Skip to searchSkip to content
npm Docs
npmjs.comStatusSupport

Changelog

Select CLI Version:

See DetailsTable of contents

11.0.0-pre.0 (2024-11-26)

⚠️ BREAKING CHANGES

  • When publishing a package with a pre-release version, you must explicitly specify a tag.
  • --ignore-scripts now applies to all lifecycle scripts, include prepare
  • npm will no longer fall back to the old audit endpoint if the bulk advisory request fails.
  • npm will no longer switch to global mode if aliased to "npmg" or "npm-g" etc.
  • The npm hook command has been removed
  • Attestations made by this package will no longer validate in npm versions prior to 10.6.0
  • npm now supports node ^20.17.0 || >=22.9.0
  • @npmcli/docs now supports node ^20.17.0 || >=22.9.0

Features

Bug Fixes

  • 16b7367 #7910 publishing prerelease requires explicit tag (#7910) (@reggi)
  • e19bff0 #7901 perf: enable compile cache if present (#7901) (@H4ad)
  • 080a0f2 #7911 remove old audit fallback request (@wraithgar)
  • 780afc5 #7855 pkg: display if any of multiple attributes exist (#7855) (@Sanderovich)
  • ecd2d23 #7842 don't go into global mode if aliased to npmg (#7842) (@wraithgar)
  • 62c71e5 #7835 removes npm hook command (@reggi)
  • 7f541e8 #7815 make pack and exec work with git hash refs (#7815) (@milaninfy)
  • 3162620 #7831 sets node engine range to ^20.17.0 || >=22.9.0 (@reggi)
  • 4c8ba0a #7831 for @npmcli/docs sets node engine range to ^20.17.0 || >=22.9.0 (@reggi)
  • 70cd88d #7808 view: sort and truncate dist-tags (#7808) (@wraithgar)
  • 534ad77 #7795 remove unused parameters catch statements (#7795) (@btea)

Documentation

  • feb54f7 #7822 package.json: add libc field (#7822) (@wraithgar)

Dependencies

Chores

10.9.0 (2024-10-03)

Features

Bug Fixes

  • 6ca609e #7789 ping and doctor commands fix for checking if registry is online (#7789) (@milaninfy)

Documentation

  • 63d6a73 #7783 package.json: add brief section on exports, link to Node.js docs (#7783) (@wheresrhys)
  • 366c07e #7776 remove incorrect note about npm install (#7776) (@wraithgar)

Dependencies

Chores

10.8.3 (2024-08-28)

Bug Fixes

  • 7e61151 #7759 docs: init usage description corrected (#7759) (@milaninfy)
  • 2404c7e #7738 publish: consider package-spec when inside workspace dir (#7738) (@milaninfy)
  • 91e46a3 #7721 init: use locally installed version of given package (#7721) (@milaninfy)
  • 4e81a6a #7674 always set exit code if exiting uncleanly (#7674) (@wraithgar, @hashtagchris)
  • a947f25 #7679 update lifecycle script list in run-script (#7679) (@sonsurim)

Documentation

  • e674987 #7743 update docs for npmrc and package-json (#7743) (@milaninfy)
  • 24d5350 #7742 fix and update scoped configuration example (#7742) (@demedos)

Dependencies

Chores

10.8.2 (2024-07-09)

Bug Fixes

  • 3101a40 #7631 limit concurrent open files during 'npm cache verify' (#7631) (@oikumene)
  • 2273183 #7595 outdated: fixed wanted range for alias with version range (#7595) (@milaninfy)
  • 15be6dd #7574 don't try parsing workspaces if none exist (@wraithgar)

Documentation

  • ac937d4 #7616 install: add save-peer flag (#7616) (@drew4237)
  • 55639ef #7615 use git+https in package.com url examples (#7615) (@MikeMcC399)
  • 93883bb #7582 Improve manpage section for package.json funding properties (#7582) (@kemitchell)
  • 92e71e6 #7576 fix links to community discussions (#7576) (@leobalter)

Dependencies

Chores

  • 2490b49 #7621 remove .github/workflows/benchmark.yml (#7621) (@wraithgar)
  • 3b8b111 #7605 update devDependencies in lockfile (@wraithgar)

10.8.1 (2024-05-29)

Bug Fixes

  • 6b55646 #7569 exec: look in workspace and root for bin entries (#7569) (@wraithgar)
  • e4c7a41 #7564 publish: skip workspace packages marked private on publish (#7564) (@milaninfy)
  • 8f94ae8 #7556 utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)
  • 2d1d8d0 #7559 adds node: specifier to all native node modules (#7559) (@reggi)
  • 7d89b55 #7490 ci: rm workspace node_modules (#7490) (@reggi)
  • 9122fb6 #7516 cache: add both full and minified packument to cache (#7516) (@milaninfy)
  • 9e6686b #7545 send proper otp token on web auth (#7545) (@wraithgar)
  • b1db070 #7534 refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)
  • 53cda32 #7542 refactor ls to use output.buffer for json (#7542) (@lukekarrys)
  • 61d5771 #7541 remove json.stringify from all commands (#7541) (@lukekarrys)
  • 4dfc7d2 #7540 pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)
  • 3cefdf6 #7538 outdated: return array for outdated deps from multiple workspaces (@lukekarrys)
  • ef4c975 #7508 view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)

Documentation

  • fd6479f #7560 update publish docs: dist-tag + publish case (#7560) (@davidlj95)

Dependencies

Chores

  • 2d84091 #7568 fix snapshots for updated @npmcli/package-json (@wraithgar)
  • 6574dc9 #7566 dev dependency updates (@wraithgar)

10.8.0 (2024-05-15)

Features

  • 1e375c1 #7442 create exit handler class (#7442) (@lukekarrys)

Bug Fixes

  • d5c3289 #7513 refactor: use output buffer and error for more commands (#7513) (@lukekarrys)
  • 12f103c #7533 add first param titles to logs where missing (#7533) (@lukekarrys)
  • badeac2 #7521 config: use redact on config output (#7521) (@lukekarrys)
  • 76aef74 #7520 view: refactor exec and execWorkspaces to call same methods (#7520) (@lukekarrys)
  • b54cdb8 #7515 refactor: create new error output primitives (#7515) (@lukekarrys)
  • e40454c #7506 view: dont unwrap arrays in json mode (#7506) (@lukekarrys)
  • 6f64148 require stdout to be a TTY for progress (#7507) (@lukekarrys)
  • db62910 #7504 config: be more aggressive about hiding protected values (#7504) (@wraithgar)
  • 6d456bb #7497 dont write log file for completion commands (#7497) (@lukekarrys)
  • 722c0fa #7463 limit packument cache size based on heap size (@wraithgar)
  • ca1a68d #7474 log if npm deprecate does not match any version (#7474) (@mbtools)
  • 261ea19 #7457 run input.start around help and openining urls (@lukekarrys)
  • 4ab6cf4 #7459 publish: validate dist-tag (#7459) (@reggi)

Documentation

  • b2ce025 #7518 suggest correct bin entry (#7518) (@Santoshraj2)
  • bdd2aae #7502 remove obsolete removal using make uninstall (#7502) (@avinal)
  • c3d2819 #7496 npm help json/global command on windows (#7496) (@klm-turing, @lukekarrys)
  • 268303c #7479 add npm version to every local help output (#7479) (@klm-turing)
  • e39d422 #7473 suggest "npm repo" for showing the repo of a package (#7473) (@full-stop)
  • f6fff32 #7433 clarify what peerDependenciesMeta does (#7433) (@xuhdev, @wraithgar)

Dependencies

Chores

10.7.0 (2024-04-30)

Features

Bug Fixes

  • d679ce8 #7449 linting: no-unused-vars (@wraithgar)
  • 2558283 #7450 powershell: fallback to script root if globalPrefix does not exist (#7450) (@lukekarrys)
  • bc4c342 #7448 account for registries with no publisher in search (#7448) (@wraithgar)
  • bcc781a #7439 move run-script banners to stderr when in json mode (#7439) (@lukekarrys)
  • 104fcb5 #7438 remove doctor log for each file permission check (#7438) (@lukekarrys)
  • 5230647 #7422 rewrite powershell scripts to use PSScriptRoot (#7422) (@lukekarrys)
  • 71cbd91 #7421 hide banner for exec and explore (#7421) (@lukekarrys)
  • 57ebebf #7418 update repository.url in package.json (#7418) (@wraithgar)

Documentation

  • 1674136 #7441 correct search help output (#7441) (@wraithgar)

Dependencies

Chores

  • 356c374 #7453 fix test fixture for new redact behavior (@wraithgar)
  • 2fba4b7 #7449 update devDependencies in lockfile (@wraithgar)

10.6.0 (2024-04-25)

Features

  • 9123de4 #7373 do all ouput over proc-log events (@lukekarrys)
  • 9622597 #7339 refactor terminal display (#7339) (@lukekarrys)

Bug Fixes

  • 0e74ee4 #7416 clean up npm object (#7416) (@wraithgar)
  • c060e60 #7415 return command and argv from load (@lukekarrys)
  • 180b919 #7415 remove unused npm.setCmd method (@lukekarrys)
  • 0708b3b #7414 use name of level instead of label for logging prefixes (#7414) (@lukekarrys)
  • 7f4e667 #7403 redact when displaying non-ascii arguments (@lukekarrys)
  • 06202f0 #7403 store unref promises for awaiting in tests (@lukekarrys)
  • e5f1948 #7403 run update notifier after exec but before waiting (@lukekarrys)
  • f309c1c #7403 refactor: move timer and error logfile messages to lib/npm (@lukekarrys)
  • 43e6194 #7403 dont show run script banners in silent (@lukekarrys)
  • 694dba9 #7403 dont expose as many public properties of timers (@lukekarrys)
  • 7ca6d84 #7403 use proc-log META for flush and force (@lukekarrys)
  • 2538438 #7403 dont write timing logs to file unless requested (@lukekarrys)
  • 7e04417 #7403 rename base-cmd to match other commands (@lukekarrys)
  • fc68547 #7403 remove some npm.load timers and exit earlier for --versions (@lukekarrys)
  • 28019d5 #7403 cleanup: move cli specific files to separate dir (@lukekarrys)
  • 469f788 #7403 cleanup: newlines and whitespace (@lukekarrys)
  • 4ab6401 #7403 cleanup: dont nest files utils dir (@lukekarrys)
  • 78447d7 #7399 prefer fs/promises over promisify (#7399) (@lukekarrys)
  • d531f8b #7407 Remove table output from search and tar summary (@wraithgar)
  • c209e98 #7401 Remove table output from many commands (@wraithgar)
  • ad7ab8c #7388 perf: lazy loading optimizations (#7388) (@wraithgar)
  • 8eae4b3 #7385 token: properly await registry request (#7385) (@wraithgar)
  • 9216d59 #7377 better output colors (#7377) (@wraithgar)
  • 6512112 #7378 use proc-log for all timers (@lukekarrys)
  • 2a80dab #7370 typo in npm access usage (#7370) (@mbtools)

Documentation

  • dfa4cab #7401 update output examples (@wraithgar)
  • 140b9c9 #7382 package-json: note that line endings are inferred (#7382) (@ertw)
  • c16dd4e #7367 Document that overrides only work in the root package.json (#7367) (@s100)

Dependencies

Chores

  • 3cbc258 #7403 test for early version exit (@lukekarrys)
  • 08e0c0e #7403 move sigstore json files to fixtures dir (@lukekarrys)
  • ea66e95 #7380 remove licensee as a devDependency (#7380) (@lukekarrys, @wraithgar)
  • 9333e9d #7386 reduce windows shim test flakes (#7386) (@lukekarrys)

10.5.2 (2024-04-10)

Bug Fixes

  • ef381b1 #7363 use @npmcli/redact for url cleaning (#7363) (@lukekarrys)
  • 3760dd2 #7361 perf: do less work loading config (#7361) (@wraithgar)
  • 64bcf4c #7360 perf: only initialize workpaces when we are inside a workspace (#7360) (@H4ad)
  • 5a28a29 #7352 perf: lazy load workspace dependency (#7352) (@H4ad)
  • 5fc0f9d #7347 lazy load validate npm package name on error message (#7347) (@H4ad)
  • c929ed1 #7321 prioritize CLI flags over publishConfig settings (#7321) (@roni-berlin)
  • 70497cb #7346 perf: avoid importing the entire semver package for update-notifier (#7346) (@H4ad)

Documentation

  • 90ba1c9 #7340 fix incorrect ISO 8601 reference (#7340) (@emmanuel-ferdman)

Dependencies

Chores

10.5.1 (2024-04-03)

Bug Fixes

  • 17d97d2 #7334 use @npmcli/redact for log redactions (@lukekarrys)
  • 8cab136 #7324 ensure maxSockets is respected (#7324) (@lukekarrys)
  • 9bffa13 #7320 query: properly return :missing nodes (#7320) (@wraithgar)
  • 9d4e85f #7297 search: include searchlimit option in help output (#7297) (@10xLaCroixDrinker)
  • bdb3c28 #7274 added check for dry-run (#7274) (@cod1r)
  • 7f1ab88 #7271 more lightweight npm bin discovery in windows (#7271) (@wraithgar)

Documentation

  • 1da5cf0 #7198 add link to engines section (#7198) (@uiolee)
  • 1114a12 #7307 fix incorrect npm audit key response link (#7307) (@davidlj95)
  • 9807caf #7304 update audit docs with provenance info (#7304) (@bdehamer)
  • e1ecfa7 #7285 Correct capitalization for URL (#7285) (@coliff)

Dependencies

Chores

10.5.0 (2024-02-28)

Features

  • 2366edc #7218 query: add :vuln pseudo selector (@wraithgar)
  • 4f3ddbb #5966 add --expect-entries to npm query (@wraithgar)

Bug Fixes

  • 818957c #7158 pack, publish: default foreground-scripts to true (#7158) (@ljharb)
  • d04111d #7197 view: filter out invalid semver (#7197) (@wraithgar)
  • b0a3ba0 #7195 prevent adding invalid dist-tag (#7195) (@wraithgar)

Documentation

  • c4741fe #7254 Remove additional example and comments about uninstall script (#7254) (@rveerd)
  • 686a622 #7247 scope: update example command to work in windows (#7247) (@robertobasile84)
  • 95b5057 #5966 clarify in-range and out-of-range in dependency selectors (@wraithgar)
  • 5b7184f #7190 workspaces: fix grammar (#7190) (@alekstech)
  • 0dd03f9 #7182 fix typos (#7182) (@GoodDaisy)

Dependencies

Chores

  • d6bc684 #7242 update devDependencies in lockfile (@wraithgar)

10.4.0 (2024-01-24)

Features

  • 35a098c #7175 display tree diff on --long (@wraithgar)
  • dffca29 #7174 format: print --dry-run diffs in table format (#7174) (@ritaaktay)
  • 6d5f9ac #7133 dedupe - display difference when --dry-run is enabled (#7133) (@Blaumaus)

Bug Fixes

  • ec06f77 #7175 inline diff table code w/ summary code (@wraithgar)
  • d4ebfba #7157 use util.stripVTControlCharacters instead of strip-ansi (@wraithgar)
  • 81c95c7 #7063 don't reset update notifier duration on every check (#7063) (@wraithgar)

Documentation

  • 2b7eaad #7168 package-json: Reword warning about publishing local dependencies (#7168) (@DanKaplanSES)
  • 67ab0f7 #7142 update: Replace comma with period in run on sentence (#7142) (@DanKaplanSES)
  • 05c69dc #7150 config: State default configuration file affected by npm config set (#7150) (@DanKaplanSES)
  • 44f4518 #7149 Link to the config command in the npm configuration description (#7149) (@DanKaplanSES)
  • dd5699f #7152 update: Fix a typo and remove unneeded statement (#7152) (@DanKaplanSES)

Dependencies

Chores

10.3.0 (2024-01-10)

Features

  • 6673c77 #6914 add --libc option to override platform specific install (#6914) (@wraithgar, @Brooooooklyn)

Bug Fixes

  • b7fc10a #7113 filter C0 and C1 control characters from logs and cli output (#7113) (@wraithgar)

Dependencies

Chores

10.2.5 (2023-12-06)

Bug Fixes

  • c7a592c #7061 dont use cache for update notifier manifest request (@lukekarrys)
  • 7b952f6 #7049 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)
  • be4741f #7039 unpublish bugfixes (#7039) (@wraithgar)
  • bc7f53d #7036 reverse direction of SPDX SBOM dependency rels (#7036) (@bdehamer, @antonbauhofer)
  • 11ec231 #7033 skip creation of log directory if logs-max is set to 0 (#7033) (@JJ)
  • 6267f54 #7005 properly catch missing url opener error on interactive prompt (#7005) (@wraithgar)

Dependencies

Chores

10.2.4 (2023-11-14)

Bug Fixes

  • cd291e7 #6995 refactor search formatting code (#6995) (@wraithgar)
  • f3a7380 #6973 look in workspace for exec commands (#6973) (@wraithgar)
  • d11496b #6977 pkg: properly output in workspace mode (#6977) (@wraithgar)
  • 0f70088 #6969 correctly handle object licenses in SBOM generation (#6969) (@jamietanna)
  • dce3b08 #6951 properly catch missing url opener error (#6951) (@wraithgar)

Documentation

  • a38836c #6616 add path usage for view command (#6616) (@RobinKnipe)
  • da18e4f #6987 update npm-prune description (#6987) (@Eomm)

Dependencies

10.2.3 (2023-11-02)

Dependencies

10.2.2 (2023-10-31)

Bug Fixes

  • 8ed6d28 #6910 make npm link respect --no-save (#6910) (@Santoshraj2)
  • eacec5f #6941 add back bin/node-gyp-bin/node-gyp files (#6941) (@lukekarrys)
  • b776753 #6928 Grammar mistake in authentication error message (#6928) (@Gekuro, gek)

Documentation

  • c422a01 #6924 use markdown links instead of html (@lukekarrys)
  • dd03aa0 #6921 add v9 and above for lockfile version 3 (#6921) (@MikeMcC399)

Dependencies

10.2.1 (2023-10-18)

Bug Fixes

  • 35c92fe #6902 Add check to pkg command to deal with empty values (#6902) (@NeonArray)
  • 5b6172f #6895 logout from custom registry (@wraithgar)
  • 8423d4f #6895 delete auth from proper location on logout (@wraithgar)
  • 0cfe9de #6873 audit: spelling error in message (#6873) (@Fdawgs)

Documentation

  • 5142735 #6894 update npm build description (#6894) (@siemhesda)
  • 2e4b4ad #6861 npm publish content modification (#6861) (@jpg619)

Dependencies

10.2.0 (2023-10-02)

Features

  • 7c459d2 #6801 add npm sbom command (#6801) (@bdehamer)
  • 81a460f #6732 add package-lock-only mode to npm query (@wraithgar)
  • 0d29855 #6732 add no-package-lock mode to npm audit (@wraithgar)

Bug Fixes

  • 2207628 #6823 use strip-ansi module instead of internal regex (#6823) (@wraithgar)
  • d46d052 #6798 tolerate null bugs URLs (#6798) (@vladh)
  • fb1b674 #6758 deprecate: ignore implicit workspace mode (#6758) (@wraithgar)

Documentation

  • 68031f2 #6844 update CONTRIBUTING.md to prevent errors (#6844) (@darcyclarke)
  • 3ac703c #6831 add includeparam to commands that have omit param (#6831) (@siemhesda)
  • 03912db #6819 add init-specific params to init docs/help (#6819) (@wraithgar)
  • 8088325 #6800 Update npm-doctor.md (#6800) (@siemhesda)

Dependencies

10.1.0 (2023-09-08)

Features

  • 1c93c44 #6755 Add --cpu and --os option to override platform specific install (#6755) (@yukukotani)

Bug Fixes

  • 7bf2374 #6762 make $npm_execpath always point to npm (@rotu)

Documentation

  • 09d8e0a #6759 fix versions of node.js in readme (#6759) (@JoaoOtavioS)

Dependencies

10.0.0 (2023-08-31)

Features

  • 48a7b07 remove prerelease flags (@lukekarrys)

Dependencies

10.0.0-pre.1 (2023-08-31)

⚠️ BREAKING CHANGES

  • support for node <=16.13 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed
  • support for node 14 has been removed

Bug Fixes

Documentation

  • c736b62 #6686 add missing bugs key in package-json.md (#6686) (@airscripts)
  • c1e01d9 #6680 Update package-json.md (#6680) (@p-chan, @ljharb)

Dependencies

10.0.0-pre.0 (2023-07-26)

⚠️ BREAKING CHANGES

  • the "ci-name" config has been removed
  • npm no longer treats missing scripts as a special case in workspace mode. Use if-present to ignore missing scripts.
  • npm now supports node ^18.17.0 || >=20.5.0

Features

  • b6cf113 #6674 set engines and prerelease for npm 10 (#6674) (@lukekarrys)

Bug Fixes

  • e0d3edd #6641 remove "ci-name" config (@wraithgar)
  • 0318f44 #6641 remove implicit if-present logic from run-script workspaces (@wraithgar)

Documentation

  • e5338af #6672 remove link to deprecated npm set-script command (#6672) (@emmanuel-ferdman)

Dependencies

Edit this page on GitHub
6 contributorsgithub-actions[bot]wraithgarfritzynlflukekarrysruyadorno
Last edited by github-actions[bot] on November 26, 2024

Table of contents