Release 3.1.0 does not correctly normalize package bins

[mpsenn]

npm@9.7.0 was published but never tagged latest due to a bug found during release. below is a root cause of the bug, but the tl;dr is that npm@9.7.0 will be deprecated and npm@9.7.1 will be published once the bug is fixed.

we switched from read-package-json to @npmcli/package-json which recently received an update to bring all the features from the former to the latter. lost in this port was a minor change to normalizing package bins. previously we would not parse package.json#directories.bin if a package.json#bin was present (ref: https://github.com/npm/read-package-json/blob/main/lib/read-json.js#L351-L353) but now we do regardless of whether a bin object is there (ref: https://github.com/npm/package-json/blob/main/lib/normalize.js#L161)

next steps:

• deprecate npm@9.7.0. this version exists on the registry and contains breaking changes that would impact users if you publish packages using both bin and directories.bin
• make a fix for this bug in @npmcli/package.json
• do a further analysis of the changes between read-package-json and @npmcli/package-json and assert this behavior in news tests to ensure no other breaking changes occurred
• do a new release for npm@9.7.1

Originally posted by @lukekarrys in npm/cli#6470 (comment)

[mpsenn]

Cross-posting this comment to get the issue on the right repo (I think!)

This issue was breaking a build for me, because Google App Engine automatically picks up npm 9.7.0 even though it is deprecated. Working around it by pinning to npm 9.6.7 in package.json.

Running "npm --version"
node:internal/modules/cjs/loader:1078
  throw err;
  ^

Error: Cannot find module '/layers/google.nodejs.runtime/node/bin/node_modules/npm/bin/npm-cli.js'
    at Module._resolveFilename (node:internal/modules/cjs/loader:1075:15)
    at Module._load (node:internal/modules/cjs/loader:920:27)
    at Function.executeUserEntryPoint [as runMain] (node:internal/modules/run_main:81:12)
    at node:internal/main/run_main_module:23:47 {
  code: 'MODULE_NOT_FOUND',
  requireStack: []
}

[mpsenn]

Thanks for the quick fix!