chore(deps)!: update npm (8.0.0 → 11.9.0) [SECURITY] (#47)

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [npm](https://docs.npmjs.com/)
([source](https://redirect.github.com/npm/cli)) | [`>=8.0.0` →
`>=11.9.0`](https://renovatebot.com/diffs/npm/npm/8.0.0/11.9.0) |
![age](https://developer.mend.io/api/mc/badges/age/npm/npm/11.9.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm/8.0.0/11.9.0?slim=true)
|

---

### Packing does not respect root-level ignore files in workspaces
[CVE-2022-29244](https://nvd.nist.gov/vuln/detail/CVE-2022-29244) /
[GHSA-hj9c-8jmm-8c52](https://redirect.github.com/advisories/GHSA-hj9c-8jmm-8c52)

<details>
<summary>More information</summary>

#### Details
##### Impact
`npm pack` ignores root-level `.gitignore` & `.npmignore` file exclusion
directives when run in a workspace or with a workspace flag (ie.
`--workspaces`, `--workspace=<name>`). Anyone who has run `npm pack` or
`npm publish` with workspaces, as of
[v7.9.0](https://redirect.github.com/npm/cli/releases/tag/v7.9.0) &
[v7.13.0](https://redirect.github.com/npm/cli/releases/tag/v7.13.0)
respectively, may be affected and have published files into the npm
registry they did not intend to include.

##### Patch
- Upgrade to the latest, patched version of `npm`
([`v8.11.0`](https://redirect.github.com/npm/cli/releases/tag/v8.11.0)
or greater), run: `npm i -g npm@latest`
- Node.js versions
[`v16.15.1`](https://redirect.github.com/nodejs/node/releases/tag/v16.15.1),
[`v17.19.1`](https://redirect.github.com/nodejs/node/releases/tag/v17.9.1)
&
[`v18.3.0`](https://redirect.github.com/nodejs/node/releases/tag/v18.3.0)
include the patched `v8.11.0` version of `npm`

##### Steps to take to see if you're impacted
1. Run `npm publish --dry-run` or `npm pack` with an `npm` version
`>=7.9.0` & `<8.11.0` inside the project's root directory using a
workspace flag like: `--workspaces` or `--workspace=<name>` (ex. `npm
pack --workspace=foo`)
2. Check the output in your terminal which will list the package
contents (note: `tar -tvf <package-on-disk>` also works)
3. If you find that there are files included you did not expect, you
should:
3.1. Create & publish a new release excluding those files (ref.
["Keeping files out of your
Package"](https://docs.npmjs.com/cli/v8/using-npm/developers#keeping-files-out-of-your-package))
3.2. Deprecate the old package (ex. `npm deprecate
<pkg>[@&#8203;<version>] <message>`)
3.3. Revoke or rotate any sensitive information (ex. passwords, tokens,
secrets etc.) which might have been exposed

##### References
- [CVE-2022-29244](https://nvd.nist.gov/vuln/detail/CVE-2022-29244)
- [`npm-packlist`](https://redirect.github.com/npm/npm-packlist)
-
[`libnpmpack`](https://redirect.github.com/npm/cli/tree/latest/workspaces/libnpmpack)
-
[`libnpmpublish`](https://redirect.github.com/npm/cli/tree/latest/workspaces/libnpmpublish)

#### Severity
- CVSS Score: 7.5 / 10 (High)
- Vector String: `CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N`

#### References
-
[https://github.com/npm/cli/security/advisories/GHSA-hj9c-8jmm-8c52](https://redirect.github.com/npm/cli/security/advisories/GHSA-hj9c-8jmm-8c52)
-
[https://nvd.nist.gov/vuln/detail/CVE-2022-29244](https://nvd.nist.gov/vuln/detail/CVE-2022-29244)
-
[https://github.com/nodejs/node/pull/43210](https://redirect.github.com/nodejs/node/pull/43210)
-
[https://github.com/nodejs/node/releases/tag/v16.15.1](https://redirect.github.com/nodejs/node/releases/tag/v16.15.1)
-
[https://github.com/nodejs/node/releases/tag/v17.9.1](https://redirect.github.com/nodejs/node/releases/tag/v17.9.1)
-
[https://github.com/nodejs/node/releases/tag/v18.3.0](https://redirect.github.com/nodejs/node/releases/tag/v18.3.0)
- [https://github.com/npm/cli](https://redirect.github.com/npm/cli)
-
[https://github.com/npm/cli/releases/tag/v8.11.0](https://redirect.github.com/npm/cli/releases/tag/v8.11.0)
-
[https://github.com/npm/cli/tree/latest/workspaces/libnpmpack](https://redirect.github.com/npm/cli/tree/latest/workspaces/libnpmpack)
-
[https://github.com/npm/cli/tree/latest/workspaces/libnpmpublish](https://redirect.github.com/npm/cli/tree/latest/workspaces/libnpmpublish)
-
[https://github.com/npm/npm-packlist](https://redirect.github.com/npm/npm-packlist)
-
[https://security.netapp.com/advisory/ntap-20220722-0007](https://security.netapp.com/advisory/ntap-20220722-0007)

This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-hj9c-8jmm-8c52) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database)
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).
</details>

---

### npm cli Uncontrolled Search Path Element Local Privilege Escalation
Vulnerability
[CVE-2026-0775](https://nvd.nist.gov/vuln/detail/CVE-2026-0775) /
[GHSA-3966-f6p6-2qr9](https://redirect.github.com/advisories/GHSA-3966-f6p6-2qr9)

<details>
<summary>More information</summary>

#### Details
npm cli Incorrect Permission Assignment Local Privilege Escalation
Vulnerability. This vulnerability allows local attackers to escalate
privileges on affected installations of npm cli. An attacker must first
obtain the ability to execute low-privileged code on the target system
in order to exploit this vulnerability.

The specific flaw exists within the handling of modules. The application
loads modules from an unsecured location. An attacker can leverage this
vulnerability to escalate privileges and execute arbitrary code in the
context of a target user.

#### Severity
- CVSS Score: 7.0 / 10 (High)
- Vector String: `CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H`

#### References
-
[https://nvd.nist.gov/vuln/detail/CVE-2026-0775](https://nvd.nist.gov/vuln/detail/CVE-2026-0775)
-
[https://github.com/npm/cli/issues/8939](https://redirect.github.com/npm/cli/issues/8939)
- [https://github.com/npm/cli](https://redirect.github.com/npm/cli)
-
[https://www.zerodayinitiative.com/advisories/ZDI-26-043](https://www.zerodayinitiative.com/advisories/ZDI-26-043)

This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-3966-f6p6-2qr9) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database)
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).
</details>

---

### Release Notes

<details>
<summary>npm/cli (npm)</summary>

###
[`v11.9.0`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1190-2026-02-04)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.8.0...v11.9.0)

##### Features

-
[`f5f6cf7`](f5f6cf7c9f)
[#&#8203;8943](https://redirect.github.com/npm/cli/pull/8943) config:
add --allow-git
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))

##### Bug Fixes

-
[`2242f25`](2242f25158)
[#&#8203;8952](https://redirect.github.com/npm/cli/pull/8952) webauth:
improve error messages around webauth in non-TTY
([#&#8203;8952](https://redirect.github.com/npm/cli/issues/8952))
([@&#8203;Andarist](https://redirect.github.com/Andarist))

##### Dependencies

-
[`332c9f3`](332c9f355f)
[#&#8203;8960](https://redirect.github.com/npm/cli/pull/8960)
`glob@13.0.1`
-
[`eca02c7`](eca02c78c9)
[#&#8203;8960](https://redirect.github.com/npm/cli/pull/8960)
`minimatch@10.1.2` `@isaacs/brace-expansion@5.0.1`
-
[`b3f8475`](b3f847568b)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`minipass-fetch@5.0.1`
-
[`924171b`](924171bf57)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`is-cidr@6.0.2`
-
[`4404002`](4404002a16)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`ci-info@4.4.0`
-
[`b65af73`](b65af737d8)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`lru-cache@11.2.5`
-
[`164c355`](164c35580b)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`tar@7.5.7`
-
[`a74a19c`](a74a19ce52)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951)
`node-gyp@12.2.0`
-
[`e0bc212`](e0bc2129c9)
[#&#8203;8943](https://redirect.github.com/npm/cli/pull/8943)
`pacote@21.1.0`

##### Chores

-
[`4a82a8f`](4a82a8f2e8)
[#&#8203;8951](https://redirect.github.com/npm/cli/pull/8951) dev
dependency updates
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.2.0):
`@npmcli/arborist@9.2.0`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.6.0):
`@npmcli/config@10.6.0`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.1.0):
`libnpmdiff@8.1.0`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.2.0):
`libnpmexec@10.2.0`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.14):
`libnpmfund@7.0.14`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.1.0):
`libnpmpack@9.1.0`

###
[`v11.8.0`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1180-2026-01-21)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.7.0...v11.8.0)

##### Features

-
[`545e861`](545e86154c)
[#&#8203;8828](https://redirect.github.com/npm/cli/pull/8828) show proxy
environment variables in npm config list (Max Black)

##### Bug Fixes

-
[`c2f784d`](c2f784dbb5)
[#&#8203;8859](https://redirect.github.com/npm/cli/pull/8859) preserve
serialNumber UUID in CycloneDX SBOM output
[#&#8203;8837](https://redirect.github.com/npm/cli/issues/8837)
([#&#8203;8859](https://redirect.github.com/npm/cli/issues/8859))
([@&#8203;saksham-malhotra-27](https://redirect.github.com/saksham-malhotra-27))
-
[`f2c3af7`](f2c3af7de1)
[#&#8203;8840](https://redirect.github.com/npm/cli/pull/8840) more
intuitive byte formatting boundaries for rounding
([#&#8203;8840](https://redirect.github.com/npm/cli/issues/8840))
([@&#8203;watilde](https://redirect.github.com/watilde))

##### Documentation

-
[`3474ec3`](3474ec35fb)
[#&#8203;8866](https://redirect.github.com/npm/cli/pull/8866) fix
typo/logic error in npm-dedupe docs
([#&#8203;8866](https://redirect.github.com/npm/cli/issues/8866))
([@&#8203;Schweinepriester](https://redirect.github.com/Schweinepriester))
-
[`5552e46`](5552e46512)
[#&#8203;8797](https://redirect.github.com/npm/cli/pull/8797)
npm-install: explain package-lock.json behavior
([#&#8203;8797](https://redirect.github.com/npm/cli/issues/8797))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)

##### Dependencies

-
[`f478ca0`](f478ca0efb)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`postcss-selector-parser@7.1.1`
-
[`2b6a71f`](2b6a71fae3)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`path-scurry@2.0.1`
-
[`19096f2`](19096f2888)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`sigstore@4.1.0`
-
[`e7f5d1e`](e7f5d1e445)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`lru-cache@11.2.4`
-
[`9e756ae`](9e756ae2b5)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`ip-address@10.1.0`
-
[`f951820`](f951820017)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`common-ancestor-path@2.0.0`
-
[`7a949ad`](7a949ad896)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`@sigstore/verify@3.1.0`
-
[`6979ce1`](6979ce1e04)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`@sigstore/sign@4.1.0`
-
[`b4a6a41`](b4a6a41bcc)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`@sigstore/core@3.1.0`
-
[`dc8a8e8`](dc8a8e8090)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`@sigstore/tuf@4.0.1`
-
[`be221ea`](be221eae29)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`validate-npm-package-name@7.0.2`
-
[`149823d`](149823de9a)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`diff@8.0.3`
-
[`32b2001`](32b2001f55)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919)
`tar@7.5.4`

##### Chores

-
[`8f599df`](8f599df6a3)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919) pin jsdom
to 27.0.0 ([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`f4f1161`](f4f1161520)
[#&#8203;8919](https://redirect.github.com/npm/cli/pull/8919) dev
dependency updates
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.1.10):
`@npmcli/arborist@9.1.10`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.5.0):
`@npmcli/config@10.5.0`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.0.13):
`libnpmdiff@8.0.13`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.1.12):
`libnpmexec@10.1.12`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.13):
`libnpmfund@7.0.13`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.0.13):
`libnpmpack@9.0.13`

###
[`v11.7.0`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1170-2025-12-09)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.6.4...v11.7.0)

##### Features

-
[`b380d15`](b380d15505)
[#&#8203;8697](https://redirect.github.com/npm/cli/pull/8697) add
deduping to notices unless in verbose+ mode
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut))

##### Bug Fixes

-
[`4ebb831`](4ebb831d93)
[#&#8203;8839](https://redirect.github.com/npm/cli/pull/8839) updates
hints to use cli paradigm
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut))
-
[`7896e51`](7896e51812)
[#&#8203;8838](https://redirect.github.com/npm/cli/pull/8838) update the
token list text
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut))
-
[`8ab8668`](8ab86685ba)
[#&#8203;8836](https://redirect.github.com/npm/cli/pull/8836) query:
support package-lock-only in workspaces
([@&#8203;watilde](https://redirect.github.com/watilde))
-
[`35e8d38`](35e8d38ef8)
[#&#8203;8322](https://redirect.github.com/npm/cli/pull/8322) properly
handle newlines with input when using the spinner
([#&#8203;8322](https://redirect.github.com/npm/cli/issues/8322))
([@&#8203;mbtools](https://redirect.github.com/mbtools))
-
[`0c0faae`](0c0faae91d)
[#&#8203;8780](https://redirect.github.com/npm/cli/pull/8780) adduser:
improve email prompt
([#&#8203;8780](https://redirect.github.com/npm/cli/issues/8780))
([@&#8203;mbtools](https://redirect.github.com/mbtools))

##### Documentation

-
[`7f2ab9d`](7f2ab9dac6)
[#&#8203;8810](https://redirect.github.com/npm/cli/pull/8810) scripts:
replace deprecated prepublish and install examples with prepare (Max
Black)
-
[`91ebab7`](91ebab777e)
[#&#8203;8847](https://redirect.github.com/npm/cli/pull/8847) remove
note about token create being disabled
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut))
-
[`2030250`](2030250fbc)
[#&#8203;8822](https://redirect.github.com/npm/cli/pull/8822) scripts:
clarify prepare script runs with --production (Max Black)
-
[`33a50d7`](33a50d7981)
[#&#8203;8821](https://redirect.github.com/npm/cli/pull/8821) scripts:
update npm\_package\_\* environment variables documentation (Max Black)
-
[`50508f9`](50508f9b18)
[#&#8203;8793](https://redirect.github.com/npm/cli/pull/8793)
package-json: add documentation for type field
([#&#8203;8793](https://redirect.github.com/npm/cli/issues/8793))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`aa1dd7e`](aa1dd7e974)
[#&#8203;8823](https://redirect.github.com/npm/cli/pull/8823) scripts:
document that prepare scripts run concurrently in workspaces (Max Black)
-
[`3f48487`](3f48487aa3)
[#&#8203;8820](https://redirect.github.com/npm/cli/pull/8820)
package-spec: fix alias syntax in examples (Max Black)
-
[`dd104da`](dd104da7d7)
[#&#8203;8812](https://redirect.github.com/npm/cli/pull/8812) version:
add note about git version requirements (Max Black)
-
[`58afdcc`](58afdcc209)
[#&#8203;8792](https://redirect.github.com/npm/cli/pull/8792) install:
clarify prerelease version range behavior (Max Black)
-
[`9f818e8`](9f818e8cdf)
[#&#8203;8795](https://redirect.github.com/npm/cli/pull/8795) npm-view:
clarify object property access syntax and provide examples (Max Black)
-
[`39c2f2e`](39c2f2ef89)
[#&#8203;8791](https://redirect.github.com/npm/cli/pull/8791) add
examples for command line flags including --prefix (Max Black)
-
[`1298530`](1298530af0)
[#&#8203;8790](https://redirect.github.com/npm/cli/pull/8790) clarify
version field can be omitted in package-lock (Max Black)
-
[`090b6ca`](090b6cacb8)
[#&#8203;8794](https://redirect.github.com/npm/cli/pull/8794) npx:
clarify that arguments are passed to executed command (Max Black)
-
[`a864f80`](a864f80799)
[#&#8203;8787](https://redirect.github.com/npm/cli/pull/8787) document
gypfile field in package.json (Max Black)
-
[`2fc689d`](2fc689dfa0)
[#&#8203;8788](https://redirect.github.com/npm/cli/pull/8788) add field
access patterns to npm view (Max Black)
-
[`4850639`](48506391c6)
[#&#8203;8796](https://redirect.github.com/npm/cli/pull/8796)
package-json: add examples for replacing dependencies with forks in
overrides (Max Black)
-
[`4864dd4`](4864dd4289)
[#&#8203;8798](https://redirect.github.com/npm/cli/pull/8798)
npm-install: document engines field priority when installing packages
(Max Black)
-
[`95d25cd`](95d25cd97d)
[#&#8203;8799](https://redirect.github.com/npm/cli/pull/8799)
package-json: clarify repository field normalization during publish (Max
Black)
-
[`a367f9b`](a367f9bdac)
[#&#8203;8800](https://redirect.github.com/npm/cli/pull/8800)
package-lock-json: clarify that version field may be omitted for certain
dependencies (Max Black)
-
[`ffc9b71`](ffc9b713b6)
[#&#8203;8801](https://redirect.github.com/npm/cli/pull/8801)
npm-install: clarify --tag does not override package.json
([#&#8203;8801](https://redirect.github.com/npm/cli/issues/8801))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`73688ca`](73688ca5eb)
[#&#8203;8735](https://redirect.github.com/npm/cli/pull/8735) clarify
npm version behavior with prerelease versions
([#&#8203;8735](https://redirect.github.com/npm/cli/issues/8735))
([@&#8203;yashwantbezawada](https://redirect.github.com/yashwantbezawada))
-
[`4a32606`](4a32606ff5)
[#&#8203;8785](https://redirect.github.com/npm/cli/pull/8785) updates
the token create documentation
([#&#8203;8785](https://redirect.github.com/npm/cli/issues/8785))
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut),
[@&#8203;wraithgar](https://redirect.github.com/wraithgar))

##### Chores

-
[`54929ce`](54929cef8e)
[#&#8203;8836](https://redirect.github.com/npm/cli/pull/8836) update
baseline-browser-mapping
([@&#8203;watilde](https://redirect.github.com/watilde))

##### Dependencies

-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.1.9):
`@npmcli/arborist@9.1.9`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.4.5):
`@npmcli/config@10.4.5`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.0.12):
`libnpmdiff@8.0.12`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.1.11):
`libnpmexec@10.1.11`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.12):
`libnpmfund@7.0.12`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.0.12):
`libnpmpack@9.0.12`

###
[`v11.6.4`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1164-2025-11-25)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.6.3...v11.6.4)

##### Documentation

-
[`dfb83c7`](dfb83c7887)
[#&#8203;8749](https://redirect.github.com/npm/cli/pull/8749) add
example for keywords field
([#&#8203;8749](https://redirect.github.com/npm/cli/issues/8749))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`1b1e227`](1b1e227d23)
[#&#8203;8750](https://redirect.github.com/npm/cli/pull/8750) remove
outdated roadmap link
([#&#8203;8750](https://redirect.github.com/npm/cli/issues/8750))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`1333d57`](1333d57644)
[#&#8203;8752](https://redirect.github.com/npm/cli/pull/8752) clarify
.npmrc naming convention for environment variable overrides
([#&#8203;8752](https://redirect.github.com/npm/cli/issues/8752))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev))
-
[`22cddb8`](22cddb83f8)
[#&#8203;8755](https://redirect.github.com/npm/cli/pull/8755) add
workspace dependencies example to workspaces (Max Black)
-
[`17e154c`](17e154cac7)
[#&#8203;8756](https://redirect.github.com/npm/cli/pull/8756)
standardize env vars to uppercase convention (Max Black)
-
[`1e51a25`](1e51a25d02)
[#&#8203;8754](https://redirect.github.com/npm/cli/pull/8754) fix
lifecycle event order for prepare script (Max Black)
-
[`8d72bc9`](8d72bc99dc)
[#&#8203;8753](https://redirect.github.com/npm/cli/pull/8753) add os,
cpu, and funding fields to package-lock.json (Max Black)

##### Dependencies

-
[`f56bb13`](f56bb133bb)
[#&#8203;8779](https://redirect.github.com/npm/cli/pull/8779)
`proc-log@6.1.0`
([#&#8203;8779](https://redirect.github.com/npm/cli/issues/8779))
-
[`f963223`](f96322350e)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`proggy@4.0.0`
-
[`f51e4aa`](f51e4aaf06)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`nopt@9.0.0`
-
[`2d15040`](2d15040390)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/query@5.0.0`
-
[`9d77b84`](9d77b84ce9)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/installed-package-contents@4.0.0`
-
[`e2ac092`](e2ac092fda)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`read@5.0.1`
-
[`6e5bfd9`](6e5bfd93f5)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`init-package-json@8.2.4`
-
[`7f8e237`](7f8e2376e2)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`p-map@7.0.4`
-
[`a4aa218`](a4aa218fa0)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`npm-user-validate@4.0.0`
-
[`6430446`](643044690b)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`npm-audit-report@7.0.0`
-
[`58650dc`](58650dc089)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/fs@5.0.0`
-
[`4a11146`](4a11146aa7)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`glob@13.0.0`
-
[`00511d4`](00511d426a)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/cacache@20.0.3`
-
[`224afa2`](224afa2717)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/map-workspaces@5.0.3`
-
[`664ac34`](664ac341ef)
[#&#8203;8770](https://redirect.github.com/npm/cli/pull/8770)
`@npmcli/package-json@7.0.4`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.1.8):
`@npmcli/arborist@9.1.8`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.4.4):
`@npmcli/config@10.4.4`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.0.11):
`libnpmdiff@8.0.11`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.1.10):
`libnpmexec@10.1.10`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.11):
`libnpmfund@7.0.11`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.0.11):
`libnpmpack@9.0.11`

###
[`v11.6.3`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1163-2025-11-19)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.6.2...v11.6.3)

##### Bug Fixes

-
[`c6242d9`](c6242d92e5)
[#&#8203;8706](https://redirect.github.com/npm/cli/pull/8706) change npm
profile to create tokens with GAT support
([#&#8203;8706](https://redirect.github.com/npm/cli/issues/8706))
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut),
[@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`cbc6fa9`](cbc6fa9cd7)
[#&#8203;8731](https://redirect.github.com/npm/cli/pull/8731) order of
version information in error message
([#&#8203;8731](https://redirect.github.com/npm/cli/issues/8731))
([@&#8203;piotrd](https://redirect.github.com/piotrd),
[@&#8203;pd-be](https://redirect.github.com/pd-be))
-
[`11dbd7e`](11dbd7e362)
[#&#8203;8709](https://redirect.github.com/npm/cli/pull/8709) display
full token when creating authentication tokens
([#&#8203;8709](https://redirect.github.com/npm/cli/issues/8709))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`49a4eef`](49a4eefd61)
[#&#8203;8676](https://redirect.github.com/npm/cli/pull/8676) use look
behind regex for trailing slash stripping
([#&#8203;8676](https://redirect.github.com/npm/cli/issues/8676))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`b1aee62`](b1aee62082)
[#&#8203;8645](https://redirect.github.com/npm/cli/pull/8645) dep flag
calculation
([#&#8203;8645](https://redirect.github.com/npm/cli/issues/8645))
([@&#8203;liamcmitchell](https://redirect.github.com/liamcmitchell))

##### Documentation

-
[`ca53c21`](ca53c21e8a)
[#&#8203;8745](https://redirect.github.com/npm/cli/pull/8745) add
workspace usage examples
([#&#8203;8745](https://redirect.github.com/npm/cli/issues/8745))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`e71ca0e`](e71ca0e193)
[#&#8203;8746](https://redirect.github.com/npm/cli/pull/8746) add --save
flag to documentation
([#&#8203;8746](https://redirect.github.com/npm/cli/issues/8746))
([@&#8203;MaxBlack-dev](https://redirect.github.com/MaxBlack-dev), Max
Black)
-
[`06510a8`](06510a8720)
[#&#8203;8683](https://redirect.github.com/npm/cli/pull/8683) add
ignore-scripts option to npm version help and docs
([#&#8203;8683](https://redirect.github.com/npm/cli/issues/8683))
([@&#8203;Tejas242](https://redirect.github.com/Tejas242))

##### Dependencies

-
[`7f72238`](7f7223833b)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`cacache@20.0.2`
-
[`7ac9db8`](7ac9db8564)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`init-package-json@8.2.3`
-
[`41e97c6`](41e97c65d1)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`validate-npm-package-name@7.0.0`
-
[`6b1fbe1`](6b1fbe1ef3)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-package-arg@13.0.2`
-
[`aa1d486`](aa1d486a4e)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/promise-spawn@9.0.1`
-
[`599c819`](599c819e52)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`which@6.0.0`
-
[`e49286e`](e49286e218)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`ini@5.0.0`
-
[`b7c9f96`](b7c9f96006)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/promise-spawn@9.0.0`
-
[`8cc9f70`](8cc9f70c27)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`ssri@13.0.0`
-
[`0b7274f`](0b7274fa39)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`pacote@21.0.4`
-
[`59b3c6a`](59b3c6adf5)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/redact@4.0.0`
-
[`578abad`](578abad64d)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`node-gyp@12.1.0`
-
[`89c4151`](89c4151a91)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/git@7.0.1`
-
[`c6d109d`](c6d109d7ad)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`make-fetch-happen@15.0.3`
-
[`34d8599`](34d8599987)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-registry-fetch@19.1.1`
-
[`4811a86`](4811a86a56)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/run-script@10.0.3`
-
[`6cb77df`](6cb77df379)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/installed-package-contents@4.0.0`
-
[`05ac7a7`](05ac7a7ea2)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`proc-log@6.0.0`
-
[`0a74f6d`](0a74f6d1d8)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`bin-links@6.0.0`
-
[`c02ce5c`](c02ce5c132)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/package-json@7.0.2`
-
[`9c0cefa`](9c0cefa841)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`json-parse-even-better-errors@5.0.0`
-
[`041b9b2`](041b9b29b3)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`parse-conflict-json@5.0.1`
-
[`a1b0fea`](a1b0feac64)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/name-from-folder@4.0.0`
-
[`a085745`](a085745da6)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`abbrev@4.0.0`
-
[`00d9c7d`](00d9c7da41)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`nopt@9.0.0`
-
[`3404dca`](3404dca3d9)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-install-checks@8.0.0`
-
[`542fcf3`](542fcf3eee)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/node-gyp@5.0.0`
-
[`89e14d3`](89e14d376f)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`tar@7.5.2`
-
[`5383f3a`](5383f3aa68)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-registry-fetch@19.1.0`
-
[`1bb9a7d`](1bb9a7d4ce)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-profile@12.0.1`
-
[`de619a4`](de619a40ec)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-pick-manifest@11.0.3`
-
[`0e042ec`](0e042ec4ed)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`npm-packlist@10.0.3`
-
[`2a3c338`](2a3c338714)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`node-gyp@11.5.0`
-
[`b96e86c`](b96e86cca5)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`minimatch@10.1.1`
-
[`d347329`](d347329513)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`exponential-backoff@3.1.3`
-
[`d6830f4`](d6830f4fac)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/run-script@10.0.2`
-
[`bcc7ec8`](bcc7ec83ad)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/metavuln-calculator@9.0.3`
-
[`7a419df`](7a419df651)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723)
`@npmcli/map-workspaces@5.0.1`

##### Chores

-
[`32bdd83`](32bdd833f8)
[#&#8203;8723](https://redirect.github.com/npm/cli/pull/8723) fix
package-lock
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`4bff14b`](4bff14b536)
[#&#8203;8670](https://redirect.github.com/npm/cli/pull/8670) write
tarball to testDir
([#&#8203;8670](https://redirect.github.com/npm/cli/issues/8670))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`679486b`](679486b095)
[#&#8203;8672](https://redirect.github.com/npm/cli/pull/8672) fix
lockfile
([#&#8203;8672](https://redirect.github.com/npm/cli/issues/8672))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.1.7):
`@npmcli/arborist@9.1.7`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.4.3):
`@npmcli/config@10.4.3`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.0.10):
`libnpmdiff@8.0.10`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.1.9):
`libnpmexec@10.1.9`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.10):
`libnpmfund@7.0.10`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.0.10):
`libnpmpack@9.0.10`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpublish-v11.1.3):
`libnpmpublish@11.1.3`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmversion-v8.0.3):
`libnpmversion@8.0.3`

###
[`v11.6.2`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1162-2025-10-08)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.6.1...v11.6.2)

##### Bug Fixes

-
[`c54d1e9`](c54d1e96f3)
[#&#8203;8633](https://redirect.github.com/npm/cli/pull/8633) progress
bar code cleanup
([#&#8203;8633](https://redirect.github.com/npm/cli/issues/8633))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`d352e27`](d352e27a67)
[#&#8203;8629](https://redirect.github.com/npm/cli/pull/8629) do not
redact notice logs going to stdout
([#&#8203;8629](https://redirect.github.com/npm/cli/issues/8629))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`5ac3678`](5ac3678fea)
[#&#8203;8617](https://redirect.github.com/npm/cli/pull/8617) spelling
in ./lib and ./test/lib
([#&#8203;8617](https://redirect.github.com/npm/cli/issues/8617))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`9197995`](9197995ef0)
[#&#8203;8619](https://redirect.github.com/npm/cli/pull/8619) spelling
([#&#8203;8619](https://redirect.github.com/npm/cli/issues/8619))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`dd884e3`](dd884e371c)
[#&#8203;8618](https://redirect.github.com/npm/cli/pull/8618) spelling
([#&#8203;8618](https://redirect.github.com/npm/cli/issues/8618))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`f6028e6`](f6028e67aa)
[#&#8203;8614](https://redirect.github.com/npm/cli/pull/8614) skip
redacting urls meant for opening by the user
([#&#8203;8614](https://redirect.github.com/npm/cli/issues/8614))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar),
[@&#8203;jolyndenning](https://redirect.github.com/jolyndenning))
-
[`54fd27f`](54fd27f9f6)
[#&#8203;8602](https://redirect.github.com/npm/cli/pull/8602) refactor
node.ideallyInert to node.inert
([#&#8203;8602](https://redirect.github.com/npm/cli/issues/8602))
([@&#8203;liamcmitchell](https://redirect.github.com/liamcmitchell))
-
[`79e3c1e`](79e3c1eff7)
[#&#8203;8593](https://redirect.github.com/npm/cli/pull/8593) use
[@&#8203;npmcli/package-json](https://redirect.github.com/npmcli/package-json)
to normalize package data
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))

##### Documentation

-
[`0469c5e`](0469c5ebec)
[#&#8203;8639](https://redirect.github.com/npm/cli/pull/8639) rewrap
markdown
([#&#8203;8639](https://redirect.github.com/npm/cli/issues/8639))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`9ceb9c1`](9ceb9c1d18)
[#&#8203;8636](https://redirect.github.com/npm/cli/pull/8636) rewrap
markdown
([#&#8203;8636](https://redirect.github.com/npm/cli/issues/8636))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`6324370`](6324370942)
[#&#8203;8616](https://redirect.github.com/npm/cli/pull/8616) fix
spelling
([#&#8203;8616](https://redirect.github.com/npm/cli/issues/8616))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`1b0429a`](1b0429af3b)
[#&#8203;8607](https://redirect.github.com/npm/cli/pull/8607) Fix
spelling
([#&#8203;8607](https://redirect.github.com/npm/cli/issues/8607))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`7fbe07a`](7fbe07a6ad)
[#&#8203;8603](https://redirect.github.com/npm/cli/pull/8603) clean up
deprecated `npm access` commands
([#&#8203;8603](https://redirect.github.com/npm/cli/issues/8603))
([@&#8203;jsoref](https://redirect.github.com/jsoref))

##### Dependencies

-
[`fa7cc6f`](fa7cc6f933)
[#&#8203;8662](https://redirect.github.com/npm/cli/pull/8662)
`ci-info@4.3.1`
([#&#8203;8662](https://redirect.github.com/npm/cli/issues/8662))
-
[`b05461b`](b05461b6b1)
[#&#8203;8663](https://redirect.github.com/npm/cli/pull/8663)
`@sigstore/sign@4.0.1`
([#&#8203;8663](https://redirect.github.com/npm/cli/issues/8663))
-
[`c31de22`](c31de22970)
[#&#8203;8661](https://redirect.github.com/npm/cli/pull/8661) downgrade
ci-info to 4.3.0
([#&#8203;8661](https://redirect.github.com/npm/cli/issues/8661))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`c5191b5`](c5191b542a)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`ci-info@4.3.1`
-
[`f255c92`](f255c92abf)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`hosted-git-info@9.0.2`
-
[`bdaf323`](bdaf323a16)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`is-cidr@6.0.1`
-
[`a33f106`](a33f1062c3)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`lru-cache@11.2.2`
-
[`8044e07`](8044e07000)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`npm-package-arg@13.0.1`
-
[`f577504`](f5775043e7)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`npm-packlist@10.0.2`
-
[`9aa4fa6`](9aa4fa6687)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659)
`semver@7.7.3`
-
[`fe9484a`](fe9484a177)
[#&#8203;8593](https://redirect.github.com/npm/cli/pull/8593) remove
normalize-package-data

##### Chores

-
[`b3409f4`](b3409f480f)
[#&#8203;8659](https://redirect.github.com/npm/cli/pull/8659) dev
dependency updates
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[`e8de81b`](e8de81bc82)
[#&#8203;8643](https://redirect.github.com/npm/cli/pull/8643) Add
automatically generated annotation to dependencies.md
([#&#8203;8643](https://redirect.github.com/npm/cli/issues/8643))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`67cfaf3`](67cfaf3529)
[#&#8203;8627](https://redirect.github.com/npm/cli/pull/8627) fix
spelling: different
([#&#8203;8627](https://redirect.github.com/npm/cli/issues/8627))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`17ddc0d`](17ddc0d6af)
[#&#8203;8622](https://redirect.github.com/npm/cli/pull/8622) fix
spelling
([#&#8203;8622](https://redirect.github.com/npm/cli/issues/8622))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`c3e1790`](c3e1790c98)
[#&#8203;8605](https://redirect.github.com/npm/cli/pull/8605) Remove
reference to nonexistent calendar
([#&#8203;8605](https://redirect.github.com/npm/cli/issues/8605))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`ac9143e`](ac9143eafd)
[#&#8203;8604](https://redirect.github.com/npm/cli/pull/8604) Improve
link accessibility for screen reader users
([#&#8203;8604](https://redirect.github.com/npm/cli/issues/8604))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`62d73e7`](62d73e763f)
[#&#8203;8601](https://redirect.github.com/npm/cli/pull/8601) remove
references to benchmarks workflow
([#&#8203;8601](https://redirect.github.com/npm/cli/issues/8601))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`bb4b739`](bb4b73953a)
[#&#8203;8598](https://redirect.github.com/npm/cli/pull/8598) remove
stale comment
([#&#8203;8598](https://redirect.github.com/npm/cli/issues/8598))
([@&#8203;jsoref](https://redirect.github.com/jsoref))
-
[`f73e65d`](f73e65d86d)
[#&#8203;8592](https://redirect.github.com/npm/cli/pull/8592) fix build
url code for remark-github\@&#8203;12
([#&#8203;8592](https://redirect.github.com/npm/cli/issues/8592))
([@&#8203;wraithgar](https://redirect.github.com/wraithgar))
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/arborist-v9.1.6):
`@npmcli/arborist@9.1.6`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/config-v10.4.2):
`@npmcli/config@10.4.2`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmaccess-v10.0.3):
`libnpmaccess@10.0.3`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmdiff-v8.0.9):
`libnpmdiff@8.0.9`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmexec-v10.1.8):
`libnpmexec@10.1.8`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmfund-v7.0.9):
`libnpmfund@7.0.9`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpack-v9.0.9):
`libnpmpack@9.0.9`
-
[workspace](https://redirect.github.com/npm/cli/releases/tag/libnpmpublish-v11.1.2):
`libnpmpublish@11.1.2`

###
[`v11.6.1`](https://redirect.github.com/npm/cli/blob/HEAD/CHANGELOG.md#1161-2025-09-23)

[Compare
Source](https://redirect.github.com/npm/cli/compare/v11.6.0...v11.6.1)

##### Bug Fixes

-
[`d389614`](d3896147c6)
[#&#8203;8579](https://redirect.github.com/npm/cli/pull/8579) corrects
peer dependency flag propagation
([@&#8203;owlstronaut](https://redirect.github.com/owlstronaut))
-
[`5db81c3`](5db81c3506)
[#&#8203;8512](https://redirect.github.com/npm/cli/pull/8512) allow
concurrent non-local npx calls
([#&#8203;8512](https://redirect.github.com/npm/cli/issues/8512))
([@&#8203;jenseng](https://redirect.github.com/jenseng),
[@&#8203;wraithgar](https://redirect.github.com/wraithgar))

##### Documentation

-
[`7a09902`](7a099029db)
[#&#8203;8582](https://redirect.github.com/npm/cli/pull/8582) bring back
certfile
([#&#8203;8582](https://redirect.github.com/npm/cli/issues/8582))
([@&#8203;jenseng](https://redirect.github.com/jenseng))

##### Dependencies

-
[`849dcb6`](849dcb6dc2)
[#&#8203;8589](https://redirect.github.com/npm/cli/pull/8589)
`tar@7.5.1`
([#&#8203;8589](https://redirect.github.com/npm/cli/issues/8589))
-
[`ea15731`](ea15731e32)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`binary-extensions@3.1.0`
-
[`0f41bac`](0f41bace56)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`tiny-relative-date@2.0.2`
-
[`07bf540`](07bf5402fb)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`is-cidr@6.0.0`
-
[`ef87ec6`](ef87ec6612)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`diff@8.0.2`
-
[`48285e0`](48285e04fd)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576) add fdir,
isexe, and picomatch to node\_modules
-
[`099238a`](099238ac13)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`fdir@6.5.0`
-
[`6e4d673`](6e4d673138)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`isexe@3.1.1`
-
[`09a7494`](09a7494b59)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`supports-color@10.2.2`
-
[`c5157c9`](c5157c978f)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`chalk@5.6.2`
-
[`46035db`](46035dbf4d)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`debug@4.4.3`
-
[`5f6664b`](5f6664b7a8)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`spdx-license-ids@3.0.22`
-
[`5516583`](5516583de7)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`socks@2.8.7`
-
[`6a392f3`](6a392f3631)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`tinyglobby@0.2.15`
-
[`9519f18`](9519f189a4)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`npm-install-checks@7.1.2`
-
[`34bafd1`](34bafd153f)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`node-gyp@11.4.2`
-
[`dfd034e`](dfd034eaf9)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`@npmcli/promise-spawn@8.0.3`
-
[`d4eef14`](d4eef14dcd)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`rimraf@6.0.1`
-
[`566f1b7`](566f1b7b48)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`minimatch@10.0.3`
-
[`ac33497`](ac334979ab)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`mkdirp@3.0.1`
-
[`1676626`](167662683d)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`glob@11.0.3`
-
[`817f0b1`](817f0b1eb5)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`ignore-walk@8.0.0`
-
[`79a4e67`](79a4e67c35)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`minizlib@3.0.2`
-
[`38fa2c2`](38fa2c2e67)
[#&#8203;8576](https://redirect.github.com/npm/cli/pull/8576)
`negotiator@1.0.0`
- [`24252a1`](https://redirect.github.com/npm/cli/commit/

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" in timezone Europe/Helsinki,
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/ivuorinen/everforest-resources).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsidHlwZS9tYWpvciJdfQ==-->

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot]
2026-02-05 01:11:40 +02:00
committed by GitHub
parent af0aca2314
commit 7f9e16f515
2 changed files with 2 additions and 4 deletions

4
package-lock.json generated
View File

@@ -17,7 +17,7 @@
},
"engines": {
"node": ">=18.0.0",
"npm": ">=8.0.0"
"npm": ">=11.9.0"
}
},
"node_modules/@babel/code-frame": {
@@ -497,7 +497,6 @@
"integrity": "sha512-3vXmQDXy+woz+gnrTvuvNrPzekOi+Ds0ReMxw0LzBiK3a+1k0kQn9f2NWk+lgD4rJehFUmYy2gMhJ2ZI+7YP9g==",
"dev": true,
"license": "MIT",
"peer": true,
"dependencies": {
"undici-types": "~7.10.0"
}
@@ -679,7 +678,6 @@
"integrity": "sha512-itvL5h8RETACmOTFc4UfIyB2RfEHi71Ax6E/PivVxq9NseKbOWpeyHEOIbmAw1rs8Ak0VursQNww7lf7YtUwzg==",
"dev": true,
"license": "MIT",
"peer": true,
"dependencies": {
"env-paths": "^2.2.1",
"import-fresh": "^3.3.0",

View File

@@ -59,7 +59,7 @@
"homepage": "https://github.com/ivuorinen/everforest-resources#readme",
"engines": {
"node": ">=18.0.0",
"npm": ">=8.0.0"
"npm": ">=11.9.0"
},
"files": [
"terminals/",