chore: release 12.0.0-pre.0.0#9229
Conversation
Release ManagerRelease workflow run: https://github.com/npm/cli/actions/runs/25454145455 Release Checklist for v12.0.0-pre.0.0
|
d2c913a to
0b963e7
Compare
5f2c2fe to
889de7a
Compare
bcc9428 to
a05053c
Compare
9fc664f to
bf85c4f
Compare
ead5d4d to
25bb66f
Compare
3df0160 to
d28615b
Compare
d28615b to
d587498
Compare
🤖 I have created a release beep boop
12.0.0-pre.0.0
12.0.0-pre.0.0 (2026-05-06)
npm sbom --sbom-format=cyclonedxnow reports thenamefield from each package'spackage.jsoninstead of the on-disk directory name. Thename,bom-ref, andpurlof the root component and of aliased dependencies may change.man npm-installwill no longer work, butnpm help installis unaffected.npm pkgoutput is no longer forced to json. This means you can get single values without having to worry about wrapping of the values. It also outputs non-json content more similarly tonpm view.npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.npm packandnpm publishhave changed. They are now always consistent, and in the same format.star,starsandunstarcommands have been removednpm addusercommand has been removed. Create and manage user accounts on the npm website, and usenpm loginto authenticate on the command line.Features
916cb4b#9287 add allow-directory, allow-file, and allow-remote (feat: add allow-directory, allow-file, and allow-remote #9287) (@wraithgar)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)2397196#9265 Remove Twitter and Freenode profile fields (@owlstronaut)738be10#9196 remove star commands (feat: remove star commands #9196) (@wraithgar)db7c1f8#9163 adduas alias forupdatecommand (feat: adduas alias forupdatecommand #9163) (@Ausoj)45e44dd#9228 adds a backport script (@owlstronaut)Bug Fixes
d623988#9311 sbom: dedupe per-node dependsOn / relationships (fix(sbom): dedupe per-node dependsOn / relationships #9311) (@mikaelkristiansson)d36945d#9160 do not unwrap single-item arrays in --json output (@yetanotheraryan)faf7348#9284 align CycloneDX SBOM component names with SPDX (fix!: align CycloneDX SBOM component names with SPDX #9284) (@cyphercodes, @cyphercodes)e20424b#9035 don't install man pages in system locations (@owlstronaut)01d9acd#9269 pkg: output like npm view does, do not force json output (@wraithgar)27567ab#9257 ignore intended error code (@owlstronaut)4ef5b6e#9039 stop resolving node path via whichnode (@owlstronaut)2e9b26e#9247 sync json output of pack and publish (fix: sync json output of pack and publish #9247) (@wraithgar)7357d7f#9036 remove npm adduser command (@owlstronaut)Dependencies
fbe1dd0#9316socks@10.1.1af65766#9316ip-address@10.1.137bd0c6#9316cidr-regex@5.0.55af02ec#9270lru-cache@11.3.5799866f#9270node-gyp@12.3.079d394e#9270is-cidr@6.0.49669d31#9207@sigstore/protobuf-specs@0.5.1b09a5ac#9207tinyglobby@0.2.16150231d#9207picomatch@4.0.4413e0a0#9207lru-cache@11.3.36faa25e#9207diff@8.0.487bb9d0#9207minimatch@10.2.52501dd8#9207tar@7.5.13ccce5f6#9207minipass-flush@1.0.6Chores
4259e57#9316 dev dependency updates (@owlstronaut)d68bd36#9317 add cli-triage team as codeowner (chore: add cli-triage team as codeowner #9317) (@owlstronaut)b9332e6#9270 dev dependency updates (@owlstronaut)cc468a8#9269 refactor tests (@wraithgar)2ca36c4#9261 fixed non-functional typos throughout the codebase (@opensourcezeal)8131de4#9239 add action permission for backport workflow (@owlstronaut)6df5f91#9232 backports can trigger CI (@owlstronaut)07552f5#9224 don't run npm update in CI (@owlstronaut)05dbba5#9195 enable prerelease mode (chore: enable prerelease mode #9195) (@wraithgar)@npmcli/arborist@10.0.0-pre.0.0@npmcli/config@11.0.0-pre.0.0libnpmdiff@8.1.6-pre.0.0libnpmexec@10.2.6-pre.0.0libnpmfund@7.0.20-pre.0.0libnpmpack@10.0.0-pre.0.0libnpmversion@9.0.0-pre.0.0arborist: 10.0.0-pre.0.0
10.0.0-pre.0.0 (2026-05-06)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
b8655c7#9282 arborist: add lockfileString() for in-memory lockfile generation (@ljharb)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Bug Fixes
076551b#9309 arborist: clean up orphan top-level symlinks in linked strategy (fix(arborist): clean up orphan top-level symlinks in linked strategy #9309) (@manzoorwanijk)32940e2#9299 arborist: ignore hidden entries in global update (fix(arborist): ignore hidden entries in global update #9299) (@Grynn)0629fbf#9283 prefer existing tree nodes for peerOptional deps ([BUG] 11.12.1 peerOptional dependencies marked extraneous and removed #9249) (fix: prefer existing tree nodes for peerOptional deps (#9249) #9283) (@everett1992)bc32d94#9198 arborist: propagate overrides through Link nodes to targets (fix(arborist): propagate overrides through Link nodes to targets #9198) (@manzoorwanijk)1ab20c8#9235 arborist: fix infinite loop with bundledDependencies and overrides (fix(arborist): fix infinite loop with bundledDependencies and overrides #9235) (@everett1992)0dc5585#9167 arborist: handlenpm linkwith install-strategy=linked (@manzoorwanijk)1d058b0#9221 arborist: do not install inert optional extraneous shared dependencies (fix(arborist): do not install inert optional extraneous shared dependencies #9221) (@lovell)dcad8ec#9206 pass _isRoot context where missing (fix: pass _isRoot context where missing #9206) (@wraithgar)config: 11.0.0-pre.0.0
11.0.0-pre.0.0 (2026-05-06)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
916cb4b#9287 add allow-directory, allow-file, and allow-remote (feat: add allow-directory, allow-file, and allow-remote #9287) (@wraithgar)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Bug Fixes
6628d05#9285 config: preserve min-release-age after flattening (@lawrence3699)libnpmdiff: 8.1.6-pre.0.0
Dependencies
@npmcli/arborist@10.0.0-pre.0.0libnpmexec: 10.2.6-pre.0.0
10.2.6-pre.0.0 (2026-05-06)
Bug Fixes
e9b0157#9255 libnpmexec: skip redundant reify for cached directory specs (fix(libnpmexec): skip redundant reify for cached directory specs #9255) (@manzoorwanijk)Chores
2ca36c4#9261 fixed non-functional typos throughout the codebase (@opensourcezeal)Dependencies
@npmcli/arborist@10.0.0-pre.0.0libnpmfund: 7.0.20-pre.0.0
Dependencies
@npmcli/arborist@10.0.0-pre.0.0libnpmpack: 10.0.0-pre.0.0
10.0.0-pre.0.0 (2026-05-06)
Bug Fixes
b1965d6#9271 refuse to pack when overrides apply to bundled packages (@owlstronaut)Dependencies
@npmcli/arborist@10.0.0-pre.0.0libnpmversion: 9.0.0-pre.0.0
9.0.0-pre.0.0 (2026-05-06)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Chores
40fcab4#8991@npmcli/template-oss@4.29.0(@wraithgar)This PR was generated with Release Please. See documentation.