From 7442b60640bf430222a5288bdd04dbbc72a77216 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Thu, 4 Jun 2026 14:19:42 +0000 Subject: [PATCH] chore: release 11.17.0 --- .release-please-manifest.json | 14 ++++++------ AUTHORS | 5 +++++ CHANGELOG.md | 26 +++++++++++++++++++++ package-lock.json | 36 +++++++++++++++--------------- package.json | 14 ++++++------ workspaces/arborist/CHANGELOG.md | 11 +++++++++ workspaces/arborist/package.json | 2 +- workspaces/config/CHANGELOG.md | 4 ++++ workspaces/config/package.json | 2 +- workspaces/libnpmdiff/CHANGELOG.md | 4 ++++ workspaces/libnpmdiff/package.json | 4 ++-- workspaces/libnpmexec/CHANGELOG.md | 11 +++++++++ workspaces/libnpmexec/package.json | 4 ++-- workspaces/libnpmfund/CHANGELOG.md | 4 ++++ workspaces/libnpmfund/package.json | 4 ++-- workspaces/libnpmpack/CHANGELOG.md | 9 ++++++++ workspaces/libnpmpack/package.json | 4 ++-- 17 files changed, 116 insertions(+), 42 deletions(-) diff --git a/.release-please-manifest.json b/.release-please-manifest.json index 048423cd2b05d..68ad29a897986 100644 --- a/.release-please-manifest.json +++ b/.release-please-manifest.json @@ -1,15 +1,15 @@ { - ".": "11.16.0", - "workspaces/arborist": "9.7.0", + ".": "11.17.0", + "workspaces/arborist": "9.8.0", "workspaces/libnpmaccess": "10.0.3", - "workspaces/libnpmdiff": "8.1.9", - "workspaces/libnpmexec": "10.2.9", - "workspaces/libnpmfund": "7.0.23", + "workspaces/libnpmdiff": "8.1.10", + "workspaces/libnpmexec": "10.3.0", + "workspaces/libnpmfund": "7.0.24", "workspaces/libnpmorg": "8.0.1", - "workspaces/libnpmpack": "9.1.9", + "workspaces/libnpmpack": "9.1.10", "workspaces/libnpmpublish": "11.2.0", "workspaces/libnpmsearch": "9.0.1", "workspaces/libnpmteam": "8.0.2", "workspaces/libnpmversion": "8.0.4", - "workspaces/config": "10.10.0" + "workspaces/config": "10.10.1" } diff --git a/AUTHORS b/AUTHORS index 7cb06a50a661a..06ef9279b6fe3 100644 --- a/AUTHORS +++ b/AUTHORS @@ -1007,3 +1007,8 @@ Caleb Everett Vishal Doshi raazkhnl Tea Reggi +12122J +Jamie Magee +Jamie Magee +meeech <4623+meeech@users.noreply.github.com> +Abhinav diff --git a/CHANGELOG.md b/CHANGELOG.md index e9eb912dc892f..e5c8ff18259f2 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,31 @@ # Changelog +## [11.17.0](https://github.com/npm/cli/compare/v11.16.0...v11.17.0) (2026-06-04) +### Features +* [`8ff3e48`](https://github.com/npm/cli/commit/8ff3e48113a53576a8d450d7d5a1cb190a1986e1) [#9483](https://github.com/npm/cli/pull/9483) allowScripts tooling and inBundle hardening (#9483) (@github-actions[bot], @JamieMagee) +### Bug Fixes +* [`95cf2e9`](https://github.com/npm/cli/commit/95cf2e9efea892023387f3aec6062b8a7e8f1a60) [#9489](https://github.com/npm/cli/pull/9489) validate registry path for allow-remote tarballs (@Abhinav-143x) +* [`9dd219b`](https://github.com/npm/cli/commit/9dd219b20ec3a1c7e46b23209b4619b872f1b604) [#9462](https://github.com/npm/cli/pull/9462) respect allowScripts policy in prune, dedupe, uninstall, audit, and link (#9462) (@github-actions[bot], @JamieMagee) +* [`cd8d18a`](https://github.com/npm/cli/commit/cd8d18a66832856c5cc2ba90dc7c8b0f3dbe476b) [#9482](https://github.com/npm/cli/pull/9482) list pending scripts in approve-scripts when ignore-scripts is set (#9482) (@github-actions[bot], @JamieMagee) +* [`c14e87c`](https://github.com/npm/cli/commit/c14e87c5d84a81ebe14ebe9c68e050ee6ec0fded) [#9481](https://github.com/npm/cli/pull/9481) suggest --allow-scripts for global installs in unreviewed-scripts warnings (#9481) (@github-actions[bot], @JamieMagee) +* [`7ade52e`](https://github.com/npm/cli/commit/7ade52ea4059ca75e83f10e892b24581624acef9) [#9465](https://github.com/npm/cli/pull/9465) invalid issue template YAML indentation (#9465) (@github-actions[bot], @fallintoplace) +* [`c069622`](https://github.com/npm/cli/commit/c0696225d8792e461989214ba7d8886dfd862b4a) [#9464](https://github.com/npm/cli/pull/9464) show full parent command path in subcommand usage errors (#9464) (@owlstronaut) +* [`1bb62bb`](https://github.com/npm/cli/commit/1bb62bb639d1f791a0c51d236fba01c25c58992e) [#9454](https://github.com/npm/cli/pull/9454) config: clarify --all help so it's accurate for approve-scripts and deny-scripts (@JamieMagee) +* [`84eeb5f`](https://github.com/npm/cli/commit/84eeb5fe9db14e01ebc44999ebe126224a78eb83) [#9431](https://github.com/npm/cli/pull/9431) audit: don't apply min-release-age before filter when verifying installed signatures (@JamieMagee) +* [`3bd3377`](https://github.com/npm/cli/commit/3bd3377f207732b47655ea3a896d53046df199c4) [#9426](https://github.com/npm/cli/pull/9426) block forbidden keys in Queryable setter to prevent prototype pollution (@12122J, @claude) +### Documentation +* [`66e97c2`](https://github.com/npm/cli/commit/66e97c20003b43d80c464b89fb1e1c8c6b5c9433) [#9478](https://github.com/npm/cli/pull/9478) update minimum npm required for npm trust (@meeech) + + +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.8.0): `@npmcli/arborist@9.8.0` +* [workspace](https://github.com/npm/cli/releases/tag/config-v10.10.1): `@npmcli/config@10.10.1` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v8.1.10): `libnpmdiff@8.1.10` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v10.3.0): `libnpmexec@10.3.0` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.24): `libnpmfund@7.0.24` +* [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v9.1.10): `libnpmpack@9.1.10` + ## [11.16.0](https://github.com/npm/cli/compare/v11.15.0...v11.16.0) (2026-05-27) ### Features * [`4b67f6e`](https://github.com/npm/cli/commit/4b67f6ed21a8bf7e47ae78b7fc9cc9fbdfa95057) [#9416](https://github.com/npm/cli/pull/9416) publish --access=private alias for restricted (#9416) (@github-actions[bot], @reggi, @Copilot) diff --git a/package-lock.json b/package-lock.json index 73de15abc2d61..a799b9a324dd1 100644 --- a/package-lock.json +++ b/package-lock.json @@ -1,12 +1,12 @@ { "name": "npm", - "version": "11.16.0", + "version": "11.17.0", "lockfileVersion": 3, "requires": true, "packages": { "": { "name": "npm", - "version": "11.16.0", + "version": "11.17.0", "bundleDependencies": [ "@isaacs/string-locale-compare", "@npmcli/arborist", @@ -84,8 +84,8 @@ ], "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^9.7.0", - "@npmcli/config": "^10.10.0", + "@npmcli/arborist": "^9.8.0", + "@npmcli/config": "^10.10.1", "@npmcli/fs": "^5.0.0", "@npmcli/map-workspaces": "^5.0.3", "@npmcli/metavuln-calculator": "^9.0.3", @@ -109,11 +109,11 @@ "is-cidr": "^6.0.4", "json-parse-even-better-errors": "^5.0.0", "libnpmaccess": "^10.0.3", - "libnpmdiff": "^8.1.9", - "libnpmexec": "^10.2.9", - "libnpmfund": "^7.0.23", + "libnpmdiff": "^8.1.10", + "libnpmexec": "^10.3.0", + "libnpmfund": "^7.0.24", "libnpmorg": "^8.0.1", - "libnpmpack": "^9.1.9", + "libnpmpack": "^9.1.10", "libnpmpublish": "^11.2.0", "libnpmsearch": "^9.0.1", "libnpmteam": "^8.0.2", @@ -14605,7 +14605,7 @@ }, "workspaces/arborist": { "name": "@npmcli/arborist", - "version": "9.7.0", + "version": "9.8.0", "license": "ISC", "dependencies": { "@gar/promise-retry": "^1.0.0", @@ -14663,7 +14663,7 @@ }, "workspaces/config": { "name": "@npmcli/config", - "version": "10.10.0", + "version": "10.10.1", "license": "ISC", "dependencies": { "@npmcli/map-workspaces": "^5.0.0", @@ -14703,10 +14703,10 @@ } }, "workspaces/libnpmdiff": { - "version": "8.1.9", + "version": "8.1.10", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/installed-package-contents": "^4.0.0", "binary-extensions": "^3.0.0", "diff": "^8.0.2", @@ -14725,11 +14725,11 @@ } }, "workspaces/libnpmexec": { - "version": "10.2.9", + "version": "10.3.0", "license": "ISC", "dependencies": { "@gar/promise-retry": "^1.0.0", - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/package-json": "^7.0.0", "@npmcli/run-script": "^10.0.0", "ci-info": "^4.0.0", @@ -14756,10 +14756,10 @@ } }, "workspaces/libnpmfund": { - "version": "7.0.23", + "version": "7.0.24", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.7.0" + "@npmcli/arborist": "^9.8.0" }, "devDependencies": { "@npmcli/eslint-config": "^5.0.1", @@ -14789,10 +14789,10 @@ } }, "workspaces/libnpmpack": { - "version": "9.1.9", + "version": "9.1.10", "license": "ISC", "dependencies": { - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/run-script": "^10.0.0", "npm-package-arg": "^13.0.0", "pacote": "^21.0.2" diff --git a/package.json b/package.json index e600a3c009524..8fd7321bb64d2 100644 --- a/package.json +++ b/package.json @@ -1,5 +1,5 @@ { - "version": "11.16.0", + "version": "11.17.0", "name": "npm", "description": "a package manager for JavaScript", "workspaces": [ @@ -52,8 +52,8 @@ }, "dependencies": { "@isaacs/string-locale-compare": "^1.1.0", - "@npmcli/arborist": "^9.7.0", - "@npmcli/config": "^10.10.0", + "@npmcli/arborist": "^9.8.0", + "@npmcli/config": "^10.10.1", "@npmcli/fs": "^5.0.0", "@npmcli/map-workspaces": "^5.0.3", "@npmcli/metavuln-calculator": "^9.0.3", @@ -77,11 +77,11 @@ "is-cidr": "^6.0.4", "json-parse-even-better-errors": "^5.0.0", "libnpmaccess": "^10.0.3", - "libnpmdiff": "^8.1.9", - "libnpmexec": "^10.2.9", - "libnpmfund": "^7.0.23", + "libnpmdiff": "^8.1.10", + "libnpmexec": "^10.3.0", + "libnpmfund": "^7.0.24", "libnpmorg": "^8.0.1", - "libnpmpack": "^9.1.9", + "libnpmpack": "^9.1.10", "libnpmpublish": "^11.2.0", "libnpmsearch": "^9.0.1", "libnpmteam": "^8.0.2", diff --git a/workspaces/arborist/CHANGELOG.md b/workspaces/arborist/CHANGELOG.md index ccd093b2cab44..f45d291f5881d 100644 --- a/workspaces/arborist/CHANGELOG.md +++ b/workspaces/arborist/CHANGELOG.md @@ -1,5 +1,16 @@ # Changelog +## [9.8.0](https://github.com/npm/cli/compare/arborist-v9.7.0...arborist-v9.8.0) (2026-06-04) +### Features +* [`8ff3e48`](https://github.com/npm/cli/commit/8ff3e48113a53576a8d450d7d5a1cb190a1986e1) [#9483](https://github.com/npm/cli/pull/9483) allowScripts tooling and inBundle hardening (#9483) (@github-actions[bot], @JamieMagee) +### Bug Fixes +* [`95cf2e9`](https://github.com/npm/cli/commit/95cf2e9efea892023387f3aec6062b8a7e8f1a60) [#9489](https://github.com/npm/cli/pull/9489) validate registry path for allow-remote tarballs (@Abhinav-143x) +* [`869cb9a`](https://github.com/npm/cli/commit/869cb9a1ef5627872830935024be94d60102b514) [#9485](https://github.com/npm/cli/pull/9485) arborist: link meta-only optional peers in linked strategy (@manzoorwanijk) +* [`d41a9e3`](https://github.com/npm/cli/commit/d41a9e3494135593c2bbd0010e0b21b5adc6ee90) [#9484](https://github.com/npm/cli/pull/9484) arborist: clean up orphaned scoped store entries in linked strategy (@manzoorwanijk) +* [`39d034d`](https://github.com/npm/cli/commit/39d034d7bee3f523ebfac8215e924d466722d101) [#9455](https://github.com/npm/cli/pull/9455) sanitize package name in linked-strategy path construction (@owlstronaut) +* [`d59c964`](https://github.com/npm/cli/commit/d59c96413f6c731b3df87556efe4f0a9706d0a6d) [#9451](https://github.com/npm/cli/pull/9451) reject path traversal entries when inflating dependency shrinkwraps (@owlstronaut) +* [`c9045d5`](https://github.com/npm/cli/commit/c9045d5885fa1338b7d32fa845aea0bfeab01657) [#9429](https://github.com/npm/cli/pull/9429) arborist: read install scripts from disk on lockfile installs instead of a sentinel (@JamieMagee) + ## [9.7.0](https://github.com/npm/cli/compare/arborist-v9.6.0...arborist-v9.7.0) (2026-05-27) ### Features * [`a10c7ca`](https://github.com/npm/cli/commit/a10c7caf3ad9d2d5e17234c5c5e615dbce7717f9) [#9415](https://github.com/npm/cli/pull/9415) Phase 1 of `allowScripts` opt-in install-script policy (#9360) (#9415) (@owlstronaut, @JamieMagee) diff --git a/workspaces/arborist/package.json b/workspaces/arborist/package.json index 712151e63a1c6..9a5e883cefe2f 100644 --- a/workspaces/arborist/package.json +++ b/workspaces/arborist/package.json @@ -1,6 +1,6 @@ { "name": "@npmcli/arborist", - "version": "9.7.0", + "version": "9.8.0", "description": "Manage node_modules trees", "dependencies": { "@gar/promise-retry": "^1.0.0", diff --git a/workspaces/config/CHANGELOG.md b/workspaces/config/CHANGELOG.md index 56c4c18f88c6c..d2db52811a920 100644 --- a/workspaces/config/CHANGELOG.md +++ b/workspaces/config/CHANGELOG.md @@ -1,5 +1,9 @@ # Changelog +## [10.10.1](https://github.com/npm/cli/compare/config-v10.10.0...config-v10.10.1) (2026-06-04) +### Bug Fixes +* [`1bb62bb`](https://github.com/npm/cli/commit/1bb62bb639d1f791a0c51d236fba01c25c58992e) [#9454](https://github.com/npm/cli/pull/9454) config: clarify --all help so it's accurate for approve-scripts and deny-scripts (@JamieMagee) + ## [10.10.0](https://github.com/npm/cli/compare/config-v10.9.1...config-v10.10.0) (2026-05-27) ### Features * [`4b67f6e`](https://github.com/npm/cli/commit/4b67f6ed21a8bf7e47ae78b7fc9cc9fbdfa95057) [#9416](https://github.com/npm/cli/pull/9416) publish --access=private alias for restricted (#9416) (@github-actions[bot], @reggi, @Copilot) diff --git a/workspaces/config/package.json b/workspaces/config/package.json index 295855d76df3e..8aa6a7e6c4a8f 100644 --- a/workspaces/config/package.json +++ b/workspaces/config/package.json @@ -1,6 +1,6 @@ { "name": "@npmcli/config", - "version": "10.10.0", + "version": "10.10.1", "files": [ "bin/", "lib/" diff --git a/workspaces/libnpmdiff/CHANGELOG.md b/workspaces/libnpmdiff/CHANGELOG.md index cb4c5c24170a0..5a13f4b3250bb 100644 --- a/workspaces/libnpmdiff/CHANGELOG.md +++ b/workspaces/libnpmdiff/CHANGELOG.md @@ -80,6 +80,10 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.7.0): `@npmcli/arborist@9.7.0` +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.8.0): `@npmcli/arborist@9.8.0` + ## [8.1.0](https://github.com/npm/cli/compare/libnpmdiff-v8.0.13...libnpmdiff-v8.1.0) (2026-02-04) ### Features * [`f5f6cf7`](https://github.com/npm/cli/commit/f5f6cf7c9fc9315b96eb29c5c7d5ab63ad3a9122) [#8943](https://github.com/npm/cli/pull/8943) config: add --allow-git (@wraithgar) diff --git a/workspaces/libnpmdiff/package.json b/workspaces/libnpmdiff/package.json index 08783e3ecb13e..0e2a7968c74c7 100644 --- a/workspaces/libnpmdiff/package.json +++ b/workspaces/libnpmdiff/package.json @@ -1,6 +1,6 @@ { "name": "libnpmdiff", - "version": "8.1.9", + "version": "8.1.10", "description": "The registry diff", "repository": { "type": "git", @@ -47,7 +47,7 @@ "tap": "^16.3.8" }, "dependencies": { - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/installed-package-contents": "^4.0.0", "binary-extensions": "^3.0.0", "diff": "^8.0.2", diff --git a/workspaces/libnpmexec/CHANGELOG.md b/workspaces/libnpmexec/CHANGELOG.md index ddb343d684215..7ab4423c7a353 100644 --- a/workspaces/libnpmexec/CHANGELOG.md +++ b/workspaces/libnpmexec/CHANGELOG.md @@ -48,6 +48,17 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.6.0): `@npmcli/arborist@9.6.0` +## [10.3.0](https://github.com/npm/cli/compare/libnpmexec-v10.2.9...libnpmexec-v10.3.0) (2026-06-04) +### Features +* [`8ff3e48`](https://github.com/npm/cli/commit/8ff3e48113a53576a8d450d7d5a1cb190a1986e1) [#9483](https://github.com/npm/cli/pull/9483) allowScripts tooling and inBundle hardening (#9483) (@github-actions[bot], @JamieMagee) +### Bug Fixes +* [`1bb1b8c`](https://github.com/npm/cli/commit/1bb1b8c2606b0bf19b9267a8a8c05e43df6d02ad) [#9467](https://github.com/npm/cli/pull/9467) escape executable name in libnpmexec run-script (#9467) (@github-actions[bot], @rootvector2) + + +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.8.0): `@npmcli/arborist@9.8.0` + ## [10.2.9](https://github.com/npm/cli/compare/libnpmexec-v10.2.8...libnpmexec-v10.2.9) (2026-05-27) ### Bug Fixes * [`5000cbf`](https://github.com/npm/cli/commit/5000cbf24f25b5b26beb0db06d5d9f23d698241a) [#9409](https://github.com/npm/cli/pull/9409) exempt local project introspection from allow-directory (@owlstronaut) diff --git a/workspaces/libnpmexec/package.json b/workspaces/libnpmexec/package.json index b672050048bd3..77af2f57ccd50 100644 --- a/workspaces/libnpmexec/package.json +++ b/workspaces/libnpmexec/package.json @@ -1,6 +1,6 @@ { "name": "libnpmexec", - "version": "10.2.9", + "version": "10.3.0", "files": [ "bin/", "lib/" @@ -61,7 +61,7 @@ }, "dependencies": { "@gar/promise-retry": "^1.0.0", - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/package-json": "^7.0.0", "@npmcli/run-script": "^10.0.0", "ci-info": "^4.0.0", diff --git a/workspaces/libnpmfund/CHANGELOG.md b/workspaces/libnpmfund/CHANGELOG.md index eb125737f5934..9cd75a428739f 100644 --- a/workspaces/libnpmfund/CHANGELOG.md +++ b/workspaces/libnpmfund/CHANGELOG.md @@ -104,6 +104,10 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.7.0): `@npmcli/arborist@9.7.0` +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.8.0): `@npmcli/arborist@9.8.0` + ## [7.0.0](https://github.com/npm/cli/compare/libnpmfund-v7.0.0-pre.1...libnpmfund-v7.0.0) (2024-12-16) ### Features * [`a7bfc6d`](https://github.com/npm/cli/commit/a7bfc6df76882996ebb834dbca785fdf33b8c50d) [#7972](https://github.com/npm/cli/pull/7972) trigger release process (#7972) (@wraithgar) diff --git a/workspaces/libnpmfund/package.json b/workspaces/libnpmfund/package.json index ab5b5a86d9833..a03c4e89d63fb 100644 --- a/workspaces/libnpmfund/package.json +++ b/workspaces/libnpmfund/package.json @@ -1,6 +1,6 @@ { "name": "libnpmfund", - "version": "7.0.23", + "version": "7.0.24", "main": "lib/index.js", "files": [ "bin/", @@ -46,7 +46,7 @@ "tap": "^16.3.8" }, "dependencies": { - "@npmcli/arborist": "^9.7.0" + "@npmcli/arborist": "^9.8.0" }, "engines": { "node": "^20.17.0 || >=22.9.0" diff --git a/workspaces/libnpmpack/CHANGELOG.md b/workspaces/libnpmpack/CHANGELOG.md index 0159cdfff5ca9..7c71a7091f251 100644 --- a/workspaces/libnpmpack/CHANGELOG.md +++ b/workspaces/libnpmpack/CHANGELOG.md @@ -88,6 +88,15 @@ * [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.7.0): `@npmcli/arborist@9.7.0` +## [9.1.10](https://github.com/npm/cli/compare/libnpmpack-v9.1.9...libnpmpack-v9.1.10) (2026-06-04) +### Bug Fixes +* [`33d421a`](https://github.com/npm/cli/commit/33d421a6fd56fc549e68c6b91adb32e3bb6073f4) [#9468](https://github.com/npm/cli/pull/9468) flatten path separators in pack output filename (#9468) (@github-actions[bot], @rootvector2) + + +### Dependencies + +* [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.8.0): `@npmcli/arborist@9.8.0` + ## [9.1.0](https://github.com/npm/cli/compare/libnpmpack-v9.0.13...libnpmpack-v9.1.0) (2026-02-04) ### Features * [`f5f6cf7`](https://github.com/npm/cli/commit/f5f6cf7c9fc9315b96eb29c5c7d5ab63ad3a9122) [#8943](https://github.com/npm/cli/pull/8943) config: add --allow-git (@wraithgar) diff --git a/workspaces/libnpmpack/package.json b/workspaces/libnpmpack/package.json index 58ff8edc24d84..5c285836d3536 100644 --- a/workspaces/libnpmpack/package.json +++ b/workspaces/libnpmpack/package.json @@ -1,6 +1,6 @@ { "name": "libnpmpack", - "version": "9.1.9", + "version": "9.1.10", "description": "Programmatic API for the bits behind npm pack", "author": "GitHub Inc.", "main": "lib/index.js", @@ -37,7 +37,7 @@ "bugs": "https://github.com/npm/libnpmpack/issues", "homepage": "https://npmjs.com/package/libnpmpack", "dependencies": { - "@npmcli/arborist": "^9.7.0", + "@npmcli/arborist": "^9.8.0", "@npmcli/run-script": "^10.0.0", "npm-package-arg": "^13.0.0", "pacote": "^21.0.2"