CHANGELOG.md

Changelog

7.1.0 (2023-09-08)

Features

• 1c93c44 #6755 Add --cpu and --os option to override platform specific install (#6755) (@yukukotani)

7.0.0 (2023-08-31)

Features

• fb31c7e trigger release process (@lukekarrys)

7.0.0-pre.0 (2023-08-31)

⚠️ BREAKING CHANGES

• support for node <=16.13 has been removed
• support for node 14 has been removed

Bug Fixes

• 6b251b1 #6706 drop node 16.13.x support (@lukekarrys)
• e3a377d #6706 drop node14 support (@lukekarrys)

Dependencies

• eb41977 #6706 @npmcli/run-script@7.0.1
• f334466 #6706 pacote@17.0.4
• bb63bf9 #6706 @npmcli/run-script@7.0.0
• 43831d0 #6706 pacote@17.0.3
• 44e8fec #6706 pacote@17.0.2
• 2ee0fb3 #6706 npm-registry-fetch@16.0.0
• 81ff4df #6706 pacote@17.0.1
• c3a1a02 #6706 @npmcli/metavuln-calculator@7.0.0
• cac0725 #6706 pacote@17.0.0
• fd8beaf #6706 npm-pick-manifest@9.0.0
• c784b57 #6706 npm-package-arg@11.0.0
• 729e893 #6706 hosted-git-info@7.0.0
• 7af81c7 #6706 cacache@18.0.0
• b0849ab #6706 @npmcli/package-json@5.0.0
• 61e9b00 #6706 @npmcli/metavuln-calculator@6.0.1
• 4c9eb17 #6706 npm-install-checks@6.2.0
• 88ece81 #6706 npm-pick-manifest@8.0.2
• 9117a4f #6706 ssri@10.0.5
• 5eea975 #6706 cacache@17.1.4
• ca33c98 #6706 @npmcli/metavuln-calculator@6.0.0
• edbc25a #6706 pacote@16.0.0
• 5d0d859 #6706 npm-registry-fetch@15.0.0

6.3.0 (2023-07-05)

Features

• 67459e7 #6626 add pkg fix subcommand (@wraithgar)

Bug Fixes

• c61e037 #6626 use new load/create syntax for package-json (@wraithgar)

Dependencies

• b252164 #6626 @npmcli/package-json@4.0.0

6.2.10 (2023-06-21)

Bug Fixes

• f5b9713 #6549 make omit flags work properly with workspaces (#6549) (@Rayyan98, @lukekarrys)
• 40d7e09 #6555 remove unnecessary package.json values (#6555) (@lukekarrys)

6.2.9 (2023-05-03)

Bug Fixes

• a558bbd #6393 code cleanup (#6393) (@wraithgar)

Dependencies

• e498f82 #6416 minimatch@9.0.0

6.2.8 (2023-04-19)

Bug Fixes

• 82879f6 #6225 lazy loading of arborist and pacote (#6225) (@wraithgar)

Dependencies

• 3fa9542 #6363 semver@7.5.0
• 357cc29 #6363 walk-up-path@3.0.1

6.2.7 (2023-04-05)

Dependencies

• f1388b4 #6317 npm update
• deca335 #6317 promise-call-limit@1.0.2

6.2.6 (2023-03-30)

Dependencies

• ea12627 #6275 minimatch@7.4.2

6.2.5 (2023-03-08)

Bug Fixes

• 8a78c6f #6222 only add directories we made to _sparseTreeRoots (#6222) (@nlf)

6.2.4 (2023-03-02)

Bug Fixes

• 962a12e #6193 arborist: dependencies from registries with a peerDependency on a workspace (#6193) (@ixalon)

Dependencies

• 71ae406 #6218 @npmcli/installed-package-contents@2.0.2

6.2.3 (2023-02-22)

Bug Fixes

• 6ed3535 #6175 linked-strategy lifecycle missing bins (#6175) (@fritzy)

Documentation

• 9bc455b #6188 fixing typos (#6188) (@deining)

6.2.2 (2023-02-07)

Bug Fixes

• 12ec7ee remove unused package.json scripts (@lukekarrys)

Dependencies

• d43f881 map-workspaces@3.0.2
• 99457f1 minimatch@6.1.6

6.2.1 (2023-02-01)

Bug Fixes

• 72a7a59 #6095 only save package-lock when truly finished (@wraithgar)

Dependencies

• 721fe3f #6118 read-package-json-fast@3.0.2
• 6e4a649 pacote@15.0.8
• 1820afe cacache@17.0.4
• 4b8046e @npmcli/name-from-folder@2.0.0
• 1d4be7a @npmcli/map-workspaces@3.0.1
• a39556f @npmcli/template-oss@4.11.3

6.2.0 (2023-01-25)

Features

• 8d6d851 #6078 added --install-strategy=linked (#6078) (@fritzy)

6.1.6 (2023-01-12)

Bug Fixes

• b584af0 #6022 remove unneeded param default (@wraithgar)
• 2ba1171 streamline workspace loading code (@wraithgar)
• 2383deb #6037 clean urls from arborist, owner, and ping commands (#6037) (@lukekarrys)
• c52cf6b #5960 properly handle directory, file, git and alias specs in overrides (@nlf)

6.1.5 (2022-12-07)

Bug Fixes

• 83fb125 #5923 audit package mismatch in special case (@fritzy)

Dependencies

• 372d158 #5935 minimatch@5.1.1 (#5935)
• 0a3fe00 #5933 minipass@4.0.0
• cf0a174 ssri@10.0.1
• 3da9a1a pacote@15.0.7
• fee9b66 npm-registry-fetch@14.0.3
• e940917 cacache@17.0.3
• 875bd56 npm-package-arg@10.1.0

6.1.4 (2022-11-30)

Bug Fixes

• 80c6c4a #5907 do not reset hidden lockfile data before saving (#5907) (@nlf)

6.1.3 (2022-11-16)

Bug Fixes

• 3f13818 #5859 refactor / inline single use code (#5859) (@wraithgar)

6.1.2 (2022-11-09)

Dependencies

• 335c7e4 #5813 cacache@17.0.2
• 878ddfb @npmcli/fs@3.1.0

6.1.1 (2022-11-02)

Bug Fixes

• 1f5382d #5789 don't set stdioString for any spawn/run-script calls (@lukekarrys)
• 0c5834e #5758 use hosted-git-info to parse registry urls (#5758) (@lukekarrys)

Dependencies

• b89c19e #5795 cli-table3@0.6.3
• 66f9bcd nopt@7.0.0
• abfb28b @npmcli/run-script@6.0.0

6.1.0 (2022-10-26)

Features

• 3dd8d68 #5751 sort and quote yarn lock keys according to yarn rules (#5751) (@wraithgar, @shalvah)

Dependencies

• de6618e #5757 @npmcli/promise-spawn@5.0.0 (#5757)

6.0.0 (2022-10-19)

Features

• 586e78d empty commit to trigger all workspace releases (@lukekarrys)

6.0.0-pre.5 (2022-10-19)

⚠️ BREAKING CHANGES

• deprecate boolean install flags in favor of --install-strategy
  • deprecate --global-style, --global now sets --install-strategy=shallow
  • deprecate --legacy-bundling, now sets --install-strategy=nested
• this package no longer attempts to change file ownership automatically

Features

• de2d33f add --install-strategy=hoisted|nested|shallow, deprecate --global-style, --legacy-bundling (#5709) (@fritzy)
• 475e9b6 #5703 do not alter file ownership (@nlf)

Bug Fixes

• 1afe5ba account for new npm-package-arg behavior (@wraithgar)

Dependencies

• 88137a3 npmlog@7.0.1
• 2008ea6 npm-package-arg@10.0.0, pacote@15.0.2
• aa01072 #5707 update the following dependencies

6.0.0-pre.4 (2022-10-05)

Features

• 9609e9e #5605 use v3 lockfiles by default (#5605) (@fritzy)

Dependencies

• 5344d2c #5644 pacote@14.0.0
• 6a43b31 @npmcli/metavuln-calculator@4.0.0

6.0.0-pre.3 (2022-09-30)

⚠️ BREAKING CHANGES

• npm pack now follows a strict order of operations when applying ignore rules. If a files array is present in the package.json, then rules in .gitignore and .npmignore files from the root will be ignored.

Features

• 3ae796d implement new npm-packlist behavior (@lukekarrys)

6.0.0-pre.2 (2022-09-23)

Features

• ebf167b add :outdated pseudo selector (@nlf)

Documentation

• 8402fd8 #5547 add :outdated pseudo selector to docs (@nlf)

Dependencies

• d030f10 @npmcli/query@2.0.0

6.0.0-pre.1 (2022-09-14)

Bug Fixes

• f3b0c43 keep saveTypes separate for each add (@wraithgar)

6.0.0-pre.0 (2022-09-08)

⚠ BREAKING CHANGES

• workspaces: all workspace packages are now compatible with the following semver range for node: ^14.17.0 || ^16.13.0 || >=18.0.0

Features

• e95017a #5485 feat(workspaces): update supported node engines in package.json (@lukekarrys)
• 09c46e8 #5324 feat(arborist): allow for selectors and function names with :semver pseudo selector (@nlf)

Bug Fixes

• fe926ed #5484 fix: don't mark workspaces as invalid if installing links (@wraithgar)
• 548e70e #5376 fix: link.target setter (@wraithgar)
• 2db6c08 #5376 fix: loadActual cleanup (@wraithgar)

Documentation

• 285b39f #5324 docs: add documentation for expanded :semver selector (@nlf)

5.6.1 (2022-08-31)

Bug Fixes

• 1e84102 #5350 fix: create links relative to the target (@wraithgar)
• ea5e3a3 #5350 fix: inline single-use functions (@wraithgar)
• 645c680 #5329 fix: update index.js spelling error in comment (@KevinBrother)
• bd2ae5d #5323 fix: linting (@wraithgar)

Dependencies

• 1286f03 #5381 deps: unique-filename@2.0.1
• 2c4e387 #5381 deps: hosted-git-info@5.1.0
• b12ac01 #5381 deps: npm-pick-manifest@7.0.2
• 7fbf6f7 #5381 deps: bin-links@3.0.3
• 26d2e55 #5381 deps: @npmcli/query@1.2.0
• a79ee00 #5381 deps: cacache@16.1.3
• 8ab12dc #5323 deps: @npmcli/eslint-config@3.1.0

5.6.0 (2022-08-17)

Features

• arborist: add :overridden pseudo selector (d221f72)
• arborist: add overridden getter to Node class (e6d4304)
• query: support :overridden pseudo selector (0d4ed0f)

5.5.0 (2022-08-10)

Features

• arborist: add option to forcibly skip loading a virtual tree (96b6781)

Bug Fixes

• query: tell arborist to load an actual tree, not a virtual one (9078e27)

Dependencies

• nopt@6.0.0 (7f31b85)

5.4.0 (2022-08-03)

Features

• add --replace-registry-host=<npmjs|always|never> (#4860) (703dbbf)
• add --replace-registry-host=<npmjs|always|never>| (703dbbf)
• add npm query cmd (#5000) (3c024ac)

Bug Fixes

• arborist: fix bare attribute queries (#5248) (8233fca)
• arborist: pass the edge to fromPath in order to determine correct path (#5233) (050284d)
• arborist: use the sourceReference root rather than the node root for overrides (#5227) (47cc95d), closes #4395

Dependencies

• @npmcli/query@1.1.1 (#5247) (d55007d)

5.3.1 (2022-07-27)

Bug Fixes

• allow hash character in paths (#5122) (62b95a0)

5.3.0 (2022-07-11)

Features

• arborist: add support for dependencies script (#5094) (e9b4214)

5.2.3 (2022-06-23)

Dependencies

• @npmcli/run-script@4.1.3 (#5064) (f59a114)

5.2.2 (2022-06-22)

Bug Fixes

• Add space to SemVer log message (#5042) (e03009f)

Dependencies

• @npmcli/run-script@4.1.0 (2c06cee)
• pacote@13.6.1 (2e50cb8)

5.2.1 (2022-06-01)

Bug Fixes

• arborist: use rawSpec for bundled and shrinkwrapped deps (#4963) (646b6b5)

5.2.0 (2022-05-10)

Features

• add flag --omit-lockfile-registry-resolved (#4874) (bfb8bcc)

Bug Fixes

• arborist: link deps lifecycle scripts (#4875) (5a50762)

5.1.1 (2022-04-26)

Dependencies

• @npmcli/map-workspaces@2.0.3 (3f2b24a)
• cacache@16.0.6 (532883f)
• npmlog@6.0.2 (5e31322)
• semver@7.3.7 (c51e553)

5.1.0 (2022-04-19)

Features

• arborist: add support for installLinks (0ebadf5)

Bug Fixes

• arborist: when replacing a Link with a Node, make sure to remove the Link target from the root (3d96494)

5.0.6 (2022-04-13)

Bug Fixes

• arborist: dont skip adding advisories to audit based on name/range (aa4a4da), closes #4681
• arborist: when reloading an edge, also refresh overrides (4d676e3)

5.0.5 (2022-04-06)

Bug Fixes

• replace deprecated String.prototype.substr() (#4667) (e3da5df)
• update readme badges (#4658) (2829cb2)

Dependencies

• @npmcli/arborist@5.0.4 (679e569)
• @npmcli/move-file@2.0.0 (e9b25cd)
• @npmcli/node-gyp@2.0.0 (0e87cac)
• @npmcli/package-json@2.0.0 (4a9a705)
• npm-install-checks@5.0.0 (ad99360)
• ssri@9.0.0 (a2781a3)
• treeverse@2.0.0 (1a90b9e)

5.0.4 (2022-03-31)

Bug Fixes

• arborist: handle link nodes in old lockfiles correctly (6f9cb49)
• arborist: identify and repair invalid nodes in the virtual tree (bd96ae4)
• arborist: make sure resolveParent exists before checking props (18b8b94)
• make sure we loadOverrides on the root node in loadVirtual() (99d8845)
• only call npmlog progress methods if explicitly requested (#4644) (668ec7f), closes #3314

5.0.3 (2022-03-17)

Bug Fixes

• arborist: _findMissingEdges missing dependency due to inconsistent path separators (#4261) (0e7511d)
• arborist: save workspace version (#4578) (e9a2981)

Dependencies

• @npmcli/metavuln-calculator@3.0.1 (fcc6acf)
• cacache@16.0.0 (e26548f)
• pacote@13.0.5 (340fa51)

5.0.2 (2022-03-10)

Bug Fixes

• rebuild: don't run lifecycle scripts twice on linked deps (#4529) (fbdb431)

Documentation

• standardize changelog heading (#4510) (91f03ee)

5.0.1 (2022-03-08)

Bug Fixes

• set proper workspace repo urls in package.json (#4476) (0cfc155)

2.0.0

• BREAKING CHANGE: root node is now included in inventory
• All parent/target/fsParent/etc. references set in root setter, rather than the hodgepodge of setters that existed before.
• treeCheck function added, to enforce strict correctness guarantees when ARBORIST_DEBUG=1 in the environment (on by default in Arborist tests).

1.0.0

• Release for npm v7 beta
• Fully functional

0.0.0

• Proof of concept
• Before this, it was read-package-tree