1## 6.14.16 (2022-01-19) 2 3### CHORE 4 5* [`0afe4f12f`](https://github.com/npm/cli/commit/0afe4f12f6b69f8fa6d39451b6e684fbef5fe1e2) 6 update one-time password prompt 7 ([@ruyadorno](https://github.com/ruyadorno)) 8 9### DEPENDENCIES 10 11* [`2c534f801`](https://github.com/npm/cli/commit/2c534f801b87d6b8d6c534d326ca39654e313fe9) 12 `json-schema@0.4.0` 13 14 15## 6.14.15 (2021-08-23) 16 17### DEPENDENCIES 18 19* [`8160e6e4b`](https://github.com/npm/cli/commit/8160e6e4b58c0f76e720183f2057e26c6d9d8470) 20 `path-parse@1.0.7` 21* [`3079f5038`](https://github.com/npm/cli/commit/3079f503896323ab10bfad5bbdb7fe5ca9207d4b) 22 `tar@4.4.1` 23 24## 6.14.14 (2021-07-27) 25 26### DEPENDENCIES 27 28* [`4627c0670`](https://github.com/npm/cli/commit/4627c0670957ee5c5e8506750f4626493aabdc25) 29 `tar@4.4.15` 30 31## 6.14.13 (2021-04-08) 32 33### DEPENDENCIES 34 35* [`285ab3f65`](https://github.com/npm/cli/commit/285ab3f654882860246f729eb52e2c8c6a6d6e01) 36 `hosted-git-info@2.8.9` 37* [`63b5c56c5`](https://github.com/npm/cli/commit/63b5c56c5203c8965c8ddeff28f2a65010b40b7c) 38 `ssri@6.0.2` 39 40## 6.14.12 (2021-03-25) 41 42### DEPENDENCIES 43 44* [`e47654048`](https://github.com/npm/cli/commit/e4765404844a0b6795752b2bc6f9b9107fe713be) 45 [#2737](https://github.com/npm/cli/pull/2737) 46 Update y18n to fix CVE-2020-7774 47 ([@vecerek](https://github.com/vecerek)) 48 49## 6.14.11 (2021-01-07) 50### DEPENDENCIES 51 52* [`19108ca5b`](https://github.com/npm/cli/commit/19108ca5be1b3e7e9787dac3131aafe2722c6218) 53 `ini@1.3.8`: 54 * addressing [`CVE-2020-7788`](https://github.com/advisories/GHSA-qqgx-2p2h-9c37) 55* [`7a0574074`](https://github.com/npm/cli/commit/7a05740743ac9d9229e2dc9e1b9ca8b57d58c789) 56 `bl@3.0.1` 57 * addressing [`CVE-2020-8244`](https://github.com/advisories/GHSA-pp7h-53gx-mx7r) 58 59## 6.14.10 (2020-12-18) 60 61### DEPENDENCIES 62 63* [`906d647e1`](https://github.com/npm/cli/commit/906d647e1cacd74243abcacba3bade80437f30f5) 64`opener@1.5.2` 65 * fixes: [`#36445`](https://github.com/nodejs/node/issues/36445) addressing 66[`GHSL-2020-145`](https://securitylab.github.com/advisories/GHSL-2020-145-domenic-opener) 67 68## 6.14.9 (2020-11-20) 69 70### BUG FIXES 71* [`4a91e48aa`](https://github.com/npm/cli/commit/4a91e48aa92be5b2739ebcdd8a9a841ff5cb6817) 72 fix: docs generation breaking builds 73 74### DEPENDDENCIES 75* [`ab80a7cf0`](https://github.com/npm/cli/commit/ab80a7cf092d52f4b055cc6d03c38b6115c4b582) 76 `npm-user-validate@1.0.1` 77 * dep update to resolve security issue [GHSA-xgh6-85xh-479p](https://github.com/advisories/GHSA-xgh6-85xh-479p) 78* [`6b2ab9d53`](https://github.com/npm/cli/commit/6b2ab9d532ef8ffce326f4caa23eb27f83765acd) 79 `har-validator@5.1.5` 80 * dep update to resolve security issue [SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) 81 82## 6.14.8 (2020-08-17) 83 84### BUG FIXES 85* [`9262e8c88`](https://github.com/npm/cli/commit/9262e8c88f2f828206423928b8e21eea67f4801a) 86 [#1575](https://github.com/npm/cli/pull/1575) 87 npm install --dev deprecation message 88 ([@sandratatarevicova](https://github.com/sandratatarevicova)) 89* [`765cfe0bc`](https://github.com/npm/cli/commit/765cfe0bc05a10b72026291ff0ca7c9ca5cb3f57) 90 [#1658](https://github.com/npm/cli/issues/1658) 91 remove unused broken require 92 ([@aduh95](https://github.com/aduh95)) 93* [`4e28de79a`](https://github.com/npm/cli/commit/4e28de79a3a0aacc7603010a592beb448ceb6f5f) 94 [#1663](https://github.com/npm/cli/pull/1663) 95 Do not send user secret in the referer header 96 ([@assapir](https://github.com/assapir)) 97 98### DOCUMENTATION 99* [`8abdf30c9`](https://github.com/npm/cli/commit/8abdf30c95ec90331456f3f2ed78e2703939bb74) 100 [#1572](https://github.com/npm/cli/pull/1572) 101 docs: add missing metadata in semver page 102 ([@tripu](https://github.com/tripu)) 103* [`8cedcca46`](https://github.com/npm/cli/commit/8cedcca464ced5aab58be83dd5049c3df13384de) 104 [#1614](https://github.com/npm/cli/pull/1614) 105 Node-gyp supports both Python and legacy Python 106 ([@cclauss](https://github.com/cclauss)) 107 108### DEPENDENCIES 109* [`a303b75fd`](https://github.com/npm/cli/commit/a303b75fd7c4b2644da02ad2ad46d80dfceec3c5) 110 `update-notifier@2.5.0` 111* [`c48600832`](https://github.com/npm/cli/commit/c48600832aff4cc349f59997e08dc4bbde15bd49) 112 `npm-registry-fetch@4.0.7` 113* [`a6e9fc4df`](https://github.com/npm/cli/commit/a6e9fc4df7092ba3eb5394193638b33c24855c36) 114 `meant@1.0.2`: 115 116## 6.14.7 (2020-07-21) 117 118### BUG FIXES 119* [`de5108836`](https://github.com/npm/cli/commit/de5108836189bddf28d4d3542f9bd5869cc5c2e9) [#784](https://github.com/npm/cli/pull/784) npm explore spawn shell correctly ([@jasisk](https://github.com/jasisk)) 120* [`36e6c01d3`](https://github.com/npm/cli/commit/36e6c01d334c4db75018bc6a4a0bef726fd41ce4) git tag handling regression on shrinkwrap ([@claudiahdz](https://github.com/claudiahdz)) 121* [`1961c9369`](https://github.com/npm/cli/commit/1961c9369c92bf8fe530cecba9834ca3c7f5567c) [#288](https://github.com/npm/cli/pull/288) Fix package id in shrinkwrap lifecycle step output ([@bz2](https://github.com/bz2)) 122* [`87888892a`](https://github.com/npm/cli/commit/87888892a1282cc3edae968c3ae4ec279189271c) [#1009](https://github.com/npm/cli/pull/1009) gracefully handle error during npm install ([@danielleadams](https://github.com/danielleadams)) 123* [`6fe2bdc25`](https://github.com/npm/cli/commit/6fe2bdc25e7961956e5c0067fa4db54ff1bd0dbd) [#1547](https://github.com/npm/cli/pull/1547) npm ls --parseable --long output ([@ruyadorno](https://github.com/ruyadorno)) 124 125### DEPENDENCIES 126* [`2d78481c7`](https://github.com/npm/cli/commit/2d78481c7ec178e628ce23df940f73a05d5c6367) update mkdirp on tacks ([@claudiahdz](https://github.com/claudiahdz)) 127* [`4e129d105`](https://github.com/npm/cli/commit/4e129d105eba3b12d474caa6e5ca216a98deb75a) uninstall npm-registry-couchapp ([@claudiahdz](https://github.com/claudiahdz)) 128* [`8e1869e27`](https://github.com/npm/cli/commit/8e1869e278d1dd37ddefd6b4e961d1bb17fc9d09) update marked dev dep ([@claudiahdz](https://github.com/claudiahdz)) 129* [`6a6151f37`](https://github.com/npm/cli/commit/6a6151f377063c6aca852c859c01910edd235ec6) `libnpx@10.2.4` ([@claudiahdz](https://github.com/claudiahdz)) 130* [`dc21422eb`](https://github.com/npm/cli/commit/dc21422eb1ca1a4a19f160fad0e924566e08c496) `bin-links@1.1.8` ([@claudiahdz](https://github.com/claudiahdz)) 131* [`d341f88ce`](https://github.com/npm/cli/commit/d341f88ce6feb3df1dcb37f34910fcc6c1db85f2) `gentle-fs@2.3.1` ([@claudiahdz](https://github.com/claudiahdz)) 132* [`3e168d49b`](https://github.com/npm/cli/commit/3e168d49b41574809cae2ad013776a00d3f20ff4) `libcipm@4.0.8` ([@claudiahdz](https://github.com/claudiahdz)) 133* [`6ae942a51`](https://github.com/npm/cli/commit/6ae942a510520b7dff11b5b78eebeff1706e38af) `npm-audit-report@1.3.3` ([@claudiahdz](https://github.com/claudiahdz)) 134* [`6a35e3dee`](https://github.com/npm/cli/commit/6a35e3deec275bf2ae76603acd424a0640458047) `npm-lifecycle@3.1.5` ([@claudiahdz](https://github.com/claudiahdz)) 135 136## 6.14.6 (2020-07-07) 137 138### BUG FIXES 139* [`a9857b8f6`](https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc) chore: remove auth info from logs ([@claudiahdz](https://github.com/claudiahdz)) 140* [`b7ad77598`](https://github.com/npm/cli/commit/b7ad77598112908d60195d0fbc472b3c84275fd5) [#1416](https://github.com/npm/cli/pull/1416) fix: wrong `npm doctor` command result ([@vanishcode](https://github.com/vanishcode)) 141 142### DEPENDENCIES 143* [`94eca6377`](https://github.com/npm/cli/commit/94eca637756376b949edfb697e179a1fdcc231ee) `npm-registry-fetch@4.0.5` ([@claudiahdz](https://github.com/claudiahdz)) 144* [`c49b6ae28`](https://github.com/npm/cli/commit/c49b6ae28791ff7184288be16654f97168aa9705) [#1418](https://github.com/npm/cli/pull/1418) `spdx-license-ids@3.0.5` ([@kemitchell](https://github.com/kemitchell)) 145 146### DOCUMENTATION 147* [`2e052984b`](https://github.com/npm/cli/commit/2e052984b08c09115ed75387fb2c961631d85d77) 148 [#1459](https://github.com/npm/cli/pull/1459) 149 chore(docs): fixed links to cli commands ([@claudiahdz](https://github.com/claudiahdz)) 150* [`0ca3509ca`](https://github.com/npm/cli/commit/0ca3509ca940865392daeeabb39192f7d5af9f5e) 151 [#1283](https://github.com/npm/cli/pull/1283) Update npm-link.md ([@peterfich](https://github.com/peterfich)) 152* [`3dd429e9a`](https://github.com/npm/cli/commit/3dd429e9aad760ce2ff9e522b34ebfebd85b460c) 153 [#1377](https://github.com/npm/cli/pull/1377) 154 Add note about dropped `*` filenames ([@maxwellgerber](https://github.com/maxwellgerber)) 155* [`9a2e2e797`](https://github.com/npm/cli/commit/9a2e2e797e5c91e7f4f261583a1906e2c440cc2f) 156 [#1429](https://github.com/npm/cli/pull/1429) Fix typo ([@seanpoulter](https://github.com/seanpoulter)) 157 158## 6.14.5 (2020-05-01) 159 160### BUG FIXES 161 162* [`33ec41f18`](https://github.com/npm/cli/commit/33ec41f18f557146607cb14a7a38c707fce6d42c) [#758](https://github.com/npm/cli/pull/758) fix: relativize file links when inflating shrinkwrap ([@jsnajdr](https://github.com/jsnajdr)) 163* [`94ed456df`](https://github.com/npm/cli/commit/94ed456dfb0b122fd4192429024f034d06c3c454) [#1162](https://github.com/npm/cli/pull/1162) fix: npm init help output ([@mum-never-proud](https://github.com/mum-never-proud)) 164 165### DEPENDENCIES 166 167* [`5587ac01f`](https://github.com/npm/cli/commit/5587ac01ffd0d2ea830a6bbb67bb34a611ffc409) `npm-registry-fetch@4.0.4` 168 * [`fc5d94c39`](https://github.com/npm/npm-registry-fetch/commit/fc5d94c39ca218d78df77249ab3a6bf1d9ed9db1) fix: removed default timeout 169* [`07a4d8884`](https://github.com/npm/cli/commit/07a4d8884448359bac485a49c05fd2d23d06834b) `graceful-fs@4.2.4` 170* [`8228d1f2e`](https://github.com/npm/cli/commit/8228d1f2e427ad9adee617266108acd1ee39b4a5) `mkdirp@0.5.5` 171* [`e6d208317`](https://github.com/npm/cli/commit/e6d20831740a84aea766da2a2913cf82a4d56ada) `nopt@4.0.3` 172 173## 6.14.4 (2020-03-24) 174 175### DEPENDENCIES 176 177* Bump `minimist@1.2.5` transitive dep to resolve security issue 178 * [`9c554fd8c`](https://github.com/npm/cli/commit/9c554fd8cd1e9aeb8eb122ccfa3c78d12af4097a) `update-notifier@2.5.0` 179 * bump `deep-extend@1.2.5` 180 * bump `deep-extend@0.6.0` 181 * bump `is-ci@1.2.1` 182 * bump `is-retry-allowed@1.2.0` 183 * bump `rc@1.2.8` 184 * bump `registry-auth-token@3.4.0` 185 * bump `widest-line@2.0.1` 186* [`136832dca`](https://github.com/npm/cli/commit/136832dcae13cb5518b1fe17bd63ea9b2a195f92) `mkdirp@0.5.4` 187* [`8bf99b2b5`](https://github.com/npm/cli/commit/8bf99b2b58c14d45dc6739fce77de051ebc8ffb7) [#1053](https://github.com/npm/cli/pull/1053) deps: updates term-size to use signed binary 188 * [`d2f08a1bdb`](https://github.com/nodejs/node/commit/d2f08a1bdb78655c4a3fc49825986c148d14117e) ([@rvagg](https://github.com/rvagg)) 189 190## 6.14.3 (2020-03-19) 191 192### DOCUMENTATION 193 194* [`4ad221487`](https://github.com/npm/cli/commit4ad2214873cddfd4a0eff1bd188516b08fae9f9e) [#1020](https://github.com/npm/cli/pull/1020) docs(teams): updated team docs to reflect MFA workflow ([@blkdm0n](https://github.com/blkdm0n)) 195* [`4a31a4ba2`](https://github.com/npm/cli/commit/4a31a4ba2db0a5db2d1d0890ee934ba1babb73a6) [#1034](https://github.com/npm/cli/pull/1034) docs: cleanup ([@ruyadorno](https://github.com/ruyadorno)) 196* [`0eac801cd`](https://github.com/npm/cli/commit/0eac801cdef344e9fbda6270145e062211255b0e) [#1013](https://github.com/npm/cli/pull/1013) docs: fix links to cli commands ([@alenros](https://github.com/alenros)) 197* [`7d8e5b99c`](https://github.com/npm/cli/commit/7d8e5b99c4ef8c394cffa7fc845f54a25ff37e3a) [#755](https://github.com/npm/cli/pull/755) docs: correction to `npm update -g` behaviour ([@johnkennedy9147](https://github.com/johnkennedy9147)) 198 199### DEPENDENCIES 200 201* [`e11167646`](https://github.com/npm/cli/commit/e111676467f090f73802b97e8da7ece481b18f99) `mkdirp@0.5.3` 202 * [`c5b97d17d`](https://github.com/isaacs/node-mkdirp/commit/c5b97d17d45a22bcf4c815645cbb989dab57ddd8) fix: bump `minimist` dep to resolve security issue ([@isaacs](https://github.com/isaacs)) 203* [`c50d679c6`](https://github.com/npm/cli/commit/c50d679c68b39dd03ad127d34f540ddcb1b1e804) `rimraf@2.7.1` 204* [`a2de99ff9`](https://github.com/npm/cli/commit/a2de99ff9e02425a3ccc25280f390178be755a36) `npm-registry-mock@1.3.1` 205* [`217debeb9`](https://github.com/npm/cli/commit/217debeb9812e037a6686cbf6ec67a0cd47fa68a) `npm-registry-couchapp@2.7.4` 206 207## 6.14.2 (2020-03-03) 208 209### DOCUMENTATION 210* [`f9248c0be`](https://github.com/npm/cli/commit/f9248c0be63fba37a30098dc9215c752474380e3) [#730](https://github.com/npm/cli/pull/730) chore(docs): update unpublish docs & policy reference ([@nomadtechie](https://github.com/nomadtechie), [@mikemimik](https://github.com/mikemimik)) 211 212### DEPENDENCIES 213 214* [`909cc3918`](https://github.com/npm/cli/commit/909cc39180a352f206898481add5772206c8b65f) `hosted-git-info@2.8.8` ([@darcyclarke](https://github.com/darcyclarke)) 215 * [`5038b1891`](https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb) fix: regression in old node versions w/ respect to url.URL implmentation 216* [`9204ffa58`](https://github.com/npm/cli/commit/9204ffa584c140c5e22b1ee37f6df2c98f5dc70b) `npm-profile@4.0.4` ([@isaacs](https://github.com/isaacs)) 217 * [`6bcf0860a`](https://github.com/npm/npm-profile/commit/6bcf0860a3841865099d0115dbcbde8b78109bd9) fix: treat non-http/https login urls as invalid 218* [`0365d39bd`](https://github.com/npm/cli/commit/0365d39bdc74960a18caac674f51d0e2a98b31e6) `glob@7.1.6` ([@isaacs](https://github.com/isaacs)) 219* [`dab030536`](https://github.com/nodejs/node-gyp/commit/dab030536b6a70ecae37debc74c581db9e5280fd) `node-gyp@5.1.0` ([@rvagg](https://github.com/rvagg)) 220 221## 6.14.1 (2020-02-26) 222 223* [`303e5c11e`](https://github.com/npm/cli/commit/303e5c11e7db34cf014107aecd2e81c821bfde8d) 224 `hosted-git-info@2.8.7` 225 Fixes a regression where scp-style git urls are passed to the WhatWG URL 226 parser, which does not handle them properly. 227 ([@isaacs](https://github.com/isaacs)) 228 229## 6.14.0 (2020-02-25) 230 231### FEATURES 232* [`30f170877`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#731](https://github.com/npm/cli/pull/731) add support for multiple funding sources ([@ljharb](https://github.com/ljharb) & [@ruyadorno](hhttps://github.com/ruyadorno/)) 233 234### BUG FIXES 235* [`55916b130`](https://github.com/npm/cli/commit/55916b130ef52984584678f2cc17c15c1f031cb5) [#508](https://github.com/npm/cli/pull/508) fix: check `npm.config` before accessing its members ([@kaiyoma](https://github.com/kaiyoma)) 236* [`7d0cd65b2`](https://github.com/npm/cli/commit/7d0cd65b23c0986b631b9b54d87bbe74902cc023) [#733](https://github.com/npm/cli/pull/733) fix: access grant with unscoped packages ([@netanelgilad](https://github.com/netanelgilad)) 237* [`28c3d40d6`](https://github.com/npm/cli/commit/28c3d40d65eef63f9d6ccb60b99ac57f5057a46e), [`0769c5b20`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#945](https://github.com/npm/cli/pull/945), [#697](https://github.com/npm/cli/pull/697) fix: allow new major versions of node to be automatically considered "supported" ([@isaacs](https://github.com/isaacs), [@ljharb](https://github.com/ljharb)) 238 239### DEPENDENCIES 240* [`6f39e93`](https://github.com/npm/hosted-git-info/commit/6f39e93bae9162663af6f15a9d10bce675dd5de3) `hosted-git-info@2.8.6` ([@darcyclarke](https://github.com/darcyclarke)) 241 * fix: passwords & usernames are escaped properly in git deps ([@stevenhilder](https://github.com/stevenhilder)) 242* [`f14b594ee`](https://github.com/npm/cli/commit/f14b594ee9dbfc98ed0b65c65d904782db4f31ad) `chownr@1.1.4` ([@isaacs](https://github.com/isaacs)) 243* [`77044150b`](https://github.com/npm/cli/commit/77044150b763d67d997f9ff108219132ea922678) `npm-packlist@1.4.8` ([@isaacs](https://github.com/isaacs)) 244* [`1d112461a`](https://github.com/npm/cli/commit/1d112461ad8dc99e5ff7fabb5177e8c2f89a9755) `npm-registry-fetch@4.0.3` ([@isaacs](https://github.com/isaacs)) 245 * [`ba8b4fe`](https://github.com/npm/npm-registry-fetch/commit/ba8b4fe60eb6cdf9b39012560aec596eda8ce924) fix: always bypass cache when ?write=true 246* [`a47fed760`](https://github.com/npm/cli/commit/a47fed7603a6ed31dcc314c0c573805f05a96830) `readable-stream@3.6.0` 247 * [`3bbf2d6`](https://github.com/nodejs/readable-stream/commit/3bbf2d6feb45b03f4e46a2ae8251601ad2262121) fix: babel's "loose mode" class transform enbrittles BufferList ([@ljharb](https://github.com/ljharb)) 248 249### DOCUMENTATION 250* [`284c1c055`](https://github.com/npm/cli/commit/284c1c055a28c4b334496101799acefe3c54ceb3), [`fbb5f0e50`](https://github.com/npm/cli/commit/fbb5f0e50e54425119fa3f03c5de93e4cb6bfda7) [#729](https://github.com/npm/cli/pull/729) update lifecycle hooks docs 251 ([@seanhealy](https://github.com/seanhealy), [@mikemimik](https://github.com/mikemimik)) 252* [`1c272832d`](https://github.com/npm/cli/commit/1c272832d048300e409882313305c416dc6f21a2) [#787](https://github.com/npm/cli/pull/787) fix: trademarks typo ([@dnicolson](https://github.com/dnicolson)) 253* [`f6ff41776`](https://github.com/npm/cli/commit/f6ff417767d52418cc8c9e7b9731ede2c3916d2e) [#936](https://github.com/npm/cli/pull/936) fix: postinstall example ([@ajaymathur](https://github.com/ajaymathur)) 254* [`373224b16`](https://github.com/npm/cli/commit/373224b16e019b7b63d8f0b4c5d4adb7e5cb80dd) [#939](https://github.com/npm/cli/pull/939) fix: bad links in publish docs ([@vit100](https://github.com/vit100)) 255 256### MISCELLANEOUS 257* [`85c79636d`](https://github.com/npm/cli/commit/85c79636df31bac586c0e380c4852ee155a7723c) [#736](https://github.com/npm/cli/pull/736) add script to update dist-tags ([@mikemimik](https://github.com/mikemimik)) 258 259## 6.13.7 (2020-01-28) 260 261### BUG FIXES 262* [`7dbb91438`](https://github.com/npm/cli/commit/7dbb914382ecd2074fffb7eba81d93262e2d23c6) 263 [#655](https://github.com/npm/cli/pull/655) 264 Update CI detection cases 265 ([@isaacs](https://github.com/isaacs)) 266 267### DEPENDENCIES 268* [`0fb1296c7`](https://github.com/npm/cli/commit/0fb1296c7d6d4bb9e78c96978c433cd65e55c0ea) 269 `libnpx@10.2.2` 270 ([@mikemimik](https://github.com/mikemimik)) 271* [`c9b69d569`](https://github.com/npm/cli/commit/c9b69d569fec7944375a746e9c08a6fa9bec96ff) 272 `node-gyp@5.0.7` 273 ([@mikemimik](https://github.com/mikemimik)) 274* [`e8dbaf452`](https://github.com/npm/cli/commit/e8dbaf452a1f6c5350bb0c37059b89a7448e7986) 275 `bin-links@1.1.7` 276 ([@mikemimik](https://github.com/mikemimik)) 277 * [#613](https://github.com/npm/cli/issues/613) Fixes bin entry for package 278 279## 6.13.6 (2020-01-09) 280 281### DEPENDENCIES 282 283* [`6dba897a1`](https://github.com/npm/cli/commit/6dba897a1e2d56388fb6df0c814b0bb85af366b4) 284 `pacote@9.5.12`: 285 * [`d2f4176`](https://github.com/npm/pacote/commit/d2f4176b6af393d7e29de27e9b638dbcbab9a0c7) 286 fix(git): Do not drop uid/gid when executing in root-owned directory 287 ([@isaacs](https://github.com/isaacs)) 288 289## 6.13.5 (2020-01-09) 290 291### BUG FIXES 292 293* [`fd0a802ec`](https://github.com/npm/cli/commit/fd0a802ec468ec7b98d6c15934c355fef0e7ff60) [#550](https://github.com/npm/cli/pull/550) Fix cache location for `npm ci` ([@zhenyavinogradov](https://github.com/zhenyavinogradov)) 294* [`4b30f3cca`](https://github.com/npm/cli/commit/4b30f3ccaebf50d6ab3bad130ff94827c017cc16) [#648](https://github.com/npm/cli/pull/648) fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f ([@rhengles](https://github.com/rhengles)) 295 296### TESTING 297 298* [`e16f68d30`](https://github.com/npm/cli/commit/e16f68d30d59ce1ddde9fe62f7681b2c07fce84d) test(ci): add failing cache config test ([@ruyadorno](https://github.com/ruyadorno)) 299* [`3f009fbf2`](https://github.com/npm/cli/commit/3f009fbf2c42f68c5127efecc6e22db105a74fe0) [#659](https://github.com/npm/cli/pull/659) test: fix bin-overwriting test on Windows ([@isaacs](https://github.com/isaacs)) 300* [`43ae0791f`](https://github.com/npm/cli/commit/43ae0791f74f68e02850201a64a6af693657b241) [#601](https://github.com/npm/cli/pull/601) ci: Allow builds to run even if one fails ([@XhmikosR](https://github.com/XhmikosR)) 301* [`4a669bee4`](https://github.com/npm/cli/commit/4a669bee4ac54c70adc6979d45cd0605b6dc33fd) [#603](https://github.com/npm/cli/pull/603) Remove the unused appveyor.yml ([@XhmikosR](https://github.com/XhmikosR)) 302* [`9295046ac`](https://github.com/npm/cli/commit/9295046ac92bbe82f4d84e1ec90cc81d3b80bfc7) [#600](https://github.com/npm/cli/pull/600) ci: switch to `actions/checkout@v2` ([@XhmikosR](https://github.com/XhmikosR)) 303 304### DOCUMENTATION 305 306* [`f2d770ac7`](https://github.com/npm/cli/commit/f2d770ac768ea84867772b90a3c9acbdd0c1cb6a) [#569](https://github.com/npm/cli/pull/569) fix netlify publish path config ([@claudiahdz](https://github.com/claudiahdz)) 307* [`462cf0983`](https://github.com/npm/cli/commit/462cf0983dbc18a3d93f77212ca69f878060b2ec) [#627](https://github.com/npm/cli/pull/627) update gatsby dependencies ([@felixonmars](https://github.com/felixonmars)) 308* [`6fb5dbb72`](https://github.com/npm/cli/commit/6fb5dbb7213c4c050c9a47a7d5131447b8b7dcc8) 309 [#532](https://github.com/npm/cli/pull/532) docs: clarify usage of global prefix ([@jgehrcke](https://github.com/jgehrcke)) 310 311## 6.13.4 (2019-12-11) 312 313## BUGFIXES 314 315* [`320ac9aee`](https://github.com/npm/cli/commit/320ac9aeeafd11bb693c53b31148b8d10c4165e8) 316 [npm/bin-links#12](https://github.com/npm/bin-links/pull/12) 317 [npm/gentle-fs#7](https://github.com/npm/gentle-fs/pull/7) 318 Do not remove global bin/man links inappropriately 319 ([@isaacs](https://github.com/isaacs)) 320 321## DEPENDENCIES 322 323* [`52fd21061`](https://github.com/npm/cli/commit/52fd21061ff8b1a73429294620ffe5ebaaa60d3e) 324 `gentle-fs@2.3.0` 325 ([@isaacs](https://github.com/isaacs)) 326* [`d06f5c0b0`](https://github.com/npm/cli/commit/d06f5c0b0611c43b6e70ded92af24fa5d83a0f48) 327 `bin-links@1.1.6` 328 ([@isaacs](https://github.com/isaacs)) 329 330## 6.13.3 (2019-12-09) 331 332### DEPENDENCIES 333 334* [`19ce061a2`](https://github.com/npm/cli/commit/19ce061a2ee165d8de862c8f0f733c222846b9e1) 335 `bin-links@1.1.5` Properly normalize, sanitize, and verify `bin` entries 336 in `package.json`. 337* [`59c836aae`](https://github.com/npm/cli/commit/59c836aae8d0104a767e80c540b963c91774012a) 338 `npm-packlist@1.4.7` 339* [`fb4ecd7d2`](https://github.com/npm/cli/commit/fb4ecd7d2810b0b4897daaf081a5e2f3f483b310) 340 `pacote@9.5.11` 341 * [`5f33040`](https://github.com/npm/pacote/commit/5f3304028b6985fd380fc77c4840ff12a4898301) 342 [#476](https://github.com/npm/cli/issues/476) 343 [npm/pacote#22](https://github.com/npm/pacote/issues/22) 344 [npm/pacote#14](https://github.com/npm/pacote/issues/14) fix: Do not 345 drop perms in git when not root ([isaacs](https://github.com/isaacs), 346 [@darcyclarke](https://github.com/darcyclarke)) 347 * [`6f229f7`](https://github.com/npm/pacote/6f229f78d9911b4734f0a19c6afdc5454034c759) 348 sanitize and normalize package bin field 349 ([isaacs](https://github.com/isaacs)) 350* [`1743cb339`](https://github.com/npm/cli/commit/1743cb339767e86431dcd565c7bdb0aed67b293d) 351 `read-package-json@2.1.1` 352 353 354## 6.13.2 (2019-12-03) 355 356### BUG FIXES 357 358* [`4429645b3`](https://github.com/npm/cli/commit/4429645b3538e1cda54d8d1b7ecb3da7a88fdd3c) 359 [#546](https://github.com/npm/cli/pull/546) 360 fix docs target typo 361 ([@richardlau](https://github.com/richardlau)) 362* [`867642942`](https://github.com/npm/cli/commit/867642942bec69bb9ab71cff1914fb6a9fe67de8) 363 [#142](https://github.com/npm/cli/pull/142) 364 fix(packageRelativePath): fix 'where' for file deps 365 ([@larsgw](https://github.com/larsgw)) 366* [`d480f2c17`](https://github.com/npm/cli/commit/d480f2c176e6976b3cca3565e4c108b599b0379b) 367 [#527](https://github.com/npm/cli/pull/527) 368 Revert "windows: Add preliminary WSL support for npm and npx" 369 ([@craigloewen-msft](https://github.com/craigloewen-msft)) 370* [`e4b97962e`](https://github.com/npm/cli/commit/e4b97962e5fce0d49beb541ce5a0f96aee0525de) 371 [#504](https://github.com/npm/cli/pull/504) 372 remove unnecessary package.json read when reading shrinkwrap 373 ([@Lighting-Jack](https://github.com/Lighting-Jack)) 374* [`1c65d26ac`](https://github.com/npm/cli/commit/1c65d26ac9f10ac0037094c207d216fbf0e969bf) 375 [#501](https://github.com/npm/cli/pull/501) 376 fix(fund): open url for string shorthand 377 ([@ruyadorno](https://github.com/ruyadorno)) 378* [`ae7afe565`](https://github.com/npm/cli/commit/ae7afe56504dbffabf9f73d55b6dac1e3e9fed4a) 379 [#263](https://github.com/npm/cli/pull/263) 380 Don't log error message if git tagging is disabled 381 ([@woppa684](https://github.com/woppa684)) 382* [`4c1b16f6a`](https://github.com/npm/cli/commit/4c1b16f6aecaf78956b9335734cfde2ac076ee11) 383 [#182](https://github.com/npm/cli/pull/182) 384 Warn the user that it is uninstalling npm-install 385 ([@Hoidberg](https://github.com/Hoidberg)) 386 387## 6.13.1 (2019-11-18) 388 389### BUG FIXES 390 391* [`938d6124d`](https://github.com/npm/cli/commit/938d6124d6d15d96b5a69d0ae32ef59fceb8ceab) 392 [#472](https://github.com/npm/cli/pull/472) 393 fix(fund): support funding string shorthand 394 ([@ruyadorno](https://github.com/ruyadorno)) 395* [`b49c5535b`](https://github.com/npm/cli/commit/b49c5535b7c41729a8d167b035924c3c66b36de0) 396 [#471](https://github.com/npm/cli/pull/471) 397 should not publish tap-snapshot folder 398 ([@ruyadorno](https://github.com/ruyadorno)) 399* [`3471d5200`](https://github.com/npm/cli/commit/3471d5200217bfa612b1a262e36c9c043a52eb09) 400 [#253](https://github.com/npm/cli/pull/253) 401 Add preliminary WSL support for npm and npx 402 ([@infinnie](https://github.com/infinnie)) 403* [`3ef295f23`](https://github.com/npm/cli/commit/3ef295f23ee1b2300abf13ec19e935c47a455179) 404 [#486](https://github.com/npm/cli/pull/486) 405 print quick audit report for human output 406 ([@isaacs](https://github.com/isaacs)) 407 408### TESTING 409 410* [`dbbf977ac`](https://github.com/npm/cli/commit/dbbf977acd1e74bcdec859c562ea4a2bc0536442) 411 [#278](https://github.com/npm/cli/pull/278) 412 added workflow to trigger and run benchmarks 413 ([@mikemimik](https://github.com/mikemimik)) 414* [`b4f5e3825`](https://github.com/npm/cli/commit/b4f5e3825535256aaada09c5e8f104570a3d96a4) 415 [#457](https://github.com/npm/cli/pull/457) 416 feat(docs): adding tests and updating docs to reflect changes in registry teams API. 417 ([@nomadtechie](https://github.com/nomadtechie)) 418* [`454c7dd60`](https://github.com/npm/cli/commit/454c7dd60c78371bf606f11a17ed0299025bc37c) 419 [#456](https://github.com/npm/cli/pull/456) 420 fix git configs for git 2.23 and above 421 ([@isaacs](https://github.com/isaacs)) 422 423### DOCUMENTATION 424 425* [`b8c1576a4`](https://github.com/npm/cli/commit/b8c1576a448566397c721655b95fc90bf202b35a) [`30b013ae8`](https://github.com/npm/cli/commit/30b013ae8eacd04b1b8a41ce2ed0dd50c8ebae25) [`26c1b2ef6`](https://github.com/npm/cli/commit/26c1b2ef6be1595d28d935d35faa8ec72daae544) [`9f943a765`](https://github.com/npm/cli/commit/9f943a765faf6ebb8a442e862b808dbb630e018d) [`c0346b158`](https://github.com/npm/cli/commit/c0346b158fc25ab6ca9954d4dd78d9e62f573a41) [`8e09d5ad6`](https://github.com/npm/cli/commit/8e09d5ad67d4f142241193cecbce61c659389be3) [`4a2f551ee`](https://github.com/npm/cli/commit/4a2f551eeb3285f6f200534da33644789715a41a) [`87d67258c`](https://github.com/npm/cli/commit/87d67258c213d9ea9a49ce1804294a718f08ff13) [`5c3b32722`](https://github.com/npm/cli/commit/5c3b3272234764c8b4d2d798b69af077b5a529c7) [`b150eaeff`](https://github.com/npm/cli/commit/b150eaeff428180bfa03be53fd741d5625897758) [`7555a743c`](https://github.com/npm/cli/commit/7555a743ce4c3146d6245dd63f91503c7f439a6c) [`b89423e2f`](https://github.com/npm/cli/commit/b89423e2f6a09b290b15254e7ff7e8033b434d83) 426 [#463](https://github.com/npm/cli/pull/463) 427 [#285](https://github.com/npm/cli/pull/285) 428 [#268](https://github.com/npm/cli/pull/268) 429 [#232](https://github.com/npm/cli/pull/232) 430 [#485](https://github.com/npm/cli/pull/485) 431 [#453](https://github.com/npm/cli/pull/453) 432 docs cleanup: typos, styling and content 433 ([@claudiahdz](https://github.com/claudiahdz)) 434 ([@XhmikosR](https://github.com/XhmikosR)) 435 ([@mugli](https://github.com/mugli)) 436 ([@brettz9](https://github.com/brettz9)) 437 ([@mkotsollaris](https://github.com/mkotsollaris)) 438 439### DEPENDENCIES 440 441* [`661d86cd2`](https://github.com/npm/cli/commit/661d86cd229b14ddf687b7f25a66941a79d233e7) 442 `make-fetch-happen@5.0.2` 443 ([@claudiahdz](https://github.com/claudiahdz)) 444 445## 6.13.0 (2019-11-05) 446 447### NEW FEATURES 448 449* [`4414b06d9`](https://github.com/npm/cli/commit/4414b06d944c56bee05ccfb85260055a767ee334) 450 [#273](https://github.com/npm/cli/pull/273) 451 add fund command 452 ([@ruyadorno](https://github.com/ruyadorno)) 453 454### DOCUMENTATION 455 456* [`ae4c74d04`](https://github.com/npm/cli/commit/ae4c74d04f820a0255a92bdfe77ecf97af134fae) 457 [#274](https://github.com/npm/cli/pull/274) 458 migrate existing docs to gatsby 459 ([@claudiahdz](https://github.com/claudiahdz)) 460* [`4ff1bb180`](https://github.com/npm/cli/commit/4ff1bb180b1db8c72e51b3d57bd4e268b738e049) 461 [#277](https://github.com/npm/cli/pull/277) 462 updated documentation copy 463 ([@oletizi](https://github.com/oletizi)) 464 465### BUG FIXES 466 467* [`e4455409f`](https://github.com/npm/cli/commit/e4455409fe6fe9c198b250b488129171f0b4624a) 468 [#281](https://github.com/npm/cli/pull/281) 469 delete ps1 files on package removal 470 ([@NoDocCat](https://github.com/NoDocCat)) 471* [`cd14d4701`](https://github.com/npm/cli/commit/cd14d47014e8c96ffd6a18791e8752028b19d637) 472 [#279](https://github.com/npm/cli/pull/279) 473 update supported node list to remove v6.0, v6.1, v9.0 - v9.2 474 ([@ljharb](https://github.com/ljharb)) 475 476### DEPENDENCIES 477 478* [`a37296b20`](https://github.com/npm/cli/commit/a37296b20ca3e19c2bbfa78fedcfe695e03fda69) 479 `pacote@9.5.9` 480* [`d3cb3abe8`](https://github.com/npm/cli/commit/d3cb3abe8cee54bd2624acdcf8043932ef0d660a) 481 `read-cmd-shim@1.0.5` 482 483### TESTING 484 485* [`688cd97be`](https://github.com/npm/cli/commit/688cd97be94ca949719424ff69ff515a68c5caba) 486 [#272](https://github.com/npm/cli/pull/272) 487 use github actions for CI 488 ([@JasonEtco](https://github.com/JasonEtco)) 489* [`9a2d8af84`](https://github.com/npm/cli/commit/9a2d8af84f7328f13d8f578cf4b150b9d5f09517) 490 [#240](https://github.com/npm/cli/pull/240) 491 Clean up some flakiness and inconsistency 492 ([@isaacs](https://github.com/isaacs)) 493 494## 6.12.1 (2019-10-29) 495 496### BUG FIXES 497 498* [`6508e833d`](https://github.com/npm/cli/commit/6508e833df35a3caeb2b496f120ce67feff306b6) 499 [#269](https://github.com/npm/cli/pull/269) 500 add node v13 as a supported version 501 ([@ljharb](https://github.com/ljharb)) 502* [`b6588a8f7`](https://github.com/npm/cli/commit/b6588a8f74fb8b1ad103060b73c4fd5174b1d1f6) 503 [#265](https://github.com/npm/cli/pull/265) 504 Fix regression in lockfile repair for sub-deps 505 ([@feelepxyz](https://github.com/feelepxyz)) 506* [`d5dfe57a1`](https://github.com/npm/cli/commit/d5dfe57a1d810fe7fd64edefc976633ee3a4da53) 507 [#266](https://github.com/npm/cli/pull/266) 508 resolve circular dependency in pack.js 509 ([@addaleax](https://github.com/addaleax)) 510 511### DEPENDENCIES 512 513* [`73678bb59`](https://github.com/npm/cli/commit/73678bb590a8633c3bdbf72e08f1279f9e17fd28) 514 `chownr@1.1.3` 515* [`4b76926e2`](https://github.com/npm/cli/commit/4b76926e2058ef30ab1d5e2541bb96d847653417) 516 `graceful-fs@4.2.3` 517* [`c691f36a9`](https://github.com/npm/cli/commit/c691f36a9c108b6267859fe61e4a38228b190c17) 518 `libcipm@4.0.7` 519* [`5e1a14975`](https://github.com/npm/cli/commit/5e1a14975311bfdc43df8e1eb317ae5690ee580c) 520 `npm-packlist@1.4.6` 521* [`c194482d6`](https://github.com/npm/cli/commit/c194482d65ee81a5a0a6281c7a9f984462286c56) 522 `npm-registry-fetch@4.0.2` 523* [`bc6a8e0ec`](https://github.com/npm/cli/commit/bc6a8e0ec966281e49b1dc66f9c641ea661ab7a6) 524 `tar@4.4.1` 525* [`4dcca3cbb`](https://github.com/npm/cli/commit/4dcca3cbb161da1f261095d9cdd26e1fbb536a8d) 526 `uuid@3.3.3` 527 528## 6.12.0 (2019-10-08): 529 530Now `npm ci` runs prepare scripts for git dependencies, and respects the 531`--no-optional` argument. Warnings for `engine` mismatches are printed 532again. Various other fixes and cleanups. 533 534### BUG FIXES 535 536* [`890b245dc`](https://github.com/npm/cli/commit/890b245dc1f609590d8ab993fac7cf5a37ed46a5) 537 [#252](https://github.com/npm/cli/pull/252) ci: add dirPacker to options 538 ([@claudiahdz](https://github.com/claudiahdz)) 539* [`f3299acd0`](https://github.com/npm/cli/commit/f3299acd0b4249500e940776aca77cc6c0977263) 540 [#257](https://github.com/npm/cli/pull/257) 541 [npm.community#4792](https://npm.community/t/engines-and-engines-strict-ignored/4792) 542 warn message on engine mismatch 543 ([@ruyadorno](https://github.com/ruyadorno)) 544* [`bbc92fb8f`](https://github.com/npm/cli/commit/bbc92fb8f3478ff67071ebaff551f01c1ea42ced) 545 [#259](https://github.com/npm/cli/pull/259) 546 [npm.community#10288](https://npm.community/t/npm-token-err-figgypudding-options-cannot-be-modified-use-concat-instead/10288) 547 Fix figgyPudding error in `npm token` 548 ([@benblank](https://github.com/benblank)) 549* [`70f54dcb5`](https://github.com/npm/cli/commit/70f54dcb5693b301c6b357922b7e8d16b57d8b00) 550 [#241](https://github.com/npm/cli/pull/241) doctor: Make OK more 551 consistent ([@gemal](https://github.com/gemal)) 552 553### FEATURES 554 555* [`ed993a29c`](https://github.com/npm/cli/commit/ed993a29ccf923425317c433844d55dbea2f23ee) 556 [#249](https://github.com/npm/cli/pull/249) Add CI environment variables 557 to user-agent ([@isaacs](https://github.com/isaacs)) 558* [`f6b0459a4`](https://github.com/npm/cli/commit/f6b0459a466a2c663dbd549cdc331e7732552dca) 559 [#248](https://github.com/npm/cli/pull/248) Add option to save 560 package-lock without formatting Adds a new config 561 `--format-package-lock`, which defaults to true. 562 ([@bl00mber](https://github.com/bl00mber)) 563 564### DEPENDENCIES 565 566* [`0ca063c5d`](https://github.com/npm/cli/commit/0ca063c5dc961c4aa17373f4b33fb54c51c8c8d6) 567 `npm-lifecycle@3.1.4`: 568 - fix: filter functions and undefined out of makeEnv 569 ([@isaacs](https://github.com/isaacs)) 570* [`5df6b0ea2`](https://github.com/npm/cli/commit/5df6b0ea2e3106ba65bba649cc8d7f02f4738236) 571 `libcipm@4.0.4`: 572 - fix: pack git directories properly 573 ([@claudiahdz](https://github.com/claudiahdz)) 574 - respect no-optional argument 575 ([@cruzdanilo](https://github.com/cruzdanilo)) 576* [`7e04f728c`](https://github.com/npm/cli/commit/7e04f728cc4cd4853a8fc99e2df0a12988897589) 577 `tar@4.4.12` 578* [`5c380e5a3`](https://github.com/npm/cli/commit/5c380e5a33d760bb66a4285b032ae5f50af27199) 579 `stringify-package@1.0.1` ([@isaacs](https://github.com/isaacs)) 580* [`62f2ca692`](https://github.com/npm/cli/commit/62f2ca692ac0c0467ef4cf74f91777a5175258c4) 581 `node-gyp@5.0.5` ([@isaacs](https://github.com/isaacs)) 582* [`0ff0ea47a`](https://github.com/npm/cli/commit/0ff0ea47a8840dd7d952bde7f7983a5016cda8ea) 583 `npm-install-checks@3.0.2` ([@isaacs](https://github.com/isaacs)) 584* [`f46edae94`](https://github.com/npm/cli/commit/f46edae9450b707650a0efab09aa1e9295a18070) 585 `hosted-git-info@2.8.5` ([@isaacs](https://github.com/isaacs)) 586 587### TESTING 588 589* [`44a2b036b`](https://github.com/npm/cli/commit/44a2b036b34324ec85943908264b2e36de5a9435) 590 [#262](https://github.com/npm/cli/pull/262) fix root-ownership race 591 conditions in meta-test ([@isaacs](https://github.com/isaacs)) 592 593## 6.11.3 (2019-09-03): 594 595Fix npm ci regressions and npm outdated depth. 596 597### BUG FIXES 598 599* [`235ed1d28`](https://github.com/npm/cli/commit/235ed1d2838ef302bb995e183980209d16c51b9b) 600 [#239](https://github.com/npm/cli/pull/239) 601 Don't override user specified depth in outdated 602 Restores ability to update packages using `--depth` as suggested by `npm audit`. 603 ([@G-Rath](https://github.com/G-Rath)) 604* [`1fafb5151`](https://github.com/npm/cli/commit/1fafb51513466cd793866b576dfea9a8963a3335) 605 [#242](https://github.com/npm/cli/pull/242) 606 [npm.community#9586](https://npm.community/t/6-11-1-some-dependencies-are-no-longer-being-installed/9586/4) 607 Revert "install: do not descend into directory deps' child modules" 608 ([@isaacs](https://github.com/isaacs)) 609* [`cebf542e6`](https://github.com/npm/cli/commit/cebf542e61dcabdd2bd3b876272bf8eebf7d01cc) 610 [#243](https://github.com/npm/cli/pull/243) 611 [npm.community#9720](https://npm.community/t/6-11-2-npm-ci-installs-package-with-wrong-permissions/9720) 612 ci: pass appropriate configs for file/dir modes 613 ([@isaacs](https://github.com/isaacs)) 614 615### DEPENDENCIES 616 617* [`e5fbb7ed1`](https://github.com/npm/cli/commit/e5fbb7ed1fc7ef5c6ca4790e2d0dc441e0ac1596) 618 `read-cmd-shim@1.0.4` 619 ([@claudiahdz](https://github.com/claudiahdz)) 620* [`23ce65616`](https://github.com/npm/cli/commit/23ce65616c550647c586f7babc3c2f60115af2aa) 621 `npm-pick-manifest@3.0.2` 622 ([@claudiahdz](https://github.com/claudiahdz)) 623 624## 6.11.2 (2019-08-22): 625 626Fix a recent Windows regression, and two long-standing Windows bugs. Also, 627get CI running on Windows, so these things are less likely in the future. 628 629### DEPENDENCIES 630 631* [`9778a1b87`](https://github.com/npm/cli/commit/9778a1b878aaa817af6e99385e7683c2a389570d) 632 `cmd-shim@3.0.3`: Fix regression where shims fail to preserve exit code 633 ([@isaacs](https://github.com/isaacs)) 634* [`bf93e91d8`](https://github.com/npm/cli/commit/bf93e91d879c816a055d5913e6e4210d7299f299) 635 `npm-package-arg@6.1.1`: Properly handle git+file: urls on Windows when a 636 drive letter is included. ([@isaacs](https://github.com/isaacs)) 637 638### BUGFIXES 639 640* [`6cc4cc66f`](https://github.com/npm/cli/commit/6cc4cc66f1fb050dc4113e35cab59197fd48e04a) 641 escape args properly on Windows Bash Despite being bash, Node.js running 642 on windows git mingw bash still executes child processes using cmd.exe. 643 As a result, arguments in this environment need to be escaped in the 644 style of cmd.exe, not bash. ([@isaacs](https://github.com/isaacs)) 645 646### TESTS 647 648* [`291aba7b8`](https://github.com/npm/cli/commit/291aba7b821e247b96240b1ec037310ead69a594) 649 make tests pass on Windows ([@isaacs](https://github.com/isaacs)) 650* [`fea3a023a`](https://github.com/npm/cli/commit/fea3a023a80863f32a5f97f5132401b1a16161b8) 651 travis: run tests on Windows as well 652 ([@isaacs](https://github.com/isaacs)) 653 654## 6.11.1 (2019-08-20): 655 656Fix a regression for windows command shim syntax. 657 658* [`37db29647`](https://github.com/npm/cli/commit/37db2964710c80003604b7e3c1527d17be7ed3d0) 659 `cmd-shim@3.0.2` ([@isaacs](https://github.com/isaacs)) 660 661## v6.11.0 (2019-08-20): 662 663A few meaty bugfixes, and introducing `peerDependenciesMeta`. 664 665### FEATURES 666 667* [`a12341088`](https://github.com/npm/cli/commit/a12341088820c0e7ef6c1c0db3c657f0c2b3943e) 668 [#224](https://github.com/npm/cli/pull/224) Implements 669 peerDependenciesMeta ([@arcanis](https://github.com/arcanis)) 670* [`2f3b79bba`](https://github.com/npm/cli/commit/2f3b79bbad820fd4a398aa494b19f79b7fd520a1) 671 [#234](https://github.com/npm/cli/pull/234) add new forbidden 403 error 672 code ([@claudiahdz](https://github.com/claudiahdz)) 673 674### BUGFIXES 675 676* [`24acc9fc8`](https://github.com/npm/cli/commit/24acc9fc89d99d87cc66206c6c6f7cdc82fbf763) 677 and 678 [`45772af0d`](https://github.com/npm/cli/commit/45772af0ddca54b658cb2ba2182eec26d0a4729d) 679 [#217](https://github.com/npm/cli/pull/217) 680 [npm.community#8863](https://npm.community/t/installing-the-same-module-under-multiple-relative-paths-fails-on-linux/8863) 681 [npm.community#9327](https://npm.community/t/reinstall-breaks-after-npm-update-to-6-10-2/9327,) 682 do not descend into directory deps' child modules, fix shrinkwrap files 683 that inappropriately list child nodes of symlink packages 684 ([@isaacs](https://github.com/isaacs) and 685 [@salomvary](https://github.com/salomvary)) 686* [`50cfe113d`](https://github.com/npm/cli/commit/50cfe113da5fcc59c1d99b0dcf1050ace45803c7) 687 [#229](https://github.com/npm/cli/pull/229) fixed typo in semver doc 688 ([@gall0ws](https://github.com/gall0ws)) 689* [`e8fb2a1bd`](https://github.com/npm/cli/commit/e8fb2a1bd9785e0092e9926f4fd65ad431e38452) 690 [#231](https://github.com/npm/cli/pull/231) Fix spelling mistakes in 691 CHANGELOG-3.md ([@XhmikosR](https://github.com/XhmikosR)) 692* [`769d2e057`](https://github.com/npm/cli/commit/769d2e057daf5a2cbfe0ce86f02550e59825a691) 693 [npm/uid-number#7](https://github.com/npm/uid-number/issues/7) Better 694 error on invalid `--user`/`--group` configs. This addresses the issue 695 when people fail to install binary packages on Docker and other 696 environments where there is no 'nobody' user. 697 ([@isaacs](https://github.com/isaacs)) 698* [`8b43c9624`](https://github.com/npm/cli/commit/8b43c962498c8e2707527e4fca442d7a4fa51595) 699 [nodejs/node#28987](https://github.com/nodejs/node/issues/28987) 700 [npm.community#6032](https://npm.community/t/npm-ci-doesnt-respect-npmrc-variables/6032) 701 [npm.community#6658](https://npm.community/t/npm-ci-doesnt-fill-anymore-the-process-env-npm-config-cache-variable-on-post-install-scripts/6658) 702 [npm.community#6069](https://npm.community/t/npm-ci-does-not-compile-native-dependencies-according-to-npmrc-configuration/6069) 703 [npm.community#9323](https://npm.community/t/npm-6-9-x-not-passing-environment-to-node-gyp-regression-from-6-4-x/9323/2) 704 Fix the regression where random config values in a .npmrc file are not 705 passed to lifecycle scripts, breaking build processes which rely on them. 706 ([@isaacs](https://github.com/isaacs)) 707* [`8b85eaa47`](https://github.com/npm/cli/commit/8b85eaa47da3abaacc90fe23162a68cc6e1f0404) 708 save files with inferred ownership rather than relying on `SUDO_UID` and 709 `SUDO_GID`. ([@isaacs](https://github.com/isaacs)) 710* [`b7f6e5f02`](https://github.com/npm/cli/commit/b7f6e5f0285515087b4614d81db17206524c0fdb) 711 Infer ownership of shrinkwrap files 712 ([@isaacs](https://github.com/isaacs)) 713* [`54b095d77`](https://github.com/npm/cli/commit/54b095d77b3b131622b3cf4cb5c689aa2dd10b6b) 714 [#235](https://github.com/npm/cli/pull/235) Add spec to dist-tag remove 715 function ([@theberbie](https://github.com/theberbie)) 716 717### DEPENDENCIES 718 719* [`dc8f9e52f`](https://github.com/npm/cli/commit/dc8f9e52f0bb107c0a6b20cc0c97cbc3b056c1b3) 720 `pacote@9.5.7`: Infer the ownership of all unpacked files in 721 `node_modules`, so that we never have user-owned files in root-owned 722 folders, or root-owned files in user-owned folders. 723 ([@isaacs](https://github.com/isaacs)) 724* [`bb33940c3`](https://github.com/npm/cli/commit/bb33940c32aad61704084e61ebd1bd8e7cacccc8) 725 `cmd-shim@3.0.0`: 726 * [`9c93ac3`](https://github.com/npm/cmd-shim/commit/9c93ac39e95b0d6ae852e842e4c5dba5e19687c2) 727 [#2](https://github.com/npm/cmd-shim/pull/2) 728 [npm#3380](https://github.com/npm/npm/issues/3380) Handle environment 729 variables properly ([@basbossink](https://github.com/basbossink)) 730 * [`2d277f8`](https://github.com/npm/cmd-shim/commit/2d277f8e84d45401747b0b9470058f168b974ad5) 731 [#25](https://github.com/npm/cmd-shim/pull/25) 732 [#36](https://github.com/npm/cmd-shim/pull/36) 733 [#35](https://github.com/npm/cmd-shim/pull/35) Fix 'no shebang' case by 734 always providing `$basedir` in shell script 735 ([@igorklopov](https://github.com/igorklopov)) 736 * [`adaf20b`](https://github.com/npm/cmd-shim/commit/adaf20b7fa2c09c2111a2506c6a3e53ed0831f88) 737 [#26](https://github.com/npm/cmd-shim/pull/26) Fix `$*` causing an 738 error when arguments contain parentheses 739 ([@satazor](https://github.com/satazor)) 740 * [`49f0c13`](https://github.com/npm/cmd-shim/commit/49f0c1318fd384e0031c3fd43801f0e22e1e555f) 741 [#30](https://github.com/npm/cmd-shim/pull/30) Fix paths for MSYS/MINGW 742 bash ([@dscho](https://github.com/dscho)) 743 * [`51a8af3`](https://github.com/npm/cmd-shim/commit/51a8af30990cb072cb30d67fc1b564b14746bba9) 744 [#34](https://github.com/npm/cmd-shim/pull/34) Add proper support for 745 PowerShell ([@ExE-Boss](https://github.com/ExE-Boss)) 746 * [`4c37e04`](https://github.com/npm/cmd-shim/commit/4c37e048dee672237e8962fdffca28e20e9f976d) 747 [#10](https://github.com/npm/cmd-shim/issues/10) Work around quoted 748 batch file names ([@isaacs](https://github.com/isaacs)) 749* [`a4e279544`](https://github.com/npm/cli/commit/a4e279544f7983e0adff1e475e3760f1ea85825a) 750 `npm-lifecycle@3.1.3` ([@isaacs](https://github.com/isaacs)): 751 * fail properly if `uid-number` raises an error 752* [`7086a1809`](https://github.com/npm/cli/commit/7086a1809bbfda9be81344b3949c7d3ac687ffc4) 753 `libcipm@4.0.3` ([@isaacs](https://github.com/isaacs)) 754* [`8845141f9`](https://github.com/npm/cli/commit/8845141f9d7827dae572c8cf26f2c775db905bd3) 755 `read-package-json@2.1.0` ([@isaacs](https://github.com/isaacs)) 756* [`51c028215`](https://github.com/npm/cli/commit/51c02821575d80035ebe853492d110db11a7d1b9) 757 `bin-links@1.1.3` ([@isaacs](https://github.com/isaacs)) 758* [`534a5548c`](https://github.com/npm/cli/commit/534a5548c9ebd59f0dd90e9ccca148ed8946efa6) 759 `read-cmd-shim@1.0.3` ([@isaacs](https://github.com/isaacs)) 760* [`3038f2fd5`](https://github.com/npm/cli/commit/3038f2fd5b1d7dd886ee72798241d8943690f508) 761 `gentle-fs@2.2.1` ([@isaacs](https://github.com/isaacs)) 762* [`a609a1648`](https://github.com/npm/cli/commit/a609a16489f76791697d270b499fd4949ab1f8c3) 763 `graceful-fs@4.2.2` ([@isaacs](https://github.com/isaacs)) 764* [`f0346f754`](https://github.com/npm/cli/commit/f0346f75490619a81b310bfc18646ae5ae2e0ea4) 765 `cacache@12.0.3` ([@isaacs](https://github.com/isaacs)) 766* [`ca9c615c8`](https://github.com/npm/cli/commit/ca9c615c8cff5c7db125735eb09f84d912d18694) 767 `npm-pick-manifest@3.0.0` ([@isaacs](https://github.com/isaacs)) 768* [`b417affbf`](https://github.com/npm/cli/commit/b417affbf7133dc7687fd809e4956a43eae3438a) 769 `pacote@9.5.8` ([@isaacs](https://github.com/isaacs)) 770 771### TESTS 772 773* [`b6df0913c`](https://github.com/npm/cli/commit/b6df0913ca73246f1fa6cfa0e81e34ba5f2b6204) 774 [#228](https://github.com/npm/cli/pull/228) Proper handing of 775 /usr/bin/node lifecycle-path test 776 ([@olivr70](https://github.com/olivr70)) 777* [`aaf98e88c`](https://github.com/npm/cli/commit/aaf98e88c78fd6c850d0a3d3ee2f61c02f63bc8c) 778 `npm-registry-mock@1.3.0` ([@isaacs](https://github.com/isaacs)) 779 780## v6.10.3 (2019-08-06): 781 782### BUGFIXES 783 784* [`27cccfbda`](https://github.com/npm/cli/commit/27cccfbdac8526cc807b07f416355949b1372a9b) 785 [#223](https://github.com/npm/cli/pull/223) vulns → vulnerabilities in 786 npm audit output ([@sapegin](https://github.com/sapegin)) 787* [`d5e865eb7`](https://github.com/npm/cli/commit/d5e865eb79329665a927cc2767b4395c03045dbb) 788 [#222](https://github.com/npm/cli/pull/222) 789 [#226](https://github.com/npm/cli/pull/226) install, doctor: don't crash 790 if registry unset ([@dmitrydvorkin](https://github.com/dmitrydvorkin), 791 [@isaacs](https://github.com/isaacs)) 792* [`5b3890226`](https://github.com/npm/cli/commit/5b389022652abeb0e1c278a152550eb95bc6c452) 793 [#227](https://github.com/npm/cli/pull/227) 794 [npm.community#9167](https://npm.community/t/npm-err-cb-never-called-permission-denied/9167/5) 795 Handle unhandledRejections, tell user what to do when encountering an 796 `EACCES` error in the cache. ([@isaacs](https://github.com/isaacs)) 797 798### DEPENDENCIES 799 800* [`77516df6e`](https://github.com/npm/cli/commit/77516df6eac94a6d7acb5e9ca06feaa0868d779b) 801 `licensee@7.0.3` ([@isaacs](https://github.com/isaacs)) 802* [`ceb993590`](https://github.com/npm/cli/commit/ceb993590e4e376a9a78264ce7bb4327fbbb37fe) 803 `query-string@6.8.2` ([@isaacs](https://github.com/isaacs)) 804* [`4050b9189`](https://github.com/npm/cli/commit/4050b91898c60e9b22998cf82b70b9b822de592a) 805 `hosted-git-info@2.8.2` 806 * [#46](https://github.com/npm/hosted-git-info/issues/46) 807 [#43](https://github.com/npm/hosted-git-info/issues/43) 808 [#47](https://github.com/npm/hosted-git-info/pull/47) 809 [#44](https://github.com/npm/hosted-git-info/pull/44) Add support for 810 GitLab subgroups ([@mterrel](https://github.com/mterrel), 811 [@isaacs](https://github.com/isaacs), 812 [@ybiquitous](https://github.com/ybiquitous)) 813 * [`3b1d629`](https://github.com/npm/hosted-git-info/commit/3b1d629) 814 [#48](https://github.com/npm/hosted-git-info/issues/48) fix http 815 protocol using sshurl by default 816 ([@fengmk2](https://github.com/fengmk2)) 817 * [`5d4a8d7`](https://github.com/npm/hosted-git-info/commit/5d4a8d7) 818 ignore noCommittish on tarball url generation 819 ([@isaacs](https://github.com/isaacs)) 820 * [`1692435`](https://github.com/npm/hosted-git-info/commit/1692435) 821 use gist tarball url that works for anonymous gists 822 ([@isaacs](https://github.com/isaacs)) 823 * [`d5cf830`](https://github.com/npm/hosted-git-info/commit/d5cf8309be7af884032616c63ea302ce49dd321c) 824 Do not allow invalid gist urls ([@isaacs](https://github.com/isaacs)) 825 * [`e518222`](https://github.com/npm/hosted-git-info/commit/e5182224351183ce619dd5ef00019ae700ed37b7) 826 Use LRU cache to prevent unbounded memory consumption 827 ([@iarna](https://github.com/iarna)) 828 829## v6.10.2 (2019-07-23): 830 831tl;dr - Fixes several issues with the cache when npm is run as `sudo` on 832Unix systems. 833 834### TESTING 835 836* [`2a78b96f8`](https://github.com/npm/cli/commit/2a78b96f830bbd834720ccc9eacccc54915ae6f7) 837 check test cache for root-owned files 838 ([@isaacs](https://github.com/isaacs)) 839* [`108646ebc`](https://github.com/npm/cli/commit/108646ebc12f3eeebaa0a45884c45991a45e57e4) 840 run sudo tests on Travis-CI ([@isaacs](https://github.com/isaacs)) 841* [`cf984e946`](https://github.com/npm/cli/commit/cf984e946f453cbea2fcc7a59608de3f24ab74c3) 842 set --no-esm tap flag ([@isaacs](https://github.com/isaacs)) 843* [`8e0a3100d`](https://github.com/npm/cli/commit/8e0a3100dffb3965bb3dc4240e82980dfadf2f3c) 844 add script to run tests and leave fixtures for inspection and debugging 845 ([@isaacs](https://github.com/isaacs)) 846 847### BUGFIXES 848 849* [`25f4f73f6`](https://github.com/npm/cli/commit/25f4f73f6dc9744757787c82351120cd1baee5f8) 850 add a util for writing arbitrary files to cache This prevents metrics 851 timing and debug logs from becoming root-owned. 852 ([@isaacs](https://github.com/isaacs)) 853* [`2c61ce65d`](https://github.com/npm/cli/commit/2c61ce65d6b67100fdf3fcb9729055b669cb1a1d) 854 infer cache owner from parent dir in `correct-mkdir` util 855 ([@isaacs](https://github.com/isaacs)) 856* [`235e5d6df`](https://github.com/npm/cli/commit/235e5d6df6f427585ec58425f1f3339d08f39d8a) 857 ensure correct owner on cached all-packages metadata 858 ([@isaacs](https://github.com/isaacs)) 859* [`e2d377bb6`](https://github.com/npm/cli/commit/e2d377bb6419d8a3c1d80a73dba46062b4dad336) 860 [npm.community#8540](https://npm.community/t/npm-audit-fails-with-child-requires-fails-because-requires-must-be-an-object/8540) 861 audit: report server error on failure 862 ([@isaacs](https://github.com/isaacs)) 863* [`52576a39e`](https://github.com/npm/cli/commit/52576a39ed75d94c46bb2c482fd38d2c6ea61c56) 864 [#216](https://github.com/npm/cli/pull/216) 865 [npm.community#5385](https://npm.community/t/6-8-0-npm-ci-fails-with-local-dependency/5385) 866 [npm.community#6076](https://npm.community/t/npm-ci-fail-to-local-packages/6076) 867 Fix `npm ci` with `file:` dependencies. Partially reverts 868 [#40](https://github.com/npm/cli/pull/40)/[#86](https://github.com/npm/cli/pull/86), 869 recording dependencies of linked deps in order for `npm ci` to work. 870 ([@jfirebaugh](https://github.com/jfirebaugh)) 871 872### DEPENDENCIES 873 874* [`0fefdee13`](https://github.com/npm/cli/commit/0fefdee130fd7d0dbb240fb9ecb50a793fbf3d29) 875 `cacache@12.0.2` ([@isaacs](https://github.com/isaacs)) 876 * infer uid/gid instead of accepting as options, preventing the 877 overwhelming majority of cases where root-owned files end up in the 878 cache folder. 879 ([ac84d14](https://github.com/npm/cacache/commit/ac84d14)) 880 ([@isaacs](https://github.com/isaacs)) 881 ([#1](https://github.com/npm/cacache/pull/1)) 882 * **i18n:** add another error message 883 ([676cb32](https://github.com/npm/cacache/commit/676cb32)) 884 ([@zkat](https://github.com/zkat)) 885* [`e1d87a392`](https://github.com/npm/cli/commit/e1d87a392371a070b0788ab7bfc62be18b21e9ad) 886 `pacote@9.5.4` ([@isaacs](https://github.com/isaacs)) 887 * git: ensure stream failures are reported 888 ([7f07b5d](https://github.com/npm/pacote/commit/7f07b5d)) 889 [#1](https://github.com/npm/pacote/issues/1) 890 ([@lddubeau](https://github.com/lddubeau)) 891* [`3f035bf09`](https://github.com/npm/cli/commit/3f035bf098e2feea76574cec18b04812659aa16d) 892 `infer-owner@1.0.4` ([@isaacs](https://github.com/isaacs)) 893* [`ba3283112`](https://github.com/npm/cli/commit/ba32831126591d2f6f48e31a4a2329b533b1ff19) 894 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 895* [`ee90c334d`](https://github.com/npm/cli/commit/ee90c334d271383d0325af42f20f80f34cb61f07) 896 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 897* [`1e480c384`](https://github.com/npm/cli/commit/1e480c38416982ae28b5cdd48c698ca59d3c0395) 898 `libnpmaccess@3.0.2` ([@isaacs](https://github.com/isaacs)) 899* [`7662ee850`](https://github.com/npm/cli/commit/7662ee850220c71ecaec639adbc7715286f0d28b) 900 `libnpmhook@5.0.3` ([@isaacs](https://github.com/isaacs)) 901* [`1357fadc6`](https://github.com/npm/cli/commit/1357fadc613d0bfeb40f9a8f3ecace2face2fe2c) 902 `libnpmorg@1.0.1` ([@isaacs](https://github.com/isaacs)) 903* [`a621b5cb6`](https://github.com/npm/cli/commit/a621b5cb6c881f95a11af86a8051754a67ae017c) 904 `libnpmsearch@2.0.2` ([@isaacs](https://github.com/isaacs)) 905* [`560cd31dd`](https://github.com/npm/cli/commit/560cd31dd51b6aa2e396ccdd7289fab0a50b5608) 906 `libnpmteam@1.0.2` ([@isaacs](https://github.com/isaacs)) 907* [`de7ae0867`](https://github.com/npm/cli/commit/de7ae0867d4c0180edc283457ce0b4e8e5eee554) 908 `npm-profile@4.0.2` ([@isaacs](https://github.com/isaacs)) 909* [`e95da463c`](https://github.com/npm/cli/commit/e95da463cb7a325457ef411a569d7ef4bf76901d) 910 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 911* [`554b641d4`](https://github.com/npm/cli/commit/554b641d49d135ae8d137e83aa288897c32dacc6) 912 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 913* [`06772f34a`](https://github.com/npm/cli/commit/06772f34ab851440dcd78574736936c674a84aed) 914 `node-gyp@5.0.3` ([@isaacs](https://github.com/isaacs)) 915* [`85358db80`](https://github.com/npm/cli/commit/85358db80d6ccb5f7bc9a0b4d558ac6dd2468394) 916 `npm-lifecycle@3.1.2` ([@isaacs](https://github.com/isaacs)) 917 * [`051cf20`](https://github.com/npm/npm-lifecycle/commit/051cf20072a01839c17920d2e841756251c4f924) 918 [#26](https://github.com/npm/npm-lifecycle/pull/26) fix switches for 919 alternative shells on Windows 920 ([@gucong3000](https://github.com/gucong3000)) 921 * [`3aaf954`](https://github.com/npm/npm-lifecycle/commit/3aaf95435965e8f7acfd955582cf85237afd2c9b) 922 [#25](https://github.com/npm/npm-lifecycle/pull/25) set only one PATH 923 env variable for child process on Windows 924 ([@zkochan](https://github.com/zkochan)) 925 * [`ea18ed2`](https://github.com/npm/npm-lifecycle/commit/ea18ed2b754ca7f11998cad70d88e9004c5bef4a) 926 [#36](https://github.com/npm/npm-lifecycle/pull/36) 927 [#11](https://github.com/npm/npm-lifecycle/issue/11) 928 [#18](https://github.com/npm/npm-lifecycle/issue/18) remove 929 procInterrupt listener on SIGINT in procError 930 ([@mattshin](https://github.com/mattshin)) 931 * [`5523951`](https://github.com/npm/npm-lifecycle/commit/55239519c57b82521605622e6c71640a31ed4586) 932 [#29](https://github.com/npm/npm-lifecycle/issue/29) 933 [#30](https://github.com/npm/npm-lifecycle/pull/30) Use platform 934 specific path casing if present 935 ([@mattezell](https://github.com/mattezell)) 936 937## v6.10.1 (2019-07-11): 938 939### BUGFIXES 940 941* [`3cbd57712`](https://github.com/npm/cli/commit/3cbd577120a9da6e51bb8b13534d1bf71ea5712c) 942 fix(git): strip GIT environs when running git 943 ([@isaacs](https://github.com/isaacs)) 944* [`a81a8c4c4`](https://github.com/npm/cli/commit/a81a8c4c466f510215a51cef1bb08544d11844fe) 945 [#206](https://github.com/npm/cli/pull/206) improve isOnly(Dev,Optional) 946 ([@larsgw](https://github.com/larsgw)) 947* [`172f9aca6`](https://github.com/npm/cli/commit/172f9aca67a66ee303c17f90a994cd52fc66552a) 948 [#179](https://github.com/npm/cli/pull/179) fix-xmas-underline 949 ([@raywu0123](https://github.com/raywu0123)) 950* [`f52673fc7`](https://github.com/npm/cli/commit/f52673fc7284e58af8c04533e82b76bf7add72cf) 951 [#212](https://github.com/npm/cli/pull/212) build: use `/usr/bin/env` to 952 load bash ([@rsmarples](https://github.com/rsmarples)) 953 954### DEPENDENCIES 955 956* [`ef4445ad3`](https://github.com/npm/cli/commit/ef4445ad34a53b5639499c8e3c9752f62ee6f37c) 957 [#208](https://github.com/npm/cli/pull/208) `node-gyp@5.0.2` 958 ([@irega](https://github.com/irega)) 959* [`c0d611356`](https://github.com/npm/cli/commit/c0d611356f7b23077e97574b01c8886e544db425) 960 `npm-lifecycle@3.0.0` ([@isaacs](https://github.com/isaacs)) 961* [`7716ba972`](https://github.com/npm/cli/commit/7716ba9720270d5b780755a5bb1ce79702067f1f) 962 `libcipm@4.0.0` ([@isaacs](https://github.com/isaacs)) 963* [`42d22e837`](https://github.com/npm/cli/commit/42d22e8374c7d303d94e405d7385d94dd2558814) 964 `libnpm@3.0.0` ([@isaacs](https://github.com/isaacs)) 965* [`a2ea7f9ff`](https://github.com/npm/cli/commit/a2ea7f9ff64ae743d05fdbf7d46fb9afafa8aa6f) 966 `semver@5.7.0` ([@isaacs](https://github.com/isaacs)) 967* [`429226a5e`](https://github.com/npm/cli/commit/429226a5e992cd907d4f19bd738037007cf78c1f) 968 `lru-cache@5.1.1` ([@isaacs](https://github.com/isaacs)) 969* [`175670ea6`](https://github.com/npm/cli/commit/175670ea65cca03f8b2e957df3dd4b8b0efd0e1f) 970 `npm-registry-fetch@3.9.1`: ([@isaacs](https://github.com/isaacs)) 971* [`0d0517f7f`](https://github.com/npm/cli/commit/0d0517f7f8c902b5064ac18fb4015b31750ad2b2) 972 `call-limit@1.1.1` ([@isaacs](https://github.com/isaacs)) 973* [`741400429`](https://github.com/npm/cli/commit/74140042917ea241062a812ceb65c5423c2bafa9) 974 `glob@7.1.4` ([@isaacs](https://github.com/isaacs)) 975* [`bddd60e30`](https://github.com/npm/cli/commit/bddd60e302283a4a70d35f8f742e42bd13f4dabf) 976 `inherits@2.0.4` ([@isaacs](https://github.com/isaacs)) 977* [`4acf03fd1`](https://github.com/npm/cli/commit/4acf03fd140ed3ddb2dcf3fdc9756bc3f5a8bcbb) 978 `libnpmsearch@2.0.1` ([@isaacs](https://github.com/isaacs)) 979* [`c2bd17291`](https://github.com/npm/cli/commit/c2bd17291a86bea7ced2fbd07d66d013bd7a7560) 980 `marked@0.6.3` ([@isaacs](https://github.com/isaacs)) 981* [`7f0221bb1`](https://github.com/npm/cli/commit/7f0221bb1bb41ffc933c785940e227feae38c80c) 982 `marked-man@0.6.0` ([@isaacs](https://github.com/isaacs)) 983* [`f458fe7dd`](https://github.com/npm/cli/commit/f458fe7dd3bebddf603aaae183a424ea8aaa018f) 984 `npm-lifecycle@2.1.1` ([@isaacs](https://github.com/isaacs)) 985* [`009752978`](https://github.com/npm/cli/commit/0097529780269c28444f1efa0d7c131d47a933eb) 986 `node-gyp@4.0.0` ([@isaacs](https://github.com/isaacs)) 987* [`0fa2bb438`](https://github.com/npm/cli/commit/0fa2bb4386379d6e9d8c95db08662ec0529964f9) 988 `query-string@6.8.1` ([@isaacs](https://github.com/isaacs)) 989* [`b86450929`](https://github.com/npm/cli/commit/b86450929796950a1fe4b1f9b02b1634c812f3bb) 990 `tar-stream@2.1.0` ([@isaacs](https://github.com/isaacs)) 991* [`25db00fe9`](https://github.com/npm/cli/commit/25db00fe953453198adb9e1bd71d1bc2a9f04aaa) 992 `worker-farm@1.7.0` ([@isaacs](https://github.com/isaacs)) 993* [`8dfbe8610`](https://github.com/npm/cli/commit/8dfbe861085dfa8fa56bb504b4a00fba04c34f9d) 994 `readable-stream@3.4.0` ([@isaacs](https://github.com/isaacs)) 995* [`f6164d5dd`](https://github.com/npm/cli/commit/f6164d5ddd072eabdf2237f1694a31efd746eb1d) 996 [isaacs/chownr#21](https://github.com/isaacs/chownr/pull/21) 997 [isaacs/chownr#20](https://github.com/isaacs/chownr/issues/20) 998 [npm.community#7901](https://npm.community/t/7901/) 999 [npm.community#8203](https://npm.community/t/8203) `chownr@1.1.2` This 1000 fixes an EISDIR error from cacache on Darwin in Node versions prior to 1001 10.6. ([@isaacs](https://github.com/isaacs)) 1002 1003## v6.10.0 (2019-07-03): 1004 1005### FEATURES 1006 1007* [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35) 1008 [#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for 1009 outdated --json ([@sreeramjayan](https://github.com/sreeramjayan)) 1010* [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc) 1011 [#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space 1012 after hyphen ([@ffflorian](https://github.com/ffflorian)) 1013* [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c) 1014 [#202](https://github.com/npm/cli/pull/202) enable production flag for 1015 npm audit ([@CalebCourier](https://github.com/CalebCourier)) 1016* [`d192904d0`](https://github.com/npm/cli/commit/d192904d0) 1017 [#178](https://github.com/npm/cli/pull/178) fix: Return a value for 1018 `view` when in silent mode 1019 ([@stayradiated](https://github.com/stayradiated)) 1020* [`39d473adf`](https://github.com/npm/cli/commit/39d473adf) 1021 [#185](https://github.com/npm/cli/pull/185) Allow git to follow global 1022 tagsign config ([@junderw](https://github.com/junderw)) 1023 1024### BUGFIXES 1025 1026* [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b) 1027 [#201](https://github.com/npm/cli/pull/163) 1028 [npm/npm#17858](https://github.com/npm/npm/issues/17858) 1029 [npm/npm#18042](https://github.com/npm/npm/issues/18042) 1030 [npm.community#644](https://npm.community/t/644) do not crash when 1031 removing nameless packages 1032 ([@SteveVanOpstal](https://github.com/SteveVanOpstal) and 1033 [@isaacs](https://github.com/isaacs)) 1034* [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111) 1035 [#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as 1036 `node.exe`) in npm's local dir on Windows 1037 ([@rgoulais](https://github.com/rgoulais)) 1038* [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789) 1039 [#180](https://github.com/npm/cli/pull/180) 1040 [npm.community#6187](https://npm.community/t/6187) Fix handling of 1041 `remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw)) 1042 1043### TESTING 1044 1045* [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update 1046 to include new v12 LTS ([@isaacs](https://github.com/isaacs)) 1047* [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky 1048 debug-logs test ([@isaacs](https://github.com/isaacs)) 1049* [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out 1050 waiting for gpg user input ([@isaacs](https://github.com/isaacs)) 1051* [`d2d301704`](https://github.com/npm/cli/commit/d2d301704) 1052 [#195](https://github.com/npm/cli/pull/195) Add the arm64 check for 1053 legacy-platform-all.js test case. 1054 ([@ossdev07](https://github.com/ossdev07)) 1055* [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests 1056 ([@isaacs](https://github.com/isaacs)) 1057 1058### DOCUMENTATION 1059 1060* [`f5857e263`](https://github.com/npm/cli/commit/f5857e263) 1061 [#192](https://github.com/npm/cli/pull/192) Clarify usage of 1062 bundledDependencies 1063 ([@john-osullivan](https://github.com/john-osullivan)) 1064* [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66) 1065 [#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param 1066 ([@ngraef](https://github.com/ngraef)) 1067 1068### DEPENDENCIES 1069 1070* [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320) 1071 graceful-fs@4.2.0 ([@isaacs](https://github.com/isaacs)) 1072* [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09) 1073 read-package-tree@5.3.1 ([@isaacs](https://github.com/isaacs)) 1074 * [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536) 1075 Use custom caching `realpath` implementation, dramatically reducing 1076 `lstat` calls when reading the package tree 1077 ([@isaacs](https://github.com/isaacs)) 1078* [`39538b460`](https://github.com/npm/cli/commit/39538b460) 1079 write-file-atomic@2.4.3 ([@isaacs](https://github.com/isaacs)) 1080 * [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552) 1081 [#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors 1082 raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage)) 1083* [`042193069`](https://github.com/npm/cli/commit/042193069) pacote@9.5.1 1084 ([@isaacs](https://github.com/isaacs)) 1085 * [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051) 1086 [#172](https://github.com/zkat/pacote/pull/172) limit git retry 1087 times, avoid unlimited retries ([小秦](https://github.com/xqin)) 1088 * [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c) 1089 [#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix 1090 "TypeError: err.code.match is not a function" error 1091 ([@jviotti](https://github.com/jviotti)) 1092* [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) cacache@11.3.3 1093 ([@isaacs](https://github.com/isaacs)) 1094 * [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5) 1095 [#146](https://github.com/zkat/cacache/pull/146) 1096 [npm.community#2395](https://npm.community/t/2395) fix(config): Add 1097 ssri config 'error' option ([@larsgw](https://github.com/larsgw)) 1098 * [`5156561`](https://github.com/npm/cacache/commit/5156561) 1099 fix(write): avoid a `cb never called` situation 1100 ([@zkat](https://github.com/zkat)) 1101 * [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0) 1102 [#166](https://github.com/zkat/cacache/pull/166) 1103 [#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for 1104 `path` property in get.info 1105 ([@hdgarrood](https://github.com/hdgarrood)) 1106* [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) bluebird@3.5.5 1107 ([@isaacs](https://github.com/isaacs)) 1108* [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) tar@4.4.10 1109 ([@isaacs](https://github.com/isaacs)) 1110 * [`c80341a`](https://github.com/npm/node-tar/commit/c80341a) 1111 [#215](https://github.com/npm/node-tar/pull/215) Fix 1112 encoding/decoding of base-256 numbers 1113 ([@justfalter](https://github.com/justfalter)) 1114 * [`77522f0`](https://github.com/npm/node-tar/commit/77522f0) 1115 [#204](https://github.com/npm/node-tar/issues/204) 1116 [#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead 1117 of `lstat` when checking CWD ([@stkb](https://github.com/stkb)) 1118* [`ec6236210`](https://github.com/npm/cli/commit/ec6236210) 1119 npm-packlist@1.4.4 ([@isaacs](https://github.com/isaacs)) 1120 * [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e) 1121 [#30](https://github.com/npm/npm-packlist/issues/30) Sort package 1122 tarball entries by file type for compression benefits 1123 ([@isaacs](https://github.com/isaacs)) 1124 * [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045) 1125 Ignore `.DS_Store` files as well as folders 1126 ([@isaacs](https://github.com/isaacs)) 1127 * [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never 1128 include .git folders in package root. (Note: this prevents the issue 1129 that broke the v6.9.1 release.) 1130 ([@isaacs](https://github.com/isaacs)) 1131* [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream 1132 in node-gyp ([@isaacs](https://github.com/isaacs)) 1133 * Addresses [security advisory 1134 #886](https://www.npmjs.com/advisories/886) 1135* [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee) 1136 [#183](https://github.com/npm/cli/pull/183) licensee@7.0.2 1137 ([@kemitchell](https://github.com/kemitchell)) 1138* [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0) 1139 readable-stream@3.3.0 ([@isaacs](https://github.com/isaacs)) 1140* [`f5e884909`](https://github.com/npm/cli/commit/f5e884909) 1141 npm-registry-mock@1.2.1 ([@isaacs](https://github.com/isaacs)) 1142* [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35) 1143 npm-registry-couchapp@2.7.2 ([@isaacs](https://github.com/isaacs)) 1144 1145## v6.9.2 (2019-06-27): 1146 1147This release is identical to v6.9.1, but we had to publish a new version 1148due to [a .git directory in the release](https://npm.community/t/8454). 1149 1150## v6.9.1 (2019-06-26): 1151 1152### BUGFIXES 1153 1154* [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611) 1155 [#165](https://github.com/npm/cli/pull/165) 1156 Update `knownBroken` version. 1157 ([@ljharb](https://github.com/ljharb)) 1158* [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1) 1159 [npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929) 1160 Fix `outdated` rendering for global dependencies. 1161 ([@zkat](https://github.com/zkat)) 1162* [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc) 1163 [npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259) 1164 Fix OTP for token create and remove. 1165 ([@zkat](https://github.com/zkat)) 1166 1167### DEPENDENCIES 1168 1169* [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc) 1170 `sha@3.0.0` 1171 ([@aeschright](https://github.com/aeschright)) 1172* [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5) 1173 `query-string@6.4.0` 1174 ([@aeschright](https://github.com/aeschright)) 1175* [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64) 1176 `readable-stream@3.2.0` 1177 ([@aeschright](https://github.com/aeschright)) 1178* [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e) 1179 `tacks@1.3.0` 1180 ([@aeschright](https://github.com/aeschright)) 1181* [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8) 1182 `tap@12.6.0` 1183 ([@aeschright](https://github.com/aeschright)) 1184* [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3) 1185 `tar-stream@2.0.1` 1186 ([@aeschright](https://github.com/aeschright)) 1187 1188## v6.9.0 (2019-02-20): 1189 1190### FEATURES 1191 1192* [`2ba3a0f67`](https://github.com/npm/cli/commit/2ba3a0f6721f6d5a16775aebce6012965634fc7c) 1193 [#90](https://github.com/npm/cli/pull/90) 1194 Time traveling installs using the `--before` flag. 1195 ([@zkat](https://github.com/zkat)) 1196* [`b7b54f2d1`](https://github.com/npm/cli/commit/b7b54f2d18e2d8d65ec67c850b21ae9f01c60e7e) 1197 [#3](https://github.com/npm/cli/pull/3) 1198 Add support for package aliases. This allows packages to be installed under a 1199 different directory than the package name listed in `package.json`, and adds a 1200 new dependency type to allow this to be done for registry dependencies. 1201 ([@zkat](https://github.com/zkat)) 1202* [`684bccf06`](https://github.com/npm/cli/commit/684bccf061dfc97bb759121bc0ad635e01c65868) 1203 [#146](https://github.com/npm/cli/pull/146) 1204 Always save `package-lock.json` when using `--package-lock-only`. 1205 ([@aeschright](https://github.com/aeschright)) 1206* [`b8b8afd40`](https://github.com/npm/cli/commit/b8b8afd4048b4ba1181e00ba2ac49ced43936ce0) 1207 [#139](https://github.com/npm/cli/pull/139) 1208 Make empty-string run-scripts run successfully as a no-op. 1209 ([@vlasy](https://github.com/vlasy)) 1210* [`8047b19b1`](https://github.com/npm/cli/commit/8047b19b1b994fd4b4e7b5c91d7cc4e0384bd5e4) 1211 [npm.community#3784](https://npm.community/t/3784) 1212 Match git semver ranges when flattening the tree. 1213 ([@larsgw](https://github.com/larsgw)) 1214* [`e135c2bb3`](https://github.com/npm/cli/commit/e135c2bb360dcf00ecee34a95985afec21ba3655) 1215 [npm.community#1725](https://npm.community/t/1725?u=larsgw) 1216 Re-enable updating local packages. 1217 ([@larsgw](https://github.com/larsgw)) 1218 1219### BUGFIXES 1220 1221* [`cf09fbaed`](https://github.com/npm/cli/commit/cf09fbaed489d908e9b551382cc5f61bdabe99a9) 1222 [#153](https://github.com/npm/cli/pull/153) 1223 Set modified to undefined in `npm view` when `time` is not available. This 1224 fixes a bug where `npm view` would crash on certain third-party registries. 1225 ([@simonua](https://github.com/simonua)) 1226* [`774fc26ee`](https://github.com/npm/cli/commit/774fc26eeb01345c11bd8c97e2c4f328d419d9b5) 1227 [#154](https://github.com/npm/cli/pull/154) 1228 Print out tar version in `install.sh` only when the flag is supported not all 1229 the tar implementations support --version flag. This allows the install script 1230 to work in OpenBSD, for example. 1231 ([@agudulin](https://github.com/agudulin)) 1232* [`863baff11`](https://github.com/npm/cli/commit/863baff11d8c870f1a0d9619bb5133c67d71e407) 1233 [#158](https://github.com/npm/cli/pull/158) 1234 Fix typo in error message for `npm stars`. 1235 ([@phihag](https://github.com/phihag)) 1236* [`a805a95ad`](https://github.com/npm/cli/commit/a805a95ad8832ef5008671f4bd4c11b83e32e0f2) 1237 [npm.community#4227](https://npm.community/t/4227) 1238 Strip version info from pkg on E404. This improves the error messaging format. 1239 ([@larsgw](https://github.com/larsgw)) 1240 1241### DOCS 1242 1243* [`5d7633833`](https://github.com/npm/cli/commit/5d76338338621fd0b3d4f7914a51726d27569ee1) 1244 [#160](https://github.com/npm/cli/pull/160) 1245 Add `npm add` as alias to npm install in docs. 1246 ([@ahasall](https://github.com/ahasall)) 1247* [`489c2211c`](https://github.com/npm/cli/commit/489c2211c96a01d65df50fd57346c785bcc3efe6) 1248 [#162](https://github.com/npm/cli/pull/162) 1249 Fix link to RFC #10 in the changelog. 1250 ([@mansona](https://github.com/mansona)) 1251* [`433020ead`](https://github.com/npm/cli/commit/433020ead5251b562bc3b0f5f55341a5b8cc9023) 1252 [#135](https://github.com/npm/cli/pull/135) 1253 Describe exit codes in npm-audit docs. 1254 ([@emilis-tm](https://github.com/emilis-tm)) 1255 1256### DEPENDENCIES 1257 1258* [`ee6b6746b`](https://github.com/npm/cli/commit/ee6b6746b04f145dfe489af2d26667ac32ba0cef) 1259 [zkat/make-fetch-happen#29](https://github.com/zkat/make-fetch-happen/issues/29) 1260 `agent-base@4.2.1` 1261 ([@TooTallNate](https://github.com/TooTallNate)) 1262* [`2ce23baf5`](https://github.com/npm/cli/commit/2ce23baf53b1ce7d11b8efb80c598ddaf9cef9e7) 1263 `lock-verify@2.1.0`: 1264 Adds support for package aliases 1265 ([@zkat](https://github.com/zkat)) 1266* [`baaedbc6e`](https://github.com/npm/cli/commit/baaedbc6e2fc370d73b35e7721794719115507cc) 1267 `pacote@9.5.0`: 1268 Adds opts.before support 1269 ([@zkat](https://github.com/zkat)) 1270* [`57e771a03`](https://github.com/npm/cli/commit/57e771a032165d1e31e71d0ff7530442139c21a6) 1271 [#164](https://github.com/npm/cli/pull/164) 1272 `licensee@6.1.0` 1273 ([@kemitchell](https://github.com/kemitchell)) 1274* [`2b78288d4`](https://github.com/npm/cli/commit/2b78288d4accd10c1b7cc6c36bc28045f5634d91) 1275 add core to default inclusion tests in pack 1276 ([@Kat Marchán](https://github.com/Kat Marchán)) 1277* [`9b8b6513f`](https://github.com/npm/cli/commit/9b8b6513fbce92764b32a067322984985ff683fe) 1278 [npm.community#5382](https://npm.community/t/npm-pack-leaving-out-files-6-8-0-only/5382) 1279 `npm-packlist@1.4.1`: Fixes bug where `core/` directories were being suddenly excluded. 1280 ([@zkat](https://github.com/zkat)) 1281 1282## v6.8.0 (2019-02-07): 1283 1284This release includes an implementation of [RFC #10](https://github.com/npm/rfcs/blob/latest/implemented/0010-monorepo-subdirectory-declaration.md), documenting an optional field that can be used to specify 1285the directory path for a package within a monorepo. 1286 1287### NEW FEATURES 1288 1289* [`3663cdef2`](https://github.com/npm/cli/commit/3663cdef205fa9ba2c2830e5ef7ceeb31c30298c) 1290 [#140](https://github.com/npm/cli/pull/140) 1291 Update package.json docs to include repository.directory details. 1292 ([@greysteil](https://github.com/greysteil)) 1293 1294### BUGFIXES 1295 1296* [`550bf703a`](https://github.com/npm/cli/commit/550bf703ae3e31ba6a300658ae95b6937f67b68f) 1297 Add @types to ignore list to fix git clean -fd. 1298 ([@zkat](https://github.com/zkat)) 1299* [`cdb059293`](https://github.com/npm/cli/commit/cdb0592939d6256c80f7ec5a2b6251131a512a2a) 1300 [#144](https://github.com/npm/cli/pull/144) 1301 Fix common.npm callback arguments. 1302 ([@larsgw](https://github.com/larsgw)) 1303* [`25573e9b9`](https://github.com/npm/cli/commit/25573e9b9d5d26261c68d453f06db5b3b1cd6789) 1304 [npm.community#4770](https://npm.community/t/https://npm.community/t/4770) 1305 Show installed but unmet peer deps. 1306 ([@larsgw](https://github.com/larsgw)) 1307* [`ce2c4bd1a`](https://github.com/npm/cli/commit/ce2c4bd1a2ce7ac1727a4ca9a350b743a2e27b2a) 1308 [#149](https://github.com/npm/cli/pull/149) 1309 Use figgy-config to make sure extra opts are there. 1310 ([@zkat](https://github.com/zkat)) 1311* [`3c22d1a35`](https://github.com/npm/cli/commit/3c22d1a35878f73c0af8ea5968b962a85a1a9b84) 1312 [npm.community#5101](https://npm.community/t/npm-6-6-0-breaks-access-to-ls-collaborators/5101) 1313 Fix `ls-collaborators` access error for non-scoped case. 1314 ([@zkat](https://github.com/zkat)) 1315* [`d5137091d`](https://github.com/npm/cli/commit/d5137091dd695a2980f7ade85fdc56b2421ff677) 1316 [npm.community#754](https://npm.community/t/npm-install-for-package-with-local-dependency-fails/754) 1317 Fix issue with sub-folder local references. 1318 ([@iarna](https://github.com/iarna)) 1319 ([@jhecking](https://github.com/jhecking)) 1320 1321### DEPENDENCY BUMPS 1322 1323* [`d72141080`](https://github.com/npm/cli/commit/d72141080ec8fcf35bcc5650245efbe649de053e) 1324 `npm-registry-couchapp@2.7.1` 1325 ([@zkat](https://github.com/zkat)) 1326* [`671cad1b1`](https://github.com/npm/cli/commit/671cad1b18239d540da246d6f78de45d9f784396) 1327 `npm-registry-fetch@3.9.0`: 1328 Make sure publishing with legacy username:password `_auth` works again. 1329 ([@zkat](https://github.com/zkat)) 1330* [`95ca1aef4`](https://github.com/npm/cli/commit/95ca1aef4077c8e68d9f4dce37f6ba49b591c4ca) 1331 `pacote@9.4.1` 1332 ([@aeschright](https://github.com/aeschright)) 1333* [`322fef403`](https://github.com/npm/cli/commit/322fef40376e71cd100159dc914e7ca89faae327) 1334 `normalize-package-data@2.5.0` 1335 ([@aeschright](https://github.com/aeschright)) 1336* [`32d34c0da`](https://github.com/npm/cli/commit/32d34c0da4f393a74697297667eb9226155ecc6b) 1337 `npm-packlist@1.3.0` 1338 ([@aeschright](https://github.com/aeschright)) 1339* [`338571cf0`](https://github.com/npm/cli/commit/338571cf0bd3a1e2ea800464d57581932ff0fb11) 1340 `read-package-tree@5.2.2` 1341 ([@zkat](https://github.com/zkat)) 1342 1343### MISC 1344 1345* [`89b23a5f7`](https://github.com/npm/cli/commit/89b23a5f7b0ccdcdda1d7d4d3eafb6903156d186) 1346 [#120](https://github.com/npm/cli/pull/120) 1347 Use `const` in lib/fetch-package-metadata.md. 1348 ([@watilde](https://github.com/watilde)) 1349* [`4970d553c`](https://github.com/npm/cli/commit/4970d553c0ea66128931d118469fd31c87cc7986) 1350 [#126](https://github.com/npm/cli/pull/126) 1351 Replace ronn with marked-man in `.npmignore`. 1352 ([@watilde](https://github.com/watilde)) 1353* [`d9b6090dc`](https://github.com/npm/cli/commit/d9b6090dc26cd0fded18b4f80248cff3e51bb185) 1354 [#138](https://github.com/npm/cli/pull/138) 1355 Reduce work to test if executable ends with a 'g'. 1356 ([@elidoran](https://github.com/elidoran)) 1357 ([@larsgw](https://github.com/larsgw)) 1358 1359## v6.7.0 (2019-01-23): 1360 1361Hey y'all! This is a quick hotfix release that includes some important fixes to 1362`npm@6.6.0` related to the large rewrite/refactor. We're tagging it as a feature 1363release because the changes involve some minor new features, and semver is 1364semver, but there's nothing major here. 1365 1366### NEW FEATURES 1367 1368* [`50463f58b`](https://github.com/npm/cli/commit/50463f58b4b70180a85d6d8c10fcf50d8970ef5e) 1369 Improve usage errors to `npm org` commands and add optional filtering to `npm 1370 org ls` subcommand. 1371 ([@zkat](https://github.com/zkat)) 1372 1373### BUGFIXES 1374 1375* [`4027070b0`](https://github.com/npm/cli/commit/4027070b03be3bdae2515f2291de89b91f901df9) 1376 Fix default usage printout for `npm org` so you actually see how it's supposed 1377 to be used. 1378 ([@zkat](https://github.com/zkat)) 1379* [`cfea6ea5b`](https://github.com/npm/cli/commit/cfea6ea5b67ec5e4ec57e3a9cb8c82d018cb5476) 1380 fix default usage message for npm hook 1381 ([@zkat](https://github.com/zkat)) 1382 1383### DOCS 1384 1385* [`e959e1421`](https://github.com/npm/cli/commit/e959e14217d751ddb295565fd75cc81de1ee0d5b) 1386 Add manpage for `npm org` command. 1387 ([@zkat](https://github.com/zkat)) 1388 1389### DEPENDENCY BUMPS 1390 1391* [`8543fc357`](https://github.com/npm/cli/commit/8543fc3576f64e91f7946d4c56a5ffb045b55156) 1392 `pacote@9.4.0`: Fall back to "fullfat" packuments on ETARGET errors. This will 1393 make it so that, when a package is published but the corgi follower hasn't 1394 caught up, users can still install a freshly-published package. 1395 ([@zkat](https://github.com/zkat)) 1396* [`75475043b`](https://github.com/npm/cli/commit/75475043b03a254b2e7db2c04c3f0baea31d8dc5) 1397 [npm.community#4752](https://npm.community/t/npm-6-6-0-broke-authentication-with-npm-registry-couchapp/4752) 1398 `libnpmpublish@1.1.1`: Fixes auth error for username/password legacy authentication. 1399 ([@sreeramjayan](https://github.com/sreeramjayan)) 1400* [`0af8c00ac`](https://github.com/npm/cli/commit/0af8c00acb01849362ffca25b567cc62447c7175) 1401 [npm.community#4746](https://npm.community/t/npm-6-6-0-release-breaking-docker-npm-ci-commands/4746) 1402 `libcipm@3.0.3`: Fixes issue with "cannot run in wd" errors for run-scripts. 1403 ([@zkat](https://github.com/zkat)) 1404* [`5a7962e46`](https://github.com/npm/cli/commit/5a7962e46f582c6bd91784b0ddc941ed45e9f802) 1405 `write-file-atomic@2.4.2`: 1406 Fixes issues with leaking `signal-exit` instances and file descriptors. 1407 ([@iarna](https://github.com/iarna)) 1408 1409## v6.6.0 (2019-01-17): 1410 1411### REFACTORING OUT npm-REGISTRY-CLIENT 1412 1413Today is an auspicious day! This release marks the end of a massive internal 1414refactor to npm that means we finally got rid of the legacy 1415[`npm-registry-client`](https://npm.im/npm-registry-client) in favor of the 1416shiny, new, `window.fetch`-like 1417[`npm-registry-fetch`](https://npm.im/npm-registry-fetch). 1418 1419Now, the installer had already done most of this work with the release of 1420`npm@5`, but it turns out _every other command_ still used the legacy client. 1421This release updates all of those commands to use the new client, and while 1422we're at it, adds a few extra goodies: 1423 1424* All OTP-requiring commands will now **prompt**. `--otp` is no longer required for `dist-tag`, `access`, et al. 1425* We're starting to integrate a new config system which will eventually get extracted into a standalone package. 1426* We now use [`libnpm`](https://npm.im/libnpm) for the API functionality of a lot of our commands! That means you can install a library if you want to write your own tooling around them. 1427* There's now an `npm org` command for managing users in your org. 1428* [`pacote`](https://npm.im/pacote) now consumes npm-style configurations, instead of its own naming for various config vars. This will make it easier to load npm configs using `libnpm.config` and hand them directly to `pacote`. 1429 1430There's too many commits to list all of them here, so check out the PR if you're 1431curious about details: 1432 1433* [`c5af34c05`](https://github.com/npm/cli/commit/c5af34c05fd569aecd11f18d6d0ddeac3970b253) 1434 [npm-registry-client@REMOVED](https://www.youtube.com/watch\?v\=kPIdRJlzERo) 1435 ([@zkat](https://github.com/zkat)) 1436* [`4cca9cb90`](https://github.com/npm/cli/commit/4cca9cb9042c0eeb743377e8f1ae1c07733df43f) 1437 [`ad67461dc`](https://github.com/npm/cli/commit/ad67461dc3a73d5ae6569fdbee44c67e1daf86e7) 1438 [`77625f9e2`](https://github.com/npm/cli/commit/77625f9e20d4285b7726b3bf3ebc10cb21c638f0) 1439 [`6e922aefb`](https://github.com/npm/cli/commit/6e922aefbb4634bbd77ed3b143e0765d63afc7f9) 1440 [`584613ea8`](https://github.com/npm/cli/commit/584613ea8ff94b927db4957e5647504b30ca2b1f) 1441 [`64de4ebf0`](https://github.com/npm/cli/commit/64de4ebf019b217179039124c6621e74651e4d27) 1442 [`6cd87d1a9`](https://github.com/npm/cli/commit/6cd87d1a9bb90e795f9891ea4db384435f4a8930) 1443 [`2786834c0`](https://github.com/npm/cli/commit/2786834c0257b8bb1bbb115f1ce7060abaab2e17) 1444 [`514558e09`](https://github.com/npm/cli/commit/514558e094460fd0284a759c13965b685133b3fe) 1445 [`dec07ebe3`](https://github.com/npm/cli/commit/dec07ebe3312245f6421c6e523660be4973ae8c2) 1446 [`084741913`](https://github.com/npm/cli/commit/084741913c4fdb396e589abf3440b4be3aa0b67e) 1447 [`45aff0e02`](https://github.com/npm/cli/commit/45aff0e02251785a85e56eafacf9efaeac6f92ae) 1448 [`846ddcc44`](https://github.com/npm/cli/commit/846ddcc44538f2d9a51ac79405010dfe97fdcdeb) 1449 [`8971ba1b9`](https://github.com/npm/cli/commit/8971ba1b953d4f05ff5094f1822b91526282edd8) 1450 [`99156e081`](https://github.com/npm/cli/commit/99156e081a07516d6c970685bc3d858f89dc4f9c) 1451 [`ab2155306`](https://github.com/npm/cli/commit/ab215530674d7f6123c9572d0ad4ca9e9b5fb184) 1452 [`b37a66542`](https://github.com/npm/cli/commit/b37a66542ca2879069b2acd338b1904de71b7f40) 1453 [`d2af0777a`](https://github.com/npm/cli/commit/d2af0777ac179ff5009dbbf0354a4a84f151b60f) 1454 [`e0b4c6880`](https://github.com/npm/cli/commit/e0b4c6880504fa2e8491c2fbd098efcb2e496849) 1455 [`ff72350b4`](https://github.com/npm/cli/commit/ff72350b4c56d65e4a92671d86a33080bf3c2ea5) 1456 [`6ed943303`](https://github.com/npm/cli/commit/6ed943303ce7a267ddb26aa25caa035f832895dd) 1457 [`90a069e7d`](https://github.com/npm/cli/commit/90a069e7d4646682211f4cabe289c306ee1d5397) 1458 [`b24ed5fdc`](https://github.com/npm/cli/commit/b24ed5fdc3a4395628465ae5273bad54eea274c8) 1459 [`ec9fcc14f`](https://github.com/npm/cli/commit/ec9fcc14f4e0e2f3967e2fd6ad8b8433076393cb) 1460 [`8a56fa39e`](https://github.com/npm/cli/commit/8a56fa39e61136da45565447fe201a57f04ad4cd) 1461 [`41d19e18f`](https://github.com/npm/cli/commit/41d19e18f769c6f0acfdffbdb01d12bf332908ce) 1462 [`125ff9551`](https://github.com/npm/cli/commit/125ff9551595dda9dab2edaef10f4c73ae8e1433) 1463 [`1c3b226ff`](https://github.com/npm/cli/commit/1c3b226ff37159c426e855e83c8f6c361603901d) 1464 [`3c0a7b06b`](https://github.com/npm/cli/commit/3c0a7b06b6473fe068fc8ae8466c07a177975b87) 1465 [`08fcb3f0f`](https://github.com/npm/cli/commit/08fcb3f0f26e025702b35253ed70a527ab69977f) 1466 [`c8135d97a`](https://github.com/npm/cli/commit/c8135d97a424b38363dc4530c45e4583471e9849) 1467 [`ae936f22c`](https://github.com/npm/cli/commit/ae936f22ce80614287f2769e9aaa9a155f03cc15) 1468 [#2](https://github.com/npm/cli/pull/2) 1469 Move rest of commands to `npm-registry-fetch` and use [`figgy-pudding`](https://npm.im/figgy-pudding) for configs. 1470 ([@zkat](https://github.com/zkat)) 1471 1472### NEW FEATURES 1473 1474* [`02c837e01`](https://github.com/npm/cli/commit/02c837e01a71a26f37cbd5a09be89df8a9ce01da) 1475 [#106](https://github.com/npm/cli/pull/106) 1476 Make `npm dist-tags` the same as `npm dist-tag ls`. 1477 ([@isaacs](https://github.com/isaacs)) 1478* [`1065a7809`](https://github.com/npm/cli/commit/1065a7809161fd4dc23e96b642019fc842fdacf2) 1479 [#65](https://github.com/npm/cli/pull/65) 1480 Add support for `IBM i`. 1481 ([@dmabupt](https://github.com/dmabupt)) 1482* [`a22e6f5fc`](https://github.com/npm/cli/commit/a22e6f5fc3e91350d3c64dcc88eabbe0efbca759) 1483 [#131](https://github.com/npm/cli/pull/131) 1484 Update profile to support new npm-profile API. 1485 ([@zkat](https://github.com/zkat)) 1486 1487### BUGFIXES 1488 1489* [`890a74458`](https://github.com/npm/cli/commit/890a74458dd4a55e2d85f3eba9dbf125affa4206) 1490 [npm.community#3278](https://npm.community/t/3278) 1491 Fix support for passing git binary path config with `--git`. 1492 ([@larsgw](https://github.com/larsgw)) 1493* [`90e55a143`](https://github.com/npm/cli/commit/90e55a143ed1de8678d65c17bc3c2b103a15ddac) 1494 [npm.community#2713](https://npm.community/t/npx-envinfo-preset-jest-fails-on-windows-with-a-stack-trace/2713) 1495 Check for `npm.config`'s existence in `error-handler.js` to prevent weird 1496 errors when failures happen before config object is loaded. 1497 ([@BeniCheni](https://github.com/BeniCheni)) 1498* [`134207174`](https://github.com/npm/cli/commit/134207174652e1eb6d7b0f44fd9858a0b6a0cd6c) 1499 [npm.community#2569](https://npm.community/t/2569) 1500 Fix checking for optional dependencies. 1501 ([@larsgw](https://github.com/larsgw)) 1502* [`7a2f6b05d`](https://github.com/npm/cli/commit/7a2f6b05d27f3bcf47a48230db62e86afa41c9d3) 1503 [npm.community#4172](https://npm.community/t/4172) 1504 Remove tink experiments. 1505 ([@larsgw](https://github.com/larsgw)) 1506* [`c5b6056b6`](https://github.com/npm/cli/commit/c5b6056b6b35eefb81ae5fb00a5c7681c5318c22) 1507 [#123](https://github.com/npm/cli/pull/123) 1508 Handle git branch references correctly. 1509 ([@johanneswuerbach](https://github.com/johanneswuerbach)) 1510* [`f58b43ef2`](https://github.com/npm/cli/commit/f58b43ef2c5e3dea2094340a0cf264b2d11a5da4) 1511 [npm.community#3983](https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983) 1512 Report any errors above 400 as potentially not supporting audit. 1513 ([@zkat](https://github.com/zkat)) 1514* [`a5c9e6f35`](https://github.com/npm/cli/commit/a5c9e6f35a591a6e2d4b6ace5c01bc03f2b75fdc) 1515 [#124](https://github.com/npm/cli/pull/124) 1516 Set default homepage to an empty string. 1517 ([@anchnk](https://github.com/anchnk)) 1518* [`5d076351d`](https://github.com/npm/cli/commit/5d076351d7ec1d3585942a9289548166a7fbbd4c) 1519 [npm.community#4054](https://npm.community/t/4054) 1520 Fix npm-prefix description. 1521 ([@larsgw](https://github.com/larsgw)) 1522 1523### DOCS 1524 1525* [`31a7274b7`](https://github.com/npm/cli/commit/31a7274b70de18b24e7bee51daa22cc7cbb6141c) 1526 [#71](https://github.com/npm/cli/pull/71) 1527 Fix typo in npm-token documentation. 1528 ([@GeorgeTaveras1231](https://github.com/GeorgeTaveras1231)) 1529* [`2401b7592`](https://github.com/npm/cli/commit/2401b7592c6ee114e6db7077ebf8c072b7bfe427) 1530 Correct docs for fake-registry interface. 1531 ([@iarna](https://github.com/iarna)) 1532 1533### DEPENDENCIES 1534 1535* [`9cefcdc1d`](https://github.com/npm/cli/commit/9cefcdc1d2289b56f9164d14d7e499e115cfeaee) 1536 `npm-registry-fetch@3.8.0` 1537 ([@zkat](https://github.com/zkat)) 1538* [`1c769c9b3`](https://github.com/npm/cli/commit/1c769c9b3e431d324c1a5b6dd10e1fddb5cb88c7) 1539 `pacote@9.1.0` 1540 ([@zkat](https://github.com/zkat)) 1541* [`f3bc5539b`](https://github.com/npm/cli/commit/f3bc5539b30446500abcc3873781b2c717f8e22c) 1542 `figgy-pudding@3.5.1` 1543 ([@zkat](https://github.com/zkat)) 1544* [`bf7199d3c`](https://github.com/npm/cli/commit/bf7199d3cbf50545da1ebd30d28f0a6ed5444a00) 1545 `npm-profile@4.0.1` 1546 ([@zkat](https://github.com/zkat)) 1547* [`118c50496`](https://github.com/npm/cli/commit/118c50496c01231cab3821ae623be6df89cb0a32) 1548 `semver@5.5.1` 1549 ([@isaacs](https://github.com/isaacs)) 1550* [`eab4df925`](https://github.com/npm/cli/commit/eab4df9250e9169c694b3f6c287d2932bf5e08fb) 1551 `libcipm@3.0.2` 1552 ([@zkat](https://github.com/zkat)) 1553* [`b86e51573`](https://github.com/npm/cli/commit/b86e515734faf433dc6c457c36c1de52795aa870) 1554 `libnpm@1.4.0` 1555 ([@zkat](https://github.com/zkat)) 1556* [`56fffbff2`](https://github.com/npm/cli/commit/56fffbff27fe2fae8bef27d946755789ef0d89bd) 1557 `get-stream@4.1.0` 1558 ([@zkat](https://github.com/zkat)) 1559* [`df972e948`](https://github.com/npm/cli/commit/df972e94868050b5aa42ac18b527fd929e1de9e4) 1560 npm-profile@REMOVED 1561 ([@zkat](https://github.com/zkat)) 1562* [`32c73bf0e`](https://github.com/npm/cli/commit/32c73bf0e3f0441d0c7c940292235d4b93aa87e2) 1563 `libnpm@2.0.1` 1564 ([@zkat](https://github.com/zkat)) 1565* [`569491b80`](https://github.com/npm/cli/commit/569491b8042f939dc13986b6adb2a0a260f95b63) 1566 `licensee@5.0.0` 1567 ([@zkat](https://github.com/zkat)) 1568* [`a3ba0ccf1`](https://github.com/npm/cli/commit/a3ba0ccf1fa86aec56b1ad49883abf28c1f56b3c) 1569 move rimraf to prod deps 1570 ([@zkat](https://github.com/zkat)) 1571* [`f63a0d6cf`](https://github.com/npm/cli/commit/f63a0d6cf0b7db3dcc80e72e1383c3df723c8119) 1572 `spdx-license-ids@3.0.3`: 1573 Ref: https://github.com/npm/cli/pull/121 1574 ([@zkat](https://github.com/zkat)) 1575* [`f350e714f`](https://github.com/npm/cli/commit/f350e714f66a77f71a7ebe17daeea2ea98179a1a) 1576 `aproba@2.0.0` 1577 ([@aeschright](https://github.com/aeschright)) 1578* [`a67e4d8b2`](https://github.com/npm/cli/commit/a67e4d8b214e58ede037c3854961acb33fd889da) 1579 `byte-size@5.0.1` 1580 ([@aeschright](https://github.com/aeschright)) 1581* [`8bea4efa3`](https://github.com/npm/cli/commit/8bea4efa34857c4e547904b3630dd442def241de) 1582 `cacache@11.3.2` 1583 ([@aeschright](https://github.com/aeschright)) 1584* [`9d4776836`](https://github.com/npm/cli/commit/9d4776836a4eaa4b19701b4e4f00cd64578bf078) 1585 `chownr@1.1.1` 1586 ([@aeschright](https://github.com/aeschright)) 1587* [`70da139e9`](https://github.com/npm/cli/commit/70da139e97ed1660c216e2d9b3f9cfb986bfd4a4) 1588 `ci-info@2.0.0` 1589 ([@aeschright](https://github.com/aeschright)) 1590* [`bcdeddcc3`](https://github.com/npm/cli/commit/bcdeddcc3d4dc242f42404223dafe4afdc753b32) 1591 `cli-table3@0.5.1` 1592 ([@aeschright](https://github.com/aeschright)) 1593* [`63aab82c7`](https://github.com/npm/cli/commit/63aab82c7bfca4f16987cf4156ddebf8d150747c) 1594 `is-cidr@3.0.0` 1595 ([@aeschright](https://github.com/aeschright)) 1596* [`d522bd90c`](https://github.com/npm/cli/commit/d522bd90c3b0cb08518f249ae5b90bd609fff165) 1597 `JSONStream@1.3.5` 1598 ([@aeschright](https://github.com/aeschright)) 1599* [`2a59bfc79`](https://github.com/npm/cli/commit/2a59bfc7989bd5575d8cbba912977c6d1ba92567) 1600 `libnpmhook@5.0.2` 1601 ([@aeschright](https://github.com/aeschright)) 1602* [`66d60e394`](https://github.com/npm/cli/commit/66d60e394e5a96330f90e230505758f19a3643ac) 1603 `marked@0.6.0` 1604 ([@aeschright](https://github.com/aeschright)) 1605* [`8213def9a`](https://github.com/npm/cli/commit/8213def9aa9b6e702887e4f2ed7654943e1e4154) 1606 `npm-packlist@1.2.0` 1607 ([@aeschright](https://github.com/aeschright)) 1608* [`e4ffc6a2b`](https://github.com/npm/cli/commit/e4ffc6a2bfb8d0b7047cb6692030484760fc8c91) 1609 `unique-filename@1.1.1` 1610 ([@aeschright](https://github.com/aeschright)) 1611* [`09a5c2fab`](https://github.com/npm/cli/commit/09a5c2fabe0d1c00ec8c99f328f6d28a3495eb0b) 1612 `semver@5.6.0` 1613 ([@aeschright](https://github.com/aeschright)) 1614* [`740e79e17`](https://github.com/npm/cli/commit/740e79e17a78247f73349525043c9388ce94459a) 1615 `rimraf@2.6.3` 1616 ([@aeschright](https://github.com/aeschright)) 1617* [`455476c8d`](https://github.com/npm/cli/commit/455476c8d148ca83a4e030e96e93dcf1c7f0ff5f) 1618 `require-inject@1.4.4` 1619 ([@aeschright](https://github.com/aeschright)) 1620* [`3f40251c5`](https://github.com/npm/cli/commit/3f40251c5868feaacbcdbcb1360877ce76998f5e) 1621 `npm-pick-manifest@2.2.3` 1622 ([@aeschright](https://github.com/aeschright)) 1623* [`4ffa8a8e9`](https://github.com/npm/cli/commit/4ffa8a8e9e80e5562898dd76fe5a49f5694f38c8) 1624 `query-string@6.2.0` 1625 ([@aeschright](https://github.com/aeschright)) 1626* [`a0a0ca9ec`](https://github.com/npm/cli/commit/a0a0ca9ec2a962183d420fa751f4139969760f18) 1627 `pacote@9.3.0` 1628 ([@aeschright](https://github.com/aeschright)) 1629* [`5777ea8ad`](https://github.com/npm/cli/commit/5777ea8ad2058be3166a6dad2d31d2d393c9f778) 1630 `readable-stream@3.1.1` 1631 ([@aeschright](https://github.com/aeschright)) 1632* [`887e94386`](https://github.com/npm/cli/commit/887e94386f42cb59a5628e7762b3662d084b23c8) 1633 `lru-cache@4.1.5` 1634 ([@aeschright](https://github.com/aeschright)) 1635* [`41f15524c`](https://github.com/npm/cli/commit/41f15524c58c59d206c4b1d25ae9e0f22745213b) 1636 Updating semver docs. 1637 ([@aeschright](https://github.com/aeschright)) 1638* [`fb3bbb72d`](https://github.com/npm/cli/commit/fb3bbb72d448ac37a465b31233b21381917422f3) 1639 `npm-audit-report@1.3.2`: 1640 ([@melkikh](https://github.com/melkikh)) 1641 1642### TESTING 1643 1644* [`f1edffba9`](https://github.com/npm/cli/commit/f1edffba90ebd96cf88675d2e18ebc48954ba50e) 1645 Modernize maketest script. 1646 ([@iarna](https://github.com/iarna)) 1647* [`ae263473d`](https://github.com/npm/cli/commit/ae263473d92a896b482830d4019a04b5dbd1e9d7) 1648 maketest: Use promise based example common.npm call. 1649 ([@iarna](https://github.com/iarna)) 1650* [`d9970da5e`](https://github.com/npm/cli/commit/d9970da5ee97a354eab01cbf16f9101693a15d2d) 1651 maketest: Use newEnv for env production. 1652 ([@iarna](https://github.com/iarna)) 1653 1654### MISCELLANEOUS 1655 1656* [`c665f35aa`](https://github.com/npm/cli/commit/c665f35aacdb8afdbe35f3dd7ccb62f55ff6b896) 1657 [#119](https://github.com/npm/cli/pull/119) 1658 Replace var with const/let in lib/repo.js. 1659 ([@watilde](https://github.com/watilde)) 1660* [`46639ba9f`](https://github.com/npm/cli/commit/46639ba9f04ea729502f1af28b02eb67fb6dcb66) 1661 Update package-lock.json for https tarball URLs 1662 ([@aeschright](https://github.com/aeschright)) 1663 1664## v6.5.0 (2018-11-28): 1665 1666### NEW FEATURES 1667 1668* [`fc1a8d185`](https://github.com/npm/cli/commit/fc1a8d185fc678cdf3784d9df9eef9094e0b2dec) 1669 Backronym `npm ci` to `npm clean-install`. 1670 ([@zkat](https://github.com/zkat)) 1671* [`4be51a9cc`](https://github.com/npm/cli/commit/4be51a9cc65635bb26fa4ce62233f26e0104bc20) 1672 [#81](https://github.com/npm/cli/pull/81) 1673 Adds 'Homepage' to outdated --long output. 1674 ([@jbottigliero](https://github.com/jbottigliero)) 1675 1676### BUGFIXES 1677 1678* [`89652cb9b`](https://github.com/npm/cli/commit/89652cb9b810f929f5586fc90cc6794d076603fb) 1679 [npm.community#1661](https://npm.community/t/1661) 1680 Fix sign-git-commit options. They were previously totally wrong. 1681 ([@zkat](https://github.com/zkat)) 1682* [`414f2d1a1`](https://github.com/npm/cli/commit/414f2d1a1bdffc02ed31ebb48a43216f284c21d4) 1683 [npm.community#1742](https://npm.community/t/npm-audit-making-non-rfc-compliant-requests-to-server-resulting-in-400-bad-request-pr-with-fix/1742) 1684 Set lowercase headers for npm audit requests. 1685 ([@maartenba](https://github.com/maartenba)) 1686* [`a34246baf`](https://github.com/npm/cli/commit/a34246bafe73218dc9e3090df9ee800451db2c7d) 1687 [#75](https://github.com/npm/cli/pull/75) 1688 Fix `npm edit` handling of scoped packages. 1689 ([@larsgw](https://github.com/larsgw)) 1690* [`d3e8a7c72`](https://github.com/npm/cli/commit/d3e8a7c7240dd25379a5bcad324a367c58733c73) 1691 [npm.community#2303](https://npm.community/t/npm-ci-logs-success-to-stderr/2303) 1692 Make summary output for `npm ci` go to `stdout`, not `stderr`. 1693 ([@alopezsanchez](https://github.com/alopezsanchez)) 1694* [`71d8fb4a9`](https://github.com/npm/cli/commit/71d8fb4a94d65e1855f6d0c5f2ad2b7c3202e3c4) 1695 [npm.community#1377](https://npm.community/t/unhelpful-error-message-when-publishing-without-logging-in-error-eperm-operation-not-permitted-unlink/1377/3) 1696 Close the file descriptor during publish if exiting upload via an error. This 1697 will prevent strange error messages when the upload fails and make sure 1698 cleanup happens correctly. 1699 ([@macdja38](https://github.com/macdja38)) 1700 1701### DOCS UPDATES 1702 1703* [`b1a8729c8`](https://github.com/npm/cli/commit/b1a8729c80175243fbbeecd164e9ddd378a09a50) 1704 [#60](https://github.com/npm/cli/pull/60) 1705 Mention --otp flag when prompting for OTP. 1706 ([@bakkot](https://github.com/bakkot)) 1707* [`bcae4ea81`](https://github.com/npm/cli/commit/bcae4ea8173e489a76cc226bbd30dd9eabe21ec6) 1708 [#64](https://github.com/npm/cli/pull/64) 1709 Clarify that git dependencies use the default branch, not just `master`. 1710 ([@zckrs](https://github.com/zckrs)) 1711* [`15da82690`](https://github.com/npm/cli/commit/15da8269032bf509ade3252978e934f2a61d4499) 1712 [#72](https://github.com/npm/cli/pull/72) 1713 `bash_completion.d` dir is sometimes found in `/etc` not `/usr/local`. 1714 ([@RobertKielty](https://github.com/RobertKielty)) 1715* [`8a6ecc793`](https://github.com/npm/cli/commit/8a6ecc7936dae2f51638397ff5a1d35cccda5495) 1716 [#74](https://github.com/npm/cli/pull/74) 1717 Update OTP documentation for `dist-tag add` to clarify `--otp` is needed right 1718 now. 1719 ([@scotttrinh](https://github.com/scotttrinh)) 1720* [`dcc03ec85`](https://github.com/npm/cli/commit/dcc03ec858bddd7aa2173b5a86b55c1c2385a2a3) 1721 [#82](https://github.com/npm/cli/pull/82) 1722 Note that `prepare` runs when installing git dependencies. 1723 ([@seishun](https://github.com/seishun)) 1724* [`a91a470b7`](https://github.com/npm/cli/commit/a91a470b71e08ccf6a75d4fb8c9937789fa8d067) 1725 [#83](https://github.com/npm/cli/pull/83) 1726 Specify that --dry-run isn't available in older versions of npm publish. 1727 ([@kjin](https://github.com/kjin)) 1728* [`1b2fabcce`](https://github.com/npm/cli/commit/1b2fabccede37242233755961434c52536224de5) 1729 [#96](https://github.com/npm/cli/pull/96) 1730 Fix inline code tag issue in docs. 1731 ([@midare](https://github.com/midare)) 1732* [`6cc70cc19`](https://github.com/npm/cli/commit/6cc70cc1977e58a3e1ea48e660ffc6b46b390e59) 1733 [#68](https://github.com/npm/cli/pull/68) 1734 Add semver link and a note on empty string format to `deprecate` doc. 1735 ([@neverett](https://github.com/neverett)) 1736* [`61dbbb7c3`](https://github.com/npm/cli/commit/61dbbb7c3474834031bce88c423850047e8131dc) 1737 Fix semver docs after version update. 1738 ([@zkat](https://github.com/zkat)) 1739* [`4acd45a3d`](https://github.com/npm/cli/commit/4acd45a3d0ce92f9999446226fe7dfb89a90ba2e) 1740 [#78](https://github.com/npm/cli/pull/78) 1741 Correct spelling across various docs. 1742 ([@hugovk](https://github.com/hugovk)) 1743 1744### DEPENDENCIES 1745 1746* [`4f761283e`](https://github.com/npm/cli/commit/4f761283e8896d0ceb5934779005646463a030e8) 1747 `figgy-pudding@3.5.1` 1748 ([@zkat](https://github.com/zkat)) 1749* [`3706db0bc`](https://github.com/npm/cli/commit/3706db0bcbc306d167bb902362e7f6962f2fe1a1) 1750 [npm.community#1764](https://npm.community/t/crash-invalid-config-key-requested-error/1764) 1751 `ssri@6.0.1` 1752 ([@zkat](https://github.com/zkat)) 1753* [`83c2b117d`](https://github.com/npm/cli/commit/83c2b117d0b760d0ea8d667e5e4bdfa6a7a7a8f6) 1754 `bluebird@3.5.2` 1755 ([@petkaantonov](https://github.com/petkaantonov)) 1756* [`2702f46bd`](https://github.com/npm/cli/commit/2702f46bd7284fb303ca2119d23c52536811d705) 1757 `ci-info@1.5.1` 1758 ([@watson](https://github.com/watson)) 1759* [`4db6c3898`](https://github.com/npm/cli/commit/4db6c3898b07100e3a324e4aae50c2fab4b93a04) 1760 `config-chain@1.1.1`:2 1761 ([@dawsbot](https://github.com/dawbot)) 1762* [`70bee4f69`](https://github.com/npm/cli/commit/70bee4f69bb4ce4e18c48582fe2b48d8b4aba566) 1763 `glob@7.1.3` 1764 ([@isaacs](https://github.com/isaacs)) 1765* [`e469fd6be`](https://github.com/npm/cli/commit/e469fd6be95333dcaa7cf377ca3620994ca8d0de) 1766 `opener@1.5.1`: 1767 Fix browser opening under Windows Subsystem for Linux (WSL). 1768 ([@thijsputman](https://github.com/thijsputman)) 1769* [`03840dced`](https://github.com/npm/cli/commit/03840dced865abdca6e6449ea030962e5b19db0c) 1770 `semver@5.5.1` 1771 ([@iarna](https://github.com/iarna)) 1772* [`161dc0b41`](https://github.com/npm/cli/commit/161dc0b4177e76306a0e3b8660b3b496cc3db83b) 1773 `bluebird@3.5.3` 1774 ([@petkaantonov](https://github.com/petkaantonov)) 1775* [`bb6f94395`](https://github.com/npm/cli/commit/bb6f94395491576ec42996ff6665df225f6b4377) 1776 `graceful-fs@4.1.1`:5 1777 ([@isaacs](https://github.com/isaacs)) 1778* [`43b1f4c91`](https://github.com/npm/cli/commit/43b1f4c91fa1d7b3ebb6aa2d960085e5f3ac7607) 1779 `tar@4.4.8` 1780 ([@isaacs](https://github.com/isaacs)) 1781* [`ab62afcc4`](https://github.com/npm/cli/commit/ab62afcc472de82c479bf91f560a0bbd6a233c80) 1782 `npm-packlist@1.1.1`:2 1783 ([@isaacs](https://github.com/isaacs)) 1784* [`027f06be3`](https://github.com/npm/cli/commit/027f06be35bb09f390e46fcd2b8182539939d1f7) 1785 `ci-info@1.6.0` 1786 ([@watson](https://github.com/watson)) 1787 1788### MISCELLANEOUS 1789 1790* [`27217dae8`](https://github.com/npm/cli/commit/27217dae8adbc577ee9cb323b7cfe9c6b2493aca) 1791 [#70](https://github.com/npm/cli/pull/70) 1792 Automatically audit dependency licenses for npm itself. 1793 ([@kemitchell](https://github.com/kemitchell)) 1794 1795## v6.4.1 (2018-08-22): 1796 1797### BUGFIXES 1798 1799* [`4bd40f543`](https://github.com/npm/cli/commit/4bd40f543dc89f0721020e7d0bb3497300d74818) 1800 [#42](https://github.com/npm/cli/pull/42) 1801 Prevent blowing up on malformed responses from the `npm audit` endpoint, such 1802 as with third-party registries. 1803 ([@framp](https://github.com/framp)) 1804* [`0e576f0aa`](https://github.com/npm/cli/commit/0e576f0aa6ea02653d948c10f29102a2d4a31944) 1805 [#46](https://github.com/npm/cli/pull/46) 1806 Fix `NO_PROXY` support by renaming npm-side config to `--noproxy`. The 1807 environment variable should still work. 1808 ([@SneakyFish5](https://github.com/SneakyFish5)) 1809* [`d8e811d6a`](https://github.com/npm/cli/commit/d8e811d6adf3d87474982cb831c11316ac725605) 1810 [#33](https://github.com/npm/cli/pull/33) 1811 Disable `update-notifier` checks when a CI environment is detected. 1812 ([@Sibiraj-S](https://github.com/Sibiraj-S)) 1813* [`1bc5b8cea`](https://github.com/npm/cli/commit/1bc5b8ceabc86bfe4777732f25ffef0f3de81bd1) 1814 [#47](https://github.com/npm/cli/pull/47) 1815 Fix issue where `postpack` scripts would break if `pack` was used with 1816 `--dry-run`. 1817 ([@larsgw](https://github.com/larsgw)) 1818 1819### DEPENDENCY BUMPS 1820 1821* [`4c57316d5`](https://github.com/npm/cli/commit/4c57316d5633e940105fa545b52d8fbfd2eb9f75) 1822 `figgy-pudding@3.4.1` 1823 ([@zkat](https://github.com/zkat)) 1824* [`85f4d7905`](https://github.com/npm/cli/commit/85f4d79059865d5267f3516b6cdbc746012202c6) 1825 `cacache@11.2.0` 1826 ([@zkat](https://github.com/zkat)) 1827* [`d20ac242a`](https://github.com/npm/cli/commit/d20ac242aeb44aa3581c65c052802a02d5eb22f3) 1828 `npm-packlist@1.1.11`: 1829 No real changes in npm-packlist, but npm-bundled included a 1830 circular dependency fix, as well as adding a proper LICENSE file. 1831 ([@isaacs](https://github.com/isaacs)) 1832* [`e8d5f4418`](https://github.com/npm/cli/commit/e8d5f441821553a31fc8cd751670663699d2c8ce) 1833 [npm.community#632](https://npm.community/t/using-npm-ci-does-not-run-prepare-script-for-git-modules/632) 1834 `libcipm@2.0.2`: 1835 Fixes issue where `npm ci` wasn't running the `prepare` lifecycle script when 1836 installing git dependencies 1837 ([@edahlseng](https://github.com/edahlseng)) 1838* [`a5e6f78e9`](https://github.com/npm/cli/commit/a5e6f78e916873f7d18639ebdb8abd20479615a9) 1839 `JSONStream@1.3.4`: 1840 Fixes memory leak problem when streaming large files (like legacy npm search). 1841 ([@daern91](https://github.com/daern91)) 1842* [`3b940331d`](https://github.com/npm/cli/commit/3b940331dcccfa67f92366adb7ffd9ecf7673a9a) 1843 [npm.community#1042](https://npm.community/t/3-path-variables-are-assigned-to-child-process-launched-by-npm/1042) 1844 `npm-lifecycle@2.1.0`: 1845 Fixes issue for Windows user where multiple `Path`/`PATH` variables were being 1846 added to the environment and breaking things in all sorts of fun and 1847 interesting ways. 1848 ([@JimiC](https://github.com/JimiC)) 1849* [`d612d2ce8`](https://github.com/npm/cli/commit/d612d2ce8fab72026f344f125539ecbf3746af9a) 1850 `npm-registry-client@8.6.0` 1851 ([@iarna](https://github.com/iarna)) 1852* [`1f6ba1cb1`](https://github.com/npm/cli/commit/1f6ba1cb174590c1f5d2b00e2ca238dfa39d507a) 1853 `opener@1.5.0` 1854 ([@domenic](https://github.com/domenic)) 1855* [`37b8f405f`](https://github.com/npm/cli/commit/37b8f405f35c861b7beeed56f71ad20b0bf87889) 1856 `request@2.88.0` 1857 ([@mikeal](https://github.com/mikeal)) 1858* [`bb91a2a14`](https://github.com/npm/cli/commit/bb91a2a14562e77769057f1b6d06384be6d6bf7f) 1859 `tacks@1.2.7` 1860 ([@iarna](https://github.com/iarna)) 1861* [`30bc9900a`](https://github.com/npm/cli/commit/30bc9900ae79c80bf0bdee0ae6372da6f668124c) 1862 `ci-info@1.4.0`: 1863 Adds support for two more CI services 1864 ([@watson](https://github.com/watson)) 1865* [`1d2fa4ddd`](https://github.com/npm/cli/commit/1d2fa4dddcab8facfee92096cc24b299387f3182) 1866 `marked@0.5.0` 1867 ([@joshbruce](https://github.com/joshbruce)) 1868 1869### DOCUMENTATION 1870 1871* [`08ecde292`](https://github.com/npm/cli/commit/08ecde2928f8c89a2fdaa800ae845103750b9327) 1872 [#54](https://github.com/npm/cli/pull/54) 1873 Mention registry terms of use in manpage and registry docs and update language 1874 in README for it. 1875 ([@kemitchell](https://github.com/kemitchell)) 1876* [`de956405d`](https://github.com/npm/cli/commit/de956405d8b72354f98579d00c6dd30ac3b9bddf) 1877 [#41](https://github.com/npm/cli/pull/41) 1878 Add documentation for `--dry-run` in `install` and `pack` docs. 1879 ([@reconbot](https://github.com/reconbot)) 1880* [`95031b90c`](https://github.com/npm/cli/commit/95031b90ce0b0c4dcd5e4eafc86e3e5bfd59fb3e) 1881 [#48](https://github.com/npm/cli/pull/48) 1882 Update republish time and lightly reorganize republish info. 1883 ([@neverett](https://github.com/neverett)) 1884* [`767699b68`](https://github.com/npm/cli/commit/767699b6829b8b899d5479445e99b0ffc43ff92d) 1885 [#53](https://github.com/npm/cli/pull/53) 1886 Correct `npm@6.4.0` release date in changelog. 1887 ([@charmander](https://github.com/charmander)) 1888* [`3fea3166e`](https://github.com/npm/cli/commit/3fea3166eb4f43f574fcfd9ee71a171feea2bc29) 1889 [#55](https://github.com/npm/cli/pull/55) 1890 Align command descriptions in help text. 1891 ([@erik](https://github.com/erik)) 1892 1893## v6.4.0 (2018-08-09): 1894 1895### NEW FEATURES 1896 1897* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7) 1898 [npm/cli#8](https://github.com/npm/cli/pull/8) 1899 Search for authentication token defined by environment variables by preventing 1900 the translation layer from env variable to npm option from breaking 1901 `:_authToken`. 1902 ([@mkhl](https://github.com/mkhl)) 1903* [`84bfd23e7`](https://github.com/npm/cli/commit/84bfd23e7d6434d30595594723a6e1976e84b022) 1904 [npm/cli#35](https://github.com/npm/cli/pull/35) 1905 Stop filtering out non-IPv4 addresses from `local-addrs`, making npm actually 1906 use IPv6 addresses when it must. 1907 ([@valentin2105](https://github.com/valentin2105)) 1908* [`792c8c709`](https://github.com/npm/cli/commit/792c8c709dc7a445687aa0c8cba5c50bc4ed83fd) 1909 [npm/cli#31](https://github.com/npm/cli/pull/31) 1910 configurable audit level for non-zero exit 1911 `npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. 1912 Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. 1913 Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. 1914 ([@lennym](https://github.com/lennym)) 1915 1916### BUGFIXES 1917 1918* [`d81146181`](https://github.com/npm/cli/commit/d8114618137bb5b9a52a86711bb8dc18bfc8e60c) 1919 [npm/cli#32](https://github.com/npm/cli/pull/32) 1920 Don't check for updates to npm when we are updating npm itself. 1921 ([@olore](https://github.com/olore)) 1922 1923### DEPENDENCY UPDATES 1924 1925A very special dependency update event! Since the [release of 1926`node-gyp@3.8.0`](https://github.com/nodejs/node-gyp/pull/1521), an awkward 1927version conflict that was preventing `request` from begin flattened was 1928resolved. This means two things: 1929 19301. We've cut down the npm tarball size by another 200kb, to 4.6MB 19312. `npm audit` now shows no vulnerabilities for npm itself! 1932 1933Thanks, [@rvagg](https://github.com/rvagg)! 1934 1935* [`866d776c2`](https://github.com/npm/cli/commit/866d776c27f80a71309389aaab42825b2a0916f6) 1936 `request@2.87.0` 1937 ([@simov](https://github.com/simov)) 1938* [`f861c2b57`](https://github.com/npm/cli/commit/f861c2b579a9d4feae1653222afcefdd4f0e978f) 1939 `node-gyp@3.8.0` 1940 ([@rvagg](https://github.com/rvagg)) 1941* [`32e6947c6`](https://github.com/npm/cli/commit/32e6947c60db865257a0ebc2f7e754fedf7a6fc9) 1942 [npm/cli#39](https://github.com/npm/cli/pull/39) 1943 `colors@1.1.2`: 1944 REVERT REVERT, newer versions of this library are broken and print ansi 1945 codes even when disabled. 1946 ([@iarna](https://github.com/iarna)) 1947* [`beb96b92c`](https://github.com/npm/cli/commit/beb96b92caf061611e3faafc7ca10e77084ec335) 1948 `libcipm@2.0.1` 1949 ([@zkat](https://github.com/zkat)) 1950* [`348fc91ad`](https://github.com/npm/cli/commit/348fc91ad223ff91cd7bcf233018ea1d979a2af1) 1951 `validate-npm-package-license@3.0.4`: Fixes errors with empty or string-only 1952 license fields. 1953 ([@Gudahtt](https://github.com/Gudahtt)) 1954* [`e57d34575`](https://github.com/npm/cli/commit/e57d3457547ef464828fc6f82ae4750f3e511550) 1955 `iferr@1.0.2` 1956 ([@shesek](https://github.com/shesek)) 1957* [`46f1c6ad4`](https://github.com/npm/cli/commit/46f1c6ad4b2fd5b0d7ec879b76b76a70a3a2595c) 1958 `tar@4.4.6` 1959 ([@isaacs](https://github.com/isaacs)) 1960* [`50df1bf69`](https://github.com/npm/cli/commit/50df1bf691e205b9f13e0fff0d51a68772c40561) 1961 `hosted-git-info@2.7.1` 1962 ([@iarna](https://github.com/iarna)) 1963 ([@Erveon](https://github.com/Erveon)) 1964 ([@huochunpeng](https://github.com/huochunpeng)) 1965 1966### DOCUMENTATION 1967 1968* [`af98e76ed`](https://github.com/npm/cli/commit/af98e76ed96af780b544962aa575585b3fa17b9a) 1969 [npm/cli#34](https://github.com/npm/cli/pull/34) 1970 Remove `npm publish` from list of commands not affected by `--dry-run`. 1971 ([@joebowbeer](https://github.com/joebowbeer)) 1972* [`e2b0f0921`](https://github.com/npm/cli/commit/e2b0f092193c08c00f12a6168ad2bd9d6e16f8ce) 1973 [npm/cli#36](https://github.com/npm/cli/pull/36) 1974 Tweak formatting in repository field examples. 1975 ([@noahbenham](https://github.com/noahbenham)) 1976* [`e2346e770`](https://github.com/npm/cli/commit/e2346e7702acccefe6d711168c2b0e0e272e194a) 1977 [npm/cli#14](https://github.com/npm/cli/pull/14) 1978 Used `process.env` examples to make accessing certain `npm run-scripts` 1979 environment variables more clear. 1980 ([@mwarger](https://github.com/mwarger)) 1981 1982## v6.3.0 (2018-08-01): 1983 1984This is basically the same as the prerelease, but two dependencies have been 1985bumped due to bugs that had been around for a while. 1986 1987* [`0a22be42e`](https://github.com/npm/cli/commit/0a22be42eb0d40cd0bd87e68c9e28fc9d72c0e19) 1988 `figgy-pudding@3.2.0` 1989 ([@zkat](https://github.com/zkat)) 1990* [`0096f6997`](https://github.com/npm/cli/commit/0096f69978d2f40b170b28096f269b0b0008a692) 1991 `cacache@11.1.0` 1992 ([@zkat](https://github.com/zkat)) 1993 1994## v6.3.0-next.0 (2018-07-25): 1995 1996### NEW FEATURES 1997 1998* [`ad0dd226f`](https://github.com/npm/cli/commit/ad0dd226fb97a33dcf41787ae7ff282803fb66f2) 1999 [npm/cli#26](https://github.com/npm/cli/pull/26) 2000 `npm version` now supports a `--preid` option to specify the preid for 2001 prereleases. For example, `npm version premajor --preid rc` will tag a version 2002 like `2.0.0-rc.0`. 2003 ([@dwilches](https://github.com/dwilches)) 2004 2005### MESSAGING IMPROVEMENTS 2006 2007* [`c1dad1e99`](https://github.com/npm/cli/commit/c1dad1e994827f2eab7a13c0f6454f4e4c22ebc2) 2008 [npm/cli#6](https://github.com/npm/cli/pull/6) 2009 Make `npm audit fix` message provide better instructions for vulnerabilities 2010 that require manual review. 2011 ([@bradsk88](https://github.com/bradsk88)) 2012* [`15c1130fe`](https://github.com/npm/cli/commit/15c1130fe81961706667d845aad7a5a1f70369f3) 2013 Fix missing colon next to tarball url in new `npm view` output. 2014 ([@zkat](https://github.com/zkat)) 2015* [`21cf0ab68`](https://github.com/npm/cli/commit/21cf0ab68cf528d5244ae664133ef400bdcfbdb6) 2016 [npm/cli#24](https://github.com/npm/cli/pull/24) 2017 Use the default OTP explanation everywhere except when the context is 2018 "OTP-aware" (like when setting double-authentication). This improves the 2019 overall CLI messaging when prompting for an OTP code. 2020 ([@jdeniau](https://github.com/jdeniau)) 2021 2022### MISC 2023 2024* [`a9ac8712d`](https://github.com/npm/cli/commit/a9ac8712dfafcb31a4e3deca24ddb92ff75e942d) 2025 [npm/cli#21](https://github.com/npm/cli/pull/21) 2026 Use the extracted `stringify-package` package. 2027 ([@dpogue](https://github.com/dpogue)) 2028* [`9db15408c`](https://github.com/npm/cli/commit/9db15408c60be788667cafc787116555507dc433) 2029 [npm/cli#27](https://github.com/npm/cli/pull/27) 2030 `wrappy` was previously added to dependencies in order to flatten it, but we 2031 no longer do legacy-style for npm itself, so it has been removed from 2032 `package.json`. 2033 ([@rickschubert](https://github.com/rickschubert)) 2034 2035### DOCUMENTATION 2036 2037* [`3242baf08`](https://github.com/npm/cli/commit/3242baf0880d1cdc0e20b546d3c1da952e474444) 2038 [npm/cli#13](https://github.com/npm/cli/pull/13) 2039 Update more dead links in README.md. 2040 ([@u32i64](https://github.com/u32i64)) 2041* [`06580877b`](https://github.com/npm/cli/commit/06580877b6023643ec780c19d84fbe120fe5425c) 2042 [npm/cli#19](https://github.com/npm/cli/pull/19) 2043 Update links in docs' `index.html` to refer to new bug/PR URLs. 2044 ([@watilde](https://github.com/watilde)) 2045* [`ca03013c2`](https://github.com/npm/cli/commit/ca03013c23ff38e12902e9569a61265c2d613738) 2046 [npm/cli#15](https://github.com/npm/cli/pull/15) 2047 Fix some typos in file-specifiers docs. 2048 ([@Mstrodl](https://github.com/Mstrodl)) 2049* [`4f39f79bc`](https://github.com/npm/cli/commit/4f39f79bcacef11bf2f98d09730bc94d0379789b) 2050 [npm/cli#16](https://github.com/npm/cli/pull/16) 2051 Fix some typos in file-specifiers and package-lock docs. 2052 ([@watilde](https://github.com/watilde)) 2053* [`35e51f79d`](https://github.com/npm/cli/commit/35e51f79d1a285964aad44f550811aa9f9a72cd8) 2054 [npm/cli#18](https://github.com/npm/cli/pull/18) 2055 Update build status badge url in README. 2056 ([@watilde](https://github.com/watilde)) 2057* [`a67db5607`](https://github.com/npm/cli/commit/a67db5607ba2052b4ea44f66657f98b758fb4786) 2058 [npm/cli#17](https://github.com/npm/cli/pull/17/) 2059 Replace TROUBLESHOOTING.md with [posts in 2060 npm.community](https://npm.community/c/support/troubleshooting). 2061 ([@watilde](https://github.com/watilde)) 2062* [`e115f9de6`](https://github.com/npm/cli/commit/e115f9de65bf53711266152fc715a5012f7d3462) 2063 [npm/cli#7](https://github.com/npm/cli/pull/7) 2064 Use https URLs in documentation when appropriate. Happy [Not Secure Day](https://arstechnica.com/gadgets/2018/07/todays-the-day-that-chrome-brands-plain-old-http-as-not-secure/)! 2065 ([@XhmikosR](https://github.com/XhmikosR)) 2066 2067## v6.2.0 (2018-07-13): 2068 2069In case you missed it, [we 2070moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We 2071look forward to seeing future PRs landing in 2072[npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with 2073you all in [npm.community](https://npm.community). Go check it out! 2074 2075This final release of `npm@6.2.0` includes a couple of features that weren't 2076quite ready on time but that we'd still like to include. Enjoy! 2077 2078### FEATURES 2079 2080* [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) 2081 [#20554](https://github.com/npm/npm/pull/20554) 2082 Add support for tab-separated output for `npm audit` data with the 2083 `--parseable` flag. 2084 ([@luislobo](https://github.com/luislobo)) 2085* [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) 2086 [#12697](https://github.com/npm/npm/pull/12697) 2087 Add new `sign-git-commit` config to control whether the git commit itself gets 2088 signed, or just the tag (which is the default). 2089 ([@tribou](https://github.com/tribou)) 2090 2091### FIXES 2092 2093* [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) 2094 [#19418](https://github.com/npm/npm/pull/19418) 2095 Do not use `SET` to fetch the env in git-bash or Cygwin. 2096 ([@gucong3000](https://github.com/gucong3000)) 2097 2098### DEPENDENCY BUMPS 2099 2100* [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) 2101 `request@2.81.0`: Downgraded to allow better deduplication. This does 2102 introduce a bunch of `hoek`-related audit reports, but they don't affect npm 2103 itself so we consider it safe. We'll upgrade `request` again once `node-gyp` 2104 unpins it. 2105 ([@simov](https://github.com/simov)) 2106* [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) 2107 `node-gyp@3.7.0` 2108 ([@MylesBorins](https://github.com/MylesBorins)) 2109* [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) 2110 `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With 2111 this dependency bump, we've removed `lodash` from our tree, which cut back 2112 tarball size by another 300kb. 2113 ([@Turbo87](https://github.com/Turbo87)) 2114* [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) 2115 `npm-audit-report@1.3.1` 2116 ([@zkat](https://github.com/zkat)) 2117* [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) 2118 Add `cli-table3` to bundleDeps. 2119 ([@iarna](https://github.com/iarna)) 2120* [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) 2121 Make `standard` happy. 2122 ([@iarna](https://github.com/iarna)) 2123 2124### DOCS 2125 2126* [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631) 2127 [#21165](https://github.com/npm/npm/pull/21165) 2128 Fix some markdown formatting in npm-disputes.md. 2129 ([@hchiam](https://github.com/hchiam)) 2130* [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171) 2131 [#20920](https://github.com/npm/npm/pull/20920) 2132 Explicitly state that republishing an unpublished package requires a 72h 2133 waiting period. 2134 ([@gmattie](https://github.com/gmattie)) 2135* [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) 2136 Replace references to the old repo or issue tracker. We're at npm/cli now! 2137 ([@zkat](https://github.com/zkat)) 2138 2139## v6.2.0-next.1 (2018-07-05): 2140 2141This is a quick patch to the release to fix an issue that was preventing users 2142from installing `npm@next`. 2143 2144* [`ecdcbd745`](https://github.com/npm/npm/commit/ecdcbd745ae1edd9bdd102dc3845a7bc76e1c5fb) 2145 [#21129](https://github.com/npm/npm/pull/21129) 2146 Remove postinstall script that depended on source files, thus preventing 2147 `npm@next` from being installable from the registry. 2148 ([@zkat](https://github.com/zkat)) 2149 2150## v6.2.0-next.0 (2018-06-28): 2151 2152### NEW FEATURES 2153 2154* [`ce0793358`](https://github.com/npm/npm/commit/ce07933588ec2da1cc1980f93bdaa485d6028ae2) 2155 [#20750](https://github.com/npm/npm/pull/20750) 2156 You can now disable the update notifier entirely by using 2157 `--no-update-notifier` or setting it in your config with `npm config set 2158 update-notifier false`. 2159 ([@travi](https://github.com/travi)) 2160* [`d2ad776f6`](https://github.com/npm/npm/commit/d2ad776f6dcd92ae3937465736dcbca171131343) 2161 [#20879](https://github.com/npm/npm/pull/20879) 2162 When `npm run-script <script>` fails due to a typo or missing script, npm will 2163 now do a "did you mean?..." for scripts that do exist. 2164 ([@watilde](https://github.com/watilde)) 2165 2166### BUGFIXES 2167 2168* [`8f033d72d`](https://github.com/npm/npm/commit/8f033d72da3e84a9dbbabe3a768693817af99912) 2169 [#20948](https://github.com/npm/npm/pull/20948) 2170 Fix the regular expression matching in `xcode_emulation` in `node-gyp` to also 2171 handle version numbers with multiple-digit major versions which would 2172 otherwise break under use of XCode 10. 2173 ([@Trott](https://github.com/Trott)) 2174* [`c8ba7573a`](https://github.com/npm/npm/commit/c8ba7573a4ea95789f674ce038762d6a77a8b047) 2175 Stop trying to hoist/dedupe bundles dependencies. 2176 ([@iarna](https://github.com/iarna)) 2177* [`cd698f068`](https://github.com/npm/npm/commit/cd698f06840b7c9407ac802efa96d16464722a7d) 2178 [#20762](https://github.com/npm/npm/pull/20762) 2179 Add synopsis to brief help for `npm audit` and suppress trailing newline. 2180 ([@wyardley](https://github.com/wyardley)) 2181* [`6808ee3bd`](https://github.com/npm/npm/commit/6808ee3bd59560b1334a18aa6c6e0120094b03c0) 2182 [#20881](https://github.com/npm/npm/pull/20881) 2183 Exclude /.github directory from npm tarball. 2184 ([@styfle](https://github.com/styfle)) 2185* [`177cbb476`](https://github.com/npm/npm/commit/177cbb4762c1402bfcbf0636c4bc4905fd684fc1) 2186 [#21105](https://github.com/npm/npm/pull/21105) 2187 Add suggestion to use a temporary cache instead of `npm cache clear --force`. 2188 ([@karanjthakkar](https://github.com/karanjthakkar)) 2189 2190### DOCS 2191 2192* [`7ba3fca00`](https://github.com/npm/npm/commit/7ba3fca00554b884eb47f2ed661693faf2630b27) 2193 [#20855](https://github.com/npm/npm/pull/20855) 2194 Direct people to npm.community instead of the GitHub issue tracker on error. 2195 ([@zkat](https://github.com/zkat)) 2196* [`88efbf6b0`](https://github.com/npm/npm/commit/88efbf6b0b403c5107556ff9e1bb7787a410d14d) 2197 [#20859](https://github.com/npm/npm/pull/20859) 2198 Fix typo in registry docs. 2199 ([@strugee](https://github.com/strugee)) 2200* [`61bf827ae`](https://github.com/npm/npm/commit/61bf827aea6f98bba08a54e60137d4df637788f9) 2201 [#20947](https://github.com/npm/npm/pull/20947) 2202 Fixed a small grammar error in the README. 2203 ([@bitsol](https://github.com/bitsol)) 2204* [`f5230c90a`](https://github.com/npm/npm/commit/f5230c90afef40f445bf148cbb16d6129a2dcc19) 2205 [#21018](https://github.com/npm/npm/pull/21018) 2206 Small typo fix in CONTRIBUTING.md. 2207 ([@reggi](https://github.com/reggi)) 2208* [`833efe4b2`](https://github.com/npm/npm/commit/833efe4b2abcef58806f823d77ab8bb8f4f781c6) 2209 [#20986](https://github.com/npm/npm/pull/20986) 2210 Document current structure/expectations around package tarballs. 2211 ([@Maximaximum](https://github.com/Maximaximum)) 2212* [`9fc0dc4f5`](https://github.com/npm/npm/commit/9fc0dc4f58d728bac6a8db7143d04863d7b653db) 2213 [#21019](https://github.com/npm/npm/pull/21019) 2214 Clarify behavior of `npm link ../path` shorthand. 2215 ([@davidgilbertson](https://github.com/davidgilbertson)) 2216* [`3924c72d0`](https://github.com/npm/npm/commit/3924c72d06b9216ac2b6a9d951fd565a1d5eda89) 2217 [#21064](https://github.com/npm/npm/pull/21064) 2218 Add missing "if" 2219 ([@roblourens](https://github.com/roblourens)) 2220 2221### DEPENDENCY SHUFFLE! 2222 2223We did some reshuffling and moving around of npm's own dependencies. This 2224significantly reduces the total bundle size of the npm pack, from 8MB to 4.8MB 2225for the distributed tarball! We also moved around what we actually commit to the 2226repo as far as devDeps go. 2227 2228* [`0483f5c5d`](https://github.com/npm/npm/commit/0483f5c5deaf18c968a128657923103e49f4e67a) 2229 Flatten and dedupe our dependencies! 2230 ([@iarna](https://github.com/iarna)) 2231* [`ef9fa1ceb`](https://github.com/npm/npm/commit/ef9fa1ceb5f9d175fd453138b1a26d45a5071dfd) 2232 Remove unused direct dependency `ansi-regex`. 2233 ([@iarna](https://github.com/iarna)) 2234* [`0d14b0bc5`](https://github.com/npm/npm/commit/0d14b0bc59812f4e33798194e11ffacbea3c0493) 2235 Reshuffle ansi-regex for better deduping. 2236 ([@iarna](https://github.com/iarna)) 2237* [`68a101859`](https://github.com/npm/npm/commit/68a101859b2b6f78b2e7c3a936492acdb15f7c4a) 2238 Reshuffle strip-ansi for better deduping. 2239 ([@iarna](https://github.com/iarna)) 2240* [`0d5251f97`](https://github.com/npm/npm/commit/0d5251f97dc8b8b143064869e530d465c757ffbb) 2241 Reshuffle is-fullwidth-code-point for better deduping. 2242 ([@iarna](https://github.com/iarna)) 2243* [`2d0886632`](https://github.com/npm/npm/commit/2d08866327013522fc5fbe61ed872b8f30e92775) 2244 Add fake-registry, npm-registry-mock replacement. 2245 ([@iarna](https://github.com/iarna)) 2246 2247### DEPENDENCIES 2248 2249* [`8cff8eea7`](https://github.com/npm/npm/commit/8cff8eea75dc34c9c1897a7a6f65d7232bb0c64c) 2250 `tar@4.4.3` 2251 ([@zkat](https://github.com/zkat)) 2252* [`bfc4f873b`](https://github.com/npm/npm/commit/bfc4f873bd056b7e3aee389eda4ecd8a2e175923) 2253 `pacote@8.1.6` 2254 ([@zkat](https://github.com/zkat)) 2255* [`532096163`](https://github.com/npm/npm/commit/53209616329119be8fcc29db86a43cc8cf73454d) 2256 `libcipm@2.0.0` 2257 ([@zkat](https://github.com/zkat)) 2258* [`4a512771b`](https://github.com/npm/npm/commit/4a512771b67aa06505a0df002a9027c16a238c71) 2259 `request@2.87.0` 2260 ([@iarna](https://github.com/iarna)) 2261* [`b7cc48dee`](https://github.com/npm/npm/commit/b7cc48deee45da1feab49aa1dd4d92e33c9bcac8) 2262 `which@1.3.1` 2263 ([@iarna](https://github.com/iarna)) 2264* [`bae657c28`](https://github.com/npm/npm/commit/bae657c280f6ea8e677509a9576e1b47c65c5441) 2265 `tar@4.4.4` 2266 ([@iarna](https://github.com/iarna)) 2267* [`3d46e5c4e`](https://github.com/npm/npm/commit/3d46e5c4e3c5fecd9bf05a7425a16f2e8ad5c833) 2268 `JSONStream@1.3.3` 2269 ([@iarna](https://github.com/iarna)) 2270* [`d0a905daf`](https://github.com/npm/npm/commit/d0a905dafc7e3fcd304e8053acbe3da40ba22554) 2271 `is-cidr@2.0.6` 2272 ([@iarna](https://github.com/iarna)) 2273* [`4fc1f815f`](https://github.com/npm/npm/commit/4fc1f815fec5a7f6f057cf305e01d4126331d1f2) 2274 `marked@0.4.0` 2275 ([@iarna](https://github.com/iarna)) 2276* [`f72202944`](https://github.com/npm/npm/commit/f722029441a088d03df94bdfdeeec51cfd318659) 2277 `tap@12.0.1` 2278 ([@iarna](https://github.com/iarna)) 2279* [`bdce96eb3`](https://github.com/npm/npm/commit/bdce96eb3c30fcff873aa3f1190e8ae4928d690b) 2280 `npm-profile@3.0.2` 2281 ([@iarna](https://github.com/iarna)) 2282* [`fe4240e85`](https://github.com/npm/npm/commit/fe4240e852144770bf76d7b1952056ca5baa63cf) 2283 `uuid@3.3.2` 2284 ([@zkat](https://github.com/zkat)) 2285 2286## v6.1.0 (2018-05-17): 2287 2288### FIX WRITE AFTER END ERROR 2289 2290First introduced in 5.8.0, this finally puts to bed errors where you would 2291occasionally see `Error: write after end at MiniPass.write`. 2292 2293* [`171f3182f`](https://github.com/npm/npm/commit/171f3182f32686f2f94ea7d4b08035427e0b826e) 2294 [node-tar#180](https://github.com/npm/node-tar/issues/180) 2295 [npm.community#35](https://npm.community/t/write-after-end-when-installing-packages-with-5-8-and-later/35) 2296 `pacote@8.1.5`: Fix write-after-end errors. 2297 ([@zkat](https://github.com/zkat)) 2298 2299### DETECT CHANGES IN GIT SPECIFIERS 2300 2301* [`0e1726c03`](https://github.com/npm/npm/commit/0e1726c0350a02d5a60f5fddb1e69c247538625e) 2302 We can now determine if the commitid of a git dependency in the lockfile is derived 2303 from the specifier in the package.json and if it isn't we now trigger an update for it. 2304 ([@iarna](https://github.com/iarna)) 2305 2306### OTHER BUGS 2307 2308* [`442d2484f`](https://github.com/npm/npm/commit/442d2484f686e3a371b07f8473a17708f84d9603) 2309 [`2f0c88351`](https://github.com/npm/npm/commit/2f0c883519f17c94411dd1d9877c5666f260c12f) 2310 [`631d30a34`](https://github.com/npm/npm/commit/631d30a340f5805aed6e83f47a577ca4125599b2) 2311 When requesting the update of a direct dependency that was also a 2312 transitive dependency to a version incompatible with the transitive 2313 requirement and you had a lock-file but did not have a `node_modules` 2314 folder then npm would fail to provide a new copy of the transitive 2315 dependency, resulting in an invalid lock-file that could not self heal. 2316 ([@iarna](https://github.com/iarna)) 2317* [`be5dd0f49`](https://github.com/npm/npm/commit/be5dd0f496ec1485b1ea3094c479dfc17bd50d82) 2318 [#20715](https://github.com/npm/npm/pull/20715) 2319 Cleanup output of `npm ci` summary report. 2320 ([@legodude17](https://github.com/legodude17)) 2321* [`98ffe4adb`](https://github.com/npm/npm/commit/98ffe4adb55a6f4459271856de2e27e95ee63375) 2322 Node.js now has a test that scans for things that look like conflict 2323 markers in source code. This was triggering false positives on a fixture in a test 2324 of npm's ability to heal lockfiles with conflicts in them. 2325 ([@iarna](https://github.com/iarna)) 2326 2327### DEPENDENCY UPDATES 2328 2329* [`3f2e306b8`](https://github.com/npm/npm/commit/3f2e306b884a027df03f64524beb8658ce1772cb) 2330 Using `npm audit fix`, replace some transitive dependencies with security 2331 issues with versions that don't have any. 2332 ([@iarna](https://github.com/iarna)) 2333* [`1d07134e0`](https://github.com/npm/npm/commit/1d07134e0b157f7484a20ce6987ff57951842954) 2334 `tar@4.4.1`: 2335 Dropping to 4.4.1 from 4.4.2 due to https://github.com/npm/node-tar/issues/183 2336 ([@zkat](https://github.com/zkat)) 2337 2338 2339## v6.1.0-next.0 (2018-05-17): 2340 2341Look at that! A feature bump! `npm@6` was super-exciting not just because it 2342used a bigger number than ever before, but also because it included a super 2343shiny new command: `npm audit`. Well, we've kept working on it since then and 2344have some really nice improvements for it. You can expect more of them, and the 2345occasional fix, in the next few releases as more users start playing with it and 2346we get more feedback about what y'all would like to see from something like 2347this. 2348 2349I, for one, have started running it (and the new subcommand...) in all my 2350projects, and it's one of those things that I don't know how I ever functioned 2351-without- it! This will make a world of difference to so many people as far as 2352making the npm ecosystem a higher-quality, safer commons for all of us. 2353 2354This is also a good time to remind y'all that we have a new [RFCs 2355repository](https://github.com/npm/rfcs), along with a new process for them. 2356This repo is open to anyone's RFCs, and has already received some great ideas 2357about where we can take the CLI (and, to a certain extent, the registry). It's a 2358great place to get feedback, and completely replaces feature requests in the 2359main repo, so we won't be accepting feature requests there at all anymore. Check 2360it out if you have something you'd like to suggest, or if you want to keep track 2361of what the future might look like! 2362 2363### NEW FEATURE: `npm audit fix` 2364 2365This is the biggie with this release! `npm audit fix` does exactly what it says 2366on the tin. It takes all the actionable reports from your `npm audit` and runs 2367the installs automatically for you, so you don't have to try to do all that 2368mechanical work yourself! 2369 2370Note that by default, `npm audit fix` will stick to semver-compatible changes, 2371so you should be able to safely run it on most projects and carry on with your 2372day without having to track down what breaking changes were included. If you 2373want your (toplevel) dependencies to accept semver-major bumps as well, you can 2374use `npm audit fix --force` and it'll toss those in, as well. Since it's running 2375the npm installer under the hood, it also supports `--production` and 2376`--only=dev` flags, as well as things like `--dry-run`, `--json`, and 2377`--package-lock-only`, if you want more control over what it does. 2378 2379Give it a whirl and tell us what you think! See `npm help audit` for full docs! 2380 2381* [`3800a660d`](https://github.com/npm/npm/commit/3800a660d99ca45c0175061dbe087520db2f54b7) 2382 Add `npm audit fix` subcommand to automatically fix detected vulnerabilities. 2383 ([@zkat](https://github.com/zkat)) 2384 2385### OTHER NEW `audit` FEATURES 2386 2387* [`1854b1c7f`](https://github.com/npm/npm/commit/1854b1c7f09afceb49627e539a086d8a3565601c) 2388 [#20568](https://github.com/npm/npm/pull/20568) 2389 Add support for `npm audit --json` to print the report in JSON format. 2390 ([@finnp](https://github.com/finnp)) 2391* [`85b86169d`](https://github.com/npm/npm/commit/85b86169d9d0423f50893d2ed0c7274183255abe) 2392 [#20570](https://github.com/npm/npm/pull/20570) 2393 Include number of audited packages in `npm install` summary output. 2394 ([@zkat](https://github.com/zkat)) 2395* [`957cbe275`](https://github.com/npm/npm/commit/957cbe27542d30c33e58e7e6f2f04eeb64baf5cd) 2396 `npm-audit-report@1.2.1`: 2397 Overhaul audit install and detail output format. The new format is terser and 2398 fits more closely into the visual style of the CLI, while still providing you 2399 with the important bits of information you need. They also include a bit more 2400 detail on the footer about what actions you can take! 2401 ([@zkat](https://github.com/zkat)) 2402 2403### NEW FEATURE: GIT DEPS AND `npm init <pkg>`! 2404 2405Another exciting change that came with `npm@6` was the new `npm init` command 2406that allows for community-authored generators. That means you can, for example, 2407do `npm init react-app` and it'll one-off download, install, and run 2408[`create-react-app`](https://npm.im/create-react-app) for you, without requiring 2409or keeping around any global installs. That is, it basically just calls out to 2410[`npx`](https://npm.im/npx). 2411 2412The first version of this command only really supported registry dependencies, 2413but now, [@jdalton](https://github.com/jdalton) went ahead and extended this 2414feature so you can use hosted git dependencies, and their shorthands. 2415 2416So go ahead and do `npm init facebook/create-react-app` and it'll grab the 2417package from the github repo now! Or you can use it with a private github 2418repository to maintain your organizational scaffolding tools or whatnot. ✨ 2419 2420* [`483e01180`](https://github.com/npm/npm/commit/483e011803af82e63085ef41b7acce5b22aa791c) 2421 [#20403](https://github.com/npm/npm/pull/20403) 2422 Add support for hosted git packages to `npm init <name>`. 2423 ([@jdalton](https://github.com/jdalton)) 2424 2425### BUGFIXES 2426 2427* [`a41c0393c`](https://github.com/npm/npm/commit/a41c0393cba710761a15612c6c85c9ef2396e65f) 2428 [#20538](https://github.com/npm/npm/pull/20538) 2429 Make the new `npm view` work when the license field is an object instead of a 2430 string. 2431 ([@zkat](https://github.com/zkat)) 2432* [`eb7522073`](https://github.com/npm/npm/commit/eb75220739302126c94583cc65a5ff12b441e3c6) 2433 [#20582](https://github.com/npm/npm/pull/20582) 2434 Add support for environments (like Docker) where the expected binary for 2435 opening external URLs is not available. 2436 ([@bcoe](https://github.com/bcoe)) 2437* [`212266529`](https://github.com/npm/npm/commit/212266529ae72056bf0876e2cff4b8ba01d09d0f) 2438 [#20536](https://github.com/npm/npm/pull/20536) 2439 Fix a spurious colon in the new update notifier message and add support for 2440 the npm canary. 2441 ([@zkat](https://github.com/zkat)) 2442* [`5ee1384d0`](https://github.com/npm/npm/commit/5ee1384d02c3f11949d7a26ec6322488476babe6) 2443 [#20597](https://github.com/npm/npm/pull/20597) 2444 Infer a version range when a `package.json` has a dist-tag instead of a 2445 version range in one of its dependency specs. Previously, this would cause 2446 dependencies to be flagged as invalid. 2447 ([@zkat](https://github.com/zkat)) 2448* [`4fa68ae41`](https://github.com/npm/npm/commit/4fa68ae41324293e59584ca6cf0ac24b3e0825bb) 2449 [#20585](https://github.com/npm/npm/pull/20585) 2450 Make sure scoped bundled deps are shown in the new publish preview, too. 2451 ([@zkat](https://github.com/zkat)) 2452* [`1f3ee6b7e`](https://github.com/npm/npm/commit/1f3ee6b7e1b36b52bdedeb9241296d4e66561d48) 2453 `cacache@11.0.2`: 2454 Stop dropping `size` from metadata on `npm cache verify`. 2455 ([@jfmartinez](https://github.com/jfmartinez)) 2456* [`91ef93691`](https://github.com/npm/npm/commit/91ef93691a9d6ce7c016fefdf7da97854ca2b2ca) 2457 [#20513](https://github.com/npm/npm/pull/20513) 2458 Fix nested command aliases. 2459 ([@mmermerkaya](https://github.com/mmermerkaya)) 2460* [`18b2b3cf7`](https://github.com/npm/npm/commit/18b2b3cf71a438648ced1bd13faecfb50c71e979) 2461 `npm-lifecycle@2.0.3`: 2462 Make sure different versions of the `Path` env var on Windows all get 2463 `node_modules/.bin` prepended when running lifecycle scripts. 2464 ([@laggingreflex](https://github.com/laggingreflex)) 2465 2466### DOCUMENTATION 2467 2468* [`a91d87072`](https://github.com/npm/npm/commit/a91d87072f292564e58dcab508b5a8c6702b9aae) 2469 [#20550](https://github.com/npm/npm/pull/20550) 2470 Update required node versions in README. 2471 ([@legodude17](https://github.com/legodude17)) 2472* [`bf3cfa7b8`](https://github.com/npm/npm/commit/bf3cfa7b8b351714c4ec621e1a5867c8450c6fff) 2473 Pull in changelogs from the last `npm@5` release. 2474 ([@iarna](https://github.com/iarna)) 2475* [`b2f14b14c`](https://github.com/npm/npm/commit/b2f14b14ca25203c2317ac2c47366acb50d46e69) 2476 [#20629](https://github.com/npm/npm/pull/20629) 2477 Make tone in `publishConfig` docs more neutral. 2478 ([@jeremyckahn](https://github.com/jeremyckahn)) 2479 2480### DEPENDENCY BUMPS 2481 2482* [`5fca4eae8`](https://github.com/npm/npm/commit/5fca4eae8a62a7049b1ae06aa0bbffdc6e0ad6cc) 2483 `byte-size@4.0.3` 2484 ([@75lb](https://github.com/75lb)) 2485* [`d9ef3fba7`](https://github.com/npm/npm/commit/d9ef3fba79f87c470889a6921a91f7cdcafa32b9) 2486 `lru-cache@4.1.3` 2487 ([@isaacs](https://github.com/isaacs)) 2488* [`f1baf011a`](https://github.com/npm/npm/commit/f1baf011a0d164f8dc8aa6cd31e89225e3872e3b) 2489 `request@2.86.0` 2490 ([@simonv](https://github.com/simonv)) 2491* [`005fa5420`](https://github.com/npm/npm/commit/005fa542072f09a83f77a9d62c5e53b8f6309371) 2492 `require-inject@1.4.3` 2493 ([@iarna](https://github.com/iarna)) 2494* [`1becdf09a`](https://github.com/npm/npm/commit/1becdf09a2f19716726c88e9a2342e1e056cfc71) 2495 `tap@11.1.5` 2496 ([@isaacs](https://github.com/isaacs)) 2497 2498## v6.0.1 (2018-05-09): 2499 2500### AUDIT SHOULDN'T WAIT FOREVER 2501 2502This will likely be reduced further with the goal that the audit process 2503shouldn't noticibly slow down your builds regardless of your network 2504situation. 2505 2506* [`3dcc240db`](https://github.com/npm/npm/commit/3dcc240dba5258532990534f1bd8a25d1698b0bf) 2507 Timeout audit requests eventually. 2508 ([@iarna](https://github.com/iarna)) 2509 2510### Looking forward 2511 2512We're still a way from having node@11, so now's a good time to ensure we 2513don't warn about being used with it. 2514 2515* [`ed1aebf55`](https://github.com/npm/npm/commit/ed1aebf55) 2516 Allow node@11, when it comes. 2517 ([@iarna](https://github.com/iarna)) 2518 2519## v6.0.1-next.0 (2018-05-03): 2520 2521### CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT! 2522 2523* [`b267bbbb9`](https://github.com/npm/npm/commit/b267bbbb9ddd551e3dbd162cc2597be041b9382c) 2524 [npm/lockfile#29](https://github.com/npm/lockfile/pull/29) 2525 `lockfile@1.0.4`: 2526 Switches to `signal-exit` to detect abnormal exits and remove locks. 2527 ([@Redsandro](https://github.com/Redsandro)) 2528 2529### SHRONKWRAPS AND LACKFILES 2530 2531If a published modules had legacy `npm-shrinkwrap.json` we were saving 2532ordinary registry dependencies (`name@version`) to your `package-lock.json` 2533as `https://` URLs instead of versions. 2534 2535* [`89102c0d9`](https://github.com/npm/npm/commit/89102c0d995c3d707ff2b56995a97a1610f8b532) 2536 When saving the lock-file compute how the dependency is being required instead of using 2537 `_resolved` in the `package.json`. This fixes the bug that was converting 2538 registry dependencies into `https://` dependencies. 2539 ([@iarna](https://github.com/iarna)) 2540* [`676f1239a`](https://github.com/npm/npm/commit/676f1239ab337ff967741895dbe3a6b6349467b6) 2541 When encountering a `https://` URL in our lockfiles that point at our default registry, extract 2542 the version and use them as registry dependencies. This lets us heal 2543 `package-lock.json` files produced by 6.0.0 2544 ([@iarna](https://github.com/iarna)) 2545 2546### AUDIT AUDIT EVERYWHERE 2547 2548You can't use it _quite_ yet, but we do have a few last moment patches to `npm audit` to make 2549it even better when it is turned on! 2550 2551* [`b2e4f48f5`](https://github.com/npm/npm/commit/b2e4f48f5c07b8ebc94a46ce01a810dd5d6cd20c) 2552 Make sure we hide stream errors on background audit submissions. Previously some classes 2553 of error could end up being displayed (harmlessly) during installs. 2554 ([@iarna](https://github.com/iarna)) 2555* [`1fe0c7fea`](https://github.com/npm/npm/commit/1fe0c7fea226e592c96b8ab22fd9435e200420e9) 2556 Include session and scope in requests (as we do in other requests to the registry). 2557 ([@iarna](https://github.com/iarna)) 2558* [`d04656461`](https://github.com/npm/npm/commit/d046564614639c37e7984fff127c79a8ddcc0c92) 2559 Exit with non-zero status when vulnerabilities are found. So you can have `npm audit` as a test or prepublish step! 2560 ([@iarna](https://github.com/iarna)) 2561* [`fcdbcbacc`](https://github.com/npm/npm/commit/fcdbcbacc16d96a8696dde4b6d7c1cba77828337) 2562 Verify lockfile integrity before running. You'd get an error either way, but this way it's 2563 faster and can give you more concrete instructions on how to fix it. 2564 ([@iarna](https://github.com/iarna)) 2565* [`2ac8edd42`](https://github.com/npm/npm/commit/2ac8edd4248f2393b35896f0300b530e7666bb0e) 2566 Refuse to run in global mode. Audits require a lockfile and globals don't have one. Yet. 2567 ([@iarna](https://github.com/iarna)) 2568 2569### DOCUMENTATION IMPROVEMENTS 2570 2571* [`b7fca1084`](https://github.com/npm/npm/commit/b7fca1084b0be6f8b87ec0807c6daf91dbc3060a) 2572 [#20407](https://github.com/npm/npm/pull/20407) 2573 Update the lock-file spec doc to mention that we now generate the from field for `git`-type dependencies. 2574 ([@watilde](https://github.com/watilde)) 2575* [`7a6555e61`](https://github.com/npm/npm/commit/7a6555e618e4b8459609b7847a9e17de2d4fa36e) 2576 [#20408](https://github.com/npm/npm/pull/20408) 2577 Describe what the colors in outdated mean. 2578 ([@teameh](https://github.com/teameh)) 2579 2580### DEPENDENCY UPDATES 2581 2582* [`5e56b3209`](https://github.com/npm/npm/commit/5e56b3209c4719e3c4d7f0d9346dfca3881a5d34) 2583 `npm-audit-report@1.0.8` 2584 ([@evilpacket](https://github.com/evilpacket)) 2585* [`58a0b31b4`](https://github.com/npm/npm/commit/58a0b31b43245692b4de0f1e798fcaf71f8b7c31) 2586 `lock-verify@2.0.2` 2587 ([@iarna](https://github.com/iarna)) 2588* [`e7a8c364f`](https://github.com/npm/npm/commit/e7a8c364f3146ffb94357d8dd7f643e5563e2f2b) 2589 [zkat/pacote#148](https://github.com/zkat/pacote/pull/148) 2590 `pacote@8.1.1` 2591 ([@redonkulus](https://github.com/redonkulus)) 2592* [`46c0090a5`](https://github.com/npm/npm/commit/46c0090a517526dfec9b1b6483ff640227f0cd10) 2593 `tar@4.4.2` 2594 ([@isaacs](https://github.com/isaacs)) 2595* [`8a16db3e3`](https://github.com/npm/npm/commit/8a16db3e39715301fd085a8f4c80ae836f0ec714) 2596 `update-notifier@2.5.0` 2597 ([@alexccl](https://github.com/alexccl)) 2598* [`696375903`](https://github.com/npm/npm/commit/6963759032fe955c1404d362e14f458d633c9444) 2599 `safe-buffer@5.1.2` 2600 ([@feross](https://github.com/feross)) 2601* [`c949eb26a`](https://github.com/npm/npm/commit/c949eb26ab6c0f307e75a546f342bb2ec0403dcf) 2602 `query-string@6.1.0` 2603 ([@sindresorhus](https://github.com/sindresorhus)) 2604 2605## v6.0.0 (2018-04-20): 2606 2607Hey y'all! Here's another `npm@6` release -- with `node@10` around the corner, 2608this might well be the last prerelease before we tag `6.0.0`! There's two major 2609features included with this release, along with a few miscellaneous fixes and 2610changes. 2611 2612### EXTENDED `npm init` SCAFFOLDING 2613 2614Thanks to the wonderful efforts of [@jdalton](https://github.com/jdalton) of 2615lodash fame, `npm init` can now be used to invoke custom scaffolding tools! 2616 2617You can now do things like `npm init react-app` or `npm init esm` to scaffold an 2618npm package by running `create-react-app` and `create-esm`, respectively. This 2619also adds an `npm create` alias, to correspond to Yarn's `yarn create` feature, 2620which inspired this. 2621 2622* [`008a83642`](https://github.com/npm/npm/commit/008a83642e04360e461f56da74b5557d5248a726) [`ed81d1426`](https://github.com/npm/npm/commit/ed81d1426776bcac47492cabef43f65e1d4ab536) [`833046e45`](https://github.com/npm/npm/commit/833046e45fe25f75daffd55caf25599a9f98c148) 2623 [#20303](https://github.com/npm/npm/pull/20303) 2624 Add an `npm init` feature that calls out to `npx` when invoked with positional 2625 arguments. ([@jdalton](https://github.com/jdalton)) 2626 2627### DEPENDENCY AUDITING 2628 2629This version of npm adds a new command, `npm audit`, which will run a security 2630audit of your project's dependency tree and notify you about any actions you may 2631need to take. 2632 2633The registry-side services required for this command to work will be available 2634on the main npm registry in the coming weeks. Until then, you won't get much out 2635of trying to use this on the CLI. 2636 2637As part of this change, the npm CLI now sends scrubbed and cryptographically 2638anonymized metadata about your dependency tree to your configured registry, to 2639allow notifying you about the existence of critical security flaws. For details 2640about how the CLI protects your privacy when it shares this metadata, see `npm 2641help audit`, or [read the docs for `npm audit` 2642online](https://github.com/npm/npm/blob/release-next/doc/cli/npm-audit.md). You 2643can disable this altogether by doing `npm config set audit false`, but will no 2644longer benefit from the service. 2645 2646* [`f4bc648ea`](https://github.com/npm/npm/commit/f4bc648ea7b19d63cc9878c9da2cb1312f6ce152) 2647 [#20389](https://github.com/npm/npm/pull/20389) 2648 `npm-registry-fetch@1.1.0` 2649 ([@iarna](https://github.com/iarna)) 2650* [`594d16987`](https://github.com/npm/npm/commit/594d16987465014d573c51a49bba6886cc19f8e8) 2651 [#20389](https://github.com/npm/npm/pull/20389) 2652 `npm-audit-report@1.0.5` 2653 ([@iarna](https://github.com/iarna)) 2654* [`8c77dde74`](https://github.com/npm/npm/commit/8c77dde74a9d8f9007667cd1732c3329e0d52617) [`1d8ac2492`](https://github.com/npm/npm/commit/1d8ac2492196c4752b2e41b23d5ddc92780aaa24) [`552ff6d64`](https://github.com/npm/npm/commit/552ff6d64a5e3bcecb33b2a861c49a3396adad6d) [`09c734803`](https://github.com/npm/npm/commit/09c73480329e75e44fb8e55ca522f798be68d448) 2655 [#20389](https://github.com/npm/npm/pull/20389) 2656 Add new `npm audit` command. 2657 ([@iarna](https://github.com/iarna)) 2658* [`be393a290`](https://github.com/npm/npm/commit/be393a290a5207dc75d3d70a32973afb3322306c) 2659 [#20389](https://github.com/npm/npm/pull/20389) 2660 Temporarily suppress git metadata till there's an opt-in. 2661 ([@iarna](https://github.com/iarna)) 2662* [`8e713344f`](https://github.com/npm/npm/commit/8e713344f6e0828ddfb7733df20d75e95a5382d8) 2663 [#20389](https://github.com/npm/npm/pull/20389) 2664 Document the new command. 2665 ([@iarna](https://github.com/iarna)) 2666* 2667 [#20389](https://github.com/npm/npm/pull/20389) 2668 Default audit to off when running the npm test suite itself. 2669 ([@iarna](https://github.com/iarna)) 2670 2671### MORE `package-lock.json` FORMAT CHANGES?! 2672 2673* [`820f74ae2`](https://github.com/npm/npm/commit/820f74ae22b7feb875232d46901cc34e9ba995d6) 2674 [#20384](https://github.com/npm/npm/pull/20384) 2675 Add `from` field back into package-lock for git dependencies. This will give 2676 npm the information it needs to figure out whether git deps are valid, 2677 specially when running with legacy install metadata or in 2678 `--package-lock-only` mode when there's no `node_modules`. This should help 2679 remove a significant amount of git-related churn on the lock-file. 2680 ([@zkat](https://github.com/zkat)) 2681 2682### BUGFIXES 2683 2684* [`9d5d0a18a`](https://github.com/npm/npm/commit/9d5d0a18a5458655275056156b5aa001140ae4d7) 2685 [#20358](https://github.com/npm/npm/pull/20358) 2686 `npm install-test` (aka `npm it`) will no longer generate `package-lock.json` 2687 when running with `--no-package-lock` or `package-lock=false`. 2688 ([@raymondfeng](https://github.com/raymondfeng)) 2689* [`e4ed976e2`](https://github.com/npm/npm/commit/e4ed976e20b7d1114c920a9dc9faf351f89a31c9) 2690 [`2facb35fb`](https://github.com/npm/npm/commit/2facb35fbfbbc415e693d350b67413a66ff96204) 2691 [`9c1eb945b`](https://github.com/npm/npm/commit/9c1eb945be566e24cbbbf186b0437bdec4be53fc) 2692 [#20390](https://github.com/npm/npm/pull/20390) 2693 Fix a scenario where a git dependency had a comittish associated with it 2694 that was not a complete commitid. `npm` would never consider that entry 2695 in the `package.json` as matching the entry in the `package-lock.json` and 2696 this resulted in inappropriate pruning or reinstallation of git 2697 dependencies. This has been addressed in two ways, first, the addition of the 2698 `from` field as described in [#20384](https://github.com/npm/npm/pull/20384) means 2699 we can exactly match the `package.json`. Second, when that's missing (when working with 2700 older `package-lock.json` files), we assume that the match is ok. (If 2701 it's not, we'll fix it up when a real installation is done.) 2702 ([@iarna](https://github.com/iarna)) 2703 2704 2705### DEPENDENCIES 2706 2707* [`1c1f89b73`](https://github.com/npm/npm/commit/1c1f89b7319b2eef6adee2530c4619ac1c0d83cf) 2708 `libnpx@10.2.0` 2709 ([@zkat](https://github.com/zkat)) 2710* [`242d8a647`](https://github.com/npm/npm/commit/242d8a6478b725778c00be8ba3dc85f367006a61) 2711 `pacote@8.1.0` 2712 ([@zkat](https://github.com/zkat)) 2713 2714### DOCS 2715 2716* [`a1c77d614`](https://github.com/npm/npm/commit/a1c77d614adb4fe6769631b646b817fd490d239c) 2717 [#20331](https://github.com/npm/npm/pull/20331) 2718 Fix broken link to 'private-modules' page. The redirect went away when the new 2719 npm website went up, but the new URL is better anyway. 2720 ([@vipranarayan14](https://github.com/vipranarayan14)) 2721* [`ad7a5962d`](https://github.com/npm/npm/commit/ad7a5962d758efcbcfbd9fda9a3d8b38ddbf89a1) 2722 [#20279](https://github.com/npm/npm/pull/20279) 2723 Document the `--if-present` option for `npm run-script`. 2724 ([@aleclarson](https://github.com/aleclarson)) 2725 2726## v6.0.0-next.1 (2018-04-12): 2727 2728### NEW FEATURES 2729 2730* [`a9e722118`](https://github.com/npm/npm/commit/a9e7221181dc88e14820d0677acccf0648ac3c5a) 2731 [#20256](https://github.com/npm/npm/pull/20256) 2732 Add support for managing npm webhooks. This brings over functionality 2733 previously provided by the [`wombat`](https://www.npmjs.com/package/wombat) CLI. 2734 ([@zkat](https://github.com/zkat)) 2735* [`8a1a64203`](https://github.com/npm/npm/commit/8a1a64203cca3f30999ea9e160eb63662478dcee) 2736 [#20126](https://github.com/npm/npm/pull/20126) 2737 Add `npm cit` command that's equivalent of `npm ci && npm t` that's equivalent of `npm it`. 2738 ([@SimenB](https://github.com/SimenB)) 2739* [`fe867aaf1`](https://github.com/npm/npm/commit/fe867aaf19e924322fe58ed0cf0a570297a96559) 2740 [`49d18b4d8`](https://github.com/npm/npm/commit/49d18b4d87d8050024f8c5d7a0f61fc2514917b1) 2741 [`ff6b31f77`](https://github.com/npm/npm/commit/ff6b31f775f532bb8748e8ef85911ffb35a8c646) 2742 [`78eab3cda`](https://github.com/npm/npm/commit/78eab3cdab6876728798f876d569badfc74ce68f) 2743 The `requires` field in your lock-file will be upgraded to use ranges from 2744 versions on your first use of npm. 2745 ([@iarna](https://github.com/iarna)) 2746* [`cf4d7b4de`](https://github.com/npm/npm/commit/cf4d7b4de6fa241a656e58f662af0f8d7cd57d21) 2747 [#20257](https://github.com/npm/npm/pull/20257) 2748 Add shasum and integrity to the new `npm view` output. 2749 ([@zkat](https://github.com/zkat)) 2750 2751### BUG FIXES 2752 2753* [`685764308`](https://github.com/npm/npm/commit/685764308e05ff0ddb9943b22ca77b3a56d5c026) 2754 Fix a bug where OTPs passed in via the commandline would have leading 2755 zeros deleted resulted in authentication failures. 2756 ([@iarna](https://github.com/iarna)) 2757* [`8f3faa323`](https://github.com/npm/npm/commit/8f3faa3234b2d2fcd2cb05712a80c3e4133c8f45) 2758 [`6800f76ff`](https://github.com/npm/npm/commit/6800f76ffcd674742ba8944f11f6b0aa55f4b612) 2759 [`ec90c06c7`](https://github.com/npm/npm/commit/ec90c06c78134eb2618612ac72288054825ea941) 2760 [`825b5d2c6`](https://github.com/npm/npm/commit/825b5d2c60e620da5459d9dc13d4f911294a7ec2) 2761 [`4785f13fb`](https://github.com/npm/npm/commit/4785f13fb69f33a8c624ecc8a2be5c5d0d7c94fc) 2762 [`bd16485f5`](https://github.com/npm/npm/commit/bd16485f5b3087625e13773f7251d66547d6807d) 2763 Restore the ability to bundle dependencies that are uninstallable from the 2764 registry. This also eliminates needless registry lookups for bundled 2765 dependencies. 2766 2767 Fixed a bug where attempting to install a dependency that is bundled 2768 inside another module without reinstalling that module would result in 2769 ENOENT errors. 2770 ([@iarna](https://github.com/iarna)) 2771* [`429498a8c`](https://github.com/npm/npm/commit/429498a8c8d4414bf242be6a3f3a08f9a2adcdf9) 2772 [#20029](https://github.com/npm/npm/pull/20029) 2773 Allow packages with non-registry specifiers to follow the fast path that 2774 the we use with the lock-file for registry specifiers. This will improve install time 2775 especially when operating only on the package-lock (`--package-lock-only`). 2776 ([@zkat](https://github.com/zkat)) 2777 2778 Fix the a bug where `npm i --only=prod` could remove development 2779 dependencies from lock-file. 2780 ([@iarna](https://github.com/iarna)) 2781* [`834b46ff4`](https://github.com/npm/npm/commit/834b46ff48ade4ab4e557566c10e83199d8778c6) 2782 [#20122](https://github.com/npm/npm/pull/20122) 2783 Improve the update-notifier messaging (borrowing ideas from pnpm) and 2784 eliminate false positives. 2785 ([@zkat](https://github.com/zkat)) 2786* [`f9de7ef3a`](https://github.com/npm/npm/commit/f9de7ef3a1089ceb2610cd27bbd4b4bc2979c4de) 2787 [#20154](https://github.com/npm/npm/pull/20154) 2788 Let version succeed when `package-lock.json` is gitignored. 2789 ([@nwoltman](https://github.com/nwoltman)) 2790* [`f8ec52073`](https://github.com/npm/npm/commit/f8ec520732bda687bc58d9da0873dadb2d65ca96) 2791 [#20212](https://github.com/npm/npm/pull/20212) 2792 Ensure that we only create an `etc` directory if we are actually going to write files to it. 2793 ([@buddydvd](https://github.com/buddydvd)) 2794* [`ab489b753`](https://github.com/npm/npm/commit/ab489b75362348f412c002cf795a31dea6420ef0) 2795 [#20140](https://github.com/npm/npm/pull/20140) 2796 Note in documentation that `package-lock.json` version gets touched by `npm version`. 2797 ([@srl295](https://github.com/srl295)) 2798* [`857c2138d`](https://github.com/npm/npm/commit/857c2138dae768ea9798782baa916b1840ab13e8) 2799 [#20032](https://github.com/npm/npm/pull/20032) 2800 Fix bug where unauthenticated errors would get reported as both 404s and 2801 401s, i.e. `npm ERR! 404 Registry returned 401`. In these cases the error 2802 message will now be much more informative. 2803 ([@iarna](https://github.com/iarna)) 2804* [`d2d290bca`](https://github.com/npm/npm/commit/d2d290bcaa85e44a4b08cc40cb4791dd4f81dfc4) 2805 [#20082](https://github.com/npm/npm/pull/20082) 2806 Allow optional @ prefix on scope with `npm team` commands for parity with other commands. 2807 ([@bcoe](https://github.com/bcoe)) 2808* [`b5babf0a9`](https://github.com/npm/npm/commit/b5babf0a9aa1e47fad8a07cc83245bd510842047) 2809 [#19580](https://github.com/npm/npm/pull/19580) 2810 Improve messaging when two-factor authentication is required while publishing. 2811 ([@jdeniau](https://github.com/jdeniau)) 2812* [`471ee1c5b`](https://github.com/npm/npm/commit/471ee1c5b58631fe2e936e32480f3f5ed6438536) 2813 [`0da38b7b4`](https://github.com/npm/npm/commit/0da38b7b4aff0464c60ad12e0253fd389efd5086) 2814 Fix a bug where optional status of a dependency was not being saved to 2815 the package-lock on the initial install. 2816 ([@iarna](https://github.com/iarna)) 2817* [`b3f98d8ba`](https://github.com/npm/npm/commit/b3f98d8ba242a7238f0f9a90ceea840b7b7070af) 2818 [`9dea95e31`](https://github.com/npm/npm/commit/9dea95e319169647bea967e732ae4c8212608f53) 2819 Ensure that `--no-optional` does not remove optional dependencies from the lock-file. 2820 ([@iarna](https://github.com/iarna)) 2821 2822### MISCELLANEOUS 2823 2824* [`ec6b12099`](https://github.com/npm/npm/commit/ec6b120995c9c1d17ff84bf0217ba5741365af2d) 2825 Exclude all tests from the published version of npm itself. 2826 ([@iarna](https://github.com/iarna)) 2827 2828### DEPENDENCY UPDATES 2829 2830* [`73dc97455`](https://github.com/npm/npm/commit/73dc974555217207fb384e39d049da19be2f79ba) 2831 [zkat/cipm#46](https://github.com/zkat/cipm/pull/46) 2832 `libcipm@1.6.2`: 2833 Detect binding.gyp for default install lifecycle. Let's `npm ci` work on projects that 2834 have their own C code. 2835 ([@caleblloyd](https://github.com/caleblloyd)) 2836* [`77c3f7a00`](https://github.com/npm/npm/commit/77c3f7a0091f689661f61182cd361465e2d695d5) 2837 `iferr@1.0.0` 2838* [`dce733e37`](https://github.com/npm/npm/commit/dce733e37687c21cb1a658f06197c609ac39c793) 2839 [zkat/json-parse-better-errors#1](https://github.com/zkat/json-parse-better-errors/pull/1) 2840 `json-parse-better-errors@1.0.2` 2841 ([@Hoishin](https://github.com/Hoishin)) 2842* [`c52765ff3`](https://github.com/npm/npm/commit/c52765ff32d195842133baf146d647760eb8d0cd) 2843 `readable-stream@2.3.6` 2844 ([@mcollina](https://github.com/mcollina)) 2845* [`e160adf9f`](https://github.com/npm/npm/commit/e160adf9fce09f226f66e0892cc3fa45f254b5e8) 2846 `update-notifier@2.4.0` 2847 ([@sindersorhus](https://github.com/sindersorhus)) 2848* [`9a9d7809e`](https://github.com/npm/npm/commit/9a9d7809e30d1add21b760804be4a829e3c7e39e) 2849 `marked@0.3.1` 2850 ([@joshbruce](https://github.com/joshbruce)) 2851* [`f2fbd8577`](https://github.com/npm/npm/commit/f2fbd857797cf5c12a68a6fb0ff0609d373198b3) 2852 [#20256](https://github.com/npm/npm/pull/20256) 2853 `figgy-pudding@2.0.1` 2854 ([@zkat](https://github.com/zkat)) 2855* [`44972d53d`](https://github.com/npm/npm/commit/44972d53df2e0f0cc22d527ac88045066205dbbf) 2856 [#20256](https://github.com/npm/npm/pull/20256) 2857 `libnpmhook@3.0.0` 2858 ([@zkat](https://github.com/zkat)) 2859* [`cfe562c58`](https://github.com/npm/npm/commit/cfe562c5803db08a8d88957828a2cd1cc51a8dd5) 2860 [#20276](https://github.com/npm/npm/pull/20276) 2861 `node-gyp@3.6.2` 2862* [`3c0bbcb8e`](https://github.com/npm/npm/commit/3c0bbcb8e5440a3b90fabcce85d7a1d31e2ecbe7) 2863 [zkat/npx#172](https://github.com/zkat/npx/pull/172) 2864 `libnpx@10.1.1` 2865 ([@jdalton](https://github.com/jdalton)) 2866* [`0573d91e5`](https://github.com/npm/npm/commit/0573d91e57c068635a3ad4187b9792afd7b5e22f) 2867 [zkat/cacache#128](https://github.com/zkat/cacache/pull/128) 2868 `cacache@11.0.1` 2869 ([@zkat](https://github.com/zkat)) 2870* [`396afa99f`](https://github.com/npm/npm/commit/396afa99f61561424866d5c8dd7aedd6f91d611a) 2871 `figgy-pudding@3.1.0` 2872 ([@zkat](https://github.com/zkat)) 2873* [`e7f869c36`](https://github.com/npm/npm/commit/e7f869c36ec1dacb630e5ab749eb3bb466193f01) 2874 `pacote@8.0.0` 2875 ([@zkat](https://github.com/zkat)) 2876* [`77dac72df`](https://github.com/npm/npm/commit/77dac72dfdb6add66ec859a949b1d2d788a379b7) 2877 `ssri@6.0.0` 2878 ([@zkat](https://github.com/zkat)) 2879* [`0b802f2a0`](https://github.com/npm/npm/commit/0b802f2a0bfa15c6af8074ebf9347f07bccdbcc7) 2880 `retry@0.12.0` 2881 ([@iarna](https://github.com/iarna)) 2882* [`4781b64bc`](https://github.com/npm/npm/commit/4781b64bcc47d4e7fb7025fd6517cde044f6b5e1) 2883 `libnpmhook@4.0.1` 2884 ([@zkat](https://github.com/zkat)) 2885* [`7bdbaeea6`](https://github.com/npm/npm/commit/7bdbaeea61853280f00c8443a3b2d6e6b893ada9) 2886 `npm-package-arg@6.1.0` 2887 ([@zkat](https://github.com/zkat)) 2888* [`5f2bf4222`](https://github.com/npm/npm/commit/5f2bf4222004117eb38c44ace961bd15a779fd66) 2889 `read-package-tree@5.2.1` 2890 ([@zkat](https://github.com/zkat)) 2891 2892## v6.0.0-0 (2018-03-23): 2893 2894Sometimes major releases are a big splash, sometimes they're something 2895smaller. This is the latter kind. That said, we expect to keep this in 2896release candidate status until Node 10 ships at the end of April. There 2897will likely be a few more features for the 6.0.0 release line between now 2898and then. We do expect to have a bigger one later this year though, so keep 2899an eye out for `npm@7`! 2900 2901### *BREAKING* AVOID DEPRECATED 2902 2903When selecting versions to install, we now avoid deprecated versions if 2904possible. For example: 2905 2906``` 2907Module: example 2908Versions: 29091.0.0 29101.1.0 29111.1.2 29121.1.3 (deprecated) 29131.2.0 (latest) 2914``` 2915 2916If you ask `npm` to install `example@~1.1.0`, `npm` will now give you `1.1.2`. 2917 2918By contrast, if you installed `example@~1.1.3` then you'd get `1.1.3`, as 2919it's the only version that can match the range. 2920 2921* [`78bebc0ce`](https://github.com/npm/npm/commit/78bebc0cedc4ce75c974c47b61791e6ca1ccfd7e) 2922 [#20151](https://github.com/npm/npm/pull/20151) 2923 Skip deprecated versions when possible. 2924 ([@zkat](https://github.com/zkat)) 2925 2926### *BREAKING* UPDATE AND OUTDATED 2927 2928When `npm install` is finding a version to install, it first checks to see 2929if the specifier you requested matches the `latest` tag. If it doesn't, 2930then it looks for the highest version that does. This means you can do 2931release candidates on tags other than `latest` and users won't see them 2932unless they ask for them. Promoting them is as easy as setting the `latest` 2933tag to point at them. 2934 2935Historically `npm update` and `npm outdated` worked differently. They just 2936looked for the most recent thing that matched the semver range, disregarding 2937the `latest` tag. We're changing it to match `npm install`'s behavior. 2938 2939* [`3aaa6ef42`](https://github.com/npm/npm/commit/3aaa6ef427b7a34ebc49cd656e188b5befc22bae) 2940 Make update and outdated respect latest interaction with semver as install does. 2941 ([@iarna](https://github.com/iarna)) 2942* [`e5fbbd2c9`](https://github.com/npm/npm/commit/e5fbbd2c999ab9c7ec15b30d8b4eb596d614c715) 2943 `npm-pick-manifest@2.1.0` 2944 ([@iarna](https://github.com/iarna)) 2945 2946### PLUS ONE SMALLER PATCH 2947 2948Technically this is a bug fix, but the change in behavior is enough of an 2949edge case that I held off on bringing it in until a major version. 2950 2951When we extract a binary and it starts with a shebang (or "hash bang"), that 2952is, something like: 2953 2954``` 2955#!/usr/bin/env node 2956``` 2957 2958If the file has Windows line endings we strip them off of the first line. 2959The reason for this is that shebangs are only used in Unix-like environments 2960and the files with them can't be run if the shebang has a Windows line ending. 2961 2962Previously we converted ALL line endings from Windows to Unix. With this 2963patch we only convert the line with the shebang. (Node.js works just fine 2964with either set of line endings.) 2965 2966* [`814658371`](https://github.com/npm/npm/commit/814658371bc7b820b23bc138e2b90499d5dda7b1) 2967 [`7265198eb`](https://github.com/npm/npm/commit/7265198ebb32d35937f4ff484b0167870725b054) 2968 `bin-links@1.1.2`: 2969 Only rewrite the CR after a shebang (if any) when fixing up CR/LFs. 2970 ([@iarna](https://github.com/iarna)) 2971 2972### *BREAKING* SUPPORTED NODE VERSIONS 2973 2974Per our supported Node.js policy, we're dropping support for both Node 4 and 2975Node 7, which are no longer supported by the Node.js project. 2976 2977* [`077cbe917`](https://github.com/npm/npm/commit/077cbe917930ed9a0c066e10934d540e1edb6245) 2978 Drop support for Node 4 and Node 7. 2979 ([@iarna](https://github.com/iarna)) 2980 2981### DEPENDENCIES 2982 2983* [`478fbe2d0`](https://github.com/npm/npm/commit/478fbe2d0bce1534b1867e0b80310863cfacc01a) 2984 `iferr@1.0.0` 2985* [`b18d88178`](https://github.com/npm/npm/commit/b18d88178a4cf333afd896245a7850f2f5fb740b) 2986 `query-string@6.0.0` 2987* [`e02fa7497`](https://github.com/npm/npm/commit/e02fa7497f89623dc155debd0143aa54994ace74) 2988 `is-cidr@2.0.5` 2989* [`c8f8564be`](https://github.com/npm/npm/commit/c8f8564be6f644e202fccd9e3de01d64f346d870) 2990 [`311e55512`](https://github.com/npm/npm/commit/311e5551243d67bf9f0d168322378061339ecff8) 2991 `standard@11.0.1` 2992