v0.40.6

New Stuff

• install: add support for loongarch64 architecture (#3693)

Bug Fixes

• support arm64-musl on Alpine Linux (#3845)
• nvm_ls_cached: include source-cached and io.js artifacts
• auth header: Add all valid base64 chars to sanitize function (#3846)
• Parse commented nvmrc content in nvm_ls
• bypass aliased curl (#2932)
• nvm_download, nvm_get_latest, install: only select a downloader that exists as an executable
• use command to bypass curl/wget shell functions and aliases
• install: use darwin-x64 for all binary on mac for node < v16 (#3709)
• nvm install: migrate packages/set alias when target is already installed
• focused error on missing/invalid args for several subcommands
• nvm_rc_version: clarify error when no version and no .nvmrc
• nvm exec/nvm run: warn when no version and no .nvmrc

Refactors

• nvm_alias: one-pass trailing whitespace strip
• nvm_alias: use [[:space:]] instead of literal tab
• nvm_alias, nvm_resolve_alias: use builtins

Robustness

• reject unsafe LTS alias names from a mirror's index.tab
• avoid a set -u error when $_ is unset (#3845)
• nvm_get_arch: only apply the Alpine musl suffix when the OS is linux (#3845)
• nvm_alias: explicitly succeed when the alias file is unreadable

Docs

• [readme] Docker: build time is "several" minutes, not 8 (#3875)
• [readme] Docker: Just say "Ubuntu" (no version) for base image (#3873)
• document nvm reinstall-packages as a standalone command
• document current and clarify .nvmrc fallback in help/README
• threat model: document the mirror payload/metadata trust boundary

Tests

• [actions] nodejs.org PR: sync the fork before branching, and surface create-ref errors
• [actions] nodejs.org PR: fix force boolean and grab the latest tag on dispatch
• [actions] fall back to the canonical nvmrc submodule when a fork lacks its own
• [actions] update workflows
• [actions] nvm-install-test: turn the expected v0.40.0 failures green
• [actions] add tests-alpine: a green fast suite and a musl-binary regression matrix (#3845)
• make the fast suite pass on Alpine (#3845)
• nvm_ls handles hash in pattern: fix cleanup, isolate NVM_DIR, cover the sed path (#3854)
• installation_node: only match top-level global packages
• installation_node: use a published is-nan version
• run every remaining test file: exec bits, fixes; add check-exec to CI (#2232)
• nvm_offline_version: make it executable; pin nvm_ls_cached cache visibility
• aliases: cover the regex-metachar cycle fix; clean up fixtures in teardown (#3787)