[Snyk] Upgrade npm from 6.10.0 to 6.11.2

[snyk-bot]

Snyk have raised this PR to upgrade npm from 6.10.0 to 6.11.2.

• The recommended version is 13 versions ahead of your current version.
• The recommended version was released 8 days ago, on 2019-08-22.

Release notes

• 6.11.2 - 2019-08-22

  6.11.2 (2019-08-22):

  Fix a recent Windows regression, and two long-standing Windows bugs. Also, get CI running on Windows, so these things are less likely in the future.

  DEPENDENCIES

  • 9778a1b87 [email protected]: Fix regression where shims fail to preserve exit code (@isaacs)
  • bf93e91d8 [email protected]: Properly handle git+file: urls on Windows when a drive letter is included. (@isaacs)

  BUGFIXES

  • 6cc4cc66f escape args properly on Windows Bash Despite being bash, Node.js running on windows git mingw bash still executes child processes using cmd.exe. As a result, arguments in this environment need to be escaped in the style of cmd.exe, not bash. (@isaacs)

  TESTS

  • 291aba7b8 make tests pass on Windows (@isaacs)
  • fea3a023a travis: run tests on Windows as well (@isaacs)
• 6.11.1 - 2019-08-21

  6.11.1 (2019-08-20):

  Fix a regression for windows command shim syntax.

  • 37db29647 [email protected] (@isaacs)
• 6.11.0 - 2019-08-20

  v6.11.0 (2019-08-20):

  A few meaty bugfixes, and introducing peerDependenciesMeta.

  FEATURES

  • a12341088 #224 Implements peerDependenciesMeta (@arcanis)
  • 2f3b79bba #234 add new forbidden 403 error code (@claudiahdz)

  BUGFIXES

  • 24acc9fc8 and 45772af0d #217 npm.community#8863 npm.community#9327 do not descend into directory deps' child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages (@isaacs and @salomvary)
  • 50cfe113d #229 fixed typo in semver doc (@gall0ws)
  • e8fb2a1bd #231 Fix spelling mistakes in CHANGELOG-3.md (@XhmikosR)
  • 769d2e057 npm/uid-number#7 Better error on invalid --user/--group configs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no 'nobody' user. (@isaacs)
  • 8b43c9624 nodejs/node#28987 npm.community#6032 npm.community#6658 npm.community#6069 npm.community#9323 Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. (@isaacs)
  • 8b85eaa47 save files with inferred ownership rather than relying on SUDO_UID and SUDO_GID. (@isaacs)
  • b7f6e5f02 Infer ownership of shrinkwrap files (@isaacs)
  • 54b095d77 #235 Add spec to dist-tag remove function (@theberbie)

  DEPENDENCIES

  • dc8f9e52f [email protected]: Infer the ownership of all unpacked files in node_modules, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. (@isaacs)
  • bb33940c3 [email protected]:
    • 9c93ac3 #2 npm#3380 Handle environment variables properly (@basbossink)
    • 2d277f8 #25 #36 #35 Fix 'no shebang' case by always providing $basedir in shell script (@igorklopov)
    • adaf20b #26 Fix $* causing an error when arguments contain parentheses (@satazor)
    • 49f0c13 #30 Fix paths for MSYS/MINGW bash (@dscho)
    • 51a8af3 #34 Add proper support for PowerShell (@ExE-Boss)
    • 4c37e04 #10 Work around quoted batch file names (@isaacs)
  • a4e279544 [email protected] (@isaacs):
    • fail properly if uid-number raises an error
  • 7086a1809 [email protected] (@isaacs)
  • 8845141f9 [email protected] (@isaacs)
  • 51c028215 [email protected] (@isaacs)
  • 534a5548c [email protected] (@isaacs)
  • 3038f2fd5 [email protected] (@isaacs)
  • a609a1648 [email protected] (@isaacs)
  • f0346f754 [email protected] (@isaacs)
  • ca9c615c8 [email protected] (@isaacs)
  • b417affbf [email protected] (@isaacs)

  TESTS

  • b6df0913c #228 Proper handing of /usr/bin/node lifecycle-path test (@olivr70)
  • aaf98e88c [email protected] (@isaacs)
• 6.10.3 - 2019-08-06

  v6.10.3 (2019-08-06):

  BUGFIXES

  • 27cccfbda #223 vulns → vulnerabilities in npm audit output (@sapegin)
  • d5e865eb7 #222 #226 install, doctor: don't crash if registry unset (@dmitrydvorkin, @isaacs)
  • 5b3890226 #227 npm.community#9167 Handle unhandledRejections, tell user what to do when encountering an EACCES error in the cache. (@isaacs)

  DEPENDENCIES

  • 77516df6e [email protected] (@isaacs)
  • ceb993590 [email protected] (@isaacs)
  • 4050b9189 [email protected]
    • #46 #43 #47 #44 Add support for GitLab subgroups (@mterrel, @isaacs, @ybiquitous)
    • 3b1d629 #48 fix http protocol using sshurl by default (@fengmk2)
    • 5d4a8d7 ignore noCommittish on tarball url generation (@isaacs)
    • 1692435 use gist tarball url that works for anonymous gists (@isaacs)
    • d5cf830 Do not allow invalid gist urls (@isaacs)
    • e518222 Use LRU cache to prevent unbounded memory consumption (@iarna)
• 6.10.2 - 2019-07-23

  v6.10.2 (2019-07-23):

  tl;dr - Fixes several issues with the cache when npm is run as sudo on Unix systems.

  TESTING

  • 2a78b96f8 check test cache for root-owned files (@isaacs)
  • 108646ebc run sudo tests on Travis-CI (@isaacs)
  • cf984e946 set --no-esm tap flag (@isaacs)
  • 8e0a3100d add script to run tests and leave fixtures for inspection and debugging (@isaacs)

  BUGFIXES

  • 25f4f73f6 add a util for writing arbitrary files to cache This prevents metrics timing and debug logs from becoming root-owned. (@isaacs)
  • 2c61ce65d infer cache owner from parent dir in correct-mkdir util (@isaacs)
  • 235e5d6df ensure correct owner on cached all-packages metadata (@isaacs)
  • e2d377bb6 npm.community#8540 audit: report server error on failure (@isaacs)
  • 52576a39e #216 npm.community#5385 npm.community#6076 Fix npm ci with file: dependencies. Partially reverts #40/#86, recording dependencies of linked deps in order for npm ci to work. (@jfirebaugh)

  DEPENDENCIES

  • 0fefdee13 [email protected] (@isaacs)
    • infer uid/gid instead of accepting as options, preventing the overwhelming majority of cases where root-owned files end up in the cache folder. (ac84d14) (@isaacs) (#1)
    • i18n: add another error message (676cb32) (@zkat)
  • e1d87a392 [email protected] (@isaacs)
    • git: ensure stream failures are reported (7f07b5d) #1 (@lddubeau)
  • 3f035bf09 [email protected] (@isaacs)
  • ba3283112 [email protected] (@isaacs)
  • ee90c334d [email protected] (@isaacs)
  • 1e480c384 [email protected] (@isaacs)
  • 7662ee850 [email protected] (@isaacs)
  • 1357fadc6 [email protected] (@isaacs)
  • a621b5cb6 [email protected] (@isaacs)
  • 560cd31dd [email protected] (@isaacs)
  • de7ae0867 [email protected] (@isaacs)
  • e95da463c [email protected] (@isaacs)
  • 554b641d4 [email protected] (@isaacs)
  • 06772f34a [email protected] (@isaacs)
  • 85358db80 [email protected] (@isaacs)
    • 051cf20 #26 fix switches for alternative shells on Windows (@gucong3000)
    • 3aaf954 #25 set only one PATH env variable for child process on Windows (@zkochan)
    • ea18ed2 #36 #11 #18 remove procInterrupt listener on SIGINT in procError (@mattshin)
    • 5523951 #29 #30 Use platform specific path casing if present (@mattezell)
• 6.10.2-next.3 - 2019-07-22

  6.10.2-next.3

• 6.10.2-next.2 - 2019-07-21

  v6.10.2-next.2

• 6.10.2-next.1 - 2019-07-17

  6.10.2-next.1

• 6.10.2-next.0 - 2019-07-16

  v6.10.2-next.0

• 6.10.1 - 2019-07-11

  BUGFIXES

  • 3cbd57712 fix(git): strip GIT environs when running git (@isaacs)
  • a81a8c4c4 #206 improve isOnly(Dev,Optional) (@larsgw)
  • 172f9aca6 #179 fix-xmas-underline (@raywu0123)
  • f52673fc7 #212 build: use /usr/bin/env to load bash (@rsmarples)

  DEPENDENCIES

  • ef4445ad3 #208 [email protected] (@irega)
  • c0d611356 [email protected] (@isaacs)
  • 7716ba972 [email protected] (@isaacs)
  • 42d22e837 [email protected] (@isaacs)
  • a2ea7f9ff [email protected] (@isaacs)
  • 429226a5e [email protected] (@isaacs)
  • 175670ea6 [email protected]: (@isaacs)
  • 0d0517f7f [email protected] (@isaacs)
  • 741400429 [email protected] (@isaacs)
  • bddd60e30 [email protected] (@isaacs)
  • 4acf03fd1 [email protected] (@isaacs)
  • c2bd17291 [email protected] (@isaacs)
  • 7f0221bb1 [email protected] (@isaacs)
  • f458fe7dd [email protected] (@isaacs)
  • 009752978 [email protected] (@isaacs)
  • 0fa2bb438 [email protected] (@isaacs)
  • b86450929 [email protected] (@isaacs)
  • 25db00fe9 [email protected] (@isaacs)
  • 8dfbe8610 [email protected] (@isaacs)
  • f6164d5dd isaacs/chownr#21 isaacs/chownr#20 npm.community#7901 npm.community#8203 [email protected] This fixes an EISDIR error from cacache on Darwin in Node versions prior to 10.6. (@isaacs)
• 6.10.1-next.2 - 2019-07-10
• 6.10.1-next.1 - 2019-07-03
• 6.10.1-next.0 - 2019-07-03
• 6.10.0 - 2019-07-03

from npm GitHub Release Notes

---

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[vercel]

This pull request is automatically deployed with Now.
To access deployments, click Details below or on the icon next to each push.

Latest deployment for this branch: https://expressjs-open-git-snyk-upgrade-79358b6d70c18d5e32f04465-c00c69.fast-start1.now.sh

[codecov-io]

Codecov Report

Merging #12 into master will not change coverage.
The diff coverage is n/a.

@@          Coverage Diff           @@
##           master     #12   +/-   ##
======================================
  Coverage    45.2%   45.2%           
======================================
  Files          27      27           
  Lines         292     292           
  Branches       31      31           
======================================
  Hits          132     132           
  Misses        145     145           
  Partials       15      15

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 2917973...dab5923. Read the comment docs.