1## 6.14.11 (2021-01-07) 2### DEPENDENCIES 3 4* [`19108ca5b`](https://github.com/npm/cli/commit/19108ca5be1b3e7e9787dac3131aafe2722c6218) 5 `ini@1.3.8`: 6 * addressing [`CVE-2020-7788`](https://github.com/advisories/GHSA-qqgx-2p2h-9c37) 7* [`7a0574074`](https://github.com/npm/cli/commit/7a05740743ac9d9229e2dc9e1b9ca8b57d58c789) 8 `bl@3.0.1` 9 * addressing [`CVE-2020-8244`](https://github.com/advisories/GHSA-pp7h-53gx-mx7r) 10 11## 6.14.10 (2020-12-18) 12 13### DEPENDENCIES 14 15* [`906d647e1`](https://github.com/npm/cli/commit/906d647e1cacd74243abcacba3bade80437f30f5) 16`opener@1.5.2` 17 * fixes: [`#36445`](https://github.com/nodejs/node/issues/36445) addressing 18[`GHSL-2020-145`](https://securitylab.github.com/advisories/GHSL-2020-145-domenic-opener) 19 20## 6.14.9 (2020-11-20) 21 22### BUG FIXES 23* [`4a91e48aa`](https://github.com/npm/cli/commit/4a91e48aa92be5b2739ebcdd8a9a841ff5cb6817) 24 fix: docs generation breaking builds 25 26### DEPENDDENCIES 27* [`ab80a7cf0`](https://github.com/npm/cli/commit/ab80a7cf092d52f4b055cc6d03c38b6115c4b582) 28 `npm-user-validate@1.0.1` 29 * dep update to resolve security issue [GHSA-xgh6-85xh-479p](https://github.com/advisories/GHSA-xgh6-85xh-479p) 30* [`6b2ab9d53`](https://github.com/npm/cli/commit/6b2ab9d532ef8ffce326f4caa23eb27f83765acd) 31 `har-validator@5.1.5` 32 * dep update to resolve security issue [SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) 33 34## 6.14.8 (2020-08-17) 35 36### BUG FIXES 37* [`9262e8c88`](https://github.com/npm/cli/commit/9262e8c88f2f828206423928b8e21eea67f4801a) 38 [#1575](https://github.com/npm/cli/pull/1575) 39 npm install --dev deprecation message 40 ([@sandratatarevicova](https://github.com/sandratatarevicova)) 41* [`765cfe0bc`](https://github.com/npm/cli/commit/765cfe0bc05a10b72026291ff0ca7c9ca5cb3f57) 42 [#1658](https://github.com/npm/cli/issues/1658) 43 remove unused broken require 44 ([@aduh95](https://github.com/aduh95)) 45* [`4e28de79a`](https://github.com/npm/cli/commit/4e28de79a3a0aacc7603010a592beb448ceb6f5f) 46 [#1663](https://github.com/npm/cli/pull/1663) 47 Do not send user secret in the referer header 48 ([@assapir](https://github.com/assapir)) 49 50### DOCUMENTATION 51* [`8abdf30c9`](https://github.com/npm/cli/commit/8abdf30c95ec90331456f3f2ed78e2703939bb74) 52 [#1572](https://github.com/npm/cli/pull/1572) 53 docs: add missing metadata in semver page 54 ([@tripu](https://github.com/tripu)) 55* [`8cedcca46`](https://github.com/npm/cli/commit/8cedcca464ced5aab58be83dd5049c3df13384de) 56 [#1614](https://github.com/npm/cli/pull/1614) 57 Node-gyp supports both Python and legacy Python 58 ([@cclauss](https://github.com/cclauss)) 59 60### DEPENDENCIES 61* [`a303b75fd`](https://github.com/npm/cli/commit/a303b75fd7c4b2644da02ad2ad46d80dfceec3c5) 62 `update-notifier@2.5.0` 63* [`c48600832`](https://github.com/npm/cli/commit/c48600832aff4cc349f59997e08dc4bbde15bd49) 64 `npm-registry-fetch@4.0.7` 65* [`a6e9fc4df`](https://github.com/npm/cli/commit/a6e9fc4df7092ba3eb5394193638b33c24855c36) 66 `meant@1.0.2`: 67 68## 6.14.7 (2020-07-21) 69 70### BUG FIXES 71* [`de5108836`](https://github.com/npm/cli/commit/de5108836189bddf28d4d3542f9bd5869cc5c2e9) [#784](https://github.com/npm/cli/pull/784) npm explore spawn shell correctly ([@jasisk](https://github.com/jasisk)) 72* [`36e6c01d3`](https://github.com/npm/cli/commit/36e6c01d334c4db75018bc6a4a0bef726fd41ce4) git tag handling regression on shrinkwrap ([@claudiahdz](https://github.com/claudiahdz)) 73* [`1961c9369`](https://github.com/npm/cli/commit/1961c9369c92bf8fe530cecba9834ca3c7f5567c) [#288](https://github.com/npm/cli/pull/288) Fix package id in shrinkwrap lifecycle step output ([@bz2](https://github.com/bz2)) 74* [`87888892a`](https://github.com/npm/cli/commit/87888892a1282cc3edae968c3ae4ec279189271c) [#1009](https://github.com/npm/cli/pull/1009) gracefully handle error during npm install ([@danielleadams](https://github.com/danielleadams)) 75* [`6fe2bdc25`](https://github.com/npm/cli/commit/6fe2bdc25e7961956e5c0067fa4db54ff1bd0dbd) [#1547](https://github.com/npm/cli/pull/1547) npm ls --parseable --long output ([@ruyadorno](https://github.com/ruyadorno)) 76 77### DEPENDENCIES 78* [`2d78481c7`](https://github.com/npm/cli/commit/2d78481c7ec178e628ce23df940f73a05d5c6367) update mkdirp on tacks ([@claudiahdz](https://github.com/claudiahdz)) 79* [`4e129d105`](https://github.com/npm/cli/commit/4e129d105eba3b12d474caa6e5ca216a98deb75a) uninstall npm-registry-couchapp ([@claudiahdz](https://github.com/claudiahdz)) 80* [`8e1869e27`](https://github.com/npm/cli/commit/8e1869e278d1dd37ddefd6b4e961d1bb17fc9d09) update marked dev dep ([@claudiahdz](https://github.com/claudiahdz)) 81* [`6a6151f37`](https://github.com/npm/cli/commit/6a6151f377063c6aca852c859c01910edd235ec6) `libnpx@10.2.4` ([@claudiahdz](https://github.com/claudiahdz)) 82* [`dc21422eb`](https://github.com/npm/cli/commit/dc21422eb1ca1a4a19f160fad0e924566e08c496) `bin-links@1.1.8` ([@claudiahdz](https://github.com/claudiahdz)) 83* [`d341f88ce`](https://github.com/npm/cli/commit/d341f88ce6feb3df1dcb37f34910fcc6c1db85f2) `gentle-fs@2.3.1` ([@claudiahdz](https://github.com/claudiahdz)) 84* [`3e168d49b`](https://github.com/npm/cli/commit/3e168d49b41574809cae2ad013776a00d3f20ff4) `libcipm@4.0.8` ([@claudiahdz](https://github.com/claudiahdz)) 85* [`6ae942a51`](https://github.com/npm/cli/commit/6ae942a510520b7dff11b5b78eebeff1706e38af) `npm-audit-report@1.3.3` ([@claudiahdz](https://github.com/claudiahdz)) 86* [`6a35e3dee`](https://github.com/npm/cli/commit/6a35e3deec275bf2ae76603acd424a0640458047) `npm-lifecycle@3.1.5` ([@claudiahdz](https://github.com/claudiahdz)) 87 88## 6.14.6 (2020-07-07) 89 90### BUG FIXES 91* [`a9857b8f6`](https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc) chore: remove auth info from logs ([@claudiahdz](https://github.com/claudiahdz)) 92* [`b7ad77598`](https://github.com/npm/cli/commit/b7ad77598112908d60195d0fbc472b3c84275fd5) [#1416](https://github.com/npm/cli/pull/1416) fix: wrong `npm doctor` command result ([@vanishcode](https://github.com/vanishcode)) 93 94### DEPENDENCIES 95* [`94eca6377`](https://github.com/npm/cli/commit/94eca637756376b949edfb697e179a1fdcc231ee) `npm-registry-fetch@4.0.5` ([@claudiahdz](https://github.com/claudiahdz)) 96* [`c49b6ae28`](https://github.com/npm/cli/commit/c49b6ae28791ff7184288be16654f97168aa9705) [#1418](https://github.com/npm/cli/pull/1418) `spdx-license-ids@3.0.5` ([@kemitchell](https://github.com/kemitchell)) 97 98### DOCUMENTATION 99* [`2e052984b`](https://github.com/npm/cli/commit/2e052984b08c09115ed75387fb2c961631d85d77) 100 [#1459](https://github.com/npm/cli/pull/1459) 101 chore(docs): fixed links to cli commands ([@claudiahdz](https://github.com/claudiahdz)) 102* [`0ca3509ca`](https://github.com/npm/cli/commit/0ca3509ca940865392daeeabb39192f7d5af9f5e) 103 [#1283](https://github.com/npm/cli/pull/1283) Update npm-link.md ([@peterfich](https://github.com/peterfich)) 104* [`3dd429e9a`](https://github.com/npm/cli/commit/3dd429e9aad760ce2ff9e522b34ebfebd85b460c) 105 [#1377](https://github.com/npm/cli/pull/1377) 106 Add note about dropped `*` filenames ([@maxwellgerber](https://github.com/maxwellgerber)) 107* [`9a2e2e797`](https://github.com/npm/cli/commit/9a2e2e797e5c91e7f4f261583a1906e2c440cc2f) 108 [#1429](https://github.com/npm/cli/pull/1429) Fix typo ([@seanpoulter](https://github.com/seanpoulter)) 109 110## 6.14.5 (2020-05-01) 111 112### BUG FIXES 113 114* [`33ec41f18`](https://github.com/npm/cli/commit/33ec41f18f557146607cb14a7a38c707fce6d42c) [#758](https://github.com/npm/cli/pull/758) fix: relativize file links when inflating shrinkwrap ([@jsnajdr](https://github.com/jsnajdr)) 115* [`94ed456df`](https://github.com/npm/cli/commit/94ed456dfb0b122fd4192429024f034d06c3c454) [#1162](https://github.com/npm/cli/pull/1162) fix: npm init help output ([@mum-never-proud](https://github.com/mum-never-proud)) 116 117### DEPENDENCIES 118 119* [`5587ac01f`](https://github.com/npm/cli/commit/5587ac01ffd0d2ea830a6bbb67bb34a611ffc409) `npm-registry-fetch@4.0.4` 120 * [`fc5d94c39`](https://github.com/npm/npm-registry-fetch/commit/fc5d94c39ca218d78df77249ab3a6bf1d9ed9db1) fix: removed default timeout 121* [`07a4d8884`](https://github.com/npm/cli/commit/07a4d8884448359bac485a49c05fd2d23d06834b) `graceful-fs@4.2.4` 122* [`8228d1f2e`](https://github.com/npm/cli/commit/8228d1f2e427ad9adee617266108acd1ee39b4a5) `mkdirp@0.5.5` 123* [`e6d208317`](https://github.com/npm/cli/commit/e6d20831740a84aea766da2a2913cf82a4d56ada) `nopt@4.0.3` 124 125## 6.14.4 (2020-03-24) 126 127### DEPENDENCIES 128 129* Bump `minimist@1.2.5` transitive dep to resolve security issue 130 * [`9c554fd8c`](https://github.com/npm/cli/commit/9c554fd8cd1e9aeb8eb122ccfa3c78d12af4097a) `update-notifier@2.5.0` 131 * bump `deep-extend@1.2.5` 132 * bump `deep-extend@0.6.0` 133 * bump `is-ci@1.2.1` 134 * bump `is-retry-allowed@1.2.0` 135 * bump `rc@1.2.8` 136 * bump `registry-auth-token@3.4.0` 137 * bump `widest-line@2.0.1` 138* [`136832dca`](https://github.com/npm/cli/commit/136832dcae13cb5518b1fe17bd63ea9b2a195f92) `mkdirp@0.5.4` 139* [`8bf99b2b5`](https://github.com/npm/cli/commit/8bf99b2b58c14d45dc6739fce77de051ebc8ffb7) [#1053](https://github.com/npm/cli/pull/1053) deps: updates term-size to use signed binary 140 * [`d2f08a1bdb`](https://github.com/nodejs/node/commit/d2f08a1bdb78655c4a3fc49825986c148d14117e) ([@rvagg](https://github.com/rvagg)) 141 142## 6.14.3 (2020-03-19) 143 144### DOCUMENTATION 145 146* [`4ad221487`](https://github.com/npm/cli/commit4ad2214873cddfd4a0eff1bd188516b08fae9f9e) [#1020](https://github.com/npm/cli/pull/1020) docs(teams): updated team docs to reflect MFA workflow ([@blkdm0n](https://github.com/blkdm0n)) 147* [`4a31a4ba2`](https://github.com/npm/cli/commit/4a31a4ba2db0a5db2d1d0890ee934ba1babb73a6) [#1034](https://github.com/npm/cli/pull/1034) docs: cleanup ([@ruyadorno](https://github.com/ruyadorno)) 148* [`0eac801cd`](https://github.com/npm/cli/commit/0eac801cdef344e9fbda6270145e062211255b0e) [#1013](https://github.com/npm/cli/pull/1013) docs: fix links to cli commands ([@alenros](https://github.com/alenros)) 149* [`7d8e5b99c`](https://github.com/npm/cli/commit/7d8e5b99c4ef8c394cffa7fc845f54a25ff37e3a) [#755](https://github.com/npm/cli/pull/755) docs: correction to `npm update -g` behaviour ([@johnkennedy9147](https://github.com/johnkennedy9147)) 150 151### DEPENDENCIES 152 153* [`e11167646`](https://github.com/npm/cli/commit/e111676467f090f73802b97e8da7ece481b18f99) `mkdirp@0.5.3` 154 * [`c5b97d17d`](https://github.com/isaacs/node-mkdirp/commit/c5b97d17d45a22bcf4c815645cbb989dab57ddd8) fix: bump `minimist` dep to resolve security issue ([@isaacs](https://github.com/isaacs)) 155* [`c50d679c6`](https://github.com/npm/cli/commit/c50d679c68b39dd03ad127d34f540ddcb1b1e804) `rimraf@2.7.1` 156* [`a2de99ff9`](https://github.com/npm/cli/commit/a2de99ff9e02425a3ccc25280f390178be755a36) `npm-registry-mock@1.3.1` 157* [`217debeb9`](https://github.com/npm/cli/commit/217debeb9812e037a6686cbf6ec67a0cd47fa68a) `npm-registry-couchapp@2.7.4` 158 159## 6.14.2 (2020-03-03) 160 161### DOCUMENTATION 162* [`f9248c0be`](https://github.com/npm/cli/commit/f9248c0be63fba37a30098dc9215c752474380e3) [#730](https://github.com/npm/cli/pull/730) chore(docs): update unpublish docs & policy reference ([@nomadtechie](https://github.com/nomadtechie), [@mikemimik](https://github.com/mikemimik)) 163 164### DEPENDENCIES 165 166* [`909cc3918`](https://github.com/npm/cli/commit/909cc39180a352f206898481add5772206c8b65f) `hosted-git-info@2.8.8` ([@darcyclarke](https://github.com/darcyclarke)) 167 * [`5038b1891`](https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb) fix: regression in old node versions w/ respect to url.URL implmentation 168* [`9204ffa58`](https://github.com/npm/cli/commit/9204ffa584c140c5e22b1ee37f6df2c98f5dc70b) `npm-profile@4.0.4` ([@isaacs](https://github.com/isaacs)) 169 * [`6bcf0860a`](https://github.com/npm/npm-profile/commit/6bcf0860a3841865099d0115dbcbde8b78109bd9) fix: treat non-http/https login urls as invalid 170* [`0365d39bd`](https://github.com/npm/cli/commit/0365d39bdc74960a18caac674f51d0e2a98b31e6) `glob@7.1.6` ([@isaacs](https://github.com/isaacs)) 171* [`dab030536`](https://github.com/nodejs/node-gyp/commit/dab030536b6a70ecae37debc74c581db9e5280fd) `node-gyp@5.1.0` ([@rvagg](https://github.com/rvagg)) 172 173## 6.14.1 (2020-02-26) 174 175* [`303e5c11e`](https://github.com/npm/cli/commit/303e5c11e7db34cf014107aecd2e81c821bfde8d) 176 `hosted-git-info@2.8.7` 177 Fixes a regression where scp-style git urls are passed to the WhatWG URL 178 parser, which does not handle them properly. 179 ([@isaacs](https://github.com/isaacs)) 180 181## 6.14.0 (2020-02-25) 182 183### FEATURES 184* [`30f170877`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#731](https://github.com/npm/cli/pull/731) add support for multiple funding sources ([@ljharb](https://github.com/ljharb) & [@ruyadorno](hhttps://github.com/ruyadorno/)) 185 186### BUG FIXES 187* [`55916b130`](https://github.com/npm/cli/commit/55916b130ef52984584678f2cc17c15c1f031cb5) [#508](https://github.com/npm/cli/pull/508) fix: check `npm.config` before accessing its members ([@kaiyoma](https://github.com/kaiyoma)) 188* [`7d0cd65b2`](https://github.com/npm/cli/commit/7d0cd65b23c0986b631b9b54d87bbe74902cc023) [#733](https://github.com/npm/cli/pull/733) fix: access grant with unscoped packages ([@netanelgilad](https://github.com/netanelgilad)) 189* [`28c3d40d6`](https://github.com/npm/cli/commit/28c3d40d65eef63f9d6ccb60b99ac57f5057a46e), [`0769c5b20`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#945](https://github.com/npm/cli/pull/945), [#697](https://github.com/npm/cli/pull/697) fix: allow new major versions of node to be automatically considered "supported" ([@isaacs](https://github.com/isaacs), [@ljharb](https://github.com/ljharb)) 190 191### DEPENDENCIES 192* [`6f39e93`](https://github.com/npm/hosted-git-info/commit/6f39e93bae9162663af6f15a9d10bce675dd5de3) `hosted-git-info@2.8.6` ([@darcyclarke](https://github.com/darcyclarke)) 193 * fix: passwords & usernames are escaped properly in git deps ([@stevenhilder](https://github.com/stevenhilder)) 194* [`f14b594ee`](https://github.com/npm/cli/commit/f14b594ee9dbfc98ed0b65c65d904782db4f31ad) `chownr@1.1.4` ([@isaacs](https://github.com/isaacs)) 195* [`77044150b`](https://github.com/npm/cli/commit/77044150b763d67d997f9ff108219132ea922678) `npm-packlist@1.4.8` ([@isaacs](https://github.com/isaacs)) 196* [`1d112461a`](https://github.com/npm/cli/commit/1d112461ad8dc99e5ff7fabb5177e8c2f89a9755) `npm-registry-fetch@4.0.3` ([@isaacs](https://github.com/isaacs)) 197 * [`ba8b4fe`](https://github.com/npm/npm-registry-fetch/commit/ba8b4fe60eb6cdf9b39012560aec596eda8ce924) fix: always bypass cache when ?write=true 198* [`a47fed760`](https://github.com/npm/cli/commit/a47fed7603a6ed31dcc314c0c573805f05a96830) `readable-stream@3.6.0` 199 * [`3bbf2d6`](https://github.com/nodejs/readable-stream/commit/3bbf2d6feb45b03f4e46a2ae8251601ad2262121) fix: babel's "loose mode" class transform enbrittles BufferList ([@ljharb](https://github.com/ljharb)) 200 201### DOCUMENTATION 202* [`284c1c055`](https://github.com/npm/cli/commit/284c1c055a28c4b334496101799acefe3c54ceb3), [`fbb5f0e50`](https://github.com/npm/cli/commit/fbb5f0e50e54425119fa3f03c5de93e4cb6bfda7) [#729](https://github.com/npm/cli/pull/729) update lifecycle hooks docs 203 ([@seanhealy](https://github.com/seanhealy), [@mikemimik](https://github.com/mikemimik)) 204* [`1c272832d`](https://github.com/npm/cli/commit/1c272832d048300e409882313305c416dc6f21a2) [#787](https://github.com/npm/cli/pull/787) fix: trademarks typo ([@dnicolson](https://github.com/dnicolson)) 205* [`f6ff41776`](https://github.com/npm/cli/commit/f6ff417767d52418cc8c9e7b9731ede2c3916d2e) [#936](https://github.com/npm/cli/pull/936) fix: postinstall example ([@ajaymathur](https://github.com/ajaymathur)) 206* [`373224b16`](https://github.com/npm/cli/commit/373224b16e019b7b63d8f0b4c5d4adb7e5cb80dd) [#939](https://github.com/npm/cli/pull/939) fix: bad links in publish docs ([@vit100](https://github.com/vit100)) 207 208### MISCELLANEOUS 209* [`85c79636d`](https://github.com/npm/cli/commit/85c79636df31bac586c0e380c4852ee155a7723c) [#736](https://github.com/npm/cli/pull/736) add script to update dist-tags ([@mikemimik](https://github.com/mikemimik)) 210 211## 6.13.7 (2020-01-28) 212 213### BUG FIXES 214* [`7dbb91438`](https://github.com/npm/cli/commit/7dbb914382ecd2074fffb7eba81d93262e2d23c6) 215 [#655](https://github.com/npm/cli/pull/655) 216 Update CI detection cases 217 ([@isaacs](https://github.com/isaacs)) 218 219### DEPENDENCIES 220* [`0fb1296c7`](https://github.com/npm/cli/commit/0fb1296c7d6d4bb9e78c96978c433cd65e55c0ea) 221 `libnpx@10.2.2` 222 ([@mikemimik](https://github.com/mikemimik)) 223* [`c9b69d569`](https://github.com/npm/cli/commit/c9b69d569fec7944375a746e9c08a6fa9bec96ff) 224 `node-gyp@5.0.7` 225 ([@mikemimik](https://github.com/mikemimik)) 226* [`e8dbaf452`](https://github.com/npm/cli/commit/e8dbaf452a1f6c5350bb0c37059b89a7448e7986) 227 `bin-links@1.1.7` 228 ([@mikemimik](https://github.com/mikemimik)) 229 * [#613](https://github.com/npm/cli/issues/613) Fixes bin entry for package 230 231## 6.13.6 (2020-01-09) 232 233### DEPENDENCIES 234 235* [`6dba897a1`](https://github.com/npm/cli/commit/6dba897a1e2d56388fb6df0c814b0bb85af366b4) 236 `pacote@9.5.12`: 237 * [`d2f4176`](https://github.com/npm/pacote/commit/d2f4176b6af393d7e29de27e9b638dbcbab9a0c7) 238 fix(git): Do not drop uid/gid when executing in root-owned directory 239 ([@isaacs](https://github.com/isaacs)) 240 241## 6.13.5 (2020-01-09) 242 243### BUG FIXES 244 245* [`fd0a802ec`](https://github.com/npm/cli/commit/fd0a802ec468ec7b98d6c15934c355fef0e7ff60) [#550](https://github.com/npm/cli/pull/550) Fix cache location for `npm ci` ([@zhenyavinogradov](https://github.com/zhenyavinogradov)) 246* [`4b30f3cca`](https://github.com/npm/cli/commit/4b30f3ccaebf50d6ab3bad130ff94827c017cc16) [#648](https://github.com/npm/cli/pull/648) fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f ([@rhengles](https://github.com/rhengles)) 247 248### TESTING 249 250* [`e16f68d30`](https://github.com/npm/cli/commit/e16f68d30d59ce1ddde9fe62f7681b2c07fce84d) test(ci): add failing cache config test ([@ruyadorno](https://github.com/ruyadorno)) 251* [`3f009fbf2`](https://github.com/npm/cli/commit/3f009fbf2c42f68c5127efecc6e22db105a74fe0) [#659](https://github.com/npm/cli/pull/659) test: fix bin-overwriting test on Windows ([@isaacs](https://github.com/isaacs)) 252* [`43ae0791f`](https://github.com/npm/cli/commit/43ae0791f74f68e02850201a64a6af693657b241) [#601](https://github.com/npm/cli/pull/601) ci: Allow builds to run even if one fails ([@XhmikosR](https://github.com/XhmikosR)) 253* [`4a669bee4`](https://github.com/npm/cli/commit/4a669bee4ac54c70adc6979d45cd0605b6dc33fd) [#603](https://github.com/npm/cli/pull/603) Remove the unused appveyor.yml ([@XhmikosR](https://github.com/XhmikosR)) 254* [`9295046ac`](https://github.com/npm/cli/commit/9295046ac92bbe82f4d84e1ec90cc81d3b80bfc7) [#600](https://github.com/npm/cli/pull/600) ci: switch to `actions/checkout@v2` ([@XhmikosR](https://github.com/XhmikosR)) 255 256### DOCUMENTATION 257 258* [`f2d770ac7`](https://github.com/npm/cli/commit/f2d770ac768ea84867772b90a3c9acbdd0c1cb6a) [#569](https://github.com/npm/cli/pull/569) fix netlify publish path config ([@claudiahdz](https://github.com/claudiahdz)) 259* [`462cf0983`](https://github.com/npm/cli/commit/462cf0983dbc18a3d93f77212ca69f878060b2ec) [#627](https://github.com/npm/cli/pull/627) update gatsby dependencies ([@felixonmars](https://github.com/felixonmars)) 260* [`6fb5dbb72`](https://github.com/npm/cli/commit/6fb5dbb7213c4c050c9a47a7d5131447b8b7dcc8) 261 [#532](https://github.com/npm/cli/pull/532) docs: clarify usage of global prefix ([@jgehrcke](https://github.com/jgehrcke)) 262 263## 6.13.4 (2019-12-11) 264 265## BUGFIXES 266 267* [`320ac9aee`](https://github.com/npm/cli/commit/320ac9aeeafd11bb693c53b31148b8d10c4165e8) 268 [npm/bin-links#12](https://github.com/npm/bin-links/pull/12) 269 [npm/gentle-fs#7](https://github.com/npm/gentle-fs/pull/7) 270 Do not remove global bin/man links inappropriately 271 ([@isaacs](https://github.com/isaacs)) 272 273## DEPENDENCIES 274 275* [`52fd21061`](https://github.com/npm/cli/commit/52fd21061ff8b1a73429294620ffe5ebaaa60d3e) 276 `gentle-fs@2.3.0` 277 ([@isaacs](https://github.com/isaacs)) 278* [`d06f5c0b0`](https://github.com/npm/cli/commit/d06f5c0b0611c43b6e70ded92af24fa5d83a0f48) 279 `bin-links@1.1.6` 280 ([@isaacs](https://github.com/isaacs)) 281 282## 6.13.3 (2019-12-09) 283 284### DEPENDENCIES 285 286* [`19ce061a2`](https://github.com/npm/cli/commit/19ce061a2ee165d8de862c8f0f733c222846b9e1) 287 `bin-links@1.1.5` Properly normalize, sanitize, and verify `bin` entries 288 in `package.json`. 289* [`59c836aae`](https://github.com/npm/cli/commit/59c836aae8d0104a767e80c540b963c91774012a) 290 `npm-packlist@1.4.7` 291* [`fb4ecd7d2`](https://github.com/npm/cli/commit/fb4ecd7d2810b0b4897daaf081a5e2f3f483b310) 292 `pacote@9.5.11` 293 * [`5f33040`](https://github.com/npm/pacote/commit/5f3304028b6985fd380fc77c4840ff12a4898301) 294 [#476](https://github.com/npm/cli/issues/476) 295 [npm/pacote#22](https://github.com/npm/pacote/issues/22) 296 [npm/pacote#14](https://github.com/npm/pacote/issues/14) fix: Do not 297 drop perms in git when not root ([isaacs](https://github.com/isaacs), 298 [@darcyclarke](https://github.com/darcyclarke)) 299 * [`6f229f7`](https://github.com/npm/pacote/6f229f78d9911b4734f0a19c6afdc5454034c759) 300 sanitize and normalize package bin field 301 ([isaacs](https://github.com/isaacs)) 302* [`1743cb339`](https://github.com/npm/cli/commit/1743cb339767e86431dcd565c7bdb0aed67b293d) 303 `read-package-json@2.1.1` 304 305 306## 6.13.2 (2019-12-03) 307 308### BUG FIXES 309 310* [`4429645b3`](https://github.com/npm/cli/commit/4429645b3538e1cda54d8d1b7ecb3da7a88fdd3c) 311 [#546](https://github.com/npm/cli/pull/546) 312 fix docs target typo 313 ([@richardlau](https://github.com/richardlau)) 314* [`867642942`](https://github.com/npm/cli/commit/867642942bec69bb9ab71cff1914fb6a9fe67de8) 315 [#142](https://github.com/npm/cli/pull/142) 316 fix(packageRelativePath): fix 'where' for file deps 317 ([@larsgw](https://github.com/larsgw)) 318* [`d480f2c17`](https://github.com/npm/cli/commit/d480f2c176e6976b3cca3565e4c108b599b0379b) 319 [#527](https://github.com/npm/cli/pull/527) 320 Revert "windows: Add preliminary WSL support for npm and npx" 321 ([@craigloewen-msft](https://github.com/craigloewen-msft)) 322* [`e4b97962e`](https://github.com/npm/cli/commit/e4b97962e5fce0d49beb541ce5a0f96aee0525de) 323 [#504](https://github.com/npm/cli/pull/504) 324 remove unnecessary package.json read when reading shrinkwrap 325 ([@Lighting-Jack](https://github.com/Lighting-Jack)) 326* [`1c65d26ac`](https://github.com/npm/cli/commit/1c65d26ac9f10ac0037094c207d216fbf0e969bf) 327 [#501](https://github.com/npm/cli/pull/501) 328 fix(fund): open url for string shorthand 329 ([@ruyadorno](https://github.com/ruyadorno)) 330* [`ae7afe565`](https://github.com/npm/cli/commit/ae7afe56504dbffabf9f73d55b6dac1e3e9fed4a) 331 [#263](https://github.com/npm/cli/pull/263) 332 Don't log error message if git tagging is disabled 333 ([@woppa684](https://github.com/woppa684)) 334* [`4c1b16f6a`](https://github.com/npm/cli/commit/4c1b16f6aecaf78956b9335734cfde2ac076ee11) 335 [#182](https://github.com/npm/cli/pull/182) 336 Warn the user that it is uninstalling npm-install 337 ([@Hoidberg](https://github.com/Hoidberg)) 338 339## 6.13.1 (2019-11-18) 340 341### BUG FIXES 342 343* [`938d6124d`](https://github.com/npm/cli/commit/938d6124d6d15d96b5a69d0ae32ef59fceb8ceab) 344 [#472](https://github.com/npm/cli/pull/472) 345 fix(fund): support funding string shorthand 346 ([@ruyadorno](https://github.com/ruyadorno)) 347* [`b49c5535b`](https://github.com/npm/cli/commit/b49c5535b7c41729a8d167b035924c3c66b36de0) 348 [#471](https://github.com/npm/cli/pull/471) 349 should not publish tap-snapshot folder 350 ([@ruyadorno](https://github.com/ruyadorno)) 351* [`3471d5200`](https://github.com/npm/cli/commit/3471d5200217bfa612b1a262e36c9c043a52eb09) 352 [#253](https://github.com/npm/cli/pull/253) 353 Add preliminary WSL support for npm and npx 354 ([@infinnie](https://github.com/infinnie)) 355* [`3ef295f23`](https://github.com/npm/cli/commit/3ef295f23ee1b2300abf13ec19e935c47a455179) 356 [#486](https://github.com/npm/cli/pull/486) 357 print quick audit report for human output 358 ([@isaacs](https://github.com/isaacs)) 359 360### TESTING 361 362* [`dbbf977ac`](https://github.com/npm/cli/commit/dbbf977acd1e74bcdec859c562ea4a2bc0536442) 363 [#278](https://github.com/npm/cli/pull/278) 364 added workflow to trigger and run benchmarks 365 ([@mikemimik](https://github.com/mikemimik)) 366* [`b4f5e3825`](https://github.com/npm/cli/commit/b4f5e3825535256aaada09c5e8f104570a3d96a4) 367 [#457](https://github.com/npm/cli/pull/457) 368 feat(docs): adding tests and updating docs to reflect changes in registry teams API. 369 ([@nomadtechie](https://github.com/nomadtechie)) 370* [`454c7dd60`](https://github.com/npm/cli/commit/454c7dd60c78371bf606f11a17ed0299025bc37c) 371 [#456](https://github.com/npm/cli/pull/456) 372 fix git configs for git 2.23 and above 373 ([@isaacs](https://github.com/isaacs)) 374 375### DOCUMENTATION 376 377* [`b8c1576a4`](https://github.com/npm/cli/commit/b8c1576a448566397c721655b95fc90bf202b35a) [`30b013ae8`](https://github.com/npm/cli/commit/30b013ae8eacd04b1b8a41ce2ed0dd50c8ebae25) [`26c1b2ef6`](https://github.com/npm/cli/commit/26c1b2ef6be1595d28d935d35faa8ec72daae544) [`9f943a765`](https://github.com/npm/cli/commit/9f943a765faf6ebb8a442e862b808dbb630e018d) [`c0346b158`](https://github.com/npm/cli/commit/c0346b158fc25ab6ca9954d4dd78d9e62f573a41) [`8e09d5ad6`](https://github.com/npm/cli/commit/8e09d5ad67d4f142241193cecbce61c659389be3) [`4a2f551ee`](https://github.com/npm/cli/commit/4a2f551eeb3285f6f200534da33644789715a41a) [`87d67258c`](https://github.com/npm/cli/commit/87d67258c213d9ea9a49ce1804294a718f08ff13) [`5c3b32722`](https://github.com/npm/cli/commit/5c3b3272234764c8b4d2d798b69af077b5a529c7) [`b150eaeff`](https://github.com/npm/cli/commit/b150eaeff428180bfa03be53fd741d5625897758) [`7555a743c`](https://github.com/npm/cli/commit/7555a743ce4c3146d6245dd63f91503c7f439a6c) [`b89423e2f`](https://github.com/npm/cli/commit/b89423e2f6a09b290b15254e7ff7e8033b434d83) 378 [#463](https://github.com/npm/cli/pull/463) 379 [#285](https://github.com/npm/cli/pull/285) 380 [#268](https://github.com/npm/cli/pull/268) 381 [#232](https://github.com/npm/cli/pull/232) 382 [#485](https://github.com/npm/cli/pull/485) 383 [#453](https://github.com/npm/cli/pull/453) 384 docs cleanup: typos, styling and content 385 ([@claudiahdz](https://github.com/claudiahdz)) 386 ([@XhmikosR](https://github.com/XhmikosR)) 387 ([@mugli](https://github.com/mugli)) 388 ([@brettz9](https://github.com/brettz9)) 389 ([@mkotsollaris](https://github.com/mkotsollaris)) 390 391### DEPENDENCIES 392 393* [`661d86cd2`](https://github.com/npm/cli/commit/661d86cd229b14ddf687b7f25a66941a79d233e7) 394 `make-fetch-happen@5.0.2` 395 ([@claudiahdz](https://github.com/claudiahdz)) 396 397## 6.13.0 (2019-11-05) 398 399### NEW FEATURES 400 401* [`4414b06d9`](https://github.com/npm/cli/commit/4414b06d944c56bee05ccfb85260055a767ee334) 402 [#273](https://github.com/npm/cli/pull/273) 403 add fund command 404 ([@ruyadorno](https://github.com/ruyadorno)) 405 406### DOCUMENTATION 407 408* [`ae4c74d04`](https://github.com/npm/cli/commit/ae4c74d04f820a0255a92bdfe77ecf97af134fae) 409 [#274](https://github.com/npm/cli/pull/274) 410 migrate existing docs to gatsby 411 ([@claudiahdz](https://github.com/claudiahdz)) 412* [`4ff1bb180`](https://github.com/npm/cli/commit/4ff1bb180b1db8c72e51b3d57bd4e268b738e049) 413 [#277](https://github.com/npm/cli/pull/277) 414 updated documentation copy 415 ([@oletizi](https://github.com/oletizi)) 416 417### BUG FIXES 418 419* [`e4455409f`](https://github.com/npm/cli/commit/e4455409fe6fe9c198b250b488129171f0b4624a) 420 [#281](https://github.com/npm/cli/pull/281) 421 delete ps1 files on package removal 422 ([@NoDocCat](https://github.com/NoDocCat)) 423* [`cd14d4701`](https://github.com/npm/cli/commit/cd14d47014e8c96ffd6a18791e8752028b19d637) 424 [#279](https://github.com/npm/cli/pull/279) 425 update supported node list to remove v6.0, v6.1, v9.0 - v9.2 426 ([@ljharb](https://github.com/ljharb)) 427 428### DEPENDENCIES 429 430* [`a37296b20`](https://github.com/npm/cli/commit/a37296b20ca3e19c2bbfa78fedcfe695e03fda69) 431 `pacote@9.5.9` 432* [`d3cb3abe8`](https://github.com/npm/cli/commit/d3cb3abe8cee54bd2624acdcf8043932ef0d660a) 433 `read-cmd-shim@1.0.5` 434 435### TESTING 436 437* [`688cd97be`](https://github.com/npm/cli/commit/688cd97be94ca949719424ff69ff515a68c5caba) 438 [#272](https://github.com/npm/cli/pull/272) 439 use github actions for CI 440 ([@JasonEtco](https://github.com/JasonEtco)) 441* [`9a2d8af84`](https://github.com/npm/cli/commit/9a2d8af84f7328f13d8f578cf4b150b9d5f09517) 442 [#240](https://github.com/npm/cli/pull/240) 443 Clean up some flakiness and inconsistency 444 ([@isaacs](https://github.com/isaacs)) 445 446## 6.12.1 (2019-10-29) 447 448### BUG FIXES 449 450* [`6508e833d`](https://github.com/npm/cli/commit/6508e833df35a3caeb2b496f120ce67feff306b6) 451 [#269](https://github.com/npm/cli/pull/269) 452 add node v13 as a supported version 453 ([@ljharb](https://github.com/ljharb)) 454* [`b6588a8f7`](https://github.com/npm/cli/commit/b6588a8f74fb8b1ad103060b73c4fd5174b1d1f6) 455 [#265](https://github.com/npm/cli/pull/265) 456 Fix regression in lockfile repair for sub-deps 457 ([@feelepxyz](https://github.com/feelepxyz)) 458* [`d5dfe57a1`](https://github.com/npm/cli/commit/d5dfe57a1d810fe7fd64edefc976633ee3a4da53) 459 [#266](https://github.com/npm/cli/pull/266) 460 resolve circular dependency in pack.js 461 ([@addaleax](https://github.com/addaleax)) 462 463### DEPENDENCIES 464 465* [`73678bb59`](https://github.com/npm/cli/commit/73678bb590a8633c3bdbf72e08f1279f9e17fd28) 466 `chownr@1.1.3` 467* [`4b76926e2`](https://github.com/npm/cli/commit/4b76926e2058ef30ab1d5e2541bb96d847653417) 468 `graceful-fs@4.2.3` 469* [`c691f36a9`](https://github.com/npm/cli/commit/c691f36a9c108b6267859fe61e4a38228b190c17) 470 `libcipm@4.0.7` 471* [`5e1a14975`](https://github.com/npm/cli/commit/5e1a14975311bfdc43df8e1eb317ae5690ee580c) 472 `npm-packlist@1.4.6` 473* [`c194482d6`](https://github.com/npm/cli/commit/c194482d65ee81a5a0a6281c7a9f984462286c56) 474 `npm-registry-fetch@4.0.2` 475* [`bc6a8e0ec`](https://github.com/npm/cli/commit/bc6a8e0ec966281e49b1dc66f9c641ea661ab7a6) 476 `tar@4.4.1` 477* [`4dcca3cbb`](https://github.com/npm/cli/commit/4dcca3cbb161da1f261095d9cdd26e1fbb536a8d) 478 `uuid@3.3.3` 479 480## 6.12.0 (2019-10-08): 481 482Now `npm ci` runs prepare scripts for git dependencies, and respects the 483`--no-optional` argument. Warnings for `engine` mismatches are printed 484again. Various other fixes and cleanups. 485 486### BUG FIXES 487 488* [`890b245dc`](https://github.com/npm/cli/commit/890b245dc1f609590d8ab993fac7cf5a37ed46a5) 489 [#252](https://github.com/npm/cli/pull/252) ci: add dirPacker to options 490 ([@claudiahdz](https://github.com/claudiahdz)) 491* [`f3299acd0`](https://github.com/npm/cli/commit/f3299acd0b4249500e940776aca77cc6c0977263) 492 [#257](https://github.com/npm/cli/pull/257) 493 [npm.community#4792](https://npm.community/t/engines-and-engines-strict-ignored/4792) 494 warn message on engine mismatch 495 ([@ruyadorno](https://github.com/ruyadorno)) 496* [`bbc92fb8f`](https://github.com/npm/cli/commit/bbc92fb8f3478ff67071ebaff551f01c1ea42ced) 497 [#259](https://github.com/npm/cli/pull/259) 498 [npm.community#10288](https://npm.community/t/npm-token-err-figgypudding-options-cannot-be-modified-use-concat-instead/10288) 499 Fix figgyPudding error in `npm token` 500 ([@benblank](https://github.com/benblank)) 501* [`70f54dcb5`](https://github.com/npm/cli/commit/70f54dcb5693b301c6b357922b7e8d16b57d8b00) 502 [#241](https://github.com/npm/cli/pull/241) doctor: Make OK more 503 consistent ([@gemal](https://github.com/gemal)) 504 505### FEATURES 506 507* [`ed993a29c`](https://github.com/npm/cli/commit/ed993a29ccf923425317c433844d55dbea2f23ee) 508 [#249](https://github.com/npm/cli/pull/249) Add CI environment variables 509 to user-agent ([@isaacs](https://github.com/isaacs)) 510* [`f6b0459a4`](https://github.com/npm/cli/commit/f6b0459a466a2c663dbd549cdc331e7732552dca) 511 [#248](https://github.com/npm/cli/pull/248) Add option to save 512 package-lock without formatting Adds a new config 513 `--format-package-lock`, which defaults to true. 514 ([@bl00mber](https://github.com/bl00mber)) 515 516### DEPENDENCIES 517 518* [`0ca063c5d`](https://github.com/npm/cli/commit/0ca063c5dc961c4aa17373f4b33fb54c51c8c8d6) 519 `npm-lifecycle@3.1.4`: 520 - fix: filter functions and undefined out of makeEnv 521 ([@isaacs](https://github.com/isaacs)) 522* [`5df6b0ea2`](https://github.com/npm/cli/commit/5df6b0ea2e3106ba65bba649cc8d7f02f4738236) 523 `libcipm@4.0.4`: 524 - fix: pack git directories properly 525 ([@claudiahdz](https://github.com/claudiahdz)) 526 - respect no-optional argument 527 ([@cruzdanilo](https://github.com/cruzdanilo)) 528* [`7e04f728c`](https://github.com/npm/cli/commit/7e04f728cc4cd4853a8fc99e2df0a12988897589) 529 `tar@4.4.12` 530* [`5c380e5a3`](https://github.com/npm/cli/commit/5c380e5a33d760bb66a4285b032ae5f50af27199) 531 `stringify-package@1.0.1` ([@isaacs](https://github.com/isaacs)) 532* [`62f2ca692`](https://github.com/npm/cli/commit/62f2ca692ac0c0467ef4cf74f91777a5175258c4) 533 `node-gyp@5.0.5` ([@isaacs](https://github.com/isaacs)) 534* [`0ff0ea47a`](https://github.com/npm/cli/commit/0ff0ea47a8840dd7d952bde7f7983a5016cda8ea) 535 `npm-install-checks@3.0.2` ([@isaacs](https://github.com/isaacs)) 536* [`f46edae94`](https://github.com/npm/cli/commit/f46edae9450b707650a0efab09aa1e9295a18070) 537 `hosted-git-info@2.8.5` ([@isaacs](https://github.com/isaacs)) 538 539### TESTING 540 541* [`44a2b036b`](https://github.com/npm/cli/commit/44a2b036b34324ec85943908264b2e36de5a9435) 542 [#262](https://github.com/npm/cli/pull/262) fix root-ownership race 543 conditions in meta-test ([@isaacs](https://github.com/isaacs)) 544 545## 6.11.3 (2019-09-03): 546 547Fix npm ci regressions and npm outdated depth. 548 549### BUG FIXES 550 551* [`235ed1d28`](https://github.com/npm/cli/commit/235ed1d2838ef302bb995e183980209d16c51b9b) 552 [#239](https://github.com/npm/cli/pull/239) 553 Don't override user specified depth in outdated 554 Restores ability to update packages using `--depth` as suggested by `npm audit`. 555 ([@G-Rath](https://github.com/G-Rath)) 556* [`1fafb5151`](https://github.com/npm/cli/commit/1fafb51513466cd793866b576dfea9a8963a3335) 557 [#242](https://github.com/npm/cli/pull/242) 558 [npm.community#9586](https://npm.community/t/6-11-1-some-dependencies-are-no-longer-being-installed/9586/4) 559 Revert "install: do not descend into directory deps' child modules" 560 ([@isaacs](https://github.com/isaacs)) 561* [`cebf542e6`](https://github.com/npm/cli/commit/cebf542e61dcabdd2bd3b876272bf8eebf7d01cc) 562 [#243](https://github.com/npm/cli/pull/243) 563 [npm.community#9720](https://npm.community/t/6-11-2-npm-ci-installs-package-with-wrong-permissions/9720) 564 ci: pass appropriate configs for file/dir modes 565 ([@isaacs](https://github.com/isaacs)) 566 567### DEPENDENCIES 568 569* [`e5fbb7ed1`](https://github.com/npm/cli/commit/e5fbb7ed1fc7ef5c6ca4790e2d0dc441e0ac1596) 570 `read-cmd-shim@1.0.4` 571 ([@claudiahdz](https://github.com/claudiahdz)) 572* [`23ce65616`](https://github.com/npm/cli/commit/23ce65616c550647c586f7babc3c2f60115af2aa) 573 `npm-pick-manifest@3.0.2` 574 ([@claudiahdz](https://github.com/claudiahdz)) 575 576## 6.11.2 (2019-08-22): 577 578Fix a recent Windows regression, and two long-standing Windows bugs. Also, 579get CI running on Windows, so these things are less likely in the future. 580 581### DEPENDENCIES 582 583* [`9778a1b87`](https://github.com/npm/cli/commit/9778a1b878aaa817af6e99385e7683c2a389570d) 584 `cmd-shim@3.0.3`: Fix regression where shims fail to preserve exit code 585 ([@isaacs](https://github.com/isaacs)) 586* [`bf93e91d8`](https://github.com/npm/cli/commit/bf93e91d879c816a055d5913e6e4210d7299f299) 587 `npm-package-arg@6.1.1`: Properly handle git+file: urls on Windows when a 588 drive letter is included. ([@isaacs](https://github.com/isaacs)) 589 590### BUGFIXES 591 592* [`6cc4cc66f`](https://github.com/npm/cli/commit/6cc4cc66f1fb050dc4113e35cab59197fd48e04a) 593 escape args properly on Windows Bash Despite being bash, Node.js running 594 on windows git mingw bash still executes child processes using cmd.exe. 595 As a result, arguments in this environment need to be escaped in the 596 style of cmd.exe, not bash. ([@isaacs](https://github.com/isaacs)) 597 598### TESTS 599 600* [`291aba7b8`](https://github.com/npm/cli/commit/291aba7b821e247b96240b1ec037310ead69a594) 601 make tests pass on Windows ([@isaacs](https://github.com/isaacs)) 602* [`fea3a023a`](https://github.com/npm/cli/commit/fea3a023a80863f32a5f97f5132401b1a16161b8) 603 travis: run tests on Windows as well 604 ([@isaacs](https://github.com/isaacs)) 605 606## 6.11.1 (2019-08-20): 607 608Fix a regression for windows command shim syntax. 609 610* [`37db29647`](https://github.com/npm/cli/commit/37db2964710c80003604b7e3c1527d17be7ed3d0) 611 `cmd-shim@3.0.2` ([@isaacs](https://github.com/isaacs)) 612 613## v6.11.0 (2019-08-20): 614 615A few meaty bugfixes, and introducing `peerDependenciesMeta`. 616 617### FEATURES 618 619* [`a12341088`](https://github.com/npm/cli/commit/a12341088820c0e7ef6c1c0db3c657f0c2b3943e) 620 [#224](https://github.com/npm/cli/pull/224) Implements 621 peerDependenciesMeta ([@arcanis](https://github.com/arcanis)) 622* [`2f3b79bba`](https://github.com/npm/cli/commit/2f3b79bbad820fd4a398aa494b19f79b7fd520a1) 623 [#234](https://github.com/npm/cli/pull/234) add new forbidden 403 error 624 code ([@claudiahdz](https://github.com/claudiahdz)) 625 626### BUGFIXES 627 628* [`24acc9fc8`](https://github.com/npm/cli/commit/24acc9fc89d99d87cc66206c6c6f7cdc82fbf763) 629 and 630 [`45772af0d`](https://github.com/npm/cli/commit/45772af0ddca54b658cb2ba2182eec26d0a4729d) 631 [#217](https://github.com/npm/cli/pull/217) 632 [npm.community#8863](https://npm.community/t/installing-the-same-module-under-multiple-relative-paths-fails-on-linux/8863) 633 [npm.community#9327](https://npm.community/t/reinstall-breaks-after-npm-update-to-6-10-2/9327,) 634 do not descend into directory deps' child modules, fix shrinkwrap files 635 that inappropriately list child nodes of symlink packages 636 ([@isaacs](https://github.com/isaacs) and 637 [@salomvary](https://github.com/salomvary)) 638* [`50cfe113d`](https://github.com/npm/cli/commit/50cfe113da5fcc59c1d99b0dcf1050ace45803c7) 639 [#229](https://github.com/npm/cli/pull/229) fixed typo in semver doc 640 ([@gall0ws](https://github.com/gall0ws)) 641* [`e8fb2a1bd`](https://github.com/npm/cli/commit/e8fb2a1bd9785e0092e9926f4fd65ad431e38452) 642 [#231](https://github.com/npm/cli/pull/231) Fix spelling mistakes in 643 CHANGELOG-3.md ([@XhmikosR](https://github.com/XhmikosR)) 644* [`769d2e057`](https://github.com/npm/cli/commit/769d2e057daf5a2cbfe0ce86f02550e59825a691) 645 [npm/uid-number#7](https://github.com/npm/uid-number/issues/7) Better 646 error on invalid `--user`/`--group` configs. This addresses the issue 647 when people fail to install binary packages on Docker and other 648 environments where there is no 'nobody' user. 649 ([@isaacs](https://github.com/isaacs)) 650* [`8b43c9624`](https://github.com/npm/cli/commit/8b43c962498c8e2707527e4fca442d7a4fa51595) 651 [nodejs/node#28987](https://github.com/nodejs/node/issues/28987) 652 [npm.community#6032](https://npm.community/t/npm-ci-doesnt-respect-npmrc-variables/6032) 653 [npm.community#6658](https://npm.community/t/npm-ci-doesnt-fill-anymore-the-process-env-npm-config-cache-variable-on-post-install-scripts/6658) 654 [npm.community#6069](https://npm.community/t/npm-ci-does-not-compile-native-dependencies-according-to-npmrc-configuration/6069) 655 [npm.community#9323](https://npm.community/t/npm-6-9-x-not-passing-environment-to-node-gyp-regression-from-6-4-x/9323/2) 656 Fix the regression where random config values in a .npmrc file are not 657 passed to lifecycle scripts, breaking build processes which rely on them. 658 ([@isaacs](https://github.com/isaacs)) 659* [`8b85eaa47`](https://github.com/npm/cli/commit/8b85eaa47da3abaacc90fe23162a68cc6e1f0404) 660 save files with inferred ownership rather than relying on `SUDO_UID` and 661 `SUDO_GID`. ([@isaacs](https://github.com/isaacs)) 662* [`b7f6e5f02`](https://github.com/npm/cli/commit/b7f6e5f0285515087b4614d81db17206524c0fdb) 663 Infer ownership of shrinkwrap files 664 ([@isaacs](https://github.com/isaacs)) 665* [`54b095d77`](https://github.com/npm/cli/commit/54b095d77b3b131622b3cf4cb5c689aa2dd10b6b) 666 [#235](https://github.com/npm/cli/pull/235) Add spec to dist-tag remove 667 function ([@theberbie](https://github.com/theberbie)) 668 669### DEPENDENCIES 670 671* [`dc8f9e52f`](https://github.com/npm/cli/commit/dc8f9e52f0bb107c0a6b20cc0c97cbc3b056c1b3) 672 `pacote@9.5.7`: Infer the ownership of all unpacked files in 673 `node_modules`, so that we never have user-owned files in root-owned 674 folders, or root-owned files in user-owned folders. 675 ([@isaacs](https://github.com/isaacs)) 676* [`bb33940c3`](https://github.com/npm/cli/commit/bb33940c32aad61704084e61ebd1bd8e7cacccc8) 677 `cmd-shim@3.0.0`: 678 * [`9c93ac3`](https://github.com/npm/cmd-shim/commit/9c93ac39e95b0d6ae852e842e4c5dba5e19687c2) 679 [#2](https://github.com/npm/cmd-shim/pull/2) 680 [npm#3380](https://github.com/npm/npm/issues/3380) Handle environment 681 variables properly ([@basbossink](https://github.com/basbossink)) 682 * [`2d277f8`](https://github.com/npm/cmd-shim/commit/2d277f8e84d45401747b0b9470058f168b974ad5) 683 [#25](https://github.com/npm/cmd-shim/pull/25) 684 [#36](https://github.com/npm/cmd-shim/pull/36) 685 [#35](https://github.com/npm/cmd-shim/pull/35) Fix 'no shebang' case by 686 always providing `$basedir` in shell script 687 ([@igorklopov](https://github.com/igorklopov)) 688 * [`adaf20b`](https://github.com/npm/cmd-shim/commit/adaf20b7fa2c09c2111a2506c6a3e53ed0831f88) 689 [#26](https://github.com/npm/cmd-shim/pull/26) Fix `$*` causing an 690 error when arguments contain parentheses 691 ([@satazor](https://github.com/satazor)) 692 * [`49f0c13`](https://github.com/npm/cmd-shim/commit/49f0c1318fd384e0031c3fd43801f0e22e1e555f) 693 [#30](https://github.com/npm/cmd-shim/pull/30) Fix paths for MSYS/MINGW 694 bash ([@dscho](https://github.com/dscho)) 695 * [`51a8af3`](https://github.com/npm/cmd-shim/commit/51a8af30990cb072cb30d67fc1b564b14746bba9) 696 [#34](https://github.com/npm/cmd-shim/pull/34) Add proper support for 697 PowerShell ([@ExE-Boss](https://github.com/ExE-Boss)) 698 * [`4c37e04`](https://github.com/npm/cmd-shim/commit/4c37e048dee672237e8962fdffca28e20e9f976d) 699 [#10](https://github.com/npm/cmd-shim/issues/10) Work around quoted 700 batch file names ([@isaacs](https://github.com/isaacs)) 701* [`a4e279544`](https://github.com/npm/cli/commit/a4e279544f7983e0adff1e475e3760f1ea85825a) 702 `npm-lifecycle@3.1.3` ([@isaacs](https://github.com/isaacs)): 703 * fail properly if `uid-number` raises an error 704* [`7086a1809`](https://github.com/npm/cli/commit/7086a1809bbfda9be81344b3949c7d3ac687ffc4) 705 `libcipm@4.0.3` ([@isaacs](https://github.com/isaacs)) 706* [`8845141f9`](https://github.com/npm/cli/commit/8845141f9d7827dae572c8cf26f2c775db905bd3) 707 `read-package-json@2.1.0` ([@isaacs](https://github.com/isaacs)) 708* [`51c028215`](https://github.com/npm/cli/commit/51c02821575d80035ebe853492d110db11a7d1b9) 709 `bin-links@1.1.3` ([@isaacs](https://github.com/isaacs)) 710* [`534a5548c`](https://github.com/npm/cli/commit/534a5548c9ebd59f0dd90e9ccca148ed8946efa6) 711 `read-cmd-shim@1.0.3` ([@isaacs](https://github.com/isaacs)) 712* [`3038f2fd5`](https://github.com/npm/cli/commit/3038f2fd5b1d7dd886ee72798241d8943690f508) 713 `gentle-fs@2.2.1` ([@isaacs](https://github.com/isaacs)) 714* [`a609a1648`](https://github.com/npm/cli/commit/a609a16489f76791697d270b499fd4949ab1f8c3) 715 `graceful-fs@4.2.2` ([@isaacs](https://github.com/isaacs)) 716* [`f0346f754`](https://github.com/npm/cli/commit/f0346f75490619a81b310bfc18646ae5ae2e0ea4) 717 `cacache@12.0.3` ([@isaacs](https://github.com/isaacs)) 718* [`ca9c615c8`](https://github.com/npm/cli/commit/ca9c615c8cff5c7db125735eb09f84d912d18694) 719 `npm-pick-manifest@3.0.0` ([@isaacs](https://github.com/isaacs)) 720* [`b417affbf`](https://github.com/npm/cli/commit/b417affbf7133dc7687fd809e4956a43eae3438a) 721 `pacote@9.5.8` ([@isaacs](https://github.com/isaacs)) 722 723### TESTS 724 725* [`b6df0913c`](https://github.com/npm/cli/commit/b6df0913ca73246f1fa6cfa0e81e34ba5f2b6204) 726 [#228](https://github.com/npm/cli/pull/228) Proper handing of 727 /usr/bin/node lifecycle-path test 728 ([@olivr70](https://github.com/olivr70)) 729* [`aaf98e88c`](https://github.com/npm/cli/commit/aaf98e88c78fd6c850d0a3d3ee2f61c02f63bc8c) 730 `npm-registry-mock@1.3.0` ([@isaacs](https://github.com/isaacs)) 731 732## v6.10.3 (2019-08-06): 733 734### BUGFIXES 735 736* [`27cccfbda`](https://github.com/npm/cli/commit/27cccfbdac8526cc807b07f416355949b1372a9b) 737 [#223](https://github.com/npm/cli/pull/223) vulns → vulnerabilities in 738 npm audit output ([@sapegin](https://github.com/sapegin)) 739* [`d5e865eb7`](https://github.com/npm/cli/commit/d5e865eb79329665a927cc2767b4395c03045dbb) 740 [#222](https://github.com/npm/cli/pull/222) 741 [#226](https://github.com/npm/cli/pull/226) install, doctor: don't crash 742 if registry unset ([@dmitrydvorkin](https://github.com/dmitrydvorkin), 743 [@isaacs](https://github.com/isaacs)) 744* [`5b3890226`](https://github.com/npm/cli/commit/5b389022652abeb0e1c278a152550eb95bc6c452) 745 [#227](https://github.com/npm/cli/pull/227) 746 [npm.community#9167](https://npm.community/t/npm-err-cb-never-called-permission-denied/9167/5) 747 Handle unhandledRejections, tell user what to do when encountering an 748 `EACCES` error in the cache. ([@isaacs](https://github.com/isaacs)) 749 750### DEPENDENCIES 751 752* [`77516df6e`](https://github.com/npm/cli/commit/77516df6eac94a6d7acb5e9ca06feaa0868d779b) 753 `licensee@7.0.3` ([@isaacs](https://github.com/isaacs)) 754* [`ceb993590`](https://github.com/npm/cli/commit/ceb993590e4e376a9a78264ce7bb4327fbbb37fe) 755 `query-string@6.8.2` ([@isaacs](https://github.com/isaacs)) 756* [`4050b9189`](https://github.com/npm/cli/commit/4050b91898c60e9b22998cf82b70b9b822de592a) 757 `hosted-git-info@2.8.2` 758 * [#46](https://github.com/npm/hosted-git-info/issues/46) 759 [#43](https://github.com/npm/hosted-git-info/issues/43) 760 [#47](https://github.com/npm/hosted-git-info/pull/47) 761 [#44](https://github.com/npm/hosted-git-info/pull/44) Add support for 762 GitLab subgroups ([@mterrel](https://github.com/mterrel), 763 [@isaacs](https://github.com/isaacs), 764 [@ybiquitous](https://github.com/ybiquitous)) 765 * [`3b1d629`](https://github.com/npm/hosted-git-info/commit/3b1d629) 766 [#48](https://github.com/npm/hosted-git-info/issues/48) fix http 767 protocol using sshurl by default 768 ([@fengmk2](https://github.com/fengmk2)) 769 * [`5d4a8d7`](https://github.com/npm/hosted-git-info/commit/5d4a8d7) 770 ignore noCommittish on tarball url generation 771 ([@isaacs](https://github.com/isaacs)) 772 * [`1692435`](https://github.com/npm/hosted-git-info/commit/1692435) 773 use gist tarball url that works for anonymous gists 774 ([@isaacs](https://github.com/isaacs)) 775 * [`d5cf830`](https://github.com/npm/hosted-git-info/commit/d5cf8309be7af884032616c63ea302ce49dd321c) 776 Do not allow invalid gist urls ([@isaacs](https://github.com/isaacs)) 777 * [`e518222`](https://github.com/npm/hosted-git-info/commit/e5182224351183ce619dd5ef00019ae700ed37b7) 778 Use LRU cache to prevent unbounded memory consumption 779 ([@iarna](https://github.com/iarna)) 780 781## v6.10.2 (2019-07-23): 782 783tl;dr - Fixes several issues with the cache when npm is run as `sudo` on 784Unix systems. 785 786### TESTING 787 788* [`2a78b96f8`](https://github.com/npm/cli/commit/2a78b96f830bbd834720ccc9eacccc54915ae6f7) 789 check test cache for root-owned files 790 ([@isaacs](https://github.com/isaacs)) 791* [`108646ebc`](https://github.com/npm/cli/commit/108646ebc12f3eeebaa0a45884c45991a45e57e4) 792 run sudo tests on Travis-CI ([@isaacs](https://github.com/isaacs)) 793* [`cf984e946`](https://github.com/npm/cli/commit/cf984e946f453cbea2fcc7a59608de3f24ab74c3) 794 set --no-esm tap flag ([@isaacs](https://github.com/isaacs)) 795* [`8e0a3100d`](https://github.com/npm/cli/commit/8e0a3100dffb3965bb3dc4240e82980dfadf2f3c) 796 add script to run tests and leave fixtures for inspection and debugging 797 ([@isaacs](https://github.com/isaacs)) 798 799### BUGFIXES 800 801* [`25f4f73f6`](https://github.com/npm/cli/commit/25f4f73f6dc9744757787c82351120cd1baee5f8) 802 add a util for writing arbitrary files to cache This prevents metrics 803 timing and debug logs from becoming root-owned. 804 ([@isaacs](https://github.com/isaacs)) 805* [`2c61ce65d`](https://github.com/npm/cli/commit/2c61ce65d6b67100fdf3fcb9729055b669cb1a1d) 806 infer cache owner from parent dir in `correct-mkdir` util 807 ([@isaacs](https://github.com/isaacs)) 808* [`235e5d6df`](https://github.com/npm/cli/commit/235e5d6df6f427585ec58425f1f3339d08f39d8a) 809 ensure correct owner on cached all-packages metadata 810 ([@isaacs](https://github.com/isaacs)) 811* [`e2d377bb6`](https://github.com/npm/cli/commit/e2d377bb6419d8a3c1d80a73dba46062b4dad336) 812 [npm.community#8540](https://npm.community/t/npm-audit-fails-with-child-requires-fails-because-requires-must-be-an-object/8540) 813 audit: report server error on failure 814 ([@isaacs](https://github.com/isaacs)) 815* [`52576a39e`](https://github.com/npm/cli/commit/52576a39ed75d94c46bb2c482fd38d2c6ea61c56) 816 [#216](https://github.com/npm/cli/pull/216) 817 [npm.community#5385](https://npm.community/t/6-8-0-npm-ci-fails-with-local-dependency/5385) 818 [npm.community#6076](https://npm.community/t/npm-ci-fail-to-local-packages/6076) 819 Fix `npm ci` with `file:` dependencies. Partially reverts 820 [#40](https://github.com/npm/cli/pull/40)/[#86](https://github.com/npm/cli/pull/86), 821 recording dependencies of linked deps in order for `npm ci` to work. 822 ([@jfirebaugh](https://github.com/jfirebaugh)) 823 824### DEPENDENCIES 825 826* [`0fefdee13`](https://github.com/npm/cli/commit/0fefdee130fd7d0dbb240fb9ecb50a793fbf3d29) 827 `cacache@12.0.2` ([@isaacs](https://github.com/isaacs)) 828 * infer uid/gid instead of accepting as options, preventing the 829 overwhelming majority of cases where root-owned files end up in the 830 cache folder. 831 ([ac84d14](https://github.com/npm/cacache/commit/ac84d14)) 832 ([@isaacs](https://github.com/isaacs)) 833 ([#1](https://github.com/npm/cacache/pull/1)) 834 * **i18n:** add another error message 835 ([676cb32](https://github.com/npm/cacache/commit/676cb32)) 836 ([@zkat](https://github.com/zkat)) 837* [`e1d87a392`](https://github.com/npm/cli/commit/e1d87a392371a070b0788ab7bfc62be18b21e9ad) 838 `pacote@9.5.4` ([@isaacs](https://github.com/isaacs)) 839 * git: ensure stream failures are reported 840 ([7f07b5d](https://github.com/npm/pacote/commit/7f07b5d)) 841 [#1](https://github.com/npm/pacote/issues/1) 842 ([@lddubeau](https://github.com/lddubeau)) 843* [`3f035bf09`](https://github.com/npm/cli/commit/3f035bf098e2feea76574cec18b04812659aa16d) 844 `infer-owner@1.0.4` ([@isaacs](https://github.com/isaacs)) 845* [`ba3283112`](https://github.com/npm/cli/commit/ba32831126591d2f6f48e31a4a2329b533b1ff19) 846 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 847* [`ee90c334d`](https://github.com/npm/cli/commit/ee90c334d271383d0325af42f20f80f34cb61f07) 848 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 849* [`1e480c384`](https://github.com/npm/cli/commit/1e480c38416982ae28b5cdd48c698ca59d3c0395) 850 `libnpmaccess@3.0.2` ([@isaacs](https://github.com/isaacs)) 851* [`7662ee850`](https://github.com/npm/cli/commit/7662ee850220c71ecaec639adbc7715286f0d28b) 852 `libnpmhook@5.0.3` ([@isaacs](https://github.com/isaacs)) 853* [`1357fadc6`](https://github.com/npm/cli/commit/1357fadc613d0bfeb40f9a8f3ecace2face2fe2c) 854 `libnpmorg@1.0.1` ([@isaacs](https://github.com/isaacs)) 855* [`a621b5cb6`](https://github.com/npm/cli/commit/a621b5cb6c881f95a11af86a8051754a67ae017c) 856 `libnpmsearch@2.0.2` ([@isaacs](https://github.com/isaacs)) 857* [`560cd31dd`](https://github.com/npm/cli/commit/560cd31dd51b6aa2e396ccdd7289fab0a50b5608) 858 `libnpmteam@1.0.2` ([@isaacs](https://github.com/isaacs)) 859* [`de7ae0867`](https://github.com/npm/cli/commit/de7ae0867d4c0180edc283457ce0b4e8e5eee554) 860 `npm-profile@4.0.2` ([@isaacs](https://github.com/isaacs)) 861* [`e95da463c`](https://github.com/npm/cli/commit/e95da463cb7a325457ef411a569d7ef4bf76901d) 862 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 863* [`554b641d4`](https://github.com/npm/cli/commit/554b641d49d135ae8d137e83aa288897c32dacc6) 864 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 865* [`06772f34a`](https://github.com/npm/cli/commit/06772f34ab851440dcd78574736936c674a84aed) 866 `node-gyp@5.0.3` ([@isaacs](https://github.com/isaacs)) 867* [`85358db80`](https://github.com/npm/cli/commit/85358db80d6ccb5f7bc9a0b4d558ac6dd2468394) 868 `npm-lifecycle@3.1.2` ([@isaacs](https://github.com/isaacs)) 869 * [`051cf20`](https://github.com/npm/npm-lifecycle/commit/051cf20072a01839c17920d2e841756251c4f924) 870 [#26](https://github.com/npm/npm-lifecycle/pull/26) fix switches for 871 alternative shells on Windows 872 ([@gucong3000](https://github.com/gucong3000)) 873 * [`3aaf954`](https://github.com/npm/npm-lifecycle/commit/3aaf95435965e8f7acfd955582cf85237afd2c9b) 874 [#25](https://github.com/npm/npm-lifecycle/pull/25) set only one PATH 875 env variable for child process on Windows 876 ([@zkochan](https://github.com/zkochan)) 877 * [`ea18ed2`](https://github.com/npm/npm-lifecycle/commit/ea18ed2b754ca7f11998cad70d88e9004c5bef4a) 878 [#36](https://github.com/npm/npm-lifecycle/pull/36) 879 [#11](https://github.com/npm/npm-lifecycle/issue/11) 880 [#18](https://github.com/npm/npm-lifecycle/issue/18) remove 881 procInterrupt listener on SIGINT in procError 882 ([@mattshin](https://github.com/mattshin)) 883 * [`5523951`](https://github.com/npm/npm-lifecycle/commit/55239519c57b82521605622e6c71640a31ed4586) 884 [#29](https://github.com/npm/npm-lifecycle/issue/29) 885 [#30](https://github.com/npm/npm-lifecycle/pull/30) Use platform 886 specific path casing if present 887 ([@mattezell](https://github.com/mattezell)) 888 889## v6.10.1 (2019-07-11): 890 891### BUGFIXES 892 893* [`3cbd57712`](https://github.com/npm/cli/commit/3cbd577120a9da6e51bb8b13534d1bf71ea5712c) 894 fix(git): strip GIT environs when running git 895 ([@isaacs](https://github.com/isaacs)) 896* [`a81a8c4c4`](https://github.com/npm/cli/commit/a81a8c4c466f510215a51cef1bb08544d11844fe) 897 [#206](https://github.com/npm/cli/pull/206) improve isOnly(Dev,Optional) 898 ([@larsgw](https://github.com/larsgw)) 899* [`172f9aca6`](https://github.com/npm/cli/commit/172f9aca67a66ee303c17f90a994cd52fc66552a) 900 [#179](https://github.com/npm/cli/pull/179) fix-xmas-underline 901 ([@raywu0123](https://github.com/raywu0123)) 902* [`f52673fc7`](https://github.com/npm/cli/commit/f52673fc7284e58af8c04533e82b76bf7add72cf) 903 [#212](https://github.com/npm/cli/pull/212) build: use `/usr/bin/env` to 904 load bash ([@rsmarples](https://github.com/rsmarples)) 905 906### DEPENDENCIES 907 908* [`ef4445ad3`](https://github.com/npm/cli/commit/ef4445ad34a53b5639499c8e3c9752f62ee6f37c) 909 [#208](https://github.com/npm/cli/pull/208) `node-gyp@5.0.2` 910 ([@irega](https://github.com/irega)) 911* [`c0d611356`](https://github.com/npm/cli/commit/c0d611356f7b23077e97574b01c8886e544db425) 912 `npm-lifecycle@3.0.0` ([@isaacs](https://github.com/isaacs)) 913* [`7716ba972`](https://github.com/npm/cli/commit/7716ba9720270d5b780755a5bb1ce79702067f1f) 914 `libcipm@4.0.0` ([@isaacs](https://github.com/isaacs)) 915* [`42d22e837`](https://github.com/npm/cli/commit/42d22e8374c7d303d94e405d7385d94dd2558814) 916 `libnpm@3.0.0` ([@isaacs](https://github.com/isaacs)) 917* [`a2ea7f9ff`](https://github.com/npm/cli/commit/a2ea7f9ff64ae743d05fdbf7d46fb9afafa8aa6f) 918 `semver@5.7.0` ([@isaacs](https://github.com/isaacs)) 919* [`429226a5e`](https://github.com/npm/cli/commit/429226a5e992cd907d4f19bd738037007cf78c1f) 920 `lru-cache@5.1.1` ([@isaacs](https://github.com/isaacs)) 921* [`175670ea6`](https://github.com/npm/cli/commit/175670ea65cca03f8b2e957df3dd4b8b0efd0e1f) 922 `npm-registry-fetch@3.9.1`: ([@isaacs](https://github.com/isaacs)) 923* [`0d0517f7f`](https://github.com/npm/cli/commit/0d0517f7f8c902b5064ac18fb4015b31750ad2b2) 924 `call-limit@1.1.1` ([@isaacs](https://github.com/isaacs)) 925* [`741400429`](https://github.com/npm/cli/commit/74140042917ea241062a812ceb65c5423c2bafa9) 926 `glob@7.1.4` ([@isaacs](https://github.com/isaacs)) 927* [`bddd60e30`](https://github.com/npm/cli/commit/bddd60e302283a4a70d35f8f742e42bd13f4dabf) 928 `inherits@2.0.4` ([@isaacs](https://github.com/isaacs)) 929* [`4acf03fd1`](https://github.com/npm/cli/commit/4acf03fd140ed3ddb2dcf3fdc9756bc3f5a8bcbb) 930 `libnpmsearch@2.0.1` ([@isaacs](https://github.com/isaacs)) 931* [`c2bd17291`](https://github.com/npm/cli/commit/c2bd17291a86bea7ced2fbd07d66d013bd7a7560) 932 `marked@0.6.3` ([@isaacs](https://github.com/isaacs)) 933* [`7f0221bb1`](https://github.com/npm/cli/commit/7f0221bb1bb41ffc933c785940e227feae38c80c) 934 `marked-man@0.6.0` ([@isaacs](https://github.com/isaacs)) 935* [`f458fe7dd`](https://github.com/npm/cli/commit/f458fe7dd3bebddf603aaae183a424ea8aaa018f) 936 `npm-lifecycle@2.1.1` ([@isaacs](https://github.com/isaacs)) 937* [`009752978`](https://github.com/npm/cli/commit/0097529780269c28444f1efa0d7c131d47a933eb) 938 `node-gyp@4.0.0` ([@isaacs](https://github.com/isaacs)) 939* [`0fa2bb438`](https://github.com/npm/cli/commit/0fa2bb4386379d6e9d8c95db08662ec0529964f9) 940 `query-string@6.8.1` ([@isaacs](https://github.com/isaacs)) 941* [`b86450929`](https://github.com/npm/cli/commit/b86450929796950a1fe4b1f9b02b1634c812f3bb) 942 `tar-stream@2.1.0` ([@isaacs](https://github.com/isaacs)) 943* [`25db00fe9`](https://github.com/npm/cli/commit/25db00fe953453198adb9e1bd71d1bc2a9f04aaa) 944 `worker-farm@1.7.0` ([@isaacs](https://github.com/isaacs)) 945* [`8dfbe8610`](https://github.com/npm/cli/commit/8dfbe861085dfa8fa56bb504b4a00fba04c34f9d) 946 `readable-stream@3.4.0` ([@isaacs](https://github.com/isaacs)) 947* [`f6164d5dd`](https://github.com/npm/cli/commit/f6164d5ddd072eabdf2237f1694a31efd746eb1d) 948 [isaacs/chownr#21](https://github.com/isaacs/chownr/pull/21) 949 [isaacs/chownr#20](https://github.com/isaacs/chownr/issues/20) 950 [npm.community#7901](https://npm.community/t/7901/) 951 [npm.community#8203](https://npm.community/t/8203) `chownr@1.1.2` This 952 fixes an EISDIR error from cacache on Darwin in Node versions prior to 953 10.6. ([@isaacs](https://github.com/isaacs)) 954 955## v6.10.0 (2019-07-03): 956 957### FEATURES 958 959* [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35) 960 [#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for 961 outdated --json ([@sreeramjayan](https://github.com/sreeramjayan)) 962* [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc) 963 [#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space 964 after hyphen ([@ffflorian](https://github.com/ffflorian)) 965* [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c) 966 [#202](https://github.com/npm/cli/pull/202) enable production flag for 967 npm audit ([@CalebCourier](https://github.com/CalebCourier)) 968* [`d192904d0`](https://github.com/npm/cli/commit/d192904d0) 969 [#178](https://github.com/npm/cli/pull/178) fix: Return a value for 970 `view` when in silent mode 971 ([@stayradiated](https://github.com/stayradiated)) 972* [`39d473adf`](https://github.com/npm/cli/commit/39d473adf) 973 [#185](https://github.com/npm/cli/pull/185) Allow git to follow global 974 tagsign config ([@junderw](https://github.com/junderw)) 975 976### BUGFIXES 977 978* [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b) 979 [#201](https://github.com/npm/cli/pull/163) 980 [npm/npm#17858](https://github.com/npm/npm/issues/17858) 981 [npm/npm#18042](https://github.com/npm/npm/issues/18042) 982 [npm.community#644](https://npm.community/t/644) do not crash when 983 removing nameless packages 984 ([@SteveVanOpstal](https://github.com/SteveVanOpstal) and 985 [@isaacs](https://github.com/isaacs)) 986* [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111) 987 [#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as 988 `node.exe`) in npm's local dir on Windows 989 ([@rgoulais](https://github.com/rgoulais)) 990* [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789) 991 [#180](https://github.com/npm/cli/pull/180) 992 [npm.community#6187](https://npm.community/t/6187) Fix handling of 993 `remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw)) 994 995### TESTING 996 997* [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update 998 to include new v12 LTS ([@isaacs](https://github.com/isaacs)) 999* [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky 1000 debug-logs test ([@isaacs](https://github.com/isaacs)) 1001* [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out 1002 waiting for gpg user input ([@isaacs](https://github.com/isaacs)) 1003* [`d2d301704`](https://github.com/npm/cli/commit/d2d301704) 1004 [#195](https://github.com/npm/cli/pull/195) Add the arm64 check for 1005 legacy-platform-all.js test case. 1006 ([@ossdev07](https://github.com/ossdev07)) 1007* [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests 1008 ([@isaacs](https://github.com/isaacs)) 1009 1010### DOCUMENTATION 1011 1012* [`f5857e263`](https://github.com/npm/cli/commit/f5857e263) 1013 [#192](https://github.com/npm/cli/pull/192) Clarify usage of 1014 bundledDependencies 1015 ([@john-osullivan](https://github.com/john-osullivan)) 1016* [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66) 1017 [#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param 1018 ([@ngraef](https://github.com/ngraef)) 1019 1020### DEPENDENCIES 1021 1022* [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320) 1023 graceful-fs@4.2.0 ([@isaacs](https://github.com/isaacs)) 1024* [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09) 1025 read-package-tree@5.3.1 ([@isaacs](https://github.com/isaacs)) 1026 * [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536) 1027 Use custom caching `realpath` implementation, dramatically reducing 1028 `lstat` calls when reading the package tree 1029 ([@isaacs](https://github.com/isaacs)) 1030* [`39538b460`](https://github.com/npm/cli/commit/39538b460) 1031 write-file-atomic@2.4.3 ([@isaacs](https://github.com/isaacs)) 1032 * [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552) 1033 [#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors 1034 raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage)) 1035* [`042193069`](https://github.com/npm/cli/commit/042193069) pacote@9.5.1 1036 ([@isaacs](https://github.com/isaacs)) 1037 * [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051) 1038 [#172](https://github.com/zkat/pacote/pull/172) limit git retry 1039 times, avoid unlimited retries ([小秦](https://github.com/xqin)) 1040 * [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c) 1041 [#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix 1042 "TypeError: err.code.match is not a function" error 1043 ([@jviotti](https://github.com/jviotti)) 1044* [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) cacache@11.3.3 1045 ([@isaacs](https://github.com/isaacs)) 1046 * [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5) 1047 [#146](https://github.com/zkat/cacache/pull/146) 1048 [npm.community#2395](https://npm.community/t/2395) fix(config): Add 1049 ssri config 'error' option ([@larsgw](https://github.com/larsgw)) 1050 * [`5156561`](https://github.com/npm/cacache/commit/5156561) 1051 fix(write): avoid a `cb never called` situation 1052 ([@zkat](https://github.com/zkat)) 1053 * [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0) 1054 [#166](https://github.com/zkat/cacache/pull/166) 1055 [#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for 1056 `path` property in get.info 1057 ([@hdgarrood](https://github.com/hdgarrood)) 1058* [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) bluebird@3.5.5 1059 ([@isaacs](https://github.com/isaacs)) 1060* [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) tar@4.4.10 1061 ([@isaacs](https://github.com/isaacs)) 1062 * [`c80341a`](https://github.com/npm/node-tar/commit/c80341a) 1063 [#215](https://github.com/npm/node-tar/pull/215) Fix 1064 encoding/decoding of base-256 numbers 1065 ([@justfalter](https://github.com/justfalter)) 1066 * [`77522f0`](https://github.com/npm/node-tar/commit/77522f0) 1067 [#204](https://github.com/npm/node-tar/issues/204) 1068 [#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead 1069 of `lstat` when checking CWD ([@stkb](https://github.com/stkb)) 1070* [`ec6236210`](https://github.com/npm/cli/commit/ec6236210) 1071 npm-packlist@1.4.4 ([@isaacs](https://github.com/isaacs)) 1072 * [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e) 1073 [#30](https://github.com/npm/npm-packlist/issues/30) Sort package 1074 tarball entries by file type for compression benefits 1075 ([@isaacs](https://github.com/isaacs)) 1076 * [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045) 1077 Ignore `.DS_Store` files as well as folders 1078 ([@isaacs](https://github.com/isaacs)) 1079 * [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never 1080 include .git folders in package root. (Note: this prevents the issue 1081 that broke the v6.9.1 release.) 1082 ([@isaacs](https://github.com/isaacs)) 1083* [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream 1084 in node-gyp ([@isaacs](https://github.com/isaacs)) 1085 * Addresses [security advisory 1086 #886](https://www.npmjs.com/advisories/886) 1087* [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee) 1088 [#183](https://github.com/npm/cli/pull/183) licensee@7.0.2 1089 ([@kemitchell](https://github.com/kemitchell)) 1090* [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0) 1091 readable-stream@3.3.0 ([@isaacs](https://github.com/isaacs)) 1092* [`f5e884909`](https://github.com/npm/cli/commit/f5e884909) 1093 npm-registry-mock@1.2.1 ([@isaacs](https://github.com/isaacs)) 1094* [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35) 1095 npm-registry-couchapp@2.7.2 ([@isaacs](https://github.com/isaacs)) 1096 1097## v6.9.2 (2019-06-27): 1098 1099This release is identical to v6.9.1, but we had to publish a new version 1100due to [a .git directory in the release](https://npm.community/t/8454). 1101 1102## v6.9.1 (2019-06-26): 1103 1104### BUGFIXES 1105 1106* [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611) 1107 [#165](https://github.com/npm/cli/pull/165) 1108 Update `knownBroken` version. 1109 ([@ljharb](https://github.com/ljharb)) 1110* [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1) 1111 [npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929) 1112 Fix `outdated` rendering for global dependencies. 1113 ([@zkat](https://github.com/zkat)) 1114* [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc) 1115 [npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259) 1116 Fix OTP for token create and remove. 1117 ([@zkat](https://github.com/zkat)) 1118 1119### DEPENDENCIES 1120 1121* [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc) 1122 `sha@3.0.0` 1123 ([@aeschright](https://github.com/aeschright)) 1124* [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5) 1125 `query-string@6.4.0` 1126 ([@aeschright](https://github.com/aeschright)) 1127* [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64) 1128 `readable-stream@3.2.0` 1129 ([@aeschright](https://github.com/aeschright)) 1130* [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e) 1131 `tacks@1.3.0` 1132 ([@aeschright](https://github.com/aeschright)) 1133* [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8) 1134 `tap@12.6.0` 1135 ([@aeschright](https://github.com/aeschright)) 1136* [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3) 1137 `tar-stream@2.0.1` 1138 ([@aeschright](https://github.com/aeschright)) 1139 1140## v6.9.0 (2019-02-20): 1141 1142### FEATURES 1143 1144* [`2ba3a0f67`](https://github.com/npm/cli/commit/2ba3a0f6721f6d5a16775aebce6012965634fc7c) 1145 [#90](https://github.com/npm/cli/pull/90) 1146 Time traveling installs using the `--before` flag. 1147 ([@zkat](https://github.com/zkat)) 1148* [`b7b54f2d1`](https://github.com/npm/cli/commit/b7b54f2d18e2d8d65ec67c850b21ae9f01c60e7e) 1149 [#3](https://github.com/npm/cli/pull/3) 1150 Add support for package aliases. This allows packages to be installed under a 1151 different directory than the package name listed in `package.json`, and adds a 1152 new dependency type to allow this to be done for registry dependencies. 1153 ([@zkat](https://github.com/zkat)) 1154* [`684bccf06`](https://github.com/npm/cli/commit/684bccf061dfc97bb759121bc0ad635e01c65868) 1155 [#146](https://github.com/npm/cli/pull/146) 1156 Always save `package-lock.json` when using `--package-lock-only`. 1157 ([@aeschright](https://github.com/aeschright)) 1158* [`b8b8afd40`](https://github.com/npm/cli/commit/b8b8afd4048b4ba1181e00ba2ac49ced43936ce0) 1159 [#139](https://github.com/npm/cli/pull/139) 1160 Make empty-string run-scripts run successfully as a no-op. 1161 ([@vlasy](https://github.com/vlasy)) 1162* [`8047b19b1`](https://github.com/npm/cli/commit/8047b19b1b994fd4b4e7b5c91d7cc4e0384bd5e4) 1163 [npm.community#3784](https://npm.community/t/3784) 1164 Match git semver ranges when flattening the tree. 1165 ([@larsgw](https://github.com/larsgw)) 1166* [`e135c2bb3`](https://github.com/npm/cli/commit/e135c2bb360dcf00ecee34a95985afec21ba3655) 1167 [npm.community#1725](https://npm.community/t/1725?u=larsgw) 1168 Re-enable updating local packages. 1169 ([@larsgw](https://github.com/larsgw)) 1170 1171### BUGFIXES 1172 1173* [`cf09fbaed`](https://github.com/npm/cli/commit/cf09fbaed489d908e9b551382cc5f61bdabe99a9) 1174 [#153](https://github.com/npm/cli/pull/153) 1175 Set modified to undefined in `npm view` when `time` is not available. This 1176 fixes a bug where `npm view` would crash on certain third-party registries. 1177 ([@simonua](https://github.com/simonua)) 1178* [`774fc26ee`](https://github.com/npm/cli/commit/774fc26eeb01345c11bd8c97e2c4f328d419d9b5) 1179 [#154](https://github.com/npm/cli/pull/154) 1180 Print out tar version in `install.sh` only when the flag is supported not all 1181 the tar implementations support --version flag. This allows the install script 1182 to work in OpenBSD, for example. 1183 ([@agudulin](https://github.com/agudulin)) 1184* [`863baff11`](https://github.com/npm/cli/commit/863baff11d8c870f1a0d9619bb5133c67d71e407) 1185 [#158](https://github.com/npm/cli/pull/158) 1186 Fix typo in error message for `npm stars`. 1187 ([@phihag](https://github.com/phihag)) 1188* [`a805a95ad`](https://github.com/npm/cli/commit/a805a95ad8832ef5008671f4bd4c11b83e32e0f2) 1189 [npm.community#4227](https://npm.community/t/4227) 1190 Strip version info from pkg on E404. This improves the error messaging format. 1191 ([@larsgw](https://github.com/larsgw)) 1192 1193### DOCS 1194 1195* [`5d7633833`](https://github.com/npm/cli/commit/5d76338338621fd0b3d4f7914a51726d27569ee1) 1196 [#160](https://github.com/npm/cli/pull/160) 1197 Add `npm add` as alias to npm install in docs. 1198 ([@ahasall](https://github.com/ahasall)) 1199* [`489c2211c`](https://github.com/npm/cli/commit/489c2211c96a01d65df50fd57346c785bcc3efe6) 1200 [#162](https://github.com/npm/cli/pull/162) 1201 Fix link to RFC #10 in the changelog. 1202 ([@mansona](https://github.com/mansona)) 1203* [`433020ead`](https://github.com/npm/cli/commit/433020ead5251b562bc3b0f5f55341a5b8cc9023) 1204 [#135](https://github.com/npm/cli/pull/135) 1205 Describe exit codes in npm-audit docs. 1206 ([@emilis-tm](https://github.com/emilis-tm)) 1207 1208### DEPENDENCIES 1209 1210* [`ee6b6746b`](https://github.com/npm/cli/commit/ee6b6746b04f145dfe489af2d26667ac32ba0cef) 1211 [zkat/make-fetch-happen#29](https://github.com/zkat/make-fetch-happen/issues/29) 1212 `agent-base@4.2.1` 1213 ([@TooTallNate](https://github.com/TooTallNate)) 1214* [`2ce23baf5`](https://github.com/npm/cli/commit/2ce23baf53b1ce7d11b8efb80c598ddaf9cef9e7) 1215 `lock-verify@2.1.0`: 1216 Adds support for package aliases 1217 ([@zkat](https://github.com/zkat)) 1218* [`baaedbc6e`](https://github.com/npm/cli/commit/baaedbc6e2fc370d73b35e7721794719115507cc) 1219 `pacote@9.5.0`: 1220 Adds opts.before support 1221 ([@zkat](https://github.com/zkat)) 1222* [`57e771a03`](https://github.com/npm/cli/commit/57e771a032165d1e31e71d0ff7530442139c21a6) 1223 [#164](https://github.com/npm/cli/pull/164) 1224 `licensee@6.1.0` 1225 ([@kemitchell](https://github.com/kemitchell)) 1226* [`2b78288d4`](https://github.com/npm/cli/commit/2b78288d4accd10c1b7cc6c36bc28045f5634d91) 1227 add core to default inclusion tests in pack 1228 ([@Kat Marchán](https://github.com/Kat Marchán)) 1229* [`9b8b6513f`](https://github.com/npm/cli/commit/9b8b6513fbce92764b32a067322984985ff683fe) 1230 [npm.community#5382](https://npm.community/t/npm-pack-leaving-out-files-6-8-0-only/5382) 1231 `npm-packlist@1.4.1`: Fixes bug where `core/` directories were being suddenly excluded. 1232 ([@zkat](https://github.com/zkat)) 1233 1234## v6.8.0 (2019-02-07): 1235 1236This release includes an implementation of [RFC #10](https://github.com/npm/rfcs/blob/latest/implemented/0010-monorepo-subdirectory-declaration.md), documenting an optional field that can be used to specify 1237the directory path for a package within a monorepo. 1238 1239### NEW FEATURES 1240 1241* [`3663cdef2`](https://github.com/npm/cli/commit/3663cdef205fa9ba2c2830e5ef7ceeb31c30298c) 1242 [#140](https://github.com/npm/cli/pull/140) 1243 Update package.json docs to include repository.directory details. 1244 ([@greysteil](https://github.com/greysteil)) 1245 1246### BUGFIXES 1247 1248* [`550bf703a`](https://github.com/npm/cli/commit/550bf703ae3e31ba6a300658ae95b6937f67b68f) 1249 Add @types to ignore list to fix git clean -fd. 1250 ([@zkat](https://github.com/zkat)) 1251* [`cdb059293`](https://github.com/npm/cli/commit/cdb0592939d6256c80f7ec5a2b6251131a512a2a) 1252 [#144](https://github.com/npm/cli/pull/144) 1253 Fix common.npm callback arguments. 1254 ([@larsgw](https://github.com/larsgw)) 1255* [`25573e9b9`](https://github.com/npm/cli/commit/25573e9b9d5d26261c68d453f06db5b3b1cd6789) 1256 [npm.community#4770](https://npm.community/t/https://npm.community/t/4770) 1257 Show installed but unmet peer deps. 1258 ([@larsgw](https://github.com/larsgw)) 1259* [`ce2c4bd1a`](https://github.com/npm/cli/commit/ce2c4bd1a2ce7ac1727a4ca9a350b743a2e27b2a) 1260 [#149](https://github.com/npm/cli/pull/149) 1261 Use figgy-config to make sure extra opts are there. 1262 ([@zkat](https://github.com/zkat)) 1263* [`3c22d1a35`](https://github.com/npm/cli/commit/3c22d1a35878f73c0af8ea5968b962a85a1a9b84) 1264 [npm.community#5101](https://npm.community/t/npm-6-6-0-breaks-access-to-ls-collaborators/5101) 1265 Fix `ls-collaborators` access error for non-scoped case. 1266 ([@zkat](https://github.com/zkat)) 1267* [`d5137091d`](https://github.com/npm/cli/commit/d5137091dd695a2980f7ade85fdc56b2421ff677) 1268 [npm.community#754](https://npm.community/t/npm-install-for-package-with-local-dependency-fails/754) 1269 Fix issue with sub-folder local references. 1270 ([@iarna](https://github.com/iarna)) 1271 ([@jhecking](https://github.com/jhecking)) 1272 1273### DEPENDENCY BUMPS 1274 1275* [`d72141080`](https://github.com/npm/cli/commit/d72141080ec8fcf35bcc5650245efbe649de053e) 1276 `npm-registry-couchapp@2.7.1` 1277 ([@zkat](https://github.com/zkat)) 1278* [`671cad1b1`](https://github.com/npm/cli/commit/671cad1b18239d540da246d6f78de45d9f784396) 1279 `npm-registry-fetch@3.9.0`: 1280 Make sure publishing with legacy username:password `_auth` works again. 1281 ([@zkat](https://github.com/zkat)) 1282* [`95ca1aef4`](https://github.com/npm/cli/commit/95ca1aef4077c8e68d9f4dce37f6ba49b591c4ca) 1283 `pacote@9.4.1` 1284 ([@aeschright](https://github.com/aeschright)) 1285* [`322fef403`](https://github.com/npm/cli/commit/322fef40376e71cd100159dc914e7ca89faae327) 1286 `normalize-package-data@2.5.0` 1287 ([@aeschright](https://github.com/aeschright)) 1288* [`32d34c0da`](https://github.com/npm/cli/commit/32d34c0da4f393a74697297667eb9226155ecc6b) 1289 `npm-packlist@1.3.0` 1290 ([@aeschright](https://github.com/aeschright)) 1291* [`338571cf0`](https://github.com/npm/cli/commit/338571cf0bd3a1e2ea800464d57581932ff0fb11) 1292 `read-package-tree@5.2.2` 1293 ([@zkat](https://github.com/zkat)) 1294 1295### MISC 1296 1297* [`89b23a5f7`](https://github.com/npm/cli/commit/89b23a5f7b0ccdcdda1d7d4d3eafb6903156d186) 1298 [#120](https://github.com/npm/cli/pull/120) 1299 Use `const` in lib/fetch-package-metadata.md. 1300 ([@watilde](https://github.com/watilde)) 1301* [`4970d553c`](https://github.com/npm/cli/commit/4970d553c0ea66128931d118469fd31c87cc7986) 1302 [#126](https://github.com/npm/cli/pull/126) 1303 Replace ronn with marked-man in `.npmignore`. 1304 ([@watilde](https://github.com/watilde)) 1305* [`d9b6090dc`](https://github.com/npm/cli/commit/d9b6090dc26cd0fded18b4f80248cff3e51bb185) 1306 [#138](https://github.com/npm/cli/pull/138) 1307 Reduce work to test if executable ends with a 'g'. 1308 ([@elidoran](https://github.com/elidoran)) 1309 ([@larsgw](https://github.com/larsgw)) 1310 1311## v6.7.0 (2019-01-23): 1312 1313Hey y'all! This is a quick hotfix release that includes some important fixes to 1314`npm@6.6.0` related to the large rewrite/refactor. We're tagging it as a feature 1315release because the changes involve some minor new features, and semver is 1316semver, but there's nothing major here. 1317 1318### NEW FEATURES 1319 1320* [`50463f58b`](https://github.com/npm/cli/commit/50463f58b4b70180a85d6d8c10fcf50d8970ef5e) 1321 Improve usage errors to `npm org` commands and add optional filtering to `npm 1322 org ls` subcommand. 1323 ([@zkat](https://github.com/zkat)) 1324 1325### BUGFIXES 1326 1327* [`4027070b0`](https://github.com/npm/cli/commit/4027070b03be3bdae2515f2291de89b91f901df9) 1328 Fix default usage printout for `npm org` so you actually see how it's supposed 1329 to be used. 1330 ([@zkat](https://github.com/zkat)) 1331* [`cfea6ea5b`](https://github.com/npm/cli/commit/cfea6ea5b67ec5e4ec57e3a9cb8c82d018cb5476) 1332 fix default usage message for npm hook 1333 ([@zkat](https://github.com/zkat)) 1334 1335### DOCS 1336 1337* [`e959e1421`](https://github.com/npm/cli/commit/e959e14217d751ddb295565fd75cc81de1ee0d5b) 1338 Add manpage for `npm org` command. 1339 ([@zkat](https://github.com/zkat)) 1340 1341### DEPENDENCY BUMPS 1342 1343* [`8543fc357`](https://github.com/npm/cli/commit/8543fc3576f64e91f7946d4c56a5ffb045b55156) 1344 `pacote@9.4.0`: Fall back to "fullfat" packuments on ETARGET errors. This will 1345 make it so that, when a package is published but the corgi follower hasn't 1346 caught up, users can still install a freshly-published package. 1347 ([@zkat](https://github.com/zkat)) 1348* [`75475043b`](https://github.com/npm/cli/commit/75475043b03a254b2e7db2c04c3f0baea31d8dc5) 1349 [npm.community#4752](https://npm.community/t/npm-6-6-0-broke-authentication-with-npm-registry-couchapp/4752) 1350 `libnpmpublish@1.1.1`: Fixes auth error for username/password legacy authentication. 1351 ([@sreeramjayan](https://github.com/sreeramjayan)) 1352* [`0af8c00ac`](https://github.com/npm/cli/commit/0af8c00acb01849362ffca25b567cc62447c7175) 1353 [npm.community#4746](https://npm.community/t/npm-6-6-0-release-breaking-docker-npm-ci-commands/4746) 1354 `libcipm@3.0.3`: Fixes issue with "cannot run in wd" errors for run-scripts. 1355 ([@zkat](https://github.com/zkat)) 1356* [`5a7962e46`](https://github.com/npm/cli/commit/5a7962e46f582c6bd91784b0ddc941ed45e9f802) 1357 `write-file-atomic@2.4.2`: 1358 Fixes issues with leaking `signal-exit` instances and file descriptors. 1359 ([@iarna](https://github.com/iarna)) 1360 1361## v6.6.0 (2019-01-17): 1362 1363### REFACTORING OUT npm-REGISTRY-CLIENT 1364 1365Today is an auspicious day! This release marks the end of a massive internal 1366refactor to npm that means we finally got rid of the legacy 1367[`npm-registry-client`](https://npm.im/npm-registry-client) in favor of the 1368shiny, new, `window.fetch`-like 1369[`npm-registry-fetch`](https://npm.im/npm-registry-fetch). 1370 1371Now, the installer had already done most of this work with the release of 1372`npm@5`, but it turns out _every other command_ still used the legacy client. 1373This release updates all of those commands to use the new client, and while 1374we're at it, adds a few extra goodies: 1375 1376* All OTP-requiring commands will now **prompt**. `--otp` is no longer required for `dist-tag`, `access`, et al. 1377* We're starting to integrate a new config system which will eventually get extracted into a standalone package. 1378* We now use [`libnpm`](https://npm.im/libnpm) for the API functionality of a lot of our commands! That means you can install a library if you want to write your own tooling around them. 1379* There's now an `npm org` command for managing users in your org. 1380* [`pacote`](https://npm.im/pacote) now consumes npm-style configurations, instead of its own naming for various config vars. This will make it easier to load npm configs using `libnpm.config` and hand them directly to `pacote`. 1381 1382There's too many commits to list all of them here, so check out the PR if you're 1383curious about details: 1384 1385* [`c5af34c05`](https://github.com/npm/cli/commit/c5af34c05fd569aecd11f18d6d0ddeac3970b253) 1386 [npm-registry-client@REMOVED](https://www.youtube.com/watch\?v\=kPIdRJlzERo) 1387 ([@zkat](https://github.com/zkat)) 1388* [`4cca9cb90`](https://github.com/npm/cli/commit/4cca9cb9042c0eeb743377e8f1ae1c07733df43f) 1389 [`ad67461dc`](https://github.com/npm/cli/commit/ad67461dc3a73d5ae6569fdbee44c67e1daf86e7) 1390 [`77625f9e2`](https://github.com/npm/cli/commit/77625f9e20d4285b7726b3bf3ebc10cb21c638f0) 1391 [`6e922aefb`](https://github.com/npm/cli/commit/6e922aefbb4634bbd77ed3b143e0765d63afc7f9) 1392 [`584613ea8`](https://github.com/npm/cli/commit/584613ea8ff94b927db4957e5647504b30ca2b1f) 1393 [`64de4ebf0`](https://github.com/npm/cli/commit/64de4ebf019b217179039124c6621e74651e4d27) 1394 [`6cd87d1a9`](https://github.com/npm/cli/commit/6cd87d1a9bb90e795f9891ea4db384435f4a8930) 1395 [`2786834c0`](https://github.com/npm/cli/commit/2786834c0257b8bb1bbb115f1ce7060abaab2e17) 1396 [`514558e09`](https://github.com/npm/cli/commit/514558e094460fd0284a759c13965b685133b3fe) 1397 [`dec07ebe3`](https://github.com/npm/cli/commit/dec07ebe3312245f6421c6e523660be4973ae8c2) 1398 [`084741913`](https://github.com/npm/cli/commit/084741913c4fdb396e589abf3440b4be3aa0b67e) 1399 [`45aff0e02`](https://github.com/npm/cli/commit/45aff0e02251785a85e56eafacf9efaeac6f92ae) 1400 [`846ddcc44`](https://github.com/npm/cli/commit/846ddcc44538f2d9a51ac79405010dfe97fdcdeb) 1401 [`8971ba1b9`](https://github.com/npm/cli/commit/8971ba1b953d4f05ff5094f1822b91526282edd8) 1402 [`99156e081`](https://github.com/npm/cli/commit/99156e081a07516d6c970685bc3d858f89dc4f9c) 1403 [`ab2155306`](https://github.com/npm/cli/commit/ab215530674d7f6123c9572d0ad4ca9e9b5fb184) 1404 [`b37a66542`](https://github.com/npm/cli/commit/b37a66542ca2879069b2acd338b1904de71b7f40) 1405 [`d2af0777a`](https://github.com/npm/cli/commit/d2af0777ac179ff5009dbbf0354a4a84f151b60f) 1406 [`e0b4c6880`](https://github.com/npm/cli/commit/e0b4c6880504fa2e8491c2fbd098efcb2e496849) 1407 [`ff72350b4`](https://github.com/npm/cli/commit/ff72350b4c56d65e4a92671d86a33080bf3c2ea5) 1408 [`6ed943303`](https://github.com/npm/cli/commit/6ed943303ce7a267ddb26aa25caa035f832895dd) 1409 [`90a069e7d`](https://github.com/npm/cli/commit/90a069e7d4646682211f4cabe289c306ee1d5397) 1410 [`b24ed5fdc`](https://github.com/npm/cli/commit/b24ed5fdc3a4395628465ae5273bad54eea274c8) 1411 [`ec9fcc14f`](https://github.com/npm/cli/commit/ec9fcc14f4e0e2f3967e2fd6ad8b8433076393cb) 1412 [`8a56fa39e`](https://github.com/npm/cli/commit/8a56fa39e61136da45565447fe201a57f04ad4cd) 1413 [`41d19e18f`](https://github.com/npm/cli/commit/41d19e18f769c6f0acfdffbdb01d12bf332908ce) 1414 [`125ff9551`](https://github.com/npm/cli/commit/125ff9551595dda9dab2edaef10f4c73ae8e1433) 1415 [`1c3b226ff`](https://github.com/npm/cli/commit/1c3b226ff37159c426e855e83c8f6c361603901d) 1416 [`3c0a7b06b`](https://github.com/npm/cli/commit/3c0a7b06b6473fe068fc8ae8466c07a177975b87) 1417 [`08fcb3f0f`](https://github.com/npm/cli/commit/08fcb3f0f26e025702b35253ed70a527ab69977f) 1418 [`c8135d97a`](https://github.com/npm/cli/commit/c8135d97a424b38363dc4530c45e4583471e9849) 1419 [`ae936f22c`](https://github.com/npm/cli/commit/ae936f22ce80614287f2769e9aaa9a155f03cc15) 1420 [#2](https://github.com/npm/cli/pull/2) 1421 Move rest of commands to `npm-registry-fetch` and use [`figgy-pudding`](https://npm.im/figgy-pudding) for configs. 1422 ([@zkat](https://github.com/zkat)) 1423 1424### NEW FEATURES 1425 1426* [`02c837e01`](https://github.com/npm/cli/commit/02c837e01a71a26f37cbd5a09be89df8a9ce01da) 1427 [#106](https://github.com/npm/cli/pull/106) 1428 Make `npm dist-tags` the same as `npm dist-tag ls`. 1429 ([@isaacs](https://github.com/isaacs)) 1430* [`1065a7809`](https://github.com/npm/cli/commit/1065a7809161fd4dc23e96b642019fc842fdacf2) 1431 [#65](https://github.com/npm/cli/pull/65) 1432 Add support for `IBM i`. 1433 ([@dmabupt](https://github.com/dmabupt)) 1434* [`a22e6f5fc`](https://github.com/npm/cli/commit/a22e6f5fc3e91350d3c64dcc88eabbe0efbca759) 1435 [#131](https://github.com/npm/cli/pull/131) 1436 Update profile to support new npm-profile API. 1437 ([@zkat](https://github.com/zkat)) 1438 1439### BUGFIXES 1440 1441* [`890a74458`](https://github.com/npm/cli/commit/890a74458dd4a55e2d85f3eba9dbf125affa4206) 1442 [npm.community#3278](https://npm.community/t/3278) 1443 Fix support for passing git binary path config with `--git`. 1444 ([@larsgw](https://github.com/larsgw)) 1445* [`90e55a143`](https://github.com/npm/cli/commit/90e55a143ed1de8678d65c17bc3c2b103a15ddac) 1446 [npm.community#2713](https://npm.community/t/npx-envinfo-preset-jest-fails-on-windows-with-a-stack-trace/2713) 1447 Check for `npm.config`'s existence in `error-handler.js` to prevent weird 1448 errors when failures happen before config object is loaded. 1449 ([@BeniCheni](https://github.com/BeniCheni)) 1450* [`134207174`](https://github.com/npm/cli/commit/134207174652e1eb6d7b0f44fd9858a0b6a0cd6c) 1451 [npm.community#2569](https://npm.community/t/2569) 1452 Fix checking for optional dependencies. 1453 ([@larsgw](https://github.com/larsgw)) 1454* [`7a2f6b05d`](https://github.com/npm/cli/commit/7a2f6b05d27f3bcf47a48230db62e86afa41c9d3) 1455 [npm.community#4172](https://npm.community/t/4172) 1456 Remove tink experiments. 1457 ([@larsgw](https://github.com/larsgw)) 1458* [`c5b6056b6`](https://github.com/npm/cli/commit/c5b6056b6b35eefb81ae5fb00a5c7681c5318c22) 1459 [#123](https://github.com/npm/cli/pull/123) 1460 Handle git branch references correctly. 1461 ([@johanneswuerbach](https://github.com/johanneswuerbach)) 1462* [`f58b43ef2`](https://github.com/npm/cli/commit/f58b43ef2c5e3dea2094340a0cf264b2d11a5da4) 1463 [npm.community#3983](https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983) 1464 Report any errors above 400 as potentially not supporting audit. 1465 ([@zkat](https://github.com/zkat)) 1466* [`a5c9e6f35`](https://github.com/npm/cli/commit/a5c9e6f35a591a6e2d4b6ace5c01bc03f2b75fdc) 1467 [#124](https://github.com/npm/cli/pull/124) 1468 Set default homepage to an empty string. 1469 ([@anchnk](https://github.com/anchnk)) 1470* [`5d076351d`](https://github.com/npm/cli/commit/5d076351d7ec1d3585942a9289548166a7fbbd4c) 1471 [npm.community#4054](https://npm.community/t/4054) 1472 Fix npm-prefix description. 1473 ([@larsgw](https://github.com/larsgw)) 1474 1475### DOCS 1476 1477* [`31a7274b7`](https://github.com/npm/cli/commit/31a7274b70de18b24e7bee51daa22cc7cbb6141c) 1478 [#71](https://github.com/npm/cli/pull/71) 1479 Fix typo in npm-token documentation. 1480 ([@GeorgeTaveras1231](https://github.com/GeorgeTaveras1231)) 1481* [`2401b7592`](https://github.com/npm/cli/commit/2401b7592c6ee114e6db7077ebf8c072b7bfe427) 1482 Correct docs for fake-registry interface. 1483 ([@iarna](https://github.com/iarna)) 1484 1485### DEPENDENCIES 1486 1487* [`9cefcdc1d`](https://github.com/npm/cli/commit/9cefcdc1d2289b56f9164d14d7e499e115cfeaee) 1488 `npm-registry-fetch@3.8.0` 1489 ([@zkat](https://github.com/zkat)) 1490* [`1c769c9b3`](https://github.com/npm/cli/commit/1c769c9b3e431d324c1a5b6dd10e1fddb5cb88c7) 1491 `pacote@9.1.0` 1492 ([@zkat](https://github.com/zkat)) 1493* [`f3bc5539b`](https://github.com/npm/cli/commit/f3bc5539b30446500abcc3873781b2c717f8e22c) 1494 `figgy-pudding@3.5.1` 1495 ([@zkat](https://github.com/zkat)) 1496* [`bf7199d3c`](https://github.com/npm/cli/commit/bf7199d3cbf50545da1ebd30d28f0a6ed5444a00) 1497 `npm-profile@4.0.1` 1498 ([@zkat](https://github.com/zkat)) 1499* [`118c50496`](https://github.com/npm/cli/commit/118c50496c01231cab3821ae623be6df89cb0a32) 1500 `semver@5.5.1` 1501 ([@isaacs](https://github.com/isaacs)) 1502* [`eab4df925`](https://github.com/npm/cli/commit/eab4df9250e9169c694b3f6c287d2932bf5e08fb) 1503 `libcipm@3.0.2` 1504 ([@zkat](https://github.com/zkat)) 1505* [`b86e51573`](https://github.com/npm/cli/commit/b86e515734faf433dc6c457c36c1de52795aa870) 1506 `libnpm@1.4.0` 1507 ([@zkat](https://github.com/zkat)) 1508* [`56fffbff2`](https://github.com/npm/cli/commit/56fffbff27fe2fae8bef27d946755789ef0d89bd) 1509 `get-stream@4.1.0` 1510 ([@zkat](https://github.com/zkat)) 1511* [`df972e948`](https://github.com/npm/cli/commit/df972e94868050b5aa42ac18b527fd929e1de9e4) 1512 npm-profile@REMOVED 1513 ([@zkat](https://github.com/zkat)) 1514* [`32c73bf0e`](https://github.com/npm/cli/commit/32c73bf0e3f0441d0c7c940292235d4b93aa87e2) 1515 `libnpm@2.0.1` 1516 ([@zkat](https://github.com/zkat)) 1517* [`569491b80`](https://github.com/npm/cli/commit/569491b8042f939dc13986b6adb2a0a260f95b63) 1518 `licensee@5.0.0` 1519 ([@zkat](https://github.com/zkat)) 1520* [`a3ba0ccf1`](https://github.com/npm/cli/commit/a3ba0ccf1fa86aec56b1ad49883abf28c1f56b3c) 1521 move rimraf to prod deps 1522 ([@zkat](https://github.com/zkat)) 1523* [`f63a0d6cf`](https://github.com/npm/cli/commit/f63a0d6cf0b7db3dcc80e72e1383c3df723c8119) 1524 `spdx-license-ids@3.0.3`: 1525 Ref: https://github.com/npm/cli/pull/121 1526 ([@zkat](https://github.com/zkat)) 1527* [`f350e714f`](https://github.com/npm/cli/commit/f350e714f66a77f71a7ebe17daeea2ea98179a1a) 1528 `aproba@2.0.0` 1529 ([@aeschright](https://github.com/aeschright)) 1530* [`a67e4d8b2`](https://github.com/npm/cli/commit/a67e4d8b214e58ede037c3854961acb33fd889da) 1531 `byte-size@5.0.1` 1532 ([@aeschright](https://github.com/aeschright)) 1533* [`8bea4efa3`](https://github.com/npm/cli/commit/8bea4efa34857c4e547904b3630dd442def241de) 1534 `cacache@11.3.2` 1535 ([@aeschright](https://github.com/aeschright)) 1536* [`9d4776836`](https://github.com/npm/cli/commit/9d4776836a4eaa4b19701b4e4f00cd64578bf078) 1537 `chownr@1.1.1` 1538 ([@aeschright](https://github.com/aeschright)) 1539* [`70da139e9`](https://github.com/npm/cli/commit/70da139e97ed1660c216e2d9b3f9cfb986bfd4a4) 1540 `ci-info@2.0.0` 1541 ([@aeschright](https://github.com/aeschright)) 1542* [`bcdeddcc3`](https://github.com/npm/cli/commit/bcdeddcc3d4dc242f42404223dafe4afdc753b32) 1543 `cli-table3@0.5.1` 1544 ([@aeschright](https://github.com/aeschright)) 1545* [`63aab82c7`](https://github.com/npm/cli/commit/63aab82c7bfca4f16987cf4156ddebf8d150747c) 1546 `is-cidr@3.0.0` 1547 ([@aeschright](https://github.com/aeschright)) 1548* [`d522bd90c`](https://github.com/npm/cli/commit/d522bd90c3b0cb08518f249ae5b90bd609fff165) 1549 `JSONStream@1.3.5` 1550 ([@aeschright](https://github.com/aeschright)) 1551* [`2a59bfc79`](https://github.com/npm/cli/commit/2a59bfc7989bd5575d8cbba912977c6d1ba92567) 1552 `libnpmhook@5.0.2` 1553 ([@aeschright](https://github.com/aeschright)) 1554* [`66d60e394`](https://github.com/npm/cli/commit/66d60e394e5a96330f90e230505758f19a3643ac) 1555 `marked@0.6.0` 1556 ([@aeschright](https://github.com/aeschright)) 1557* [`8213def9a`](https://github.com/npm/cli/commit/8213def9aa9b6e702887e4f2ed7654943e1e4154) 1558 `npm-packlist@1.2.0` 1559 ([@aeschright](https://github.com/aeschright)) 1560* [`e4ffc6a2b`](https://github.com/npm/cli/commit/e4ffc6a2bfb8d0b7047cb6692030484760fc8c91) 1561 `unique-filename@1.1.1` 1562 ([@aeschright](https://github.com/aeschright)) 1563* [`09a5c2fab`](https://github.com/npm/cli/commit/09a5c2fabe0d1c00ec8c99f328f6d28a3495eb0b) 1564 `semver@5.6.0` 1565 ([@aeschright](https://github.com/aeschright)) 1566* [`740e79e17`](https://github.com/npm/cli/commit/740e79e17a78247f73349525043c9388ce94459a) 1567 `rimraf@2.6.3` 1568 ([@aeschright](https://github.com/aeschright)) 1569* [`455476c8d`](https://github.com/npm/cli/commit/455476c8d148ca83a4e030e96e93dcf1c7f0ff5f) 1570 `require-inject@1.4.4` 1571 ([@aeschright](https://github.com/aeschright)) 1572* [`3f40251c5`](https://github.com/npm/cli/commit/3f40251c5868feaacbcdbcb1360877ce76998f5e) 1573 `npm-pick-manifest@2.2.3` 1574 ([@aeschright](https://github.com/aeschright)) 1575* [`4ffa8a8e9`](https://github.com/npm/cli/commit/4ffa8a8e9e80e5562898dd76fe5a49f5694f38c8) 1576 `query-string@6.2.0` 1577 ([@aeschright](https://github.com/aeschright)) 1578* [`a0a0ca9ec`](https://github.com/npm/cli/commit/a0a0ca9ec2a962183d420fa751f4139969760f18) 1579 `pacote@9.3.0` 1580 ([@aeschright](https://github.com/aeschright)) 1581* [`5777ea8ad`](https://github.com/npm/cli/commit/5777ea8ad2058be3166a6dad2d31d2d393c9f778) 1582 `readable-stream@3.1.1` 1583 ([@aeschright](https://github.com/aeschright)) 1584* [`887e94386`](https://github.com/npm/cli/commit/887e94386f42cb59a5628e7762b3662d084b23c8) 1585 `lru-cache@4.1.5` 1586 ([@aeschright](https://github.com/aeschright)) 1587* [`41f15524c`](https://github.com/npm/cli/commit/41f15524c58c59d206c4b1d25ae9e0f22745213b) 1588 Updating semver docs. 1589 ([@aeschright](https://github.com/aeschright)) 1590* [`fb3bbb72d`](https://github.com/npm/cli/commit/fb3bbb72d448ac37a465b31233b21381917422f3) 1591 `npm-audit-report@1.3.2`: 1592 ([@melkikh](https://github.com/melkikh)) 1593 1594### TESTING 1595 1596* [`f1edffba9`](https://github.com/npm/cli/commit/f1edffba90ebd96cf88675d2e18ebc48954ba50e) 1597 Modernize maketest script. 1598 ([@iarna](https://github.com/iarna)) 1599* [`ae263473d`](https://github.com/npm/cli/commit/ae263473d92a896b482830d4019a04b5dbd1e9d7) 1600 maketest: Use promise based example common.npm call. 1601 ([@iarna](https://github.com/iarna)) 1602* [`d9970da5e`](https://github.com/npm/cli/commit/d9970da5ee97a354eab01cbf16f9101693a15d2d) 1603 maketest: Use newEnv for env production. 1604 ([@iarna](https://github.com/iarna)) 1605 1606### MISCELLANEOUS 1607 1608* [`c665f35aa`](https://github.com/npm/cli/commit/c665f35aacdb8afdbe35f3dd7ccb62f55ff6b896) 1609 [#119](https://github.com/npm/cli/pull/119) 1610 Replace var with const/let in lib/repo.js. 1611 ([@watilde](https://github.com/watilde)) 1612* [`46639ba9f`](https://github.com/npm/cli/commit/46639ba9f04ea729502f1af28b02eb67fb6dcb66) 1613 Update package-lock.json for https tarball URLs 1614 ([@aeschright](https://github.com/aeschright)) 1615 1616## v6.5.0 (2018-11-28): 1617 1618### NEW FEATURES 1619 1620* [`fc1a8d185`](https://github.com/npm/cli/commit/fc1a8d185fc678cdf3784d9df9eef9094e0b2dec) 1621 Backronym `npm ci` to `npm clean-install`. 1622 ([@zkat](https://github.com/zkat)) 1623* [`4be51a9cc`](https://github.com/npm/cli/commit/4be51a9cc65635bb26fa4ce62233f26e0104bc20) 1624 [#81](https://github.com/npm/cli/pull/81) 1625 Adds 'Homepage' to outdated --long output. 1626 ([@jbottigliero](https://github.com/jbottigliero)) 1627 1628### BUGFIXES 1629 1630* [`89652cb9b`](https://github.com/npm/cli/commit/89652cb9b810f929f5586fc90cc6794d076603fb) 1631 [npm.community#1661](https://npm.community/t/1661) 1632 Fix sign-git-commit options. They were previously totally wrong. 1633 ([@zkat](https://github.com/zkat)) 1634* [`414f2d1a1`](https://github.com/npm/cli/commit/414f2d1a1bdffc02ed31ebb48a43216f284c21d4) 1635 [npm.community#1742](https://npm.community/t/npm-audit-making-non-rfc-compliant-requests-to-server-resulting-in-400-bad-request-pr-with-fix/1742) 1636 Set lowercase headers for npm audit requests. 1637 ([@maartenba](https://github.com/maartenba)) 1638* [`a34246baf`](https://github.com/npm/cli/commit/a34246bafe73218dc9e3090df9ee800451db2c7d) 1639 [#75](https://github.com/npm/cli/pull/75) 1640 Fix `npm edit` handling of scoped packages. 1641 ([@larsgw](https://github.com/larsgw)) 1642* [`d3e8a7c72`](https://github.com/npm/cli/commit/d3e8a7c7240dd25379a5bcad324a367c58733c73) 1643 [npm.community#2303](https://npm.community/t/npm-ci-logs-success-to-stderr/2303) 1644 Make summary output for `npm ci` go to `stdout`, not `stderr`. 1645 ([@alopezsanchez](https://github.com/alopezsanchez)) 1646* [`71d8fb4a9`](https://github.com/npm/cli/commit/71d8fb4a94d65e1855f6d0c5f2ad2b7c3202e3c4) 1647 [npm.community#1377](https://npm.community/t/unhelpful-error-message-when-publishing-without-logging-in-error-eperm-operation-not-permitted-unlink/1377/3) 1648 Close the file descriptor during publish if exiting upload via an error. This 1649 will prevent strange error messages when the upload fails and make sure 1650 cleanup happens correctly. 1651 ([@macdja38](https://github.com/macdja38)) 1652 1653### DOCS UPDATES 1654 1655* [`b1a8729c8`](https://github.com/npm/cli/commit/b1a8729c80175243fbbeecd164e9ddd378a09a50) 1656 [#60](https://github.com/npm/cli/pull/60) 1657 Mention --otp flag when prompting for OTP. 1658 ([@bakkot](https://github.com/bakkot)) 1659* [`bcae4ea81`](https://github.com/npm/cli/commit/bcae4ea8173e489a76cc226bbd30dd9eabe21ec6) 1660 [#64](https://github.com/npm/cli/pull/64) 1661 Clarify that git dependencies use the default branch, not just `master`. 1662 ([@zckrs](https://github.com/zckrs)) 1663* [`15da82690`](https://github.com/npm/cli/commit/15da8269032bf509ade3252978e934f2a61d4499) 1664 [#72](https://github.com/npm/cli/pull/72) 1665 `bash_completion.d` dir is sometimes found in `/etc` not `/usr/local`. 1666 ([@RobertKielty](https://github.com/RobertKielty)) 1667* [`8a6ecc793`](https://github.com/npm/cli/commit/8a6ecc7936dae2f51638397ff5a1d35cccda5495) 1668 [#74](https://github.com/npm/cli/pull/74) 1669 Update OTP documentation for `dist-tag add` to clarify `--otp` is needed right 1670 now. 1671 ([@scotttrinh](https://github.com/scotttrinh)) 1672* [`dcc03ec85`](https://github.com/npm/cli/commit/dcc03ec858bddd7aa2173b5a86b55c1c2385a2a3) 1673 [#82](https://github.com/npm/cli/pull/82) 1674 Note that `prepare` runs when installing git dependencies. 1675 ([@seishun](https://github.com/seishun)) 1676* [`a91a470b7`](https://github.com/npm/cli/commit/a91a470b71e08ccf6a75d4fb8c9937789fa8d067) 1677 [#83](https://github.com/npm/cli/pull/83) 1678 Specify that --dry-run isn't available in older versions of npm publish. 1679 ([@kjin](https://github.com/kjin)) 1680* [`1b2fabcce`](https://github.com/npm/cli/commit/1b2fabccede37242233755961434c52536224de5) 1681 [#96](https://github.com/npm/cli/pull/96) 1682 Fix inline code tag issue in docs. 1683 ([@midare](https://github.com/midare)) 1684* [`6cc70cc19`](https://github.com/npm/cli/commit/6cc70cc1977e58a3e1ea48e660ffc6b46b390e59) 1685 [#68](https://github.com/npm/cli/pull/68) 1686 Add semver link and a note on empty string format to `deprecate` doc. 1687 ([@neverett](https://github.com/neverett)) 1688* [`61dbbb7c3`](https://github.com/npm/cli/commit/61dbbb7c3474834031bce88c423850047e8131dc) 1689 Fix semver docs after version update. 1690 ([@zkat](https://github.com/zkat)) 1691* [`4acd45a3d`](https://github.com/npm/cli/commit/4acd45a3d0ce92f9999446226fe7dfb89a90ba2e) 1692 [#78](https://github.com/npm/cli/pull/78) 1693 Correct spelling across various docs. 1694 ([@hugovk](https://github.com/hugovk)) 1695 1696### DEPENDENCIES 1697 1698* [`4f761283e`](https://github.com/npm/cli/commit/4f761283e8896d0ceb5934779005646463a030e8) 1699 `figgy-pudding@3.5.1` 1700 ([@zkat](https://github.com/zkat)) 1701* [`3706db0bc`](https://github.com/npm/cli/commit/3706db0bcbc306d167bb902362e7f6962f2fe1a1) 1702 [npm.community#1764](https://npm.community/t/crash-invalid-config-key-requested-error/1764) 1703 `ssri@6.0.1` 1704 ([@zkat](https://github.com/zkat)) 1705* [`83c2b117d`](https://github.com/npm/cli/commit/83c2b117d0b760d0ea8d667e5e4bdfa6a7a7a8f6) 1706 `bluebird@3.5.2` 1707 ([@petkaantonov](https://github.com/petkaantonov)) 1708* [`2702f46bd`](https://github.com/npm/cli/commit/2702f46bd7284fb303ca2119d23c52536811d705) 1709 `ci-info@1.5.1` 1710 ([@watson](https://github.com/watson)) 1711* [`4db6c3898`](https://github.com/npm/cli/commit/4db6c3898b07100e3a324e4aae50c2fab4b93a04) 1712 `config-chain@1.1.1`:2 1713 ([@dawsbot](https://github.com/dawbot)) 1714* [`70bee4f69`](https://github.com/npm/cli/commit/70bee4f69bb4ce4e18c48582fe2b48d8b4aba566) 1715 `glob@7.1.3` 1716 ([@isaacs](https://github.com/isaacs)) 1717* [`e469fd6be`](https://github.com/npm/cli/commit/e469fd6be95333dcaa7cf377ca3620994ca8d0de) 1718 `opener@1.5.1`: 1719 Fix browser opening under Windows Subsystem for Linux (WSL). 1720 ([@thijsputman](https://github.com/thijsputman)) 1721* [`03840dced`](https://github.com/npm/cli/commit/03840dced865abdca6e6449ea030962e5b19db0c) 1722 `semver@5.5.1` 1723 ([@iarna](https://github.com/iarna)) 1724* [`161dc0b41`](https://github.com/npm/cli/commit/161dc0b4177e76306a0e3b8660b3b496cc3db83b) 1725 `bluebird@3.5.3` 1726 ([@petkaantonov](https://github.com/petkaantonov)) 1727* [`bb6f94395`](https://github.com/npm/cli/commit/bb6f94395491576ec42996ff6665df225f6b4377) 1728 `graceful-fs@4.1.1`:5 1729 ([@isaacs](https://github.com/isaacs)) 1730* [`43b1f4c91`](https://github.com/npm/cli/commit/43b1f4c91fa1d7b3ebb6aa2d960085e5f3ac7607) 1731 `tar@4.4.8` 1732 ([@isaacs](https://github.com/isaacs)) 1733* [`ab62afcc4`](https://github.com/npm/cli/commit/ab62afcc472de82c479bf91f560a0bbd6a233c80) 1734 `npm-packlist@1.1.1`:2 1735 ([@isaacs](https://github.com/isaacs)) 1736* [`027f06be3`](https://github.com/npm/cli/commit/027f06be35bb09f390e46fcd2b8182539939d1f7) 1737 `ci-info@1.6.0` 1738 ([@watson](https://github.com/watson)) 1739 1740### MISCELLANEOUS 1741 1742* [`27217dae8`](https://github.com/npm/cli/commit/27217dae8adbc577ee9cb323b7cfe9c6b2493aca) 1743 [#70](https://github.com/npm/cli/pull/70) 1744 Automatically audit dependency licenses for npm itself. 1745 ([@kemitchell](https://github.com/kemitchell)) 1746 1747## v6.4.1 (2018-08-22): 1748 1749### BUGFIXES 1750 1751* [`4bd40f543`](https://github.com/npm/cli/commit/4bd40f543dc89f0721020e7d0bb3497300d74818) 1752 [#42](https://github.com/npm/cli/pull/42) 1753 Prevent blowing up on malformed responses from the `npm audit` endpoint, such 1754 as with third-party registries. 1755 ([@framp](https://github.com/framp)) 1756* [`0e576f0aa`](https://github.com/npm/cli/commit/0e576f0aa6ea02653d948c10f29102a2d4a31944) 1757 [#46](https://github.com/npm/cli/pull/46) 1758 Fix `NO_PROXY` support by renaming npm-side config to `--noproxy`. The 1759 environment variable should still work. 1760 ([@SneakyFish5](https://github.com/SneakyFish5)) 1761* [`d8e811d6a`](https://github.com/npm/cli/commit/d8e811d6adf3d87474982cb831c11316ac725605) 1762 [#33](https://github.com/npm/cli/pull/33) 1763 Disable `update-notifier` checks when a CI environment is detected. 1764 ([@Sibiraj-S](https://github.com/Sibiraj-S)) 1765* [`1bc5b8cea`](https://github.com/npm/cli/commit/1bc5b8ceabc86bfe4777732f25ffef0f3de81bd1) 1766 [#47](https://github.com/npm/cli/pull/47) 1767 Fix issue where `postpack` scripts would break if `pack` was used with 1768 `--dry-run`. 1769 ([@larsgw](https://github.com/larsgw)) 1770 1771### DEPENDENCY BUMPS 1772 1773* [`4c57316d5`](https://github.com/npm/cli/commit/4c57316d5633e940105fa545b52d8fbfd2eb9f75) 1774 `figgy-pudding@3.4.1` 1775 ([@zkat](https://github.com/zkat)) 1776* [`85f4d7905`](https://github.com/npm/cli/commit/85f4d79059865d5267f3516b6cdbc746012202c6) 1777 `cacache@11.2.0` 1778 ([@zkat](https://github.com/zkat)) 1779* [`d20ac242a`](https://github.com/npm/cli/commit/d20ac242aeb44aa3581c65c052802a02d5eb22f3) 1780 `npm-packlist@1.1.11`: 1781 No real changes in npm-packlist, but npm-bundled included a 1782 circular dependency fix, as well as adding a proper LICENSE file. 1783 ([@isaacs](https://github.com/isaacs)) 1784* [`e8d5f4418`](https://github.com/npm/cli/commit/e8d5f441821553a31fc8cd751670663699d2c8ce) 1785 [npm.community#632](https://npm.community/t/using-npm-ci-does-not-run-prepare-script-for-git-modules/632) 1786 `libcipm@2.0.2`: 1787 Fixes issue where `npm ci` wasn't running the `prepare` lifecycle script when 1788 installing git dependencies 1789 ([@edahlseng](https://github.com/edahlseng)) 1790* [`a5e6f78e9`](https://github.com/npm/cli/commit/a5e6f78e916873f7d18639ebdb8abd20479615a9) 1791 `JSONStream@1.3.4`: 1792 Fixes memory leak problem when streaming large files (like legacy npm search). 1793 ([@daern91](https://github.com/daern91)) 1794* [`3b940331d`](https://github.com/npm/cli/commit/3b940331dcccfa67f92366adb7ffd9ecf7673a9a) 1795 [npm.community#1042](https://npm.community/t/3-path-variables-are-assigned-to-child-process-launched-by-npm/1042) 1796 `npm-lifecycle@2.1.0`: 1797 Fixes issue for Windows user where multiple `Path`/`PATH` variables were being 1798 added to the environment and breaking things in all sorts of fun and 1799 interesting ways. 1800 ([@JimiC](https://github.com/JimiC)) 1801* [`d612d2ce8`](https://github.com/npm/cli/commit/d612d2ce8fab72026f344f125539ecbf3746af9a) 1802 `npm-registry-client@8.6.0` 1803 ([@iarna](https://github.com/iarna)) 1804* [`1f6ba1cb1`](https://github.com/npm/cli/commit/1f6ba1cb174590c1f5d2b00e2ca238dfa39d507a) 1805 `opener@1.5.0` 1806 ([@domenic](https://github.com/domenic)) 1807* [`37b8f405f`](https://github.com/npm/cli/commit/37b8f405f35c861b7beeed56f71ad20b0bf87889) 1808 `request@2.88.0` 1809 ([@mikeal](https://github.com/mikeal)) 1810* [`bb91a2a14`](https://github.com/npm/cli/commit/bb91a2a14562e77769057f1b6d06384be6d6bf7f) 1811 `tacks@1.2.7` 1812 ([@iarna](https://github.com/iarna)) 1813* [`30bc9900a`](https://github.com/npm/cli/commit/30bc9900ae79c80bf0bdee0ae6372da6f668124c) 1814 `ci-info@1.4.0`: 1815 Adds support for two more CI services 1816 ([@watson](https://github.com/watson)) 1817* [`1d2fa4ddd`](https://github.com/npm/cli/commit/1d2fa4dddcab8facfee92096cc24b299387f3182) 1818 `marked@0.5.0` 1819 ([@joshbruce](https://github.com/joshbruce)) 1820 1821### DOCUMENTATION 1822 1823* [`08ecde292`](https://github.com/npm/cli/commit/08ecde2928f8c89a2fdaa800ae845103750b9327) 1824 [#54](https://github.com/npm/cli/pull/54) 1825 Mention registry terms of use in manpage and registry docs and update language 1826 in README for it. 1827 ([@kemitchell](https://github.com/kemitchell)) 1828* [`de956405d`](https://github.com/npm/cli/commit/de956405d8b72354f98579d00c6dd30ac3b9bddf) 1829 [#41](https://github.com/npm/cli/pull/41) 1830 Add documentation for `--dry-run` in `install` and `pack` docs. 1831 ([@reconbot](https://github.com/reconbot)) 1832* [`95031b90c`](https://github.com/npm/cli/commit/95031b90ce0b0c4dcd5e4eafc86e3e5bfd59fb3e) 1833 [#48](https://github.com/npm/cli/pull/48) 1834 Update republish time and lightly reorganize republish info. 1835 ([@neverett](https://github.com/neverett)) 1836* [`767699b68`](https://github.com/npm/cli/commit/767699b6829b8b899d5479445e99b0ffc43ff92d) 1837 [#53](https://github.com/npm/cli/pull/53) 1838 Correct `npm@6.4.0` release date in changelog. 1839 ([@charmander](https://github.com/charmander)) 1840* [`3fea3166e`](https://github.com/npm/cli/commit/3fea3166eb4f43f574fcfd9ee71a171feea2bc29) 1841 [#55](https://github.com/npm/cli/pull/55) 1842 Align command descriptions in help text. 1843 ([@erik](https://github.com/erik)) 1844 1845## v6.4.0 (2018-08-09): 1846 1847### NEW FEATURES 1848 1849* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7) 1850 [npm/cli#8](https://github.com/npm/cli/pull/8) 1851 Search for authentication token defined by environment variables by preventing 1852 the translation layer from env variable to npm option from breaking 1853 `:_authToken`. 1854 ([@mkhl](https://github.com/mkhl)) 1855* [`84bfd23e7`](https://github.com/npm/cli/commit/84bfd23e7d6434d30595594723a6e1976e84b022) 1856 [npm/cli#35](https://github.com/npm/cli/pull/35) 1857 Stop filtering out non-IPv4 addresses from `local-addrs`, making npm actually 1858 use IPv6 addresses when it must. 1859 ([@valentin2105](https://github.com/valentin2105)) 1860* [`792c8c709`](https://github.com/npm/cli/commit/792c8c709dc7a445687aa0c8cba5c50bc4ed83fd) 1861 [npm/cli#31](https://github.com/npm/cli/pull/31) 1862 configurable audit level for non-zero exit 1863 `npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. 1864 Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. 1865 Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. 1866 ([@lennym](https://github.com/lennym)) 1867 1868### BUGFIXES 1869 1870* [`d81146181`](https://github.com/npm/cli/commit/d8114618137bb5b9a52a86711bb8dc18bfc8e60c) 1871 [npm/cli#32](https://github.com/npm/cli/pull/32) 1872 Don't check for updates to npm when we are updating npm itself. 1873 ([@olore](https://github.com/olore)) 1874 1875### DEPENDENCY UPDATES 1876 1877A very special dependency update event! Since the [release of 1878`node-gyp@3.8.0`](https://github.com/nodejs/node-gyp/pull/1521), an awkward 1879version conflict that was preventing `request` from begin flattened was 1880resolved. This means two things: 1881 18821. We've cut down the npm tarball size by another 200kb, to 4.6MB 18832. `npm audit` now shows no vulnerabilities for npm itself! 1884 1885Thanks, [@rvagg](https://github.com/rvagg)! 1886 1887* [`866d776c2`](https://github.com/npm/cli/commit/866d776c27f80a71309389aaab42825b2a0916f6) 1888 `request@2.87.0` 1889 ([@simov](https://github.com/simov)) 1890* [`f861c2b57`](https://github.com/npm/cli/commit/f861c2b579a9d4feae1653222afcefdd4f0e978f) 1891 `node-gyp@3.8.0` 1892 ([@rvagg](https://github.com/rvagg)) 1893* [`32e6947c6`](https://github.com/npm/cli/commit/32e6947c60db865257a0ebc2f7e754fedf7a6fc9) 1894 [npm/cli#39](https://github.com/npm/cli/pull/39) 1895 `colors@1.1.2`: 1896 REVERT REVERT, newer versions of this library are broken and print ansi 1897 codes even when disabled. 1898 ([@iarna](https://github.com/iarna)) 1899* [`beb96b92c`](https://github.com/npm/cli/commit/beb96b92caf061611e3faafc7ca10e77084ec335) 1900 `libcipm@2.0.1` 1901 ([@zkat](https://github.com/zkat)) 1902* [`348fc91ad`](https://github.com/npm/cli/commit/348fc91ad223ff91cd7bcf233018ea1d979a2af1) 1903 `validate-npm-package-license@3.0.4`: Fixes errors with empty or string-only 1904 license fields. 1905 ([@Gudahtt](https://github.com/Gudahtt)) 1906* [`e57d34575`](https://github.com/npm/cli/commit/e57d3457547ef464828fc6f82ae4750f3e511550) 1907 `iferr@1.0.2` 1908 ([@shesek](https://github.com/shesek)) 1909* [`46f1c6ad4`](https://github.com/npm/cli/commit/46f1c6ad4b2fd5b0d7ec879b76b76a70a3a2595c) 1910 `tar@4.4.6` 1911 ([@isaacs](https://github.com/isaacs)) 1912* [`50df1bf69`](https://github.com/npm/cli/commit/50df1bf691e205b9f13e0fff0d51a68772c40561) 1913 `hosted-git-info@2.7.1` 1914 ([@iarna](https://github.com/iarna)) 1915 ([@Erveon](https://github.com/Erveon)) 1916 ([@huochunpeng](https://github.com/huochunpeng)) 1917 1918### DOCUMENTATION 1919 1920* [`af98e76ed`](https://github.com/npm/cli/commit/af98e76ed96af780b544962aa575585b3fa17b9a) 1921 [npm/cli#34](https://github.com/npm/cli/pull/34) 1922 Remove `npm publish` from list of commands not affected by `--dry-run`. 1923 ([@joebowbeer](https://github.com/joebowbeer)) 1924* [`e2b0f0921`](https://github.com/npm/cli/commit/e2b0f092193c08c00f12a6168ad2bd9d6e16f8ce) 1925 [npm/cli#36](https://github.com/npm/cli/pull/36) 1926 Tweak formatting in repository field examples. 1927 ([@noahbenham](https://github.com/noahbenham)) 1928* [`e2346e770`](https://github.com/npm/cli/commit/e2346e7702acccefe6d711168c2b0e0e272e194a) 1929 [npm/cli#14](https://github.com/npm/cli/pull/14) 1930 Used `process.env` examples to make accessing certain `npm run-scripts` 1931 environment variables more clear. 1932 ([@mwarger](https://github.com/mwarger)) 1933 1934## v6.3.0 (2018-08-01): 1935 1936This is basically the same as the prerelease, but two dependencies have been 1937bumped due to bugs that had been around for a while. 1938 1939* [`0a22be42e`](https://github.com/npm/cli/commit/0a22be42eb0d40cd0bd87e68c9e28fc9d72c0e19) 1940 `figgy-pudding@3.2.0` 1941 ([@zkat](https://github.com/zkat)) 1942* [`0096f6997`](https://github.com/npm/cli/commit/0096f69978d2f40b170b28096f269b0b0008a692) 1943 `cacache@11.1.0` 1944 ([@zkat](https://github.com/zkat)) 1945 1946## v6.3.0-next.0 (2018-07-25): 1947 1948### NEW FEATURES 1949 1950* [`ad0dd226f`](https://github.com/npm/cli/commit/ad0dd226fb97a33dcf41787ae7ff282803fb66f2) 1951 [npm/cli#26](https://github.com/npm/cli/pull/26) 1952 `npm version` now supports a `--preid` option to specify the preid for 1953 prereleases. For example, `npm version premajor --preid rc` will tag a version 1954 like `2.0.0-rc.0`. 1955 ([@dwilches](https://github.com/dwilches)) 1956 1957### MESSAGING IMPROVEMENTS 1958 1959* [`c1dad1e99`](https://github.com/npm/cli/commit/c1dad1e994827f2eab7a13c0f6454f4e4c22ebc2) 1960 [npm/cli#6](https://github.com/npm/cli/pull/6) 1961 Make `npm audit fix` message provide better instructions for vulnerabilities 1962 that require manual review. 1963 ([@bradsk88](https://github.com/bradsk88)) 1964* [`15c1130fe`](https://github.com/npm/cli/commit/15c1130fe81961706667d845aad7a5a1f70369f3) 1965 Fix missing colon next to tarball url in new `npm view` output. 1966 ([@zkat](https://github.com/zkat)) 1967* [`21cf0ab68`](https://github.com/npm/cli/commit/21cf0ab68cf528d5244ae664133ef400bdcfbdb6) 1968 [npm/cli#24](https://github.com/npm/cli/pull/24) 1969 Use the default OTP explanation everywhere except when the context is 1970 "OTP-aware" (like when setting double-authentication). This improves the 1971 overall CLI messaging when prompting for an OTP code. 1972 ([@jdeniau](https://github.com/jdeniau)) 1973 1974### MISC 1975 1976* [`a9ac8712d`](https://github.com/npm/cli/commit/a9ac8712dfafcb31a4e3deca24ddb92ff75e942d) 1977 [npm/cli#21](https://github.com/npm/cli/pull/21) 1978 Use the extracted `stringify-package` package. 1979 ([@dpogue](https://github.com/dpogue)) 1980* [`9db15408c`](https://github.com/npm/cli/commit/9db15408c60be788667cafc787116555507dc433) 1981 [npm/cli#27](https://github.com/npm/cli/pull/27) 1982 `wrappy` was previously added to dependencies in order to flatten it, but we 1983 no longer do legacy-style for npm itself, so it has been removed from 1984 `package.json`. 1985 ([@rickschubert](https://github.com/rickschubert)) 1986 1987### DOCUMENTATION 1988 1989* [`3242baf08`](https://github.com/npm/cli/commit/3242baf0880d1cdc0e20b546d3c1da952e474444) 1990 [npm/cli#13](https://github.com/npm/cli/pull/13) 1991 Update more dead links in README.md. 1992 ([@u32i64](https://github.com/u32i64)) 1993* [`06580877b`](https://github.com/npm/cli/commit/06580877b6023643ec780c19d84fbe120fe5425c) 1994 [npm/cli#19](https://github.com/npm/cli/pull/19) 1995 Update links in docs' `index.html` to refer to new bug/PR URLs. 1996 ([@watilde](https://github.com/watilde)) 1997* [`ca03013c2`](https://github.com/npm/cli/commit/ca03013c23ff38e12902e9569a61265c2d613738) 1998 [npm/cli#15](https://github.com/npm/cli/pull/15) 1999 Fix some typos in file-specifiers docs. 2000 ([@Mstrodl](https://github.com/Mstrodl)) 2001* [`4f39f79bc`](https://github.com/npm/cli/commit/4f39f79bcacef11bf2f98d09730bc94d0379789b) 2002 [npm/cli#16](https://github.com/npm/cli/pull/16) 2003 Fix some typos in file-specifiers and package-lock docs. 2004 ([@watilde](https://github.com/watilde)) 2005* [`35e51f79d`](https://github.com/npm/cli/commit/35e51f79d1a285964aad44f550811aa9f9a72cd8) 2006 [npm/cli#18](https://github.com/npm/cli/pull/18) 2007 Update build status badge url in README. 2008 ([@watilde](https://github.com/watilde)) 2009* [`a67db5607`](https://github.com/npm/cli/commit/a67db5607ba2052b4ea44f66657f98b758fb4786) 2010 [npm/cli#17](https://github.com/npm/cli/pull/17/) 2011 Replace TROUBLESHOOTING.md with [posts in 2012 npm.community](https://npm.community/c/support/troubleshooting). 2013 ([@watilde](https://github.com/watilde)) 2014* [`e115f9de6`](https://github.com/npm/cli/commit/e115f9de65bf53711266152fc715a5012f7d3462) 2015 [npm/cli#7](https://github.com/npm/cli/pull/7) 2016 Use https URLs in documentation when appropriate. Happy [Not Secure Day](https://arstechnica.com/gadgets/2018/07/todays-the-day-that-chrome-brands-plain-old-http-as-not-secure/)! 2017 ([@XhmikosR](https://github.com/XhmikosR)) 2018 2019## v6.2.0 (2018-07-13): 2020 2021In case you missed it, [we 2022moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We 2023look forward to seeing future PRs landing in 2024[npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with 2025you all in [npm.community](https://npm.community). Go check it out! 2026 2027This final release of `npm@6.2.0` includes a couple of features that weren't 2028quite ready on time but that we'd still like to include. Enjoy! 2029 2030### FEATURES 2031 2032* [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) 2033 [#20554](https://github.com/npm/npm/pull/20554) 2034 Add support for tab-separated output for `npm audit` data with the 2035 `--parseable` flag. 2036 ([@luislobo](https://github.com/luislobo)) 2037* [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) 2038 [#12697](https://github.com/npm/npm/pull/12697) 2039 Add new `sign-git-commit` config to control whether the git commit itself gets 2040 signed, or just the tag (which is the default). 2041 ([@tribou](https://github.com/tribou)) 2042 2043### FIXES 2044 2045* [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) 2046 [#19418](https://github.com/npm/npm/pull/19418) 2047 Do not use `SET` to fetch the env in git-bash or Cygwin. 2048 ([@gucong3000](https://github.com/gucong3000)) 2049 2050### DEPENDENCY BUMPS 2051 2052* [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) 2053 `request@2.81.0`: Downgraded to allow better deduplication. This does 2054 introduce a bunch of `hoek`-related audit reports, but they don't affect npm 2055 itself so we consider it safe. We'll upgrade `request` again once `node-gyp` 2056 unpins it. 2057 ([@simov](https://github.com/simov)) 2058* [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) 2059 `node-gyp@3.7.0` 2060 ([@MylesBorins](https://github.com/MylesBorins)) 2061* [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) 2062 `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With 2063 this dependency bump, we've removed `lodash` from our tree, which cut back 2064 tarball size by another 300kb. 2065 ([@Turbo87](https://github.com/Turbo87)) 2066* [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) 2067 `npm-audit-report@1.3.1` 2068 ([@zkat](https://github.com/zkat)) 2069* [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) 2070 Add `cli-table3` to bundleDeps. 2071 ([@iarna](https://github.com/iarna)) 2072* [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) 2073 Make `standard` happy. 2074 ([@iarna](https://github.com/iarna)) 2075 2076### DOCS 2077 2078* [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631) 2079 [#21165](https://github.com/npm/npm/pull/21165) 2080 Fix some markdown formatting in npm-disputes.md. 2081 ([@hchiam](https://github.com/hchiam)) 2082* [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171) 2083 [#20920](https://github.com/npm/npm/pull/20920) 2084 Explicitly state that republishing an unpublished package requires a 72h 2085 waiting period. 2086 ([@gmattie](https://github.com/gmattie)) 2087* [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) 2088 Replace references to the old repo or issue tracker. We're at npm/cli now! 2089 ([@zkat](https://github.com/zkat)) 2090 2091## v6.2.0-next.1 (2018-07-05): 2092 2093This is a quick patch to the release to fix an issue that was preventing users 2094from installing `npm@next`. 2095 2096* [`ecdcbd745`](https://github.com/npm/npm/commit/ecdcbd745ae1edd9bdd102dc3845a7bc76e1c5fb) 2097 [#21129](https://github.com/npm/npm/pull/21129) 2098 Remove postinstall script that depended on source files, thus preventing 2099 `npm@next` from being installable from the registry. 2100 ([@zkat](https://github.com/zkat)) 2101 2102## v6.2.0-next.0 (2018-06-28): 2103 2104### NEW FEATURES 2105 2106* [`ce0793358`](https://github.com/npm/npm/commit/ce07933588ec2da1cc1980f93bdaa485d6028ae2) 2107 [#20750](https://github.com/npm/npm/pull/20750) 2108 You can now disable the update notifier entirely by using 2109 `--no-update-notifier` or setting it in your config with `npm config set 2110 update-notifier false`. 2111 ([@travi](https://github.com/travi)) 2112* [`d2ad776f6`](https://github.com/npm/npm/commit/d2ad776f6dcd92ae3937465736dcbca171131343) 2113 [#20879](https://github.com/npm/npm/pull/20879) 2114 When `npm run-script <script>` fails due to a typo or missing script, npm will 2115 now do a "did you mean?..." for scripts that do exist. 2116 ([@watilde](https://github.com/watilde)) 2117 2118### BUGFIXES 2119 2120* [`8f033d72d`](https://github.com/npm/npm/commit/8f033d72da3e84a9dbbabe3a768693817af99912) 2121 [#20948](https://github.com/npm/npm/pull/20948) 2122 Fix the regular expression matching in `xcode_emulation` in `node-gyp` to also 2123 handle version numbers with multiple-digit major versions which would 2124 otherwise break under use of XCode 10. 2125 ([@Trott](https://github.com/Trott)) 2126* [`c8ba7573a`](https://github.com/npm/npm/commit/c8ba7573a4ea95789f674ce038762d6a77a8b047) 2127 Stop trying to hoist/dedupe bundles dependencies. 2128 ([@iarna](https://github.com/iarna)) 2129* [`cd698f068`](https://github.com/npm/npm/commit/cd698f06840b7c9407ac802efa96d16464722a7d) 2130 [#20762](https://github.com/npm/npm/pull/20762) 2131 Add synopsis to brief help for `npm audit` and suppress trailing newline. 2132 ([@wyardley](https://github.com/wyardley)) 2133* [`6808ee3bd`](https://github.com/npm/npm/commit/6808ee3bd59560b1334a18aa6c6e0120094b03c0) 2134 [#20881](https://github.com/npm/npm/pull/20881) 2135 Exclude /.github directory from npm tarball. 2136 ([@styfle](https://github.com/styfle)) 2137* [`177cbb476`](https://github.com/npm/npm/commit/177cbb4762c1402bfcbf0636c4bc4905fd684fc1) 2138 [#21105](https://github.com/npm/npm/pull/21105) 2139 Add suggestion to use a temporary cache instead of `npm cache clear --force`. 2140 ([@karanjthakkar](https://github.com/karanjthakkar)) 2141 2142### DOCS 2143 2144* [`7ba3fca00`](https://github.com/npm/npm/commit/7ba3fca00554b884eb47f2ed661693faf2630b27) 2145 [#20855](https://github.com/npm/npm/pull/20855) 2146 Direct people to npm.community instead of the GitHub issue tracker on error. 2147 ([@zkat](https://github.com/zkat)) 2148* [`88efbf6b0`](https://github.com/npm/npm/commit/88efbf6b0b403c5107556ff9e1bb7787a410d14d) 2149 [#20859](https://github.com/npm/npm/pull/20859) 2150 Fix typo in registry docs. 2151 ([@strugee](https://github.com/strugee)) 2152* [`61bf827ae`](https://github.com/npm/npm/commit/61bf827aea6f98bba08a54e60137d4df637788f9) 2153 [#20947](https://github.com/npm/npm/pull/20947) 2154 Fixed a small grammar error in the README. 2155 ([@bitsol](https://github.com/bitsol)) 2156* [`f5230c90a`](https://github.com/npm/npm/commit/f5230c90afef40f445bf148cbb16d6129a2dcc19) 2157 [#21018](https://github.com/npm/npm/pull/21018) 2158 Small typo fix in CONTRIBUTING.md. 2159 ([@reggi](https://github.com/reggi)) 2160* [`833efe4b2`](https://github.com/npm/npm/commit/833efe4b2abcef58806f823d77ab8bb8f4f781c6) 2161 [#20986](https://github.com/npm/npm/pull/20986) 2162 Document current structure/expectations around package tarballs. 2163 ([@Maximaximum](https://github.com/Maximaximum)) 2164* [`9fc0dc4f5`](https://github.com/npm/npm/commit/9fc0dc4f58d728bac6a8db7143d04863d7b653db) 2165 [#21019](https://github.com/npm/npm/pull/21019) 2166 Clarify behavior of `npm link ../path` shorthand. 2167 ([@davidgilbertson](https://github.com/davidgilbertson)) 2168* [`3924c72d0`](https://github.com/npm/npm/commit/3924c72d06b9216ac2b6a9d951fd565a1d5eda89) 2169 [#21064](https://github.com/npm/npm/pull/21064) 2170 Add missing "if" 2171 ([@roblourens](https://github.com/roblourens)) 2172 2173### DEPENDENCY SHUFFLE! 2174 2175We did some reshuffling and moving around of npm's own dependencies. This 2176significantly reduces the total bundle size of the npm pack, from 8MB to 4.8MB 2177for the distributed tarball! We also moved around what we actually commit to the 2178repo as far as devDeps go. 2179 2180* [`0483f5c5d`](https://github.com/npm/npm/commit/0483f5c5deaf18c968a128657923103e49f4e67a) 2181 Flatten and dedupe our dependencies! 2182 ([@iarna](https://github.com/iarna)) 2183* [`ef9fa1ceb`](https://github.com/npm/npm/commit/ef9fa1ceb5f9d175fd453138b1a26d45a5071dfd) 2184 Remove unused direct dependency `ansi-regex`. 2185 ([@iarna](https://github.com/iarna)) 2186* [`0d14b0bc5`](https://github.com/npm/npm/commit/0d14b0bc59812f4e33798194e11ffacbea3c0493) 2187 Reshuffle ansi-regex for better deduping. 2188 ([@iarna](https://github.com/iarna)) 2189* [`68a101859`](https://github.com/npm/npm/commit/68a101859b2b6f78b2e7c3a936492acdb15f7c4a) 2190 Reshuffle strip-ansi for better deduping. 2191 ([@iarna](https://github.com/iarna)) 2192* [`0d5251f97`](https://github.com/npm/npm/commit/0d5251f97dc8b8b143064869e530d465c757ffbb) 2193 Reshuffle is-fullwidth-code-point for better deduping. 2194 ([@iarna](https://github.com/iarna)) 2195* [`2d0886632`](https://github.com/npm/npm/commit/2d08866327013522fc5fbe61ed872b8f30e92775) 2196 Add fake-registry, npm-registry-mock replacement. 2197 ([@iarna](https://github.com/iarna)) 2198 2199### DEPENDENCIES 2200 2201* [`8cff8eea7`](https://github.com/npm/npm/commit/8cff8eea75dc34c9c1897a7a6f65d7232bb0c64c) 2202 `tar@4.4.3` 2203 ([@zkat](https://github.com/zkat)) 2204* [`bfc4f873b`](https://github.com/npm/npm/commit/bfc4f873bd056b7e3aee389eda4ecd8a2e175923) 2205 `pacote@8.1.6` 2206 ([@zkat](https://github.com/zkat)) 2207* [`532096163`](https://github.com/npm/npm/commit/53209616329119be8fcc29db86a43cc8cf73454d) 2208 `libcipm@2.0.0` 2209 ([@zkat](https://github.com/zkat)) 2210* [`4a512771b`](https://github.com/npm/npm/commit/4a512771b67aa06505a0df002a9027c16a238c71) 2211 `request@2.87.0` 2212 ([@iarna](https://github.com/iarna)) 2213* [`b7cc48dee`](https://github.com/npm/npm/commit/b7cc48deee45da1feab49aa1dd4d92e33c9bcac8) 2214 `which@1.3.1` 2215 ([@iarna](https://github.com/iarna)) 2216* [`bae657c28`](https://github.com/npm/npm/commit/bae657c280f6ea8e677509a9576e1b47c65c5441) 2217 `tar@4.4.4` 2218 ([@iarna](https://github.com/iarna)) 2219* [`3d46e5c4e`](https://github.com/npm/npm/commit/3d46e5c4e3c5fecd9bf05a7425a16f2e8ad5c833) 2220 `JSONStream@1.3.3` 2221 ([@iarna](https://github.com/iarna)) 2222* [`d0a905daf`](https://github.com/npm/npm/commit/d0a905dafc7e3fcd304e8053acbe3da40ba22554) 2223 `is-cidr@2.0.6` 2224 ([@iarna](https://github.com/iarna)) 2225* [`4fc1f815f`](https://github.com/npm/npm/commit/4fc1f815fec5a7f6f057cf305e01d4126331d1f2) 2226 `marked@0.4.0` 2227 ([@iarna](https://github.com/iarna)) 2228* [`f72202944`](https://github.com/npm/npm/commit/f722029441a088d03df94bdfdeeec51cfd318659) 2229 `tap@12.0.1` 2230 ([@iarna](https://github.com/iarna)) 2231* [`bdce96eb3`](https://github.com/npm/npm/commit/bdce96eb3c30fcff873aa3f1190e8ae4928d690b) 2232 `npm-profile@3.0.2` 2233 ([@iarna](https://github.com/iarna)) 2234* [`fe4240e85`](https://github.com/npm/npm/commit/fe4240e852144770bf76d7b1952056ca5baa63cf) 2235 `uuid@3.3.2` 2236 ([@zkat](https://github.com/zkat)) 2237 2238## v6.1.0 (2018-05-17): 2239 2240### FIX WRITE AFTER END ERROR 2241 2242First introduced in 5.8.0, this finally puts to bed errors where you would 2243occasionally see `Error: write after end at MiniPass.write`. 2244 2245* [`171f3182f`](https://github.com/npm/npm/commit/171f3182f32686f2f94ea7d4b08035427e0b826e) 2246 [node-tar#180](https://github.com/npm/node-tar/issues/180) 2247 [npm.community#35](https://npm.community/t/write-after-end-when-installing-packages-with-5-8-and-later/35) 2248 `pacote@8.1.5`: Fix write-after-end errors. 2249 ([@zkat](https://github.com/zkat)) 2250 2251### DETECT CHANGES IN GIT SPECIFIERS 2252 2253* [`0e1726c03`](https://github.com/npm/npm/commit/0e1726c0350a02d5a60f5fddb1e69c247538625e) 2254 We can now determine if the commitid of a git dependency in the lockfile is derived 2255 from the specifier in the package.json and if it isn't we now trigger an update for it. 2256 ([@iarna](https://github.com/iarna)) 2257 2258### OTHER BUGS 2259 2260* [`442d2484f`](https://github.com/npm/npm/commit/442d2484f686e3a371b07f8473a17708f84d9603) 2261 [`2f0c88351`](https://github.com/npm/npm/commit/2f0c883519f17c94411dd1d9877c5666f260c12f) 2262 [`631d30a34`](https://github.com/npm/npm/commit/631d30a340f5805aed6e83f47a577ca4125599b2) 2263 When requesting the update of a direct dependency that was also a 2264 transitive dependency to a version incompatible with the transitive 2265 requirement and you had a lock-file but did not have a `node_modules` 2266 folder then npm would fail to provide a new copy of the transitive 2267 dependency, resulting in an invalid lock-file that could not self heal. 2268 ([@iarna](https://github.com/iarna)) 2269* [`be5dd0f49`](https://github.com/npm/npm/commit/be5dd0f496ec1485b1ea3094c479dfc17bd50d82) 2270 [#20715](https://github.com/npm/npm/pull/20715) 2271 Cleanup output of `npm ci` summary report. 2272 ([@legodude17](https://github.com/legodude17)) 2273* [`98ffe4adb`](https://github.com/npm/npm/commit/98ffe4adb55a6f4459271856de2e27e95ee63375) 2274 Node.js now has a test that scans for things that look like conflict 2275 markers in source code. This was triggering false positives on a fixture in a test 2276 of npm's ability to heal lockfiles with conflicts in them. 2277 ([@iarna](https://github.com/iarna)) 2278 2279### DEPENDENCY UPDATES 2280 2281* [`3f2e306b8`](https://github.com/npm/npm/commit/3f2e306b884a027df03f64524beb8658ce1772cb) 2282 Using `npm audit fix`, replace some transitive dependencies with security 2283 issues with versions that don't have any. 2284 ([@iarna](https://github.com/iarna)) 2285* [`1d07134e0`](https://github.com/npm/npm/commit/1d07134e0b157f7484a20ce6987ff57951842954) 2286 `tar@4.4.1`: 2287 Dropping to 4.4.1 from 4.4.2 due to https://github.com/npm/node-tar/issues/183 2288 ([@zkat](https://github.com/zkat)) 2289 2290 2291## v6.1.0-next.0 (2018-05-17): 2292 2293Look at that! A feature bump! `npm@6` was super-exciting not just because it 2294used a bigger number than ever before, but also because it included a super 2295shiny new command: `npm audit`. Well, we've kept working on it since then and 2296have some really nice improvements for it. You can expect more of them, and the 2297occasional fix, in the next few releases as more users start playing with it and 2298we get more feedback about what y'all would like to see from something like 2299this. 2300 2301I, for one, have started running it (and the new subcommand...) in all my 2302projects, and it's one of those things that I don't know how I ever functioned 2303-without- it! This will make a world of difference to so many people as far as 2304making the npm ecosystem a higher-quality, safer commons for all of us. 2305 2306This is also a good time to remind y'all that we have a new [RFCs 2307repository](https://github.com/npm/rfcs), along with a new process for them. 2308This repo is open to anyone's RFCs, and has already received some great ideas 2309about where we can take the CLI (and, to a certain extent, the registry). It's a 2310great place to get feedback, and completely replaces feature requests in the 2311main repo, so we won't be accepting feature requests there at all anymore. Check 2312it out if you have something you'd like to suggest, or if you want to keep track 2313of what the future might look like! 2314 2315### NEW FEATURE: `npm audit fix` 2316 2317This is the biggie with this release! `npm audit fix` does exactly what it says 2318on the tin. It takes all the actionable reports from your `npm audit` and runs 2319the installs automatically for you, so you don't have to try to do all that 2320mechanical work yourself! 2321 2322Note that by default, `npm audit fix` will stick to semver-compatible changes, 2323so you should be able to safely run it on most projects and carry on with your 2324day without having to track down what breaking changes were included. If you 2325want your (toplevel) dependencies to accept semver-major bumps as well, you can 2326use `npm audit fix --force` and it'll toss those in, as well. Since it's running 2327the npm installer under the hood, it also supports `--production` and 2328`--only=dev` flags, as well as things like `--dry-run`, `--json`, and 2329`--package-lock-only`, if you want more control over what it does. 2330 2331Give it a whirl and tell us what you think! See `npm help audit` for full docs! 2332 2333* [`3800a660d`](https://github.com/npm/npm/commit/3800a660d99ca45c0175061dbe087520db2f54b7) 2334 Add `npm audit fix` subcommand to automatically fix detected vulnerabilities. 2335 ([@zkat](https://github.com/zkat)) 2336 2337### OTHER NEW `audit` FEATURES 2338 2339* [`1854b1c7f`](https://github.com/npm/npm/commit/1854b1c7f09afceb49627e539a086d8a3565601c) 2340 [#20568](https://github.com/npm/npm/pull/20568) 2341 Add support for `npm audit --json` to print the report in JSON format. 2342 ([@finnp](https://github.com/finnp)) 2343* [`85b86169d`](https://github.com/npm/npm/commit/85b86169d9d0423f50893d2ed0c7274183255abe) 2344 [#20570](https://github.com/npm/npm/pull/20570) 2345 Include number of audited packages in `npm install` summary output. 2346 ([@zkat](https://github.com/zkat)) 2347* [`957cbe275`](https://github.com/npm/npm/commit/957cbe27542d30c33e58e7e6f2f04eeb64baf5cd) 2348 `npm-audit-report@1.2.1`: 2349 Overhaul audit install and detail output format. The new format is terser and 2350 fits more closely into the visual style of the CLI, while still providing you 2351 with the important bits of information you need. They also include a bit more 2352 detail on the footer about what actions you can take! 2353 ([@zkat](https://github.com/zkat)) 2354 2355### NEW FEATURE: GIT DEPS AND `npm init <pkg>`! 2356 2357Another exciting change that came with `npm@6` was the new `npm init` command 2358that allows for community-authored generators. That means you can, for example, 2359do `npm init react-app` and it'll one-off download, install, and run 2360[`create-react-app`](https://npm.im/create-react-app) for you, without requiring 2361or keeping around any global installs. That is, it basically just calls out to 2362[`npx`](https://npm.im/npx). 2363 2364The first version of this command only really supported registry dependencies, 2365but now, [@jdalton](https://github.com/jdalton) went ahead and extended this 2366feature so you can use hosted git dependencies, and their shorthands. 2367 2368So go ahead and do `npm init facebook/create-react-app` and it'll grab the 2369package from the github repo now! Or you can use it with a private github 2370repository to maintain your organizational scaffolding tools or whatnot. ✨ 2371 2372* [`483e01180`](https://github.com/npm/npm/commit/483e011803af82e63085ef41b7acce5b22aa791c) 2373 [#20403](https://github.com/npm/npm/pull/20403) 2374 Add support for hosted git packages to `npm init <name>`. 2375 ([@jdalton](https://github.com/jdalton)) 2376 2377### BUGFIXES 2378 2379* [`a41c0393c`](https://github.com/npm/npm/commit/a41c0393cba710761a15612c6c85c9ef2396e65f) 2380 [#20538](https://github.com/npm/npm/pull/20538) 2381 Make the new `npm view` work when the license field is an object instead of a 2382 string. 2383 ([@zkat](https://github.com/zkat)) 2384* [`eb7522073`](https://github.com/npm/npm/commit/eb75220739302126c94583cc65a5ff12b441e3c6) 2385 [#20582](https://github.com/npm/npm/pull/20582) 2386 Add support for environments (like Docker) where the expected binary for 2387 opening external URLs is not available. 2388 ([@bcoe](https://github.com/bcoe)) 2389* [`212266529`](https://github.com/npm/npm/commit/212266529ae72056bf0876e2cff4b8ba01d09d0f) 2390 [#20536](https://github.com/npm/npm/pull/20536) 2391 Fix a spurious colon in the new update notifier message and add support for 2392 the npm canary. 2393 ([@zkat](https://github.com/zkat)) 2394* [`5ee1384d0`](https://github.com/npm/npm/commit/5ee1384d02c3f11949d7a26ec6322488476babe6) 2395 [#20597](https://github.com/npm/npm/pull/20597) 2396 Infer a version range when a `package.json` has a dist-tag instead of a 2397 version range in one of its dependency specs. Previously, this would cause 2398 dependencies to be flagged as invalid. 2399 ([@zkat](https://github.com/zkat)) 2400* [`4fa68ae41`](https://github.com/npm/npm/commit/4fa68ae41324293e59584ca6cf0ac24b3e0825bb) 2401 [#20585](https://github.com/npm/npm/pull/20585) 2402 Make sure scoped bundled deps are shown in the new publish preview, too. 2403 ([@zkat](https://github.com/zkat)) 2404* [`1f3ee6b7e`](https://github.com/npm/npm/commit/1f3ee6b7e1b36b52bdedeb9241296d4e66561d48) 2405 `cacache@11.0.2`: 2406 Stop dropping `size` from metadata on `npm cache verify`. 2407 ([@jfmartinez](https://github.com/jfmartinez)) 2408* [`91ef93691`](https://github.com/npm/npm/commit/91ef93691a9d6ce7c016fefdf7da97854ca2b2ca) 2409 [#20513](https://github.com/npm/npm/pull/20513) 2410 Fix nested command aliases. 2411 ([@mmermerkaya](https://github.com/mmermerkaya)) 2412* [`18b2b3cf7`](https://github.com/npm/npm/commit/18b2b3cf71a438648ced1bd13faecfb50c71e979) 2413 `npm-lifecycle@2.0.3`: 2414 Make sure different versions of the `Path` env var on Windows all get 2415 `node_modules/.bin` prepended when running lifecycle scripts. 2416 ([@laggingreflex](https://github.com/laggingreflex)) 2417 2418### DOCUMENTATION 2419 2420* [`a91d87072`](https://github.com/npm/npm/commit/a91d87072f292564e58dcab508b5a8c6702b9aae) 2421 [#20550](https://github.com/npm/npm/pull/20550) 2422 Update required node versions in README. 2423 ([@legodude17](https://github.com/legodude17)) 2424* [`bf3cfa7b8`](https://github.com/npm/npm/commit/bf3cfa7b8b351714c4ec621e1a5867c8450c6fff) 2425 Pull in changelogs from the last `npm@5` release. 2426 ([@iarna](https://github.com/iarna)) 2427* [`b2f14b14c`](https://github.com/npm/npm/commit/b2f14b14ca25203c2317ac2c47366acb50d46e69) 2428 [#20629](https://github.com/npm/npm/pull/20629) 2429 Make tone in `publishConfig` docs more neutral. 2430 ([@jeremyckahn](https://github.com/jeremyckahn)) 2431 2432### DEPENDENCY BUMPS 2433 2434* [`5fca4eae8`](https://github.com/npm/npm/commit/5fca4eae8a62a7049b1ae06aa0bbffdc6e0ad6cc) 2435 `byte-size@4.0.3` 2436 ([@75lb](https://github.com/75lb)) 2437* [`d9ef3fba7`](https://github.com/npm/npm/commit/d9ef3fba79f87c470889a6921a91f7cdcafa32b9) 2438 `lru-cache@4.1.3` 2439 ([@isaacs](https://github.com/isaacs)) 2440* [`f1baf011a`](https://github.com/npm/npm/commit/f1baf011a0d164f8dc8aa6cd31e89225e3872e3b) 2441 `request@2.86.0` 2442 ([@simonv](https://github.com/simonv)) 2443* [`005fa5420`](https://github.com/npm/npm/commit/005fa542072f09a83f77a9d62c5e53b8f6309371) 2444 `require-inject@1.4.3` 2445 ([@iarna](https://github.com/iarna)) 2446* [`1becdf09a`](https://github.com/npm/npm/commit/1becdf09a2f19716726c88e9a2342e1e056cfc71) 2447 `tap@11.1.5` 2448 ([@isaacs](https://github.com/isaacs)) 2449 2450## v6.0.1 (2018-05-09): 2451 2452### AUDIT SHOULDN'T WAIT FOREVER 2453 2454This will likely be reduced further with the goal that the audit process 2455shouldn't noticibly slow down your builds regardless of your network 2456situation. 2457 2458* [`3dcc240db`](https://github.com/npm/npm/commit/3dcc240dba5258532990534f1bd8a25d1698b0bf) 2459 Timeout audit requests eventually. 2460 ([@iarna](https://github.com/iarna)) 2461 2462### Looking forward 2463 2464We're still a way from having node@11, so now's a good time to ensure we 2465don't warn about being used with it. 2466 2467* [`ed1aebf55`](https://github.com/npm/npm/commit/ed1aebf55) 2468 Allow node@11, when it comes. 2469 ([@iarna](https://github.com/iarna)) 2470 2471## v6.0.1-next.0 (2018-05-03): 2472 2473### CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT! 2474 2475* [`b267bbbb9`](https://github.com/npm/npm/commit/b267bbbb9ddd551e3dbd162cc2597be041b9382c) 2476 [npm/lockfile#29](https://github.com/npm/lockfile/pull/29) 2477 `lockfile@1.0.4`: 2478 Switches to `signal-exit` to detect abnormal exits and remove locks. 2479 ([@Redsandro](https://github.com/Redsandro)) 2480 2481### SHRONKWRAPS AND LACKFILES 2482 2483If a published modules had legacy `npm-shrinkwrap.json` we were saving 2484ordinary registry dependencies (`name@version`) to your `package-lock.json` 2485as `https://` URLs instead of versions. 2486 2487* [`89102c0d9`](https://github.com/npm/npm/commit/89102c0d995c3d707ff2b56995a97a1610f8b532) 2488 When saving the lock-file compute how the dependency is being required instead of using 2489 `_resolved` in the `package.json`. This fixes the bug that was converting 2490 registry dependencies into `https://` dependencies. 2491 ([@iarna](https://github.com/iarna)) 2492* [`676f1239a`](https://github.com/npm/npm/commit/676f1239ab337ff967741895dbe3a6b6349467b6) 2493 When encountering a `https://` URL in our lockfiles that point at our default registry, extract 2494 the version and use them as registry dependencies. This lets us heal 2495 `package-lock.json` files produced by 6.0.0 2496 ([@iarna](https://github.com/iarna)) 2497 2498### AUDIT AUDIT EVERYWHERE 2499 2500You can't use it _quite_ yet, but we do have a few last moment patches to `npm audit` to make 2501it even better when it is turned on! 2502 2503* [`b2e4f48f5`](https://github.com/npm/npm/commit/b2e4f48f5c07b8ebc94a46ce01a810dd5d6cd20c) 2504 Make sure we hide stream errors on background audit submissions. Previously some classes 2505 of error could end up being displayed (harmlessly) during installs. 2506 ([@iarna](https://github.com/iarna)) 2507* [`1fe0c7fea`](https://github.com/npm/npm/commit/1fe0c7fea226e592c96b8ab22fd9435e200420e9) 2508 Include session and scope in requests (as we do in other requests to the registry). 2509 ([@iarna](https://github.com/iarna)) 2510* [`d04656461`](https://github.com/npm/npm/commit/d046564614639c37e7984fff127c79a8ddcc0c92) 2511 Exit with non-zero status when vulnerabilities are found. So you can have `npm audit` as a test or prepublish step! 2512 ([@iarna](https://github.com/iarna)) 2513* [`fcdbcbacc`](https://github.com/npm/npm/commit/fcdbcbacc16d96a8696dde4b6d7c1cba77828337) 2514 Verify lockfile integrity before running. You'd get an error either way, but this way it's 2515 faster and can give you more concrete instructions on how to fix it. 2516 ([@iarna](https://github.com/iarna)) 2517* [`2ac8edd42`](https://github.com/npm/npm/commit/2ac8edd4248f2393b35896f0300b530e7666bb0e) 2518 Refuse to run in global mode. Audits require a lockfile and globals don't have one. Yet. 2519 ([@iarna](https://github.com/iarna)) 2520 2521### DOCUMENTATION IMPROVEMENTS 2522 2523* [`b7fca1084`](https://github.com/npm/npm/commit/b7fca1084b0be6f8b87ec0807c6daf91dbc3060a) 2524 [#20407](https://github.com/npm/npm/pull/20407) 2525 Update the lock-file spec doc to mention that we now generate the from field for `git`-type dependencies. 2526 ([@watilde](https://github.com/watilde)) 2527* [`7a6555e61`](https://github.com/npm/npm/commit/7a6555e618e4b8459609b7847a9e17de2d4fa36e) 2528 [#20408](https://github.com/npm/npm/pull/20408) 2529 Describe what the colors in outdated mean. 2530 ([@teameh](https://github.com/teameh)) 2531 2532### DEPENDENCY UPDATES 2533 2534* [`5e56b3209`](https://github.com/npm/npm/commit/5e56b3209c4719e3c4d7f0d9346dfca3881a5d34) 2535 `npm-audit-report@1.0.8` 2536 ([@evilpacket](https://github.com/evilpacket)) 2537* [`58a0b31b4`](https://github.com/npm/npm/commit/58a0b31b43245692b4de0f1e798fcaf71f8b7c31) 2538 `lock-verify@2.0.2` 2539 ([@iarna](https://github.com/iarna)) 2540* [`e7a8c364f`](https://github.com/npm/npm/commit/e7a8c364f3146ffb94357d8dd7f643e5563e2f2b) 2541 [zkat/pacote#148](https://github.com/zkat/pacote/pull/148) 2542 `pacote@8.1.1` 2543 ([@redonkulus](https://github.com/redonkulus)) 2544* [`46c0090a5`](https://github.com/npm/npm/commit/46c0090a517526dfec9b1b6483ff640227f0cd10) 2545 `tar@4.4.2` 2546 ([@isaacs](https://github.com/isaacs)) 2547* [`8a16db3e3`](https://github.com/npm/npm/commit/8a16db3e39715301fd085a8f4c80ae836f0ec714) 2548 `update-notifier@2.5.0` 2549 ([@alexccl](https://github.com/alexccl)) 2550* [`696375903`](https://github.com/npm/npm/commit/6963759032fe955c1404d362e14f458d633c9444) 2551 `safe-buffer@5.1.2` 2552 ([@feross](https://github.com/feross)) 2553* [`c949eb26a`](https://github.com/npm/npm/commit/c949eb26ab6c0f307e75a546f342bb2ec0403dcf) 2554 `query-string@6.1.0` 2555 ([@sindresorhus](https://github.com/sindresorhus)) 2556 2557## v6.0.0 (2018-04-20): 2558 2559Hey y'all! Here's another `npm@6` release -- with `node@10` around the corner, 2560this might well be the last prerelease before we tag `6.0.0`! There's two major 2561features included with this release, along with a few miscellaneous fixes and 2562changes. 2563 2564### EXTENDED `npm init` SCAFFOLDING 2565 2566Thanks to the wonderful efforts of [@jdalton](https://github.com/jdalton) of 2567lodash fame, `npm init` can now be used to invoke custom scaffolding tools! 2568 2569You can now do things like `npm init react-app` or `npm init esm` to scaffold an 2570npm package by running `create-react-app` and `create-esm`, respectively. This 2571also adds an `npm create` alias, to correspond to Yarn's `yarn create` feature, 2572which inspired this. 2573 2574* [`008a83642`](https://github.com/npm/npm/commit/008a83642e04360e461f56da74b5557d5248a726) [`ed81d1426`](https://github.com/npm/npm/commit/ed81d1426776bcac47492cabef43f65e1d4ab536) [`833046e45`](https://github.com/npm/npm/commit/833046e45fe25f75daffd55caf25599a9f98c148) 2575 [#20303](https://github.com/npm/npm/pull/20303) 2576 Add an `npm init` feature that calls out to `npx` when invoked with positional 2577 arguments. ([@jdalton](https://github.com/jdalton)) 2578 2579### DEPENDENCY AUDITING 2580 2581This version of npm adds a new command, `npm audit`, which will run a security 2582audit of your project's dependency tree and notify you about any actions you may 2583need to take. 2584 2585The registry-side services required for this command to work will be available 2586on the main npm registry in the coming weeks. Until then, you won't get much out 2587of trying to use this on the CLI. 2588 2589As part of this change, the npm CLI now sends scrubbed and cryptographically 2590anonymized metadata about your dependency tree to your configured registry, to 2591allow notifying you about the existence of critical security flaws. For details 2592about how the CLI protects your privacy when it shares this metadata, see `npm 2593help audit`, or [read the docs for `npm audit` 2594online](https://github.com/npm/npm/blob/release-next/doc/cli/npm-audit.md). You 2595can disable this altogether by doing `npm config set audit false`, but will no 2596longer benefit from the service. 2597 2598* [`f4bc648ea`](https://github.com/npm/npm/commit/f4bc648ea7b19d63cc9878c9da2cb1312f6ce152) 2599 [#20389](https://github.com/npm/npm/pull/20389) 2600 `npm-registry-fetch@1.1.0` 2601 ([@iarna](https://github.com/iarna)) 2602* [`594d16987`](https://github.com/npm/npm/commit/594d16987465014d573c51a49bba6886cc19f8e8) 2603 [#20389](https://github.com/npm/npm/pull/20389) 2604 `npm-audit-report@1.0.5` 2605 ([@iarna](https://github.com/iarna)) 2606* [`8c77dde74`](https://github.com/npm/npm/commit/8c77dde74a9d8f9007667cd1732c3329e0d52617) [`1d8ac2492`](https://github.com/npm/npm/commit/1d8ac2492196c4752b2e41b23d5ddc92780aaa24) [`552ff6d64`](https://github.com/npm/npm/commit/552ff6d64a5e3bcecb33b2a861c49a3396adad6d) [`09c734803`](https://github.com/npm/npm/commit/09c73480329e75e44fb8e55ca522f798be68d448) 2607 [#20389](https://github.com/npm/npm/pull/20389) 2608 Add new `npm audit` command. 2609 ([@iarna](https://github.com/iarna)) 2610* [`be393a290`](https://github.com/npm/npm/commit/be393a290a5207dc75d3d70a32973afb3322306c) 2611 [#20389](https://github.com/npm/npm/pull/20389) 2612 Temporarily suppress git metadata till there's an opt-in. 2613 ([@iarna](https://github.com/iarna)) 2614* [`8e713344f`](https://github.com/npm/npm/commit/8e713344f6e0828ddfb7733df20d75e95a5382d8) 2615 [#20389](https://github.com/npm/npm/pull/20389) 2616 Document the new command. 2617 ([@iarna](https://github.com/iarna)) 2618* 2619 [#20389](https://github.com/npm/npm/pull/20389) 2620 Default audit to off when running the npm test suite itself. 2621 ([@iarna](https://github.com/iarna)) 2622 2623### MORE `package-lock.json` FORMAT CHANGES?! 2624 2625* [`820f74ae2`](https://github.com/npm/npm/commit/820f74ae22b7feb875232d46901cc34e9ba995d6) 2626 [#20384](https://github.com/npm/npm/pull/20384) 2627 Add `from` field back into package-lock for git dependencies. This will give 2628 npm the information it needs to figure out whether git deps are valid, 2629 specially when running with legacy install metadata or in 2630 `--package-lock-only` mode when there's no `node_modules`. This should help 2631 remove a significant amount of git-related churn on the lock-file. 2632 ([@zkat](https://github.com/zkat)) 2633 2634### BUGFIXES 2635 2636* [`9d5d0a18a`](https://github.com/npm/npm/commit/9d5d0a18a5458655275056156b5aa001140ae4d7) 2637 [#20358](https://github.com/npm/npm/pull/20358) 2638 `npm install-test` (aka `npm it`) will no longer generate `package-lock.json` 2639 when running with `--no-package-lock` or `package-lock=false`. 2640 ([@raymondfeng](https://github.com/raymondfeng)) 2641* [`e4ed976e2`](https://github.com/npm/npm/commit/e4ed976e20b7d1114c920a9dc9faf351f89a31c9) 2642 [`2facb35fb`](https://github.com/npm/npm/commit/2facb35fbfbbc415e693d350b67413a66ff96204) 2643 [`9c1eb945b`](https://github.com/npm/npm/commit/9c1eb945be566e24cbbbf186b0437bdec4be53fc) 2644 [#20390](https://github.com/npm/npm/pull/20390) 2645 Fix a scenario where a git dependency had a comittish associated with it 2646 that was not a complete commitid. `npm` would never consider that entry 2647 in the `package.json` as matching the entry in the `package-lock.json` and 2648 this resulted in inappropriate pruning or reinstallation of git 2649 dependencies. This has been addressed in two ways, first, the addition of the 2650 `from` field as described in [#20384](https://github.com/npm/npm/pull/20384) means 2651 we can exactly match the `package.json`. Second, when that's missing (when working with 2652 older `package-lock.json` files), we assume that the match is ok. (If 2653 it's not, we'll fix it up when a real installation is done.) 2654 ([@iarna](https://github.com/iarna)) 2655 2656 2657### DEPENDENCIES 2658 2659* [`1c1f89b73`](https://github.com/npm/npm/commit/1c1f89b7319b2eef6adee2530c4619ac1c0d83cf) 2660 `libnpx@10.2.0` 2661 ([@zkat](https://github.com/zkat)) 2662* [`242d8a647`](https://github.com/npm/npm/commit/242d8a6478b725778c00be8ba3dc85f367006a61) 2663 `pacote@8.1.0` 2664 ([@zkat](https://github.com/zkat)) 2665 2666### DOCS 2667 2668* [`a1c77d614`](https://github.com/npm/npm/commit/a1c77d614adb4fe6769631b646b817fd490d239c) 2669 [#20331](https://github.com/npm/npm/pull/20331) 2670 Fix broken link to 'private-modules' page. The redirect went away when the new 2671 npm website went up, but the new URL is better anyway. 2672 ([@vipranarayan14](https://github.com/vipranarayan14)) 2673* [`ad7a5962d`](https://github.com/npm/npm/commit/ad7a5962d758efcbcfbd9fda9a3d8b38ddbf89a1) 2674 [#20279](https://github.com/npm/npm/pull/20279) 2675 Document the `--if-present` option for `npm run-script`. 2676 ([@aleclarson](https://github.com/aleclarson)) 2677 2678## v6.0.0-next.1 (2018-04-12): 2679 2680### NEW FEATURES 2681 2682* [`a9e722118`](https://github.com/npm/npm/commit/a9e7221181dc88e14820d0677acccf0648ac3c5a) 2683 [#20256](https://github.com/npm/npm/pull/20256) 2684 Add support for managing npm webhooks. This brings over functionality 2685 previously provided by the [`wombat`](https://www.npmjs.com/package/wombat) CLI. 2686 ([@zkat](https://github.com/zkat)) 2687* [`8a1a64203`](https://github.com/npm/npm/commit/8a1a64203cca3f30999ea9e160eb63662478dcee) 2688 [#20126](https://github.com/npm/npm/pull/20126) 2689 Add `npm cit` command that's equivalent of `npm ci && npm t` that's equivalent of `npm it`. 2690 ([@SimenB](https://github.com/SimenB)) 2691* [`fe867aaf1`](https://github.com/npm/npm/commit/fe867aaf19e924322fe58ed0cf0a570297a96559) 2692 [`49d18b4d8`](https://github.com/npm/npm/commit/49d18b4d87d8050024f8c5d7a0f61fc2514917b1) 2693 [`ff6b31f77`](https://github.com/npm/npm/commit/ff6b31f775f532bb8748e8ef85911ffb35a8c646) 2694 [`78eab3cda`](https://github.com/npm/npm/commit/78eab3cdab6876728798f876d569badfc74ce68f) 2695 The `requires` field in your lock-file will be upgraded to use ranges from 2696 versions on your first use of npm. 2697 ([@iarna](https://github.com/iarna)) 2698* [`cf4d7b4de`](https://github.com/npm/npm/commit/cf4d7b4de6fa241a656e58f662af0f8d7cd57d21) 2699 [#20257](https://github.com/npm/npm/pull/20257) 2700 Add shasum and integrity to the new `npm view` output. 2701 ([@zkat](https://github.com/zkat)) 2702 2703### BUG FIXES 2704 2705* [`685764308`](https://github.com/npm/npm/commit/685764308e05ff0ddb9943b22ca77b3a56d5c026) 2706 Fix a bug where OTPs passed in via the commandline would have leading 2707 zeros deleted resulted in authentication failures. 2708 ([@iarna](https://github.com/iarna)) 2709* [`8f3faa323`](https://github.com/npm/npm/commit/8f3faa3234b2d2fcd2cb05712a80c3e4133c8f45) 2710 [`6800f76ff`](https://github.com/npm/npm/commit/6800f76ffcd674742ba8944f11f6b0aa55f4b612) 2711 [`ec90c06c7`](https://github.com/npm/npm/commit/ec90c06c78134eb2618612ac72288054825ea941) 2712 [`825b5d2c6`](https://github.com/npm/npm/commit/825b5d2c60e620da5459d9dc13d4f911294a7ec2) 2713 [`4785f13fb`](https://github.com/npm/npm/commit/4785f13fb69f33a8c624ecc8a2be5c5d0d7c94fc) 2714 [`bd16485f5`](https://github.com/npm/npm/commit/bd16485f5b3087625e13773f7251d66547d6807d) 2715 Restore the ability to bundle dependencies that are uninstallable from the 2716 registry. This also eliminates needless registry lookups for bundled 2717 dependencies. 2718 2719 Fixed a bug where attempting to install a dependency that is bundled 2720 inside another module without reinstalling that module would result in 2721 ENOENT errors. 2722 ([@iarna](https://github.com/iarna)) 2723* [`429498a8c`](https://github.com/npm/npm/commit/429498a8c8d4414bf242be6a3f3a08f9a2adcdf9) 2724 [#20029](https://github.com/npm/npm/pull/20029) 2725 Allow packages with non-registry specifiers to follow the fast path that 2726 the we use with the lock-file for registry specifiers. This will improve install time 2727 especially when operating only on the package-lock (`--package-lock-only`). 2728 ([@zkat](https://github.com/zkat)) 2729 2730 Fix the a bug where `npm i --only=prod` could remove development 2731 dependencies from lock-file. 2732 ([@iarna](https://github.com/iarna)) 2733* [`834b46ff4`](https://github.com/npm/npm/commit/834b46ff48ade4ab4e557566c10e83199d8778c6) 2734 [#20122](https://github.com/npm/npm/pull/20122) 2735 Improve the update-notifier messaging (borrowing ideas from pnpm) and 2736 eliminate false positives. 2737 ([@zkat](https://github.com/zkat)) 2738* [`f9de7ef3a`](https://github.com/npm/npm/commit/f9de7ef3a1089ceb2610cd27bbd4b4bc2979c4de) 2739 [#20154](https://github.com/npm/npm/pull/20154) 2740 Let version succeed when `package-lock.json` is gitignored. 2741 ([@nwoltman](https://github.com/nwoltman)) 2742* [`f8ec52073`](https://github.com/npm/npm/commit/f8ec520732bda687bc58d9da0873dadb2d65ca96) 2743 [#20212](https://github.com/npm/npm/pull/20212) 2744 Ensure that we only create an `etc` directory if we are actually going to write files to it. 2745 ([@buddydvd](https://github.com/buddydvd)) 2746* [`ab489b753`](https://github.com/npm/npm/commit/ab489b75362348f412c002cf795a31dea6420ef0) 2747 [#20140](https://github.com/npm/npm/pull/20140) 2748 Note in documentation that `package-lock.json` version gets touched by `npm version`. 2749 ([@srl295](https://github.com/srl295)) 2750* [`857c2138d`](https://github.com/npm/npm/commit/857c2138dae768ea9798782baa916b1840ab13e8) 2751 [#20032](https://github.com/npm/npm/pull/20032) 2752 Fix bug where unauthenticated errors would get reported as both 404s and 2753 401s, i.e. `npm ERR! 404 Registry returned 401`. In these cases the error 2754 message will now be much more informative. 2755 ([@iarna](https://github.com/iarna)) 2756* [`d2d290bca`](https://github.com/npm/npm/commit/d2d290bcaa85e44a4b08cc40cb4791dd4f81dfc4) 2757 [#20082](https://github.com/npm/npm/pull/20082) 2758 Allow optional @ prefix on scope with `npm team` commands for parity with other commands. 2759 ([@bcoe](https://github.com/bcoe)) 2760* [`b5babf0a9`](https://github.com/npm/npm/commit/b5babf0a9aa1e47fad8a07cc83245bd510842047) 2761 [#19580](https://github.com/npm/npm/pull/19580) 2762 Improve messaging when two-factor authentication is required while publishing. 2763 ([@jdeniau](https://github.com/jdeniau)) 2764* [`471ee1c5b`](https://github.com/npm/npm/commit/471ee1c5b58631fe2e936e32480f3f5ed6438536) 2765 [`0da38b7b4`](https://github.com/npm/npm/commit/0da38b7b4aff0464c60ad12e0253fd389efd5086) 2766 Fix a bug where optional status of a dependency was not being saved to 2767 the package-lock on the initial install. 2768 ([@iarna](https://github.com/iarna)) 2769* [`b3f98d8ba`](https://github.com/npm/npm/commit/b3f98d8ba242a7238f0f9a90ceea840b7b7070af) 2770 [`9dea95e31`](https://github.com/npm/npm/commit/9dea95e319169647bea967e732ae4c8212608f53) 2771 Ensure that `--no-optional` does not remove optional dependencies from the lock-file. 2772 ([@iarna](https://github.com/iarna)) 2773 2774### MISCELLANEOUS 2775 2776* [`ec6b12099`](https://github.com/npm/npm/commit/ec6b120995c9c1d17ff84bf0217ba5741365af2d) 2777 Exclude all tests from the published version of npm itself. 2778 ([@iarna](https://github.com/iarna)) 2779 2780### DEPENDENCY UPDATES 2781 2782* [`73dc97455`](https://github.com/npm/npm/commit/73dc974555217207fb384e39d049da19be2f79ba) 2783 [zkat/cipm#46](https://github.com/zkat/cipm/pull/46) 2784 `libcipm@1.6.2`: 2785 Detect binding.gyp for default install lifecycle. Let's `npm ci` work on projects that 2786 have their own C code. 2787 ([@caleblloyd](https://github.com/caleblloyd)) 2788* [`77c3f7a00`](https://github.com/npm/npm/commit/77c3f7a0091f689661f61182cd361465e2d695d5) 2789 `iferr@1.0.0` 2790* [`dce733e37`](https://github.com/npm/npm/commit/dce733e37687c21cb1a658f06197c609ac39c793) 2791 [zkat/json-parse-better-errors#1](https://github.com/zkat/json-parse-better-errors/pull/1) 2792 `json-parse-better-errors@1.0.2` 2793 ([@Hoishin](https://github.com/Hoishin)) 2794* [`c52765ff3`](https://github.com/npm/npm/commit/c52765ff32d195842133baf146d647760eb8d0cd) 2795 `readable-stream@2.3.6` 2796 ([@mcollina](https://github.com/mcollina)) 2797* [`e160adf9f`](https://github.com/npm/npm/commit/e160adf9fce09f226f66e0892cc3fa45f254b5e8) 2798 `update-notifier@2.4.0` 2799 ([@sindersorhus](https://github.com/sindersorhus)) 2800* [`9a9d7809e`](https://github.com/npm/npm/commit/9a9d7809e30d1add21b760804be4a829e3c7e39e) 2801 `marked@0.3.1` 2802 ([@joshbruce](https://github.com/joshbruce)) 2803* [`f2fbd8577`](https://github.com/npm/npm/commit/f2fbd857797cf5c12a68a6fb0ff0609d373198b3) 2804 [#20256](https://github.com/npm/npm/pull/20256) 2805 `figgy-pudding@2.0.1` 2806 ([@zkat](https://github.com/zkat)) 2807* [`44972d53d`](https://github.com/npm/npm/commit/44972d53df2e0f0cc22d527ac88045066205dbbf) 2808 [#20256](https://github.com/npm/npm/pull/20256) 2809 `libnpmhook@3.0.0` 2810 ([@zkat](https://github.com/zkat)) 2811* [`cfe562c58`](https://github.com/npm/npm/commit/cfe562c5803db08a8d88957828a2cd1cc51a8dd5) 2812 [#20276](https://github.com/npm/npm/pull/20276) 2813 `node-gyp@3.6.2` 2814* [`3c0bbcb8e`](https://github.com/npm/npm/commit/3c0bbcb8e5440a3b90fabcce85d7a1d31e2ecbe7) 2815 [zkat/npx#172](https://github.com/zkat/npx/pull/172) 2816 `libnpx@10.1.1` 2817 ([@jdalton](https://github.com/jdalton)) 2818* [`0573d91e5`](https://github.com/npm/npm/commit/0573d91e57c068635a3ad4187b9792afd7b5e22f) 2819 [zkat/cacache#128](https://github.com/zkat/cacache/pull/128) 2820 `cacache@11.0.1` 2821 ([@zkat](https://github.com/zkat)) 2822* [`396afa99f`](https://github.com/npm/npm/commit/396afa99f61561424866d5c8dd7aedd6f91d611a) 2823 `figgy-pudding@3.1.0` 2824 ([@zkat](https://github.com/zkat)) 2825* [`e7f869c36`](https://github.com/npm/npm/commit/e7f869c36ec1dacb630e5ab749eb3bb466193f01) 2826 `pacote@8.0.0` 2827 ([@zkat](https://github.com/zkat)) 2828* [`77dac72df`](https://github.com/npm/npm/commit/77dac72dfdb6add66ec859a949b1d2d788a379b7) 2829 `ssri@6.0.0` 2830 ([@zkat](https://github.com/zkat)) 2831* [`0b802f2a0`](https://github.com/npm/npm/commit/0b802f2a0bfa15c6af8074ebf9347f07bccdbcc7) 2832 `retry@0.12.0` 2833 ([@iarna](https://github.com/iarna)) 2834* [`4781b64bc`](https://github.com/npm/npm/commit/4781b64bcc47d4e7fb7025fd6517cde044f6b5e1) 2835 `libnpmhook@4.0.1` 2836 ([@zkat](https://github.com/zkat)) 2837* [`7bdbaeea6`](https://github.com/npm/npm/commit/7bdbaeea61853280f00c8443a3b2d6e6b893ada9) 2838 `npm-package-arg@6.1.0` 2839 ([@zkat](https://github.com/zkat)) 2840* [`5f2bf4222`](https://github.com/npm/npm/commit/5f2bf4222004117eb38c44ace961bd15a779fd66) 2841 `read-package-tree@5.2.1` 2842 ([@zkat](https://github.com/zkat)) 2843 2844## v6.0.0-0 (2018-03-23): 2845 2846Sometimes major releases are a big splash, sometimes they're something 2847smaller. This is the latter kind. That said, we expect to keep this in 2848release candidate status until Node 10 ships at the end of April. There 2849will likely be a few more features for the 6.0.0 release line between now 2850and then. We do expect to have a bigger one later this year though, so keep 2851an eye out for `npm@7`! 2852 2853### *BREAKING* AVOID DEPRECATED 2854 2855When selecting versions to install, we now avoid deprecated versions if 2856possible. For example: 2857 2858``` 2859Module: example 2860Versions: 28611.0.0 28621.1.0 28631.1.2 28641.1.3 (deprecated) 28651.2.0 (latest) 2866``` 2867 2868If you ask `npm` to install `example@~1.1.0`, `npm` will now give you `1.1.2`. 2869 2870By contrast, if you installed `example@~1.1.3` then you'd get `1.1.3`, as 2871it's the only version that can match the range. 2872 2873* [`78bebc0ce`](https://github.com/npm/npm/commit/78bebc0cedc4ce75c974c47b61791e6ca1ccfd7e) 2874 [#20151](https://github.com/npm/npm/pull/20151) 2875 Skip deprecated versions when possible. 2876 ([@zkat](https://github.com/zkat)) 2877 2878### *BREAKING* UPDATE AND OUTDATED 2879 2880When `npm install` is finding a version to install, it first checks to see 2881if the specifier you requested matches the `latest` tag. If it doesn't, 2882then it looks for the highest version that does. This means you can do 2883release candidates on tags other than `latest` and users won't see them 2884unless they ask for them. Promoting them is as easy as setting the `latest` 2885tag to point at them. 2886 2887Historically `npm update` and `npm outdated` worked differently. They just 2888looked for the most recent thing that matched the semver range, disregarding 2889the `latest` tag. We're changing it to match `npm install`'s behavior. 2890 2891* [`3aaa6ef42`](https://github.com/npm/npm/commit/3aaa6ef427b7a34ebc49cd656e188b5befc22bae) 2892 Make update and outdated respect latest interaction with semver as install does. 2893 ([@iarna](https://github.com/iarna)) 2894* [`e5fbbd2c9`](https://github.com/npm/npm/commit/e5fbbd2c999ab9c7ec15b30d8b4eb596d614c715) 2895 `npm-pick-manifest@2.1.0` 2896 ([@iarna](https://github.com/iarna)) 2897 2898### PLUS ONE SMALLER PATCH 2899 2900Technically this is a bug fix, but the change in behavior is enough of an 2901edge case that I held off on bringing it in until a major version. 2902 2903When we extract a binary and it starts with a shebang (or "hash bang"), that 2904is, something like: 2905 2906``` 2907#!/usr/bin/env node 2908``` 2909 2910If the file has Windows line endings we strip them off of the first line. 2911The reason for this is that shebangs are only used in Unix-like environments 2912and the files with them can't be run if the shebang has a Windows line ending. 2913 2914Previously we converted ALL line endings from Windows to Unix. With this 2915patch we only convert the line with the shebang. (Node.js works just fine 2916with either set of line endings.) 2917 2918* [`814658371`](https://github.com/npm/npm/commit/814658371bc7b820b23bc138e2b90499d5dda7b1) 2919 [`7265198eb`](https://github.com/npm/npm/commit/7265198ebb32d35937f4ff484b0167870725b054) 2920 `bin-links@1.1.2`: 2921 Only rewrite the CR after a shebang (if any) when fixing up CR/LFs. 2922 ([@iarna](https://github.com/iarna)) 2923 2924### *BREAKING* SUPPORTED NODE VERSIONS 2925 2926Per our supported Node.js policy, we're dropping support for both Node 4 and 2927Node 7, which are no longer supported by the Node.js project. 2928 2929* [`077cbe917`](https://github.com/npm/npm/commit/077cbe917930ed9a0c066e10934d540e1edb6245) 2930 Drop support for Node 4 and Node 7. 2931 ([@iarna](https://github.com/iarna)) 2932 2933### DEPENDENCIES 2934 2935* [`478fbe2d0`](https://github.com/npm/npm/commit/478fbe2d0bce1534b1867e0b80310863cfacc01a) 2936 `iferr@1.0.0` 2937* [`b18d88178`](https://github.com/npm/npm/commit/b18d88178a4cf333afd896245a7850f2f5fb740b) 2938 `query-string@6.0.0` 2939* [`e02fa7497`](https://github.com/npm/npm/commit/e02fa7497f89623dc155debd0143aa54994ace74) 2940 `is-cidr@2.0.5` 2941* [`c8f8564be`](https://github.com/npm/npm/commit/c8f8564be6f644e202fccd9e3de01d64f346d870) 2942 [`311e55512`](https://github.com/npm/npm/commit/311e5551243d67bf9f0d168322378061339ecff8) 2943 `standard@11.0.1` 2944