `get-stream@4.1.0` ([@zkat](https://github.com/zkat)) * [`df972e948`](https://github.com/npm/cli/commit/df972e94868050b5aa42ac18b527fd929e1de9e4) npm-profile@REMOVED ([@zkat](https://github.com/zkat)) * [`32c73bf0e`](https://github.com/npm/cli/commit/32c73bf0e3f0441d0c7c940292235d4b93aa87e2) `libnpm@2.0.1` ([@zkat](https://github.com/zkat)) * [`569491b80`](https://github.com/npm/cli/commit/569491b8042f939dc13986b6adb2a0a260f95b63) `licensee@5.0.0` ([@zkat](https://github.com/zkat)) * [`a3ba0ccf1`](https://github.com/npm/cli/commit/a3ba0ccf1fa86aec56b1ad49883abf28c1f56b3c) move rimraf to prod deps ([@zkat](https://github.com/zkat)) * [`f63a0d6cf`](https://github.com/npm/cli/commit/f63a0d6cf0b7db3dcc80e72e1383c3df723c8119) `spdx-license-ids@3.0.3`: Ref: https://github.com/npm/cli/pull/121 ([@zkat](https://github.com/zkat)) * [`f350e714f`](https://github.com/npm/cli/commit/f350e714f66a77f71a7ebe17daeea2ea98179a1a) `aproba@2.0.0` ([@aeschright](https://github.com/aeschright)) * [`a67e4d8b2`](https://github.com/npm/cli/commit/a67e4d8b214e58ede037c3854961acb33fd889da) `byte-size@5.0.1` ([@aeschright](https://github.com/aeschright)) * [`8bea4efa3`](https://github.com/npm/cli/commit/8bea4efa34857c4e547904b3630dd442def241de) `cacache@11.3.2` ([@aeschright](https://github.com/aeschright)) * [`9d4776836`](https://github.com/npm/cli/commit/9d4776836a4eaa4b19701b4e4f00cd64578bf078) `chownr@1.1.1` ([@aeschright](https://github.com/aeschright)) * [`70da139e9`](https://github.com/npm/cli/commit/70da139e97ed1660c216e2d9b3f9cfb986bfd4a4) `ci-info@2.0.0` ([@aeschright](https://github.com/aeschright)) * [`bcdeddcc3`](https://github.com/npm/cli/commit/bcdeddcc3d4dc242f42404223dafe4afdc753b32) `cli-table3@0.5.1` ([@aeschright](https://github.com/aeschright)) * [`63aab82c7`](https://github.com/npm/cli/commit/63aab82c7bfca4f16987cf4156ddebf8d150747c) `is-cidr@3.0.0` ([@aeschright](https://github.com/aeschright)) * [`d522bd90c`](https://github.com/npm/cli/commit/d522bd90c3b0cb08518f249ae5b90bd609fff165) `JSONStream@1.3.5` ([@aeschright](https://github.com/aeschright)) * [`2a59bfc79`](https://github.com/npm/cli/commit/2a59bfc7989bd5575d8cbba912977c6d1ba92567) `libnpmhook@5.0.2` ([@aeschright](https://github.com/aeschright)) * [`66d60e394`](https://github.com/npm/cli/commit/66d60e394e5a96330f90e230505758f19a3643ac) `marked@0.6.0` ([@aeschright](https://github.com/aeschright)) * [`8213def9a`](https://github.com/npm/cli/commit/8213def9aa9b6e702887e4f2ed7654943e1e4154) `npm-packlist@1.2.0` ([@aeschright](https://github.com/aeschright)) * [`e4ffc6a2b`](https://github.com/npm/cli/commit/e4ffc6a2bfb8d0b7047cb6692030484760fc8c91) `unique-filename@1.1.1` ([@aeschright](https://github.com/aeschright)) * [`09a5c2fab`](https://github.com/npm/cli/commit/09a5c2fabe0d1c00ec8c99f328f6d28a3495eb0b) `semver@5.6.0` ([@aeschright](https://github.com/aeschright)) * [`740e79e17`](https://github.com/npm/cli/commit/740e79e17a78247f73349525043c9388ce94459a) `rimraf@2.6.3` ([@aeschright](https://github.com/aeschright)) * [`455476c8d`](https://github.com/npm/cli/commit/455476c8d148ca83a4e030e96e93dcf1c7f0ff5f) `require-inject@1.4.4` ([@aeschright](https://github.com/aeschright)) * [`3f40251c5`](https://github.com/npm/cli/commit/3f40251c5868feaacbcdbcb1360877ce76998f5e) `npm-pick-manifest@2.2.3` ([@aeschright](https://github.com/aeschright)) * [`4ffa8a8e9`](https://github.com/npm/cli/commit/4ffa8a8e9e80e5562898dd76fe5a49f5694f38c8) `query-string@6.2.0` ([@aeschright](https://github.com/aeschright)) * [`a0a0ca9ec`](https://github.com/npm/cli/commit/a0a0ca9ec2a962183d420fa751f4139969760f18) `pacote@9.3.0` ([@aeschright](https://github.com/aeschright)) * [`5777ea8ad`](https://github.com/npm/cli/commit/5777ea8ad2058be3166a6dad2d31d2d393c9f778) `readable-stream@3.1.1` ([@aeschright](https://github.com/aeschright)) * [`887e94386`](https://github.com/npm/cli/commit/887e94386f42cb59a5628e7762b3662d084b23c8) `lru-cache@4.1.5` ([@aeschright](https://github.com/aeschright)) * [`41f15524c`](https://github.com/npm/cli/commit/41f15524c58c59d206c4b1d25ae9e0f22745213b) Updating semver docs. ([@aeschright](https://github.com/aeschright)) * [`fb3bbb72d`](https://github.com/npm/cli/commit/fb3bbb72d448ac37a465b31233b21381917422f3) `npm-audit-report@1.3.2`: ([@melkikh](https://github.com/melkikh)) ### TESTING * [`f1edffba9`](https://github.com/npm/cli/commit/f1edffba90ebd96cf88675d2e18ebc48954ba50e) Modernize maketest script. ([@iarna](https://github.com/iarna)) * [`ae263473d`](https://github.com/npm/cli/commit/ae263473d92a896b482830d4019a04b5dbd1e9d7) maketest: Use promise based example common.npm call. ([@iarna](https://github.com/iarna)) * [`d9970da5e`](https://github.com/npm/cli/commit/d9970da5ee97a354eab01cbf16f9101693a15d2d) maketest: Use newEnv for env production. ([@iarna](https://github.com/iarna)) ### MISCELLANEOUS * [`c665f35aa`](https://github.com/npm/cli/commit/c665f35aacdb8afdbe35f3dd7ccb62f55ff6b896) [#119](https://github.com/npm/cli/pull/119) Replace var with const/let in lib/repo.js. ([@watilde](https://github.com/watilde)) * [`46639ba9f`](https://github.com/npm/cli/commit/46639ba9f04ea729502f1af28b02eb67fb6dcb66) Update package-lock.json for https tarball URLs ([@aeschright](https://github.com/aeschright)) ## v6.5.0 (2018-11-28): ### NEW FEATURES * [`fc1a8d185`](https://github.com/npm/cli/commit/fc1a8d185fc678cdf3784d9df9eef9094e0b2dec) Backronym `npm ci` to `npm clean-install`. ([@zkat](https://github.com/zkat)) * [`4be51a9cc`](https://github.com/npm/cli/commit/4be51a9cc65635bb26fa4ce62233f26e0104bc20) [#81](https://github.com/npm/cli/pull/81) Adds 'Homepage' to outdated --long output. ([@jbottigliero](https://github.com/jbottigliero)) ### BUGFIXES * [`89652cb9b`](https://github.com/npm/cli/commit/89652cb9b810f929f5586fc90cc6794d076603fb) [npm.community#1661](https://npm.community/t/1661) Fix sign-git-commit options. They were previously totally wrong. ([@zkat](https://github.com/zkat)) * [`414f2d1a1`](https://github.com/npm/cli/commit/414f2d1a1bdffc02ed31ebb48a43216f284c21d4) [npm.community#1742](https://npm.community/t/npm-audit-making-non-rfc-compliant-requests-to-server-resulting-in-400-bad-request-pr-with-fix/1742) Set lowercase headers for npm audit requests. ([@maartenba](https://github.com/maartenba)) * [`a34246baf`](https://github.com/npm/cli/commit/a34246bafe73218dc9e3090df9ee800451db2c7d) [#75](https://github.com/npm/cli/pull/75) Fix `npm edit` handling of scoped packages. ([@larsgw](https://github.com/larsgw)) * [`d3e8a7c72`](https://github.com/npm/cli/commit/d3e8a7c7240dd25379a5bcad324a367c58733c73) [npm.community#2303](https://npm.community/t/npm-ci-logs-success-to-stderr/2303) Make summary output for `npm ci` go to `stdout`, not `stderr`. ([@alopezsanchez](https://github.com/alopezsanchez)) * [`71d8fb4a9`](https://github.com/npm/cli/commit/71d8fb4a94d65e1855f6d0c5f2ad2b7c3202e3c4) [npm.community#1377](https://npm.community/t/unhelpful-error-message-when-publishing-without-logging-in-error-eperm-operation-not-permitted-unlink/1377/3) Close the file descriptor during publish if exiting upload via an error. This will prevent strange error messages when the upload fails and make sure cleanup happens correctly. ([@macdja38](https://github.com/macdja38)) ### DOCS UPDATES * [`b1a8729c8`](https://github.com/npm/cli/commit/b1a8729c80175243fbbeecd164e9ddd378a09a50) [#60](https://github.com/npm/cli/pull/60) Mention --otp flag when prompting for OTP. ([@bakkot](https://github.com/bakkot)) * [`bcae4ea81`](https://github.com/npm/cli/commit/bcae4ea8173e489a76cc226bbd30dd9eabe21ec6) [#64](https://github.com/npm/cli/pull/64) Clarify that git dependencies use the default branch, not just `master`. ([@zckrs](https://github.com/zckrs)) * [`15da82690`](https://github.com/npm/cli/commit/15da8269032bf509ade3252978e934f2a61d4499) [#72](https://github.com/npm/cli/pull/72) `bash_completion.d` dir is sometimes found in `/etc` not `/usr/local`. ([@RobertKielty](https://github.com/RobertKielty)) * [`8a6ecc793`](https://github.com/npm/cli/commit/8a6ecc7936dae2f51638397ff5a1d35cccda5495) [#74](https://github.com/npm/cli/pull/74) Update OTP documentation for `dist-tag add` to clarify `--otp` is needed right now. ([@scotttrinh](https://github.com/scotttrinh)) * [`dcc03ec85`](https://github.com/npm/cli/commit/dcc03ec858bddd7aa2173b5a86b55c1c2385a2a3) [#82](https://github.com/npm/cli/pull/82) Note that `prepare` runs when installing git dependencies. ([@seishun](https://github.com/seishun)) * [`a91a470b7`](https://github.com/npm/cli/commit/a91a470b71e08ccf6a75d4fb8c9937789fa8d067) [#83](https://github.com/npm/cli/pull/83) Specify that --dry-run isn't available in older versions of npm publish. ([@kjin](https://github.com/kjin)) * [`1b2fabcce`](https://github.com/npm/cli/commit/1b2fabccede37242233755961434c52536224de5) [#96](https://github.com/npm/cli/pull/96) Fix inline code tag issue in docs. ([@midare](https://github.com/midare)) * [`6cc70cc19`](https://github.com/npm/cli/commit/6cc70cc1977e58a3e1ea48e660ffc6b46b390e59) [#68](https://github.com/npm/cli/pull/68) Add semver link and a note on empty string format to `deprecate` doc. ([@neverett](https://github.com/neverett)) * [`61dbbb7c3`](https://github.com/npm/cli/commit/61dbbb7c3474834031bce88c423850047e8131dc) Fix semver docs after version update. ([@zkat](https://github.com/zkat)) * [`4acd45a3d`](https://github.com/npm/cli/commit/4acd45a3d0ce92f9999446226fe7dfb89a90ba2e) [#78](https://github.com/npm/cli/pull/78) Correct spelling across various docs. ([@hugovk](https://github.com/hugovk)) ### DEPENDENCIES * [`4f761283e`](https://github.com/npm/cli/commit/4f761283e8896d0ceb5934779005646463a030e8) `figgy-pudding@3.5.1` ([@zkat](https://github.com/zkat)) * [`3706db0bc`](https://github.com/npm/cli/commit/3706db0bcbc306d167bb902362e7f6962f2fe1a1) [npm.community#1764](https://npm.community/t/crash-invalid-config-key-requested-error/1764) `ssri@6.0.1` ([@zkat](https://github.com/zkat)) * [`83c2b117d`](https://github.com/npm/cli/commit/83c2b117d0b760d0ea8d667e5e4bdfa6a7a7a8f6) `bluebird@3.5.2` ([@petkaantonov](https://github.com/petkaantonov)) * [`2702f46bd`](https://github.com/npm/cli/commit/2702f46bd7284fb303ca2119d23c52536811d705) `ci-info@1.5.1` ([@watson](https://github.com/watson)) * [`4db6c3898`](https://github.com/npm/cli/commit/4db6c3898b07100e3a324e4aae50c2fab4b93a04) `config-chain@1.1.1`:2 ([@dawsbot](https://github.com/dawbot)) * [`70bee4f69`](https://github.com/npm/cli/commit/70bee4f69bb4ce4e18c48582fe2b48d8b4aba566) `glob@7.1.3` ([@isaacs](https://github.com/isaacs)) * [`e469fd6be`](https://github.com/npm/cli/commit/e469fd6be95333dcaa7cf377ca3620994ca8d0de) `opener@1.5.1`: Fix browser opening under Windows Subsystem for Linux (WSL). ([@thijsputman](https://github.com/thijsputman)) * [`03840dced`](https://github.com/npm/cli/commit/03840dced865abdca6e6449ea030962e5b19db0c) `semver@5.5.1` ([@iarna](https://github.com/iarna)) * [`161dc0b41`](https://github.com/npm/cli/commit/161dc0b4177e76306a0e3b8660b3b496cc3db83b) `bluebird@3.5.3` ([@petkaantonov](https://github.com/petkaantonov)) * [`bb6f94395`](https://github.com/npm/cli/commit/bb6f94395491576ec42996ff6665df225f6b4377) `graceful-fs@4.1.1`:5 ([@isaacs](https://github.com/isaacs)) * [`43b1f4c91`](https://github.com/npm/cli/commit/43b1f4c91fa1d7b3ebb6aa2d960085e5f3ac7607) `tar@4.4.8` ([@isaacs](https://github.com/isaacs)) * [`ab62afcc4`](https://github.com/npm/cli/commit/ab62afcc472de82c479bf91f560a0bbd6a233c80) `npm-packlist@1.1.1`:2 ([@isaacs](https://github.com/isaacs)) * [`027f06be3`](https://github.com/npm/cli/commit/027f06be35bb09f390e46fcd2b8182539939d1f7) `ci-info@1.6.0` ([@watson](https://github.com/watson)) ### MISCELLANEOUS * [`27217dae8`](https://github.com/npm/cli/commit/27217dae8adbc577ee9cb323b7cfe9c6b2493aca) [#70](https://github.com/npm/cli/pull/70) Automatically audit dependency licenses for npm itself. ([@kemitchell](https://github.com/kemitchell)) ## v6.4.1 (2018-08-22): ### BUGFIXES * [`4bd40f543`](https://github.com/npm/cli/commit/4bd40f543dc89f0721020e7d0bb3497300d74818) [#42](https://github.com/npm/cli/pull/42) Prevent blowing up on malformed responses from the `npm audit` endpoint, such as with third-party registries. ([@framp](https://github.com/framp)) * [`0e576f0aa`](https://github.com/npm/cli/commit/0e576f0aa6ea02653d948c10f29102a2d4a31944) [#46](https://github.com/npm/cli/pull/46) Fix `NO_PROXY` support by renaming npm-side config to `--noproxy`. The environment variable should still work. ([@SneakyFish5](https://github.com/SneakyFish5)) * [`d8e811d6a`](https://github.com/npm/cli/commit/d8e811d6adf3d87474982cb831c11316ac725605) [#33](https://github.com/npm/cli/pull/33) Disable `update-notifier` checks when a CI environment is detected. ([@Sibiraj-S](https://github.com/Sibiraj-S)) * [`1bc5b8cea`](https://github.com/npm/cli/commit/1bc5b8ceabc86bfe4777732f25ffef0f3de81bd1) [#47](https://github.com/npm/cli/pull/47) Fix issue where `postpack` scripts would break if `pack` was used with `--dry-run`. ([@larsgw](https://github.com/larsgw)) ### DEPENDENCY BUMPS * [`4c57316d5`](https://github.com/npm/cli/commit/4c57316d5633e940105fa545b52d8fbfd2eb9f75) `figgy-pudding@3.4.1` ([@zkat](https://github.com/zkat)) * [`85f4d7905`](https://github.com/npm/cli/commit/85f4d79059865d5267f3516b6cdbc746012202c6) `cacache@11.2.0` ([@zkat](https://github.com/zkat)) * [`d20ac242a`](https://github.com/npm/cli/commit/d20ac242aeb44aa3581c65c052802a02d5eb22f3) `npm-packlist@1.1.11`: No real changes in npm-packlist, but npm-bundled included a circular dependency fix, as well as adding a proper LICENSE file. ([@isaacs](https://github.com/isaacs)) * [`e8d5f4418`](https://github.com/npm/cli/commit/e8d5f441821553a31fc8cd751670663699d2c8ce) [npm.community#632](https://npm.community/t/using-npm-ci-does-not-run-prepare-script-for-git-modules/632) `libcipm@2.0.2`: Fixes issue where `npm ci` wasn't running the `prepare` lifecycle script when installing git dependencies ([@edahlseng](https://github.com/edahlseng)) * [`a5e6f78e9`](https://github.com/npm/cli/commit/a5e6f78e916873f7d18639ebdb8abd20479615a9) `JSONStream@1.3.4`: Fixes memory leak problem when streaming large files (like legacy npm search). ([@daern91](https://github.com/daern91)) * [`3b940331d`](https://github.com/npm/cli/commit/3b940331dcccfa67f92366adb7ffd9ecf7673a9a) [npm.community#1042](https://npm.community/t/3-path-variables-are-assigned-to-child-process-launched-by-npm/1042) `npm-lifecycle@2.1.0`: Fixes issue for Windows user where multiple `Path`/`PATH` variables were being added to the environment and breaking things in all sorts of fun and interesting ways. ([@JimiC](https://github.com/JimiC)) * [`d612d2ce8`](https://github.com/npm/cli/commit/d612d2ce8fab72026f344f125539ecbf3746af9a) `npm-registry-client@8.6.0` ([@iarna](https://github.com/iarna)) * [`1f6ba1cb1`](https://github.com/npm/cli/commit/1f6ba1cb174590c1f5d2b00e2ca238dfa39d507a) `opener@1.5.0` ([@domenic](https://github.com/domenic)) * [`37b8f405f`](https://github.com/npm/cli/commit/37b8f405f35c861b7beeed56f71ad20b0bf87889) `request@2.88.0` ([@mikeal](https://github.com/mikeal)) * [`bb91a2a14`](https://github.com/npm/cli/commit/bb91a2a14562e77769057f1b6d06384be6d6bf7f) `tacks@1.2.7` ([@iarna](https://github.com/iarna)) * [`30bc9900a`](https://github.com/npm/cli/commit/30bc9900ae79c80bf0bdee0ae6372da6f668124c) `ci-info@1.4.0`: Adds support for two more CI services ([@watson](https://github.com/watson)) * [`1d2fa4ddd`](https://github.com/npm/cli/commit/1d2fa4dddcab8facfee92096cc24b299387f3182) `marked@0.5.0` ([@joshbruce](https://github.com/joshbruce)) ### DOCUMENTATION * [`08ecde292`](https://github.com/npm/cli/commit/08ecde2928f8c89a2fdaa800ae845103750b9327) [#54](https://github.com/npm/cli/pull/54) Mention registry terms of use in manpage and registry docs and update language in README for it. ([@kemitchell](https://github.com/kemitchell)) * [`de956405d`](https://github.com/npm/cli/commit/de956405d8b72354f98579d00c6dd30ac3b9bddf) [#41](https://github.com/npm/cli/pull/41) Add documentation for `--dry-run` in `install` and `pack` docs. ([@reconbot](https://github.com/reconbot)) * [`95031b90c`](https://github.com/npm/cli/commit/95031b90ce0b0c4dcd5e4eafc86e3e5bfd59fb3e) [#48](https://github.com/npm/cli/pull/48) Update republish time and lightly reorganize republish info. ([@neverett](https://github.com/neverett)) * [`767699b68`](https://github.com/npm/cli/commit/767699b6829b8b899d5479445e99b0ffc43ff92d) [#53](https://github.com/npm/cli/pull/53) Correct `npm@6.4.0` release date in changelog. ([@charmander](https://github.com/charmander)) * [`3fea3166e`](https://github.com/npm/cli/commit/3fea3166eb4f43f574fcfd9ee71a171feea2bc29) [#55](https://github.com/npm/cli/pull/55) Align command descriptions in help text. ([@erik](https://github.com/erik)) ## v6.4.0 (2018-08-09): ### NEW FEATURES * [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7) [npm/cli#8](https://github.com/npm/cli/pull/8) Search for authentication token defined by environment variables by preventing the translation layer from env variable to npm option from breaking `:_authToken`. ([@mkhl](https://github.com/mkhl)) * [`84bfd23e7`](https://github.com/npm/cli/commit/84bfd23e7d6434d30595594723a6e1976e84b022) [npm/cli#35](https://github.com/npm/cli/pull/35) Stop filtering out non-IPv4 addresses from `local-addrs`, making npm actually use IPv6 addresses when it must. ([@valentin2105](https://github.com/valentin2105)) * [`792c8c709`](https://github.com/npm/cli/commit/792c8c709dc7a445687aa0c8cba5c50bc4ed83fd) [npm/cli#31](https://github.com/npm/cli/pull/31) configurable audit level for non-zero exit `npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. ([@lennym](https://github.com/lennym)) ### BUGFIXES * [`d81146181`](https://github.com/npm/cli/commit/d8114618137bb5b9a52a86711bb8dc18bfc8e60c) [npm/cli#32](https://github.com/npm/cli/pull/32) Don't check for updates to npm when we are updating npm itself. ([@olore](https://github.com/olore)) ### DEPENDENCY UPDATES A very special dependency update event! Since the [release of `node-gyp@3.8.0`](https://github.com/nodejs/node-gyp/pull/1521), an awkward version conflict that was preventing `request` from begin flattened was resolved. This means two things: 1. We've cut down the npm tarball size by another 200kb, to 4.6MB 2. `npm audit` now shows no vulnerabilities for npm itself! Thanks, [@rvagg](https://github.com/rvagg)! * [`866d776c2`](https://github.com/npm/cli/commit/866d776c27f80a71309389aaab42825b2a0916f6) `request@2.87.0` ([@simov](https://github.com/simov)) * [`f861c2b57`](https://github.com/npm/cli/commit/f861c2b579a9d4feae1653222afcefdd4f0e978f) `node-gyp@3.8.0` ([@rvagg](https://github.com/rvagg)) * [`32e6947c6`](https://github.com/npm/cli/commit/32e6947c60db865257a0ebc2f7e754fedf7a6fc9) [npm/cli#39](https://github.com/npm/cli/pull/39) `colors@1.1.2`: REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. ([@iarna](https://github.com/iarna)) * [`beb96b92c`](https://github.com/npm/cli/commit/beb96b92caf061611e3faafc7ca10e77084ec335) `libcipm@2.0.1` ([@zkat](https://github.com/zkat)) * [`348fc91ad`](https://github.com/npm/cli/commit/348fc91ad223ff91cd7bcf233018ea1d979a2af1) `validate-npm-package-license@3.0.4`: Fixes errors with empty or string-only license fields. ([@Gudahtt](https://github.com/Gudahtt)) * [`e57d34575`](https://github.com/npm/cli/commit/e57d3457547ef464828fc6f82ae4750f3e511550) `iferr@1.0.2` ([@shesek](https://github.com/shesek)) * [`46f1c6ad4`](https://github.com/npm/cli/commit/46f1c6ad4b2fd5b0d7ec879b76b76a70a3a2595c) `tar@4.4.6` ([@isaacs](https://github.com/isaacs)) * [`50df1bf69`](https://github.com/npm/cli/commit/50df1bf691e205b9f13e0fff0d51a68772c40561) `hosted-git-info@2.7.1` ([@iarna](https://github.com/iarna)) ([@Erveon](https://github.com/Erveon)) ([@huochunpeng](https://github.com/huochunpeng)) ### DOCUMENTATION * [`af98e76ed`](https://github.com/npm/cli/commit/af98e76ed96af780b544962aa575585b3fa17b9a) [npm/cli#34](https://github.com/npm/cli/pull/34) Remove `npm publish` from list of commands not affected by `--dry-run`. ([@joebowbeer](https://github.com/joebowbeer)) * [`e2b0f0921`](https://github.com/npm/cli/commit/e2b0f092193c08c00f12a6168ad2bd9d6e16f8ce) [npm/cli#36](https://github.com/npm/cli/pull/36) Tweak formatting in repository field examples. ([@noahbenham](https://github.com/noahbenham)) * [`e2346e770`](https://github.com/npm/cli/commit/e2346e7702acccefe6d711168c2b0e0e272e194a) [npm/cli#14](https://github.com/npm/cli/pull/14) Used `process.env` examples to make accessing certain `npm run-scripts` environment variables more clear. ([@mwarger](https://github.com/mwarger)) ## v6.3.0 (2018-08-01): This is basically the same as the prerelease, but two dependencies have been bumped due to bugs that had been around for a while. * [`0a22be42e`](https://github.com/npm/cli/commit/0a22be42eb0d40cd0bd87e68c9e28fc9d72c0e19) `figgy-pudding@3.2.0` ([@zkat](https://github.com/zkat)) * [`0096f6997`](https://github.com/npm/cli/commit/0096f69978d2f40b170b28096f269b0b0008a692) `cacache@11.1.0` ([@zkat](https://github.com/zkat)) ## v6.3.0-next.0 (2018-07-25): ### NEW FEATURES * [`ad0dd226f`](https://github.com/npm/cli/commit/ad0dd226fb97a33dcf41787ae7ff282803fb66f2) [npm/cli#26](https://github.com/npm/cli/pull/26) `npm version` now supports a `--preid` option to specify the preid for prereleases. For example, `npm version premajor --preid rc` will tag a version like `2.0.0-rc.0`. ([@dwilches](https://github.com/dwilches)) ### MESSAGING IMPROVEMENTS * [`c1dad1e99`](https://github.com/npm/cli/commit/c1dad1e994827f2eab7a13c0f6454f4e4c22ebc2) [npm/cli#6](https://github.com/npm/cli/pull/6) Make `npm audit fix` message provide better instructions for vulnerabilities that require manual review. ([@bradsk88](https://github.com/bradsk88)) * [`15c1130fe`](https://github.com/npm/cli/commit/15c1130fe81961706667d845aad7a5a1f70369f3) Fix missing colon next to tarball url in new `npm view` output. ([@zkat](https://github.com/zkat)) * [`21cf0ab68`](https://github.com/npm/cli/commit/21cf0ab68cf528d5244ae664133ef400bdcfbdb6) [npm/cli#24](https://github.com/npm/cli/pull/24) Use the default OTP explanation everywhere except when the context is "OTP-aware" (like when setting double-authentication). This improves the overall CLI messaging when prompting for an OTP code. ([@jdeniau](https://github.com/jdeniau)) ### MISC * [`a9ac8712d`](https://github.com/npm/cli/commit/a9ac8712dfafcb31a4e3deca24ddb92ff75e942d) [npm/cli#21](https://github.com/npm/cli/pull/21) Use the extracted `stringify-package` package. ([@dpogue](https://github.com/dpogue)) * [`9db15408c`](https://github.com/npm/cli/commit/9db15408c60be788667cafc787116555507dc433) [npm/cli#27](https://github.com/npm/cli/pull/27) `wrappy` was previously added to dependencies in order to flatten it, but we no longer do legacy-style for npm itself, so it has been removed from `package.json`. ([@rickschubert](https://github.com/rickschubert)) ### DOCUMENTATION * [`3242baf08`](https://github.com/npm/cli/commit/3242baf0880d1cdc0e20b546d3c1da952e474444) [npm/cli#13](https://github.com/npm/cli/pull/13) Update more dead links in README.md. ([@u32i64](https://github.com/u32i64)) * [`06580877b`](https://github.com/npm/cli/commit/06580877b6023643ec780c19d84fbe120fe5425c) [npm/cli#19](https://github.com/npm/cli/pull/19) Update links in docs' `index.html` to refer to new bug/PR URLs. ([@watilde](https://github.com/watilde)) * [`ca03013c2`](https://github.com/npm/cli/commit/ca03013c23ff38e12902e9569a61265c2d613738) [npm/cli#15](https://github.com/npm/cli/pull/15) Fix some typos in file-specifiers docs. ([@Mstrodl](https://github.com/Mstrodl)) * [`4f39f79bc`](https://github.com/npm/cli/commit/4f39f79bcacef11bf2f98d09730bc94d0379789b) [npm/cli#16](https://github.com/npm/cli/pull/16) Fix some typos in file-specifiers and package-lock docs. ([@watilde](https://github.com/watilde)) * [`35e51f79d`](https://github.com/npm/cli/commit/35e51f79d1a285964aad44f550811aa9f9a72cd8) [npm/cli#18](https://github.com/npm/cli/pull/18) Update build status badge url in README. ([@watilde](https://github.com/watilde)) * [`a67db5607`](https://github.com/npm/cli/commit/a67db5607ba2052b4ea44f66657f98b758fb4786) [npm/cli#17](https://github.com/npm/cli/pull/17/) Replace TROUBLESHOOTING.md with [posts in npm.community](https://npm.community/c/support/troubleshooting). ([@watilde](https://github.com/watilde)) * [`e115f9de6`](https://github.com/npm/cli/commit/e115f9de65bf53711266152fc715a5012f7d3462) [npm/cli#7](https://github.com/npm/cli/pull/7) Use https URLs in documentation when appropriate. Happy [Not Secure Day](https://arstechnica.com/gadgets/2018/07/todays-the-day-that-chrome-brands-plain-old-http-as-not-secure/)! ([@XhmikosR](https://github.com/XhmikosR)) ## v6.2.0 (2018-07-13): In case you missed it, [we moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We look forward to seeing future PRs landing in [npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with you all in [npm.community](https://npm.community). Go check it out! This final release of `npm@6.2.0` includes a couple of features that weren't quite ready on time but that we'd still like to include. Enjoy! ### FEATURES * [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) [#20554](https://github.com/npm/npm/pull/20554) Add support for tab-separated output for `npm audit` data with the `--parseable` flag. ([@luislobo](https://github.com/luislobo)) * [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) [#12697](https://github.com/npm/npm/pull/12697) Add new `sign-git-commit` config to control whether the git commit itself gets signed, or just the tag (which is the default). ([@tribou](https://github.com/tribou)) ### FIXES * [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) [#19418](https://github.com/npm/npm/pull/19418) Do not use `SET` to fetch the env in git-bash or Cygwin. ([@gucong3000](https://github.com/gucong3000)) ### DEPENDENCY BUMPS * [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) `request@2.81.0`: Downgraded to allow better deduplication. This does introduce a bunch of `hoek`-related audit reports, but they don't affect npm itself so we consider it safe. We'll upgrade `request` again once `node-gyp` unpins it. ([@simov](https://github.com/simov)) * [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) `node-gyp@3.7.0` ([@MylesBorins](https://github.com/MylesBorins)) * [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With this dependency bump, we've removed `lodash` from our tree, which cut back tarball size by another 300kb. ([@Turbo87](https://github.com/Turbo87)) * [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) `npm-audit-report@1.3.1` ([@zkat](https://github.com/zkat)) * [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) Add `cli-table3` to bundleDeps. ([@iarna](https://github.com/iarna)) * [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) Make `standard` happy. ([@iarna](https://github.com/iarna)) ### DOCS * [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631) [#21165](https://github.com/npm/npm/pull/21165) Fix some markdown formatting in npm-disputes.md. ([@hchiam](https://github.com/hchiam)) * [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171) [#20920](https://github.com/npm/npm/pull/20920) Explicitly state that republishing an unpublished package requires a 72h waiting period. ([@gmattie](https://github.com/gmattie)) * [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) Replace references to the old repo or issue tracker. We're at npm/cli now! ([@zkat](https://github.com/zkat)) ## v6.2.0-next.1 (2018-07-05): This is a quick patch to the release to fix an issue that was preventing users from installing `npm@next`. * [`ecdcbd745`](https://github.com/npm/npm/commit/ecdcbd745ae1edd9bdd102dc3845a7bc76e1c5fb) [#21129](https://github.com/npm/npm/pull/21129) Remove postinstall script that depended on source files, thus preventing `npm@next` from being installable from the registry. ([@zkat](https://github.com/zkat)) ## v6.2.0-next.0 (2018-06-28): ### NEW FEATURES * [`ce0793358`](https://github.com/npm/npm/commit/ce07933588ec2da1cc1980f93bdaa485d6028ae2) [#20750](https://github.com/npm/npm/pull/20750) You can now disable the update notifier entirely by using `--no-update-notifier` or setting it in your config with `npm config set update-notifier false`. ([@travi](https://github.com/travi)) * [`d2ad776f6`](https://github.com/npm/npm/commit/d2ad776f6dcd92ae3937465736dcbca171131343) [#20879](https://github.com/npm/npm/pull/20879) When `npm run-script