chore(deps): Update npm to v11.16.0

[renovate-sh-app]

This PR contains the following updates:

Package	Change	Age	Confidence
npm (source)	11.12.1 → 11.16.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

npm/cli (npm)

v11.16.0

Compare Source

Features

• 4b67f6e #​9416 publish --access=private alias for restricted (#​9416) (@​github-actions[bot], @​reggi, @​Copilot)
• a10c7ca #​9415 Phase 1 of allowScripts opt-in install-script policy (#​9360) (#​9415) (@​owlstronaut, @​JamieMagee)

Bug Fixes

• 1f7869b #​9411 fix typo of fullMetadata (@​owlstronaut)
• cde03ba #​9390 config: pause progress spinner during interactive editor spawn (#​9388) (@​github-actions[bot], @​Zelys-DFKH, @​claude)

Documentation

• c5e9d73 #​9390 Document npm_old_version and npm_new_version environment variables (#​9389) (@​github-actions[bot], @​36degrees)

Dependencies

• cdd7bbc #​9421 undici@6.26.0
• fde87c9 #​9421 sigstore@4.1.1
• 2779793 #​9421 lru-cache@11.5.1
• dea702d #​9421 @sigstore/verify@3.1.1
• 4eab03f #​9421 @sigstore/core@3.2.1
• 74c7323 #​9421 @npmcli/agent@4.0.2
• edc4ab3 #​9421 semver@7.8.1
• 5f6ce33 #​9421 make-fetch-happen@15.0.6

Chores

• bd04976 #​9421 dev dependency updates (@​owlstronaut)
• aeceb23 #​9407 sanitize newlines in flags table default and type values (#​9407) (@​reggi, @​Copilot)
• workspace: @npmcli/arborist@9.7.0
• workspace: @npmcli/config@10.10.0
• workspace: libnpmdiff@8.1.9
• workspace: libnpmexec@10.2.9
• workspace: libnpmfund@7.0.23
• workspace: libnpmpack@9.1.9
• workspace: libnpmversion@8.0.4

v11.15.0

Compare Source

Features

• 0d5d899 #​9379 npm stage (@​reggi, @​Copilot)
• 1433740 #​9376 add permissions support to trust commands (#​9376) (@​github-actions[bot], @​reggi, @​Copilot)
• 8df10f5 #​9339 add allow-git/allow-file/allow-directory/allow-remote configs (@​owlstronaut)

Bug Fixes

• 39b625e #​9381 key stage download --json output by package name (#​9381) (@​reggi, @​Copilot)
• 6aa332d #​9339 allow min-release-age in npmrc to coexist with --before (@​raazkhnl)
• 468550f #​9339 refactor #failureNode, adjust tests and safety (@​owlstronaut)
• cabe249 #​9339 allow-remote=none does not block registry tarballs (@​owlstronaut)

Dependencies

• 8416a60 #​9383 socks@2.8.9
• 5e5a25b #​9383 lru-cache@11.5.0
• a6f9ad2 #​9383 ip-address@10.2.0
• 63f8114 #​9383 brace-expansion@5.0.6
• 6918b4c #​9383 bin-links@6.0.2
• bf84079 #​9383 tar@7.5.15
• bdef82c #​9383 semver@7.8.0
• 3f38a67 #​9383 hosted-git-info@9.0.3

Chores

• 816f3bf #​9383 dev dependency updates (@​owlstronaut)
• workspace: @npmcli/arborist@9.6.0
• workspace: @npmcli/config@10.9.1
• workspace: libnpmdiff@8.1.8
• workspace: libnpmexec@10.2.8
• workspace: libnpmfund@7.0.22
• workspace: libnpmpack@9.1.8
• workspace: libnpmpublish@11.2.0

v11.14.1

Compare Source

Bug Fixes

• dca12cb #​9328 remove settings (#​9328) (@​github-actions[bot], @​owlstronaut)

v11.14.0

Compare Source

Features

• 45fc5e0 #​9288 add allow-directory, allow-file, and allow-remote (#​9288) (@​github-actions[bot], @​wraithgar)

Bug Fixes

• 6c17544 #​9318 sbom: dedupe per-node dependsOn / relationships (#​9318) (@​github-actions[bot], @​mikaelkristiansson)

Dependencies

• 840fe18 #​9322 socks@10.1.1
• b771289 #​9322 ip-address@10.1.1
• addffcb #​9322 cidr-regex@5.0.5

Chores

• 041fd58 #​9322 dev dependency updates (@​owlstronaut)
• 89c505a #​9320 add cli-triage team as codeowner (#​9320) (@​github-actions[bot], @​owlstronaut)
• workspace: @npmcli/arborist@9.5.0
• workspace: @npmcli/config@10.9.0
• workspace: libnpmdiff@8.1.7
• workspace: libnpmexec@10.2.7
• workspace: libnpmfund@7.0.21
• workspace: libnpmpack@9.1.7

v11.13.0

Compare Source

Features

• 8e8dadb #​9246 add u as alias for update command (#​9246) (@​github-actions[bot], @​Ausoj)

Bug Fixes

• ecd161b #​9258 ignore intended error code (@​owlstronaut)

Dependencies

• 8d2fdcd #​9272 lru-cache@11.3.5
• e603d36 #​9272 node-gyp@12.3.0
• d48b7da #​9272 is-cidr@6.0.4
• 032a5ca #​9240 @sigstore/protobuf-specs@0.5.1
• 33a81e7 #​9240 tinyglobby@0.2.16
• 68dc4a0 #​9240 picomatch@4.0.4
• 1bb6703 #​9240 lru-cache@11.3.3
• 37059e4 #​9240 diff@8.0.4
• fb450ab #​9240 minimatch@10.2.5
• 7c4bbbf #​9240 tar@7.5.13
• 703a3bc #​9240 minipass-flush@1.0.6

Chores

• e0724ac #​9272 dev dependency updates (@​owlstronaut)
• d249341 #​9230 don't run npm update in CI (@​owlstronaut)
• workspace: @npmcli/arborist@9.4.3
• workspace: libnpmdiff@8.1.6
• workspace: libnpmexec@10.2.6
• workspace: libnpmfund@7.0.20
• workspace: libnpmpack@9.1.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[github-actions]

Hello! 👋 This repository uses Auto for releasing packages using PR labels.

✨ This PR can be merged. It will not be considered when calculating future versions of the npm packages and will not appear in the changelogs.