chore: release 12.0.0-pre.0.0#9229
Conversation
Release ManagerRelease workflow run: https://github.com/npm/cli/actions/runs/26187055045 Release Checklist for v12.0.0-pre.0.0
|
d2c913a to
0b963e7
Compare
5f2c2fe to
889de7a
Compare
0ad696d to
dfa1930
Compare
ead5d4d to
25bb66f
Compare
c9e3bc8 to
24c13f0
Compare
Release Workflow
🚨🚨🚨 @npm/cli-team: The post-release workflow failed for this release. Manual steps may need to be taken after examining the workflow output. 🚨🚨🚨 |
🤖 I have created a release beep boop
12.0.0-pre.0.0
12.0.0-pre.0.0 (2026-05-20)
npm sbom --sbom-format=cyclonedxnow reports thenamefield from each package'spackage.jsoninstead of the on-disk directory name. Thename,bom-ref, andpurlof the root component and of aliased dependencies may change.man npm-installwill no longer work, butnpm help installis unaffected.npm pkgoutput is no longer forced to json. This means you can get single values without having to worry about wrapping of the values. It also outputs non-json content more similarly tonpm view.npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.npm packandnpm publishhave changed. They are now always consistent, and in the same format.star,starsandunstarcommands have been removednpm addusercommand has been removed. Create and manage user accounts on the npm website, and usenpm loginto authenticate on the command line.Features
254809e#9201 npm stage (feat: npm stage #9201) (@reggi, @Copilot)cf94dbe#9248 add permissions support to trust commands (feat: add permissions support to trust commands #9248) (@reggi, @Copilot)e0f12f7#9348 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut)916cb4b#9287 add allow-directory, allow-file, and allow-remote (feat: add allow-directory, allow-file, and allow-remote #9287) (@wraithgar)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)2397196#9265 Remove Twitter and Freenode profile fields (@owlstronaut)738be10#9196 remove star commands (feat: remove star commands #9196) (@wraithgar)db7c1f8#9163 adduas alias forupdatecommand (feat: adduas alias forupdatecommand #9163) (@Ausoj)45e44dd#9228 adds a backport script (@owlstronaut)Bug Fixes
2a13550#9380 key stage download --json output by package name (fix: key stage download --json output by package name #9380) (@reggi, @Copilot)ca585c8#9368 allow min-release-age in npmrc to coexist with --before (@raazkhnl)f550eb4#9348 refactor #failureNode, adjust tests and safety (@owlstronaut)1f17566#9348 allow-remote=none does not block registry tarballs (@owlstronaut)70af7b3#9327 remove settings (fix: remove settings #9327) (@owlstronaut)d623988#9311 sbom: dedupe per-node dependsOn / relationships (fix(sbom): dedupe per-node dependsOn / relationships #9311) (@mikaelkristiansson)d36945d#9160 do not unwrap single-item arrays in --json output (@yetanotheraryan)faf7348#9284 align CycloneDX SBOM component names with SPDX (fix!: align CycloneDX SBOM component names with SPDX #9284) (@cyphercodes, @cyphercodes)e20424b#9035 don't install man pages in system locations (@owlstronaut)01d9acd#9269 pkg: output like npm view does, do not force json output (@wraithgar)27567ab#9257 ignore intended error code (@owlstronaut)4ef5b6e#9039 stop resolving node path via whichnode (@owlstronaut)2e9b26e#9247 sync json output of pack and publish (fix: sync json output of pack and publish #9247) (@wraithgar)7357d7f#9036 remove npm adduser command (@owlstronaut)Documentation
c97b39b#9363 add example to optionalDependencies section (docs: add example to optionalDependencies section #9363) (@verifizieren)6704ab2#9335 npm view with json outputs array docs update (docs: npm view with json outputs array docs update #9335) (@yetanotheraryan)Dependencies
d151521#9382[email protected]a77416e#9382[email protected]b2717e4#9382[email protected]1c4a796#9382[email protected]e36a4e3#9382[email protected]91bd674#9382[email protected]66c7ff1#9382[email protected]514c71b#9382[email protected]fbe1dd0#9316[email protected]af65766#9316[email protected]37bd0c6#9316[email protected]5af02ec#9270[email protected]799866f#9270[email protected]79d394e#9270[email protected]9669d31#9207@sigstore/[email protected]b09a5ac#9207[email protected]150231d#9207[email protected]413e0a0#9207[email protected]6faa25e#9207[email protected]87bb9d0#9207[email protected]2501dd8#9207[email protected]ccce5f6#9207[email protected]Chores
f502c4f#9382 dev dependency updates (@owlstronaut)4259e57#9316 dev dependency updates (@owlstronaut)d68bd36#9317 add cli-triage team as codeowner (chore: add cli-triage team as codeowner #9317) (@owlstronaut)b9332e6#9270 dev dependency updates (@owlstronaut)cc468a8#9269 refactor tests (@wraithgar)2ca36c4#9261 fixed non-functional typos throughout the codebase (@opensourcezeal)8131de4#9239 add action permission for backport workflow (@owlstronaut)6df5f91#9232 backports can trigger CI (@owlstronaut)07552f5#9224 don't run npm update in CI (@owlstronaut)05dbba5#9195 enable prerelease mode (chore: enable prerelease mode #9195) (@wraithgar)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected][email protected]arborist: 10.0.0-pre.0.0
10.0.0-pre.0.0 (2026-05-20)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
e0f12f7#9348 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut)b8655c7#9282 arborist: add lockfileString() for in-memory lockfile generation (@ljharb)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Bug Fixes
822ce86#9343 arborist: skip lockfile entries for optional deps with incomplete manifests (fix(arborist): skip lockfile entries for optional deps with incomplete manifests #9343) (@ecanturk, @owlstronaut)2c9587e#9359 arborist: only forward Link overrides when a rule names a target dep (@manzoorwanijk)f550eb4#9348 refactor #failureNode, adjust tests and safety (@owlstronaut)1f17566#9348 allow-remote=none does not block registry tarballs (@owlstronaut)81793ae#9332 arborist: skip extraneous fsChildren in linked-strategy reify (@manzoorwanijk)4c7f6ba#9330 arborist: prune removed-workspace entries from package-lock.json (@manzoorwanijk)076551b#9309 arborist: clean up orphan top-level symlinks in linked strategy (fix(arborist): clean up orphan top-level symlinks in linked strategy #9309) (@manzoorwanijk)32940e2#9299 arborist: ignore hidden entries in global update (fix(arborist): ignore hidden entries in global update #9299) (@Grynn)0629fbf#9283 prefer existing tree nodes for peerOptional deps ([BUG] 11.12.1 peerOptional dependencies marked extraneous and removed #9249) (fix: prefer existing tree nodes for peerOptional deps (#9249) #9283) (@everett1992)bc32d94#9198 arborist: propagate overrides through Link nodes to targets (fix(arborist): propagate overrides through Link nodes to targets #9198) (@manzoorwanijk)1ab20c8#9235 arborist: fix infinite loop with bundledDependencies and overrides (fix(arborist): fix infinite loop with bundledDependencies and overrides #9235) (@everett1992)0dc5585#9167 arborist: handlenpm linkwith install-strategy=linked (@manzoorwanijk)1d058b0#9221 arborist: do not install inert optional extraneous shared dependencies (fix(arborist): do not install inert optional extraneous shared dependencies #9221) (@lovell)dcad8ec#9206 pass _isRoot context where missing (fix: pass _isRoot context where missing #9206) (@wraithgar)Chores
b61281d#9349 change test wording to not collide with tap (chore: change test wording to not collide with tap #9349) (@owlstronaut)config: 11.0.0-pre.0.0
11.0.0-pre.0.0 (2026-05-20)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
916cb4b#9287 add allow-directory, allow-file, and allow-remote (feat: add allow-directory, allow-file, and allow-remote #9287) (@wraithgar)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Bug Fixes
18ebb0f#9368 min-release-age=0 doesn't filter, honor cross-source precedence (@owlstronaut)ca585c8#9368 allow min-release-age in npmrc to coexist with --before (@raazkhnl)6628d05#9285 config: preserve min-release-age after flattening (@lawrence3699)libnpmdiff: 8.1.6-pre.0.0
Dependencies
@npmcli/[email protected]libnpmexec: 10.2.6-pre.0.0
10.2.6-pre.0.0 (2026-05-20)
Bug Fixes
e9b0157#9255 libnpmexec: skip redundant reify for cached directory specs (fix(libnpmexec): skip redundant reify for cached directory specs #9255) (@manzoorwanijk)Chores
2ca36c4#9261 fixed non-functional typos throughout the codebase (@opensourcezeal)Dependencies
@npmcli/[email protected]libnpmfund: 7.0.20-pre.0.0
Dependencies
@npmcli/[email protected]libnpmpack: 10.0.0-pre.0.0
10.0.0-pre.0.0 (2026-05-20)
Bug Fixes
b1965d6#9271 refuse to pack when overrides apply to bundled packages (@owlstronaut)Dependencies
@npmcli/[email protected]libnpmpublish: 11.2.0-pre.0.0
11.2.0-pre.0.0 (2026-05-20)
Features
254809e#9201 npm stage (feat: npm stage #9201) (@reggi, @Copilot)Chores
40fcab4#8991@npmcli/[email protected](@wraithgar)libnpmversion: 9.0.0-pre.0.0
9.0.0-pre.0.0 (2026-05-20)
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.Features
2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)Chores
40fcab4#8991@npmcli/[email protected](@wraithgar)This PR was generated with Release Please. See documentation.