[Snyk] Upgrade npm from 6.6.0 to 6.10.2 #4
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Snyk have raised this PR to upgrade npm from 6.6.0 to 6.10.2. See this package in NPM: https://www.npmjs.com/package/npm See this project in Snyk: https://app.snyk.io/org/t0mmykn1fe/project/52071a4e-c0f8-478b-b6dc-1f8109a8c412?utm_source=github&utm_medium=upgrade-pr
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Snyk have raised this PR to upgrade
npmfrom 6.6.0 to 6.10.2.Release notes
v6.10.2 (2019-07-23):
tl;dr - Fixes several issues with the cache when npm is run as
sudoon Unix systems.TESTING
2a78b96f8check test cache for root-owned files (@isaacs)108646ebcrun sudo tests on Travis-CI (@isaacs)cf984e946set --no-esm tap flag (@isaacs)8e0a3100dadd script to run tests and leave fixtures for inspection and debugging (@isaacs)BUGFIXES
25f4f73f6add a util for writing arbitrary files to cache This prevents metrics timing and debug logs from becoming root-owned. (@isaacs)2c61ce65dinfer cache owner from parent dir incorrect-mkdirutil (@isaacs)235e5d6dfensure correct owner on cached all-packages metadata (@isaacs)e2d377bb6npm.community#8540 audit: report server error on failure (@isaacs)52576a39e#216 npm.community#5385 npm.community#6076 Fixnpm ciwithfile:dependencies. Partially reverts #40/#86, recording dependencies of linked deps in order fornpm cito work. (@jfirebaugh)DEPENDENCIES
0fefdee13[email protected](@isaacs)e1d87a392[email protected](@isaacs)3f035bf09[email protected](@isaacs)ba3283112[email protected](@isaacs)ee90c334d[email protected](@isaacs)1e480c384[email protected](@isaacs)7662ee850[email protected](@isaacs)1357fadc6[email protected](@isaacs)a621b5cb6[email protected](@isaacs)560cd31dd[email protected](@isaacs)de7ae0867[email protected](@isaacs)e95da463c[email protected](@isaacs)554b641d4[email protected](@isaacs)06772f34a[email protected](@isaacs)85358db80[email protected](@isaacs)051cf20#26 fix switches for alternative shells on Windows (@gucong3000)3aaf954#25 set only one PATH env variable for child process on Windows (@zkochan)ea18ed2#36 #11 #18 remove procInterrupt listener on SIGINT in procError (@mattshin)5523951#29 #30 Use platform specific path casing if present (@mattezell)6.10.2-next.3
v6.10.2-next.2
6.10.2-next.1
v6.10.2-next.0
BUGFIXES
3cbd57712fix(git): strip GIT environs when running git (@isaacs)a81a8c4c4#206 improve isOnly(Dev,Optional) (@larsgw)172f9aca6#179 fix-xmas-underline (@raywu0123)f52673fc7#212 build: use/usr/bin/envto load bash (@rsmarples)DEPENDENCIES
ef4445ad3#208[email protected](@irega)c0d611356[email protected](@isaacs)7716ba972[email protected](@isaacs)42d22e837[email protected](@isaacs)a2ea7f9ff[email protected](@isaacs)429226a5e[email protected](@isaacs)175670ea6[email protected]: (@isaacs)0d0517f7f[email protected](@isaacs)741400429[email protected](@isaacs)bddd60e30[email protected](@isaacs)4acf03fd1[email protected](@isaacs)c2bd17291[email protected](@isaacs)7f0221bb1[email protected](@isaacs)f458fe7dd[email protected](@isaacs)009752978[email protected](@isaacs)0fa2bb438[email protected](@isaacs)b86450929[email protected](@isaacs)25db00fe9[email protected](@isaacs)8dfbe8610[email protected](@isaacs)f6164d5ddisaacs/chownr#21 isaacs/chownr#20 npm.community#7901 npm.community#8203[email protected]This fixes an EISDIR error from cacache on Darwin in Node versions prior to 10.6. (@isaacs)6.10.1-next.2
6.10.1-next.1
6.10.1-next.0
FEATURES
87fef4e35#176 fix: Always return JSON for outdated --json (@sreeramjayan)f101d44fc#203 fix(unpublish): add space after hyphen (@ffflorian)a4475de4c#202 enable production flag for npm audit (@CalebCourier)d192904d0#178 fix: Return a value forviewwhen in silent mode (@stayradiated)39d473adf#185 Allow git to follow global tagsign config (@junderw)BUGFIXES
d9238af0b#201 npm/npm#17858 npm/npm#18042 npm.community#644 do not crash when removing nameless packages (@SteveVanOpstal and @isaacs)4bec4f111#200 Check fornode(as well asnode.exe) in npm's local dir on Windows (@rgoulais)ce93dab2d#180 npm.community#6187 Fix handling ofremotedeps innpm outdated(@larsgw)TESTING
a823f3084travis: Update to include new v12 LTS (@isaacs)33e2d1dacfix flaky debug-logs test (@isaacs)e9411c6cdDon't time out waiting for gpg user input (@isaacs)d2d301704#195 Add the arm64 check for legacy-platform-all.js test case. (@ossdev07)a4dc34243parallel tests (@isaacs)DOCUMENTATION
f5857e263#192 Clarify usage of bundledDependencies (@john-osullivan)747fdaf66#159 doc: add --audit-level param (@ngraef)DEPENDENCIES
e36b3c320[email protected] (@isaacs)6bb935c09[email protected] (@isaacs)e9cd536Use custom cachingrealpathimplementation, dramatically reducinglstatcalls when reading the package tree (@isaacs)39538b460[email protected] (@isaacs)f8b1552#38 Ignore errors raised byfs.closeSync(@lukeapage)042193069[email protected] (@isaacs)8bbd051#172 limit git retry times, avoid unlimited retries (小秦)92f5e4c#170 fix(errors): Fix "TypeError: err.code.match is not a function" error (@jviotti)8bd8e909f[email protected] (@isaacs)47de8f5#146 npm.community#2395 fix(config): Add ssri config 'error' option (@larsgw)5156561fix(write): avoid acb never calledsituation (@zkat)90f40f0#166 #165 docs: Fix docs forpathproperty in get.info (@hdgarrood)bf61c45c6[email protected] (@isaacs)f75d46a9d[email protected] (@isaacs)c80341a#215 Fix encoding/decoding of base-256 numbers (@justfalter)77522f0#204 #214 Usestatinstead oflstatwhen checking CWD (@stkb)ec6236210[email protected] (@isaacs)63d1e3e#30 Sort package tarball entries by file type for compression benefits (@isaacs)7fcd045Ignore.DS_Storefiles as well as folders (@isaacs)68b7c96Never include .git folders in package root. (Note: this prevents the issue that broke the v6.9.1 release.) (@isaacs)57bef61bcupdate fstream in node-gyp (@isaacs)acbbf7eee#183 [email protected] (@kemitchell)011ae67f0[email protected] (@isaacs)f5e884909[email protected] (@isaacs)b57d07e35[email protected] (@isaacs)from
npmGitHub Release Notes🧐 View latest project report
🛠 Adjust upgrade PR settings
🔕 Ignore this dependency or unsubscribe from future upgrade PRs