chore(deps): update dependency npm to v10.5.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	10.1.0 -> 10.5.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

npm/cli (npm)

v10.5.0

Compare Source

Features

• 2366edc #​7218 query: add :vuln pseudo selector (@​wraithgar)
• 4f3ddbb #​5966 add --expect-entries to npm query (@​wraithgar)

Bug Fixes

• 818957c #​7158 pack, publish: default foreground-scripts to true (#​7158) (@​ljharb)
• d04111d #​7197 view: filter out invalid semver (#​7197) (@​wraithgar)
• b0a3ba0 #​7195 prevent adding invalid dist-tag (#​7195) (@​wraithgar)

Documentation

• c4741fe #​7254 Remove additional example and comments about uninstall script (#​7254) (@​rveerd)
• 686a622 #​7247 scope: update example command to work in windows (#​7247) (@​robertobasile84)
• 95b5057 #​5966 clarify in-range and out-of-range in dependency selectors (@​wraithgar)
• 5b7184f #​7190 workspaces: fix grammar (#​7190) (@​alekstech)
• 0dd03f9 #​7182 fix typos (#​7182) (@​GoodDaisy)

Dependencies

• 16d4c9f #​7218 @npmcli/query@3.1.0
• 06247d1 #​7242 spdx-license-ids@3.0.17
• 79d1e0b #​7242 spdx-exceptions@2.5.0
• 67e853a #​7242 socks@2.8.0
• 4c9fe4b #​7242 lru-cache@10.2.0
• 4a50c5a #​7242 https-proxy-agent@7.0.4
• ed3f254 #​7242 http-proxy-agent@7.0.2
• 8ec4fd5 #​7242 hasown@2.0.1
• 98b1189 #​7242 @npmcli/agent@2.2.1
• dafa903 #​7242 sigstore@2.2.2
• d0bcb76 #​7242 diff@5.2.0
• a13808e #​7242 semver@7.6.0
• d6521ac #​7242 @sigstore/tuf@2.3.1
• 43cac2f #​7242 ip@2.0.1
• workspace: @npmcli/arborist@7.4.0
• workspace: @npmcli/config@8.2.0
• workspace: libnpmdiff@6.0.7
• workspace: libnpmexec@7.0.8
• workspace: libnpmfund@5.0.5
• workspace: libnpmpack@6.0.7

Chores

• d6bc684 #​7242 update devDependencies in lockfile (@​wraithgar)

v10.4.0

Compare Source

Features

• 35a098c #​7175 display tree diff on --long (@​wraithgar)
• dffca29 #​7174 format: print --dry-run diffs in table format (#​7174) (@​ritaaktay)
• 6d5f9ac #​7133 dedupe - display difference when --dry-run is enabled (#​7133) (@​Blaumaus)

Bug Fixes

• ec06f77 #​7175 inline diff table code w/ summary code (@​wraithgar)
• d4ebfba #​7157 use util.stripVTControlCharacters instead of strip-ansi (@​wraithgar)
• 81c95c7 #​7063 don't reset update notifier duration on every check (#​7063) (@​wraithgar)

Documentation

• 2b7eaad #​7168 package-json: Reword warning about publishing local dependencies (#​7168) (@​DanKaplanSES)
• 67ab0f7 #​7142 update: Replace comma with period in run on sentence (#​7142) (@​DanKaplanSES)
• 05c69dc #​7150 config: State default configuration file affected by npm config set (#​7150) (@​DanKaplanSES)
• 44f4518 #​7149 Link to the config command in the npm configuration description (#​7149) (@​DanKaplanSES)
• dd5699f #​7152 update: Fix a typo and remove unneeded statement (#​7152) (@​DanKaplanSES)

Dependencies

• ec77e81 #​7124 promise-call-limit@3.0.1
• e32189c #​7173 deduplicate tree
• b7af4d9 #​7173 tar-stream@3.1.7
• 6883743 #​7173 @npmcli/run-script@7.0.4
• 739634d #​7157 remove strip-ansi
• 162c82e #​7148 pacote@17.0.6 (#​7148) (@​bdehamer)
• a50b03b #​7141 sigstore@2.2.0 (#​7141) (@​bdehamer)
• f696b51 #​7132 @sigstore/tuf@2.3.0 (#​7132) (@​bdehamer)
• workspace: @npmcli/arborist@7.3.1
• workspace: libnpmdiff@6.0.6
• workspace: libnpmexec@7.0.7
• workspace: libnpmfund@5.0.4
• workspace: libnpmpack@6.0.6
• workspace: libnpmpublish@9.0.4

Chores

• a82ccc5 #​7173 nock@13.5.0 (@​wraithgar)
• dcaa99c #​7173 fix exec test (@​wraithgar)
• 0d96080 #​7162 release: do not exclude docs directory from CLI release commits (#​7162) (@​lukekarrys)

v10.3.0

Compare Source

Features

• 6673c77 #​6914 add --libc option to override platform specific install (#​6914) (@​wraithgar, @​Brooooooklyn)

Bug Fixes

• b7fc10a #​7113 filter C0 and C1 control characters from logs and cli output (#​7113) (@​wraithgar)

Dependencies

• 3fd5213 #​7121 npm-packlist@8.0.2
• 5698415 #​7121 postcss-selector-parser@6.0.15
• e56a4f3 #​7121 are-we-there-yet@4.0.2
• 8495b7c #​7121 cacache@18.0.2
• 796d1c7 #​7121 @npmcli/run-script@7.0.3
• 3b7f6f2 #​7121 @npmcli/promise-spawn@7.0.1
• 7ecd146 #​7121 npmcli/git@5.0.4
• workspace: @npmcli/arborist@7.3.0
• workspace: @npmcli/config@8.1.0
• workspace: libnpmdiff@6.0.5
• workspace: libnpmexec@7.0.6
• workspace: libnpmfund@5.0.3
• workspace: libnpmpack@6.0.5

Chores

• 2fd8292 #​7121 work around @​npmcli/git lazy loading (@​wraithgar)
• cd9a66d #​7121 update devDependencies in lockfile (@​wraithgar)
• 2dda715 #​7121 tap@16.3.10 (@​wraithgar)

v10.2.5

Compare Source

Bug Fixes

• c7a592c #​7061 dont use cache for update notifier manifest request (@​lukekarrys)
• 7b952f6 #​7049 unpublish: bubble up all errors parsing local package.json (#​7049) (@​wraithgar)
• be4741f #​7039 unpublish bugfixes (#​7039) (@​wraithgar)
• bc7f53d #​7036 reverse direction of SPDX SBOM dependency rels (#​7036) (@​bdehamer, @​antonbauhofer)
• 11ec231 #​7033 skip creation of log directory if logs-max is set to 0 (#​7033) (@​JJ)
• 6267f54 #​7005 properly catch missing url opener error on interactive prompt (#​7005) (@​wraithgar)

Dependencies

• ff1204a #​7058 lru-cache@10.1.0
• c648020 #​7058 json-parse-even-better-errors@3.0.1
• 53aa8f2 #​7058 pacote@17.0.5
• 2e5331c #​7058 npm-packlist@8.0.1
• 937b7b7 #​7058 ignore-walk@6.0.4
• 35371c8 #​7058 cacache@18.0.1
• workspace: @npmcli/arborist@7.2.2
• workspace: @npmcli/config@8.0.3
• workspace: libnpmaccess@8.0.2
• workspace: libnpmdiff@6.0.4
• workspace: libnpmexec@7.0.5
• workspace: libnpmfund@5.0.2
• workspace: libnpmhook@10.0.1
• workspace: libnpmorg@6.0.2
• workspace: libnpmpack@6.0.4
• workspace: libnpmpublish@9.0.3
• workspace: libnpmsearch@7.0.1
• workspace: libnpmteam@6.0.1
• workspace: libnpmversion@5.0.2

Chores

• f656b66 #​7062 @npmcli/template-oss@4.21.3 (#​7062) (@​lukekarrys)
• 9754b17 #​7051 use global npm for workspace tests (@​lukekarrys)
• 3891757 #​7051 @npmcli/template-oss@4.21.2 (@​lukekarrys)
• 71f70fa #​7058 nock@13.4.0 (@​wraithgar)
• 43674a4 #​7058 tap@16.3.9 (@​wraithgar)
• 4ba585c #​7040 fix tests for zlib differences between node versions (#​7040) (@​wraithgar)

v10.2.4

Compare Source

Bug Fixes

• cd291e7 #​6995 refactor search formatting code (#​6995) (@​wraithgar)
• f3a7380 #​6973 look in workspace for exec commands (#​6973) (@​wraithgar)
• d11496b #​6977 pkg: properly output in workspace mode (#​6977) (@​wraithgar)
• 0f70088 #​6969 correctly handle object licenses in SBOM generation (#​6969) (@​jamietanna)
• dce3b08 #​6951 properly catch missing url opener error (#​6951) (@​wraithgar)

Documentation

• a38836c #​6616 add path usage for view command (#​6616) (@​RobinKnipe)
• da18e4f #​6987 update npm-prune description (#​6987) (@​Eomm)

Dependencies

• e9ec2f7 #​6994 lru-cache@10.0.2
• faf9eff #​6994 is-core-module@2.13.1
• b00e780 #​6994 @sigstore/sign@2.2.0
• 4613774 #​6994 hoisting newer deps in favor of older ones
• 54c4f7b #​6994 signal-exit@4.1.0
• 8c5882f #​6994 strip-ansi@7.1.0
• cd0c649 #​6994 ci-info@4.0.0
• a0a58b7 #​6994 @sigstore/tuf@2.2.0
• b3a53c6 #​6949 is-cidr@5.0.3 (#​6949)
• Workspace: @npmcli/config@8.0.2
• Workspace: libnpmexec@7.0.4
• Workspace: libnpmpublish@9.0.2

v10.2.3

Compare Source

Dependencies

• b5dedf3 #​6958 node-gyp@10.0.1

v10.2.2

Compare Source

Bug Fixes

• 8ed6d28 #​6910 make npm link respect --no-save (#​6910) (@​Santoshraj2)
• eacec5f #​6941 add back bin/node-gyp-bin/node-gyp files (#​6941) (@​lukekarrys)
• b776753 #​6928 Grammar mistake in authentication error message (#​6928) (@​Gekuro, gek)

Documentation

• c422a01 #​6924 use markdown links instead of html (@​lukekarrys)
• dd03aa0 #​6921 add v9 and above for lockfile version 3 (#​6921) (@​MikeMcC399)

Dependencies

• dfb6298 #​6937 node-gyp@10.0.0 (#​6937)
• Workspace: @npmcli/arborist@7.2.1
• Workspace: libnpmdiff@6.0.3
• Workspace: libnpmexec@7.0.3
• Workspace: libnpmfund@5.0.1
• Workspace: libnpmpack@6.0.3
• Workspace: libnpmversion@5.0.1

v10.2.1

Compare Source

Bug Fixes

• 35c92fe #​6902 Add check to pkg command to deal with empty values (#​6902) (@​NeonArray)
• 5b6172f #​6895 logout from custom registry (@​wraithgar)
• 8423d4f #​6895 delete auth from proper location on logout (@​wraithgar)
• 0cfe9de #​6873 audit: spelling error in message (#​6873) (@​Fdawgs)

Documentation

• 5142735 #​6894 update npm build description (#​6894) (@​siemhesda)
• 2e4b4ad #​6861 npm publish content modification (#​6861) (@​jpg619)

Dependencies

• 96e1637 #​6915 cmd-shim@6.0.2 (#​6915)
• b405da1 #​6899 bin-links@4.0.3
• ef69d36 #​6895 npm-registry-fetch@16.1.0
• 337c903 #​6882 spdx-license-ids@3.0.16
• e6b0be7 #​6882 socks-proxy-agent@8.0.2
• ee6892e #​6882 readable-stream@4.4.2
• 61c3ee9 #​6882 minipass@7.0.4
• 14d31fd #​6882 is-core-module@2.13.0
• 03f3d2e #​6882 https-proxy-agent@7.0.2
• e0163c6 #​6882 are-we-there-yet@4.0.1
• fca804a #​6882 ci-info@3.9.0
• 6af582f #​6882 npm-install-checks@6.3.0
• Workspace: @npmcli/config@8.0.1

v10.2.0

Compare Source

Features

• 7c459d2 #​6801 add npm sbom command (#​6801) (@​bdehamer)
• 81a460f #​6732 add package-lock-only mode to npm query (@​wraithgar)
• 0d29855 #​6732 add no-package-lock mode to npm audit (@​wraithgar)

Bug Fixes

• 2207628 #​6823 use strip-ansi module instead of internal regex (#​6823) (@​wraithgar)
• d46d052 #​6798 tolerate null bugs URLs (#​6798) (@​vladh)
• fb1b674 #​6758 deprecate: ignore implicit workspace mode (#​6758) (@​wraithgar)

Documentation

• 68031f2 #​6844 update CONTRIBUTING.md to prevent errors (#​6844) (@​darcyclarke)
• 3ac703c #​6831 add include param to commands that have omit param (#​6831) (@​siemhesda)
• 03912db #​6819 add init-specific params to init docs/help (#​6819) (@​wraithgar)
• 8088325 #​6800 Update npm-doctor.md (#​6800) (@​siemhesda)

Dependencies

• aa6728b #​6859 tar@6.2.0
• ce9089f #​6859 npm-package-arg@11.0.1
• 39d7f04 #​6859 minipass@7.0.4
• 0a47af5 #​6859 hosted-git-info@7.0.1
• af93130 #​6859 glob@10.3.10
• 3ebc474 #​6859 @npmcli/query@3.0.1
• 284cbfd #​6858 @npmcli/agent@2.2.0
• Workspace: @npmcli/arborist@7.2.0
• Workspace: @npmcli/config@8.0.0
• Workspace: libnpmaccess@8.0.1
• Workspace: libnpmdiff@6.0.2
• Workspace: libnpmexec@7.0.2
• Workspace: libnpmfund@5.0.0
• Workspace: libnpmorg@6.0.1
• Workspace: libnpmpack@6.0.2
• Workspace: libnpmpublish@9.0.1

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[vercel]

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name	Status	Preview	Comments	Updated (UTC)
react-stick	✅ Ready (Inspect)	Visit Preview	💬 Add feedback	Mar 22, 2024 0:04am

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 94.35%. Comparing base (de83389) to head (bd29707).
Report is 550 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #698      +/-   ##
==========================================
- Coverage   96.09%   94.35%   -1.75%     
==========================================
  Files          13       13              
  Lines         282      354      +72     
  Branches        0      109     +109     
==========================================
+ Hits          271      334      +63     
- Misses         11       19       +8     
- Partials        0        1       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.