"Fossies" - the Fresh Open Source Software Archive

Member "node-v12.18.4-win-x64/node_modules/npm/CHANGELOG.md" (13 Jul 2020, 157405 Bytes) of package /windows/www/node-v12.18.4-win-x64.zip:


As a special service "Fossies" has tried to format the requested source page into HTML format (assuming markdown format). Alternatively you can here view or download the uninterpreted source code file. A member file download can also be achieved by clicking within a package contents listing on the according byte size field.

6.14.6 (2020-07-07)

BUG FIXES

DEPENDENCIES

DOCUMENTATION

6.14.5 (2020-05-01)

BUG FIXES

DEPENDENCIES

6.14.4 (2020-03-24)

DEPENDENCIES

6.14.3 (2020-03-19)

DOCUMENTATION

DEPENDENCIES

6.14.2 (2020-03-03)

DOCUMENTATION

DEPENDENCIES

6.14.1 (2020-02-26)

6.14.0 (2020-02-25)

FEATURES

BUG FIXES

DEPENDENCIES

DOCUMENTATION

MISCELLANEOUS

6.13.7 (2020-01-28)

BUG FIXES

DEPENDENCIES

6.13.6 (2020-01-09)

DEPENDENCIES

6.13.5 (2020-01-09)

BUG FIXES

TESTING

DOCUMENTATION

6.13.4 (2019-12-11)

BUGFIXES

DEPENDENCIES

6.13.3 (2019-12-09)

DEPENDENCIES

6.13.2 (2019-12-03)

BUG FIXES

6.13.1 (2019-11-18)

BUG FIXES

TESTING

DOCUMENTATION

DEPENDENCIES

6.13.0 (2019-11-05)

NEW FEATURES

DOCUMENTATION

BUG FIXES

DEPENDENCIES

TESTING

6.12.1 (2019-10-29)

BUG FIXES

DEPENDENCIES

6.12.0 (2019-10-08):

Now npm ci runs prepare scripts for git dependencies, and respects the --no-optional argument. Warnings for engine mismatches are printed again. Various other fixes and cleanups.

BUG FIXES

FEATURES

DEPENDENCIES

TESTING

6.11.3 (2019-09-03):

Fix npm ci regressions and npm outdated depth.

BUG FIXES

DEPENDENCIES

6.11.2 (2019-08-22):

Fix a recent Windows regression, and two long-standing Windows bugs. Also, get CI running on Windows, so these things are less likely in the future.

DEPENDENCIES

BUGFIXES

TESTS

6.11.1 (2019-08-20):

Fix a regression for windows command shim syntax.

v6.11.0 (2019-08-20):

A few meaty bugfixes, and introducing peerDependenciesMeta.

FEATURES

BUGFIXES

DEPENDENCIES

TESTS

v6.10.3 (2019-08-06):

BUGFIXES

DEPENDENCIES

v6.10.2 (2019-07-23):

tl;dr - Fixes several issues with the cache when npm is run as sudo on Unix systems.

TESTING

BUGFIXES

DEPENDENCIES

v6.10.1 (2019-07-11):

BUGFIXES

DEPENDENCIES

v6.10.0 (2019-07-03):

FEATURES

BUGFIXES

TESTING

DOCUMENTATION

DEPENDENCIES

v6.9.2 (2019-06-27):

This release is identical to v6.9.1, but we had to publish a new version due to a .git directory in the release.

v6.9.1 (2019-06-26):

BUGFIXES

DEPENDENCIES

v6.9.0 (2019-02-20):

FEATURES

BUGFIXES

DOCS

DEPENDENCIES

v6.8.0 (2019-02-07):

This release includes an implementation of RFC #10, documenting an optional field that can be used to specify the directory path for a package within a monorepo.

NEW FEATURES

BUGFIXES

DEPENDENCY BUMPS

MISC

v6.7.0 (2019-01-23):

Hey y’all! This is a quick hotfix release that includes some important fixes to npm@6.6.0 related to the large rewrite/refactor. We’re tagging it as a feature release because the changes involve some minor new features, and semver is semver, but there’s nothing major here.

NEW FEATURES

BUGFIXES

DOCS

DEPENDENCY BUMPS

v6.6.0 (2019-01-17):

REFACTORING OUT npm-REGISTRY-CLIENT

Today is an auspicious day! This release marks the end of a massive internal refactor to npm that means we finally got rid of the legacy npm-registry-client in favor of the shiny, new, window.fetch-like npm-registry-fetch.

Now, the installer had already done most of this work with the release of npm@5, but it turns out every other command still used the legacy client. This release updates all of those commands to use the new client, and while we’re at it, adds a few extra goodies:

There’s too many commits to list all of them here, so check out the PR if you’re curious about details:

NEW FEATURES

BUGFIXES

DOCS

DEPENDENCIES

TESTING

MISCELLANEOUS

v6.5.0 (2018-11-28):

NEW FEATURES

BUGFIXES

DOCS UPDATES

DEPENDENCIES

MISCELLANEOUS

v6.4.1 (2018-08-22):

BUGFIXES

DEPENDENCY BUMPS

DOCUMENTATION

v6.4.0 (2018-08-09):

NEW FEATURES

BUGFIXES

DEPENDENCY UPDATES

A very special dependency update event! Since the release of node-gyp@3.8.0, an awkward version conflict that was preventing request from begin flattened was resolved. This means two things:

  1. We’ve cut down the npm tarball size by another 200kb, to 4.6MB
  2. npm audit now shows no vulnerabilities for npm itself!

Thanks, [@rvagg](https://github.com/rvagg)!

DOCUMENTATION

v6.3.0 (2018-08-01):

This is basically the same as the prerelease, but two dependencies have been bumped due to bugs that had been around for a while.

v6.3.0-next.0 (2018-07-25):

NEW FEATURES

MESSAGING IMPROVEMENTS

MISC

DOCUMENTATION

v6.2.0 (2018-07-13):

In case you missed it, we moved!. We look forward to seeing future PRs landing in npm/cli in the future, and we’ll be chatting with you all in npm.community. Go check it out!

This final release of npm@6.2.0 includes a couple of features that weren’t quite ready on time but that we’d still like to include. Enjoy!

FEATURES

FIXES

DEPENDENCY BUMPS

DOCS

v6.2.0-next.1 (2018-07-05):

This is a quick patch to the release to fix an issue that was preventing users from installing npm@next.

v6.2.0-next.0 (2018-06-28):

NEW FEATURES

BUGFIXES

DOCS

DEPENDENCY SHUFFLE!

We did some reshuffling and moving around of npm’s own dependencies. This significantly reduces the total bundle size of the npm pack, from 8MB to 4.8MB for the distributed tarball! We also moved around what we actually commit to the repo as far as devDeps go.

DEPENDENCIES

v6.1.0 (2018-05-17):

FIX WRITE AFTER END ERROR

First introduced in 5.8.0, this finally puts to bed errors where you would occasionally see Error: write after end at MiniPass.write.

DETECT CHANGES IN GIT SPECIFIERS

OTHER BUGS

DEPENDENCY UPDATES

v6.1.0-next.0 (2018-05-17):

Look at that! A feature bump! npm@6 was super-exciting not just because it used a bigger number than ever before, but also because it included a super shiny new command: npm audit. Well, we’ve kept working on it since then and have some really nice improvements for it. You can expect more of them, and the occasional fix, in the next few releases as more users start playing with it and we get more feedback about what y’all would like to see from something like this.

I, for one, have started running it (and the new subcommand…) in all my projects, and it’s one of those things that I don’t know how I ever functioned -without- it! This will make a world of difference to so many people as far as making the npm ecosystem a higher-quality, safer commons for all of us.

This is also a good time to remind y’all that we have a new RFCs repository, along with a new process for them. This repo is open to anyone’s RFCs, and has already received some great ideas about where we can take the CLI (and, to a certain extent, the registry). It’s a great place to get feedback, and completely replaces feature requests in the main repo, so we won’t be accepting feature requests there at all anymore. Check it out if you have something you’d like to suggest, or if you want to keep track of what the future might look like!

NEW FEATURE: npm audit fix

This is the biggie with this release! npm audit fix does exactly what it says on the tin. It takes all the actionable reports from your npm audit and runs the installs automatically for you, so you don’t have to try to do all that mechanical work yourself!

Note that by default, npm audit fix will stick to semver-compatible changes, so you should be able to safely run it on most projects and carry on with your day without having to track down what breaking changes were included. If you want your (toplevel) dependencies to accept semver-major bumps as well, you can use npm audit fix --force and it’ll toss those in, as well. Since it’s running the npm installer under the hood, it also supports --production and --only=dev flags, as well as things like --dry-run, --json, and --package-lock-only, if you want more control over what it does.

Give it a whirl and tell us what you think! See npm help audit for full docs!

OTHER NEW audit FEATURES

NEW FEATURE: GIT DEPS AND npm init <pkg>!

Another exciting change that came with npm@6 was the new npm init command that allows for community-authored generators. That means you can, for example, do npm init react-app and it’ll one-off download, install, and run create-react-app for you, without requiring or keeping around any global installs. That is, it basically just calls out to npx.

The first version of this command only really supported registry dependencies, but now, [@jdalton](https://github.com/jdalton) went ahead and extended this feature so you can use hosted git dependencies, and their shorthands.

So go ahead and do npm init facebook/create-react-app and it’ll grab the package from the github repo now! Or you can use it with a private github repository to maintain your organizational scaffolding tools or whatnot. ✨

BUGFIXES

DOCUMENTATION

DEPENDENCY BUMPS

v6.0.1 (2018-05-09):

AUDIT SHOULDN’T WAIT FOREVER

This will likely be reduced further with the goal that the audit process shouldn’t noticibly slow down your builds regardless of your network situation.

Looking forward

We’re still a way from having node@11, so now’s a good time to ensure we don’t warn about being used with it.

v6.0.1-next.0 (2018-05-03):

CTRL-C OUT DURING PACKAGE EXTRACTION AS MUCH AS YOU WANT!

SHRONKWRAPS AND LACKFILES

If a published modules had legacy npm-shrinkwrap.json we were saving ordinary registry dependencies (name@version) to your package-lock.json as https:// URLs instead of versions.

AUDIT AUDIT EVERYWHERE

You can’t use it quite yet, but we do have a few last moment patches to npm audit to make it even better when it is turned on!

DOCUMENTATION IMPROVEMENTS

DEPENDENCY UPDATES

v6.0.0 (2018-04-20):

Hey y’all! Here’s another npm@6 release – with node@10 around the corner, this might well be the last prerelease before we tag 6.0.0! There’s two major features included with this release, along with a few miscellaneous fixes and changes.

EXTENDED npm init SCAFFOLDING

Thanks to the wonderful efforts of [@jdalton](https://github.com/jdalton) of lodash fame, npm init can now be used to invoke custom scaffolding tools!

You can now do things like npm init react-app or npm init esm to scaffold an npm package by running create-react-app and create-esm, respectively. This also adds an npm create alias, to correspond to Yarn’s yarn create feature, which inspired this.

DEPENDENCY AUDITING

This version of npm adds a new command, npm audit, which will run a security audit of your project’s dependency tree and notify you about any actions you may need to take.

The registry-side services required for this command to work will be available on the main npm registry in the coming weeks. Until then, you won’t get much out of trying to use this on the CLI.

As part of this change, the npm CLI now sends scrubbed and cryptographically anonymized metadata about your dependency tree to your configured registry, to allow notifying you about the existence of critical security flaws. For details about how the CLI protects your privacy when it shares this metadata, see npm help audit, or read the docs for npm audit online. You can disable this altogether by doing npm config set audit false, but will no longer benefit from the service.

MORE package-lock.json FORMAT CHANGES?!

BUGFIXES

DEPENDENCIES

DOCS

v6.0.0-next.1 (2018-04-12):

NEW FEATURES

BUG FIXES

MISCELLANEOUS

DEPENDENCY UPDATES

v6.0.0-0 (2018-03-23):

Sometimes major releases are a big splash, sometimes they’re something smaller. This is the latter kind. That said, we expect to keep this in release candidate status until Node 10 ships at the end of April. There will likely be a few more features for the 6.0.0 release line between now and then. We do expect to have a bigger one later this year though, so keep an eye out for npm@7!

BREAKING AVOID DEPRECATED

When selecting versions to install, we now avoid deprecated versions if possible. For example:

Module: example
Versions:
1.0.0
1.1.0
1.1.2
1.1.3 (deprecated)
1.2.0 (latest)

If you ask npm to install example@~1.1.0, npm will now give you 1.1.2.

By contrast, if you installed example@~1.1.3 then you’d get 1.1.3, as it’s the only version that can match the range.

BREAKING UPDATE AND OUTDATED

When npm install is finding a version to install, it first checks to see if the specifier you requested matches the latest tag. If it doesn’t, then it looks for the highest version that does. This means you can do release candidates on tags other than latest and users won’t see them unless they ask for them. Promoting them is as easy as setting the latest tag to point at them.

Historically npm update and npm outdated worked differently. They just looked for the most recent thing that matched the semver range, disregarding the latest tag. We’re changing it to match npm install’s behavior.

PLUS ONE SMALLER PATCH

Technically this is a bug fix, but the change in behavior is enough of an edge case that I held off on bringing it in until a major version.

When we extract a binary and it starts with a shebang (or “hash bang”), that is, something like:

#!/usr/bin/env node

If the file has Windows line endings we strip them off of the first line. The reason for this is that shebangs are only used in Unix-like environments and the files with them can’t be run if the shebang has a Windows line ending.

Previously we converted ALL line endings from Windows to Unix. With this patch we only convert the line with the shebang. (Node.js works just fine with either set of line endings.)

BREAKING SUPPORTED NODE VERSIONS

Per our supported Node.js policy, we’re dropping support for both Node 4 and Node 7, which are no longer supported by the Node.js project.

DEPENDENCIES