v6.10.0

FEATURES

• 87fef4e35 #176 fix: Always return JSON for outdated --json (@sreeramjayan)
• f101d44fc #203 fix(unpublish): add space after hyphen (@ffflorian)
• a4475de4c #202 enable production flag for npm audit (@CalebCourier)
• d192904d0 #178 fix: Return a value for view when in silent mode (@stayradiated)
• 39d473adf #185 Allow git to follow global tagsign config (@junderw)

BUGFIXES

• d9238af0b #201 npm/npm#17858 npm/npm#18042 npm.community#644 do not crash when removing nameless packages (@SteveVanOpstal and @isaacs)
• 4bec4f111 #200 Check for node (as well as node.exe) in npm's local dir on Windows (@rgoulais)
• ce93dab2d #180 npm.community#6187 Fix handling of remote deps in npm outdated (@larsgw)

TESTING

• a823f3084 travis: Update to include new v12 LTS (@isaacs)
• 33e2d1dac fix flaky debug-logs test (@isaacs)
• e9411c6cd Don't time out waiting for gpg user input (@isaacs)
• d2d301704 #195 Add the arm64 check for legacy-platform-all.js test case. (@ossdev07)
• a4dc34243 parallel tests (@isaacs)

DOCUMENTATION

• f5857e263 #192 Clarify usage of bundledDependencies (@john-osullivan)
• 747fdaf66 #159 doc: add --audit-level param (@ngraef)

DEPENDENCIES

• e36b3c320 [email protected] (@isaacs)
• 6bb935c09 [email protected] (@isaacs)
  • e9cd536 Use custom caching realpath implementation, dramatically reducing lstat calls when reading the package tree (@isaacs)
• 39538b460 [email protected] (@isaacs)
  • f8b1552 #38 Ignore errors raised by fs.closeSync (@lukeapage)
• 042193069 [email protected] (@isaacs)
  • 8bbd051 #172 limit git retry times, avoid unlimited retries (小秦)
  • 92f5e4c #170 fix(errors): Fix "TypeError: err.code.match is not a function" error (@jviotti)
• 8bd8e909f [email protected] (@isaacs)
  • 47de8f5 #146 npm.community#2395 fix(config): Add ssri config 'error' option (@larsgw)
  • 5156561 fix(write): avoid a cb never called situation (@zkat)
  • 90f40f0 #166 #165 docs: Fix docs for path property in get.info (@hdgarrood)
• bf61c45c6 [email protected] (@isaacs)
• f75d46a9d [email protected] (@isaacs)
  • c80341a #215 Fix encoding/decoding of base-256 numbers (@justfalter)
  • 77522f0 #204 #214 Use stat instead of lstat when checking CWD (@stkb)
• ec6236210 [email protected] (@isaacs)
  • 63d1e3e #30 Sort package tarball entries by file type for compression benefits (@isaacs)
  • 7fcd045 Ignore .DS_Store files as well as folders (@isaacs)
  • 68b7c96 Never include .git folders in package root. (Note: this prevents the issue that broke the v6.9.1 release.) (@isaacs)
• 57bef61bc update fstream in node-gyp (@isaacs)
  • Addresses security advisory #886
• acbbf7eee #183 [email protected] (@kemitchell)
• 011ae67f0 [email protected] (@isaacs)
• f5e884909 [email protected] (@isaacs)
• b57d07e35 [email protected] (@isaacs)

v6.10.0-next.0

FEATURES

• 87fef4e35 #176 fix: Always return JSON for outdated --json (@sreeramjayan)
• f101d44fc #203 fix(unpublish): add space after hyphen (@ffflorian)
• a4475de4c #202 enable production flag for npm audit (@CalebCourier)
• d192904d0 #178 fix: Return a value for view when in silent mode (@stayradiated)
• 39d473adf #185 Allow git to follow global tagsign config (@junderw)

BUGFIXES

• d9238af0b #201 npm/npm#17858 npm/npm#18042 npm.community#644 do not crash when removing nameless packages (@SteveVanOpstal and @isaacs)
• 4bec4f111 #200 Check for node (as well as node.exe) in npm's local dir on Windows (@rgoulais)
• ce93dab2d #180 npm.community#6187 Fix handling of remote deps in npm outdated (@larsgw)

TESTING

• a823f3084 travis: Update to include new v12 LTS (@isaacs)
• 33e2d1dac fix flaky debug-logs test (@isaacs)
• e9411c6cd Don't time out waiting for gpg user input (@isaacs)
• d2d301704 #195 Add the arm64 check for legacy-platform-all.js test case. (@ossdev07)
• a4dc34243 parallel tests (@isaacs)

DOCUMENTATION

• f5857e263 #192 Clarify usage of bundledDependencies (@john-osullivan)
• 747fdaf66 #159 doc: add --audit-level param (@ngraef)

DEPENDENCIES

• e36b3c320 [email protected] (@isaacs)
• 6bb935c09 [email protected] (@isaacs)
  • e9cd536 Use custom caching realpath implementation, dramatically reducing lstat calls when reading the package tree (@isaacs)
• 39538b460 [email protected] (@isaacs)
  • f8b1552 #38 Ignore errors raised by fs.closeSync (@lukeapage)
• 042193069 [email protected] (@isaacs)
  • 8bbd051 #172 limit git retry times, avoid unlimited retries (小秦)
  • 92f5e4c #170 fix(errors): Fix "TypeError: err.code.match is not a function" error (@jviotti)
• 8bd8e909f [email protected] (@isaacs)
  • 47de8f5 #146 npm.community#2395 fix(config): Add ssri config 'error' option (@larsgw)
  • 5156561 fix(write): avoid a cb never called situation (@zkat)
  • 90f40f0 #166 #165 docs: Fix docs for path property in get.info (@hdgarrood)
• bf61c45c6 [email protected] (@isaacs)
• f75d46a9d [email protected] (@isaacs)
  • c80341a #215 Fix encoding/decoding of base-256 numbers (@justfalter)
  • 77522f0 #204 #214 Use stat instead of lstat when checking CWD (@stkb)
• ec6236210 [email protected] (@isaacs)
  • 63d1e3e #30 Sort package tarball entries by file type for compression benefits (@isaacs)
  • 7fcd045 Ignore .DS_Store files as well as folders (@isaacs)
  • 68b7c96 Never include .git folders in package root. (Note: this prevents the issue that broke the v6.9.1 release.) (@isaacs)
• 57bef61bc update fstream in node-gyp (@isaacs)
  • Addresses security advisory #886
• acbbf7eee #183 [email protected] (@kemitchell)
• 011ae67f0 [email protected] (@isaacs)
• f5e884909 [email protected] (@isaacs)
• b57d07e35 [email protected] (@isaacs)

v6.9.2

This release is identical to v6.9.1, but we had to publish a new version due to a .git directory in the release.

v6.9.1

BUGFIXES

• 6b1a9da0e #165 Update knownBroken version. (@ljharb)
• d07547154 npm.community#5929 Fix outdated rendering for global dependencies. (@zkat)
• e4a1f1745 npm.community#6259 Fix OTP for token create and remove. (@zkat)

DEPENDENCIES

• a163a9c35 [email protected] (@aeschright)
• 47b08b3b9 [email protected] (@aeschright)
• d6a956cff [email protected] (@aeschright)
• 10b8bed2b [email protected] (@aeschright)
• e7483704d [email protected] (@aeschright)
• 3242fe698 [email protected] (@aeschright)

v6.9.1-next.0

v6.9.1 (2019-03-20):

BUGFIXES

• 6b1a9da0e #165 Update knownBroken version. (@ljharb)
• d07547154 npm.community#5929 Fix outdated rendering for global dependencies. (@zkat)
• e4a1f1745 npm.community#6259 Fix OTP for token create and remove. (@zkat)

DEPENDENCIES

• a163a9c35 [email protected] (@aeschright)
• 47b08b3b9 [email protected] (@aeschright)
• d6a956cff [email protected] (@aeschright)
• 10b8bed2b [email protected] (@aeschright)
• e7483704d [email protected] (@aeschright)
• 3242fe698 [email protected] (@aeschright)

v6.9.0

FEATURES

• 2ba3a0f67 #90 Time traveling installs using the --before flag. (@zkat)
• b7b54f2d1 #3 Add support for package aliases. This allows packages to be installed under a different directory than the package name listed in package.json, and adds a new dependency type to allow this to be done for registry dependencies. (@zkat)
• 684bccf06 #146 Always save package-lock.json when using --package-lock-only. (@aeschright)
• b8b8afd40 #139 Make empty-string run-scripts run successfully as a no-op. (@vlasy)
• 8047b19b1 npm.community#3784 Match git semver ranges when flattening the tree. (@larsgw)
• e135c2bb3 npm.community#1725 Re-enable updating local packages. (@larsgw)

BUGFIXES

• cf09fbaed #153 Set modified to undefined in npm view when time is not available. This fixes a bug where npm view would crash on certain third-party registries. (@simonua)
• 774fc26ee #154 Print out tar version in install.sh only when the flag is supported not all the tar implementations support --version flag. This allows the install script to work in OpenBSD, for example. (@agudulin)
• 863baff11 #158 Fix typo in error message for npm stars. (@phihag)
• a805a95ad npm.community#4227 Strip version info from pkg on E404. This improves the error messaging format. (@larsgw)

DOCS

• 5d7633833 #160 Add npm add as alias to npm install in docs. (@ahasall)
• 489c2211c #162 Fix link to RFC #10 in the changelog. (@mansona)
• 433020ead #135 Describe exit codes in npm-audit docs. (@emilis-tm)

DEPENDENCIES

• ee6b6746b zkat/make-fetch-happen#29 [email protected] (@TooTallNate)
• 2ce23baf5 [email protected]: Adds support for package aliases (@zkat)
• baaedbc6e [email protected]: Adds opts.before support (@zkat)
• 57e771a03 #164 [email protected] (@kemitchell)
• 2b78288d4 add core to default inclusion tests in pack (@zkat)
• 9b8b6513f npm.community#5382 [email protected]: Fixes bug where core/ directories were being suddenly excluded. (@zkat)

v6.9.0-next.0

This release became [email protected]

v6.8.0

This release includes an implementation of RFC #10, documenting an optional field that can be used to specify the directory path for a package within a monorepo.

NEW FEATURES

• 3663cdef2 #140 Update package.json docs to include repository.directory details. (@greysteil)

BUGFIXES

• 550bf703a Add @types to ignore list to fix git clean -fd. (@zkat)
• cdb059293 #144 Fix common.npm callback arguments. (@larsgw)
• 25573e9b9 npm.community#4770 Show installed but unmet peer deps. (@larsgw)
• ce2c4bd1a #149 Use figgy-config to make sure extra opts are there. (@zkat)
• 3c22d1a35 npm.community#5101 Fix ls-collaborators access error for non-scoped case. (@zkat)
• d5137091d npm.community#754 Fix issue with sub-folder local references. (@iarna) (@jhecking)

DEPENDENCY BUMPS

• d72141080 [email protected] (@zkat)
• 671cad1b1 [email protected]: Make sure publishing with legacy username:password _auth works again. (@zkat)
• 95ca1aef4 [email protected] (@aeschright)
• 322fef403 [email protected] (@aeschright)
• 32d34c0da [email protected] (@aeschright)
• 338571cf0 [email protected] (@zkat)

MISC

• 89b23a5f7 #120 Use const in lib/fetch-package-metadata.md. (@watilde)
• 4970d553c #126 Replace ronn with marked-man in .npmignore. (@watilde)
• d9b6090dc #138 Reduce work to test if executable ends with a 'g'. (@elidoran) (@larsgw)

v6.8.0-next.2

This release includes an implementation of RFC #10, documenting an optional field that can be used to specify the directory path for a package within a monorepo.

NEW FEATURES

• 3663cdef2 #140 Update package.json docs to include repository.directory details. (@greysteil)

BUGFIXES

• 550bf703a Add @types to ignore list to fix git clean -fd. (@zkat)
• cdb059293 #144 Fix common.npm callback arguments. (@larsgw)
• 91314e77b npm.community#4794 Fix hoisting of packages with peerDeps. (@sokra)
• 25573e9b9 npm.community#4770 Show installed but unmet peer deps. (@larsgw)
• ce2c4bd1a #149 Use figgy-config to make sure extra opts are there. (@zkat)
• 3c22d1a35 npm.community#5101 Fix ls-collaborators access error for non-scoped case. (@zkat)
• d5137091d npm.community#754 Fix issue with sub-folder local references. (@iarna) (@jhecking)

DEPENDENCY BUMPS

• d72141080 [email protected] (@zkat)
• 671cad1b1 [email protected]: Make sure publishing with legacy username:password _auth works again. (@zkat)
• 95ca1aef4 [email protected] (@aeschright)
• 322fef403 [email protected] (@aeschright)
• 32d34c0da [email protected] (@aeschright)

MISC

• 89b23a5f7 #120 Use const in lib/fetch-package-metadata.md. (@watilde)
• 4970d553c #126 Replace ronn with marked-man in .npmignore. (@watilde)
• d9b6090dc #138 Reduce work to test if executable ends with a 'g'. (@elidoran) (@larsgw)

v6.8.0-next.1

This release includes an implementation of RFC #10, documenting an optional field that can be used to specify the directory path for a package within a monorepo.

NEW FEATURES

• 3663cdef2 #140 Update package.json docs to include repository.directory details. (@greysteil)

BUGFIXES

• 550bf703a Add @types to ignore list to fix git clean -fd. (@zkat)
• cdb059293 #144 Fix common.npm callback arguments. (@larsgw)
• 91314e77b npm.community#4794 Fix hoisting of packages with peerDeps. (@sokra)
• 25573e9b9 npm.community#4770 Show installed but unmet peer deps. (@larsgw)
• ce2c4bd1a #149 Use figgy-config to make sure extra opts are there. (@zkat)
• 3c22d1a35 npm.community#5101 Fix ls-collaborators access error for non-scoped case. (@zkat)

DEPENDENCY BUMPS

• d72141080 [email protected] (@zkat)
• 671cad1b1 [email protected]: Make sure publishing with legacy username:password _auth works again. (@zkat)
• 95ca1aef4 [email protected] (@aeschright)
• 322fef403 [email protected] (@aeschright)
• 32d34c0da [email protected] (@aeschright)

MISC

• 89b23a5f7 #120 Use const in lib/fetch-package-metadata.md. (@watilde)
• 4970d553c #126 Replace ronn with marked-man in .npmignore. (@watilde)
• d9b6090dc #138 Reduce work to test if executable ends with a 'g'. (@elidoran) (@larsgw)