1## 6.14.17 (2022-04-28) 2 3### DEPENDENCIES 4 5* [`a869ec48b`](https://github.com/npm/cli/commit/a869ec48b9481c10302378e6c2d94fe36e4c81c2) 6 `ansi-regex@4.1.1` 7* [`a869ec48b`](https://github.com/npm/cli/commit/a869ec48b9481c10302378e6c2d94fe36e4c81c2) 8 `minimist@1.2.6` 9 10## 6.14.16 (2022-01-19) 11 12### CHORE 13 14* [`0afe4f12f`](https://github.com/npm/cli/commit/0afe4f12f6b69f8fa6d39451b6e684fbef5fe1e2) 15 update one-time password prompt 16 ([@ruyadorno](https://github.com/ruyadorno)) 17 18### DEPENDENCIES 19 20* [`2c534f801`](https://github.com/npm/cli/commit/2c534f801b87d6b8d6c534d326ca39654e313fe9) 21 `json-schema@0.4.0` 22 23 24## 6.14.15 (2021-08-23) 25 26### DEPENDENCIES 27 28* [`8160e6e4b`](https://github.com/npm/cli/commit/8160e6e4b58c0f76e720183f2057e26c6d9d8470) 29 `path-parse@1.0.7` 30* [`3079f5038`](https://github.com/npm/cli/commit/3079f503896323ab10bfad5bbdb7fe5ca9207d4b) 31 `tar@4.4.1` 32 33## 6.14.14 (2021-07-27) 34 35### DEPENDENCIES 36 37* [`4627c0670`](https://github.com/npm/cli/commit/4627c0670957ee5c5e8506750f4626493aabdc25) 38 `tar@4.4.15` 39 40## 6.14.13 (2021-04-08) 41 42### DEPENDENCIES 43 44* [`285ab3f65`](https://github.com/npm/cli/commit/285ab3f654882860246f729eb52e2c8c6a6d6e01) 45 `hosted-git-info@2.8.9` 46* [`63b5c56c5`](https://github.com/npm/cli/commit/63b5c56c5203c8965c8ddeff28f2a65010b40b7c) 47 `ssri@6.0.2` 48 49## 6.14.12 (2021-03-25) 50 51### DEPENDENCIES 52 53* [`e47654048`](https://github.com/npm/cli/commit/e4765404844a0b6795752b2bc6f9b9107fe713be) 54 [#2737](https://github.com/npm/cli/pull/2737) 55 Update y18n to fix CVE-2020-7774 56 ([@vecerek](https://github.com/vecerek)) 57 58## 6.14.11 (2021-01-07) 59### DEPENDENCIES 60 61* [`19108ca5b`](https://github.com/npm/cli/commit/19108ca5be1b3e7e9787dac3131aafe2722c6218) 62 `ini@1.3.8`: 63 * addressing [`CVE-2020-7788`](https://github.com/advisories/GHSA-qqgx-2p2h-9c37) 64* [`7a0574074`](https://github.com/npm/cli/commit/7a05740743ac9d9229e2dc9e1b9ca8b57d58c789) 65 `bl@3.0.1` 66 * addressing [`CVE-2020-8244`](https://github.com/advisories/GHSA-pp7h-53gx-mx7r) 67 68## 6.14.10 (2020-12-18) 69 70### DEPENDENCIES 71 72* [`906d647e1`](https://github.com/npm/cli/commit/906d647e1cacd74243abcacba3bade80437f30f5) 73`opener@1.5.2` 74 * fixes: [`#36445`](https://github.com/nodejs/node/issues/36445) addressing 75[`GHSL-2020-145`](https://securitylab.github.com/advisories/GHSL-2020-145-domenic-opener) 76 77## 6.14.9 (2020-11-20) 78 79### BUG FIXES 80* [`4a91e48aa`](https://github.com/npm/cli/commit/4a91e48aa92be5b2739ebcdd8a9a841ff5cb6817) 81 fix: docs generation breaking builds 82 83### DEPENDDENCIES 84* [`ab80a7cf0`](https://github.com/npm/cli/commit/ab80a7cf092d52f4b055cc6d03c38b6115c4b582) 85 `npm-user-validate@1.0.1` 86 * dep update to resolve security issue [GHSA-xgh6-85xh-479p](https://github.com/advisories/GHSA-xgh6-85xh-479p) 87* [`6b2ab9d53`](https://github.com/npm/cli/commit/6b2ab9d532ef8ffce326f4caa23eb27f83765acd) 88 `har-validator@5.1.5` 89 * dep update to resolve security issue [SNYK-JS-AJV-584908](https://snyk.io/vuln/SNYK-JS-AJV-584908) 90 91## 6.14.8 (2020-08-17) 92 93### BUG FIXES 94* [`9262e8c88`](https://github.com/npm/cli/commit/9262e8c88f2f828206423928b8e21eea67f4801a) 95 [#1575](https://github.com/npm/cli/pull/1575) 96 npm install --dev deprecation message 97 ([@sandratatarevicova](https://github.com/sandratatarevicova)) 98* [`765cfe0bc`](https://github.com/npm/cli/commit/765cfe0bc05a10b72026291ff0ca7c9ca5cb3f57) 99 [#1658](https://github.com/npm/cli/issues/1658) 100 remove unused broken require 101 ([@aduh95](https://github.com/aduh95)) 102* [`4e28de79a`](https://github.com/npm/cli/commit/4e28de79a3a0aacc7603010a592beb448ceb6f5f) 103 [#1663](https://github.com/npm/cli/pull/1663) 104 Do not send user secret in the referer header 105 ([@assapir](https://github.com/assapir)) 106 107### DOCUMENTATION 108* [`8abdf30c9`](https://github.com/npm/cli/commit/8abdf30c95ec90331456f3f2ed78e2703939bb74) 109 [#1572](https://github.com/npm/cli/pull/1572) 110 docs: add missing metadata in semver page 111 ([@tripu](https://github.com/tripu)) 112* [`8cedcca46`](https://github.com/npm/cli/commit/8cedcca464ced5aab58be83dd5049c3df13384de) 113 [#1614](https://github.com/npm/cli/pull/1614) 114 Node-gyp supports both Python and legacy Python 115 ([@cclauss](https://github.com/cclauss)) 116 117### DEPENDENCIES 118* [`a303b75fd`](https://github.com/npm/cli/commit/a303b75fd7c4b2644da02ad2ad46d80dfceec3c5) 119 `update-notifier@2.5.0` 120* [`c48600832`](https://github.com/npm/cli/commit/c48600832aff4cc349f59997e08dc4bbde15bd49) 121 `npm-registry-fetch@4.0.7` 122* [`a6e9fc4df`](https://github.com/npm/cli/commit/a6e9fc4df7092ba3eb5394193638b33c24855c36) 123 `meant@1.0.2`: 124 125## 6.14.7 (2020-07-21) 126 127### BUG FIXES 128* [`de5108836`](https://github.com/npm/cli/commit/de5108836189bddf28d4d3542f9bd5869cc5c2e9) [#784](https://github.com/npm/cli/pull/784) npm explore spawn shell correctly ([@jasisk](https://github.com/jasisk)) 129* [`36e6c01d3`](https://github.com/npm/cli/commit/36e6c01d334c4db75018bc6a4a0bef726fd41ce4) git tag handling regression on shrinkwrap ([@claudiahdz](https://github.com/claudiahdz)) 130* [`1961c9369`](https://github.com/npm/cli/commit/1961c9369c92bf8fe530cecba9834ca3c7f5567c) [#288](https://github.com/npm/cli/pull/288) Fix package id in shrinkwrap lifecycle step output ([@bz2](https://github.com/bz2)) 131* [`87888892a`](https://github.com/npm/cli/commit/87888892a1282cc3edae968c3ae4ec279189271c) [#1009](https://github.com/npm/cli/pull/1009) gracefully handle error during npm install ([@danielleadams](https://github.com/danielleadams)) 132* [`6fe2bdc25`](https://github.com/npm/cli/commit/6fe2bdc25e7961956e5c0067fa4db54ff1bd0dbd) [#1547](https://github.com/npm/cli/pull/1547) npm ls --parseable --long output ([@ruyadorno](https://github.com/ruyadorno)) 133 134### DEPENDENCIES 135* [`2d78481c7`](https://github.com/npm/cli/commit/2d78481c7ec178e628ce23df940f73a05d5c6367) update mkdirp on tacks ([@claudiahdz](https://github.com/claudiahdz)) 136* [`4e129d105`](https://github.com/npm/cli/commit/4e129d105eba3b12d474caa6e5ca216a98deb75a) uninstall npm-registry-couchapp ([@claudiahdz](https://github.com/claudiahdz)) 137* [`8e1869e27`](https://github.com/npm/cli/commit/8e1869e278d1dd37ddefd6b4e961d1bb17fc9d09) update marked dev dep ([@claudiahdz](https://github.com/claudiahdz)) 138* [`6a6151f37`](https://github.com/npm/cli/commit/6a6151f377063c6aca852c859c01910edd235ec6) `libnpx@10.2.4` ([@claudiahdz](https://github.com/claudiahdz)) 139* [`dc21422eb`](https://github.com/npm/cli/commit/dc21422eb1ca1a4a19f160fad0e924566e08c496) `bin-links@1.1.8` ([@claudiahdz](https://github.com/claudiahdz)) 140* [`d341f88ce`](https://github.com/npm/cli/commit/d341f88ce6feb3df1dcb37f34910fcc6c1db85f2) `gentle-fs@2.3.1` ([@claudiahdz](https://github.com/claudiahdz)) 141* [`3e168d49b`](https://github.com/npm/cli/commit/3e168d49b41574809cae2ad013776a00d3f20ff4) `libcipm@4.0.8` ([@claudiahdz](https://github.com/claudiahdz)) 142* [`6ae942a51`](https://github.com/npm/cli/commit/6ae942a510520b7dff11b5b78eebeff1706e38af) `npm-audit-report@1.3.3` ([@claudiahdz](https://github.com/claudiahdz)) 143* [`6a35e3dee`](https://github.com/npm/cli/commit/6a35e3deec275bf2ae76603acd424a0640458047) `npm-lifecycle@3.1.5` ([@claudiahdz](https://github.com/claudiahdz)) 144 145## 6.14.6 (2020-07-07) 146 147### BUG FIXES 148* [`a9857b8f6`](https://github.com/npm/cli/commit/a9857b8f6869451ff058789c4631fadfde5bbcbc) chore: remove auth info from logs ([@claudiahdz](https://github.com/claudiahdz)) 149* [`b7ad77598`](https://github.com/npm/cli/commit/b7ad77598112908d60195d0fbc472b3c84275fd5) [#1416](https://github.com/npm/cli/pull/1416) fix: wrong `npm doctor` command result ([@vanishcode](https://github.com/vanishcode)) 150 151### DEPENDENCIES 152* [`94eca6377`](https://github.com/npm/cli/commit/94eca637756376b949edfb697e179a1fdcc231ee) `npm-registry-fetch@4.0.5` ([@claudiahdz](https://github.com/claudiahdz)) 153* [`c49b6ae28`](https://github.com/npm/cli/commit/c49b6ae28791ff7184288be16654f97168aa9705) [#1418](https://github.com/npm/cli/pull/1418) `spdx-license-ids@3.0.5` ([@kemitchell](https://github.com/kemitchell)) 154 155### DOCUMENTATION 156* [`2e052984b`](https://github.com/npm/cli/commit/2e052984b08c09115ed75387fb2c961631d85d77) 157 [#1459](https://github.com/npm/cli/pull/1459) 158 chore(docs): fixed links to cli commands ([@claudiahdz](https://github.com/claudiahdz)) 159* [`0ca3509ca`](https://github.com/npm/cli/commit/0ca3509ca940865392daeeabb39192f7d5af9f5e) 160 [#1283](https://github.com/npm/cli/pull/1283) Update npm-link.md ([@peterfich](https://github.com/peterfich)) 161* [`3dd429e9a`](https://github.com/npm/cli/commit/3dd429e9aad760ce2ff9e522b34ebfebd85b460c) 162 [#1377](https://github.com/npm/cli/pull/1377) 163 Add note about dropped `*` filenames ([@maxwellgerber](https://github.com/maxwellgerber)) 164* [`9a2e2e797`](https://github.com/npm/cli/commit/9a2e2e797e5c91e7f4f261583a1906e2c440cc2f) 165 [#1429](https://github.com/npm/cli/pull/1429) Fix typo ([@seanpoulter](https://github.com/seanpoulter)) 166 167## 6.14.5 (2020-05-01) 168 169### BUG FIXES 170 171* [`33ec41f18`](https://github.com/npm/cli/commit/33ec41f18f557146607cb14a7a38c707fce6d42c) [#758](https://github.com/npm/cli/pull/758) fix: relativize file links when inflating shrinkwrap ([@jsnajdr](https://github.com/jsnajdr)) 172* [`94ed456df`](https://github.com/npm/cli/commit/94ed456dfb0b122fd4192429024f034d06c3c454) [#1162](https://github.com/npm/cli/pull/1162) fix: npm init help output ([@mum-never-proud](https://github.com/mum-never-proud)) 173 174### DEPENDENCIES 175 176* [`5587ac01f`](https://github.com/npm/cli/commit/5587ac01ffd0d2ea830a6bbb67bb34a611ffc409) `npm-registry-fetch@4.0.4` 177 * [`fc5d94c39`](https://github.com/npm/npm-registry-fetch/commit/fc5d94c39ca218d78df77249ab3a6bf1d9ed9db1) fix: removed default timeout 178* [`07a4d8884`](https://github.com/npm/cli/commit/07a4d8884448359bac485a49c05fd2d23d06834b) `graceful-fs@4.2.4` 179* [`8228d1f2e`](https://github.com/npm/cli/commit/8228d1f2e427ad9adee617266108acd1ee39b4a5) `mkdirp@0.5.5` 180* [`e6d208317`](https://github.com/npm/cli/commit/e6d20831740a84aea766da2a2913cf82a4d56ada) `nopt@4.0.3` 181 182## 6.14.4 (2020-03-24) 183 184### DEPENDENCIES 185 186* Bump `minimist@1.2.5` transitive dep to resolve security issue 187 * [`9c554fd8c`](https://github.com/npm/cli/commit/9c554fd8cd1e9aeb8eb122ccfa3c78d12af4097a) `update-notifier@2.5.0` 188 * bump `deep-extend@1.2.5` 189 * bump `deep-extend@0.6.0` 190 * bump `is-ci@1.2.1` 191 * bump `is-retry-allowed@1.2.0` 192 * bump `rc@1.2.8` 193 * bump `registry-auth-token@3.4.0` 194 * bump `widest-line@2.0.1` 195* [`136832dca`](https://github.com/npm/cli/commit/136832dcae13cb5518b1fe17bd63ea9b2a195f92) `mkdirp@0.5.4` 196* [`8bf99b2b5`](https://github.com/npm/cli/commit/8bf99b2b58c14d45dc6739fce77de051ebc8ffb7) [#1053](https://github.com/npm/cli/pull/1053) deps: updates term-size to use signed binary 197 * [`d2f08a1bdb`](https://github.com/nodejs/node/commit/d2f08a1bdb78655c4a3fc49825986c148d14117e) ([@rvagg](https://github.com/rvagg)) 198 199## 6.14.3 (2020-03-19) 200 201### DOCUMENTATION 202 203* [`4ad221487`](https://github.com/npm/cli/commit4ad2214873cddfd4a0eff1bd188516b08fae9f9e) [#1020](https://github.com/npm/cli/pull/1020) docs(teams): updated team docs to reflect MFA workflow ([@blkdm0n](https://github.com/blkdm0n)) 204* [`4a31a4ba2`](https://github.com/npm/cli/commit/4a31a4ba2db0a5db2d1d0890ee934ba1babb73a6) [#1034](https://github.com/npm/cli/pull/1034) docs: cleanup ([@ruyadorno](https://github.com/ruyadorno)) 205* [`0eac801cd`](https://github.com/npm/cli/commit/0eac801cdef344e9fbda6270145e062211255b0e) [#1013](https://github.com/npm/cli/pull/1013) docs: fix links to cli commands ([@alenros](https://github.com/alenros)) 206* [`7d8e5b99c`](https://github.com/npm/cli/commit/7d8e5b99c4ef8c394cffa7fc845f54a25ff37e3a) [#755](https://github.com/npm/cli/pull/755) docs: correction to `npm update -g` behaviour ([@johnkennedy9147](https://github.com/johnkennedy9147)) 207 208### DEPENDENCIES 209 210* [`e11167646`](https://github.com/npm/cli/commit/e111676467f090f73802b97e8da7ece481b18f99) `mkdirp@0.5.3` 211 * [`c5b97d17d`](https://github.com/isaacs/node-mkdirp/commit/c5b97d17d45a22bcf4c815645cbb989dab57ddd8) fix: bump `minimist` dep to resolve security issue ([@isaacs](https://github.com/isaacs)) 212* [`c50d679c6`](https://github.com/npm/cli/commit/c50d679c68b39dd03ad127d34f540ddcb1b1e804) `rimraf@2.7.1` 213* [`a2de99ff9`](https://github.com/npm/cli/commit/a2de99ff9e02425a3ccc25280f390178be755a36) `npm-registry-mock@1.3.1` 214* [`217debeb9`](https://github.com/npm/cli/commit/217debeb9812e037a6686cbf6ec67a0cd47fa68a) `npm-registry-couchapp@2.7.4` 215 216## 6.14.2 (2020-03-03) 217 218### DOCUMENTATION 219* [`f9248c0be`](https://github.com/npm/cli/commit/f9248c0be63fba37a30098dc9215c752474380e3) [#730](https://github.com/npm/cli/pull/730) chore(docs): update unpublish docs & policy reference ([@nomadtechie](https://github.com/nomadtechie), [@mikemimik](https://github.com/mikemimik)) 220 221### DEPENDENCIES 222 223* [`909cc3918`](https://github.com/npm/cli/commit/909cc39180a352f206898481add5772206c8b65f) `hosted-git-info@2.8.8` ([@darcyclarke](https://github.com/darcyclarke)) 224 * [`5038b1891`](https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb) fix: regression in old node versions w/ respect to url.URL implmentation 225* [`9204ffa58`](https://github.com/npm/cli/commit/9204ffa584c140c5e22b1ee37f6df2c98f5dc70b) `npm-profile@4.0.4` ([@isaacs](https://github.com/isaacs)) 226 * [`6bcf0860a`](https://github.com/npm/npm-profile/commit/6bcf0860a3841865099d0115dbcbde8b78109bd9) fix: treat non-http/https login urls as invalid 227* [`0365d39bd`](https://github.com/npm/cli/commit/0365d39bdc74960a18caac674f51d0e2a98b31e6) `glob@7.1.6` ([@isaacs](https://github.com/isaacs)) 228* [`dab030536`](https://github.com/nodejs/node-gyp/commit/dab030536b6a70ecae37debc74c581db9e5280fd) `node-gyp@5.1.0` ([@rvagg](https://github.com/rvagg)) 229 230## 6.14.1 (2020-02-26) 231 232* [`303e5c11e`](https://github.com/npm/cli/commit/303e5c11e7db34cf014107aecd2e81c821bfde8d) 233 `hosted-git-info@2.8.7` 234 Fixes a regression where scp-style git urls are passed to the WhatWG URL 235 parser, which does not handle them properly. 236 ([@isaacs](https://github.com/isaacs)) 237 238## 6.14.0 (2020-02-25) 239 240### FEATURES 241* [`30f170877`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#731](https://github.com/npm/cli/pull/731) add support for multiple funding sources ([@ljharb](https://github.com/ljharb) & [@ruyadorno](hhttps://github.com/ruyadorno/)) 242 243### BUG FIXES 244* [`55916b130`](https://github.com/npm/cli/commit/55916b130ef52984584678f2cc17c15c1f031cb5) [#508](https://github.com/npm/cli/pull/508) fix: check `npm.config` before accessing its members ([@kaiyoma](https://github.com/kaiyoma)) 245* [`7d0cd65b2`](https://github.com/npm/cli/commit/7d0cd65b23c0986b631b9b54d87bbe74902cc023) [#733](https://github.com/npm/cli/pull/733) fix: access grant with unscoped packages ([@netanelgilad](https://github.com/netanelgilad)) 246* [`28c3d40d6`](https://github.com/npm/cli/commit/28c3d40d65eef63f9d6ccb60b99ac57f5057a46e), [`0769c5b20`](https://github.com/npm/cli/commit/30f170877954acd036cb234a581e4eb155049b82) [#945](https://github.com/npm/cli/pull/945), [#697](https://github.com/npm/cli/pull/697) fix: allow new major versions of node to be automatically considered "supported" ([@isaacs](https://github.com/isaacs), [@ljharb](https://github.com/ljharb)) 247 248### DEPENDENCIES 249* [`6f39e93`](https://github.com/npm/hosted-git-info/commit/6f39e93bae9162663af6f15a9d10bce675dd5de3) `hosted-git-info@2.8.6` ([@darcyclarke](https://github.com/darcyclarke)) 250 * fix: passwords & usernames are escaped properly in git deps ([@stevenhilder](https://github.com/stevenhilder)) 251* [`f14b594ee`](https://github.com/npm/cli/commit/f14b594ee9dbfc98ed0b65c65d904782db4f31ad) `chownr@1.1.4` ([@isaacs](https://github.com/isaacs)) 252* [`77044150b`](https://github.com/npm/cli/commit/77044150b763d67d997f9ff108219132ea922678) `npm-packlist@1.4.8` ([@isaacs](https://github.com/isaacs)) 253* [`1d112461a`](https://github.com/npm/cli/commit/1d112461ad8dc99e5ff7fabb5177e8c2f89a9755) `npm-registry-fetch@4.0.3` ([@isaacs](https://github.com/isaacs)) 254 * [`ba8b4fe`](https://github.com/npm/npm-registry-fetch/commit/ba8b4fe60eb6cdf9b39012560aec596eda8ce924) fix: always bypass cache when ?write=true 255* [`a47fed760`](https://github.com/npm/cli/commit/a47fed7603a6ed31dcc314c0c573805f05a96830) `readable-stream@3.6.0` 256 * [`3bbf2d6`](https://github.com/nodejs/readable-stream/commit/3bbf2d6feb45b03f4e46a2ae8251601ad2262121) fix: babel's "loose mode" class transform enbrittles BufferList ([@ljharb](https://github.com/ljharb)) 257 258### DOCUMENTATION 259* [`284c1c055`](https://github.com/npm/cli/commit/284c1c055a28c4b334496101799acefe3c54ceb3), [`fbb5f0e50`](https://github.com/npm/cli/commit/fbb5f0e50e54425119fa3f03c5de93e4cb6bfda7) [#729](https://github.com/npm/cli/pull/729) update lifecycle hooks docs 260 ([@seanhealy](https://github.com/seanhealy), [@mikemimik](https://github.com/mikemimik)) 261* [`1c272832d`](https://github.com/npm/cli/commit/1c272832d048300e409882313305c416dc6f21a2) [#787](https://github.com/npm/cli/pull/787) fix: trademarks typo ([@dnicolson](https://github.com/dnicolson)) 262* [`f6ff41776`](https://github.com/npm/cli/commit/f6ff417767d52418cc8c9e7b9731ede2c3916d2e) [#936](https://github.com/npm/cli/pull/936) fix: postinstall example ([@ajaymathur](https://github.com/ajaymathur)) 263* [`373224b16`](https://github.com/npm/cli/commit/373224b16e019b7b63d8f0b4c5d4adb7e5cb80dd) [#939](https://github.com/npm/cli/pull/939) fix: bad links in publish docs ([@vit100](https://github.com/vit100)) 264 265### MISCELLANEOUS 266* [`85c79636d`](https://github.com/npm/cli/commit/85c79636df31bac586c0e380c4852ee155a7723c) [#736](https://github.com/npm/cli/pull/736) add script to update dist-tags ([@mikemimik](https://github.com/mikemimik)) 267 268## 6.13.7 (2020-01-28) 269 270### BUG FIXES 271* [`7dbb91438`](https://github.com/npm/cli/commit/7dbb914382ecd2074fffb7eba81d93262e2d23c6) 272 [#655](https://github.com/npm/cli/pull/655) 273 Update CI detection cases 274 ([@isaacs](https://github.com/isaacs)) 275 276### DEPENDENCIES 277* [`0fb1296c7`](https://github.com/npm/cli/commit/0fb1296c7d6d4bb9e78c96978c433cd65e55c0ea) 278 `libnpx@10.2.2` 279 ([@mikemimik](https://github.com/mikemimik)) 280* [`c9b69d569`](https://github.com/npm/cli/commit/c9b69d569fec7944375a746e9c08a6fa9bec96ff) 281 `node-gyp@5.0.7` 282 ([@mikemimik](https://github.com/mikemimik)) 283* [`e8dbaf452`](https://github.com/npm/cli/commit/e8dbaf452a1f6c5350bb0c37059b89a7448e7986) 284 `bin-links@1.1.7` 285 ([@mikemimik](https://github.com/mikemimik)) 286 * [#613](https://github.com/npm/cli/issues/613) Fixes bin entry for package 287 288## 6.13.6 (2020-01-09) 289 290### DEPENDENCIES 291 292* [`6dba897a1`](https://github.com/npm/cli/commit/6dba897a1e2d56388fb6df0c814b0bb85af366b4) 293 `pacote@9.5.12`: 294 * [`d2f4176`](https://github.com/npm/pacote/commit/d2f4176b6af393d7e29de27e9b638dbcbab9a0c7) 295 fix(git): Do not drop uid/gid when executing in root-owned directory 296 ([@isaacs](https://github.com/isaacs)) 297 298## 6.13.5 (2020-01-09) 299 300### BUG FIXES 301 302* [`fd0a802ec`](https://github.com/npm/cli/commit/fd0a802ec468ec7b98d6c15934c355fef0e7ff60) [#550](https://github.com/npm/cli/pull/550) Fix cache location for `npm ci` ([@zhenyavinogradov](https://github.com/zhenyavinogradov)) 303* [`4b30f3cca`](https://github.com/npm/cli/commit/4b30f3ccaebf50d6ab3bad130ff94827c017cc16) [#648](https://github.com/npm/cli/pull/648) fix(version): using 'allow-same-version', git commit --allow-empty and git tag -f ([@rhengles](https://github.com/rhengles)) 304 305### TESTING 306 307* [`e16f68d30`](https://github.com/npm/cli/commit/e16f68d30d59ce1ddde9fe62f7681b2c07fce84d) test(ci): add failing cache config test ([@ruyadorno](https://github.com/ruyadorno)) 308* [`3f009fbf2`](https://github.com/npm/cli/commit/3f009fbf2c42f68c5127efecc6e22db105a74fe0) [#659](https://github.com/npm/cli/pull/659) test: fix bin-overwriting test on Windows ([@isaacs](https://github.com/isaacs)) 309* [`43ae0791f`](https://github.com/npm/cli/commit/43ae0791f74f68e02850201a64a6af693657b241) [#601](https://github.com/npm/cli/pull/601) ci: Allow builds to run even if one fails ([@XhmikosR](https://github.com/XhmikosR)) 310* [`4a669bee4`](https://github.com/npm/cli/commit/4a669bee4ac54c70adc6979d45cd0605b6dc33fd) [#603](https://github.com/npm/cli/pull/603) Remove the unused appveyor.yml ([@XhmikosR](https://github.com/XhmikosR)) 311* [`9295046ac`](https://github.com/npm/cli/commit/9295046ac92bbe82f4d84e1ec90cc81d3b80bfc7) [#600](https://github.com/npm/cli/pull/600) ci: switch to `actions/checkout@v2` ([@XhmikosR](https://github.com/XhmikosR)) 312 313### DOCUMENTATION 314 315* [`f2d770ac7`](https://github.com/npm/cli/commit/f2d770ac768ea84867772b90a3c9acbdd0c1cb6a) [#569](https://github.com/npm/cli/pull/569) fix netlify publish path config ([@claudiahdz](https://github.com/claudiahdz)) 316* [`462cf0983`](https://github.com/npm/cli/commit/462cf0983dbc18a3d93f77212ca69f878060b2ec) [#627](https://github.com/npm/cli/pull/627) update gatsby dependencies ([@felixonmars](https://github.com/felixonmars)) 317* [`6fb5dbb72`](https://github.com/npm/cli/commit/6fb5dbb7213c4c050c9a47a7d5131447b8b7dcc8) 318 [#532](https://github.com/npm/cli/pull/532) docs: clarify usage of global prefix ([@jgehrcke](https://github.com/jgehrcke)) 319 320## 6.13.4 (2019-12-11) 321 322## BUGFIXES 323 324* [`320ac9aee`](https://github.com/npm/cli/commit/320ac9aeeafd11bb693c53b31148b8d10c4165e8) 325 [npm/bin-links#12](https://github.com/npm/bin-links/pull/12) 326 [npm/gentle-fs#7](https://github.com/npm/gentle-fs/pull/7) 327 Do not remove global bin/man links inappropriately 328 ([@isaacs](https://github.com/isaacs)) 329 330## DEPENDENCIES 331 332* [`52fd21061`](https://github.com/npm/cli/commit/52fd21061ff8b1a73429294620ffe5ebaaa60d3e) 333 `gentle-fs@2.3.0` 334 ([@isaacs](https://github.com/isaacs)) 335* [`d06f5c0b0`](https://github.com/npm/cli/commit/d06f5c0b0611c43b6e70ded92af24fa5d83a0f48) 336 `bin-links@1.1.6` 337 ([@isaacs](https://github.com/isaacs)) 338 339## 6.13.3 (2019-12-09) 340 341### DEPENDENCIES 342 343* [`19ce061a2`](https://github.com/npm/cli/commit/19ce061a2ee165d8de862c8f0f733c222846b9e1) 344 `bin-links@1.1.5` Properly normalize, sanitize, and verify `bin` entries 345 in `package.json`. 346* [`59c836aae`](https://github.com/npm/cli/commit/59c836aae8d0104a767e80c540b963c91774012a) 347 `npm-packlist@1.4.7` 348* [`fb4ecd7d2`](https://github.com/npm/cli/commit/fb4ecd7d2810b0b4897daaf081a5e2f3f483b310) 349 `pacote@9.5.11` 350 * [`5f33040`](https://github.com/npm/pacote/commit/5f3304028b6985fd380fc77c4840ff12a4898301) 351 [#476](https://github.com/npm/cli/issues/476) 352 [npm/pacote#22](https://github.com/npm/pacote/issues/22) 353 [npm/pacote#14](https://github.com/npm/pacote/issues/14) fix: Do not 354 drop perms in git when not root ([isaacs](https://github.com/isaacs), 355 [@darcyclarke](https://github.com/darcyclarke)) 356 * [`6f229f7`](https://github.com/npm/pacote/6f229f78d9911b4734f0a19c6afdc5454034c759) 357 sanitize and normalize package bin field 358 ([isaacs](https://github.com/isaacs)) 359* [`1743cb339`](https://github.com/npm/cli/commit/1743cb339767e86431dcd565c7bdb0aed67b293d) 360 `read-package-json@2.1.1` 361 362 363## 6.13.2 (2019-12-03) 364 365### BUG FIXES 366 367* [`4429645b3`](https://github.com/npm/cli/commit/4429645b3538e1cda54d8d1b7ecb3da7a88fdd3c) 368 [#546](https://github.com/npm/cli/pull/546) 369 fix docs target typo 370 ([@richardlau](https://github.com/richardlau)) 371* [`867642942`](https://github.com/npm/cli/commit/867642942bec69bb9ab71cff1914fb6a9fe67de8) 372 [#142](https://github.com/npm/cli/pull/142) 373 fix(packageRelativePath): fix 'where' for file deps 374 ([@larsgw](https://github.com/larsgw)) 375* [`d480f2c17`](https://github.com/npm/cli/commit/d480f2c176e6976b3cca3565e4c108b599b0379b) 376 [#527](https://github.com/npm/cli/pull/527) 377 Revert "windows: Add preliminary WSL support for npm and npx" 378 ([@craigloewen-msft](https://github.com/craigloewen-msft)) 379* [`e4b97962e`](https://github.com/npm/cli/commit/e4b97962e5fce0d49beb541ce5a0f96aee0525de) 380 [#504](https://github.com/npm/cli/pull/504) 381 remove unnecessary package.json read when reading shrinkwrap 382 ([@Lighting-Jack](https://github.com/Lighting-Jack)) 383* [`1c65d26ac`](https://github.com/npm/cli/commit/1c65d26ac9f10ac0037094c207d216fbf0e969bf) 384 [#501](https://github.com/npm/cli/pull/501) 385 fix(fund): open url for string shorthand 386 ([@ruyadorno](https://github.com/ruyadorno)) 387* [`ae7afe565`](https://github.com/npm/cli/commit/ae7afe56504dbffabf9f73d55b6dac1e3e9fed4a) 388 [#263](https://github.com/npm/cli/pull/263) 389 Don't log error message if git tagging is disabled 390 ([@woppa684](https://github.com/woppa684)) 391* [`4c1b16f6a`](https://github.com/npm/cli/commit/4c1b16f6aecaf78956b9335734cfde2ac076ee11) 392 [#182](https://github.com/npm/cli/pull/182) 393 Warn the user that it is uninstalling npm-install 394 ([@Hoidberg](https://github.com/Hoidberg)) 395 396## 6.13.1 (2019-11-18) 397 398### BUG FIXES 399 400* [`938d6124d`](https://github.com/npm/cli/commit/938d6124d6d15d96b5a69d0ae32ef59fceb8ceab) 401 [#472](https://github.com/npm/cli/pull/472) 402 fix(fund): support funding string shorthand 403 ([@ruyadorno](https://github.com/ruyadorno)) 404* [`b49c5535b`](https://github.com/npm/cli/commit/b49c5535b7c41729a8d167b035924c3c66b36de0) 405 [#471](https://github.com/npm/cli/pull/471) 406 should not publish tap-snapshot folder 407 ([@ruyadorno](https://github.com/ruyadorno)) 408* [`3471d5200`](https://github.com/npm/cli/commit/3471d5200217bfa612b1a262e36c9c043a52eb09) 409 [#253](https://github.com/npm/cli/pull/253) 410 Add preliminary WSL support for npm and npx 411 ([@infinnie](https://github.com/infinnie)) 412* [`3ef295f23`](https://github.com/npm/cli/commit/3ef295f23ee1b2300abf13ec19e935c47a455179) 413 [#486](https://github.com/npm/cli/pull/486) 414 print quick audit report for human output 415 ([@isaacs](https://github.com/isaacs)) 416 417### TESTING 418 419* [`dbbf977ac`](https://github.com/npm/cli/commit/dbbf977acd1e74bcdec859c562ea4a2bc0536442) 420 [#278](https://github.com/npm/cli/pull/278) 421 added workflow to trigger and run benchmarks 422 ([@mikemimik](https://github.com/mikemimik)) 423* [`b4f5e3825`](https://github.com/npm/cli/commit/b4f5e3825535256aaada09c5e8f104570a3d96a4) 424 [#457](https://github.com/npm/cli/pull/457) 425 feat(docs): adding tests and updating docs to reflect changes in registry teams API. 426 ([@nomadtechie](https://github.com/nomadtechie)) 427* [`454c7dd60`](https://github.com/npm/cli/commit/454c7dd60c78371bf606f11a17ed0299025bc37c) 428 [#456](https://github.com/npm/cli/pull/456) 429 fix git configs for git 2.23 and above 430 ([@isaacs](https://github.com/isaacs)) 431 432### DOCUMENTATION 433 434* [`b8c1576a4`](https://github.com/npm/cli/commit/b8c1576a448566397c721655b95fc90bf202b35a) [`30b013ae8`](https://github.com/npm/cli/commit/30b013ae8eacd04b1b8a41ce2ed0dd50c8ebae25) [`26c1b2ef6`](https://github.com/npm/cli/commit/26c1b2ef6be1595d28d935d35faa8ec72daae544) [`9f943a765`](https://github.com/npm/cli/commit/9f943a765faf6ebb8a442e862b808dbb630e018d) [`c0346b158`](https://github.com/npm/cli/commit/c0346b158fc25ab6ca9954d4dd78d9e62f573a41) [`8e09d5ad6`](https://github.com/npm/cli/commit/8e09d5ad67d4f142241193cecbce61c659389be3) [`4a2f551ee`](https://github.com/npm/cli/commit/4a2f551eeb3285f6f200534da33644789715a41a) [`87d67258c`](https://github.com/npm/cli/commit/87d67258c213d9ea9a49ce1804294a718f08ff13) [`5c3b32722`](https://github.com/npm/cli/commit/5c3b3272234764c8b4d2d798b69af077b5a529c7) [`b150eaeff`](https://github.com/npm/cli/commit/b150eaeff428180bfa03be53fd741d5625897758) [`7555a743c`](https://github.com/npm/cli/commit/7555a743ce4c3146d6245dd63f91503c7f439a6c) [`b89423e2f`](https://github.com/npm/cli/commit/b89423e2f6a09b290b15254e7ff7e8033b434d83) 435 [#463](https://github.com/npm/cli/pull/463) 436 [#285](https://github.com/npm/cli/pull/285) 437 [#268](https://github.com/npm/cli/pull/268) 438 [#232](https://github.com/npm/cli/pull/232) 439 [#485](https://github.com/npm/cli/pull/485) 440 [#453](https://github.com/npm/cli/pull/453) 441 docs cleanup: typos, styling and content 442 ([@claudiahdz](https://github.com/claudiahdz)) 443 ([@XhmikosR](https://github.com/XhmikosR)) 444 ([@mugli](https://github.com/mugli)) 445 ([@brettz9](https://github.com/brettz9)) 446 ([@mkotsollaris](https://github.com/mkotsollaris)) 447 448### DEPENDENCIES 449 450* [`661d86cd2`](https://github.com/npm/cli/commit/661d86cd229b14ddf687b7f25a66941a79d233e7) 451 `make-fetch-happen@5.0.2` 452 ([@claudiahdz](https://github.com/claudiahdz)) 453 454## 6.13.0 (2019-11-05) 455 456### NEW FEATURES 457 458* [`4414b06d9`](https://github.com/npm/cli/commit/4414b06d944c56bee05ccfb85260055a767ee334) 459 [#273](https://github.com/npm/cli/pull/273) 460 add fund command 461 ([@ruyadorno](https://github.com/ruyadorno)) 462 463### DOCUMENTATION 464 465* [`ae4c74d04`](https://github.com/npm/cli/commit/ae4c74d04f820a0255a92bdfe77ecf97af134fae) 466 [#274](https://github.com/npm/cli/pull/274) 467 migrate existing docs to gatsby 468 ([@claudiahdz](https://github.com/claudiahdz)) 469* [`4ff1bb180`](https://github.com/npm/cli/commit/4ff1bb180b1db8c72e51b3d57bd4e268b738e049) 470 [#277](https://github.com/npm/cli/pull/277) 471 updated documentation copy 472 ([@oletizi](https://github.com/oletizi)) 473 474### BUG FIXES 475 476* [`e4455409f`](https://github.com/npm/cli/commit/e4455409fe6fe9c198b250b488129171f0b4624a) 477 [#281](https://github.com/npm/cli/pull/281) 478 delete ps1 files on package removal 479 ([@NoDocCat](https://github.com/NoDocCat)) 480* [`cd14d4701`](https://github.com/npm/cli/commit/cd14d47014e8c96ffd6a18791e8752028b19d637) 481 [#279](https://github.com/npm/cli/pull/279) 482 update supported node list to remove v6.0, v6.1, v9.0 - v9.2 483 ([@ljharb](https://github.com/ljharb)) 484 485### DEPENDENCIES 486 487* [`a37296b20`](https://github.com/npm/cli/commit/a37296b20ca3e19c2bbfa78fedcfe695e03fda69) 488 `pacote@9.5.9` 489* [`d3cb3abe8`](https://github.com/npm/cli/commit/d3cb3abe8cee54bd2624acdcf8043932ef0d660a) 490 `read-cmd-shim@1.0.5` 491 492### TESTING 493 494* [`688cd97be`](https://github.com/npm/cli/commit/688cd97be94ca949719424ff69ff515a68c5caba) 495 [#272](https://github.com/npm/cli/pull/272) 496 use github actions for CI 497 ([@JasonEtco](https://github.com/JasonEtco)) 498* [`9a2d8af84`](https://github.com/npm/cli/commit/9a2d8af84f7328f13d8f578cf4b150b9d5f09517) 499 [#240](https://github.com/npm/cli/pull/240) 500 Clean up some flakiness and inconsistency 501 ([@isaacs](https://github.com/isaacs)) 502 503## 6.12.1 (2019-10-29) 504 505### BUG FIXES 506 507* [`6508e833d`](https://github.com/npm/cli/commit/6508e833df35a3caeb2b496f120ce67feff306b6) 508 [#269](https://github.com/npm/cli/pull/269) 509 add node v13 as a supported version 510 ([@ljharb](https://github.com/ljharb)) 511* [`b6588a8f7`](https://github.com/npm/cli/commit/b6588a8f74fb8b1ad103060b73c4fd5174b1d1f6) 512 [#265](https://github.com/npm/cli/pull/265) 513 Fix regression in lockfile repair for sub-deps 514 ([@feelepxyz](https://github.com/feelepxyz)) 515* [`d5dfe57a1`](https://github.com/npm/cli/commit/d5dfe57a1d810fe7fd64edefc976633ee3a4da53) 516 [#266](https://github.com/npm/cli/pull/266) 517 resolve circular dependency in pack.js 518 ([@addaleax](https://github.com/addaleax)) 519 520### DEPENDENCIES 521 522* [`73678bb59`](https://github.com/npm/cli/commit/73678bb590a8633c3bdbf72e08f1279f9e17fd28) 523 `chownr@1.1.3` 524* [`4b76926e2`](https://github.com/npm/cli/commit/4b76926e2058ef30ab1d5e2541bb96d847653417) 525 `graceful-fs@4.2.3` 526* [`c691f36a9`](https://github.com/npm/cli/commit/c691f36a9c108b6267859fe61e4a38228b190c17) 527 `libcipm@4.0.7` 528* [`5e1a14975`](https://github.com/npm/cli/commit/5e1a14975311bfdc43df8e1eb317ae5690ee580c) 529 `npm-packlist@1.4.6` 530* [`c194482d6`](https://github.com/npm/cli/commit/c194482d65ee81a5a0a6281c7a9f984462286c56) 531 `npm-registry-fetch@4.0.2` 532* [`bc6a8e0ec`](https://github.com/npm/cli/commit/bc6a8e0ec966281e49b1dc66f9c641ea661ab7a6) 533 `tar@4.4.1` 534* [`4dcca3cbb`](https://github.com/npm/cli/commit/4dcca3cbb161da1f261095d9cdd26e1fbb536a8d) 535 `uuid@3.3.3` 536 537## 6.12.0 (2019-10-08): 538 539Now `npm ci` runs prepare scripts for git dependencies, and respects the 540`--no-optional` argument. Warnings for `engine` mismatches are printed 541again. Various other fixes and cleanups. 542 543### BUG FIXES 544 545* [`890b245dc`](https://github.com/npm/cli/commit/890b245dc1f609590d8ab993fac7cf5a37ed46a5) 546 [#252](https://github.com/npm/cli/pull/252) ci: add dirPacker to options 547 ([@claudiahdz](https://github.com/claudiahdz)) 548* [`f3299acd0`](https://github.com/npm/cli/commit/f3299acd0b4249500e940776aca77cc6c0977263) 549 [#257](https://github.com/npm/cli/pull/257) 550 [npm.community#4792](https://npm.community/t/engines-and-engines-strict-ignored/4792) 551 warn message on engine mismatch 552 ([@ruyadorno](https://github.com/ruyadorno)) 553* [`bbc92fb8f`](https://github.com/npm/cli/commit/bbc92fb8f3478ff67071ebaff551f01c1ea42ced) 554 [#259](https://github.com/npm/cli/pull/259) 555 [npm.community#10288](https://npm.community/t/npm-token-err-figgypudding-options-cannot-be-modified-use-concat-instead/10288) 556 Fix figgyPudding error in `npm token` 557 ([@benblank](https://github.com/benblank)) 558* [`70f54dcb5`](https://github.com/npm/cli/commit/70f54dcb5693b301c6b357922b7e8d16b57d8b00) 559 [#241](https://github.com/npm/cli/pull/241) doctor: Make OK more 560 consistent ([@gemal](https://github.com/gemal)) 561 562### FEATURES 563 564* [`ed993a29c`](https://github.com/npm/cli/commit/ed993a29ccf923425317c433844d55dbea2f23ee) 565 [#249](https://github.com/npm/cli/pull/249) Add CI environment variables 566 to user-agent ([@isaacs](https://github.com/isaacs)) 567* [`f6b0459a4`](https://github.com/npm/cli/commit/f6b0459a466a2c663dbd549cdc331e7732552dca) 568 [#248](https://github.com/npm/cli/pull/248) Add option to save 569 package-lock without formatting Adds a new config 570 `--format-package-lock`, which defaults to true. 571 ([@bl00mber](https://github.com/bl00mber)) 572 573### DEPENDENCIES 574 575* [`0ca063c5d`](https://github.com/npm/cli/commit/0ca063c5dc961c4aa17373f4b33fb54c51c8c8d6) 576 `npm-lifecycle@3.1.4`: 577 - fix: filter functions and undefined out of makeEnv 578 ([@isaacs](https://github.com/isaacs)) 579* [`5df6b0ea2`](https://github.com/npm/cli/commit/5df6b0ea2e3106ba65bba649cc8d7f02f4738236) 580 `libcipm@4.0.4`: 581 - fix: pack git directories properly 582 ([@claudiahdz](https://github.com/claudiahdz)) 583 - respect no-optional argument 584 ([@cruzdanilo](https://github.com/cruzdanilo)) 585* [`7e04f728c`](https://github.com/npm/cli/commit/7e04f728cc4cd4853a8fc99e2df0a12988897589) 586 `tar@4.4.12` 587* [`5c380e5a3`](https://github.com/npm/cli/commit/5c380e5a33d760bb66a4285b032ae5f50af27199) 588 `stringify-package@1.0.1` ([@isaacs](https://github.com/isaacs)) 589* [`62f2ca692`](https://github.com/npm/cli/commit/62f2ca692ac0c0467ef4cf74f91777a5175258c4) 590 `node-gyp@5.0.5` ([@isaacs](https://github.com/isaacs)) 591* [`0ff0ea47a`](https://github.com/npm/cli/commit/0ff0ea47a8840dd7d952bde7f7983a5016cda8ea) 592 `npm-install-checks@3.0.2` ([@isaacs](https://github.com/isaacs)) 593* [`f46edae94`](https://github.com/npm/cli/commit/f46edae9450b707650a0efab09aa1e9295a18070) 594 `hosted-git-info@2.8.5` ([@isaacs](https://github.com/isaacs)) 595 596### TESTING 597 598* [`44a2b036b`](https://github.com/npm/cli/commit/44a2b036b34324ec85943908264b2e36de5a9435) 599 [#262](https://github.com/npm/cli/pull/262) fix root-ownership race 600 conditions in meta-test ([@isaacs](https://github.com/isaacs)) 601 602## 6.11.3 (2019-09-03): 603 604Fix npm ci regressions and npm outdated depth. 605 606### BUG FIXES 607 608* [`235ed1d28`](https://github.com/npm/cli/commit/235ed1d2838ef302bb995e183980209d16c51b9b) 609 [#239](https://github.com/npm/cli/pull/239) 610 Don't override user specified depth in outdated 611 Restores ability to update packages using `--depth` as suggested by `npm audit`. 612 ([@G-Rath](https://github.com/G-Rath)) 613* [`1fafb5151`](https://github.com/npm/cli/commit/1fafb51513466cd793866b576dfea9a8963a3335) 614 [#242](https://github.com/npm/cli/pull/242) 615 [npm.community#9586](https://npm.community/t/6-11-1-some-dependencies-are-no-longer-being-installed/9586/4) 616 Revert "install: do not descend into directory deps' child modules" 617 ([@isaacs](https://github.com/isaacs)) 618* [`cebf542e6`](https://github.com/npm/cli/commit/cebf542e61dcabdd2bd3b876272bf8eebf7d01cc) 619 [#243](https://github.com/npm/cli/pull/243) 620 [npm.community#9720](https://npm.community/t/6-11-2-npm-ci-installs-package-with-wrong-permissions/9720) 621 ci: pass appropriate configs for file/dir modes 622 ([@isaacs](https://github.com/isaacs)) 623 624### DEPENDENCIES 625 626* [`e5fbb7ed1`](https://github.com/npm/cli/commit/e5fbb7ed1fc7ef5c6ca4790e2d0dc441e0ac1596) 627 `read-cmd-shim@1.0.4` 628 ([@claudiahdz](https://github.com/claudiahdz)) 629* [`23ce65616`](https://github.com/npm/cli/commit/23ce65616c550647c586f7babc3c2f60115af2aa) 630 `npm-pick-manifest@3.0.2` 631 ([@claudiahdz](https://github.com/claudiahdz)) 632 633## 6.11.2 (2019-08-22): 634 635Fix a recent Windows regression, and two long-standing Windows bugs. Also, 636get CI running on Windows, so these things are less likely in the future. 637 638### DEPENDENCIES 639 640* [`9778a1b87`](https://github.com/npm/cli/commit/9778a1b878aaa817af6e99385e7683c2a389570d) 641 `cmd-shim@3.0.3`: Fix regression where shims fail to preserve exit code 642 ([@isaacs](https://github.com/isaacs)) 643* [`bf93e91d8`](https://github.com/npm/cli/commit/bf93e91d879c816a055d5913e6e4210d7299f299) 644 `npm-package-arg@6.1.1`: Properly handle git+file: urls on Windows when a 645 drive letter is included. ([@isaacs](https://github.com/isaacs)) 646 647### BUGFIXES 648 649* [`6cc4cc66f`](https://github.com/npm/cli/commit/6cc4cc66f1fb050dc4113e35cab59197fd48e04a) 650 escape args properly on Windows Bash Despite being bash, Node.js running 651 on windows git mingw bash still executes child processes using cmd.exe. 652 As a result, arguments in this environment need to be escaped in the 653 style of cmd.exe, not bash. ([@isaacs](https://github.com/isaacs)) 654 655### TESTS 656 657* [`291aba7b8`](https://github.com/npm/cli/commit/291aba7b821e247b96240b1ec037310ead69a594) 658 make tests pass on Windows ([@isaacs](https://github.com/isaacs)) 659* [`fea3a023a`](https://github.com/npm/cli/commit/fea3a023a80863f32a5f97f5132401b1a16161b8) 660 travis: run tests on Windows as well 661 ([@isaacs](https://github.com/isaacs)) 662 663## 6.11.1 (2019-08-20): 664 665Fix a regression for windows command shim syntax. 666 667* [`37db29647`](https://github.com/npm/cli/commit/37db2964710c80003604b7e3c1527d17be7ed3d0) 668 `cmd-shim@3.0.2` ([@isaacs](https://github.com/isaacs)) 669 670## v6.11.0 (2019-08-20): 671 672A few meaty bugfixes, and introducing `peerDependenciesMeta`. 673 674### FEATURES 675 676* [`a12341088`](https://github.com/npm/cli/commit/a12341088820c0e7ef6c1c0db3c657f0c2b3943e) 677 [#224](https://github.com/npm/cli/pull/224) Implements 678 peerDependenciesMeta ([@arcanis](https://github.com/arcanis)) 679* [`2f3b79bba`](https://github.com/npm/cli/commit/2f3b79bbad820fd4a398aa494b19f79b7fd520a1) 680 [#234](https://github.com/npm/cli/pull/234) add new forbidden 403 error 681 code ([@claudiahdz](https://github.com/claudiahdz)) 682 683### BUGFIXES 684 685* [`24acc9fc8`](https://github.com/npm/cli/commit/24acc9fc89d99d87cc66206c6c6f7cdc82fbf763) 686 and 687 [`45772af0d`](https://github.com/npm/cli/commit/45772af0ddca54b658cb2ba2182eec26d0a4729d) 688 [#217](https://github.com/npm/cli/pull/217) 689 [npm.community#8863](https://npm.community/t/installing-the-same-module-under-multiple-relative-paths-fails-on-linux/8863) 690 [npm.community#9327](https://npm.community/t/reinstall-breaks-after-npm-update-to-6-10-2/9327,) 691 do not descend into directory deps' child modules, fix shrinkwrap files 692 that inappropriately list child nodes of symlink packages 693 ([@isaacs](https://github.com/isaacs) and 694 [@salomvary](https://github.com/salomvary)) 695* [`50cfe113d`](https://github.com/npm/cli/commit/50cfe113da5fcc59c1d99b0dcf1050ace45803c7) 696 [#229](https://github.com/npm/cli/pull/229) fixed typo in semver doc 697 ([@gall0ws](https://github.com/gall0ws)) 698* [`e8fb2a1bd`](https://github.com/npm/cli/commit/e8fb2a1bd9785e0092e9926f4fd65ad431e38452) 699 [#231](https://github.com/npm/cli/pull/231) Fix spelling mistakes in 700 CHANGELOG-3.md ([@XhmikosR](https://github.com/XhmikosR)) 701* [`769d2e057`](https://github.com/npm/cli/commit/769d2e057daf5a2cbfe0ce86f02550e59825a691) 702 [npm/uid-number#7](https://github.com/npm/uid-number/issues/7) Better 703 error on invalid `--user`/`--group` configs. This addresses the issue 704 when people fail to install binary packages on Docker and other 705 environments where there is no 'nobody' user. 706 ([@isaacs](https://github.com/isaacs)) 707* [`8b43c9624`](https://github.com/npm/cli/commit/8b43c962498c8e2707527e4fca442d7a4fa51595) 708 [nodejs/node#28987](https://github.com/nodejs/node/issues/28987) 709 [npm.community#6032](https://npm.community/t/npm-ci-doesnt-respect-npmrc-variables/6032) 710 [npm.community#6658](https://npm.community/t/npm-ci-doesnt-fill-anymore-the-process-env-npm-config-cache-variable-on-post-install-scripts/6658) 711 [npm.community#6069](https://npm.community/t/npm-ci-does-not-compile-native-dependencies-according-to-npmrc-configuration/6069) 712 [npm.community#9323](https://npm.community/t/npm-6-9-x-not-passing-environment-to-node-gyp-regression-from-6-4-x/9323/2) 713 Fix the regression where random config values in a .npmrc file are not 714 passed to lifecycle scripts, breaking build processes which rely on them. 715 ([@isaacs](https://github.com/isaacs)) 716* [`8b85eaa47`](https://github.com/npm/cli/commit/8b85eaa47da3abaacc90fe23162a68cc6e1f0404) 717 save files with inferred ownership rather than relying on `SUDO_UID` and 718 `SUDO_GID`. ([@isaacs](https://github.com/isaacs)) 719* [`b7f6e5f02`](https://github.com/npm/cli/commit/b7f6e5f0285515087b4614d81db17206524c0fdb) 720 Infer ownership of shrinkwrap files 721 ([@isaacs](https://github.com/isaacs)) 722* [`54b095d77`](https://github.com/npm/cli/commit/54b095d77b3b131622b3cf4cb5c689aa2dd10b6b) 723 [#235](https://github.com/npm/cli/pull/235) Add spec to dist-tag remove 724 function ([@theberbie](https://github.com/theberbie)) 725 726### DEPENDENCIES 727 728* [`dc8f9e52f`](https://github.com/npm/cli/commit/dc8f9e52f0bb107c0a6b20cc0c97cbc3b056c1b3) 729 `pacote@9.5.7`: Infer the ownership of all unpacked files in 730 `node_modules`, so that we never have user-owned files in root-owned 731 folders, or root-owned files in user-owned folders. 732 ([@isaacs](https://github.com/isaacs)) 733* [`bb33940c3`](https://github.com/npm/cli/commit/bb33940c32aad61704084e61ebd1bd8e7cacccc8) 734 `cmd-shim@3.0.0`: 735 * [`9c93ac3`](https://github.com/npm/cmd-shim/commit/9c93ac39e95b0d6ae852e842e4c5dba5e19687c2) 736 [#2](https://github.com/npm/cmd-shim/pull/2) 737 [npm#3380](https://github.com/npm/npm/issues/3380) Handle environment 738 variables properly ([@basbossink](https://github.com/basbossink)) 739 * [`2d277f8`](https://github.com/npm/cmd-shim/commit/2d277f8e84d45401747b0b9470058f168b974ad5) 740 [#25](https://github.com/npm/cmd-shim/pull/25) 741 [#36](https://github.com/npm/cmd-shim/pull/36) 742 [#35](https://github.com/npm/cmd-shim/pull/35) Fix 'no shebang' case by 743 always providing `$basedir` in shell script 744 ([@igorklopov](https://github.com/igorklopov)) 745 * [`adaf20b`](https://github.com/npm/cmd-shim/commit/adaf20b7fa2c09c2111a2506c6a3e53ed0831f88) 746 [#26](https://github.com/npm/cmd-shim/pull/26) Fix `$*` causing an 747 error when arguments contain parentheses 748 ([@satazor](https://github.com/satazor)) 749 * [`49f0c13`](https://github.com/npm/cmd-shim/commit/49f0c1318fd384e0031c3fd43801f0e22e1e555f) 750 [#30](https://github.com/npm/cmd-shim/pull/30) Fix paths for MSYS/MINGW 751 bash ([@dscho](https://github.com/dscho)) 752 * [`51a8af3`](https://github.com/npm/cmd-shim/commit/51a8af30990cb072cb30d67fc1b564b14746bba9) 753 [#34](https://github.com/npm/cmd-shim/pull/34) Add proper support for 754 PowerShell ([@ExE-Boss](https://github.com/ExE-Boss)) 755 * [`4c37e04`](https://github.com/npm/cmd-shim/commit/4c37e048dee672237e8962fdffca28e20e9f976d) 756 [#10](https://github.com/npm/cmd-shim/issues/10) Work around quoted 757 batch file names ([@isaacs](https://github.com/isaacs)) 758* [`a4e279544`](https://github.com/npm/cli/commit/a4e279544f7983e0adff1e475e3760f1ea85825a) 759 `npm-lifecycle@3.1.3` ([@isaacs](https://github.com/isaacs)): 760 * fail properly if `uid-number` raises an error 761* [`7086a1809`](https://github.com/npm/cli/commit/7086a1809bbfda9be81344b3949c7d3ac687ffc4) 762 `libcipm@4.0.3` ([@isaacs](https://github.com/isaacs)) 763* [`8845141f9`](https://github.com/npm/cli/commit/8845141f9d7827dae572c8cf26f2c775db905bd3) 764 `read-package-json@2.1.0` ([@isaacs](https://github.com/isaacs)) 765* [`51c028215`](https://github.com/npm/cli/commit/51c02821575d80035ebe853492d110db11a7d1b9) 766 `bin-links@1.1.3` ([@isaacs](https://github.com/isaacs)) 767* [`534a5548c`](https://github.com/npm/cli/commit/534a5548c9ebd59f0dd90e9ccca148ed8946efa6) 768 `read-cmd-shim@1.0.3` ([@isaacs](https://github.com/isaacs)) 769* [`3038f2fd5`](https://github.com/npm/cli/commit/3038f2fd5b1d7dd886ee72798241d8943690f508) 770 `gentle-fs@2.2.1` ([@isaacs](https://github.com/isaacs)) 771* [`a609a1648`](https://github.com/npm/cli/commit/a609a16489f76791697d270b499fd4949ab1f8c3) 772 `graceful-fs@4.2.2` ([@isaacs](https://github.com/isaacs)) 773* [`f0346f754`](https://github.com/npm/cli/commit/f0346f75490619a81b310bfc18646ae5ae2e0ea4) 774 `cacache@12.0.3` ([@isaacs](https://github.com/isaacs)) 775* [`ca9c615c8`](https://github.com/npm/cli/commit/ca9c615c8cff5c7db125735eb09f84d912d18694) 776 `npm-pick-manifest@3.0.0` ([@isaacs](https://github.com/isaacs)) 777* [`b417affbf`](https://github.com/npm/cli/commit/b417affbf7133dc7687fd809e4956a43eae3438a) 778 `pacote@9.5.8` ([@isaacs](https://github.com/isaacs)) 779 780### TESTS 781 782* [`b6df0913c`](https://github.com/npm/cli/commit/b6df0913ca73246f1fa6cfa0e81e34ba5f2b6204) 783 [#228](https://github.com/npm/cli/pull/228) Proper handing of 784 /usr/bin/node lifecycle-path test 785 ([@olivr70](https://github.com/olivr70)) 786* [`aaf98e88c`](https://github.com/npm/cli/commit/aaf98e88c78fd6c850d0a3d3ee2f61c02f63bc8c) 787 `npm-registry-mock@1.3.0` ([@isaacs](https://github.com/isaacs)) 788 789## v6.10.3 (2019-08-06): 790 791### BUGFIXES 792 793* [`27cccfbda`](https://github.com/npm/cli/commit/27cccfbdac8526cc807b07f416355949b1372a9b) 794 [#223](https://github.com/npm/cli/pull/223) vulns → vulnerabilities in 795 npm audit output ([@sapegin](https://github.com/sapegin)) 796* [`d5e865eb7`](https://github.com/npm/cli/commit/d5e865eb79329665a927cc2767b4395c03045dbb) 797 [#222](https://github.com/npm/cli/pull/222) 798 [#226](https://github.com/npm/cli/pull/226) install, doctor: don't crash 799 if registry unset ([@dmitrydvorkin](https://github.com/dmitrydvorkin), 800 [@isaacs](https://github.com/isaacs)) 801* [`5b3890226`](https://github.com/npm/cli/commit/5b389022652abeb0e1c278a152550eb95bc6c452) 802 [#227](https://github.com/npm/cli/pull/227) 803 [npm.community#9167](https://npm.community/t/npm-err-cb-never-called-permission-denied/9167/5) 804 Handle unhandledRejections, tell user what to do when encountering an 805 `EACCES` error in the cache. ([@isaacs](https://github.com/isaacs)) 806 807### DEPENDENCIES 808 809* [`77516df6e`](https://github.com/npm/cli/commit/77516df6eac94a6d7acb5e9ca06feaa0868d779b) 810 `licensee@7.0.3` ([@isaacs](https://github.com/isaacs)) 811* [`ceb993590`](https://github.com/npm/cli/commit/ceb993590e4e376a9a78264ce7bb4327fbbb37fe) 812 `query-string@6.8.2` ([@isaacs](https://github.com/isaacs)) 813* [`4050b9189`](https://github.com/npm/cli/commit/4050b91898c60e9b22998cf82b70b9b822de592a) 814 `hosted-git-info@2.8.2` 815 * [#46](https://github.com/npm/hosted-git-info/issues/46) 816 [#43](https://github.com/npm/hosted-git-info/issues/43) 817 [#47](https://github.com/npm/hosted-git-info/pull/47) 818 [#44](https://github.com/npm/hosted-git-info/pull/44) Add support for 819 GitLab subgroups ([@mterrel](https://github.com/mterrel), 820 [@isaacs](https://github.com/isaacs), 821 [@ybiquitous](https://github.com/ybiquitous)) 822 * [`3b1d629`](https://github.com/npm/hosted-git-info/commit/3b1d629) 823 [#48](https://github.com/npm/hosted-git-info/issues/48) fix http 824 protocol using sshurl by default 825 ([@fengmk2](https://github.com/fengmk2)) 826 * [`5d4a8d7`](https://github.com/npm/hosted-git-info/commit/5d4a8d7) 827 ignore noCommittish on tarball url generation 828 ([@isaacs](https://github.com/isaacs)) 829 * [`1692435`](https://github.com/npm/hosted-git-info/commit/1692435) 830 use gist tarball url that works for anonymous gists 831 ([@isaacs](https://github.com/isaacs)) 832 * [`d5cf830`](https://github.com/npm/hosted-git-info/commit/d5cf8309be7af884032616c63ea302ce49dd321c) 833 Do not allow invalid gist urls ([@isaacs](https://github.com/isaacs)) 834 * [`e518222`](https://github.com/npm/hosted-git-info/commit/e5182224351183ce619dd5ef00019ae700ed37b7) 835 Use LRU cache to prevent unbounded memory consumption 836 ([@iarna](https://github.com/iarna)) 837 838## v6.10.2 (2019-07-23): 839 840tl;dr - Fixes several issues with the cache when npm is run as `sudo` on 841Unix systems. 842 843### TESTING 844 845* [`2a78b96f8`](https://github.com/npm/cli/commit/2a78b96f830bbd834720ccc9eacccc54915ae6f7) 846 check test cache for root-owned files 847 ([@isaacs](https://github.com/isaacs)) 848* [`108646ebc`](https://github.com/npm/cli/commit/108646ebc12f3eeebaa0a45884c45991a45e57e4) 849 run sudo tests on Travis-CI ([@isaacs](https://github.com/isaacs)) 850* [`cf984e946`](https://github.com/npm/cli/commit/cf984e946f453cbea2fcc7a59608de3f24ab74c3) 851 set --no-esm tap flag ([@isaacs](https://github.com/isaacs)) 852* [`8e0a3100d`](https://github.com/npm/cli/commit/8e0a3100dffb3965bb3dc4240e82980dfadf2f3c) 853 add script to run tests and leave fixtures for inspection and debugging 854 ([@isaacs](https://github.com/isaacs)) 855 856### BUGFIXES 857 858* [`25f4f73f6`](https://github.com/npm/cli/commit/25f4f73f6dc9744757787c82351120cd1baee5f8) 859 add a util for writing arbitrary files to cache This prevents metrics 860 timing and debug logs from becoming root-owned. 861 ([@isaacs](https://github.com/isaacs)) 862* [`2c61ce65d`](https://github.com/npm/cli/commit/2c61ce65d6b67100fdf3fcb9729055b669cb1a1d) 863 infer cache owner from parent dir in `correct-mkdir` util 864 ([@isaacs](https://github.com/isaacs)) 865* [`235e5d6df`](https://github.com/npm/cli/commit/235e5d6df6f427585ec58425f1f3339d08f39d8a) 866 ensure correct owner on cached all-packages metadata 867 ([@isaacs](https://github.com/isaacs)) 868* [`e2d377bb6`](https://github.com/npm/cli/commit/e2d377bb6419d8a3c1d80a73dba46062b4dad336) 869 [npm.community#8540](https://npm.community/t/npm-audit-fails-with-child-requires-fails-because-requires-must-be-an-object/8540) 870 audit: report server error on failure 871 ([@isaacs](https://github.com/isaacs)) 872* [`52576a39e`](https://github.com/npm/cli/commit/52576a39ed75d94c46bb2c482fd38d2c6ea61c56) 873 [#216](https://github.com/npm/cli/pull/216) 874 [npm.community#5385](https://npm.community/t/6-8-0-npm-ci-fails-with-local-dependency/5385) 875 [npm.community#6076](https://npm.community/t/npm-ci-fail-to-local-packages/6076) 876 Fix `npm ci` with `file:` dependencies. Partially reverts 877 [#40](https://github.com/npm/cli/pull/40)/[#86](https://github.com/npm/cli/pull/86), 878 recording dependencies of linked deps in order for `npm ci` to work. 879 ([@jfirebaugh](https://github.com/jfirebaugh)) 880 881### DEPENDENCIES 882 883* [`0fefdee13`](https://github.com/npm/cli/commit/0fefdee130fd7d0dbb240fb9ecb50a793fbf3d29) 884 `cacache@12.0.2` ([@isaacs](https://github.com/isaacs)) 885 * infer uid/gid instead of accepting as options, preventing the 886 overwhelming majority of cases where root-owned files end up in the 887 cache folder. 888 ([ac84d14](https://github.com/npm/cacache/commit/ac84d14)) 889 ([@isaacs](https://github.com/isaacs)) 890 ([#1](https://github.com/npm/cacache/pull/1)) 891 * **i18n:** add another error message 892 ([676cb32](https://github.com/npm/cacache/commit/676cb32)) 893 ([@zkat](https://github.com/zkat)) 894* [`e1d87a392`](https://github.com/npm/cli/commit/e1d87a392371a070b0788ab7bfc62be18b21e9ad) 895 `pacote@9.5.4` ([@isaacs](https://github.com/isaacs)) 896 * git: ensure stream failures are reported 897 ([7f07b5d](https://github.com/npm/pacote/commit/7f07b5d)) 898 [#1](https://github.com/npm/pacote/issues/1) 899 ([@lddubeau](https://github.com/lddubeau)) 900* [`3f035bf09`](https://github.com/npm/cli/commit/3f035bf098e2feea76574cec18b04812659aa16d) 901 `infer-owner@1.0.4` ([@isaacs](https://github.com/isaacs)) 902* [`ba3283112`](https://github.com/npm/cli/commit/ba32831126591d2f6f48e31a4a2329b533b1ff19) 903 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 904* [`ee90c334d`](https://github.com/npm/cli/commit/ee90c334d271383d0325af42f20f80f34cb61f07) 905 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 906* [`1e480c384`](https://github.com/npm/cli/commit/1e480c38416982ae28b5cdd48c698ca59d3c0395) 907 `libnpmaccess@3.0.2` ([@isaacs](https://github.com/isaacs)) 908* [`7662ee850`](https://github.com/npm/cli/commit/7662ee850220c71ecaec639adbc7715286f0d28b) 909 `libnpmhook@5.0.3` ([@isaacs](https://github.com/isaacs)) 910* [`1357fadc6`](https://github.com/npm/cli/commit/1357fadc613d0bfeb40f9a8f3ecace2face2fe2c) 911 `libnpmorg@1.0.1` ([@isaacs](https://github.com/isaacs)) 912* [`a621b5cb6`](https://github.com/npm/cli/commit/a621b5cb6c881f95a11af86a8051754a67ae017c) 913 `libnpmsearch@2.0.2` ([@isaacs](https://github.com/isaacs)) 914* [`560cd31dd`](https://github.com/npm/cli/commit/560cd31dd51b6aa2e396ccdd7289fab0a50b5608) 915 `libnpmteam@1.0.2` ([@isaacs](https://github.com/isaacs)) 916* [`de7ae0867`](https://github.com/npm/cli/commit/de7ae0867d4c0180edc283457ce0b4e8e5eee554) 917 `npm-profile@4.0.2` ([@isaacs](https://github.com/isaacs)) 918* [`e95da463c`](https://github.com/npm/cli/commit/e95da463cb7a325457ef411a569d7ef4bf76901d) 919 `libnpm@3.0.1` ([@isaacs](https://github.com/isaacs)) 920* [`554b641d4`](https://github.com/npm/cli/commit/554b641d49d135ae8d137e83aa288897c32dacc6) 921 `npm-registry-fetch@4.0.0` ([@isaacs](https://github.com/isaacs)) 922* [`06772f34a`](https://github.com/npm/cli/commit/06772f34ab851440dcd78574736936c674a84aed) 923 `node-gyp@5.0.3` ([@isaacs](https://github.com/isaacs)) 924* [`85358db80`](https://github.com/npm/cli/commit/85358db80d6ccb5f7bc9a0b4d558ac6dd2468394) 925 `npm-lifecycle@3.1.2` ([@isaacs](https://github.com/isaacs)) 926 * [`051cf20`](https://github.com/npm/npm-lifecycle/commit/051cf20072a01839c17920d2e841756251c4f924) 927 [#26](https://github.com/npm/npm-lifecycle/pull/26) fix switches for 928 alternative shells on Windows 929 ([@gucong3000](https://github.com/gucong3000)) 930 * [`3aaf954`](https://github.com/npm/npm-lifecycle/commit/3aaf95435965e8f7acfd955582cf85237afd2c9b) 931 [#25](https://github.com/npm/npm-lifecycle/pull/25) set only one PATH 932 env variable for child process on Windows 933 ([@zkochan](https://github.com/zkochan)) 934 * [`ea18ed2`](https://github.com/npm/npm-lifecycle/commit/ea18ed2b754ca7f11998cad70d88e9004c5bef4a) 935 [#36](https://github.com/npm/npm-lifecycle/pull/36) 936 [#11](https://github.com/npm/npm-lifecycle/issue/11) 937 [#18](https://github.com/npm/npm-lifecycle/issue/18) remove 938 procInterrupt listener on SIGINT in procError 939 ([@mattshin](https://github.com/mattshin)) 940 * [`5523951`](https://github.com/npm/npm-lifecycle/commit/55239519c57b82521605622e6c71640a31ed4586) 941 [#29](https://github.com/npm/npm-lifecycle/issue/29) 942 [#30](https://github.com/npm/npm-lifecycle/pull/30) Use platform 943 specific path casing if present 944 ([@mattezell](https://github.com/mattezell)) 945 946## v6.10.1 (2019-07-11): 947 948### BUGFIXES 949 950* [`3cbd57712`](https://github.com/npm/cli/commit/3cbd577120a9da6e51bb8b13534d1bf71ea5712c) 951 fix(git): strip GIT environs when running git 952 ([@isaacs](https://github.com/isaacs)) 953* [`a81a8c4c4`](https://github.com/npm/cli/commit/a81a8c4c466f510215a51cef1bb08544d11844fe) 954 [#206](https://github.com/npm/cli/pull/206) improve isOnly(Dev,Optional) 955 ([@larsgw](https://github.com/larsgw)) 956* [`172f9aca6`](https://github.com/npm/cli/commit/172f9aca67a66ee303c17f90a994cd52fc66552a) 957 [#179](https://github.com/npm/cli/pull/179) fix-xmas-underline 958 ([@raywu0123](https://github.com/raywu0123)) 959* [`f52673fc7`](https://github.com/npm/cli/commit/f52673fc7284e58af8c04533e82b76bf7add72cf) 960 [#212](https://github.com/npm/cli/pull/212) build: use `/usr/bin/env` to 961 load bash ([@rsmarples](https://github.com/rsmarples)) 962 963### DEPENDENCIES 964 965* [`ef4445ad3`](https://github.com/npm/cli/commit/ef4445ad34a53b5639499c8e3c9752f62ee6f37c) 966 [#208](https://github.com/npm/cli/pull/208) `node-gyp@5.0.2` 967 ([@irega](https://github.com/irega)) 968* [`c0d611356`](https://github.com/npm/cli/commit/c0d611356f7b23077e97574b01c8886e544db425) 969 `npm-lifecycle@3.0.0` ([@isaacs](https://github.com/isaacs)) 970* [`7716ba972`](https://github.com/npm/cli/commit/7716ba9720270d5b780755a5bb1ce79702067f1f) 971 `libcipm@4.0.0` ([@isaacs](https://github.com/isaacs)) 972* [`42d22e837`](https://github.com/npm/cli/commit/42d22e8374c7d303d94e405d7385d94dd2558814) 973 `libnpm@3.0.0` ([@isaacs](https://github.com/isaacs)) 974* [`a2ea7f9ff`](https://github.com/npm/cli/commit/a2ea7f9ff64ae743d05fdbf7d46fb9afafa8aa6f) 975 `semver@5.7.0` ([@isaacs](https://github.com/isaacs)) 976* [`429226a5e`](https://github.com/npm/cli/commit/429226a5e992cd907d4f19bd738037007cf78c1f) 977 `lru-cache@5.1.1` ([@isaacs](https://github.com/isaacs)) 978* [`175670ea6`](https://github.com/npm/cli/commit/175670ea65cca03f8b2e957df3dd4b8b0efd0e1f) 979 `npm-registry-fetch@3.9.1`: ([@isaacs](https://github.com/isaacs)) 980* [`0d0517f7f`](https://github.com/npm/cli/commit/0d0517f7f8c902b5064ac18fb4015b31750ad2b2) 981 `call-limit@1.1.1` ([@isaacs](https://github.com/isaacs)) 982* [`741400429`](https://github.com/npm/cli/commit/74140042917ea241062a812ceb65c5423c2bafa9) 983 `glob@7.1.4` ([@isaacs](https://github.com/isaacs)) 984* [`bddd60e30`](https://github.com/npm/cli/commit/bddd60e302283a4a70d35f8f742e42bd13f4dabf) 985 `inherits@2.0.4` ([@isaacs](https://github.com/isaacs)) 986* [`4acf03fd1`](https://github.com/npm/cli/commit/4acf03fd140ed3ddb2dcf3fdc9756bc3f5a8bcbb) 987 `libnpmsearch@2.0.1` ([@isaacs](https://github.com/isaacs)) 988* [`c2bd17291`](https://github.com/npm/cli/commit/c2bd17291a86bea7ced2fbd07d66d013bd7a7560) 989 `marked@0.6.3` ([@isaacs](https://github.com/isaacs)) 990* [`7f0221bb1`](https://github.com/npm/cli/commit/7f0221bb1bb41ffc933c785940e227feae38c80c) 991 `marked-man@0.6.0` ([@isaacs](https://github.com/isaacs)) 992* [`f458fe7dd`](https://github.com/npm/cli/commit/f458fe7dd3bebddf603aaae183a424ea8aaa018f) 993 `npm-lifecycle@2.1.1` ([@isaacs](https://github.com/isaacs)) 994* [`009752978`](https://github.com/npm/cli/commit/0097529780269c28444f1efa0d7c131d47a933eb) 995 `node-gyp@4.0.0` ([@isaacs](https://github.com/isaacs)) 996* [`0fa2bb438`](https://github.com/npm/cli/commit/0fa2bb4386379d6e9d8c95db08662ec0529964f9) 997 `query-string@6.8.1` ([@isaacs](https://github.com/isaacs)) 998* [`b86450929`](https://github.com/npm/cli/commit/b86450929796950a1fe4b1f9b02b1634c812f3bb) 999 `tar-stream@2.1.0` ([@isaacs](https://github.com/isaacs)) 1000* [`25db00fe9`](https://github.com/npm/cli/commit/25db00fe953453198adb9e1bd71d1bc2a9f04aaa) 1001 `worker-farm@1.7.0` ([@isaacs](https://github.com/isaacs)) 1002* [`8dfbe8610`](https://github.com/npm/cli/commit/8dfbe861085dfa8fa56bb504b4a00fba04c34f9d) 1003 `readable-stream@3.4.0` ([@isaacs](https://github.com/isaacs)) 1004* [`f6164d5dd`](https://github.com/npm/cli/commit/f6164d5ddd072eabdf2237f1694a31efd746eb1d) 1005 [isaacs/chownr#21](https://github.com/isaacs/chownr/pull/21) 1006 [isaacs/chownr#20](https://github.com/isaacs/chownr/issues/20) 1007 [npm.community#7901](https://npm.community/t/7901/) 1008 [npm.community#8203](https://npm.community/t/8203) `chownr@1.1.2` This 1009 fixes an EISDIR error from cacache on Darwin in Node versions prior to 1010 10.6. ([@isaacs](https://github.com/isaacs)) 1011 1012## v6.10.0 (2019-07-03): 1013 1014### FEATURES 1015 1016* [`87fef4e35`](https://github.com/npm/cli/commit/87fef4e35) 1017 [#176](https://github.com/npm/cli/pull/176) fix: Always return JSON for 1018 outdated --json ([@sreeramjayan](https://github.com/sreeramjayan)) 1019* [`f101d44fc`](https://github.com/npm/cli/commit/f101d44fc) 1020 [#203](https://github.com/npm/cli/pull/203) fix(unpublish): add space 1021 after hyphen ([@ffflorian](https://github.com/ffflorian)) 1022* [`a4475de4c`](https://github.com/npm/cli/commit/a4475de4c) 1023 [#202](https://github.com/npm/cli/pull/202) enable production flag for 1024 npm audit ([@CalebCourier](https://github.com/CalebCourier)) 1025* [`d192904d0`](https://github.com/npm/cli/commit/d192904d0) 1026 [#178](https://github.com/npm/cli/pull/178) fix: Return a value for 1027 `view` when in silent mode 1028 ([@stayradiated](https://github.com/stayradiated)) 1029* [`39d473adf`](https://github.com/npm/cli/commit/39d473adf) 1030 [#185](https://github.com/npm/cli/pull/185) Allow git to follow global 1031 tagsign config ([@junderw](https://github.com/junderw)) 1032 1033### BUGFIXES 1034 1035* [`d9238af0b`](https://github.com/npm/cli/commit/d9238af0b) 1036 [#201](https://github.com/npm/cli/pull/163) 1037 [npm/npm#17858](https://github.com/npm/npm/issues/17858) 1038 [npm/npm#18042](https://github.com/npm/npm/issues/18042) 1039 [npm.community#644](https://npm.community/t/644) do not crash when 1040 removing nameless packages 1041 ([@SteveVanOpstal](https://github.com/SteveVanOpstal) and 1042 [@isaacs](https://github.com/isaacs)) 1043* [`4bec4f111`](https://github.com/npm/cli/commit/4bec4f111) 1044 [#200](https://github.com/npm/cli/pull/200) Check for `node` (as well as 1045 `node.exe`) in npm's local dir on Windows 1046 ([@rgoulais](https://github.com/rgoulais)) 1047* [`ce93dab2d`](https://github.com/npm/cli/commit/ce93dab2db423ef23b3e08a0612dafbeb2d25789) 1048 [#180](https://github.com/npm/cli/pull/180) 1049 [npm.community#6187](https://npm.community/t/6187) Fix handling of 1050 `remote` deps in `npm outdated` ([@larsgw](https://github.com/larsgw)) 1051 1052### TESTING 1053 1054* [`a823f3084`](https://github.com/npm/cli/commit/a823f3084) travis: Update 1055 to include new v12 LTS ([@isaacs](https://github.com/isaacs)) 1056* [`33e2d1dac`](https://github.com/npm/cli/commit/33e2d1dac) fix flaky 1057 debug-logs test ([@isaacs](https://github.com/isaacs)) 1058* [`e9411c6cd`](https://github.com/npm/cli/commit/e9411c6cd) Don't time out 1059 waiting for gpg user input ([@isaacs](https://github.com/isaacs)) 1060* [`d2d301704`](https://github.com/npm/cli/commit/d2d301704) 1061 [#195](https://github.com/npm/cli/pull/195) Add the arm64 check for 1062 legacy-platform-all.js test case. 1063 ([@ossdev07](https://github.com/ossdev07)) 1064* [`a4dc34243`](https://github.com/npm/cli/commit/a4dc34243) parallel tests 1065 ([@isaacs](https://github.com/isaacs)) 1066 1067### DOCUMENTATION 1068 1069* [`f5857e263`](https://github.com/npm/cli/commit/f5857e263) 1070 [#192](https://github.com/npm/cli/pull/192) Clarify usage of 1071 bundledDependencies 1072 ([@john-osullivan](https://github.com/john-osullivan)) 1073* [`747fdaf66`](https://github.com/npm/cli/commit/747fdaf66) 1074 [#159](https://github.com/npm/cli/pull/159) doc: add --audit-level param 1075 ([@ngraef](https://github.com/ngraef)) 1076 1077### DEPENDENCIES 1078 1079* [`e36b3c320`](https://github.com/npm/cli/commit/e36b3c320) 1080 graceful-fs@4.2.0 ([@isaacs](https://github.com/isaacs)) 1081* [`6bb935c09`](https://github.com/npm/cli/commit/6bb935c09) 1082 read-package-tree@5.3.1 ([@isaacs](https://github.com/isaacs)) 1083 * [`e9cd536`](https://github.com/npm/read-package-tree/commit/e9cd536) 1084 Use custom caching `realpath` implementation, dramatically reducing 1085 `lstat` calls when reading the package tree 1086 ([@isaacs](https://github.com/isaacs)) 1087* [`39538b460`](https://github.com/npm/cli/commit/39538b460) 1088 write-file-atomic@2.4.3 ([@isaacs](https://github.com/isaacs)) 1089 * [`f8b1552`](https://github.com/npm/write-file-atomic/commit/f8b1552) 1090 [#38](https://github.com/npm/write-file-atomic/pull/38) Ignore errors 1091 raised by `fs.closeSync` ([@lukeapage](https://github.com/lukeapage)) 1092* [`042193069`](https://github.com/npm/cli/commit/042193069) pacote@9.5.1 1093 ([@isaacs](https://github.com/isaacs)) 1094 * [`8bbd051`](https://github.com/npm/pacote/commit/8bbd051) 1095 [#172](https://github.com/zkat/pacote/pull/172) limit git retry 1096 times, avoid unlimited retries ([小秦](https://github.com/xqin)) 1097 * [`92f5e4c`](https://github.com/npm/pacote/commit/92f5e4c) 1098 [#170](https://github.com/zkat/pacote/pull/170) fix(errors): Fix 1099 "TypeError: err.code.match is not a function" error 1100 ([@jviotti](https://github.com/jviotti)) 1101* [`8bd8e909f`](https://github.com/npm/cli/commit/8bd8e909f) cacache@11.3.3 1102 ([@isaacs](https://github.com/isaacs)) 1103 * [`47de8f5`](https://github.com/npm/cacache/commit/47de8f5) 1104 [#146](https://github.com/zkat/cacache/pull/146) 1105 [npm.community#2395](https://npm.community/t/2395) fix(config): Add 1106 ssri config 'error' option ([@larsgw](https://github.com/larsgw)) 1107 * [`5156561`](https://github.com/npm/cacache/commit/5156561) 1108 fix(write): avoid a `cb never called` situation 1109 ([@zkat](https://github.com/zkat)) 1110 * [`90f40f0`](https://github.com/npm/cacache/commit/90f40f0) 1111 [#166](https://github.com/zkat/cacache/pull/166) 1112 [#165](https://github.com/zkat/cacache/issues/165) docs: Fix docs for 1113 `path` property in get.info 1114 ([@hdgarrood](https://github.com/hdgarrood)) 1115* [`bf61c45c6`](https://github.com/npm/cli/commit/bf61c45c6) bluebird@3.5.5 1116 ([@isaacs](https://github.com/isaacs)) 1117* [`f75d46a9d`](https://github.com/npm/cli/commit/f75d46a9d) tar@4.4.10 1118 ([@isaacs](https://github.com/isaacs)) 1119 * [`c80341a`](https://github.com/npm/node-tar/commit/c80341a) 1120 [#215](https://github.com/npm/node-tar/pull/215) Fix 1121 encoding/decoding of base-256 numbers 1122 ([@justfalter](https://github.com/justfalter)) 1123 * [`77522f0`](https://github.com/npm/node-tar/commit/77522f0) 1124 [#204](https://github.com/npm/node-tar/issues/204) 1125 [#214](https://github.com/npm/node-tar/issues/214) Use `stat` instead 1126 of `lstat` when checking CWD ([@stkb](https://github.com/stkb)) 1127* [`ec6236210`](https://github.com/npm/cli/commit/ec6236210) 1128 npm-packlist@1.4.4 ([@isaacs](https://github.com/isaacs)) 1129 * [`63d1e3e`](https://github.com/npm/npm-packlist/commit/63d1e3e) 1130 [#30](https://github.com/npm/npm-packlist/issues/30) Sort package 1131 tarball entries by file type for compression benefits 1132 ([@isaacs](https://github.com/isaacs)) 1133 * [`7fcd045`](https://github.com/npm/npm-packlist/commit/7fcd045) 1134 Ignore `.DS_Store` files as well as folders 1135 ([@isaacs](https://github.com/isaacs)) 1136 * [`68b7c96`](https://github.com/npm/npm-packlist/commit/68b7c96) Never 1137 include .git folders in package root. (Note: this prevents the issue 1138 that broke the v6.9.1 release.) 1139 ([@isaacs](https://github.com/isaacs)) 1140* [`57bef61bc`](https://github.com/npm/cli/commit/57bef61bc) update fstream 1141 in node-gyp ([@isaacs](https://github.com/isaacs)) 1142 * Addresses [security advisory 1143 #886](https://www.npmjs.com/advisories/886) 1144* [`acbbf7eee`](https://github.com/npm/cli/commit/acbbf7eee) 1145 [#183](https://github.com/npm/cli/pull/183) licensee@7.0.2 1146 ([@kemitchell](https://github.com/kemitchell)) 1147* [`011ae67f0`](https://github.com/npm/cli/commit/011ae67f0) 1148 readable-stream@3.3.0 ([@isaacs](https://github.com/isaacs)) 1149* [`f5e884909`](https://github.com/npm/cli/commit/f5e884909) 1150 npm-registry-mock@1.2.1 ([@isaacs](https://github.com/isaacs)) 1151* [`b57d07e35`](https://github.com/npm/cli/commit/b57d07e35) 1152 npm-registry-couchapp@2.7.2 ([@isaacs](https://github.com/isaacs)) 1153 1154## v6.9.2 (2019-06-27): 1155 1156This release is identical to v6.9.1, but we had to publish a new version 1157due to [a .git directory in the release](https://npm.community/t/8454). 1158 1159## v6.9.1 (2019-06-26): 1160 1161### BUGFIXES 1162 1163* [`6b1a9da0e`](https://github.com/npm/cli/commit/6b1a9da0e0f5c295cdaf4dea4b73bd221d778611) 1164 [#165](https://github.com/npm/cli/pull/165) 1165 Update `knownBroken` version. 1166 ([@ljharb](https://github.com/ljharb)) 1167* [`d07547154`](https://github.com/npm/cli/commit/d07547154eb8a88aa4fde8a37e128e1e3272adc1) 1168 [npm.community#5929](https://npm.community/t/npm-outdated-throw-an-error-cannot-read-property-length-of-undefined/5929) 1169 Fix `outdated` rendering for global dependencies. 1170 ([@zkat](https://github.com/zkat)) 1171* [`e4a1f1745`](https://github.com/npm/cli/commit/e4a1f174514a57580fd5e0fa33eee0f42bba77fc) 1172 [npm.community#6259](https://npm.community/t/npm-token-create-doesnt-work-in-6-6-0-6-9-0/6259) 1173 Fix OTP for token create and remove. 1174 ([@zkat](https://github.com/zkat)) 1175 1176### DEPENDENCIES 1177 1178* [`a163a9c35`](https://github.com/npm/cli/commit/a163a9c35f6f341de343562368056258bba5d7dc) 1179 `sha@3.0.0` 1180 ([@aeschright](https://github.com/aeschright)) 1181* [`47b08b3b9`](https://github.com/npm/cli/commit/47b08b3b9860438b416efb438e975a628ec2eed5) 1182 `query-string@6.4.0` 1183 ([@aeschright](https://github.com/aeschright)) 1184* [`d6a956cff`](https://github.com/npm/cli/commit/d6a956cff6357e6de431848e578c391768685a64) 1185 `readable-stream@3.2.0` 1186 ([@aeschright](https://github.com/aeschright)) 1187* [`10b8bed2b`](https://github.com/npm/cli/commit/10b8bed2bb0afac5451164e87f25924cc1ac6f2e) 1188 `tacks@1.3.0` 1189 ([@aeschright](https://github.com/aeschright)) 1190* [`e7483704d`](https://github.com/npm/cli/commit/e7483704dda1acffc8c6b8c165c14c8a7512f3c8) 1191 `tap@12.6.0` 1192 ([@aeschright](https://github.com/aeschright)) 1193* [`3242fe698`](https://github.com/npm/cli/commit/3242fe698ead46a9cda94e1a4d489cd84a85d7e3) 1194 `tar-stream@2.0.1` 1195 ([@aeschright](https://github.com/aeschright)) 1196 1197## v6.9.0 (2019-02-20): 1198 1199### FEATURES 1200 1201* [`2ba3a0f67`](https://github.com/npm/cli/commit/2ba3a0f6721f6d5a16775aebce6012965634fc7c) 1202 [#90](https://github.com/npm/cli/pull/90) 1203 Time traveling installs using the `--before` flag. 1204 ([@zkat](https://github.com/zkat)) 1205* [`b7b54f2d1`](https://github.com/npm/cli/commit/b7b54f2d18e2d8d65ec67c850b21ae9f01c60e7e) 1206 [#3](https://github.com/npm/cli/pull/3) 1207 Add support for package aliases. This allows packages to be installed under a 1208 different directory than the package name listed in `package.json`, and adds a 1209 new dependency type to allow this to be done for registry dependencies. 1210 ([@zkat](https://github.com/zkat)) 1211* [`684bccf06`](https://github.com/npm/cli/commit/684bccf061dfc97bb759121bc0ad635e01c65868) 1212 [#146](https://github.com/npm/cli/pull/146) 1213 Always save `package-lock.json` when using `--package-lock-only`. 1214 ([@aeschright](https://github.com/aeschright)) 1215* [`b8b8afd40`](https://github.com/npm/cli/commit/b8b8afd4048b4ba1181e00ba2ac49ced43936ce0) 1216 [#139](https://github.com/npm/cli/pull/139) 1217 Make empty-string run-scripts run successfully as a no-op. 1218 ([@vlasy](https://github.com/vlasy)) 1219* [`8047b19b1`](https://github.com/npm/cli/commit/8047b19b1b994fd4b4e7b5c91d7cc4e0384bd5e4) 1220 [npm.community#3784](https://npm.community/t/3784) 1221 Match git semver ranges when flattening the tree. 1222 ([@larsgw](https://github.com/larsgw)) 1223* [`e135c2bb3`](https://github.com/npm/cli/commit/e135c2bb360dcf00ecee34a95985afec21ba3655) 1224 [npm.community#1725](https://npm.community/t/1725?u=larsgw) 1225 Re-enable updating local packages. 1226 ([@larsgw](https://github.com/larsgw)) 1227 1228### BUGFIXES 1229 1230* [`cf09fbaed`](https://github.com/npm/cli/commit/cf09fbaed489d908e9b551382cc5f61bdabe99a9) 1231 [#153](https://github.com/npm/cli/pull/153) 1232 Set modified to undefined in `npm view` when `time` is not available. This 1233 fixes a bug where `npm view` would crash on certain third-party registries. 1234 ([@simonua](https://github.com/simonua)) 1235* [`774fc26ee`](https://github.com/npm/cli/commit/774fc26eeb01345c11bd8c97e2c4f328d419d9b5) 1236 [#154](https://github.com/npm/cli/pull/154) 1237 Print out tar version in `install.sh` only when the flag is supported not all 1238 the tar implementations support --version flag. This allows the install script 1239 to work in OpenBSD, for example. 1240 ([@agudulin](https://github.com/agudulin)) 1241* [`863baff11`](https://github.com/npm/cli/commit/863baff11d8c870f1a0d9619bb5133c67d71e407) 1242 [#158](https://github.com/npm/cli/pull/158) 1243 Fix typo in error message for `npm stars`. 1244 ([@phihag](https://github.com/phihag)) 1245* [`a805a95ad`](https://github.com/npm/cli/commit/a805a95ad8832ef5008671f4bd4c11b83e32e0f2) 1246 [npm.community#4227](https://npm.community/t/4227) 1247 Strip version info from pkg on E404. This improves the error messaging format. 1248 ([@larsgw](https://github.com/larsgw)) 1249 1250### DOCS 1251 1252* [`5d7633833`](https://github.com/npm/cli/commit/5d76338338621fd0b3d4f7914a51726d27569ee1) 1253 [#160](https://github.com/npm/cli/pull/160) 1254 Add `npm add` as alias to npm install in docs. 1255 ([@ahasall](https://github.com/ahasall)) 1256* [`489c2211c`](https://github.com/npm/cli/commit/489c2211c96a01d65df50fd57346c785bcc3efe6) 1257 [#162](https://github.com/npm/cli/pull/162) 1258 Fix link to RFC #10 in the changelog. 1259 ([@mansona](https://github.com/mansona)) 1260* [`433020ead`](https://github.com/npm/cli/commit/433020ead5251b562bc3b0f5f55341a5b8cc9023) 1261 [#135](https://github.com/npm/cli/pull/135) 1262 Describe exit codes in npm-audit docs. 1263 ([@emilis-tm](https://github.com/emilis-tm)) 1264 1265### DEPENDENCIES 1266 1267* [`ee6b6746b`](https://github.com/npm/cli/commit/ee6b6746b04f145dfe489af2d26667ac32ba0cef) 1268 [zkat/make-fetch-happen#29](https://github.com/zkat/make-fetch-happen/issues/29) 1269 `agent-base@4.2.1` 1270 ([@TooTallNate](https://github.com/TooTallNate)) 1271* [`2ce23baf5`](https://github.com/npm/cli/commit/2ce23baf53b1ce7d11b8efb80c598ddaf9cef9e7) 1272 `lock-verify@2.1.0`: 1273 Adds support for package aliases 1274 ([@zkat](https://github.com/zkat)) 1275* [`baaedbc6e`](https://github.com/npm/cli/commit/baaedbc6e2fc370d73b35e7721794719115507cc) 1276 `pacote@9.5.0`: 1277 Adds opts.before support 1278 ([@zkat](https://github.com/zkat)) 1279* [`57e771a03`](https://github.com/npm/cli/commit/57e771a032165d1e31e71d0ff7530442139c21a6) 1280 [#164](https://github.com/npm/cli/pull/164) 1281 `licensee@6.1.0` 1282 ([@kemitchell](https://github.com/kemitchell)) 1283* [`2b78288d4`](https://github.com/npm/cli/commit/2b78288d4accd10c1b7cc6c36bc28045f5634d91) 1284 add core to default inclusion tests in pack 1285 ([@Kat Marchán](https://github.com/Kat Marchán)) 1286* [`9b8b6513f`](https://github.com/npm/cli/commit/9b8b6513fbce92764b32a067322984985ff683fe) 1287 [npm.community#5382](https://npm.community/t/npm-pack-leaving-out-files-6-8-0-only/5382) 1288 `npm-packlist@1.4.1`: Fixes bug where `core/` directories were being suddenly excluded. 1289 ([@zkat](https://github.com/zkat)) 1290 1291## v6.8.0 (2019-02-07): 1292 1293This release includes an implementation of [RFC #10](https://github.com/npm/rfcs/blob/latest/implemented/0010-monorepo-subdirectory-declaration.md), documenting an optional field that can be used to specify 1294the directory path for a package within a monorepo. 1295 1296### NEW FEATURES 1297 1298* [`3663cdef2`](https://github.com/npm/cli/commit/3663cdef205fa9ba2c2830e5ef7ceeb31c30298c) 1299 [#140](https://github.com/npm/cli/pull/140) 1300 Update package.json docs to include repository.directory details. 1301 ([@greysteil](https://github.com/greysteil)) 1302 1303### BUGFIXES 1304 1305* [`550bf703a`](https://github.com/npm/cli/commit/550bf703ae3e31ba6a300658ae95b6937f67b68f) 1306 Add @types to ignore list to fix git clean -fd. 1307 ([@zkat](https://github.com/zkat)) 1308* [`cdb059293`](https://github.com/npm/cli/commit/cdb0592939d6256c80f7ec5a2b6251131a512a2a) 1309 [#144](https://github.com/npm/cli/pull/144) 1310 Fix common.npm callback arguments. 1311 ([@larsgw](https://github.com/larsgw)) 1312* [`25573e9b9`](https://github.com/npm/cli/commit/25573e9b9d5d26261c68d453f06db5b3b1cd6789) 1313 [npm.community#4770](https://npm.community/t/https://npm.community/t/4770) 1314 Show installed but unmet peer deps. 1315 ([@larsgw](https://github.com/larsgw)) 1316* [`ce2c4bd1a`](https://github.com/npm/cli/commit/ce2c4bd1a2ce7ac1727a4ca9a350b743a2e27b2a) 1317 [#149](https://github.com/npm/cli/pull/149) 1318 Use figgy-config to make sure extra opts are there. 1319 ([@zkat](https://github.com/zkat)) 1320* [`3c22d1a35`](https://github.com/npm/cli/commit/3c22d1a35878f73c0af8ea5968b962a85a1a9b84) 1321 [npm.community#5101](https://npm.community/t/npm-6-6-0-breaks-access-to-ls-collaborators/5101) 1322 Fix `ls-collaborators` access error for non-scoped case. 1323 ([@zkat](https://github.com/zkat)) 1324* [`d5137091d`](https://github.com/npm/cli/commit/d5137091dd695a2980f7ade85fdc56b2421ff677) 1325 [npm.community#754](https://npm.community/t/npm-install-for-package-with-local-dependency-fails/754) 1326 Fix issue with sub-folder local references. 1327 ([@iarna](https://github.com/iarna)) 1328 ([@jhecking](https://github.com/jhecking)) 1329 1330### DEPENDENCY BUMPS 1331 1332* [`d72141080`](https://github.com/npm/cli/commit/d72141080ec8fcf35bcc5650245efbe649de053e) 1333 `npm-registry-couchapp@2.7.1` 1334 ([@zkat](https://github.com/zkat)) 1335* [`671cad1b1`](https://github.com/npm/cli/commit/671cad1b18239d540da246d6f78de45d9f784396) 1336 `npm-registry-fetch@3.9.0`: 1337 Make sure publishing with legacy username:password `_auth` works again. 1338 ([@zkat](https://github.com/zkat)) 1339* [`95ca1aef4`](https://github.com/npm/cli/commit/95ca1aef4077c8e68d9f4dce37f6ba49b591c4ca) 1340 `pacote@9.4.1` 1341 ([@aeschright](https://github.com/aeschright)) 1342* [`322fef403`](https://github.com/npm/cli/commit/322fef40376e71cd100159dc914e7ca89faae327) 1343 `normalize-package-data@2.5.0` 1344 ([@aeschright](https://github.com/aeschright)) 1345* [`32d34c0da`](https://github.com/npm/cli/commit/32d34c0da4f393a74697297667eb9226155ecc6b) 1346 `npm-packlist@1.3.0` 1347 ([@aeschright](https://github.com/aeschright)) 1348* [`338571cf0`](https://github.com/npm/cli/commit/338571cf0bd3a1e2ea800464d57581932ff0fb11) 1349 `read-package-tree@5.2.2` 1350 ([@zkat](https://github.com/zkat)) 1351 1352### MISC 1353 1354* [`89b23a5f7`](https://github.com/npm/cli/commit/89b23a5f7b0ccdcdda1d7d4d3eafb6903156d186) 1355 [#120](https://github.com/npm/cli/pull/120) 1356 Use `const` in lib/fetch-package-metadata.md. 1357 ([@watilde](https://github.com/watilde)) 1358* [`4970d553c`](https://github.com/npm/cli/commit/4970d553c0ea66128931d118469fd31c87cc7986) 1359 [#126](https://github.com/npm/cli/pull/126) 1360 Replace ronn with marked-man in `.npmignore`. 1361 ([@watilde](https://github.com/watilde)) 1362* [`d9b6090dc`](https://github.com/npm/cli/commit/d9b6090dc26cd0fded18b4f80248cff3e51bb185) 1363 [#138](https://github.com/npm/cli/pull/138) 1364 Reduce work to test if executable ends with a 'g'. 1365 ([@elidoran](https://github.com/elidoran)) 1366 ([@larsgw](https://github.com/larsgw)) 1367 1368## v6.7.0 (2019-01-23): 1369 1370Hey y'all! This is a quick hotfix release that includes some important fixes to 1371`npm@6.6.0` related to the large rewrite/refactor. We're tagging it as a feature 1372release because the changes involve some minor new features, and semver is 1373semver, but there's nothing major here. 1374 1375### NEW FEATURES 1376 1377* [`50463f58b`](https://github.com/npm/cli/commit/50463f58b4b70180a85d6d8c10fcf50d8970ef5e) 1378 Improve usage errors to `npm org` commands and add optional filtering to `npm 1379 org ls` subcommand. 1380 ([@zkat](https://github.com/zkat)) 1381 1382### BUGFIXES 1383 1384* [`4027070b0`](https://github.com/npm/cli/commit/4027070b03be3bdae2515f2291de89b91f901df9) 1385 Fix default usage printout for `npm org` so you actually see how it's supposed 1386 to be used. 1387 ([@zkat](https://github.com/zkat)) 1388* [`cfea6ea5b`](https://github.com/npm/cli/commit/cfea6ea5b67ec5e4ec57e3a9cb8c82d018cb5476) 1389 fix default usage message for npm hook 1390 ([@zkat](https://github.com/zkat)) 1391 1392### DOCS 1393 1394* [`e959e1421`](https://github.com/npm/cli/commit/e959e14217d751ddb295565fd75cc81de1ee0d5b) 1395 Add manpage for `npm org` command. 1396 ([@zkat](https://github.com/zkat)) 1397 1398### DEPENDENCY BUMPS 1399 1400* [`8543fc357`](https://github.com/npm/cli/commit/8543fc3576f64e91f7946d4c56a5ffb045b55156) 1401 `pacote@9.4.0`: Fall back to "fullfat" packuments on ETARGET errors. This will 1402 make it so that, when a package is published but the corgi follower hasn't 1403 caught up, users can still install a freshly-published package. 1404 ([@zkat](https://github.com/zkat)) 1405* [`75475043b`](https://github.com/npm/cli/commit/75475043b03a254b2e7db2c04c3f0baea31d8dc5) 1406 [npm.community#4752](https://npm.community/t/npm-6-6-0-broke-authentication-with-npm-registry-couchapp/4752) 1407 `libnpmpublish@1.1.1`: Fixes auth error for username/password legacy authentication. 1408 ([@sreeramjayan](https://github.com/sreeramjayan)) 1409* [`0af8c00ac`](https://github.com/npm/cli/commit/0af8c00acb01849362ffca25b567cc62447c7175) 1410 [npm.community#4746](https://npm.community/t/npm-6-6-0-release-breaking-docker-npm-ci-commands/4746) 1411 `libcipm@3.0.3`: Fixes issue with "cannot run in wd" errors for run-scripts. 1412 ([@zkat](https://github.com/zkat)) 1413* [`5a7962e46`](https://github.com/npm/cli/commit/5a7962e46f582c6bd91784b0ddc941ed45e9f802) 1414 `write-file-atomic@2.4.2`: 1415 Fixes issues with leaking `signal-exit` instances and file descriptors. 1416 ([@iarna](https://github.com/iarna)) 1417 1418## v6.6.0 (2019-01-17): 1419 1420### REFACTORING OUT npm-REGISTRY-CLIENT 1421 1422Today is an auspicious day! This release marks the end of a massive internal 1423refactor to npm that means we finally got rid of the legacy 1424[`npm-registry-client`](https://npm.im/npm-registry-client) in favor of the 1425shiny, new, `window.fetch`-like 1426[`npm-registry-fetch`](https://npm.im/npm-registry-fetch). 1427 1428Now, the installer had already done most of this work with the release of 1429`npm@5`, but it turns out _every other command_ still used the legacy client. 1430This release updates all of those commands to use the new client, and while 1431we're at it, adds a few extra goodies: 1432 1433* All OTP-requiring commands will now **prompt**. `--otp` is no longer required for `dist-tag`, `access`, et al. 1434* We're starting to integrate a new config system which will eventually get extracted into a standalone package. 1435* We now use [`libnpm`](https://npm.im/libnpm) for the API functionality of a lot of our commands! That means you can install a library if you want to write your own tooling around them. 1436* There's now an `npm org` command for managing users in your org. 1437* [`pacote`](https://npm.im/pacote) now consumes npm-style configurations, instead of its own naming for various config vars. This will make it easier to load npm configs using `libnpm.config` and hand them directly to `pacote`. 1438 1439There's too many commits to list all of them here, so check out the PR if you're 1440curious about details: 1441 1442* [`c5af34c05`](https://github.com/npm/cli/commit/c5af34c05fd569aecd11f18d6d0ddeac3970b253) 1443 [npm-registry-client@REMOVED](https://www.youtube.com/watch\?v\=kPIdRJlzERo) 1444 ([@zkat](https://github.com/zkat)) 1445* [`4cca9cb90`](https://github.com/npm/cli/commit/4cca9cb9042c0eeb743377e8f1ae1c07733df43f) 1446 [`ad67461dc`](https://github.com/npm/cli/commit/ad67461dc3a73d5ae6569fdbee44c67e1daf86e7) 1447 [`77625f9e2`](https://github.com/npm/cli/commit/77625f9e20d4285b7726b3bf3ebc10cb21c638f0) 1448 [`6e922aefb`](https://github.com/npm/cli/commit/6e922aefbb4634bbd77ed3b143e0765d63afc7f9) 1449 [`584613ea8`](https://github.com/npm/cli/commit/584613ea8ff94b927db4957e5647504b30ca2b1f) 1450 [`64de4ebf0`](https://github.com/npm/cli/commit/64de4ebf019b217179039124c6621e74651e4d27) 1451 [`6cd87d1a9`](https://github.com/npm/cli/commit/6cd87d1a9bb90e795f9891ea4db384435f4a8930) 1452 [`2786834c0`](https://github.com/npm/cli/commit/2786834c0257b8bb1bbb115f1ce7060abaab2e17) 1453 [`514558e09`](https://github.com/npm/cli/commit/514558e094460fd0284a759c13965b685133b3fe) 1454 [`dec07ebe3`](https://github.com/npm/cli/commit/dec07ebe3312245f6421c6e523660be4973ae8c2) 1455 [`084741913`](https://github.com/npm/cli/commit/084741913c4fdb396e589abf3440b4be3aa0b67e) 1456 [`45aff0e02`](https://github.com/npm/cli/commit/45aff0e02251785a85e56eafacf9efaeac6f92ae) 1457 [`846ddcc44`](https://github.com/npm/cli/commit/846ddcc44538f2d9a51ac79405010dfe97fdcdeb) 1458 [`8971ba1b9`](https://github.com/npm/cli/commit/8971ba1b953d4f05ff5094f1822b91526282edd8) 1459 [`99156e081`](https://github.com/npm/cli/commit/99156e081a07516d6c970685bc3d858f89dc4f9c) 1460 [`ab2155306`](https://github.com/npm/cli/commit/ab215530674d7f6123c9572d0ad4ca9e9b5fb184) 1461 [`b37a66542`](https://github.com/npm/cli/commit/b37a66542ca2879069b2acd338b1904de71b7f40) 1462 [`d2af0777a`](https://github.com/npm/cli/commit/d2af0777ac179ff5009dbbf0354a4a84f151b60f) 1463 [`e0b4c6880`](https://github.com/npm/cli/commit/e0b4c6880504fa2e8491c2fbd098efcb2e496849) 1464 [`ff72350b4`](https://github.com/npm/cli/commit/ff72350b4c56d65e4a92671d86a33080bf3c2ea5) 1465 [`6ed943303`](https://github.com/npm/cli/commit/6ed943303ce7a267ddb26aa25caa035f832895dd) 1466 [`90a069e7d`](https://github.com/npm/cli/commit/90a069e7d4646682211f4cabe289c306ee1d5397) 1467 [`b24ed5fdc`](https://github.com/npm/cli/commit/b24ed5fdc3a4395628465ae5273bad54eea274c8) 1468 [`ec9fcc14f`](https://github.com/npm/cli/commit/ec9fcc14f4e0e2f3967e2fd6ad8b8433076393cb) 1469 [`8a56fa39e`](https://github.com/npm/cli/commit/8a56fa39e61136da45565447fe201a57f04ad4cd) 1470 [`41d19e18f`](https://github.com/npm/cli/commit/41d19e18f769c6f0acfdffbdb01d12bf332908ce) 1471 [`125ff9551`](https://github.com/npm/cli/commit/125ff9551595dda9dab2edaef10f4c73ae8e1433) 1472 [`1c3b226ff`](https://github.com/npm/cli/commit/1c3b226ff37159c426e855e83c8f6c361603901d) 1473 [`3c0a7b06b`](https://github.com/npm/cli/commit/3c0a7b06b6473fe068fc8ae8466c07a177975b87) 1474 [`08fcb3f0f`](https://github.com/npm/cli/commit/08fcb3f0f26e025702b35253ed70a527ab69977f) 1475 [`c8135d97a`](https://github.com/npm/cli/commit/c8135d97a424b38363dc4530c45e4583471e9849) 1476 [`ae936f22c`](https://github.com/npm/cli/commit/ae936f22ce80614287f2769e9aaa9a155f03cc15) 1477 [#2](https://github.com/npm/cli/pull/2) 1478 Move rest of commands to `npm-registry-fetch` and use [`figgy-pudding`](https://npm.im/figgy-pudding) for configs. 1479 ([@zkat](https://github.com/zkat)) 1480 1481### NEW FEATURES 1482 1483* [`02c837e01`](https://github.com/npm/cli/commit/02c837e01a71a26f37cbd5a09be89df8a9ce01da) 1484 [#106](https://github.com/npm/cli/pull/106) 1485 Make `npm dist-tags` the same as `npm dist-tag ls`. 1486 ([@isaacs](https://github.com/isaacs)) 1487* [`1065a7809`](https://github.com/npm/cli/commit/1065a7809161fd4dc23e96b642019fc842fdacf2) 1488 [#65](https://github.com/npm/cli/pull/65) 1489 Add support for `IBM i`. 1490 ([@dmabupt](https://github.com/dmabupt)) 1491* [`a22e6f5fc`](https://github.com/npm/cli/commit/a22e6f5fc3e91350d3c64dcc88eabbe0efbca759) 1492 [#131](https://github.com/npm/cli/pull/131) 1493 Update profile to support new npm-profile API. 1494 ([@zkat](https://github.com/zkat)) 1495 1496### BUGFIXES 1497 1498* [`890a74458`](https://github.com/npm/cli/commit/890a74458dd4a55e2d85f3eba9dbf125affa4206) 1499 [npm.community#3278](https://npm.community/t/3278) 1500 Fix support for passing git binary path config with `--git`. 1501 ([@larsgw](https://github.com/larsgw)) 1502* [`90e55a143`](https://github.com/npm/cli/commit/90e55a143ed1de8678d65c17bc3c2b103a15ddac) 1503 [npm.community#2713](https://npm.community/t/npx-envinfo-preset-jest-fails-on-windows-with-a-stack-trace/2713) 1504 Check for `npm.config`'s existence in `error-handler.js` to prevent weird 1505 errors when failures happen before config object is loaded. 1506 ([@BeniCheni](https://github.com/BeniCheni)) 1507* [`134207174`](https://github.com/npm/cli/commit/134207174652e1eb6d7b0f44fd9858a0b6a0cd6c) 1508 [npm.community#2569](https://npm.community/t/2569) 1509 Fix checking for optional dependencies. 1510 ([@larsgw](https://github.com/larsgw)) 1511* [`7a2f6b05d`](https://github.com/npm/cli/commit/7a2f6b05d27f3bcf47a48230db62e86afa41c9d3) 1512 [npm.community#4172](https://npm.community/t/4172) 1513 Remove tink experiments. 1514 ([@larsgw](https://github.com/larsgw)) 1515* [`c5b6056b6`](https://github.com/npm/cli/commit/c5b6056b6b35eefb81ae5fb00a5c7681c5318c22) 1516 [#123](https://github.com/npm/cli/pull/123) 1517 Handle git branch references correctly. 1518 ([@johanneswuerbach](https://github.com/johanneswuerbach)) 1519* [`f58b43ef2`](https://github.com/npm/cli/commit/f58b43ef2c5e3dea2094340a0cf264b2d11a5da4) 1520 [npm.community#3983](https://npm.community/t/npm-audit-error-messaging-update-for-401s/3983) 1521 Report any errors above 400 as potentially not supporting audit. 1522 ([@zkat](https://github.com/zkat)) 1523* [`a5c9e6f35`](https://github.com/npm/cli/commit/a5c9e6f35a591a6e2d4b6ace5c01bc03f2b75fdc) 1524 [#124](https://github.com/npm/cli/pull/124) 1525 Set default homepage to an empty string. 1526 ([@anchnk](https://github.com/anchnk)) 1527* [`5d076351d`](https://github.com/npm/cli/commit/5d076351d7ec1d3585942a9289548166a7fbbd4c) 1528 [npm.community#4054](https://npm.community/t/4054) 1529 Fix npm-prefix description. 1530 ([@larsgw](https://github.com/larsgw)) 1531 1532### DOCS 1533 1534* [`31a7274b7`](https://github.com/npm/cli/commit/31a7274b70de18b24e7bee51daa22cc7cbb6141c) 1535 [#71](https://github.com/npm/cli/pull/71) 1536 Fix typo in npm-token documentation. 1537 ([@GeorgeTaveras1231](https://github.com/GeorgeTaveras1231)) 1538* [`2401b7592`](https://github.com/npm/cli/commit/2401b7592c6ee114e6db7077ebf8c072b7bfe427) 1539 Correct docs for fake-registry interface. 1540 ([@iarna](https://github.com/iarna)) 1541 1542### DEPENDENCIES 1543 1544* [`9cefcdc1d`](https://github.com/npm/cli/commit/9cefcdc1d2289b56f9164d14d7e499e115cfeaee) 1545 `npm-registry-fetch@3.8.0` 1546 ([@zkat](https://github.com/zkat)) 1547* [`1c769c9b3`](https://github.com/npm/cli/commit/1c769c9b3e431d324c1a5b6dd10e1fddb5cb88c7) 1548 `pacote@9.1.0` 1549 ([@zkat](https://github.com/zkat)) 1550* [`f3bc5539b`](https://github.com/npm/cli/commit/f3bc5539b30446500abcc3873781b2c717f8e22c) 1551 `figgy-pudding@3.5.1` 1552 ([@zkat](https://github.com/zkat)) 1553* [`bf7199d3c`](https://github.com/npm/cli/commit/bf7199d3cbf50545da1ebd30d28f0a6ed5444a00) 1554 `npm-profile@4.0.1` 1555 ([@zkat](https://github.com/zkat)) 1556* [`118c50496`](https://github.com/npm/cli/commit/118c50496c01231cab3821ae623be6df89cb0a32) 1557 `semver@5.5.1` 1558 ([@isaacs](https://github.com/isaacs)) 1559* [`eab4df925`](https://github.com/npm/cli/commit/eab4df9250e9169c694b3f6c287d2932bf5e08fb) 1560 `libcipm@3.0.2` 1561 ([@zkat](https://github.com/zkat)) 1562* [`b86e51573`](https://github.com/npm/cli/commit/b86e515734faf433dc6c457c36c1de52795aa870) 1563 `libnpm@1.4.0` 1564 ([@zkat](https://github.com/zkat)) 1565* [`56fffbff2`](https://github.com/npm/cli/commit/56fffbff27fe2fae8bef27d946755789ef0d89bd) 1566 `get-stream@4.1.0` 1567 ([@zkat](https://github.com/zkat)) 1568* [`df972e948`](https://github.com/npm/cli/commit/df972e94868050b5aa42ac18b527fd929e1de9e4) 1569 npm-profile@REMOVED 1570 ([@zkat](https://github.com/zkat)) 1571* [`32c73bf0e`](https://github.com/npm/cli/commit/32c73bf0e3f0441d0c7c940292235d4b93aa87e2) 1572 `libnpm@2.0.1` 1573 ([@zkat](https://github.com/zkat)) 1574* [`569491b80`](https://github.com/npm/cli/commit/569491b8042f939dc13986b6adb2a0a260f95b63) 1575 `licensee@5.0.0` 1576 ([@zkat](https://github.com/zkat)) 1577* [`a3ba0ccf1`](https://github.com/npm/cli/commit/a3ba0ccf1fa86aec56b1ad49883abf28c1f56b3c) 1578 move rimraf to prod deps 1579 ([@zkat](https://github.com/zkat)) 1580* [`f63a0d6cf`](https://github.com/npm/cli/commit/f63a0d6cf0b7db3dcc80e72e1383c3df723c8119) 1581 `spdx-license-ids@3.0.3`: 1582 Ref: https://github.com/npm/cli/pull/121 1583 ([@zkat](https://github.com/zkat)) 1584* [`f350e714f`](https://github.com/npm/cli/commit/f350e714f66a77f71a7ebe17daeea2ea98179a1a) 1585 `aproba@2.0.0` 1586 ([@aeschright](https://github.com/aeschright)) 1587* [`a67e4d8b2`](https://github.com/npm/cli/commit/a67e4d8b214e58ede037c3854961acb33fd889da) 1588 `byte-size@5.0.1` 1589 ([@aeschright](https://github.com/aeschright)) 1590* [`8bea4efa3`](https://github.com/npm/cli/commit/8bea4efa34857c4e547904b3630dd442def241de) 1591 `cacache@11.3.2` 1592 ([@aeschright](https://github.com/aeschright)) 1593* [`9d4776836`](https://github.com/npm/cli/commit/9d4776836a4eaa4b19701b4e4f00cd64578bf078) 1594 `chownr@1.1.1` 1595 ([@aeschright](https://github.com/aeschright)) 1596* [`70da139e9`](https://github.com/npm/cli/commit/70da139e97ed1660c216e2d9b3f9cfb986bfd4a4) 1597 `ci-info@2.0.0` 1598 ([@aeschright](https://github.com/aeschright)) 1599* [`bcdeddcc3`](https://github.com/npm/cli/commit/bcdeddcc3d4dc242f42404223dafe4afdc753b32) 1600 `cli-table3@0.5.1` 1601 ([@aeschright](https://github.com/aeschright)) 1602* [`63aab82c7`](https://github.com/npm/cli/commit/63aab82c7bfca4f16987cf4156ddebf8d150747c) 1603 `is-cidr@3.0.0` 1604 ([@aeschright](https://github.com/aeschright)) 1605* [`d522bd90c`](https://github.com/npm/cli/commit/d522bd90c3b0cb08518f249ae5b90bd609fff165) 1606 `JSONStream@1.3.5` 1607 ([@aeschright](https://github.com/aeschright)) 1608* [`2a59bfc79`](https://github.com/npm/cli/commit/2a59bfc7989bd5575d8cbba912977c6d1ba92567) 1609 `libnpmhook@5.0.2` 1610 ([@aeschright](https://github.com/aeschright)) 1611* [`66d60e394`](https://github.com/npm/cli/commit/66d60e394e5a96330f90e230505758f19a3643ac) 1612 `marked@0.6.0` 1613 ([@aeschright](https://github.com/aeschright)) 1614* [`8213def9a`](https://github.com/npm/cli/commit/8213def9aa9b6e702887e4f2ed7654943e1e4154) 1615 `npm-packlist@1.2.0` 1616 ([@aeschright](https://github.com/aeschright)) 1617* [`e4ffc6a2b`](https://github.com/npm/cli/commit/e4ffc6a2bfb8d0b7047cb6692030484760fc8c91) 1618 `unique-filename@1.1.1` 1619 ([@aeschright](https://github.com/aeschright)) 1620* [`09a5c2fab`](https://github.com/npm/cli/commit/09a5c2fabe0d1c00ec8c99f328f6d28a3495eb0b) 1621 `semver@5.6.0` 1622 ([@aeschright](https://github.com/aeschright)) 1623* [`740e79e17`](https://github.com/npm/cli/commit/740e79e17a78247f73349525043c9388ce94459a) 1624 `rimraf@2.6.3` 1625 ([@aeschright](https://github.com/aeschright)) 1626* [`455476c8d`](https://github.com/npm/cli/commit/455476c8d148ca83a4e030e96e93dcf1c7f0ff5f) 1627 `require-inject@1.4.4` 1628 ([@aeschright](https://github.com/aeschright)) 1629* [`3f40251c5`](https://github.com/npm/cli/commit/3f40251c5868feaacbcdbcb1360877ce76998f5e) 1630 `npm-pick-manifest@2.2.3` 1631 ([@aeschright](https://github.com/aeschright)) 1632* [`4ffa8a8e9`](https://github.com/npm/cli/commit/4ffa8a8e9e80e5562898dd76fe5a49f5694f38c8) 1633 `query-string@6.2.0` 1634 ([@aeschright](https://github.com/aeschright)) 1635* [`a0a0ca9ec`](https://github.com/npm/cli/commit/a0a0ca9ec2a962183d420fa751f4139969760f18) 1636 `pacote@9.3.0` 1637 ([@aeschright](https://github.com/aeschright)) 1638* [`5777ea8ad`](https://github.com/npm/cli/commit/5777ea8ad2058be3166a6dad2d31d2d393c9f778) 1639 `readable-stream@3.1.1` 1640 ([@aeschright](https://github.com/aeschright)) 1641* [`887e94386`](https://github.com/npm/cli/commit/887e94386f42cb59a5628e7762b3662d084b23c8) 1642 `lru-cache@4.1.5` 1643 ([@aeschright](https://github.com/aeschright)) 1644* [`41f15524c`](https://github.com/npm/cli/commit/41f15524c58c59d206c4b1d25ae9e0f22745213b) 1645 Updating semver docs. 1646 ([@aeschright](https://github.com/aeschright)) 1647* [`fb3bbb72d`](https://github.com/npm/cli/commit/fb3bbb72d448ac37a465b31233b21381917422f3) 1648 `npm-audit-report@1.3.2`: 1649 ([@melkikh](https://github.com/melkikh)) 1650 1651### TESTING 1652 1653* [`f1edffba9`](https://github.com/npm/cli/commit/f1edffba90ebd96cf88675d2e18ebc48954ba50e) 1654 Modernize maketest script. 1655 ([@iarna](https://github.com/iarna)) 1656* [`ae263473d`](https://github.com/npm/cli/commit/ae263473d92a896b482830d4019a04b5dbd1e9d7) 1657 maketest: Use promise based example common.npm call. 1658 ([@iarna](https://github.com/iarna)) 1659* [`d9970da5e`](https://github.com/npm/cli/commit/d9970da5ee97a354eab01cbf16f9101693a15d2d) 1660 maketest: Use newEnv for env production. 1661 ([@iarna](https://github.com/iarna)) 1662 1663### MISCELLANEOUS 1664 1665* [`c665f35aa`](https://github.com/npm/cli/commit/c665f35aacdb8afdbe35f3dd7ccb62f55ff6b896) 1666 [#119](https://github.com/npm/cli/pull/119) 1667 Replace var with const/let in lib/repo.js. 1668 ([@watilde](https://github.com/watilde)) 1669* [`46639ba9f`](https://github.com/npm/cli/commit/46639ba9f04ea729502f1af28b02eb67fb6dcb66) 1670 Update package-lock.json for https tarball URLs 1671 ([@aeschright](https://github.com/aeschright)) 1672 1673## v6.5.0 (2018-11-28): 1674 1675### NEW FEATURES 1676 1677* [`fc1a8d185`](https://github.com/npm/cli/commit/fc1a8d185fc678cdf3784d9df9eef9094e0b2dec) 1678 Backronym `npm ci` to `npm clean-install`. 1679 ([@zkat](https://github.com/zkat)) 1680* [`4be51a9cc`](https://github.com/npm/cli/commit/4be51a9cc65635bb26fa4ce62233f26e0104bc20) 1681 [#81](https://github.com/npm/cli/pull/81) 1682 Adds 'Homepage' to outdated --long output. 1683 ([@jbottigliero](https://github.com/jbottigliero)) 1684 1685### BUGFIXES 1686 1687* [`89652cb9b`](https://github.com/npm/cli/commit/89652cb9b810f929f5586fc90cc6794d076603fb) 1688 [npm.community#1661](https://npm.community/t/1661) 1689 Fix sign-git-commit options. They were previously totally wrong. 1690 ([@zkat](https://github.com/zkat)) 1691* [`414f2d1a1`](https://github.com/npm/cli/commit/414f2d1a1bdffc02ed31ebb48a43216f284c21d4) 1692 [npm.community#1742](https://npm.community/t/npm-audit-making-non-rfc-compliant-requests-to-server-resulting-in-400-bad-request-pr-with-fix/1742) 1693 Set lowercase headers for npm audit requests. 1694 ([@maartenba](https://github.com/maartenba)) 1695* [`a34246baf`](https://github.com/npm/cli/commit/a34246bafe73218dc9e3090df9ee800451db2c7d) 1696 [#75](https://github.com/npm/cli/pull/75) 1697 Fix `npm edit` handling of scoped packages. 1698 ([@larsgw](https://github.com/larsgw)) 1699* [`d3e8a7c72`](https://github.com/npm/cli/commit/d3e8a7c7240dd25379a5bcad324a367c58733c73) 1700 [npm.community#2303](https://npm.community/t/npm-ci-logs-success-to-stderr/2303) 1701 Make summary output for `npm ci` go to `stdout`, not `stderr`. 1702 ([@alopezsanchez](https://github.com/alopezsanchez)) 1703* [`71d8fb4a9`](https://github.com/npm/cli/commit/71d8fb4a94d65e1855f6d0c5f2ad2b7c3202e3c4) 1704 [npm.community#1377](https://npm.community/t/unhelpful-error-message-when-publishing-without-logging-in-error-eperm-operation-not-permitted-unlink/1377/3) 1705 Close the file descriptor during publish if exiting upload via an error. This 1706 will prevent strange error messages when the upload fails and make sure 1707 cleanup happens correctly. 1708 ([@macdja38](https://github.com/macdja38)) 1709 1710### DOCS UPDATES 1711 1712* [`b1a8729c8`](https://github.com/npm/cli/commit/b1a8729c80175243fbbeecd164e9ddd378a09a50) 1713 [#60](https://github.com/npm/cli/pull/60) 1714 Mention --otp flag when prompting for OTP. 1715 ([@bakkot](https://github.com/bakkot)) 1716* [`bcae4ea81`](https://github.com/npm/cli/commit/bcae4ea8173e489a76cc226bbd30dd9eabe21ec6) 1717 [#64](https://github.com/npm/cli/pull/64) 1718 Clarify that git dependencies use the default branch, not just `master`. 1719 ([@zckrs](https://github.com/zckrs)) 1720* [`15da82690`](https://github.com/npm/cli/commit/15da8269032bf509ade3252978e934f2a61d4499) 1721 [#72](https://github.com/npm/cli/pull/72) 1722 `bash_completion.d` dir is sometimes found in `/etc` not `/usr/local`. 1723 ([@RobertKielty](https://github.com/RobertKielty)) 1724* [`8a6ecc793`](https://github.com/npm/cli/commit/8a6ecc7936dae2f51638397ff5a1d35cccda5495) 1725 [#74](https://github.com/npm/cli/pull/74) 1726 Update OTP documentation for `dist-tag add` to clarify `--otp` is needed right 1727 now. 1728 ([@scotttrinh](https://github.com/scotttrinh)) 1729* [`dcc03ec85`](https://github.com/npm/cli/commit/dcc03ec858bddd7aa2173b5a86b55c1c2385a2a3) 1730 [#82](https://github.com/npm/cli/pull/82) 1731 Note that `prepare` runs when installing git dependencies. 1732 ([@seishun](https://github.com/seishun)) 1733* [`a91a470b7`](https://github.com/npm/cli/commit/a91a470b71e08ccf6a75d4fb8c9937789fa8d067) 1734 [#83](https://github.com/npm/cli/pull/83) 1735 Specify that --dry-run isn't available in older versions of npm publish. 1736 ([@kjin](https://github.com/kjin)) 1737* [`1b2fabcce`](https://github.com/npm/cli/commit/1b2fabccede37242233755961434c52536224de5) 1738 [#96](https://github.com/npm/cli/pull/96) 1739 Fix inline code tag issue in docs. 1740 ([@midare](https://github.com/midare)) 1741* [`6cc70cc19`](https://github.com/npm/cli/commit/6cc70cc1977e58a3e1ea48e660ffc6b46b390e59) 1742 [#68](https://github.com/npm/cli/pull/68) 1743 Add semver link and a note on empty string format to `deprecate` doc. 1744 ([@neverett](https://github.com/neverett)) 1745* [`61dbbb7c3`](https://github.com/npm/cli/commit/61dbbb7c3474834031bce88c423850047e8131dc) 1746 Fix semver docs after version update. 1747 ([@zkat](https://github.com/zkat)) 1748* [`4acd45a3d`](https://github.com/npm/cli/commit/4acd45a3d0ce92f9999446226fe7dfb89a90ba2e) 1749 [#78](https://github.com/npm/cli/pull/78) 1750 Correct spelling across various docs. 1751 ([@hugovk](https://github.com/hugovk)) 1752 1753### DEPENDENCIES 1754 1755* [`4f761283e`](https://github.com/npm/cli/commit/4f761283e8896d0ceb5934779005646463a030e8) 1756 `figgy-pudding@3.5.1` 1757 ([@zkat](https://github.com/zkat)) 1758* [`3706db0bc`](https://github.com/npm/cli/commit/3706db0bcbc306d167bb902362e7f6962f2fe1a1) 1759 [npm.community#1764](https://npm.community/t/crash-invalid-config-key-requested-error/1764) 1760 `ssri@6.0.1` 1761 ([@zkat](https://github.com/zkat)) 1762* [`83c2b117d`](https://github.com/npm/cli/commit/83c2b117d0b760d0ea8d667e5e4bdfa6a7a7a8f6) 1763 `bluebird@3.5.2` 1764 ([@petkaantonov](https://github.com/petkaantonov)) 1765* [`2702f46bd`](https://github.com/npm/cli/commit/2702f46bd7284fb303ca2119d23c52536811d705) 1766 `ci-info@1.5.1` 1767 ([@watson](https://github.com/watson)) 1768* [`4db6c3898`](https://github.com/npm/cli/commit/4db6c3898b07100e3a324e4aae50c2fab4b93a04) 1769 `config-chain@1.1.1`:2 1770 ([@dawsbot](https://github.com/dawbot)) 1771* [`70bee4f69`](https://github.com/npm/cli/commit/70bee4f69bb4ce4e18c48582fe2b48d8b4aba566) 1772 `glob@7.1.3` 1773 ([@isaacs](https://github.com/isaacs)) 1774* [`e469fd6be`](https://github.com/npm/cli/commit/e469fd6be95333dcaa7cf377ca3620994ca8d0de) 1775 `opener@1.5.1`: 1776 Fix browser opening under Windows Subsystem for Linux (WSL). 1777 ([@thijsputman](https://github.com/thijsputman)) 1778* [`03840dced`](https://github.com/npm/cli/commit/03840dced865abdca6e6449ea030962e5b19db0c) 1779 `semver@5.5.1` 1780 ([@iarna](https://github.com/iarna)) 1781* [`161dc0b41`](https://github.com/npm/cli/commit/161dc0b4177e76306a0e3b8660b3b496cc3db83b) 1782 `bluebird@3.5.3` 1783 ([@petkaantonov](https://github.com/petkaantonov)) 1784* [`bb6f94395`](https://github.com/npm/cli/commit/bb6f94395491576ec42996ff6665df225f6b4377) 1785 `graceful-fs@4.1.1`:5 1786 ([@isaacs](https://github.com/isaacs)) 1787* [`43b1f4c91`](https://github.com/npm/cli/commit/43b1f4c91fa1d7b3ebb6aa2d960085e5f3ac7607) 1788 `tar@4.4.8` 1789 ([@isaacs](https://github.com/isaacs)) 1790* [`ab62afcc4`](https://github.com/npm/cli/commit/ab62afcc472de82c479bf91f560a0bbd6a233c80) 1791 `npm-packlist@1.1.1`:2 1792 ([@isaacs](https://github.com/isaacs)) 1793* [`027f06be3`](https://github.com/npm/cli/commit/027f06be35bb09f390e46fcd2b8182539939d1f7) 1794 `ci-info@1.6.0` 1795 ([@watson](https://github.com/watson)) 1796 1797### MISCELLANEOUS 1798 1799* [`27217dae8`](https://github.com/npm/cli/commit/27217dae8adbc577ee9cb323b7cfe9c6b2493aca) 1800 [#70](https://github.com/npm/cli/pull/70) 1801 Automatically audit dependency licenses for npm itself. 1802 ([@kemitchell](https://github.com/kemitchell)) 1803 1804## v6.4.1 (2018-08-22): 1805 1806### BUGFIXES 1807 1808* [`4bd40f543`](https://github.com/npm/cli/commit/4bd40f543dc89f0721020e7d0bb3497300d74818) 1809 [#42](https://github.com/npm/cli/pull/42) 1810 Prevent blowing up on malformed responses from the `npm audit` endpoint, such 1811 as with third-party registries. 1812 ([@framp](https://github.com/framp)) 1813* [`0e576f0aa`](https://github.com/npm/cli/commit/0e576f0aa6ea02653d948c10f29102a2d4a31944) 1814 [#46](https://github.com/npm/cli/pull/46) 1815 Fix `NO_PROXY` support by renaming npm-side config to `--noproxy`. The 1816 environment variable should still work. 1817 ([@SneakyFish5](https://github.com/SneakyFish5)) 1818* [`d8e811d6a`](https://github.com/npm/cli/commit/d8e811d6adf3d87474982cb831c11316ac725605) 1819 [#33](https://github.com/npm/cli/pull/33) 1820 Disable `update-notifier` checks when a CI environment is detected. 1821 ([@Sibiraj-S](https://github.com/Sibiraj-S)) 1822* [`1bc5b8cea`](https://github.com/npm/cli/commit/1bc5b8ceabc86bfe4777732f25ffef0f3de81bd1) 1823 [#47](https://github.com/npm/cli/pull/47) 1824 Fix issue where `postpack` scripts would break if `pack` was used with 1825 `--dry-run`. 1826 ([@larsgw](https://github.com/larsgw)) 1827 1828### DEPENDENCY BUMPS 1829 1830* [`4c57316d5`](https://github.com/npm/cli/commit/4c57316d5633e940105fa545b52d8fbfd2eb9f75) 1831 `figgy-pudding@3.4.1` 1832 ([@zkat](https://github.com/zkat)) 1833* [`85f4d7905`](https://github.com/npm/cli/commit/85f4d79059865d5267f3516b6cdbc746012202c6) 1834 `cacache@11.2.0` 1835 ([@zkat](https://github.com/zkat)) 1836* [`d20ac242a`](https://github.com/npm/cli/commit/d20ac242aeb44aa3581c65c052802a02d5eb22f3) 1837 `npm-packlist@1.1.11`: 1838 No real changes in npm-packlist, but npm-bundled included a 1839 circular dependency fix, as well as adding a proper LICENSE file. 1840 ([@isaacs](https://github.com/isaacs)) 1841* [`e8d5f4418`](https://github.com/npm/cli/commit/e8d5f441821553a31fc8cd751670663699d2c8ce) 1842 [npm.community#632](https://npm.community/t/using-npm-ci-does-not-run-prepare-script-for-git-modules/632) 1843 `libcipm@2.0.2`: 1844 Fixes issue where `npm ci` wasn't running the `prepare` lifecycle script when 1845 installing git dependencies 1846 ([@edahlseng](https://github.com/edahlseng)) 1847* [`a5e6f78e9`](https://github.com/npm/cli/commit/a5e6f78e916873f7d18639ebdb8abd20479615a9) 1848 `JSONStream@1.3.4`: 1849 Fixes memory leak problem when streaming large files (like legacy npm search). 1850 ([@daern91](https://github.com/daern91)) 1851* [`3b940331d`](https://github.com/npm/cli/commit/3b940331dcccfa67f92366adb7ffd9ecf7673a9a) 1852 [npm.community#1042](https://npm.community/t/3-path-variables-are-assigned-to-child-process-launched-by-npm/1042) 1853 `npm-lifecycle@2.1.0`: 1854 Fixes issue for Windows user where multiple `Path`/`PATH` variables were being 1855 added to the environment and breaking things in all sorts of fun and 1856 interesting ways. 1857 ([@JimiC](https://github.com/JimiC)) 1858* [`d612d2ce8`](https://github.com/npm/cli/commit/d612d2ce8fab72026f344f125539ecbf3746af9a) 1859 `npm-registry-client@8.6.0` 1860 ([@iarna](https://github.com/iarna)) 1861* [`1f6ba1cb1`](https://github.com/npm/cli/commit/1f6ba1cb174590c1f5d2b00e2ca238dfa39d507a) 1862 `opener@1.5.0` 1863 ([@domenic](https://github.com/domenic)) 1864* [`37b8f405f`](https://github.com/npm/cli/commit/37b8f405f35c861b7beeed56f71ad20b0bf87889) 1865 `request@2.88.0` 1866 ([@mikeal](https://github.com/mikeal)) 1867* [`bb91a2a14`](https://github.com/npm/cli/commit/bb91a2a14562e77769057f1b6d06384be6d6bf7f) 1868 `tacks@1.2.7` 1869 ([@iarna](https://github.com/iarna)) 1870* [`30bc9900a`](https://github.com/npm/cli/commit/30bc9900ae79c80bf0bdee0ae6372da6f668124c) 1871 `ci-info@1.4.0`: 1872 Adds support for two more CI services 1873 ([@watson](https://github.com/watson)) 1874* [`1d2fa4ddd`](https://github.com/npm/cli/commit/1d2fa4dddcab8facfee92096cc24b299387f3182) 1875 `marked@0.5.0` 1876 ([@joshbruce](https://github.com/joshbruce)) 1877 1878### DOCUMENTATION 1879 1880* [`08ecde292`](https://github.com/npm/cli/commit/08ecde2928f8c89a2fdaa800ae845103750b9327) 1881 [#54](https://github.com/npm/cli/pull/54) 1882 Mention registry terms of use in manpage and registry docs and update language 1883 in README for it. 1884 ([@kemitchell](https://github.com/kemitchell)) 1885* [`de956405d`](https://github.com/npm/cli/commit/de956405d8b72354f98579d00c6dd30ac3b9bddf) 1886 [#41](https://github.com/npm/cli/pull/41) 1887 Add documentation for `--dry-run` in `install` and `pack` docs. 1888 ([@reconbot](https://github.com/reconbot)) 1889* [`95031b90c`](https://github.com/npm/cli/commit/95031b90ce0b0c4dcd5e4eafc86e3e5bfd59fb3e) 1890 [#48](https://github.com/npm/cli/pull/48) 1891 Update republish time and lightly reorganize republish info. 1892 ([@neverett](https://github.com/neverett)) 1893* [`767699b68`](https://github.com/npm/cli/commit/767699b6829b8b899d5479445e99b0ffc43ff92d) 1894 [#53](https://github.com/npm/cli/pull/53) 1895 Correct `npm@6.4.0` release date in changelog. 1896 ([@charmander](https://github.com/charmander)) 1897* [`3fea3166e`](https://github.com/npm/cli/commit/3fea3166eb4f43f574fcfd9ee71a171feea2bc29) 1898 [#55](https://github.com/npm/cli/pull/55) 1899 Align command descriptions in help text. 1900 ([@erik](https://github.com/erik)) 1901 1902## v6.4.0 (2018-08-09): 1903 1904### NEW FEATURES 1905 1906* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7) 1907 [npm/cli#8](https://github.com/npm/cli/pull/8) 1908 Search for authentication token defined by environment variables by preventing 1909 the translation layer from env variable to npm option from breaking 1910 `:_authToken`. 1911 ([@mkhl](https://github.com/mkhl)) 1912* [`84bfd23e7`](https://github.com/npm/cli/commit/84bfd23e7d6434d30595594723a6e1976e84b022) 1913 [npm/cli#35](https://github.com/npm/cli/pull/35) 1914 Stop filtering out non-IPv4 addresses from `local-addrs`, making npm actually 1915 use IPv6 addresses when it must. 1916 ([@valentin2105](https://github.com/valentin2105)) 1917* [`792c8c709`](https://github.com/npm/cli/commit/792c8c709dc7a445687aa0c8cba5c50bc4ed83fd) 1918 [npm/cli#31](https://github.com/npm/cli/pull/31) 1919 configurable audit level for non-zero exit 1920 `npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. 1921 Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. 1922 Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. 1923 ([@lennym](https://github.com/lennym)) 1924 1925### BUGFIXES 1926 1927* [`d81146181`](https://github.com/npm/cli/commit/d8114618137bb5b9a52a86711bb8dc18bfc8e60c) 1928 [npm/cli#32](https://github.com/npm/cli/pull/32) 1929 Don't check for updates to npm when we are updating npm itself. 1930 ([@olore](https://github.com/olore)) 1931 1932### DEPENDENCY UPDATES 1933 1934A very special dependency update event! Since the [release of 1935`node-gyp@3.8.0`](https://github.com/nodejs/node-gyp/pull/1521), an awkward 1936version conflict that was preventing `request` from begin flattened was 1937resolved. This means two things: 1938 19391. We've cut down the npm tarball size by another 200kb, to 4.6MB 19402. `npm audit` now shows no vulnerabilities for npm itself! 1941 1942Thanks, [@rvagg](https://github.com/rvagg)! 1943 1944* [`866d776c2`](https://github.com/npm/cli/commit/866d776c27f80a71309389aaab42825b2a0916f6) 1945 `request@2.87.0` 1946 ([@simov](https://github.com/simov)) 1947* [`f861c2b57`](https://github.com/npm/cli/commit/f861c2b579a9d4feae1653222afcefdd4f0e978f) 1948 `node-gyp@3.8.0` 1949 ([@rvagg](https://github.com/rvagg)) 1950* [`32e6947c6`](https://github.com/npm/cli/commit/32e6947c60db865257a0ebc2f7e754fedf7a6fc9) 1951 [npm/cli#39](https://github.com/npm/cli/pull/39) 1952 `colors@1.1.2`: 1953 REVERT REVERT, newer versions of this library are broken and print ansi 1954 codes even when disabled. 1955 ([@iarna](https://github.com/iarna)) 1956* [`beb96b92c`](https://github.com/npm/cli/commit/beb96b92caf061611e3faafc7ca10e77084ec335) 1957 `libcipm@2.0.1` 1958 ([@zkat](https://github.com/zkat)) 1959* [`348fc91ad`](https://github.com/npm/cli/commit/348fc91ad223ff91cd7bcf233018ea1d979a2af1) 1960 `validate-npm-package-license@3.0.4`: Fixes errors with empty or string-only 1961 license fields. 1962 ([@Gudahtt](https://github.com/Gudahtt)) 1963* [`e57d34575`](https://github.com/npm/cli/commit/e57d3457547ef464828fc6f82ae4750f3e511550) 1964 `iferr@1.0.2` 1965 ([@shesek](https://github.com/shesek)) 1966* [`46f1c6ad4`](https://github.com/npm/cli/commit/46f1c6ad4b2fd5b0d7ec879b76b76a70a3a2595c) 1967 `tar@4.4.6` 1968 ([@isaacs](https://github.com/isaacs)) 1969* [`50df1bf69`](https://github.com/npm/cli/commit/50df1bf691e205b9f13e0fff0d51a68772c40561) 1970 `hosted-git-info@2.7.1` 1971 ([@iarna](https://github.com/iarna)) 1972 ([@Erveon](https://github.com/Erveon)) 1973 ([@huochunpeng](https://github.com/huochunpeng)) 1974 1975### DOCUMENTATION 1976 1977* [`af98e76ed`](https://github.com/npm/cli/commit/af98e76ed96af780b544962aa575585b3fa17b9a) 1978 [npm/cli#34](https://github.com/npm/cli/pull/34) 1979 Remove `npm publish` from list of commands not affected by `--dry-run`. 1980 ([@joebowbeer](https://github.com/joebowbeer)) 1981* [`e2b0f0921`](https://github.com/npm/cli/commit/e2b0f092193c08c00f12a6168ad2bd9d6e16f8ce) 1982 [npm/cli#36](https://github.com/npm/cli/pull/36) 1983 Tweak formatting in repository field examples. 1984 ([@noahbenham](https://github.com/noahbenham)) 1985* [`e2346e770`](https://github.com/npm/cli/commit/e2346e7702acccefe6d711168c2b0e0e272e194a) 1986 [npm/cli#14](https://github.com/npm/cli/pull/14) 1987 Used `process.env` examples to make accessing certain `npm run-scripts` 1988 environment variables more clear. 1989 ([@mwarger](https://github.com/mwarger)) 1990 1991## v6.3.0 (2018-08-01): 1992 1993This is basically the same as the prerelease, but two dependencies have been 1994bumped due to bugs that had been around for a while. 1995 1996* [`0a22be42e`](https://github.com/npm/cli/commit/0a22be42eb0d40cd0bd87e68c9e28fc9d72c0e19) 1997 `figgy-pudding@3.2.0` 1998 ([@zkat](https://github.com/zkat)) 1999* [`0096f6997`](https://github.com/npm/cli/commit/0096f69978d2f40b170b28096f269b0b0008a692) 2000 `cacache@11.1.0` 2001 ([@zkat](https://github.com/zkat)) 2002 2003## v6.3.0-next.0 (2018-07-25): 2004 2005### NEW FEATURES 2006 2007* [`ad0dd226f`](https://github.com/npm/cli/commit/ad0dd226fb97a33dcf41787ae7ff282803fb66f2) 2008 [npm/cli#26](https://github.com/npm/cli/pull/26) 2009 `npm version` now supports a `--preid` option to specify the preid for 2010 prereleases. For example, `npm version premajor --preid rc` will tag a version 2011 like `2.0.0-rc.0`. 2012 ([@dwilches](https://github.com/dwilches)) 2013 2014### MESSAGING IMPROVEMENTS 2015 2016* [`c1dad1e99`](https://github.com/npm/cli/commit/c1dad1e994827f2eab7a13c0f6454f4e4c22ebc2) 2017 [npm/cli#6](https://github.com/npm/cli/pull/6) 2018 Make `npm audit fix` message provide better instructions for vulnerabilities 2019 that require manual review. 2020 ([@bradsk88](https://github.com/bradsk88)) 2021* [`15c1130fe`](https://github.com/npm/cli/commit/15c1130fe81961706667d845aad7a5a1f70369f3) 2022 Fix missing colon next to tarball url in new `npm view` output. 2023 ([@zkat](https://github.com/zkat)) 2024* [`21cf0ab68`](https://github.com/npm/cli/commit/21cf0ab68cf528d5244ae664133ef400bdcfbdb6) 2025 [npm/cli#24](https://github.com/npm/cli/pull/24) 2026 Use the default OTP explanation everywhere except when the context is 2027 "OTP-aware" (like when setting double-authentication). This improves the 2028 overall CLI messaging when prompting for an OTP code. 2029 ([@jdeniau](https://github.com/jdeniau)) 2030 2031### MISC 2032 2033* [`a9ac8712d`](https://github.com/npm/cli/commit/a9ac8712dfafcb31a4e3deca24ddb92ff75e942d) 2034 [npm/cli#21](https://github.com/npm/cli/pull/21) 2035 Use the extracted `stringify-package` package. 2036 ([@dpogue](https://github.com/dpogue)) 2037* [`9db15408c`](https://github.com/npm/cli/commit/9db15408c60be788667cafc787116555507dc433) 2038 [npm/cli#27](https://github.com/npm/cli/pull/27) 2039 `wrappy` was previously added to dependencies in order to flatten it, but we 2040 no longer do legacy-style for npm itself, so it has been removed from 2041 `package.json`. 2042 ([@rickschubert](https://github.com/rickschubert)) 2043 2044### DOCUMENTATION 2045 2046* [`3242baf08`](https://github.com/npm/cli/commit/3242baf0880d1cdc0e20b546d3c1da952e474444) 2047 [npm/cli#13](https://github.com/npm/cli/pull/13) 2048 Update more dead links in README.md. 2049 ([@u32i64](https://github.com/u32i64)) 2050* [`06580877b`](https://github.com/npm/cli/commit/06580877b6023643ec780c19d84fbe120fe5425c) 2051 [npm/cli#19](https://github.com/npm/cli/pull/19) 2052 Update links in docs' `index.html` to refer to new bug/PR URLs. 2053 ([@watilde](https://github.com/watilde)) 2054* [`ca03013c2`](https://github.com/npm/cli/commit/ca03013c23ff38e12902e9569a61265c2d613738) 2055 [npm/cli#15](https://github.com/npm/cli/pull/15) 2056 Fix some typos in file-specifiers docs. 2057 ([@Mstrodl](https://github.com/Mstrodl)) 2058* [`4f39f79bc`](https://github.com/npm/cli/commit/4f39f79bcacef11bf2f98d09730bc94d0379789b) 2059 [npm/cli#16](https://github.com/npm/cli/pull/16) 2060 Fix some typos in file-specifiers and package-lock docs. 2061 ([@watilde](https://github.com/watilde)) 2062* [`35e51f79d`](https://github.com/npm/cli/commit/35e51f79d1a285964aad44f550811aa9f9a72cd8) 2063 [npm/cli#18](https://github.com/npm/cli/pull/18) 2064 Update build status badge url in README. 2065 ([@watilde](https://github.com/watilde)) 2066* [`a67db5607`](https://github.com/npm/cli/commit/a67db5607ba2052b4ea44f66657f98b758fb4786) 2067 [npm/cli#17](https://github.com/npm/cli/pull/17/) 2068 Replace TROUBLESHOOTING.md with [posts in 2069 npm.community](https://npm.community/c/support/troubleshooting). 2070 ([@watilde](https://github.com/watilde)) 2071* [`e115f9de6`](https://github.com/npm/cli/commit/e115f9de65bf53711266152fc715a5012f7d3462) 2072 [npm/cli#7](https://github.com/npm/cli/pull/7) 2073 Use https URLs in documentation when appropriate. Happy [Not Secure Day](https://arstechnica.com/gadgets/2018/07/todays-the-day-that-chrome-brands-plain-old-http-as-not-secure/)! 2074 ([@XhmikosR](https://github.com/XhmikosR)) 2075 2076## v6.2.0 (2018-07-13): 2077 2078In case you missed it, [we 2079moved!](https://blog.npmjs.org/post/175587538995/announcing-npmcommunity). We 2080look forward to seeing future PRs landing in 2081[npm/cli](https://github.com/npm/cli) in the future, and we'll be chatting with 2082you all in [npm.community](https://npm.community). Go check it out! 2083 2084This final release of `npm@6.2.0` includes a couple of features that weren't 2085quite ready on time but that we'd still like to include. Enjoy! 2086 2087### FEATURES 2088 2089* [`244b18380`](https://github.com/npm/npm/commit/244b18380ee55950b13c293722771130dbad70de) 2090 [#20554](https://github.com/npm/npm/pull/20554) 2091 Add support for tab-separated output for `npm audit` data with the 2092 `--parseable` flag. 2093 ([@luislobo](https://github.com/luislobo)) 2094* [`7984206e2`](https://github.com/npm/npm/commit/7984206e2f41b8d8361229cde88d68f0c96ed0b8) 2095 [#12697](https://github.com/npm/npm/pull/12697) 2096 Add new `sign-git-commit` config to control whether the git commit itself gets 2097 signed, or just the tag (which is the default). 2098 ([@tribou](https://github.com/tribou)) 2099 2100### FIXES 2101 2102* [`4c32413a5`](https://github.com/npm/npm/commit/4c32413a5b42e18a34afb078cf00eed60f08e4ff) 2103 [#19418](https://github.com/npm/npm/pull/19418) 2104 Do not use `SET` to fetch the env in git-bash or Cygwin. 2105 ([@gucong3000](https://github.com/gucong3000)) 2106 2107### DEPENDENCY BUMPS 2108 2109* [`d9b2712a6`](https://github.com/npm/npm/commit/d9b2712a670e5e78334e83f89a5ed49616f1f3d3) 2110 `request@2.81.0`: Downgraded to allow better deduplication. This does 2111 introduce a bunch of `hoek`-related audit reports, but they don't affect npm 2112 itself so we consider it safe. We'll upgrade `request` again once `node-gyp` 2113 unpins it. 2114 ([@simov](https://github.com/simov)) 2115* [`2ac48f863`](https://github.com/npm/npm/commit/2ac48f863f90166b2bbf2021ed4cc04343d2503c) 2116 `node-gyp@3.7.0` 2117 ([@MylesBorins](https://github.com/MylesBorins)) 2118* [`8dc6d7640`](https://github.com/npm/npm/commit/8dc6d76408f83ba35bda77a2ac1bdbde01937349) 2119 `cli-table3@0.5.0`: `cli-table2` is unmaintained and required `lodash`. With 2120 this dependency bump, we've removed `lodash` from our tree, which cut back 2121 tarball size by another 300kb. 2122 ([@Turbo87](https://github.com/Turbo87)) 2123* [`90c759fee`](https://github.com/npm/npm/commit/90c759fee6055cf61cf6709432a5e6eae6278096) 2124 `npm-audit-report@1.3.1` 2125 ([@zkat](https://github.com/zkat)) 2126* [`4231a0a1e`](https://github.com/npm/npm/commit/4231a0a1eb2be13931c3b71eba38c0709644302c) 2127 Add `cli-table3` to bundleDeps. 2128 ([@iarna](https://github.com/iarna)) 2129* [`322d9c2f1`](https://github.com/npm/npm/commit/322d9c2f107fd82a4cbe2f9d7774cea5fbf41b8d) 2130 Make `standard` happy. 2131 ([@iarna](https://github.com/iarna)) 2132 2133### DOCS 2134 2135* [`5724983ea`](https://github.com/npm/npm/commit/5724983ea8f153fb122f9c0ccab6094a26dfc631) 2136 [#21165](https://github.com/npm/npm/pull/21165) 2137 Fix some markdown formatting in npm-disputes.md. 2138 ([@hchiam](https://github.com/hchiam)) 2139* [`738178315`](https://github.com/npm/npm/commit/738178315fe48e463028657ea7ae541c3d63d171) 2140 [#20920](https://github.com/npm/npm/pull/20920) 2141 Explicitly state that republishing an unpublished package requires a 72h 2142 waiting period. 2143 ([@gmattie](https://github.com/gmattie)) 2144* [`f0a372b07`](https://github.com/npm/npm/commit/f0a372b074cc43ee0e1be28dbbcef0d556b3b36c) 2145 Replace references to the old repo or issue tracker. We're at npm/cli now! 2146 ([@zkat](https://github.com/zkat)) 2147 2148## v6.2.0-next.1 (2018-07-05): 2149 2150This is a quick patch to the release to fix an issue that was preventing users 2151from installing `npm@next`. 2152 2153* [`ecdcbd745`](https://github.com/npm/npm/commit/ecdcbd745ae1edd9bdd102dc3845a7bc76e1c5fb) 2154 [#21129](https://github.com/npm/npm/pull/21129) 2155 Remove postinstall script that depended on source files, thus preventing 2156 `npm@next` from being installable from the registry. 2157 ([@zkat](https://github.com/zkat)) 2158 2159## v6.2.0-next.0 (2018-06-28): 2160 2161### NEW FEATURES 2162 2163* [`ce0793358`](https://github.com/npm/npm/commit/ce07933588ec2da1cc1980f93bdaa485d6028ae2) 2164 [#20750](https://github.com/npm/npm/pull/20750) 2165 You can now disable the update notifier entirely by using 2166 `--no-update-notifier` or setting it in your config with `npm config set 2167 update-notifier false`. 2168 ([@travi](https://github.com/travi)) 2169* [`d2ad776f6`](https://github.com/npm/npm/commit/d2ad776f6dcd92ae3937465736dcbca171131343) 2170 [#20879](https://github.com/npm/npm/pull/20879) 2171 When `npm run-script <script>` fails due to a typo or missing script, npm will 2172 now do a "did you mean?..." for scripts that do exist. 2173 ([@watilde](https://github.com/watilde)) 2174 2175### BUGFIXES 2176 2177* [`8f033d72d`](https://github.com/npm/npm/commit/8f033d72da3e84a9dbbabe3a768693817af99912) 2178 [#20948](https://github.com/npm/npm/pull/20948) 2179 Fix the regular expression matching in `xcode_emulation` in `node-gyp` to also 2180 handle version numbers with multiple-digit major versions which would 2181 otherwise break under use of XCode 10. 2182 ([@Trott](https://github.com/Trott)) 2183* [`c8ba7573a`](https://github.com/npm/npm/commit/c8ba7573a4ea95789f674ce038762d6a77a8b047) 2184 Stop trying to hoist/dedupe bundles dependencies. 2185 ([@iarna](https://github.com/iarna)) 2186* [`cd698f068`](https://github.com/npm/npm/commit/cd698f06840b7c9407ac802efa96d16464722a7d) 2187 [#20762](https://github.com/npm/npm/pull/20762) 2188 Add synopsis to brief help for `npm audit` and suppress trailing newline. 2189 ([@wyardley](https://github.com/wyardley)) 2190* [`6808ee3bd`](https://github.com/npm/npm/commit/6808ee3bd59560b1334a18aa6c6e0120094b03c0) 2191 [#20881](https://github.com/npm/npm/pull/20881) 2192 Exclude /.github directory from npm tarball. 2193 ([@styfle](https://github.com/styfle)) 2194* [`177cbb476`](https://github.com/npm/npm/commit/177cbb4762c1402bfcbf0636c4bc4905fd684fc1) 2195 [#21105](https://github.com/npm/npm/pull/21105) 2196 Add suggestion to use a temporary cache instead of `npm cache clear --force`. 2197 ([@karanjthakkar](https://github.com/karanjthakkar)) 2198 2199### DOCS 2200 2201* [`7ba3fca00`](https://github.com/npm/npm/commit/7ba3fca00554b884eb47f2ed661693faf2630b27) 2202 [#20855](https://github.com/npm/npm/pull/20855) 2203 Direct people to npm.community instead of the GitHub issue tracker on error. 2204 ([@zkat](https://github.com/zkat)) 2205* [`88efbf6b0`](https://github.com/npm/npm/commit/88efbf6b0b403c5107556ff9e1bb7787a410d14d) 2206 [#20859](https://github.com/npm/npm/pull/20859) 2207 Fix typo in registry docs. 2208 ([@strugee](https://github.com/strugee)) 2209* [`61bf827ae`](https://github.com/npm/npm/commit/61bf827aea6f98bba08a54e60137d4df637788f9) 2210 [#20947](https://github.com/npm/npm/pull/20947) 2211 Fixed a small grammar error in the README. 2212 ([@bitsol](https://github.com/bitsol)) 2213* [`f5230c90a`](https://github.com/npm/npm/commit/f5230c90afef40f445bf148cbb16d6129a2dcc19) 2214 [#21018](https://github.com/npm/npm/pull/21018) 2215 Small typo fix in CONTRIBUTING.md. 2216 ([@reggi](https://github.com/reggi)) 2217* [`833efe4b2`](https://github.com/npm/npm/commit/833efe4b2abcef58806f823d77ab8bb8f4f781c6) 2218 [#20986](https://github.com/npm/npm/pull/20986) 2219 Document current structure/expectations around package tarballs. 2220 ([@Maximaximum](https://github.com/Maximaximum)) 2221* [`9fc0dc4f5`](https://github.com/npm/npm/commit/9fc0dc4f58d728bac6a8db7143d04863d7b653db) 2222 [#21019](https://github.com/npm/npm/pull/21019) 2223 Clarify behavior of `npm link ../path` shorthand. 2224 ([@davidgilbertson](https://github.com/davidgilbertson)) 2225* [`3924c72d0`](https://github.com/npm/npm/commit/3924c72d06b9216ac2b6a9d951fd565a1d5eda89) 2226 [#21064](https://github.com/npm/npm/pull/21064) 2227 Add missing "if" 2228 ([@roblourens](https://github.com/roblourens)) 2229 2230### DEPENDENCY SHUFFLE! 2231 2232We did some reshuffling and moving around of npm's own dependencies. This 2233significantly reduces the total bundle size of the npm pack, from 8MB to 4.8MB 2234for the distributed tarball! We also moved around what we actually commit to the 2235repo as far as devDeps go. 2236 2237* [`0483f5c5d`](https://github.com/npm/npm/commit/0483f5c5deaf18c968a128657923103e49f4e67a) 2238 Flatten and dedupe our dependencies! 2239 ([@iarna](https://github.com/iarna)) 2240* [`ef9fa1ceb`](https://github.com/npm/npm/commit/ef9fa1ceb5f9d175fd453138b1a26d45a5071dfd) 2241 Remove unused direct dependency `ansi-regex`. 2242 ([@iarna](https://github.com/iarna)) 2243* [`0d14b0bc5`](https://github.com/npm/npm/commit/0d14b0bc59812f4e33798194e11ffacbea3c0493) 2244 Reshuffle ansi-regex for better deduping. 2245 ([@iarna](https://github.com/iarna)) 2246* [`68a101859`](https://github.com/npm/npm/commit/68a101859b2b6f78b2e7c3a936492acdb15f7c4a) 2247 Reshuffle strip-ansi for better deduping. 2248 ([@iarna](https://github.com/iarna)) 2249* [`0d5251f97`](https://github.com/npm/npm/commit/0d5251f97dc8b8b143064869e530d465c757ffbb) 2250 Reshuffle is-fullwidth-code-point for better deduping. 2251 ([@iarna](https://github.com/iarna)) 2252* [`2d0886632`](https://github.com/npm/npm/commit/2d08866327013522fc5fbe61ed872b8f30e92775) 2253 Add fake-registry, npm-registry-mock replacement. 2254 ([@iarna](https://github.com/iarna)) 2255 2256### DEPENDENCIES 2257 2258* [`8cff8eea7`](https://github.com/npm/npm/commit/8cff8eea75dc34c9c1897a7a6f65d7232bb0c64c) 2259 `tar@4.4.3` 2260 ([@zkat](https://github.com/zkat)) 2261* [`bfc4f873b`](https://github.com/npm/npm/commit/bfc4f873bd056b7e3aee389eda4ecd8a2e175923) 2262 `pacote@8.1.6` 2263 ([@zkat](https://github.com/zkat)) 2264* [`532096163`](https://github.com/npm/npm/commit/53209616329119be8fcc29db86a43cc8cf73454d) 2265 `libcipm@2.0.0` 2266 ([@zkat](https://github.com/zkat)) 2267* [`4a512771b`](https://github.com/npm/npm/commit/4a512771b67aa06505a0df002a9027c16a238c71) 2268 `request@2.87.0` 2269 ([@iarna](https://github.com/iarna)) 2270* [`b7cc48dee`](https://github.com/npm/npm/commit/b7cc48deee45da1feab49aa1dd4d92e33c9bcac8) 2271 `which@1.3.1` 2272 ([@iarna](https://github.com/iarna)) 2273* [`bae657c28`](https://github.com/npm/npm/commit/bae657c280f6ea8e677509a9576e1b47c65c5441) 2274 `tar@4.4.4` 2275 ([@iarna](https://github.com/iarna)) 2276* [`3d46e5c4e`](https://github.com/npm/npm/commit/3d46e5c4e3c5fecd9bf05a7425a16f2e8ad5c833) 2277 `JSONStream@1.3.3` 2278 ([@iarna](https://github.com/iarna)) 2279* [`d0a905daf`](https://github.com/npm/npm/commit/d0a905dafc7e3fcd304e8053acbe3da40ba22554) 2280 `is-cidr@2.0.6` 2281 ([@iarna](https://github.com/iarna)) 2282* [`4fc1f815f`](https://github.com/npm/npm/commit/4fc1f815fec5a7f6f057cf305e01d4126331d1f2) 2283 `marked@0.4.0` 2284 ([@iarna](https://github.com/iarna)) 2285* [`f72202944`](https://github.com/npm/npm/commit/f722029441a088d03df94bdfdeeec51cfd318659) 2286 `tap@12.0.1` 2287 ([@iarna](https://github.com/iarna)) 2288* [`bdce96eb3`](https://github.com/npm/npm/commit/bdce96eb3c30fcff873aa3f1190e8ae4928d690b) 2289 `npm-profile@3.0.2` 2290 ([@iarna](https://github.com/iarna)) 2291* [`fe4240e85`](https://github.com/npm/npm/commit/fe4240e852144770bf76d7b1952056ca5baa63cf) 2292 `uuid@3.3.2` 2293 ([@zkat](https://github.com/zkat)) 2294 2295## v6.1.0 (2018-05-17): 2296 2297### FIX WRITE AFTER END ERROR 2298 2299First introduced in 5.8.0, this finally puts to bed errors where you would 2300occasionally see `Error: write after end at MiniPass.write`. 2301 2302* [`171f3182f`](https://github.com/npm/npm/commit/171f3182f32686f2f94ea7d4b08035427e0b826e) 2303 [node-tar#180](https://github.com/npm/node-tar/issues/180) 2304 [npm.community#35](https://npm.community/t/write-after-end-when-installing-packages-with-5-8-and-later/35) 2305 `pacote@8.1.5`: Fix write-after-end errors. 2306 ([@zkat](https://github.com/zkat)) 2307 2308### DETECT CHANGES IN GIT SPECIFIERS 2309 2310* [`0e1726c03`](https://github.com/npm/npm/commit/0e1726c0350a02d5a60f5fddb1e69c247538625e) 2311 We can now determine if the commitid of a git dependency in the lockfile is derived 2312 from the specifier in the package.json and if it isn't we now trigger an update for it. 2313 ([@iarna](https://github.com/iarna)) 2314 2315### OTHER BUGS 2316 2317* [`442d2484f`](https://github.com/npm/npm/commit/442d2484f686e3a371b07f8473a17708f84d9603) 2318 [`2f0c88351`](https://github.com/npm/npm/commit/2f0c883519f17c94411dd1d9877c5666f260c12f) 2319 [`631d30a34`](https://github.com/npm/npm/commit/631d30a340f5805aed6e83f47a577ca4125599b2) 2320 When requesting the update of a direct dependency that was also a 2321 transitive dependency to a version incompatible with the transitive 2322 requirement and you had a lock-file but did not have a `node_modules` 2323 folder then npm would fail to provide a new copy of the transitive 2324 dependency, resulting in an invalid lock-file that could not self heal. 2325 ([@iarna](https://github.com/iarna)) 2326* [`be5dd0f49`](https://github.com/npm/npm/commit/be5dd0f496ec1485b1ea3094c479dfc17bd50d82) 2327 [#20715](https://github.com/npm/npm/pull/20715) 2328 Cleanup output of `npm ci` summary report. 2329 ([@legodude17](https://github.com/legodude17)) 2330* [`98ffe4adb`](https://github.com/npm/npm/commit/98ffe4adb55a6f4459271856de2e27e95ee63375) 2331 Node.js now has a test that scans for things that look like conflict 2332 markers in source code. This was triggering false positives on a fixture in a test 2333 of npm's ability to heal lockfiles with conflicts in them. 2334 ([@iarna](https://github.com/iarna)) 2335 2336### DEPENDENCY UPDATES 2337 2338* [`3f2e306b8`](https://github.com/npm/npm/commit/3f2e306b884a027df03f64524beb8658ce1772cb) 2339 Using `npm audit fix`, replace some transitive dependencies with security 2340 issues with versions that don't have any. 2341 ([@iarna](https://github.com/iarna)) 2342* [`1d07134e0`](https://github.com/npm/npm/commit/1d07134e0b157f7484a20ce6987ff57951842954) 2343 `tar@4.4.1`: 2344 Dropping to 4.4.1 from 4.4.2 due to https://github.com/npm/node-tar/issues/183 2345 ([@zkat](https://github.com/zkat)) 2346 2347 2348## v6.1.0-next.0 (2018-05-17): 2349 2350Look at that! A feature bump! `npm@6` was super-exciting not just because it 2351used a bigger number than ever before, but also because it included a super 2352shiny new command: `npm audit`. Well, we've kept working on it since then and 2353have some really nice improvements for it. You can expect more of them, and the 2354occasional fix, in the next few releases as more users start playing with it and 2355we get more feedback about what y'all would like to see from something like 2356this. 2357 2358I, for one, have started running it (and the new subcommand...) in all my 2359projects, and it's one of those things that I don't know how I ever functioned 2360-without- it! This will make a world of difference to so many people as far as 2361making the npm ecosystem a higher-quality, safer commons for all of us. 2362 2363This is also a good time to remind y'all that we have a new [RFCs 2364repository](https://github.com/npm/rfcs), along with a new process for them. 2365This repo is open to anyone's RFCs, and has already received some great ideas 2366about where we can take the CLI (and, to a certain extent, the registry). It's a 2367great place to get feedback, and completely replaces feature requests in the 2368main repo, so we won't be accepting feature requests there at all anymore. Check 2369it out if you have something you'd like to suggest, or if you want to keep track 2370of what the future might look like! 2371 2372### NEW FEATURE: `npm audit fix` 2373 2374This is the biggie with this release! `npm audit fix` does exactly what it says 2375on the tin. It takes all the actionable reports from your `npm audit` and runs 2376the installs automatically for you, so you don't have to try to do all that 2377mechanical work yourself! 2378 2379Note that by default, `npm audit fix` will stick to semver-compatible changes, 2380so you should be able to safely run it on most projects and carry on with your 2381day without having to track down what breaking changes were included. If you 2382want your (toplevel) dependencies to accept semver-major bumps as well, you can 2383use `npm audit fix --force` and it'll toss those in, as well. Since it's running 2384the npm installer under the hood, it also supports `--production` and 2385`--only=dev` flags, as well as things like `--dry-run`, `--json`, and 2386`--package-lock-only`, if you want more control over what it does. 2387 2388Give it a whirl and tell us what you think! See `npm help audit` for full docs! 2389 2390* [`3800a660d`](https://github.com/npm/npm/commit/3800a660d99ca45c0175061dbe087520db2f54b7) 2391 Add `npm audit fix` subcommand to automatically fix detected vulnerabilities. 2392 ([@zkat](https://github.com/zkat)) 2393 2394### OTHER NEW `audit` FEATURES 2395 2396* [`1854b1c7f`](https://github.com/npm/npm/commit/1854b1c7f09afceb49627e539a086d8a3565601c) 2397 [#20568](https://github.com/npm/npm/pull/20568) 2398 Add support for `npm audit --json` to print the report in JSON format. 2399 ([@finnp](https://github.com/finnp)) 2400* [`85b86169d`](https://github.com/npm/npm/commit/85b86169d9d0423f50893d2ed0c7274183255abe) 2401 [#20570](https://github.com/npm/npm/pull/20570) 2402 Include number of audited packages in `npm install` summary output. 2403 ([@zkat](https://github.com/zkat)) 2404* [`957cbe275`](https://github.com/npm/npm/commit/957cbe27542d30c33e58e7e6f2f04eeb64baf5cd) 2405 `npm-audit-report@1.2.1`: 2406 Overhaul audit install and detail output format. The new format is terser and 2407 fits more closely into the visual style of the CLI, while still providing you 2408 with the important bits of information you need. They also include a bit more 2409 detail on the footer about what actions you can take! 2410 ([@zkat](https://github.com/zkat)) 2411 2412### NEW FEATURE: GIT DEPS AND `npm init <pkg>`! 2413 2414Another exciting change that came with `npm@6` was the new `npm init` command 2415that allows for community-authored generators. That means you can, for example, 2416do `npm init react-app` and it'll one-off download, install, and run 2417[`create-react-app`](https://npm.im/create-react-app) for you, without requiring 2418or keeping around any global installs. That is, it basically just calls out to 2419[`npx`](https://npm.im/npx). 2420 2421The first version of this command only really supported registry dependencies, 2422but now, [@jdalton](https://github.com/jdalton) went ahead and extended this 2423feature so you can use hosted git dependencies, and their shorthands. 2424 2425So go ahead and do `npm init facebook/create-react-app` and it'll grab the 2426package from the github repo now! Or you can use it with a private github 2427repository to maintain your organizational scaffolding tools or whatnot. ✨ 2428 2429* [`483e01180`](https://github.com/npm/npm/commit/483e011803af82e63085ef41b7acce5b22aa791c) 2430 [#20403](https://github.com/npm/npm/pull/20403) 2431 Add support for hosted git packages to `npm init <name>`. 2432 ([@jdalton](https://github.com/jdalton)) 2433 2434### BUGFIXES 2435 2436* [`a41c0393c`](https://github.com/npm/npm/commit/a41c0393cba710761a15612c6c85c9ef2396e65f) 2437 [#20538](https://github.com/npm/npm/pull/20538) 2438 Make the new `npm view` work when the license field is an object instead of a 2439 string. 2440 ([@zkat](https://github.com/zkat)) 2441* [`eb7522073`](https://github.com/npm/npm/commit/eb75220739302126c94583cc65a5ff12b441e3c6) 2442 [#20582](https://github.com/npm/npm/pull/20582) 2443 Add support for environments (like Docker) where the expected binary for 2444 opening external URLs is not available. 2445 ([@bcoe](https://github.com/bcoe)) 2446* [`212266529`](https://github.com/npm/npm/commit/212266529ae72056bf0876e2cff4b8ba01d09d0f) 2447 [#20536](https://github.com/npm/npm/pull/20536) 2448 Fix a spurious colon in the new update notifier message and add support for 2449 the npm canary. 2450 ([@zkat](https://github.com/zkat)) 2451* [`5ee1384d0`](https://github.com/npm/npm/commit/5ee1384d02c3f11949d7a26ec6322488476babe6) 2452 [#20597](https://github.com/npm/npm/pull/20597) 2453 Infer a version range when a `package.json` has a dist-tag instead of a 2454 version range in one of its dependency specs. Previously, this would cause 2455 dependencies to be flagged as invalid. 2456 ([@zkat](https://github.com/zkat)) 2457* [`4fa68ae41`](https://github.com/npm/npm/commit/4fa68ae41324293e59584ca6cf0ac24b3e0825bb) 2458 [#20585](https://github.com/npm/npm/pull/20585) 2459 Make sure scoped bundled deps are shown in the new publish preview, too. 2460 ([@zkat](https://github.com/zkat)) 2461* [`1f3ee6b7e`](https://github.com/npm/npm/commit/1f3ee6b7e1b36b52bdedeb9241296d4e66561d48) 2462 `cacache@11.0.2`: 2463 Stop dropping `size` from metadata on `npm cache verify`. 2464 ([@jfmartinez](https://github.com/jfmartinez)) 2465* [`91ef93691`](https://github.com/npm/npm/commit/91ef93691a9d6ce7c016fefdf7da97854ca2b2ca) 2466 [#20513](https://github.com/npm/npm/pull/20513) 2467 Fix nested command aliases. 2468 ([@mmermerkaya](https://github.com/mmermerkaya)) 2469* [`18b2b3cf7`](https://github.com/npm/npm/commit/18b2b3cf71a438648ced1bd13faecfb50c71e979) 2470 `npm-lifecycle@2.0.3`: 2471 Make sure different versions of the `Path` env var on Windows all get 2472 `node_modules/.bin` prepended when running lifecycle scripts. 2473 ([@laggingreflex](https://github.com/laggingreflex)) 2474 2475### DOCUMENTATION 2476 2477* [`a91d87072`](https://github.com/npm/npm/commit/a91d87072f292564e58dcab508b5a8c6702b9aae) 2478 [#20550](https://github.com/npm/npm/pull/20550) 2479 Update required node versions in README. 2480 ([@legodude17](https://github.com/legodude17)) 2481* [`bf3cfa7b8`](https://github.com/npm/npm/commit/bf3cfa7b8b351714c4ec621e1a5867c8450c6fff) 2482 Pull in changelogs from the last `npm@5` release. 2483 ([@iarna](https://github.com/iarna)) 2484* [`b2f14b14c`](https://github.com/npm/npm/commit/b2f14b14ca25203c2317ac2c47366acb50d46e69) 2485 [#20629](https://github.com/npm/npm/pull/20629) 2486 Make tone in `publishConfig` docs more neutral. 2487 ([@jeremyckahn](https://github.com/jeremyckahn)) 2488 2489### DEPENDENCY BUMPS 2490 2491* [`5fca4eae8`](https://github.com/npm/npm/commit/5fca4eae8a62a7049b1ae06aa0bbffdc6e0ad6cc) 2492 `byte-size@4.0.3` 2493 ([@75lb](https://github.com/75lb)) 2494* [`d9ef3fba7`](https://github.com/npm/npm/commit/d9ef3fba79f87c470889a6921a91f7cdcafa32b9) 2495 `lru-cache@4.1.3` 2496 ([@isaacs](https://github.com/isaacs)) 2497* [`f1baf011a`](https://github.com/npm/npm/commit/f1baf011a0d164f8dc8aa6cd31e89225e3872e3b) 2498 `request@2.86.0` 2499 ([@simonv](https://github.com/simonv)) 2500* [`005fa5420`](https://github.com/npm/npm/commit/005fa542072f09a83f77a9d62c5e53b8f6309371) 2501 `require-inject@1.4.3` 2502 ([@iarna](https://github.com/iarna)) 2503* [`1becdf09a`](https://github.com/npm/npm/commit/1becdf09a2f19716726c88e9a2342e1e056cfc71) 2504 `tap@11.1.5` 2505 ([@isaacs](https://github.com/isaacs)) 2506 2507## v6.0.1 (2018-05-09): 2508 2509### AUDIT SHOULDN'T WAIT FOREVER 2510 2511This will likely be reduced further with the goal that the audit process 2512shouldn't noticibly slow down your builds regardless of your network 2513situation. 2514 2515* [`3dcc240db`](https://github.com/npm/npm/commit/3dcc240dba5258532990534f1bd8a25d1698b0bf) 2516 Timeout audit requests eventually. 2517 ([@iarna](https://github.com/iarna)) 2518 2519### Looking forward 2520 2521We're still a way from having node@11, so now's a good time to ensure we 2522don't warn about being used with it. 2523 2524* [`ed1aebf55`](https://github.com/npm/npm/commit/ed1aebf55) 2525 Allow node@11, when it comes. 2526 ([@iarna](https://github.com/iarna)) 2527 2528## v6.0.1-next.0 (2018-05-03): 2529 2530### CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT! 2531 2532* [`b267bbbb9`](https://github.com/npm/npm/commit/b267bbbb9ddd551e3dbd162cc2597be041b9382c) 2533 [npm/lockfile#29](https://github.com/npm/lockfile/pull/29) 2534 `lockfile@1.0.4`: 2535 Switches to `signal-exit` to detect abnormal exits and remove locks. 2536 ([@Redsandro](https://github.com/Redsandro)) 2537 2538### SHRONKWRAPS AND LACKFILES 2539 2540If a published modules had legacy `npm-shrinkwrap.json` we were saving 2541ordinary registry dependencies (`name@version`) to your `package-lock.json` 2542as `https://` URLs instead of versions. 2543 2544* [`89102c0d9`](https://github.com/npm/npm/commit/89102c0d995c3d707ff2b56995a97a1610f8b532) 2545 When saving the lock-file compute how the dependency is being required instead of using 2546 `_resolved` in the `package.json`. This fixes the bug that was converting 2547 registry dependencies into `https://` dependencies. 2548 ([@iarna](https://github.com/iarna)) 2549* [`676f1239a`](https://github.com/npm/npm/commit/676f1239ab337ff967741895dbe3a6b6349467b6) 2550 When encountering a `https://` URL in our lockfiles that point at our default registry, extract 2551 the version and use them as registry dependencies. This lets us heal 2552 `package-lock.json` files produced by 6.0.0 2553 ([@iarna](https://github.com/iarna)) 2554 2555### AUDIT AUDIT EVERYWHERE 2556 2557You can't use it _quite_ yet, but we do have a few last moment patches to `npm audit` to make 2558it even better when it is turned on! 2559 2560* [`b2e4f48f5`](https://github.com/npm/npm/commit/b2e4f48f5c07b8ebc94a46ce01a810dd5d6cd20c) 2561 Make sure we hide stream errors on background audit submissions. Previously some classes 2562 of error could end up being displayed (harmlessly) during installs. 2563 ([@iarna](https://github.com/iarna)) 2564* [`1fe0c7fea`](https://github.com/npm/npm/commit/1fe0c7fea226e592c96b8ab22fd9435e200420e9) 2565 Include session and scope in requests (as we do in other requests to the registry). 2566 ([@iarna](https://github.com/iarna)) 2567* [`d04656461`](https://github.com/npm/npm/commit/d046564614639c37e7984fff127c79a8ddcc0c92) 2568 Exit with non-zero status when vulnerabilities are found. So you can have `npm audit` as a test or prepublish step! 2569 ([@iarna](https://github.com/iarna)) 2570* [`fcdbcbacc`](https://github.com/npm/npm/commit/fcdbcbacc16d96a8696dde4b6d7c1cba77828337) 2571 Verify lockfile integrity before running. You'd get an error either way, but this way it's 2572 faster and can give you more concrete instructions on how to fix it. 2573 ([@iarna](https://github.com/iarna)) 2574* [`2ac8edd42`](https://github.com/npm/npm/commit/2ac8edd4248f2393b35896f0300b530e7666bb0e) 2575 Refuse to run in global mode. Audits require a lockfile and globals don't have one. Yet. 2576 ([@iarna](https://github.com/iarna)) 2577 2578### DOCUMENTATION IMPROVEMENTS 2579 2580* [`b7fca1084`](https://github.com/npm/npm/commit/b7fca1084b0be6f8b87ec0807c6daf91dbc3060a) 2581 [#20407](https://github.com/npm/npm/pull/20407) 2582 Update the lock-file spec doc to mention that we now generate the from field for `git`-type dependencies. 2583 ([@watilde](https://github.com/watilde)) 2584* [`7a6555e61`](https://github.com/npm/npm/commit/7a6555e618e4b8459609b7847a9e17de2d4fa36e) 2585 [#20408](https://github.com/npm/npm/pull/20408) 2586 Describe what the colors in outdated mean. 2587 ([@teameh](https://github.com/teameh)) 2588 2589### DEPENDENCY UPDATES 2590 2591* [`5e56b3209`](https://github.com/npm/npm/commit/5e56b3209c4719e3c4d7f0d9346dfca3881a5d34) 2592 `npm-audit-report@1.0.8` 2593 ([@evilpacket](https://github.com/evilpacket)) 2594* [`58a0b31b4`](https://github.com/npm/npm/commit/58a0b31b43245692b4de0f1e798fcaf71f8b7c31) 2595 `lock-verify@2.0.2` 2596 ([@iarna](https://github.com/iarna)) 2597* [`e7a8c364f`](https://github.com/npm/npm/commit/e7a8c364f3146ffb94357d8dd7f643e5563e2f2b) 2598 [zkat/pacote#148](https://github.com/zkat/pacote/pull/148) 2599 `pacote@8.1.1` 2600 ([@redonkulus](https://github.com/redonkulus)) 2601* [`46c0090a5`](https://github.com/npm/npm/commit/46c0090a517526dfec9b1b6483ff640227f0cd10) 2602 `tar@4.4.2` 2603 ([@isaacs](https://github.com/isaacs)) 2604* [`8a16db3e3`](https://github.com/npm/npm/commit/8a16db3e39715301fd085a8f4c80ae836f0ec714) 2605 `update-notifier@2.5.0` 2606 ([@alexccl](https://github.com/alexccl)) 2607* [`696375903`](https://github.com/npm/npm/commit/6963759032fe955c1404d362e14f458d633c9444) 2608 `safe-buffer@5.1.2` 2609 ([@feross](https://github.com/feross)) 2610* [`c949eb26a`](https://github.com/npm/npm/commit/c949eb26ab6c0f307e75a546f342bb2ec0403dcf) 2611 `query-string@6.1.0` 2612 ([@sindresorhus](https://github.com/sindresorhus)) 2613 2614## v6.0.0 (2018-04-20): 2615 2616Hey y'all! Here's another `npm@6` release -- with `node@10` around the corner, 2617this might well be the last prerelease before we tag `6.0.0`! There's two major 2618features included with this release, along with a few miscellaneous fixes and 2619changes. 2620 2621### EXTENDED `npm init` SCAFFOLDING 2622 2623Thanks to the wonderful efforts of [@jdalton](https://github.com/jdalton) of 2624lodash fame, `npm init` can now be used to invoke custom scaffolding tools! 2625 2626You can now do things like `npm init react-app` or `npm init esm` to scaffold an 2627npm package by running `create-react-app` and `create-esm`, respectively. This 2628also adds an `npm create` alias, to correspond to Yarn's `yarn create` feature, 2629which inspired this. 2630 2631* [`008a83642`](https://github.com/npm/npm/commit/008a83642e04360e461f56da74b5557d5248a726) [`ed81d1426`](https://github.com/npm/npm/commit/ed81d1426776bcac47492cabef43f65e1d4ab536) [`833046e45`](https://github.com/npm/npm/commit/833046e45fe25f75daffd55caf25599a9f98c148) 2632 [#20303](https://github.com/npm/npm/pull/20303) 2633 Add an `npm init` feature that calls out to `npx` when invoked with positional 2634 arguments. ([@jdalton](https://github.com/jdalton)) 2635 2636### DEPENDENCY AUDITING 2637 2638This version of npm adds a new command, `npm audit`, which will run a security 2639audit of your project's dependency tree and notify you about any actions you may 2640need to take. 2641 2642The registry-side services required for this command to work will be available 2643on the main npm registry in the coming weeks. Until then, you won't get much out 2644of trying to use this on the CLI. 2645 2646As part of this change, the npm CLI now sends scrubbed and cryptographically 2647anonymized metadata about your dependency tree to your configured registry, to 2648allow notifying you about the existence of critical security flaws. For details 2649about how the CLI protects your privacy when it shares this metadata, see `npm 2650help audit`, or [read the docs for `npm audit` 2651online](https://github.com/npm/npm/blob/release-next/doc/cli/npm-audit.md). You 2652can disable this altogether by doing `npm config set audit false`, but will no 2653longer benefit from the service. 2654 2655* [`f4bc648ea`](https://github.com/npm/npm/commit/f4bc648ea7b19d63cc9878c9da2cb1312f6ce152) 2656 [#20389](https://github.com/npm/npm/pull/20389) 2657 `npm-registry-fetch@1.1.0` 2658 ([@iarna](https://github.com/iarna)) 2659* [`594d16987`](https://github.com/npm/npm/commit/594d16987465014d573c51a49bba6886cc19f8e8) 2660 [#20389](https://github.com/npm/npm/pull/20389) 2661 `npm-audit-report@1.0.5` 2662 ([@iarna](https://github.com/iarna)) 2663* [`8c77dde74`](https://github.com/npm/npm/commit/8c77dde74a9d8f9007667cd1732c3329e0d52617) [`1d8ac2492`](https://github.com/npm/npm/commit/1d8ac2492196c4752b2e41b23d5ddc92780aaa24) [`552ff6d64`](https://github.com/npm/npm/commit/552ff6d64a5e3bcecb33b2a861c49a3396adad6d) [`09c734803`](https://github.com/npm/npm/commit/09c73480329e75e44fb8e55ca522f798be68d448) 2664 [#20389](https://github.com/npm/npm/pull/20389) 2665 Add new `npm audit` command. 2666 ([@iarna](https://github.com/iarna)) 2667* [`be393a290`](https://github.com/npm/npm/commit/be393a290a5207dc75d3d70a32973afb3322306c) 2668 [#20389](https://github.com/npm/npm/pull/20389) 2669 Temporarily suppress git metadata till there's an opt-in. 2670 ([@iarna](https://github.com/iarna)) 2671* [`8e713344f`](https://github.com/npm/npm/commit/8e713344f6e0828ddfb7733df20d75e95a5382d8) 2672 [#20389](https://github.com/npm/npm/pull/20389) 2673 Document the new command. 2674 ([@iarna](https://github.com/iarna)) 2675* 2676 [#20389](https://github.com/npm/npm/pull/20389) 2677 Default audit to off when running the npm test suite itself. 2678 ([@iarna](https://github.com/iarna)) 2679 2680### MORE `package-lock.json` FORMAT CHANGES?! 2681 2682* [`820f74ae2`](https://github.com/npm/npm/commit/820f74ae22b7feb875232d46901cc34e9ba995d6) 2683 [#20384](https://github.com/npm/npm/pull/20384) 2684 Add `from` field back into package-lock for git dependencies. This will give 2685 npm the information it needs to figure out whether git deps are valid, 2686 specially when running with legacy install metadata or in 2687 `--package-lock-only` mode when there's no `node_modules`. This should help 2688 remove a significant amount of git-related churn on the lock-file. 2689 ([@zkat](https://github.com/zkat)) 2690 2691### BUGFIXES 2692 2693* [`9d5d0a18a`](https://github.com/npm/npm/commit/9d5d0a18a5458655275056156b5aa001140ae4d7) 2694 [#20358](https://github.com/npm/npm/pull/20358) 2695 `npm install-test` (aka `npm it`) will no longer generate `package-lock.json` 2696 when running with `--no-package-lock` or `package-lock=false`. 2697 ([@raymondfeng](https://github.com/raymondfeng)) 2698* [`e4ed976e2`](https://github.com/npm/npm/commit/e4ed976e20b7d1114c920a9dc9faf351f89a31c9) 2699 [`2facb35fb`](https://github.com/npm/npm/commit/2facb35fbfbbc415e693d350b67413a66ff96204) 2700 [`9c1eb945b`](https://github.com/npm/npm/commit/9c1eb945be566e24cbbbf186b0437bdec4be53fc) 2701 [#20390](https://github.com/npm/npm/pull/20390) 2702 Fix a scenario where a git dependency had a comittish associated with it 2703 that was not a complete commitid. `npm` would never consider that entry 2704 in the `package.json` as matching the entry in the `package-lock.json` and 2705 this resulted in inappropriate pruning or reinstallation of git 2706 dependencies. This has been addressed in two ways, first, the addition of the 2707 `from` field as described in [#20384](https://github.com/npm/npm/pull/20384) means 2708 we can exactly match the `package.json`. Second, when that's missing (when working with 2709 older `package-lock.json` files), we assume that the match is ok. (If 2710 it's not, we'll fix it up when a real installation is done.) 2711 ([@iarna](https://github.com/iarna)) 2712 2713 2714### DEPENDENCIES 2715 2716* [`1c1f89b73`](https://github.com/npm/npm/commit/1c1f89b7319b2eef6adee2530c4619ac1c0d83cf) 2717 `libnpx@10.2.0` 2718 ([@zkat](https://github.com/zkat)) 2719* [`242d8a647`](https://github.com/npm/npm/commit/242d8a6478b725778c00be8ba3dc85f367006a61) 2720 `pacote@8.1.0` 2721 ([@zkat](https://github.com/zkat)) 2722 2723### DOCS 2724 2725* [`a1c77d614`](https://github.com/npm/npm/commit/a1c77d614adb4fe6769631b646b817fd490d239c) 2726 [#20331](https://github.com/npm/npm/pull/20331) 2727 Fix broken link to 'private-modules' page. The redirect went away when the new 2728 npm website went up, but the new URL is better anyway. 2729 ([@vipranarayan14](https://github.com/vipranarayan14)) 2730* [`ad7a5962d`](https://github.com/npm/npm/commit/ad7a5962d758efcbcfbd9fda9a3d8b38ddbf89a1) 2731 [#20279](https://github.com/npm/npm/pull/20279) 2732 Document the `--if-present` option for `npm run-script`. 2733 ([@aleclarson](https://github.com/aleclarson)) 2734 2735## v6.0.0-next.1 (2018-04-12): 2736 2737### NEW FEATURES 2738 2739* [`a9e722118`](https://github.com/npm/npm/commit/a9e7221181dc88e14820d0677acccf0648ac3c5a) 2740 [#20256](https://github.com/npm/npm/pull/20256) 2741 Add support for managing npm webhooks. This brings over functionality 2742 previously provided by the [`wombat`](https://www.npmjs.com/package/wombat) CLI. 2743 ([@zkat](https://github.com/zkat)) 2744* [`8a1a64203`](https://github.com/npm/npm/commit/8a1a64203cca3f30999ea9e160eb63662478dcee) 2745 [#20126](https://github.com/npm/npm/pull/20126) 2746 Add `npm cit` command that's equivalent of `npm ci && npm t` that's equivalent of `npm it`. 2747 ([@SimenB](https://github.com/SimenB)) 2748* [`fe867aaf1`](https://github.com/npm/npm/commit/fe867aaf19e924322fe58ed0cf0a570297a96559) 2749 [`49d18b4d8`](https://github.com/npm/npm/commit/49d18b4d87d8050024f8c5d7a0f61fc2514917b1) 2750 [`ff6b31f77`](https://github.com/npm/npm/commit/ff6b31f775f532bb8748e8ef85911ffb35a8c646) 2751 [`78eab3cda`](https://github.com/npm/npm/commit/78eab3cdab6876728798f876d569badfc74ce68f) 2752 The `requires` field in your lock-file will be upgraded to use ranges from 2753 versions on your first use of npm. 2754 ([@iarna](https://github.com/iarna)) 2755* [`cf4d7b4de`](https://github.com/npm/npm/commit/cf4d7b4de6fa241a656e58f662af0f8d7cd57d21) 2756 [#20257](https://github.com/npm/npm/pull/20257) 2757 Add shasum and integrity to the new `npm view` output. 2758 ([@zkat](https://github.com/zkat)) 2759 2760### BUG FIXES 2761 2762* [`685764308`](https://github.com/npm/npm/commit/685764308e05ff0ddb9943b22ca77b3a56d5c026) 2763 Fix a bug where OTPs passed in via the commandline would have leading 2764 zeros deleted resulted in authentication failures. 2765 ([@iarna](https://github.com/iarna)) 2766* [`8f3faa323`](https://github.com/npm/npm/commit/8f3faa3234b2d2fcd2cb05712a80c3e4133c8f45) 2767 [`6800f76ff`](https://github.com/npm/npm/commit/6800f76ffcd674742ba8944f11f6b0aa55f4b612) 2768 [`ec90c06c7`](https://github.com/npm/npm/commit/ec90c06c78134eb2618612ac72288054825ea941) 2769 [`825b5d2c6`](https://github.com/npm/npm/commit/825b5d2c60e620da5459d9dc13d4f911294a7ec2) 2770 [`4785f13fb`](https://github.com/npm/npm/commit/4785f13fb69f33a8c624ecc8a2be5c5d0d7c94fc) 2771 [`bd16485f5`](https://github.com/npm/npm/commit/bd16485f5b3087625e13773f7251d66547d6807d) 2772 Restore the ability to bundle dependencies that are uninstallable from the 2773 registry. This also eliminates needless registry lookups for bundled 2774 dependencies. 2775 2776 Fixed a bug where attempting to install a dependency that is bundled 2777 inside another module without reinstalling that module would result in 2778 ENOENT errors. 2779 ([@iarna](https://github.com/iarna)) 2780* [`429498a8c`](https://github.com/npm/npm/commit/429498a8c8d4414bf242be6a3f3a08f9a2adcdf9) 2781 [#20029](https://github.com/npm/npm/pull/20029) 2782 Allow packages with non-registry specifiers to follow the fast path that 2783 the we use with the lock-file for registry specifiers. This will improve install time 2784 especially when operating only on the package-lock (`--package-lock-only`). 2785 ([@zkat](https://github.com/zkat)) 2786 2787 Fix the a bug where `npm i --only=prod` could remove development 2788 dependencies from lock-file. 2789 ([@iarna](https://github.com/iarna)) 2790* [`834b46ff4`](https://github.com/npm/npm/commit/834b46ff48ade4ab4e557566c10e83199d8778c6) 2791 [#20122](https://github.com/npm/npm/pull/20122) 2792 Improve the update-notifier messaging (borrowing ideas from pnpm) and 2793 eliminate false positives. 2794 ([@zkat](https://github.com/zkat)) 2795* [`f9de7ef3a`](https://github.com/npm/npm/commit/f9de7ef3a1089ceb2610cd27bbd4b4bc2979c4de) 2796 [#20154](https://github.com/npm/npm/pull/20154) 2797 Let version succeed when `package-lock.json` is gitignored. 2798 ([@nwoltman](https://github.com/nwoltman)) 2799* [`f8ec52073`](https://github.com/npm/npm/commit/f8ec520732bda687bc58d9da0873dadb2d65ca96) 2800 [#20212](https://github.com/npm/npm/pull/20212) 2801 Ensure that we only create an `etc` directory if we are actually going to write files to it. 2802 ([@buddydvd](https://github.com/buddydvd)) 2803* [`ab489b753`](https://github.com/npm/npm/commit/ab489b75362348f412c002cf795a31dea6420ef0) 2804 [#20140](https://github.com/npm/npm/pull/20140) 2805 Note in documentation that `package-lock.json` version gets touched by `npm version`. 2806 ([@srl295](https://github.com/srl295)) 2807* [`857c2138d`](https://github.com/npm/npm/commit/857c2138dae768ea9798782baa916b1840ab13e8) 2808 [#20032](https://github.com/npm/npm/pull/20032) 2809 Fix bug where unauthenticated errors would get reported as both 404s and 2810 401s, i.e. `npm ERR! 404 Registry returned 401`. In these cases the error 2811 message will now be much more informative. 2812 ([@iarna](https://github.com/iarna)) 2813* [`d2d290bca`](https://github.com/npm/npm/commit/d2d290bcaa85e44a4b08cc40cb4791dd4f81dfc4) 2814 [#20082](https://github.com/npm/npm/pull/20082) 2815 Allow optional @ prefix on scope with `npm team` commands for parity with other commands. 2816 ([@bcoe](https://github.com/bcoe)) 2817* [`b5babf0a9`](https://github.com/npm/npm/commit/b5babf0a9aa1e47fad8a07cc83245bd510842047) 2818 [#19580](https://github.com/npm/npm/pull/19580) 2819 Improve messaging when two-factor authentication is required while publishing. 2820 ([@jdeniau](https://github.com/jdeniau)) 2821* [`471ee1c5b`](https://github.com/npm/npm/commit/471ee1c5b58631fe2e936e32480f3f5ed6438536) 2822 [`0da38b7b4`](https://github.com/npm/npm/commit/0da38b7b4aff0464c60ad12e0253fd389efd5086) 2823 Fix a bug where optional status of a dependency was not being saved to 2824 the package-lock on the initial install. 2825 ([@iarna](https://github.com/iarna)) 2826* [`b3f98d8ba`](https://github.com/npm/npm/commit/b3f98d8ba242a7238f0f9a90ceea840b7b7070af) 2827 [`9dea95e31`](https://github.com/npm/npm/commit/9dea95e319169647bea967e732ae4c8212608f53) 2828 Ensure that `--no-optional` does not remove optional dependencies from the lock-file. 2829 ([@iarna](https://github.com/iarna)) 2830 2831### MISCELLANEOUS 2832 2833* [`ec6b12099`](https://github.com/npm/npm/commit/ec6b120995c9c1d17ff84bf0217ba5741365af2d) 2834 Exclude all tests from the published version of npm itself. 2835 ([@iarna](https://github.com/iarna)) 2836 2837### DEPENDENCY UPDATES 2838 2839* [`73dc97455`](https://github.com/npm/npm/commit/73dc974555217207fb384e39d049da19be2f79ba) 2840 [zkat/cipm#46](https://github.com/zkat/cipm/pull/46) 2841 `libcipm@1.6.2`: 2842 Detect binding.gyp for default install lifecycle. Let's `npm ci` work on projects that 2843 have their own C code. 2844 ([@caleblloyd](https://github.com/caleblloyd)) 2845* [`77c3f7a00`](https://github.com/npm/npm/commit/77c3f7a0091f689661f61182cd361465e2d695d5) 2846 `iferr@1.0.0` 2847* [`dce733e37`](https://github.com/npm/npm/commit/dce733e37687c21cb1a658f06197c609ac39c793) 2848 [zkat/json-parse-better-errors#1](https://github.com/zkat/json-parse-better-errors/pull/1) 2849 `json-parse-better-errors@1.0.2` 2850 ([@Hoishin](https://github.com/Hoishin)) 2851* [`c52765ff3`](https://github.com/npm/npm/commit/c52765ff32d195842133baf146d647760eb8d0cd) 2852 `readable-stream@2.3.6` 2853 ([@mcollina](https://github.com/mcollina)) 2854* [`e160adf9f`](https://github.com/npm/npm/commit/e160adf9fce09f226f66e0892cc3fa45f254b5e8) 2855 `update-notifier@2.4.0` 2856 ([@sindersorhus](https://github.com/sindersorhus)) 2857* [`9a9d7809e`](https://github.com/npm/npm/commit/9a9d7809e30d1add21b760804be4a829e3c7e39e) 2858 `marked@0.3.1` 2859 ([@joshbruce](https://github.com/joshbruce)) 2860* [`f2fbd8577`](https://github.com/npm/npm/commit/f2fbd857797cf5c12a68a6fb0ff0609d373198b3) 2861 [#20256](https://github.com/npm/npm/pull/20256) 2862 `figgy-pudding@2.0.1` 2863 ([@zkat](https://github.com/zkat)) 2864* [`44972d53d`](https://github.com/npm/npm/commit/44972d53df2e0f0cc22d527ac88045066205dbbf) 2865 [#20256](https://github.com/npm/npm/pull/20256) 2866 `libnpmhook@3.0.0` 2867 ([@zkat](https://github.com/zkat)) 2868* [`cfe562c58`](https://github.com/npm/npm/commit/cfe562c5803db08a8d88957828a2cd1cc51a8dd5) 2869 [#20276](https://github.com/npm/npm/pull/20276) 2870 `node-gyp@3.6.2` 2871* [`3c0bbcb8e`](https://github.com/npm/npm/commit/3c0bbcb8e5440a3b90fabcce85d7a1d31e2ecbe7) 2872 [zkat/npx#172](https://github.com/zkat/npx/pull/172) 2873 `libnpx@10.1.1` 2874 ([@jdalton](https://github.com/jdalton)) 2875* [`0573d91e5`](https://github.com/npm/npm/commit/0573d91e57c068635a3ad4187b9792afd7b5e22f) 2876 [zkat/cacache#128](https://github.com/zkat/cacache/pull/128) 2877 `cacache@11.0.1` 2878 ([@zkat](https://github.com/zkat)) 2879* [`396afa99f`](https://github.com/npm/npm/commit/396afa99f61561424866d5c8dd7aedd6f91d611a) 2880 `figgy-pudding@3.1.0` 2881 ([@zkat](https://github.com/zkat)) 2882* [`e7f869c36`](https://github.com/npm/npm/commit/e7f869c36ec1dacb630e5ab749eb3bb466193f01) 2883 `pacote@8.0.0` 2884 ([@zkat](https://github.com/zkat)) 2885* [`77dac72df`](https://github.com/npm/npm/commit/77dac72dfdb6add66ec859a949b1d2d788a379b7) 2886 `ssri@6.0.0` 2887 ([@zkat](https://github.com/zkat)) 2888* [`0b802f2a0`](https://github.com/npm/npm/commit/0b802f2a0bfa15c6af8074ebf9347f07bccdbcc7) 2889 `retry@0.12.0` 2890 ([@iarna](https://github.com/iarna)) 2891* [`4781b64bc`](https://github.com/npm/npm/commit/4781b64bcc47d4e7fb7025fd6517cde044f6b5e1) 2892 `libnpmhook@4.0.1` 2893 ([@zkat](https://github.com/zkat)) 2894* [`7bdbaeea6`](https://github.com/npm/npm/commit/7bdbaeea61853280f00c8443a3b2d6e6b893ada9) 2895 `npm-package-arg@6.1.0` 2896 ([@zkat](https://github.com/zkat)) 2897* [`5f2bf4222`](https://github.com/npm/npm/commit/5f2bf4222004117eb38c44ace961bd15a779fd66) 2898 `read-package-tree@5.2.1` 2899 ([@zkat](https://github.com/zkat)) 2900 2901## v6.0.0-0 (2018-03-23): 2902 2903Sometimes major releases are a big splash, sometimes they're something 2904smaller. This is the latter kind. That said, we expect to keep this in 2905release candidate status until Node 10 ships at the end of April. There 2906will likely be a few more features for the 6.0.0 release line between now 2907and then. We do expect to have a bigger one later this year though, so keep 2908an eye out for `npm@7`! 2909 2910### *BREAKING* AVOID DEPRECATED 2911 2912When selecting versions to install, we now avoid deprecated versions if 2913possible. For example: 2914 2915``` 2916Module: example 2917Versions: 29181.0.0 29191.1.0 29201.1.2 29211.1.3 (deprecated) 29221.2.0 (latest) 2923``` 2924 2925If you ask `npm` to install `example@~1.1.0`, `npm` will now give you `1.1.2`. 2926 2927By contrast, if you installed `example@~1.1.3` then you'd get `1.1.3`, as 2928it's the only version that can match the range. 2929 2930* [`78bebc0ce`](https://github.com/npm/npm/commit/78bebc0cedc4ce75c974c47b61791e6ca1ccfd7e) 2931 [#20151](https://github.com/npm/npm/pull/20151) 2932 Skip deprecated versions when possible. 2933 ([@zkat](https://github.com/zkat)) 2934 2935### *BREAKING* UPDATE AND OUTDATED 2936 2937When `npm install` is finding a version to install, it first checks to see 2938if the specifier you requested matches the `latest` tag. If it doesn't, 2939then it looks for the highest version that does. This means you can do 2940release candidates on tags other than `latest` and users won't see them 2941unless they ask for them. Promoting them is as easy as setting the `latest` 2942tag to point at them. 2943 2944Historically `npm update` and `npm outdated` worked differently. They just 2945looked for the most recent thing that matched the semver range, disregarding 2946the `latest` tag. We're changing it to match `npm install`'s behavior. 2947 2948* [`3aaa6ef42`](https://github.com/npm/npm/commit/3aaa6ef427b7a34ebc49cd656e188b5befc22bae) 2949 Make update and outdated respect latest interaction with semver as install does. 2950 ([@iarna](https://github.com/iarna)) 2951* [`e5fbbd2c9`](https://github.com/npm/npm/commit/e5fbbd2c999ab9c7ec15b30d8b4eb596d614c715) 2952 `npm-pick-manifest@2.1.0` 2953 ([@iarna](https://github.com/iarna)) 2954 2955### PLUS ONE SMALLER PATCH 2956 2957Technically this is a bug fix, but the change in behavior is enough of an 2958edge case that I held off on bringing it in until a major version. 2959 2960When we extract a binary and it starts with a shebang (or "hash bang"), that 2961is, something like: 2962 2963``` 2964#!/usr/bin/env node 2965``` 2966 2967If the file has Windows line endings we strip them off of the first line. 2968The reason for this is that shebangs are only used in Unix-like environments 2969and the files with them can't be run if the shebang has a Windows line ending. 2970 2971Previously we converted ALL line endings from Windows to Unix. With this 2972patch we only convert the line with the shebang. (Node.js works just fine 2973with either set of line endings.) 2974 2975* [`814658371`](https://github.com/npm/npm/commit/814658371bc7b820b23bc138e2b90499d5dda7b1) 2976 [`7265198eb`](https://github.com/npm/npm/commit/7265198ebb32d35937f4ff484b0167870725b054) 2977 `bin-links@1.1.2`: 2978 Only rewrite the CR after a shebang (if any) when fixing up CR/LFs. 2979 ([@iarna](https://github.com/iarna)) 2980 2981### *BREAKING* SUPPORTED NODE VERSIONS 2982 2983Per our supported Node.js policy, we're dropping support for both Node 4 and 2984Node 7, which are no longer supported by the Node.js project. 2985 2986* [`077cbe917`](https://github.com/npm/npm/commit/077cbe917930ed9a0c066e10934d540e1edb6245) 2987 Drop support for Node 4 and Node 7. 2988 ([@iarna](https://github.com/iarna)) 2989 2990### DEPENDENCIES 2991 2992* [`478fbe2d0`](https://github.com/npm/npm/commit/478fbe2d0bce1534b1867e0b80310863cfacc01a) 2993 `iferr@1.0.0` 2994* [`b18d88178`](https://github.com/npm/npm/commit/b18d88178a4cf333afd896245a7850f2f5fb740b) 2995 `query-string@6.0.0` 2996* [`e02fa7497`](https://github.com/npm/npm/commit/e02fa7497f89623dc155debd0143aa54994ace74) 2997 `is-cidr@2.0.5` 2998* [`c8f8564be`](https://github.com/npm/npm/commit/c8f8564be6f644e202fccd9e3de01d64f346d870) 2999 [`311e55512`](https://github.com/npm/npm/commit/311e5551243d67bf9f0d168322378061339ecff8) 3000 `standard@11.0.1` 3001