chore(deps): update npm to v10

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	^8.19.4 -> ^10.9.1

---

Release Notes

npm/cli (npm)

v10.9.1

Compare Source

Bug Fixes

• c7fe0db #​7924 perf: enable compile cache if present (#​7924) (@​H4ad)

Dependencies

• a221db7 #​7931 [email protected]
• fbad17a #​7931 [email protected]
• 65d2a86 #​7922 @sigstore/[email protected]
• be45963 #​7922 [email protected]
• fb0bfbd #​7922 [email protected]
• ccadf2a #​7922 [email protected]
• b25712e #​7922 [email protected]
• 1c9e96f #​7922 [email protected]
• f13bc9c #​7922 [email protected]
• 029060c #​7922 [email protected]
• 9350950 #​7922 @npmcli/[email protected]
• c003827 #​7922 [email protected]
• d6194f5 #​7922 [email protected]
• 4ff29f6 #​7922 [email protected]
• fd6f4fb #​7922 [email protected]
• b3f3004 #​7922 [email protected]
• a1f9d48 #​7922 [email protected]

Chores

• 3ace1c1 #​7922 update arborist in mock-registry (@​wraithgar)
• workspace: [email protected]

v10.9.0

Compare Source

Features

• 4d57928 #​7766 devEngines (#​7766) (@​reggi)

Bug Fixes

• 6ca609e #​7789 ping and doctor commands fix for checking if registry is online (#​7789) (@​milaninfy)

Documentation

• 63d6a73 #​7783 package.json: add brief section on exports, link to Node.js docs (#​7783) (@​wheresrhys)
• 366c07e #​7776 remove incorrect note about npm install (#​7776) (@​wraithgar)

Dependencies

• 60a7ee5 #​7803 hoist npm-normalize-package-bin
• 20dd44f #​7803 hoist minipass-fetch
• 5795987 #​7803 update [email protected]
• 99ccae3 #​7803 update [email protected]
• 75786ad #​7803 update @npmcli/[email protected]
• 1c25a1d #​7803 update @npmcli/[email protected]
• 2d7fc3d #​7803 update @npmcli/[email protected]
• 1e09334 #​7803 update @npmcli/[email protected]
• 820e983 #​7803 update @npmcli/[email protected]
• 9cd6603 #​7803 update [email protected]
• b84d907 #​7803 update @npmcli/[email protected]
• 53ed632 #​7803 update [email protected]
• ab40dab #​7803 update [email protected]
• b1c4770 #​7803 update [email protected]
• 8206c4f #​7803 update [email protected]
• 8b7dbc8 #​7803 update [email protected]
• f6909a0 #​7803 update [email protected]
• f9b2e18 #​7803 update [email protected]
• e7ab206 #​7803 update [email protected]
• b28dbb1 #​7803 update [email protected]
• d13a20b #​7803 update [email protected]
• 5208f74 #​7803 update [email protected]
• 092f41f #​7803 update [email protected]
• 50a7bc8 #​7803 update [email protected]
• 591130d #​7803 update [email protected]
• be6ae96 #​7803 update [email protected]
• 8d4060a #​7803 update [email protected]
• 105fa2b #​7803 update [email protected]
• eae4f57 #​7803 update [email protected]
• 7214149 #​7803 update [email protected]
• c4bed31 #​7803 update [email protected]
• f54b155 #​7803 update [email protected]
• 6deae9e #​7803 update [email protected]
• 034c729 #​7803 update [email protected]
• ddb8be0 #​7803 update [email protected]
• 538a4cc #​7803 update @npmcli/[email protected]
• b80d048 #​7803 update @npmcli/[email protected]
• 81137fc #​7803 update @npmcli/[email protected]
• 2076368 #​7803 update @npmcli/[email protected]
• feac87c #​7803 update @npmcli/[email protected]
• dd90f9e #​7803 update @npmcli/[email protected]

Chores

• 95e2cb1 #​7810 ignore .github folder in release-please (@​reggi)
• be1e6da #​7803 update [email protected] (@​reggi)
• 43f2374 #​7803 update [email protected] (@​reggi)
• bb03036 #​7803 update [email protected] (@​reggi)
• 2072705 #​7803 update @npmcli/[email protected] (@​reggi)
• 949d8f8 #​7803 engine ^18.17.0 || >=20.5.0 in package template (@​reggi)
• fefd509 #​7764 deps: bump actions/download-artifact from 3 to 4 in /.github/workflows (#​7764) (@​dependabot[bot], @​wraithgar)
• workspace: @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]

v10.8.3

Compare Source

Bug Fixes

• 7e61151 #​7759 docs: init usage description corrected (#​7759) (@​milaninfy)
• 2404c7e #​7738 publish: consider package-spec when inside workspace dir (#​7738) (@​milaninfy)
• 91e46a3 #​7721 init: use locally installed version of given package (#​7721) (@​milaninfy)
• 4e81a6a #​7674 always set exit code if exiting uncleanly (#​7674) (@​wraithgar, @​hashtagchris)
• a947f25 #​7679 update lifecycle script list in run-script (#​7679) (@​sonsurim)

Documentation

• e674987 #​7743 update docs for npmrc and package-json (#​7743) (@​milaninfy)
• 24d5350 #​7742 fix and update scoped configuration example (#​7742) (@​demedos)

Dependencies

• 3fd7a48 #​7737 [email protected]
• d7e462b #​7737 [email protected]
• df58b0c #​7737 [email protected]
• 7342c24 #​7737 [email protected]
• 2986f4e #​7737 [email protected]
• a44ab26 #​7737 [email protected]
• 4e965ad #​7737 [email protected]
• 12587fa #​7737 [email protected]
• 1a9ac86 #​7737 [email protected]
• a303ddd #​7737 [email protected]

Chores

• 1772276 #​7756 fix duplicate changelog entries (@​wraithgar)
• 8035725 #​7756 @npmcli/[email protected] (@​wraithgar)
• ed4add1 #​7737 dev dependency updates (@​wraithgar)
• 86b05fc #​7683 allow for longer timer values (#​7683) (@​wraithgar)
• workspace: [email protected]

v10.8.2

Compare Source

Bug Fixes

• 3101a40 #​7631 limit concurrent open files during 'npm cache verify' (#​7631) (@​oikumene)
• 2273183 #​7595 outdated: fixed wanted range for alias with version range (#​7595) (@​milaninfy)
• 15be6dd #​7574 don't try parsing workspaces if none exist (@​wraithgar)

Documentation

• ac937d4 #​7616 install: add save-peer flag (#​7616) (@​drew4237)
• 55639ef #​7615 use git+https in package.com url examples (#​7615) (@​MikeMcC399)
• 93883bb #​7582 Improve manpage section for package.json funding properties (#​7582) (@​kemitchell)
• 92e71e6 #​7576 fix links to community discussions (#​7576) (@​leobalter)

Dependencies

• 1c1adae #​7636 [email protected]
• 5e4fa18 #​7636 [email protected]
• d8fa116 #​7636 [email protected]
• 76dab91 #​7636 [email protected]
• 094c4ea #​7636 [email protected]
• 1c8d41d #​7636 @npmcli/[email protected]
• e5451e1 #​7605 [email protected]
• 7b584d3 #​7605 [email protected]
• 941d0d7 #​7605 [email protected]
• 8b8ce7a #​7605 [email protected]
• 4646768 #​7605 [email protected]
• 6f0d7ce #​7605 @npmcli/[email protected]
• 29204c8 #​7605 @npmcli/[email protected]
• 04d6910 #​7574 @npmcli/[email protected]
• 4ef4830 #​7574 remove read-package-json-fast

v10.8.1

Compare Source

Bug Fixes

• 6b55646 #​7569 exec: look in workspace and root for bin entries (#​7569) (@​wraithgar)
• e4c7a41 #​7564 publish: skip workspace packages marked private on publish (#​7564) (@​milaninfy)
• 8f94ae8 #​7556 utils/tar: index access while match is null (#​7555) (#​7556) (@​NormanPerrin)
• 2d1d8d0 #​7559 adds node: specifier to all native node modules (#​7559) (@​reggi)
• 7d89b55 #​7490 ci: rm workspace node_modules (#​7490) (@​reggi)
• 9122fb6 #​7516 cache: add both full and minified packument to cache (#​7516) (@​milaninfy)
• 9e6686b #​7545 send proper otp token on web auth (#​7545) (@​wraithgar)
• b1db070 #​7534 refactor: use output.buffer and set explicit json mode in query (#​7534) (@​lukekarrys)
• 53cda32 #​7542 refactor ls to use output.buffer for json (#​7542) (@​lukekarrys)
• 61d5771 #​7541 remove json.stringify from all commands (#​7541) (@​lukekarrys)
• 4dfc7d2 #​7540 pass strings to JSON.stringify in --json mode (#​7540) (@​lukekarrys)
• 3cefdf6 #​7538 outdated: return array for outdated deps from multiple workspaces (@​lukekarrys)
• ef4c975 #​7508 view: dont immediately exit on first workspace 404 (#​7508) (@​lukekarrys)

Documentation

• fd6479f #​7560 update publish docs: dist-tag + publish case (#​7560) (@​davidlj95)

Dependencies

• e3f0fd4 #​7568 @npmcli/[email protected]
• 447a8d7 #​7566 [email protected]
• 83fed2e #​7566 [email protected]
• 41291ba #​7566 @sigstore/[email protected]
• 18b42a4 #​7566 [email protected]
• 5c6759d #​7566 [email protected]
• 2508a83 #​7566 [email protected]
• 6278fe4 #​7566 [email protected]

v10.8.0

Compare Source

Features

• 1e375c1 #​7442 create exit handler class (#​7442) (@​lukekarrys)

Bug Fixes

• d5c3289 #​7513 refactor: use output buffer and error for more commands (#​7513) (@​lukekarrys)
• 12f103c #​7533 add first param titles to logs where missing (#​7533) (@​lukekarrys)
• badeac2 #​7521 config: use redact on config output (#​7521) (@​lukekarrys)
• 76aef74 #​7520 view: refactor exec and execWorkspaces to call same methods (#​7520) (@​lukekarrys)
• b54cdb8 #​7515 refactor: create new error output primitives (#​7515) (@​lukekarrys)
• e40454c #​7506 view: dont unwrap arrays in json mode (#​7506) (@​lukekarrys)
• 6f64148 require stdout to be a TTY for progress (#​7507) (@​lukekarrys)
• db62910 #​7504 config: be more aggressive about hiding protected values (#​7504) (@​wraithgar)
• 6d456bb #​7497 dont write log file for completion commands (#​7497) (@​lukekarrys)
• 722c0fa #​7463 limit packument cache size based on heap size (@​wraithgar)
• ca1a68d #​7474 log if npm deprecate does not match any version (#​7474) (@​mbtools)
• 261ea19 #​7457 run input.start around help and openining urls (@​lukekarrys)
• 4ab6cf4 #​7459 publish: validate dist-tag (#​7459) (@​reggi)

Documentation

• b2ce025 #​7518 suggest correct bin entry (#​7518) (@​Santoshraj2)
• bdd2aae #​7502 remove obsolete removal using make uninstall (#​7502) (@​avinal)
• c3d2819 #​7496 npm help json/global command on windows (#​7496) (@​klm-turing, @​lukekarrys)
• 268303c #​7479 add npm version to every local help output (#​7479) (@​klm-turing)
• e39d422 #​7473 suggest "npm repo" for showing the repo of a package (#​7473) (@​full-stop)
• f6fff32 #​7433 clarify what peerDependenciesMeta does (#​7433) (@​xuhdev, @​wraithgar)

Dependencies

• 1cdc662 #​7522 @tufjs/[email protected]
• 898bcfd #​7522 @sigstore/[email protected]
• fec3c94 #​7522 [email protected]
• cb85973 #​7522 [email protected]
• e189873 #​7498 @sigstore/[email protected]
• c2b28f9 #​7498 [email protected]
• 9064ffc #​7498 @sigstore/[email protected]
• fd42986 #​7498 @npmcli/[email protected]
• 4e53e33 #​7498 [email protected]
• f078c82 #​7495 [email protected]
• 58f773c #​7495 [email protected]
• ea0b07d #​7482 [email protected]
• 8d161a4 #​7482 [email protected]
• 5b2317b #​7463 add lru-cache
• 26fefb8 #​7480 [email protected]
• 2146e1f #​7480 [email protected]
• ff6c5d1 #​7480 [email protected]
• 419f9b9 #​7480 [email protected]
• dade2c8 #​7480 [email protected]
• 18e5312 #​7480 [email protected]
• d440011 #​7480 [email protected]
• 552113e #​7480 [email protected]
• 7e15b6d #​7480 @npmcli/[email protected]
• 8b20f8c #​7480 [email protected]
• a9a6dcd #​7480 [email protected]
• e2fdb65 #​7480 [email protected]
• 310a7a5 #​7480 [email protected]
• e71f541 #​7480 [email protected]
• 18c3b40 #​7480 [email protected]
• 4c5bf77 #​7480 [email protected]
• 714e3e1 #​7480 [email protected]
• f94d672 #​7480 [email protected]
• 43331e4 #​7480 [email protected]
• 8234412 #​7480 @npmcli/[email protected]
• 6dfaebb #​7480 @npmcli/[email protected]
• 63ef498 #​7457 [email protected]
• 4cbc2d4 #​7457 [email protected]

v10.7.0

Compare Source

Features

• 7e349f4 #​7432 add spinner (#​7432) (@​lukekarrys)

Bug Fixes

• d679ce8 #​7449 linting: no-unused-vars (@​wraithgar)
• 2558283 #​7450 powershell: fallback to script root if globalPrefix does not exist (#​7450) (@​lukekarrys)
• bc4c342 #​7448 account for registries with no publisher in search (#​7448) (@​wraithgar)
• bcc781a #​7439 move run-script banners to stderr when in json mode (#​7439) (@​lukekarrys)
• 104fcb5 #​7438 remove doctor log for each file permission check (#​7438) (@​lukekarrys)
• 5230647 #​7422 rewrite powershell scripts to use PSScriptRoot (#​7422) (@​lukekarrys)
• 71cbd91 #​7421 hide banner for exec and explore (#​7421) (@​lukekarrys)
• 57ebebf #​7418 update repository.url in package.json (#​7418) (@​wraithgar)

Documentation

• 1674136 #​7441 correct search help output (#​7441) (@​wraithgar)

Dependencies

• 80eec03 #​7453 @npmcli/[email protected]
• a7145d4 #​7453 [email protected]
• a785766 #​7453 [email protected]
• 65d76db #​7453 [email protected]
• cadc0f0 #​7449 hoist production copy of sprintf-js
• 2cffdfe #​7449 [email protected]
• 432efb5 #​7449 [email protected]
• 9da5738 #​7437 @npmcli/[email protected] (#​7437)
• 762888a #​7429 update dependencies for workspaces (#​7429)
• workspace: @npmcli/[email protected]
• workspace: @npmcli/[email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]
• workspace: [email protected]

Chores

• 356c374 #​7453 fix test fixture for new redact behavior (@​wraithgar)
• 2fba4b7 #​7449 update devDependencies in lockfile (@​wraithgar)

v10.6.0

Compare Source

Features

• 9123de4 #​7373 do all ouput over proc-log events (@​lukekarrys)
• 9622597 #​7339 refactor terminal display (#​7339) (@​lukekarrys)

Bug Fixes

• 0e74ee4 #​7416 clean up npm object (#​7416) (@​wraithgar)
• c060e60 #​7415 return command and argv from load (@​lukekarrys)
• 180b919 #​7415 remove unused npm.setCmd method (@​lukekarrys)
• 0708b3b #​7414 use name of level instead of label for logging prefixes (#​7414) (@​lukekarrys)
• 7f4e667 #​7403 redact when displaying non-ascii arguments (@​lukekarrys)
• 06202f0 #​7403 store unref promises for awaiting in tests (@​lukekarrys)
• e5f1948 #​7403 run update notifier after exec but before waiting (@​lukekarrys)
• f309c1c #​7403 refactor: move timer and error logfi

---

Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.