v7.0.0-rc.1

v7.0.0-rc.1 (2020-10-02)

• 281a7f39a @npmcli/arborist@0.0.31
  • Allow npm update to update bundled root dependencies
  • Only do implicit node-gyp build for gyp files named binding.gyp
• 384f5ec47 update minipass-fetch to fix many 'cb() never called' errors
• 7b1e75906 @npmcli/run-script@1.7.1
  • Only do implicit node-gyp build for gyp files named binding.gyp
• c20e2f0c7 #1892 Support --omit options in npm outdated

v7.0.0-rc.0

v7.0.0-rc.0 (2020-10-01)

• 3b417055c #1859 fix proxy and https-proxy config support (@badeggg)
• dd7d7a284 @npmcli/arborist@0.0.30
  • #1849 Do not drop peer/dev dep while saving if both set
  • Do not install or build if there is a global top bin conflict
  • Default to building node-gyp dependencies
• 40c17e12c cli-table3@0.6.0
• 47a8ca1d7 byte-size@7.0.0
• 81073f99a eslint@7.10.0
• 67793abd4 eslint-plugin-import@2.22.1
• a27e8d006 is-cidr@4.0.2
• 893fed45e marked-man@0.7.0
• bc20e0c8a rimraf@3.0.2
• a2b8fd3c1 uuid@8.3.0
• ee4c85b87 write-file-atomic@3.0.3
• 4bdad5fdf bin-links@2.2.1
• c394937ec @npmcli/run-script@1.7.0
  • Default to building node-gyp dependencies and projects
• remove many unused dependencies (@ruyadorno)
  • 558e9781a deep-equal
  • 2aa9a1f8a request
  • d77594e52 npm-registry-couchapp
  • 8ec84d9f6 tacks
  • a07b421f7 lincesee
  • 41126e165 npm-cache-filename
  • 130da51b5 npm-registry-mock
  • b355af486 sprintf-js
  • 721c0a873 uid-number
  • 9c920e5f5 umask
  • aae1c38bb config-chain
  • 450845eac find-npm-prefix
  • 963d542d3 has-unicode
  • cad9cbc70 infer-owner
  • 3ae02914d lockfile
  • 7bc474d7c once
  • 5c5e0099a retry
  • cfaddd334 sha
  • 3a978ffc7 slide

v7.0.0-beta.13

v7.0.0-beta.13 (2020-09-29)

• 405e051f7 Fix EBADPLATFORM error message (@#1876)
• e4d911d21 @npmcli/arborist@0.0.28
  • fix: workspaces install entering an infinite loop
  • Save provided range if not a subset of savePrefix
  • package-lock.json custom indentation
  • Check engine and platform when building ideal tree
• 90550b2e0 #1853 test coverage and refactor for token command (@nlf)
• 2715220c9 #1858 #1813 do not include omitted optional dependencies in install output (@ruyadorno)
• e225ddcf8 #1862 #1861 respect depth when running npm ls <pkg> (@ruyadorno)
• 2469ae515 #1870 #1780 Add 'fetch-timeout' config (@isaacs)
• 52114b75e #1871 fix npm ls for linked dependencies (@ruyadorno)
• 9981211c0 #1857 #1703 fix npm outdated parsing invalid specs (@ruyadorno)

v7.0.0-beta.12

v7.0.0-beta.12 (2020-09-22)

• 24f3a5448 #1811 npm ci should never save package.json or lockfile (@isaacs)
• 5e780a5f0 remove unused spec parameter, assign error code (@nlf)
• f019a248a Remove unused npx binary (@isaacs)
• db157b3ce @npmcli/arborist@0.0.27
  • Resolve race condition with conflicting bin links in local installs
  • #1812 Log engine mismatches more usefully
  • #1814 Do not loop trying to resolve dependencies that fail to load
  • npm/rfcs#224 Do not automatically install optional peer dependencies
  • Add the strictPeerDeps option, defaulting to false
  • fix forwarding configs to resolve pkg spec when adding new deps
• b3a50d275 #1846 @npmcli/run-script@1.6.0
  • This updates node-gyp to v7, allowing us to deduplicate a lot of significant dependencies.
• a1d375f6b #1819 Add --strict-peer-deps option (@isaacs)
• 5837a4843 #1699 Use allow/deny list in docs (@luciomartinez)

v7.0.0-beta.11

v7.0.0-beta.11 (2020-09-16)

• 63005f4a9 #1639 npm view should not output extra newline (@MylesBorins)
• 3743a42c8 #1750 add outdated tests (@claudiahdz)
• 2019abdf1 #1786 add lib/link.js tests (@ruyadorno)
• 2f8d11968 @npmcli/arborist@0.0.25
  • add meta vulnerability calculator for faster audits
  • changed parsing specs to be relative to cwd
  • fix logging script execution
  • fix properly following resolved symlinks
  • fix package.json dependencies order
• 49b2bf5a7 @npmcli/config@1.1.8
  • fix unkown envs to be passed through
  • fix setting correct globalPrefix on load
• f9aac351d libnpmversion@1.0.5
  • fix git ignored lockfiles

v7.0.0-beta.10

v7.0.0-beta.10 (2020-09-08)

• 7418970f0 Improve output of dependency node explanations
• 5e49bdaa3 #1776 Add 'npm explain' command

v7.0.0-beta.9

v7.0.0-beta.9 (2020-09-04)

• ef8f5676b #1757 view: always fetch fullMetadata, and preferOnline

• ac5aa709a #1758 fix scope config

• a36e2537f outdated: don't throw on non-version/tag/range dep

• 371f0f062 @npmcli/arborist@0.0.20

  • Provide explanation objects for ERESOLVE errors
  • Support overriding certain classes of ERESOLVE errors with --force
  • Detect changes to package.json requiring package-lock dependency flag re-evaluation

• 2a4e2e9ef #1761 Explain ERESOLVE errors

• 8e3e83bd4 @npmcli/arborist@0.0.21

  • Remove bin links on prune * Remove unnecessary tree walk for workspace projects * Install workspaces on update:true

• d6b134fd9 #1738 #1734 fix package spec parsing during cache add process (@mjeanroy)

• f105eb833 npm-audit-report@2.1.4:

  • Do not crash on cyclical meta-vulnerability references

• 03a9f569b opener@1.5.2

• 5616a23b4 @npmcli/git@2.0.4

  • Support .git files, so that git worktrees are respected

v7.0.0-beta.8

• 834e62a0e
  • fix: npm ls extraneous workspaces
  • @npmcli/arborist@0.0.19
• 758b02358 #1739 add full install options to npm exec (@ruyadorno)
• 2ee7c8a98 @npmcli/config@1.1.7 (@ruyadorno)

v7.0.0-beta.7

• b38f68acd ensure npm-command HTTP header is sent properly 9f200abb9 Properly exit with error status code
• aa0152b58 #1719 Detect CI properly
• 50f9740ca #1717 fund with multiple funding sources (@ruyadorno)
• 3a63ecb6f #1718 RFC-0029 add ability to skip pre/post hooks to npm run-script by using --ignore-scripts (@ruyadorno)

v7.0.0-beta.6

v7.0.0-beta.6 (2020-08-21)

• 707207bdd add @npmcli/config dependency

• 5cb9a1d4d #1688 use @npmcli/config for configuration (@isaacs)

• a4295f5db npm-registry-fetch@8.1.4:

  • Redact passwords from HTTP logs

• a5a6a516d json-parse-even-better-errors@2.3.0:

  • Adds support for indentation/newline formatting preservation

• a14054558 read-package-json-fast@1.2.1:

  • Adds support for indentation/newline formatting preservation

• f8603c8af libnpmversion@1.0.4:

  • Adds support for indentation/newline formatting preservation

• 9891fa71c read-package-json@2.1.2:

  • Adds support for indentation/newline formatting preservation

• b44768aac #1662 #1693 #1690 @npmcli/arborist@0.0.17:

  • Load root project package.json when running loadVirtual.
  • Fetch metadata from registry when loading tree from outdated package-lock.json file. This avoids a situation where a lockfile or shrinkwrap from npm v5 would result in deleting dependencies on install.
  • Preserve package.json and package-lock.json formatting in all places where these files are written.

• 281da6fdc tar@6.0.5

• 1faa5b33d #1655 show usage when help-search finds no results

• 10fcff73a #1695 fix pulseWhileDone promise handling

• 88e4241c5 #1698 add lib/logout.js unit tests (@ruyadorno)