v11.2.0

11.2.0 (2025-03-05)

Features

• 247ee1d #8100 cache: add npx commands (@wraithgar)
• 3a80a7b #8081 add --init-type flag (#8081) (@reggi)
• 2a1e11f #8071 move nerfDart list into @npmcli/config (@wraithgar)

Bug Fixes

• 8461186 #8100 update npx cache if possible when spec is a range (@wraithgar)
• e345cc5 #8050 don't suggest npm update outside of valid engine range (#8050) (@milaninfy)
• 811ca29 #8115 stop working around bug fixed in npm-package-arg@12.0.2 (@TrevorBurnham)
• 879303c #8078 warn on invalid publishConfig (#8078) (@wraithgar)
• 41417de #8080 warn when TUF fetching of keys fails (#8080) (@wraithgar)
• 593c849 #8076 warn on invalid single-hyphen cli flags (#8076) (@wraithgar)

Dependencies

• 3d8b257 #8100 @npmcli/package-json@6.1.1
• ab17523 #8134 supports-color@10.0.0
• 3cbe21a #8134 foreground-child@3.3.1
• ee5e1aa #8118 @npmcli/redact@3.1.1
• 5df69b4 #8118 exponential-backoff@3.1.2
• 80c3273 #8118 read@4.1.0
• 7fd70fa #8118 node-gyp@11.1.0
• 7aeffff #8118 cidr-regex@4.1.3
• b0c0490 #8118 is-cidr@5.1.1
• ef49d6b #8118 sigstore@3.1.0
• 1399bfb #8118 socks@2.8.4
• 6b72107 #8118 semver@7.7.1
• c9ad0c4 #8118 @npmcli/git@6.0.3
• b153927 #8115 npm-package-arg@12.0.2
• f0f6265 #8071 nopt@8.1.0

Chores

• cc72b89 #8143 fix smoke tests to account for new release versions within a workspace (#8143) (@reggi)
• c3810bc #8134 dev dependency updates (@wraithgar)
• 9dc40e6 #8118 dev dependency updates (@wraithgar)
• 7ec0831 #8118 update jsonpath-plus (@wraithgar)
• ed85b01 #8071 tests for config warnings/changes (@wraithgar)
• workspace: @npmcli/arborist@9.0.1
• workspace: @npmcli/config@10.1.0
• workspace: libnpmdiff@8.0.1
• workspace: libnpmexec@10.1.0
• workspace: libnpmfund@7.0.1
• workspace: libnpmpack@9.0.1

libnpmpack: v9.0.1

Dependencies

• workspace: @npmcli/arborist@9.0.1

libnpmfund: v7.0.1

Dependencies

• workspace: @npmcli/arborist@9.0.1

libnpmexec: v10.1.0

10.1.0 (2025-03-05)

Features

• d18d422 #8100 add context to npx cache package.json (@wraithgar)

Bug Fixes

• 8461186 #8100 update npx cache if possible when spec is a range (@wraithgar)

Dependencies

• 3d8b257 #8100 @npmcli/package-json@6.1.1
• workspace: @npmcli/arborist@9.0.1

libnpmdiff: v8.0.1

Dependencies

• workspace: @npmcli/arborist@9.0.1

config: v10.1.0

10.1.0 (2025-03-05)

Features

• 3a80a7b #8081 add --init-type flag (#8081) (@reggi)
• 63f2fd7 #8071 warn on unknown configs (@wraithgar)
• 2a1e11f #8071 move nerfDart list into @npmcli/config (@wraithgar)

Bug Fixes

• 879303c #8078 warn on invalid publishConfig (#8078) (@wraithgar)
• 593c849 #8076 warn on invalid single-hyphen cli flags (#8076) (@wraithgar)
• 5e35fde #8071 remove -ws shorthand from config suggestions (@wraithgar)

Dependencies

• f0f6265 #8071 nopt@8.1.0

Chores

• ed85b01 #8071 tests for config warnings/changes (@wraithgar)

arborist: v9.0.1

9.0.1 (2025-03-05)

Bug Fixes

• b9225e5 #8089 resolve override conflicts and apply correct versions (#8089) (@owlstronaut)
• d586f3b #8117 remove duplicate var (#8117) (@TrevorBurnham)
• 811ca29 #8115 stop working around bug fixed in npm-package-arg@12.0.2 (@TrevorBurnham)

v11.1.0

11.1.0 (2025-01-29)

Features

• 7f6c997 #8009 add dry-run to deprecate/undeprecate commands (@wraithgar)
• 1764a37 #8009 add npm undeprecate command (@wraithgar)

Bug Fixes

• 31455b2 #8054 publish: honor force for no dist tag and registry version check (#8054) (@reggi)
• dc31c1b #8038 remove max-len linting bypasses (@wraithgar)
• 8a911ff #8038 publish: disregard deprecated versions when calculating highest version (@wraithgar)
• 7f72944 #8038 publish: accept publishConfig.tag to override highes semver check (@wraithgar)
• ab9ddc0 #7992 sbom: deduplicate sbom dependencies (#7992) (@bdehamer)
• f7da341 #7980 search: properly display multiple search terms (#7980) (@wraithgar)

Documentation

• 3644e79 #8055 update readme for Node.js versions, remove badges (#8055) (@wraithgar)
• f1af61f #8041 fix typos in "package-json" (#8041) (@maxkoryukov)
• e90c6fe #8051 depth flag default value (#8051) (@milaninfy)
• 866b5ee #8030 safer documentation urls, repos, packages (#8030) (@reggi)

Dependencies

• 7ddfbad #8053 @npmcli/package-json@6.1.1
• 9473a86 #8053 spdx-license-ids@3.0.21
• a65e5ce #8053 @sigstore/protobuf-specs@0.3.3
• 215ebe4 #8053 chalk@5.4.1

Chores

• 61f00e3 #8069 splits out smoke-tests from publish-dryrun tests (#8069) (@reggi)
• 6d0f46e #8058 stop publish smoke from check git clean (#8058) (@reggi)
• 9281ebf #8057 fix smoke tests prerelease needs separate string args (#8057) (@reggi)
• aa202e9 #8056 smoke tests using a preid (#8056) (@reggi)
• 18e0449 #8053 dev dependency updates (@wraithgar)
• 859a71c #8052 update node versions for release integration tests (#8052) (@wraithgar)
• 7e7961d #8038 bump @npmcli/eslint-config to 5.1.0 (@wraithgar)
• workspace: @npmcli/config@10.0.1

config: v10.0.1

10.0.1 (2025-01-29)

Documentation

• e90c6fe #8051 depth flag default value (#8051) (@milaninfy)

v11.0.0

11.0.0 (2024-12-16)

⚠️ BREAKING CHANGES

• Upon publishing, in order to apply a default "latest" dist tag, the command now retrieves all prior versions of the package. It will require that the version you're trying to publish is above the latest semver version in the registry, not including pre-release tags.
• npm init now has a type prompt, and sorts the entries the created packages differently
• bun.lockb files are now included in the strict ignore list during packing
• When publishing a package with a pre-release version, you must explicitly specify a tag.
• --ignore-scripts now applies to all lifecycle scripts, include prepare
• npm will no longer fall back to the old audit endpoint if the bulk advisory request fails.
• npm will no longer switch to global mode if aliased to "npmg" or "npm-g" etc.
• The npm hook command has been removed
• Attestations made by this package will no longer validate in npm versions prior to 10.6.0
• npm now supports node ^20.17.0 || >=22.9.0

Documentation

• 8a911da #7963 ls: removed design change pending section note (#7963) (@milaninfy)

Dependencies

• 5319e48 #7973 remove unnecessary sprintf-js files in node_modules (#7973)
• d369c77 #7976 socks-proxy-agent@8.0.5
• 3b2951a #7976 https-proxy-agent@7.0.6
• a598b7b #7976 agent-base@7.1.3
• 52bcaf6 #7976 debug@4.4.0
• aabf345 #7976 p-map@7.0.3
• 28e8761 #7976 npm-package-arg@12.0.1

Chores

• ecd7190 #7976 dev dependency updates (@wraithgar)
• a07f4e0 #7976 @npmcli/template-oss@4.23.6 (@wraithgar)
• 687ab12 #7970 remove pre-release mode from npm 11 and workspaces (#7970) (@wraithgar)
• workspace: @npmcli/arborist@9.0.0
• workspace: @npmcli/config@10.0.0
• workspace: libnpmaccess@10.0.0
• workspace: libnpmdiff@8.0.0
• workspace: libnpmexec@10.0.0
• workspace: libnpmfund@7.0.0
• workspace: libnpmorg@8.0.0
• workspace: libnpmpack@9.0.0
• workspace: libnpmpublish@11.0.0
• workspace: libnpmsearch@9.0.0
• workspace: libnpmteam@8.0.0
• workspace: libnpmversion@8.0.0