Skip to content

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also .

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also .
...
This comparison is big! We’re only showing the most recent 250 commits
Commits on Jan 21, 2016
@ekmartin ekmartin adduser: add a success message
PR-URL: #10903
Fixes: #10775
Credit: @ekmartin
Reviewed-By: @othiym23
f44d8c9
@joaocgreis joaocgreis cache: ignore failures replacing package.json
writeFileAtomic is not atomic in Windows, it fails if the file is
being accessed concurrently.

Fixes: #7885
Fixes: #9696
PR-URL: #10940
Credit: @orangemocha
Reviewed-By: @othiym23
e982858
@ashleygwilliams ashleygwilliams doc: fix 3.5.4 release date in CHANGELOG.md
Credit: @ashleygwilliams
Reviewed-By: @othiym23
PR-URL: #11090
5277e7f
@halhenke halhenke outdated: report symlinked packages as 'linked'
PR-URL: #11115
Credit: @halhenke
Reviewed-By: @othiym23
Fixes: #8752
ff504d4
@orangejulius orangejulius docs: Add link to local paths section
Credit: @orangejulius
Reviewed-By: @othiym23
PR-URL: #11128
382e71a
@ljharb ljharb readme: nuke "using npm programmatically" section
The programmatic `npm` API is unsupported, and is not guaranteed not to break in non-major versions.

Removing this section so newcomers aren't encouraged to discover or use it.

PR-URL: #11130
Credit: @ljharb
Reviewed-By: @othiym23
e6d238a
@Jimbly Jimbly install: fix race condition correcting cache directory ownership
Previously, correctMkdir() would cache the results early within its
operation (after the stat, before calling chownr) meaning that any second
call would immediately return the cached results, before the earlier chownr
finishes.  This causes a race condition where the initial chownr would fail
with ENOENT (or similar errors) trying to scan files that were being
actively created/deleted/etc by the install process.  The fix guards the
whole correctMkdir function with inflight() so that multiple calls do not do
chownr simultaneously nor return early.  It would also be reasonable to not
cache the results until after the chownr has finished, however that would
still lead to an even more subtle race condition, so the guard on the whole
call is required.

PR-URL: #11142
Credit: @Jimbly
Reviewed-By: @othiym23
69ac933
@halhenke halhenke doc: advise use of `--depth Infinity` instead of `--depth 9999`
PR-URL: #11150
Credit: @halhenke
Reviewed-By: @othiym23
b463e34
@orangemocha orangemocha node-gyp-bin: fix custom node-gyp env var quoting
npm sets node_config_node_gyp without quotes, so its usage should be
quoted. Indeed, it is a better practice to define environment variables
that contain paths without quotes and quote their usage.

PR-URL: #11158
Credit: @orangemocha
Reviewed-By: @othiym23
00720db
@chrisirhc chrisirhc install: fix unclean unbuild of nested packages with bin
Previously, installed packages that contained node_modules with a .bin
directory woudn't get cleaned up correctly. After unbuild of that particular
package, npm would complain with ENOENT errors because the package directory
would be empty (without package.json), as it only contains the leftover
`node_modules/.bin` directory.

PR-URL: #11181
Credit: @chrisirhc
Reviewed-By: @othiym23
Fixes: #10887
Fixes: #10938
ea331c8
@beaugunderson beaugunderson doc: briefly explain what's included
PR-URL: #11188
Credit: @beaugunderson
Reviewed-By: @othiym23
3666081
@iarna iarna scripts: Add @iarna's changelog generator tool
PR-URL: #11077
Credit: @iarna
Reviewed-By: ¯\_(ツ)_/¯
Reviewed-By: @othiym23
6cbbced
@iarna iarna validate-args: Consume warnings from new npm-install-checks
PR-URL: #11212
Credit: @iarna
Reviewed-By: @othiym23
6952f79
@iarna iarna validate: Only warn about pre-release versions of node in one place
PR-URL: #11212
Credit: @iarna
Reviewed-By: @othiym23
135b7e0
@iarna iarna common-tap: Suppress warnings about pre-release node versions
PR-URL: #11212
Credit: @iarna
Reviewed-By: @othiym23
ee2ebe9
@iarna iarna tests: Build on, rather than replace, common environment
That is, previously some tests were running child npm's with from-scratch
environments.  Instead this makes it build on what `common-npm` put
together, making changes to that.  We need this because we needed a way for
`common-npm` to suppress warnings about prerelease versions of node.

PR-URL: #11212
Credit: @iarna
Reviewed-By: @othiym23
9d3392d
@iarna iarna gentlyrm: Don't abort early if npm controlled path is missing
Previously if any of the npm controlled paths had an ENOENT then we would
return fales from `isEverInside`– not an error condition, but a failed match.
What we actually want to do is ONLY do that if ALL of the paths are ENOENT. If
any aren't, then we want to test them normally.

PR-URL: #11212
Credit: @iarna
Reviewed-By: @othiym23
bb638fa
@iarna iarna config-chain@1.1.10
Update tests for most recent version of ini

Credit: @dominictarr
b0dde5c
@iarna iarna tap@5.1.1
You can pass in arguments to node and nyc now‼

Credit: @isaacs
20e204b
@iarna iarna lodash.clonedeep@4.0.1
Bug fixes, including the non-linear performance that previously was biting npm.

Credit: @jdalton
98a6779
@iarna iarna lodash.isarguments@3.0.5
Credit: @jdalton
ed38bd3
@iarna iarna lodash.isarray@4.0.0
Credit: @jdalton
26f7a7a
@iarna iarna lodash.keys@4.0.0 54bb591
@iarna iarna lodash.union@4.0.1
Credit: @jdalton
b7486c5
@iarna iarna lodash.uniq@4.0.1
Credit: @jdalton
1fd19f5
@iarna iarna lodash.without@4.0.1
Credit: @jdalton
0e8c4ce
@iarna iarna deps: fstream-npm subsubdep updates
brace-expansion@1.1.2
3cc26a5
@iarna iarna deps: validate-npm-package-license subsubdep update
spdx-correct@1.0.2
spdx-license-ids@1.2.0
spdx-expression-parse@1.0.2
spdx-exceptions@1.0.4
spdx-license-ids@1.2.0
4f30571
@iarna iarna deps: request subdeps updates
bl@1.0.1
async@1.5.2
har-validator@2.0.6
escape-string-regexp@1.0.4
is-my-json-valid@2.12.4
sshpk@1.7.3
dashdash@1.12.2
tweetnacl@0.13.3
mime-types@2.1.9
mime-db@1.21.0
cf7b361
@iarna iarna deps: read-installed subdeps update
util-extend@1.0.3
2948b14
@iarna iarna deps: npmlog subsubdeps update
ansi@0.3.1
lodash.pad@3.2.0
lodash.repeat@3.1.0
3f8a8df
@iarna iarna deps: normalize-package-data subsubdeps update
builtin-modules@1.1.1
375f2f9
@iarna iarna deps: node-gyp subsubdep updates
ansi@0.3.1
lodash.pad@3.2.0
lodash.repeat@3.1.0
path-array@1.0.1
array-index@1.0.0
es6-symbol@3.0.2
d@0.1.1
es5-ext@0.10.11
es6-iterator@2.0.0
385fe1a
@iarna iarna npm-registry-couchapp@2.6.12
Dev dep.

Update makes tests pass w/o sudo and also on @iarna's laptop.

Credit: @iarna
454b51f
@iarna iarna doc: update changelog for 3.6.0 34dec08
@iarna iarna test: Only use Object.assign when available 34b29fd
@iarna iarna mailmap: Update with latest committer emails 611062c
@iarna iarna update AUTHORS d528c25
@iarna iarna 3.6.0 5dbcb4f
Commits on Jan 22, 2016
@iarna iarna travis: use container based builds instead 82be147
Commits on Jan 27, 2016
@substack substack deep-sort-object: preserve array order in package.json
Fixes: #10063
PR-URL: #10185
Credit: @substack
Reviewed-By: @iarna
bbdc700
Commits on Jan 28, 2016
@gagern gagern save: Use rawSpec when saving git-type specifiers
Since npm-package-arg strips a preceding `git+` from urls, and the stripped
urls will cause trouble when loading the package the next time, we have to
make sure that in this case at least we save the rawSpec not the spec.

PR-URL: #11091
Fixes: #9679
Credit: @gagern
Reviewed-By: @othiym23
Reviewed-By: @iarna
a605586
Dave deps: remove package even if rmed
If you rm -rf a package before you uninstall --save it, it doesn't
get into tree.children. This causes removeDeps to fail with a stack
trace. Instead, removeDeps should create a module-like object with
the name of the removed package.

Fixes: #11014
PR-URL: #11171
Credit: @davidvgalbraith
Reviewed-By: @iarna
Reviewed-By: @othiym23
61daa6a
@s100 s100 doc: Make "JSON" snippets valid JSON
Documentation for `package.json`
[states](https://docs.npmjs.com/files/package.json) that it "must be actual
JSON, not just a JavaScript object literal".

PR-URL: #11196
Credit: @s100
Reviewed-By: @iarna
f427934
@segrey segrey lifecycle: prefer current node in run-script
Fixes: #11175
Fixes: #9253
PR-URL: #11204
Credit: @segrey
Reviewed-By: @iarna
3eae40b
@elvanja elvanja lifecycle: fix for package name appearing multiple times in wd
PR-URL: #10582
Fixes: #8982
Credit: @elvanja
Reviewed-By: @iarna
6803fed
@gagern gagern add-remote-git: Add support for git submodules in git remotes
This is a fairly simple approach, which does not leverage the git caching
mechansim to cache submodules.  It also doesn't provide a means to disable
automatic initialization, e.g. via a setting in the .gitmodules file.

This also adds documentation for the git+file protocol, since we have
a test case ensuring that this works.  We have no test case for the
git+rsync protocol, even though npm-package-arg seems to have support
for that as well, so that wasn't added to the documentation.

PR-URL: #11094
Credit: @gagern
Reviewed-By: @othiym23
Fixes: #1876
39dea9c
@kemitchell kemitchell docs: do not call magic license values SPDX expressions
PR-URL: #11215
Credit: @kemitchell
Reviewed-By: @iarna
cb9df5a
Dave ls: don't subtract dev from production deps
If a package is in dependencies and devDependencies,
filterByEnv removes it from ls --production. This doesn't
make sense, since the package is still a prod dependency.

Fixes: #10820
PR-URL: #11245
Credit: @davidvgalbraith
Reviewed-By: @iarna
9ab8b8d
@jonathanp jonathanp doc: Fix typographical issue in npm-update docs
Credit: @jonathanp
Reviewed-By: @iarna
PR-URL: #11272
719ea9c
@vedatmahir vedatmahir doc: Include an example of viewing package version history
Credit: @vedatmahir
Reviewed-By: @iarna
PR-URL: #11273
2609a29
@evanlucas evanlucas npm: don't bail if require() onload-script throws
instead, log the error using the warn log level and also log a notice
that the require failed.

Fixes: #10347
PR-URL: #11289
Credit: @evanlucas
Reviewed-By: @iarna
5dec02a
@STRML STRML fetch-package-metadata: Use JSON clone instead of lodash.cloneDeep
PR-URL: #11306
Credit: @STRML
Reviewed-By: @iarna
1d1ea7e
@iarna iarna lodash.clonedeep@4.0.2
Misc minor code cleanup. No functional changes.

Credit: @jdalton
ef1971e
@iarna iarna npmlog@2.0.2
New `are-we-there-yet` (perf patches from @STRML)
New `gauge` with timer churn perf patch

Credit: @iarna
c680fa9
@iarna iarna rimraf@2.5.1
Super minor doc formatting tweak (add a missing comma)

Credit: @isaacs
375b9c4
@iarna iarna which@1.2.4
Update `isexe` and fix bug in pathExt, in which files without extensions
would sometimes be preferred to files with extensions on Windows, even though
those without extensions aren't executable.

pathExt is a list of extensions that are considered executable (exe, cmd,
bat, com on Windows).

Credit: @isaacs
9e5c84f
@iarna iarna request@2.69.0
A bunch of small bug fixes and module updates.

Credit: @simov
220fc77
@iarna iarna retry@0.9.0
Add ability to unref timers.

Internal refactoring of retryForever.

Credit: @tim-kos
a7b2407
@iarna iarna tap@5.2.0
Credit: @isaacs
005bffe
Commits on Jan 29, 2016
@iarna iarna doc: update changelog for 3.7.0 94929cf
@iarna iarna mailmap: Update with latest comitter emails 43855b9
@iarna iarna update AUTHORS f23b9b1
@iarna iarna 3.7.0 25f297a
Commits on Feb 01, 2016
@iarna iarna Revert "fetch-package-metadata: Use JSON clone instead of lodash.clon…
…eDeep"

This reverts commit 1d1ea7e.

Fixes: #11349

This was causing crashes due to cycles in metadata.
655dd68
@iarna iarna doc: update changelog for 3.7.1
4ec9a49
@iarna iarna 3.7.1 e6083e2
Commits on Feb 04, 2016
@iarna iarna lodash.clonedeep@4.0.4
Add support for cloning prototype objects and a browser comaptibility fix.

Credit: @jdalton
36abb24
@iarna iarna lodash.keys@4.0.2
Code cleanup and a browser compatibility fix.

Credit: @jdalton
efe766c
@iarna iarna tap@5.4.2
(dev dep)

Credit: @isaacs
49d6ca6
@substack substack test: don't re-order package.json on install
Fixes: #10063
Credit: @substack
Reviewed-By: @othiym23
PR-URL: #10185
21b9271
@iarna iarna graceful-fs@4.1.3
Fix a bug where close wasn't getting patched.

Credit: @isaacs
8a3c80c
@iarna iarna lodash.isarguments@3.0.6
Browser compatibility fixes.

Credit: @jdalton
b4c9582
@iarna iarna lodash.union@4.0.2
Browser compatibility fixes.

Credit: @jdalton
0a94bf6
@iarna iarna lodash.uniq@4.0.2
Browser compatibility fixes.

Credit: @jdalton
86aa91d
@iarna iarna lodash.without@4.0.2
Browser compatibility fixes.

Credit: @jdalton
2df342b
@rafek rafek doc: Update 3.7.0 release date
PR-URL: #11348

Credit: @rafek
7ef6793
@jscissr jscissr docs: update included/excluded files
This updates #9002

PR-URL: #11348
Credit: @jscissr
c67521d
@iarna iarna test: Make fs.access work when running under `nyc`
Coverage tools hook calls such that they execute during our tests and
they would very much like `process` and `fs` to exist and actually work.
6e198b4
@iarna iarna doc: update changelog for 3.7.2
9456e84
Commits on Feb 05, 2016
@iarna iarna update AUTHORS 52a7046
@iarna iarna 3.7.2 3425550
Commits on Feb 11, 2016
@xcatliu xcatliu doc: Update npm-shrinkwrap.md
Fixed versions of `npm-shrinkwrap.json`, which was not match to
previous versions.

PR-URL: #11391
Credit: @xcatliu
42a4727
@Aourin Aourin doc: removes "--depth Infinity" warning
PR-URL: #11403
Credit: @Aourin
2a11e56
@pra85 pra85 doc: fix typo in npm-config.md
Found a spelling mistake -
`elminate` > `eliminate`

PR-URL: #11410
Credit: @pra85
9ea5658
@zkat zkat cmd-shim@2.0.2
Final straggler using old graceful-fs

Credit: @ForbesLindesay
29536f4
@zkat zkat lodash.clonedeep@4.1.0
Credit: @jdalton
5c641f0
@zkat zkat lodash.union@4.1.0
Credit: @jdalton
987cabe
@zkat zkat lodash.uniq@4.1.0
Credit: @jdalton
5f59e74
@zkat zkat doc: update changelog for 3.7.3
5b7bd9d
@zkat zkat update AUTHORS 73cf6fb
@zkat zkat 3.7.3 d897c22
Commits on Feb 18, 2016
@iarna iarna tacks@1.0.9
Tool to generate fixtures from folders and module for creating and tearing
down filesystem fixtures easily.

Credit: @iarna
PR-URL: #11292
Reviewed-By: @zkat
Reviewed-By: @othiym23
07f020a
@iarna iarna test: Port legacy tests to tap
This removes all the relatively cryptic legacy tests and creates
new tap tests that check the same functionality.

Credit: @iarna
Credit: @zkat
PR-URL: #11292
Reviewed-By: @iarna
Reviewed-By: @zkat
Reviewed-By: @othiym23
0837346
@iarna iarna test: We don't leak auth info into the env
Credit: @zkat
PR-URL: #11292
Reviewed-By: @iarna
5a701e7
@zkat zkat test: check that env vars properly passed to scripts
* removed legacy-env-reader test
* test that regular env vars are passed down
* test that npm-prefixed vars are stripped
* test that package.json configs are added to env
* test that package.json configs are prefixed with npm_package
  and added to the env

Credit: @zkat
PR-URL: #11292
Reviewed-By: @iarna
502d7d0
@iarna iarna test: add npm self installation test
Credit: @iarna
PR-URL: #11292
Reviewed-By: @zkat
420f267
@zkat zkat test: tests for file inclusion and .npmignore
Credit: @zkat
PR-URL: #11292
Reviewed-By: @iarna
b7e99be
@wyze wyze doc: Add colon for consistency
PR-URL: #11414
Credit: @wyze
Reviewed-By: @zkat
649e28f
@wyze wyze doc: Remove confusing ref of adduser
Credit: @wyze
PR-URL: #11416
Reviewed-By: @zkat
b78b301
Commits on Feb 19, 2016
zoujie.wzj ls: Only list runtime dependencies when doing `npm ls --production`
Fixes: #11559
Credit: @yibn2008
Reviewed-By: @iarna
PR-URL: #11562
8d90d25
@iarna iarna node-gyp@3.3.0
Update to a more recent version that uses a version of npmlog compatible
with npm itself.

Credit: @rvagg
Reviewed-By: @zkat
PR-URL: #11528
f3c32bc
@rhendric rhendric update: don't attempt to update linked packages
Fixes: #11362
PR-URL: #11584
Credit: @rhendric
Reviewed-By: @iarna
53cdb96
@iarna iarna dep: npmlog subsubdep
gauge@1.2.7: Gauge update to newer lodash versions

Credit: @iarna
c14e74a
@iarna iarna tap@5.6.0 d39743b
@iarna iarna glob@7.0.0
Raise error if `options.cwd` is specified, and not a directory

Credit: @isaacs
41b2772
@iarna iarna rimraf@2.5.2
Use glob@7.0.0

Credit: @isaacs
4611098
@iarna iarna lodash._baseuniq@4.4.0 8165bca
@iarna iarna lodash.clonedeep@4.3.0 bcccd90
@iarna iarna lodash.isarguments@3.0.7 ac171f8
@iarna iarna lodash.keys@4.0.3 2b656a6
@iarna iarna lodash.union@4.2.0 8ddcc8d
@iarna iarna lodash.uniq@4.2.0 3ea4c80
@iarna iarna lodash.without@4.1.0 d629363
@iarna iarna doc: update changelog for 3.7.4 27c812a
@iarna iarna gen-changelog: Support multiple credits
6cbd7af
@iarna iarna mailmap: add new folks f713173
@iarna iarna update AUTHORS ca0fe08
@iarna iarna 3.7.4 1558b74
Commits on Feb 22, 2016
@iarna iarna deps: fix missing glob subdeps
When updating the top level npm to glob@7, the subdeps that
still depended on glob@6 got new versions installed but they
weren't added to the commit. This adds them back in.

Fixes: #11633
Credit: @iarna
Reviewed-By: @othiym23
PR-URL: #11638
2ef8e6c
@iarna iarna doc: update changelog for 3.7.5
1718901
Commits on Feb 23, 2016
@iarna iarna build: Make sure ls on a clean repo works w/o error d00801d
@iarna iarna 3.7.5 ac9c70d
Commits on Feb 24, 2016
@datyayu datyayu Document `--save-bundle` option in main install page.
Fixes #11636.
PR-URL: #11645
Credit: @datyayu
Reviewed-By: @iarna
b63de3c
@destroyerofbuilds destroyerofbuilds npm-bin: Prefer locally installed npm in Git Bash.
Existing behavior invoking npm within a Git Bash session is to prefer
the globally installed instance of `npm`; the instance of npm installed
alongside Node when using the Node installer.

The cmd script, and the shell script, have been modified in the past to
pull a `prefix` setting from the global `npmrc` file, and invoke the
`npm` instance located at the `prefix` location. Because the value of
`prefix` is the user's AppData directory where npm installs new copies
of itself, the user gets the latest installed npm.

However, the setup was not extended to support Git Bash. Therefore Git
Bash users still get the version of npm installed beside Node.

Add support for using the same prefix for invoking the user installed
npm in Git Bash sessions.

PR-URL: #11526
Credit: @destroyerofbuilds
Reviewed-By: @iarna
Fixes: #11524
d60351c
@lewiscowper lewiscowper doc: Add directories.test doc
PR-URL: #11644
Credit: @lewiscowper
Reviewed-By: @iarna
3d26453
Commits on Feb 25, 2016
@misterbyrne misterbyrne cache: Add maxsockets config setting for registry client
PR-URL: #11666
Credit: @misterbyrne
Reviewed-By: @iarna
f7be667
@iarna iarna npm-registry-client@7.1.0
PR-URL: #11666
Credit: @misterbyrne
910f9ac
@gnerkus gnerkus doc: update documentation for bundledDependencies 4906c90
@robludwig robludwig doc: Correct invalid JSON in npm-update docs
Credit: @robludwig
Reviewed-By: @iarna
PR-URL: #11474
c6ad091
@watilde watilde docs: remove google usergroup 82fc548
@watilde watilde docs: add the contributing guidelines link
PR-URL: #11441
Credit: @watilde
Reviewed-By: @iarna
b64d124
@iarna iarna strip-ansi@3.0.1
Non-user visible tests & maintainer doc updates

Credit: @jbnicolai
93cdc25
@iarna iarna lodash._baseuniq@4.5.0
Credit: @jdalton
30e9eb9
@iarna iarna lodash.keys@4.0.4
Credit: @jdalton
3b2ccef
@iarna iarna tap@5.7.0
Dev dep update.
52fb6fe
Commits on Feb 26, 2016
@iarna iarna doc: update changelog for 3.8.0
f97b109
@iarna iarna update AUTHORS 5580fde
@iarna iarna 3.8.0 4d25e28
@iarna iarna mailmap: add new folks 33ad728
Commits on Mar 03, 2016
@iarna iarna lodash.clonedeep@4.3.1
Credit: @jdalton
6ee1de4
@iarna iarna deps: remove lodash.isarguments
This was originally only added to dedupe builds and with lodash@4, it's no
longer used.
6f6b8a8
@iarna iarna lodash.keys@4.0.5
Credit: @jdalton
0089059
@iarna iarna lodash.without@4.1.1
Credit: @jdalton
bb14204
@iarna iarna install: Make install reports only include versions installed
This makes install select modules to display by install path.  Previously it
was using name@version, which worked as long as you didn't have duplicates
in your tree, but was basically wrong forever if you did (as in npm's own
tree).
99337b4
@ixalon ixalon ls: Don't pass through options intended for install to ls summary at …
…end.

Prevents invalid error status when `npm install --production <module>` is used.

Fixes: #11699
PR-URL: #11703
Credit: @ixalon
e40d457
@plumlee plumlee docs: Add docs for using the `--registry` flag with search
Credit: @plumlee
PR-URL: #11490
Reviewed-By: @iarna
6020447
@daniel-pedersen daniel-pedersen lifecycle: propagate SIGTERM to child
Credit: @daniel-pedersen
PR-URL: #10868
Reviewed-By: @iarna
5454347
Commits on Mar 04, 2016
@iarna iarna doc: update changelog for 3.8.1
2005f4c
@iarna iarna update AUTHORS 82df458
@iarna iarna 3.8.1 e9453bf
Commits on Mar 10, 2016
@rhgb rhgb doc: fix description of npm-link
The command `npm link` should be linking package from local folder to global,
and `npm link package-name` should be from global to local. The current description
is reversed.

Credit: @rhgb
Reviewed-By: @iarna
PR-URL: #11820
3db37a5
@doug-wade doug-wade view: Make npm produce valid JSON when requested with --json
Previously it produced some sort of weird hybrid output, with multiple JSON
docs.

Credit: @doug-wade
Reviewed-By: @iarna
PR-URL: #11813
Fixes: #11808
24ab70a
@doug-wade doug-wade npm: Remove "verison" typo from npm command list
Credit: @doug-wade
Reviewed-By: @iarna
PR-URL: #11787
Fixes: #11003
47928cd
@doug-wade doug-wade doc: Note the required npm version in the npm-scope docs
PR-URL: #11786
Credit: @doug-wade
Reviewed-By: @iarna
Fixes: #10968
fe04443
@watilde watilde config: Make the progress bars honor the unicode option
Fixes: #11781
PR-URL: #11782
Credit: @watilde
Reviewed-By: @iarna
ff90382
@zacdoe zacdoe ls: Made `npm ls --parseable` honor the `depth` option
Credit: @zacdoe
Reviewed-By: @iarna
PR-URL: #11773
Fixes: #11495
611070f
@GriffinSchneider GriffinSchneider doc: Revert "advise use of `--depth Infinity` instead of `--depth 9999`"
This reverts commit b463e34.

PR-URL: #11762
Fixes: #11726
Credit: @GriffinSchneider
Reviewed-By: @iarna
6fb0499
@watilde watilde doc: add command aliases to their respective docs
Credit: @watilde
PR-URL: #11748
Reviewed-By: @othiym23
f0bf684
@mjomble mjomble config: include per-project .npmrc file in "npm config list"
Credit: @mjomble
Reviewed-By: @iarna
PR-URL: #11475
Fixes: #11472
cf5fd40
@watilde watilde npm: refactor command list into separate file
PR-URL: #11761
Credit: @watilde
Reviewed-By: @iarna
c4f4644
@watilde watilde help: display all commands except for affordances
Fixes: #11003
PR-URL: #11761
Credit: @watilde
Reviewed-By: @iarna
d1d0233
@wyze wyze logout: Fix npm-logout to remove scope config if specified
Fixes: #10529
Credit: @wyze
Reviewed-By: @iarna
PR-URL: #11417
460ed21
@iarna iarna glob@7.0.3
Fix a race condition and some windows edge cases.

Credit: @isaacs
be55882
@iarna iarna node-gyp@3.3.1
Fix bug in builds for Android.

Credit: @bnoordhuis
634ecba
Commits on Mar 11, 2016
@iarna iarna doc: changelog for 3.8.2
b2a4669
@iarna iarna update AUTHORS 66741ec
@iarna iarna 3.8.2 2a5977e
Commits on Mar 17, 2016
@iarna iarna require-inject@1.3.1
Fix a bug in relative injected dep paths.

Credit: @iarna
672502a
@iarna iarna readable-stream@2.0.6
Fix sync write issue on 0.10 (but not 0.8).

Credit: @calvinmetcalf
8defb0f
@iarna iarna npmlog@2.0.3
Bring in substantial performance improvements from `are-we-there-yet`.

Credit: @iarna
32f2bd0
@iarna iarna sorted-object@2.0.0
Create objects with `{}` instead of `Object.create(null)` to make the results
strictly equal to what, say, parsed JSON would provide.

Credit: @domenic
7537fe1
@iarna iarna test: Fix npm-self-install test to install to /tmp
Previously this was installing into a temp subdir in test/tap, which
wouldn't catch the case where a module was installed in the local
node_modules folder but not in dependencies, as node would look up
the tree and use the copy from the version of npm being tested.

This solves that by moving the install folder to /tmp (which is where
it was in the original legacy test version).

Credit: @iarna
PR-URL: #11912
Reviewed-By: @othiym23
c3edeab
@thefourtheye thefourtheye filter-invalid-actions: check parent is there before checking target
if the parent is not available, this would bomb at runtime with the
error,

```
TypeError: Cannot read property 'target' of null
```

PR-URL: #11947
Credit: @thefourtheye
473d324
@othiym23 othiym23 test: remove disabled tests
And also remove update-test.sh, which hasn't been used for a pretty long
time now.

Steps along the way to hoisting the tap tests up to the root test/.

PR-URL: #11931
Credit: @othiym23
Reviewed-By: @iarna
86a4835
@watilde watilde doc: fix typo in cli/npm-install
Reviewed-By: @iarna
Credit: @watilde
PR-URL: #11880
ffa428a
@othiym23 othiym23 config: only send token to registry hosts
Fixes: #8380
Credit: @othiym23
Reviewed-By: @zkat
f67ecad
@othiym23 othiym23 test: remove unnecessary logging statement 4320503
Commits on Mar 18, 2016
@zkat zkat doc: fix small detail in npm-link docs
This corrects a minor thing that popped up while reviewing
#11820

Credit: @zkat
Reviewed-By: @iarna
0448790
@iarna iarna doc: changelog for 3.8.3
7ca3b70
@iarna iarna update AUTHORS 678540b
@iarna iarna 3.8.3 40f239b
@iarna iarna doc: Fix a typo in the changelog for our domain name =D f2ae3ba
Commits on Mar 24, 2016
@iarna iarna 3.8.4 9b1e8fa
Commits on Mar 25, 2016
@yaelz yaelz doc: Fix typo in npm-orgs documentation
Credit: @yaelz
Reviewed-By: @iarna
PR-URL: #12006
aac15eb
@watilde watilde deps: remove async-some that is no longer used
Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12000
b8c7cd7
@yodeyer yodeyer test: Fix test that was inappropriately hitting the network
Credit: @yodeyer
Reviewed-By: @iarna
PR-URL: #11987
3e41360
@SimenB SimenB search: Exit early if no arguments provided to search
Fixes: #11983
PR-URL: #11984
Credit: @SimenB
Reviewed-By: @iarna
b271ed2
@Jameskmonger Jameskmonger doc: Include `node_modules` in list of auto-excluded files
Credit: @Jameskmonger
PR-URL: #11884
Reviewed-By: @iarna
fdd6b28
@antialias antialias link: fail if package link target is the same as package link source
Credit: @antialias
Reviewed-By: @iarna
PR-URL: #11442
0d4a0b1
@iarna iarna doc: changelog for 3.8.5 8969ab7
@iarna iarna update AUTHORS d6ff5f7
@iarna iarna 3.8.5 1310b5f
Commits on Mar 31, 2016
@zkat zkat lodash._baseuniq@4.5.1
Credit: @jdalton
2b4f797
@zkat zkat lodash.clonedeep@4.3.2
Credit: @jdalton
59c1ad7
@zkat zkat lodash.union@4.2.1
Credit: @jdalton
b50c41a
@zkat zkat lodash.uniq@4.2.1
Credit: @jdalton
69ccf6d
@zkat zkat lodash.without@4.1.2
Credit: @jdalton
3da0171
@watilde watilde html: update html/index.html
+ Update Node.js download link
+ Update README link
+ Remove FAQ link
+ Remove Mailing List link
+ Fix typo: thorougly => thoroughly

PR-URL: #12063
Credit: @watilde
Reviewed-By: @zkat
632b214
@paulirish paulirish doc: add --ignore-scripts flag to install doc page
PR-URL: #12075
Credit: @paulirish
Reviewed-By: @zkat
af30c37
@polm polm deprecate: default to `*` instead of `latest`
When a semver spec is not supplied, npa supplies a default spec of
'latest'. This is usually correct, but for deprecation the default has
been to apply to all versions of a package.

This patch just checks the raw spec and if it's empty it overrides with
with the '*' version range, which is what people in the issue discussion
were doing anyway.

Fixes: #10974
PR-URL: #12079
Credit: @polm
Reviewed-By: @zkat
f8fb4d8
@watilde watilde package-json: update bugs url to https from http
PR-URL: #12093
Credit: @watilde
Reviewed-By: @zkat
60051c2
@watilde watilde doc: remove faq link as it's removed at #10547
PR-URL: #12143
Credit: @watilde
Reviewed-By: @zkat
50a12cb
@watilde watilde faq: remove faq command as the docs was removed at #10547
PR-URL: #12143
Credit: @watilde
Reviewed-By: @zkat
cd1ba44
@watilde watilde makefile: add doc-clean to `make publish`
PR-URL: #12146
Credit: @watilde
Reviewed-By: @zkat
f0d1521
@watilde watilde package-json: add make doc-clean to prepublish process
PR-URL: #12146
Credit: @watilde
Reviewed-By: @zkat
458f773
@reconbot reconbot doc: clarify the effects of defining `engines`
The current behavior is when packages with an `engines` entry are
installed a dependency npm produces a warning if necessary.

PR-URL: #12147
Credit: @reconbot
Reviewed-By: @zkat
ea92ffc
Commits on Apr 01, 2016
@zkat zkat doc: update changelog for 3.8.6 bc4e5e9
@othiym23 othiym23 doc: bearer token security advisory in CHANGELOG
e2dd77c
@zkat zkat update AUTHORS 7283c8a
@zkat zkat 3.8.6 db9cde0
Commits on Apr 04, 2016
@iarna iarna lodash.keys@4.0.6
Credit: @jdalton
b1aff34
Commits on Apr 07, 2016
@iarna iarna request@2.70.0
A bunch of dep updates, accept read stream as body option, support JSON
stringify replacer argument.

Credit: @simov
486bbc0
@felixrieseberg felixrieseberg readme: Update Windows Upgrade Instructions
With npm 3 being out for a while (and it being sooooo much better for Windows users), people will be better off with npm@3. This commit updates the readme with npm@3 update instructions.

Credit: @felixrieseberg
PR-URL: #12244
Reviewed-By: @iarna
7aaf47e
@gnerkus gnerkus doc: Add 'login' as alias to 'adduser' cli command
Credit: @gnerkus
PR-URL: #12107
Reviewed-By: @iarna
823d9df
@glenjamin glenjamin tar: Improve handling of special cases for files included in packages
Most notably, the package 'history' will not longer be included in the
packages of anything which depends on it. Likewise with packages named
changelog or license.

This was fixed in fstream-npm@1.0.6 from via d82ff81, but for some
reason the internal tar code duplicated this logic. Removing the
duplication passes all the tests, so seems prudent.

While fixing this bug, it was noticed that the `files-and-ignores` tests
were giving false positives because they use `npm install` instead of
only `npm pack`, the tests have been modified to avoid this.

See also #9642, #10445, #11995

Credit: @glenjamin
Reviewed-By: @zkat
PR-URL: #11995
c615182
@bfred-it bfred-it lifecycle: Add info log when ignore-scripts is true
A global setting of `ignore-scripts:true` can cause `npm run-script` to silently fail to run scripts. This will add an info-level log

PR-URL: #12083
Credit: @bfred-it
Reviewed-By: @iarna
38cf79f
@iarna iarna doc: changelog for 3.8.7
9265e1d
@iarna iarna update AUTHORS 8f6caa0
@iarna iarna 3.8.7
cc985cc
Commits on Apr 14, 2016
@iarna iarna lodash.union@4.3.0
Credit: @jdalton
75017ae
@iarna iarna normalize-git-url@3.0.2
Support git+file URLs.

Credit: @zkat
10d6d55
@iarna iarna readable-stream@2.1.0
Adds READABLE_STREAM env var that, if set to `disable`, will make
`readable-stream` use the local native node streams instead.

Credit: @calvinmetcalf
776c599
Commits on Apr 21, 2016
@iarna iarna request@2.72.0
Don't throw if invalid characters are found in an http header, emit via an
error event.

Fix crashes when response headers indicate gzipped content but the body is
empty.

Add `request.delete` as an alias for `del`

Add support for deflate content encoding.

Credit: @simov
df1f2e4
@iarna iarna tap@5.7.1
Credit: @isaacs
ef53a46
@iarna iarna fs-vacuum@1.2.9
Code cleanup, CI & dep updates.

A fix for AIX where a non-empty directory can cause `fs.rmDir` to fail with `EEXIST` instead of `ENOTEMPTY`
and three new tests

Credit: @othiym23
Credit: @richardlau
adc515b
@iarna iarna npm-package-arg@4.1.1
Fix some file:// urls on windows

Stop resolving local paths in npa (this is now done in
realze-package-specifier)

Credit: @zkat
05a28e3
@iarna iarna realize-package-specifier@3.0.3
Resolve spec field for local & dir specs, working in conjunction with the
new npa that doesn't do this any more.
ada2e93
@stevemao stevemao doc: Clarify homepage url documentation
Credit: @stevemao
PR-URL: #11461
Reviewed-By: @iarna
2b57606
@iarna iarna test: lifecycle-signal v0.8 compatibility fix
`Number.parseInt` is not available on 0.8, but `parseInt` is.

Credit: @iarna
3d195bc
@zkat zkat test: get rid of legacy test command from test-node
Credit: @zkat
PR-URL: #12310
69db730
@addaleax addaleax doc: Describe how `npm run` sets `NODE` and `PATH` in more detail
Note that `npm run` changes `PATH` to include the current node
interpreter’s directory.

Credit: @addaleax
PR-URL: #12324
f8539b8
@iarna iarna test: Fix progress config testing to ignore local user configs
Previously, _any_ local setting would cause the tests to fail as
they were trying to test what the default values for the progress
bar would be in different environments and any explicit setting
overrides those defaults.

Credit: @iarna
PR-URL: #12329
b5a0fbb
@rvedotrc rvedotrc doc: clarify that "cert" and "key" are not paths
Credit: @rvedotrc
PR-URL: #12415
7d64301
@rvedotrc rvedotrc doc: Reworded "cert" and "key" explanation
"cert" and "key" wording uses the same structure as "ca" wording.

Credit: @rvedotrc
PR-URL: #12415
f94962f
@watilde watilde install: failing to parse package.json should be error
Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12406
769e620
Commits on Apr 22, 2016
@iarna iarna doc: changelog for 3.8.8 fe48a3a
@iarna iarna update AUTHORS d83e625
@iarna iarna 3.8.8 db5d7cd
Commits on Apr 27, 2016
@iarna iarna read-package-json@2.0.4
Made the error code you get on windows match that from unix if you try
to read a package.json from a path that includes a file, not a folder.

Credit: @zkat
2ae210c
@iarna iarna tacks@1.2.1
New features & refactoring.

Credit: @iarna
45db3f8
@othiym23 othiym23 ci: nix iojs, add Node.js 6, prioritize 4 over 5
Credit: @othiym23
PR-URL: #12487
Reviewed-By: @iarna
da1d86a
@watilde watilde view: fix view versions without --json
Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12450
Fixes: #12009
8597ba4
@sminnee sminnee fetch-package-metadata: Ensure _resolved always available.
Fixes: #12347
Credit: @sminnee
Reviewed-By: @iarna
PR-URL: #12426
60da618
Commits on Apr 28, 2016
@watilde watilde config: document run alias for run-script
Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12485
6cfbae4
@watilde watilde utils: add usage summary generator
Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12485
a53feac
@watilde watilde lib: Refactor summary usage to use utils/usage
This also helps by DRYing up our lists of command aliases.

Credit: @watilde
Reviewed-By: @iarna
PR-URL: #12485
20125f1
Commits on Apr 29, 2016
@iarna iarna doc: changelog for 3.8.9
70cc6a7
@iarna iarna update AUTHORS b8bca7c
@iarna iarna 3.8.9 df87667