Repro for npm i issue

Versions

npm: >= 11.6.1

Steps to reproduce

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised

9295-2@1.0.0 /Users/PATH/issues/9295-2
└─┬ firebase-tools@14.24.0
  ├─┬ chokidar@3.6.0
  │ ├─┬ anymatch@3.1.3
  │ │ └── picomatch@2.3.1
  │ └─┬ readdirp@3.6.0
  │   └── picomatch@2.3.1 deduped
  └─┬ superstatic@9.2.0
    └─┬ re2@1.22.1
      └─┬ node-gyp@11.5.0
        └─┬ tinyglobby@0.2.15
          ├─┬ fdir@6.5.0
          │ └── picomatch@4.0.3 deduped
          └── picomatch@4.0.3

4. Run npm i again

Notes

npm v10.9.4

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff
   • There is no diff

npm v11.0.0

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff
   • There is no diff

npm v11.4.0

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff
   • There is no diff

npm v11.5.0

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff
   • There is no diff

npm v11.6.0

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff
   • There is no diff

npm v11.6.1

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff

$ git diff
diff --git a/package-lock.json b/package-lock.json
index 60bf11d..ff02a5f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8033,20 +8033,6 @@
         }
       }
     },
-    "node_modules/tinyglobby/node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
-      "license": "MIT",
-      "optional": true,
-      "peer": true,
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
-      }
-    },
     "node_modules/tmp": {
       "version": "0.2.5",
       "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",

npm v11.6.2

1. Run rm -rf node_modules package-lock.json
2. Run npm i
3. Run npm ls picomatch
   • No issue raised
4. Run git add . then git commit -m "checkpoint"(or run bash auto-commit.sh)
   • This is just to check the diff
5. Run npm i again or npm update
6. Run git diff

$ git diff
diff --git a/package-lock.json b/package-lock.json
index 60bf11d..ff02a5f 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -8033,20 +8033,6 @@
         }
       }
     },
-    "node_modules/tinyglobby/node_modules/picomatch": {
-      "version": "4.0.3",
-      "resolved": "https://registry.npmjs.org/picomatch/-/picomatch-4.0.3.tgz",
-      "integrity": "sha512-5gTmgEY/sqK6gFXLIsQNH19lWb4ebPDLA4SdLP7dsWkIXHWlG66oPuVvXSGFPppYZz8ZDZq0dYYrbHfBCVUb1Q==",
-      "license": "MIT",
-      "optional": true,
-      "peer": true,
-      "engines": {
-        "node": ">=12"
-      },
-      "funding": {
-        "url": "https://github.com/sponsors/jonschlinkert"
-      }
-    },
     "node_modules/tmp": {
       "version": "0.2.5",
       "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",