[Snyk] Upgrade npm from 6.4.1 to 6.11.1 #4
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Snyk have raised this PR to upgrade npm from 6.4.1 to 6.11.1. See this package in NPM: https://www.npmjs.com/package/npm See this project in Snyk: https://app.snyk.io/org/iliutastoica/project/2f4ae408-5c1e-43a8-a168-176b4dfd9306?utm_source=github&utm_medium=upgrade-pr
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.
Snyk have raised this PR to upgrade
npmfrom 6.4.1 to 6.11.1.The recommended version fixes:
Release notes
6.11.1 (2019-08-20):
Fix a regression for windows command shim syntax.
37db29647cmd-shim@3.0.2(@isaacs)v6.11.0 (2019-08-20):
A few meaty bugfixes, and introducing
peerDependenciesMeta.FEATURES
a12341088#224 Implements peerDependenciesMeta (@arcanis)2f3b79bba#234 add new forbidden 403 error code (@claudiahdz)BUGFIXES
24acc9fc8and45772af0d#217 npm.community#8863 npm.community#9327 do not descend into directory deps' child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages (@isaacs and @salomvary)50cfe113d#229 fixed typo in semver doc (@gall0ws)e8fb2a1bd#231 Fix spelling mistakes in CHANGELOG-3.md (@XhmikosR)769d2e057npm/uid-number#7 Better error on invalid--user/--groupconfigs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no 'nobody' user. (@isaacs)8b43c9624nodejs/node#28987 npm.community#6032 npm.community#6658 npm.community#6069 npm.community#9323 Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. (@isaacs)8b85eaa47save files with inferred ownership rather than relying onSUDO_UIDandSUDO_GID. (@isaacs)b7f6e5f02Infer ownership of shrinkwrap files (@isaacs)54b095d77#235 Add spec to dist-tag remove function (@theberbie)DEPENDENCIES
dc8f9e52fpacote@9.5.7: Infer the ownership of all unpacked files innode_modules, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. (@isaacs)bb33940c3cmd-shim@3.0.0:9c93ac3#2 npm#3380 Handle environment variables properly (@basbossink)2d277f8#25 #36 #35 Fix 'no shebang' case by always providing$basedirin shell script (@igorklopov)adaf20b#26 Fix$*causing an error when arguments contain parentheses (@satazor)49f0c13#30 Fix paths for MSYS/MINGW bash (@dscho)51a8af3#34 Add proper support for PowerShell (@ExE-Boss)4c37e04#10 Work around quoted batch file names (@isaacs)a4e279544npm-lifecycle@3.1.3(@isaacs):uid-numberraises an error7086a1809libcipm@4.0.3(@isaacs)8845141f9read-package-json@2.1.0(@isaacs)51c028215bin-links@1.1.3(@isaacs)534a5548cread-cmd-shim@1.0.3(@isaacs)3038f2fd5gentle-fs@2.2.1(@isaacs)a609a1648graceful-fs@4.2.2(@isaacs)f0346f754cacache@12.0.3(@isaacs)ca9c615c8npm-pick-manifest@3.0.0(@isaacs)b417affbfpacote@9.5.8(@isaacs)TESTS
b6df0913c#228 Proper handing of /usr/bin/node lifecycle-path test (@olivr70)aaf98e88cnpm-registry-mock@1.3.0(@isaacs)v6.10.3 (2019-08-06):
BUGFIXES
27cccfbda#223 vulns → vulnerabilities in npm audit output (@sapegin)d5e865eb7#222 #226 install, doctor: don't crash if registry unset (@dmitrydvorkin, @isaacs)5b3890226#227 npm.community#9167 Handle unhandledRejections, tell user what to do when encountering anEACCESerror in the cache. (@isaacs)DEPENDENCIES
77516df6elicensee@7.0.3(@isaacs)ceb993590query-string@6.8.2(@isaacs)4050b9189hosted-git-info@2.8.23b1d629#48 fix http protocol using sshurl by default (@fengmk2)5d4a8d7ignore noCommittish on tarball url generation (@isaacs)1692435use gist tarball url that works for anonymous gists (@isaacs)d5cf830Do not allow invalid gist urls (@isaacs)e518222Use LRU cache to prevent unbounded memory consumption (@iarna)v6.10.2 (2019-07-23):
tl;dr - Fixes several issues with the cache when npm is run as
sudoon Unix systems.TESTING
2a78b96f8check test cache for root-owned files (@isaacs)108646ebcrun sudo tests on Travis-CI (@isaacs)cf984e946set --no-esm tap flag (@isaacs)8e0a3100dadd script to run tests and leave fixtures for inspection and debugging (@isaacs)BUGFIXES
25f4f73f6add a util for writing arbitrary files to cache This prevents metrics timing and debug logs from becoming root-owned. (@isaacs)2c61ce65dinfer cache owner from parent dir incorrect-mkdirutil (@isaacs)235e5d6dfensure correct owner on cached all-packages metadata (@isaacs)e2d377bb6npm.community#8540 audit: report server error on failure (@isaacs)52576a39e#216 npm.community#5385 npm.community#6076 Fixnpm ciwithfile:dependencies. Partially reverts #40/#86, recording dependencies of linked deps in order fornpm cito work. (@jfirebaugh)DEPENDENCIES
0fefdee13cacache@12.0.2(@isaacs)e1d87a392pacote@9.5.4(@isaacs)3f035bf09infer-owner@1.0.4(@isaacs)ba3283112npm-registry-fetch@4.0.0(@isaacs)ee90c334dlibnpm@3.0.1(@isaacs)1e480c384libnpmaccess@3.0.2(@isaacs)7662ee850libnpmhook@5.0.3(@isaacs)1357fadc6libnpmorg@1.0.1(@isaacs)a621b5cb6libnpmsearch@2.0.2(@isaacs)560cd31ddlibnpmteam@1.0.2(@isaacs)de7ae0867npm-profile@4.0.2(@isaacs)e95da463clibnpm@3.0.1(@isaacs)554b641d4npm-registry-fetch@4.0.0(@isaacs)06772f34anode-gyp@5.0.3(@isaacs)85358db80npm-lifecycle@3.1.2(@isaacs)051cf20#26 fix switches for alternative shells on Windows (@gucong3000)3aaf954#25 set only one PATH env variable for child process on Windows (@zkochan)ea18ed2#36 #11 #18 remove procInterrupt listener on SIGINT in procError (@mattshin)5523951#29 #30 Use platform specific path casing if present (@mattezell)6.10.2-next.3
v6.10.2-next.2
6.10.2-next.1
v6.10.2-next.0
BUGFIXES
3cbd57712fix(git): strip GIT environs when running git (@isaacs)a81a8c4c4#206 improve isOnly(Dev,Optional) (@larsgw)172f9aca6#179 fix-xmas-underline (@raywu0123)f52673fc7#212 build: use/usr/bin/envto load bash (@rsmarples)DEPENDENCIES
ef4445ad3#208node-gyp@5.0.2(@irega)c0d611356npm-lifecycle@3.0.0(@isaacs)7716ba972libcipm@4.0.0(@isaacs)42d22e837libnpm@3.0.0(@isaacs)a2ea7f9ffsemver@5.7.0(@isaacs)429226a5elru-cache@5.1.1(@isaacs)175670ea6npm-registry-fetch@3.9.1: (@isaacs)0d0517f7fcall-limit@1.1.1(@isaacs)741400429glob@7.1.4(@isaacs)bddd60e30inherits@2.0.4(@isaacs)4acf03fd1libnpmsearch@2.0.1(@isaacs)c2bd17291marked@0.6.3(@isaacs)7f0221bb1marked-man@0.6.0(@isaacs)f458fe7ddnpm-lifecycle@2.1.1(@isaacs)009752978node-gyp@4.0.0(@isaacs)0fa2bb438query-string@6.8.1(@isaacs)b86450929tar-stream@2.1.0(@isaacs)25db00fe9worker-farm@1.7.0(@isaacs)8dfbe8610readable-stream@3.4.0(@isaacs)f6164d5ddisaacs/chownr#21 isaacs/chownr#20 npm.community#7901 npm.community#8203chownr@1.1.2This fixes an EISDIR error from cacache on Darwin in Node versions prior to 10.6. (@isaacs)6.10.1-next.2
from
npmGitHub Release Notes🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs