chore(deps): update dependency npm to v9.9.4#104
Merged
janishorsts merged 1 commit intomainfrom Aug 19, 2025
Merged
Conversation
renovate
Bot
force-pushed
the
renovate/npm-9.x
branch
3 times, most recently
from
f78c1d6 to
12a341f
Compare
renovate
Bot
force-pushed
the
renovate/npm-9.x
branch
from
12a341f to
4cb1e8c
Compare
janishorsts
approved these changes
Aug 19, 2025
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9.6.1->9.9.4Release Notes
npm/cli (npm)
v9.9.4Compare Source
Dependencies
080e201#7930hosted-git-info@6.1.3(#7930)401bb86#7928tar@6.2.1cfb3b77#7928cross-spawn@7.0.66a5f8a8#7928debug@4.3.772df313#7928hosted-git-info@6.1.2v9.9.3Compare Source
Bug Fixes
88ea8c7#7010 set objectMode for search filter stream (@lukekarrys)8d9d735#7010 unpublish: bubble up all errors parsing local package.json (#7049) (@wraithgar)e0e75e5#7010 unpublish bugfixes (#7039) (@wraithgar)4d59ce1#7047 reverse direction of SPDX SBOM dep rels (#7047) (@bdehamer, @antonbauhofer)878f22b#7008 properly catch missing url opener error (@wraithgar)91a8eca#7008 properly catch missing url opener error on interactive prompt (@wraithgar)Dependencies
1968e0e#7010spdx-license-ids@3.0.17d130576#7010spdx-exceptions@2.5.000f28b8#7010signal-exit@4.1.057096c3#7010postcss-selector-parser@6.0.153ce677e#7010minipass-fetch@3.0.489757ed#7010is-core-module@2.13.1bc1e841#7010socks@2.8.101f4049#7010ignore-walk@6.0.415f8982#7010function-bind@1.1.288ff949#7010cmd-shim@6.0.23e298f6#7010bin-links@4.0.335a6286#7010are-we-there-yet@4.0.2aeb28c4#7010agentkeepalive@4.5.0edc7e23#7010@npmcli/query@3.1.000a3a08#7010tar@6.2.07f424c3#7010ssri@10.0.579b8538#7010semver@7.6.0b5faf10#7010npm-install-checks@6.3.02c62266#7010node-gyp@9.4.1cc0516b#7010minipass@7.0.4651d362#7010json-parse-even-better-errors@3.0.14b239c6#7010glob@10.3.102f65b46#7010fs-minipass@3.0.36c73ddf#7010diff@5.2.073ee6cc#7010ci-info@4.0.064715a4#7010cacache@17.1.4@npmcli/arborist@6.5.1@npmcli/config@6.4.1libnpmaccess@7.0.3libnpmdiff@5.0.21libnpmexec@6.0.5libnpmfund@4.2.2libnpmhook@9.0.4libnpmorg@5.0.5libnpmpack@5.0.21libnpmpublish@7.5.2libnpmsearch@6.0.3libnpmteam@5.0.4libnpmversion@4.0.3Chores
77fa150#7252 release: do not exclude docs directory from CLI release commits (#7162) (@lukekarrys)1d4c464#7252@npmcli/template-oss@4.21.3(@lukekarrys)6780643#7010 dev dependency updates (@wraithgar)ce701e9#7048 fix tests for zlib differences between node versions (#7048) (@wraithgar)v9.9.2Compare Source
Bug Fixes
4c9a5e1#6993 look in workspace for exec commands (#6993) (@wraithgar)bb6f496#6992 correctly handle object licenses in SBOM generation (#6992) (@bdehamer, @jamietanna)10db3ca#6990 pkg: properly output in workspace mode (#6990) (@wraithgar)Documentation
6ab06d7#6985 update npm-prune description (#6985) (@Eomm)Dependencies
libnpmpublish@7.5.1v9.9.1Compare Source
Bug Fixes
0dba79a#6942 add back bin/node-gyp-bin/node-gyp files (@lukekarrys)c93edb5#6932 add backbin/node-gyp-bin/node-gypfiles (@lukekarrys)Documentation
e6cce28#6925 use markdown links instead of html (@lukekarrys)v9.9.0Compare Source
Features
ecda95a#6841 add npm sbom command (#6841) (@bdehamer)fdb8a86#6794 add package-lock-only mode to npm query (@wraithgar)16c04b1#6877 add no-package-lock mode to npm audit (@wraithgar)66ef765#6776 Add--cpuand--osoption to override platform specific install (#6776) (@yukukotani)Bug Fixes
c9406f7#6791 deprecate: ignore implicit workspace mode (#6758) (#6791) (@wraithgar)0b1d7c3#6779 allow searching packages with no description (#6779) (@wraithgar, @lukekarrys)Documentation
9750720#6694 fix example path (#6694) (@fvilers)Dependencies
588a245#6756npm-pick-manifest@8.0.2a76b1df#6877sigstore@1.9.095b5ab0#6877npm-install-checks@6.2.0@npmcli/arborist@6.5.0@npmcli/config@6.4.0libnpmdiff@5.0.20libnpmexec@6.0.4libnpmfund@4.2.1libnpmpack@5.0.20v9.8.1Compare Source
Bug Fixes
38351c9#6651 warn on autocorrected package.json entries during publish (@wraithgar)02c7ddb#6642 much clearer npx 'canceled' error (#6642) (@rahulio96, @AaronHamilton965)Documentation
36bf5fe#6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#6643) (@AaronHamilton965, @rahulio96)Dependencies
a0763d3#6651@npmcli/package-json@4.0.124f5a8b#6653supports-color@9.4.0f45498b#6653chalk@5.3.044d60eb#6653minimatch@9.0.3fc9a843#6653bin-links@3.0.2daad9ad#6653semver@7.5.4c1ffd6a#6653 move @npmcli/fs, @npmcli/promise-spawn into dependencieslibnpmexec@6.0.3v9.8.0Compare Source
Features
67459e7#6626 addpkg fixsubcommand (@wraithgar)89b2741#6548 add ps1 scripts (#6548) (@mribbons, @lukekarrys)Dependencies
b252164#6626@npmcli/package-json@4.0.09238682#6623sigstore@1.7.0(#6623)@npmcli/arborist@6.3.0libnpmdiff@5.0.19libnpmexec@6.0.2libnpmfund@4.0.19libnpmpack@5.0.19libnpmpublish@7.5.0v9.7.2Compare Source
Bug Fixes
939a188#6574 ignore node prereleases in npm engines check (#6574) (@wraithgar)d980405#6556 better color support detection (#6556) (@lukekarrys)40d7e09#6555 remove unnecessary package.json values (#6555) (@lukekarrys)3a7378d#6554 cleanup bin contents (@lukekarrys)e722439#6497 move all definitions to @npmcli/config package (@lukekarrys)Documentation
405ffbf#6557 remove redundant statement about files attribute (#6557) (@DaviDevMod)cd1e6aa#6551 add flagpackage-lock-onlyfornpm install(#6551) (@m4rch3n1ng)Dependencies
aebc523#6585safe-buffer@5.2.1string_decoder@1.3.0(#6585)bb6054b#6573tuf-js@1.1.7aee4a30#6573strip-ansi@7.1.06105dbc#6573path-scurry@1.9.222d44e8#6573read-package-json@6.0.4fdd02fd#6573jackspeak@2.2.17797075#6573is-core-module@2.12.1f9780cc#6573sigstore@1.6.072d6a79#6573semver@7.5.298f1f5f#6573nopt@7.2.08710ff8#6573pacote@15.2.00cb539d#6573node-gyp@9.4.039ad586#6573ini@4.1.15e0070c#6573glob@10.2.7minimatch@9.0.126cf235#6573cacache@17.1.3@npmcli/arborist@6.2.10@npmcli/config@6.2.1libnpmdiff@5.0.18libnpmexec@6.0.1libnpmfund@4.0.18libnpmpack@5.0.18libnpmpublish@7.4.0v9.7.1Compare Source
Dependencies
7467ff6#6518@npmcli/package-json@3.1.1,@npmcli/git@4.1.0v9.7.0Compare Source
Features
a63a6d8#6490 add provenanceFile option for libnpmpublish (@bdehamer)2a8f4f2#6490 add new exclusive config item publish-file (@wraithgar)361e194#6483 implement flag --prefer-dedupe fornpm install(#6483) (@m4rch3n1ng)Bug Fixes
38eb39b#6514 strip ansi characters from search results (#6514) (@wraithgar)4b5ccfc#6477 make usage and completion static functions (#6477) (@lukekarrys)4f39e8c#6479 refactor engines validation to lint syntax (#6479) (@lukekarrys)f3cfe12#6482 remove unused lib/npm relics (#6482) (@lukekarrys)87de0c7#6472 move explore command to @npmcli/package-json (@wraithgar)636e29e#6472 move to @npmcli/package-json where possible (@wraithgar)37cc797#6418 retrieve registry keys via TUF (#6418) (@bdehamer)Documentation
83cd5bd#6480 add global option for uninstall (#6480) (@m4rch3n1ng)0400ce3#6481 add cli params tonpm set,npm get(#6481) (@m4rch3n1ng)c3638ce#6468 removepackage-lockoption fornpm ci(#6468) (@m4rch3n1ng)Dependencies
060d587chalk@5.2.0,npm-audit-report@5.0.0fc52ca8#6472 remove read-package-json-fast3238aa7#6472 remove read-package-json@npmcli/config@6.2.0libnpmexec@6.0.0libnpmpublish@7.3.0v9.6.7Compare Source
Bug Fixes
9202c7d#6464 npm cache completion (#6464) (@m4rch3n1ng)6ce99a8#6461 exit codes in node v20 (#6461) (@MichaelBitard)23c865f#6434 deprecate ci-name config (#6434) (@wraithgar)Documentation
7751dd4#6413 add a comma (#6413) (@darryltec)Dependencies
afc38a5#6458cacache@17.1.2afb936c#6458tuf-js@1.1.6f6a0884#6458readable-stream@4.4.0858f0ca#6458postcss-selector-parser@6.0.1353ecb84#6458path-scurry@1.9.1d93f70c#6458signal-exit@4.0.219214b5#6458@npmcli/package-json@3.1.0f53e6ff#6458sigstore@1.5.294d6ee7#6458glob@10.2.4902cb80#6458semver@7.5.135e2e9a#6458@npmcli/run-script@6.0.2@npmcli/config@6.1.7libnpmpublish@7.2.0v9.6.6Compare Source
Dependencies
70e65b1#6423tuf-js@1.1.5(#6423)72291f7#6416read-package-json@6.0.3e498f82#6416minimatch@9.0.013aa7b7#6416minipass@5.0.0f2a5678#6416tar@6.1.1469d4dd2#6416 npm updateabdca39#6416sigstore@1.4.016f68fb#6416glob@10.2.267fcfb1#6416ignore-walk@6.0.3bfa2ff3#6416make-fetch-happen@11.1.1877591a#6416npm-registry-fetch@14.0.57630517#6416pacote@15.1.3c2d6e0a#6416write-file-atomic@5.0.1acdf97e#6416which@3.0.100c541a#6416ssri@10.0.41b95e73#6416read-package-json@6.0.26927fd3#6416fs-minipass@3.0.23eec56e#6416cacache@17.1.07a2ce3f#6416@npmcli/run-script@6.0.13881770#6416@npmcli/map-workspaces@3.0.4@npmcli/arborist@6.2.9libnpmdiff@5.0.17libnpmexec@5.0.17libnpmfund@4.0.17libnpmorg@5.0.4libnpmpack@5.0.17libnpmpublish@7.1.4v9.6.5Compare Source
Bug Fixes
33dc428#6374 account for npx package-name with no spec (@wraithgar)82879f6#6225 lazy loading of arborist and pacote (#6225) (@wraithgar)f4e73ab#6322 remove incompatible params from ci (#6322) (@wraithgar)c7fe1c7#6328 save raw data to file, not parsed data (@wraithgar)Documentation
31214a6#6381 Update description for publish --provenance flag (#6381) (@feelepxyz)997bcdf#6329 fix npm cache folder location for windows (#6329) (@charlie-wong)Dependencies
fae5e00#6372sigstore@1.3.0(#6372)3fa9542#6363semver@7.5.0e49844e#6363minipass-fetch@3.0.2357cc29#6363walk-up-path@3.0.12c80b1e#6363ini@4.1.05933841#6363minipass@4.2.8b39d54e#6363minimatch@7.4.6201aa5a#6363ssri@10.0.3acb9120#6363read@2.1.02472205#6363npm-registry-fetch@14.0.42780714#6363npm-install-checks@6.1.1b5af015#6363make-fetch-happen@11.1.014c498d#6363@npmcli/metavuln-calculator@5.0.1@npmcli/arborist@6.2.8@npmcli/config@6.1.6libnpmdiff@5.0.16libnpmexec@5.0.16libnpmfund@4.0.16libnpmpack@5.0.16v9.6.4Compare Source
Documentation
54795a3#6312 filter archives out of version manager search (#6312) (@ljharb)530c285#6306 remove reference to npm-packlist (#6306) (@staff0rd)Dependencies
85935ac#6325ssri@10.0.2(#6325)f1388b4#6317 npm update7dd0129#6317glob@9.3.2deca335#6317promise-call-limit@1.0.2@npmcli/arborist@6.2.7libnpmdiff@5.0.15libnpmexec@5.0.15libnpmfund@4.0.15libnpmpack@5.0.15v9.6.3Compare Source
Bug Fixes
829503b#6304 don't break up log message across lines (@wraithgar)1435fcf#6304 do less work loading ./lib/npm.js (@wraithgar)09b58e4#6284 make all color output use an npm instance of chalk (#6284) (@lukekarrys)e252532#6283 do less work looking up commands (#6283) (@wraithgar)6a4bcba#6275 clean up man sorting (@wraithgar)8a96b65#6275 ignore ts and map files (@wraithgar)94d2b39#6271 Do not log warnings about log cleanup when logs_max=0 (#6271) (@jmealo)2def359#6277 updated ebadplatform messaging to be generated based on the error (#6277) (@nlf)Documentation
1e2eb81#6311 replace version manager list with a github search (#6311) (@wraithgar)9d2be4e#6289 remove npm bin link (#6289) (@KevinRouchut)Dependencies
e652dbd#6308minimatch@7.4.3(#6308)01986d1#6307sigstore@1.2.0(#6307)ea12627#6275minimatch@7.4.2ec3e020#6275glob@9.3.1952fbed#6275read-package-json@6.0.1dd43d30#6275parse-conflict-json@3.0.1d5ce7ca#6275npm-install-checks@6.1.0704cd1e#6275nopt@7.1.0a6da22a#6275ignore-walk@6.0.255955fd#6275cacache@17.0.5839b670#6275@npmcli/map-workspaces@3.0.39a7b8e8#6275@npmcli/git@4.0.457c0a55#6275 npm update74c80f5#6275minipass@4.2.5b174c90#6275graceful-fs@4.2.11@npmcli/arborist@6.2.6@npmcli/config@6.1.5libnpmdiff@5.0.14libnpmexec@5.0.14libnpmfund@4.0.14libnpmpack@5.0.14libnpmpublish@7.1.3v9.6.2Compare Source
Bug Fixes
4622b42#6247 add provenance publish notice (#6247) (@bdehamer)Dependencies
434b461#6255sigstore@1.1.1(#6255)@npmcli/config@6.1.4libnpmpublish@7.1.2Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.