chore: release 12.1.0 · npm/cli@e60c978 · GitHub
Skip to content

Commit e60c978

Browse files
github-actions[bot]npm-cli-bot
github-actions[bot]
authored and
npm-cli-bot
committed
chore: release 12.1.0
1 parent 7b50811 commit e60c978

19 files changed

Lines changed: 125 additions & 47 deletions

‎.release-please-manifest.json‎

Lines changed: 8 additions & 8 deletions

‎AUTHORS‎

Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1038,3 +1038,11 @@ Justin Clark <u2mejc@users.noreply.github.com>
10381038
James Prevett <jp@jamespre.dev>
10391039
martin <martin.ruiz.mares@gmail.com>
10401040
Hashim Khan <64767361+Hashim1999164@users.noreply.github.com>
1041+
Lazizbek Ergashev <lazerg2@gmail.com>
1042+
Daniel Roe <daniel@roe.dev>
1043+
Joel Verhagen <jver@microsoft.com>
1044+
Yashas Gunderia <68075205+ychampion@users.noreply.github.com>
1045+
Martin Ruiz <mruizmares@microsoft.com>
1046+
Fnine59 <fnine59@163.com>
1047+
Yunseo Kim <dev@yunseo.kim>
1048+
Tayvon Wright <tayvon@github.com>

‎CHANGELOG.md‎

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,37 @@
11
# Changelog
22

3+
## [12.1.0](https://github.com/npm/cli/compare/v12.0.2...v12.1.0) (2026-09-21)
4+
### Features
5+
* [`6400533`](https://github.com/npm/cli/commit/6400533ab3d830716964bcf0def42b6c47f3fd70) [#9948](https://github.com/npm/cli/pull/9948) token: support read-write-stage-only granular access tokens (#9948) (@Tayvon, @Copilot)
6+
* [`8723f53`](https://github.com/npm/cli/commit/8723f539061eb8034a690f412ec8ccaa1529febc) [#9898](https://github.com/npm/cli/pull/9898) stage: display staged package status (#9898) (@joelverhagen)
7+
### Bug Fixes
8+
* [`c9876d7`](https://github.com/npm/cli/commit/c9876d7ea7150b0702e4151210b9fa1a8dbc7fbf) [#9882](https://github.com/npm/cli/pull/9882) provenance-file takes precedence over OIDC auto-generated provenance (#9882) (@yunseo-kim)
9+
* [`b016aa2`](https://github.com/npm/cli/commit/b016aa287d01fcd688d6704222f193ce5c04bfb7) [#9913](https://github.com/npm/cli/pull/9913) config: avoid exporting persistent allow-scripts (#9913) (@Fnine59)
10+
* [`d6c6122`](https://github.com/npm/cli/commit/d6c612258c571c71a00f496c1f8980ed13b8a4d9) [#9914](https://github.com/npm/cli/pull/9914) arborist: match allowScripts keys for local paths (#9914) (@martinrrm, @Copilot)
11+
* [`a8c9b2f`](https://github.com/npm/cli/commit/a8c9b2fe25342967be48eba3f792218c6becca8a) [#9823](https://github.com/npm/cli/pull/9823) keep dry-run output valid json (#9823) (@martinrrm)
12+
* [`da50c34`](https://github.com/npm/cli/commit/da50c3479b556da74f88ff0b579d5191a7db0a24) [#9881](https://github.com/npm/cli/pull/9881) arborist: reject uninstall args that carry a version (#9881) (@lazerg)
13+
* [`71915e8`](https://github.com/npm/cli/commit/71915e8e7d6ac57f60c827274a95db786802e410) [#9756](https://github.com/npm/cli/pull/9756) exempt explicit pack targets from allow-directory (#9756) (@ychampion, @ychampion)
14+
* [`51c2bf8`](https://github.com/npm/cli/commit/51c2bf81fa2c31547d0fec44fff2aaac3d9a9862) [#9864](https://github.com/npm/cli/pull/9864) don't print the funding message for global installs (#9864) (@lazerg)
15+
### Documentation
16+
* [`bea9066`](https://github.com/npm/cli/commit/bea9066c7d1fe09d6475bbe391f28116aa6a83a6) [#9838](https://github.com/npm/cli/pull/9838) document npm 12 install script blocking (#9838) (@reggi)
17+
### Dependencies
18+
* [`6e40f73`](https://github.com/npm/cli/commit/6e40f7399cebd4f699ce5988c10b935f08f747ff) [#9871](https://github.com/npm/cli/pull/9871) `undici@6.28.0` (@martinrrm, @Copilot)
19+
* [`05bd2a4`](https://github.com/npm/cli/commit/05bd2a49fc89ca5a4dcf8c15e69ebfbdffd32dd9) [#9871](https://github.com/npm/cli/pull/9871) `ip-address@10.5.0` (@martinrrm, @Copilot)
20+
* [`b7c490d`](https://github.com/npm/cli/commit/b7c490d19299f15101f41a86667bd34b14717eb0) [#9871](https://github.com/npm/cli/pull/9871) `brace-expansion@5.0.9` (@martinrrm, @Copilot)
21+
* [`75a943d`](https://github.com/npm/cli/commit/75a943ded97e8d00a484d3d64cadc9aa013bd268) [#9843](https://github.com/npm/cli/pull/9843) `tar@7.5.22` (#9843) (@martinrrm, @Copilot)
22+
### Chores
23+
* [`7b50811`](https://github.com/npm/cli/commit/7b508113d98bf9ae5ef2582b8418014dd8869ec1) [#9961](https://github.com/npm/cli/pull/9961) pack: select workspace through config (#9961) (@reggi)
24+
* [`81a901c`](https://github.com/npm/cli/commit/81a901c9a5913f9bd8104e6196af3580eafa13cb) [#9915](https://github.com/npm/cli/pull/9915) recognize prefixed Node.js PR titles (#9915) (@reggi)
25+
* [`4cdccea`](https://github.com/npm/cli/commit/4cdcceac047f82571d0ec734e18b87d1d130e042) [#9836](https://github.com/npm/cli/pull/9836) update `node-integration` workflow template to latest actions (#9836) (@MikeMcC399)
26+
* [`278df04`](https://github.com/npm/cli/commit/278df04d3f25d391af3213a243bb9f89e1d11899) [#9822](https://github.com/npm/cli/pull/9822) pass nodedir to node-gyp via npm_package_config env in node integration (#9822) (@reggi, @Copilot)
27+
* [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.3): `@npmcli/arborist@10.0.3`
28+
* [workspace](https://github.com/npm/cli/releases/tag/config-v11.1.0): `@npmcli/config@11.1.0`
29+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.3): `libnpmdiff@9.0.3`
30+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.3): `libnpmexec@11.0.3`
31+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.3): `libnpmfund@8.0.3`
32+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.3): `libnpmpack@10.0.3`
33+
* [workspace](https://github.com/npm/cli/releases/tag/libnpmpublish-v12.0.1): `libnpmpublish@12.0.1`
34+
335
## [12.0.2](https://github.com/npm/cli/compare/v12.0.1...v12.0.2) (2026-07-27)
436
### Bug Fixes
537
* [`834408e`](https://github.com/npm/cli/commit/834408e8f0f2295d02205d8ff5d011c859835225) [#9760](https://github.com/npm/cli/pull/9760) pack: honor min-release-age-exclude (#9760) (@martinrrm, @Copilot)

‎package-lock.json‎

Lines changed: 20 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
11
{
22
"name": "npm",
3-
"version": "12.0.2",
3+
"version": "12.1.0",
44
"lockfileVersion": 3,
55
"requires": true,
66
"packages": {
77
"": {
88
"name": "npm",
9-
"version": "12.0.2",
9+
"version": "12.1.0",
1010
"bundleDependencies": [
1111
"@isaacs/string-locale-compare",
1212
"@npmcli/arborist",
@@ -87,8 +87,8 @@
8787
],
8888
"dependencies": {
8989
"@isaacs/string-locale-compare": "^1.1.0",
90-
"@npmcli/arborist": "^10.0.2",
91-
"@npmcli/config": "^11.0.1",
90+
"@npmcli/arborist": "^10.0.3",
91+
"@npmcli/config": "^11.1.0",
9292
"@npmcli/fs": "^6.0.0",
9393
"@npmcli/git": "^8.0.0",
9494
"@npmcli/map-workspaces": "^6.0.0",
@@ -115,12 +115,12 @@
115115
"is-cidr": "^7.0.0",
116116
"json-parse-even-better-errors": "^6.0.0",
117117
"libnpmaccess": "^11.0.0",
118-
"libnpmdiff": "^9.0.2",
119-
"libnpmexec": "^11.0.2",
120-
"libnpmfund": "^8.0.2",
118+
"libnpmdiff": "^9.0.3",
119+
"libnpmexec": "^11.0.3",
120+
"libnpmfund": "^8.0.3",
121121
"libnpmorg": "^9.0.0",
122-
"libnpmpack": "^10.0.2",
123-
"libnpmpublish": "^12.0.0",
122+
"libnpmpack": "^10.0.3",
123+
"libnpmpublish": "^12.0.1",
124124
"libnpmsearch": "^10.0.0",
125125
"libnpmteam": "^9.0.0",
126126
"libnpmversion": "^9.0.0",
@@ -14947,7 +14947,7 @@
1494714947
},
1494814948
"workspaces/arborist": {
1494914949
"name": "@npmcli/arborist",
14950-
"version": "10.0.2",
14950+
"version": "10.0.3",
1495114951
"license": "ISC",
1495214952
"dependencies": {
1495314953
"@gar/promise-retry": "^1.0.0",
@@ -15007,7 +15007,7 @@
1500715007
},
1500815008
"workspaces/config": {
1500915009
"name": "@npmcli/config",
15010-
"version": "11.0.1",
15010+
"version": "11.1.0",
1501115011
"license": "ISC",
1501215012
"dependencies": {
1501315013
"@npmcli/map-workspaces": "^6.0.0",
@@ -15047,10 +15047,10 @@
1504715047
}
1504815048
},
1504915049
"workspaces/libnpmdiff": {
15050-
"version": "9.0.2",
15050+
"version": "9.0.3",
1505115051
"license": "ISC",
1505215052
"dependencies": {
15053-
"@npmcli/arborist": "^10.0.2",
15053+
"@npmcli/arborist": "^10.0.3",
1505415054
"@npmcli/installed-package-contents": "^5.0.0",
1505515055
"binary-extensions": "^3.0.0",
1505615056
"diff": "^8.0.2",
@@ -15069,11 +15069,11 @@
1506915069
}
1507015070
},
1507115071
"workspaces/libnpmexec": {
15072-
"version": "11.0.2",
15072+
"version": "11.0.3",
1507315073
"license": "ISC",
1507415074
"dependencies": {
1507515075
"@gar/promise-retry": "^1.0.0",
15076-
"@npmcli/arborist": "^10.0.2",
15076+
"@npmcli/arborist": "^10.0.3",
1507715077
"@npmcli/package-json": "^8.0.0",
1507815078
"@npmcli/run-script": "^11.0.0",
1507915079
"ci-info": "^4.0.0",
@@ -15100,10 +15100,10 @@
1510015100
}
1510115101
},
1510215102
"workspaces/libnpmfund": {
15103-
"version": "8.0.2",
15103+
"version": "8.0.3",
1510415104
"license": "ISC",
1510515105
"dependencies": {
15106-
"@npmcli/arborist": "^10.0.2"
15106+
"@npmcli/arborist": "^10.0.3"
1510715107
},
1510815108
"devDependencies": {
1510915109
"@npmcli/eslint-config": "^5.0.1",
@@ -15133,10 +15133,10 @@
1513315133
}
1513415134
},
1513515135
"workspaces/libnpmpack": {
15136-
"version": "10.0.2",
15136+
"version": "10.0.3",
1513715137
"license": "ISC",
1513815138
"dependencies": {
15139-
"@npmcli/arborist": "^10.0.2",
15139+
"@npmcli/arborist": "^10.0.3",
1514015140
"@npmcli/run-script": "^11.0.0",
1514115141
"npm-package-arg": "^14.0.0",
1514215142
"pacote": "^22.0.0"
@@ -15153,7 +15153,7 @@
1515315153
}
1515415154
},
1515515155
"workspaces/libnpmpublish": {
15156-
"version": "12.0.0",
15156+
"version": "12.0.1",
1515715157
"license": "ISC",
1515815158
"dependencies": {
1515915159
"@npmcli/package-json": "^8.0.0",

‎package.json‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"version": "12.0.2",
2+
"version": "12.1.0",
33
"name": "npm",
44
"description": "a package manager for JavaScript",
55
"workspaces": [
@@ -48,8 +48,8 @@
4848
},
4949
"dependencies": {
5050
"@isaacs/string-locale-compare": "^1.1.0",
51-
"@npmcli/arborist": "^10.0.2",
52-
"@npmcli/config": "^11.0.1",
51+
"@npmcli/arborist": "^10.0.3",
52+
"@npmcli/config": "^11.1.0",
5353
"@npmcli/fs": "^6.0.0",
5454
"@npmcli/git": "^8.0.0",
5555
"@npmcli/map-workspaces": "^6.0.0",
@@ -76,12 +76,12 @@
7676
"is-cidr": "^7.0.0",
7777
"json-parse-even-better-errors": "^6.0.0",
7878
"libnpmaccess": "^11.0.0",
79-
"libnpmdiff": "^9.0.2",
80-
"libnpmexec": "^11.0.2",
81-
"libnpmfund": "^8.0.2",
79+
"libnpmdiff": "^9.0.3",
80+
"libnpmexec": "^11.0.3",
81+
"libnpmfund": "^8.0.3",
8282
"libnpmorg": "^9.0.0",
83-
"libnpmpack": "^10.0.2",
84-
"libnpmpublish": "^12.0.0",
83+
"libnpmpack": "^10.0.3",
84+
"libnpmpublish": "^12.0.1",
8585
"libnpmsearch": "^10.0.0",
8686
"libnpmteam": "^9.0.0",
8787
"libnpmversion": "^9.0.0",

‎workspaces/arborist/CHANGELOG.md‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,11 @@
11
# Changelog
22

3+
## [10.0.3](https://github.com/npm/cli/compare/arborist-v10.0.2...arborist-v10.0.3) (2026-09-21)
4+
### Bug Fixes
5+
* [`d6c6122`](https://github.com/npm/cli/commit/d6c612258c571c71a00f496c1f8980ed13b8a4d9) [#9914](https://github.com/npm/cli/pull/9914) arborist: match allowScripts keys for local paths (#9914) (@martinrrm, @Copilot)
6+
* [`da50c34`](https://github.com/npm/cli/commit/da50c3479b556da74f88ff0b579d5191a7db0a24) [#9881](https://github.com/npm/cli/pull/9881) arborist: reject uninstall args that carry a version (#9881) (@lazerg)
7+
* [`dc43591`](https://github.com/npm/cli/commit/dc43591e6e08e9857c787116b1ed12f074e68c3c) [#9877](https://github.com/npm/cli/pull/9877) arborist: don't fetch packuments for uninstallable optional peer dependencies (#9877) (@danielroe)
8+
39
## [10.0.2](https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2) (2026-07-27)
410
### Bug Fixes
511
* [`74eff59`](https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50) [#9770](https://github.com/npm/cli/pull/9770) arborist: avoid crash when peer back-off detaches a node (#9770) (@manzoorwanijk)

‎workspaces/arborist/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@npmcli/arborist",
3-
"version": "10.0.2",
3+
"version": "10.0.3",
44
"description": "Manage node_modules trees",
55
"dependencies": {
66
"@gar/promise-retry": "^1.0.0",

‎workspaces/config/CHANGELOG.md‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,12 @@
11
# Changelog
22

3+
## [11.1.0](https://github.com/npm/cli/compare/config-v11.0.1...config-v11.1.0) (2026-09-21)
4+
### Features
5+
* [`6400533`](https://github.com/npm/cli/commit/6400533ab3d830716964bcf0def42b6c47f3fd70) [#9948](https://github.com/npm/cli/pull/9948) token: support read-write-stage-only granular access tokens (#9948) (@Tayvon, @Copilot)
6+
### Bug Fixes
7+
* [`c9876d7`](https://github.com/npm/cli/commit/c9876d7ea7150b0702e4151210b9fa1a8dbc7fbf) [#9882](https://github.com/npm/cli/pull/9882) provenance-file takes precedence over OIDC auto-generated provenance (#9882) (@yunseo-kim)
8+
* [`b016aa2`](https://github.com/npm/cli/commit/b016aa287d01fcd688d6704222f193ce5c04bfb7) [#9913](https://github.com/npm/cli/pull/9913) config: avoid exporting persistent allow-scripts (#9913) (@Fnine59)
9+
310
## [11.0.1](https://github.com/npm/cli/compare/config-v11.0.0...config-v11.0.1) (2026-07-27)
411
### Documentation
512
* [`9e17dc0`](https://github.com/npm/cli/commit/9e17dc064782ca1a1fd7f549e5a2fc7903f7fe51) [#9805](https://github.com/npm/cli/pull/9805) clarify npm 12 unknown-config breaking change in changelogs (#9805) (@Hashim1999164)

‎workspaces/config/package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
{
22
"name": "@npmcli/config",
3-
"version": "11.0.1",
3+
"version": "11.1.0",
44
"files": [
55
"bin/",
66
"lib/"

‎workspaces/libnpmdiff/CHANGELOG.md‎

Lines changed: 4 additions & 0 deletions

0 commit comments

Comments
 (0)