Merge pull request #115 from npm/latest

Create a new pull request by comparing changes across two branches

.release-please-manifest.json

@@ -1,16 +1,16 @@
 {
-  ".": "10.8.0",
-  "workspaces/arborist": "7.5.2",
+  ".": "10.8.1",
+  "workspaces/arborist": "7.5.3",
   "workspaces/libnpmaccess": "8.0.6",
-  "workspaces/libnpmdiff": "6.1.2",
-  "workspaces/libnpmexec": "8.1.1",
-  "workspaces/libnpmfund": "5.0.10",
+  "workspaces/libnpmdiff": "6.1.3",
+  "workspaces/libnpmexec": "8.1.2",
+  "workspaces/libnpmfund": "5.0.11",
   "workspaces/libnpmhook": "10.0.5",
   "workspaces/libnpmorg": "6.0.6",
-  "workspaces/libnpmpack": "7.0.2",
-  "workspaces/libnpmpublish": "9.0.8",
-  "workspaces/libnpmsearch": "7.0.5",
+  "workspaces/libnpmpack": "7.0.3",
+  "workspaces/libnpmpublish": "9.0.9",
+  "workspaces/libnpmsearch": "7.0.6",
   "workspaces/libnpmteam": "6.0.5",
-  "workspaces/libnpmversion": "6.0.2",
-  "workspaces/config": "8.3.2"
+  "workspaces/libnpmversion": "6.0.3",
+  "workspaces/config": "8.3.3"
 }

AUTHORS

@@ -938,3 +938,6 @@ Mottle <sgt_ah@163.com>
 klm-turing <litaaba.a@turing.com>
 klm <litaaba.a@turing.com>
 Avinal Kumar <avinal@redhat.com>
+milaninfy <111582375+milaninfy@users.noreply.github.com>
+Reggi <reggi@github.com>
+Norman Perrin <hey@nperrin.io>

CHANGELOG.md

@@ -1,5 +1,80 @@
 # Changelog
 
+## [10.8.1](https://github.com/npm/cli/compare/v10.8.0...v10.8.1) (2024-05-29)
+
+### Bug Fixes
+
+* [`6b55646`](https://github.com/npm/cli/commit/6b556468f9d6ed62c681954bfe6ad012315e3b53) [#7569](https://github.com/npm/cli/pull/7569) exec: look in workspace and root for bin entries (#7569) (@wraithgar)
+* [`e4c7a41`](https://github.com/npm/cli/commit/e4c7a410f590e5c9c81f6410f600181a4deef005) [#7564](https://github.com/npm/cli/pull/7564) publish: skip workspace packages marked private on publish (#7564) (@milaninfy)
+* [`8f94ae8`](https://github.com/npm/cli/commit/8f94ae8c4d36cd397c53e8dc9f54d4332bf1b847) [#7556](https://github.com/npm/cli/pull/7556) utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)
+* [`2d1d8d0`](https://github.com/npm/cli/commit/2d1d8d0ef18a10ac7938380884745f1d3c3cb078) [#7559](https://github.com/npm/cli/pull/7559) adds `node:` specifier to all native node modules (#7559) (@reggi)
+* [`7d89b55`](https://github.com/npm/cli/commit/7d89b55341160459e0fcd3374c3720d758b16339) [#7490](https://github.com/npm/cli/pull/7490) ci: rm workspace node_modules (#7490) (@reggi)
+* [`9122fb6`](https://github.com/npm/cli/commit/9122fb65ac05d793a69f4fdcbd03b59595adf937) [#7516](https://github.com/npm/cli/pull/7516) cache: add both full and minified packument to cache (#7516) (@milaninfy)
+* [`9e6686b`](https://github.com/npm/cli/commit/9e6686bb965fa6843ea483cb802f14282eabf3e5) [#7545](https://github.com/npm/cli/pull/7545) send proper otp token on web auth (#7545) (@wraithgar)
+* [`b1db070`](https://github.com/npm/cli/commit/b1db070cb4a497fd91fd61cf197d28b5d47274bb) [#7534](https://github.com/npm/cli/pull/7534) refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)
+* [`53cda32`](https://github.com/npm/cli/commit/53cda32aa35f3a592fb0ddf37e43c028f93ef613) [#7542](https://github.com/npm/cli/pull/7542) refactor ls to use output.buffer for json (#7542) (@lukekarrys)
+* [`61d5771`](https://github.com/npm/cli/commit/61d57719e6443978c5e9a91ca7a63397be3065fa) [#7541](https://github.com/npm/cli/pull/7541) remove json.stringify from all commands (#7541) (@lukekarrys)
+* [`4dfc7d2`](https://github.com/npm/cli/commit/4dfc7d20b58eaa3d231ef5dc86b9802e1c0d0e68) [#7540](https://github.com/npm/cli/pull/7540) pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)
+* [`3cefdf6`](https://github.com/npm/cli/commit/3cefdf6eaab5bfb4371149f674dc95e9b9c54853) [#7538](https://github.com/npm/cli/pull/7538) outdated: return array for outdated deps from multiple workspaces (@lukekarrys)
+* [`ef4c975`](https://github.com/npm/cli/commit/ef4c975f2784f70ab86a3e7e6e40c99279e5a3e3) [#7508](https://github.com/npm/cli/pull/7508) view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)
+
+### Documentation
+
+* [`fd6479f`](https://github.com/npm/cli/commit/fd6479f85b9cf14a23cb4f9a049e0ea68632d8e9) [#7560](https://github.com/npm/cli/pull/7560) update publish docs: dist-tag + publish case (#7560) (@davidlj95)
+
+### Dependencies
+
+* [`e3f0fd4`](https://github.com/npm/cli/commit/e3f0fd45d97569a0d6c2a67e179e4a5f13eb9442) [#7568](https://github.com/npm/cli/pull/7568) `@npmcli/package-json@5.1.1`
+* [`447a8d7`](https://github.com/npm/cli/commit/447a8d7f3124bf9f69453098ce31b56bad20efd7) [#7566](https://github.com/npm/cli/pull/7566) `spdx-license-ids@3.0.18`
+* [`83fed2e`](https://github.com/npm/cli/commit/83fed2e8ec253051d60babdf2b10e2f2c64df318) [#7566](https://github.com/npm/cli/pull/7566) `sigstore@2.3.1`
+* [`41291ba`](https://github.com/npm/cli/commit/41291bab34d3f7351c94e97e89ac1f85b0950188) [#7566](https://github.com/npm/cli/pull/7566) `@sigstore/tuf@2.3.4`
+* [`18b42a4`](https://github.com/npm/cli/commit/18b42a46abdbc26a28f2e16ea74a1812d8de4c4d) [#7566](https://github.com/npm/cli/pull/7566) `glob@10.4.1`
+* [`5c6759d`](https://github.com/npm/cli/commit/5c6759decb00dfbe377c0ad41f85a3222f79a36a) [#7566](https://github.com/npm/cli/pull/7566) `postcss-selector-parser@6.1.0`
+* [`2508a83`](https://github.com/npm/cli/commit/2508a83e6d2936d15c210b9dee41098131ed6aff) [#7566](https://github.com/npm/cli/pull/7566) `is-cidr@5.1.0`
+* [`6278fe4`](https://github.com/npm/cli/commit/6278fe430bb7c3ecfae730f9ea084501e57c0e2c) [#7566](https://github.com/npm/cli/pull/7566) `ini@4.1.3`
+## [10.8.1](https://github.com/npm/cli/compare/v10.8.0...v10.8.1) (2024-05-29)
+
+### Bug Fixes
+
+* [`6b55646`](https://github.com/npm/cli/commit/6b556468f9d6ed62c681954bfe6ad012315e3b53) [#7569](https://github.com/npm/cli/pull/7569) exec: look in workspace and root for bin entries (#7569) (@wraithgar)
+* [`e4c7a41`](https://github.com/npm/cli/commit/e4c7a410f590e5c9c81f6410f600181a4deef005) [#7564](https://github.com/npm/cli/pull/7564) publish: skip workspace packages marked private on publish (#7564) (@milaninfy)
+* [`8f94ae8`](https://github.com/npm/cli/commit/8f94ae8c4d36cd397c53e8dc9f54d4332bf1b847) [#7556](https://github.com/npm/cli/pull/7556) utils/tar: index access while match is null (#7555) (#7556) (@NormanPerrin)
+* [`2d1d8d0`](https://github.com/npm/cli/commit/2d1d8d0ef18a10ac7938380884745f1d3c3cb078) [#7559](https://github.com/npm/cli/pull/7559) adds `node:` specifier to all native node modules (#7559) (@reggi)
+* [`7d89b55`](https://github.com/npm/cli/commit/7d89b55341160459e0fcd3374c3720d758b16339) [#7490](https://github.com/npm/cli/pull/7490) ci: rm workspace node_modules (#7490) (@reggi)
+* [`9122fb6`](https://github.com/npm/cli/commit/9122fb65ac05d793a69f4fdcbd03b59595adf937) [#7516](https://github.com/npm/cli/pull/7516) cache: add both full and minified packument to cache (#7516) (@milaninfy)
+* [`9e6686b`](https://github.com/npm/cli/commit/9e6686bb965fa6843ea483cb802f14282eabf3e5) [#7545](https://github.com/npm/cli/pull/7545) send proper otp token on web auth (#7545) (@wraithgar)
+* [`b1db070`](https://github.com/npm/cli/commit/b1db070cb4a497fd91fd61cf197d28b5d47274bb) [#7534](https://github.com/npm/cli/pull/7534) refactor: use output.buffer and set explicit json mode in query (#7534) (@lukekarrys)
+* [`53cda32`](https://github.com/npm/cli/commit/53cda32aa35f3a592fb0ddf37e43c028f93ef613) [#7542](https://github.com/npm/cli/pull/7542) refactor ls to use output.buffer for json (#7542) (@lukekarrys)
+* [`61d5771`](https://github.com/npm/cli/commit/61d57719e6443978c5e9a91ca7a63397be3065fa) [#7541](https://github.com/npm/cli/pull/7541) remove json.stringify from all commands (#7541) (@lukekarrys)
+* [`4dfc7d2`](https://github.com/npm/cli/commit/4dfc7d20b58eaa3d231ef5dc86b9802e1c0d0e68) [#7540](https://github.com/npm/cli/pull/7540) pass strings to JSON.stringify in --json mode (#7540) (@lukekarrys)
+* [`3cefdf6`](https://github.com/npm/cli/commit/3cefdf6eaab5bfb4371149f674dc95e9b9c54853) [#7538](https://github.com/npm/cli/pull/7538) outdated: return array for outdated deps from multiple workspaces (@lukekarrys)
+* [`ef4c975`](https://github.com/npm/cli/commit/ef4c975f2784f70ab86a3e7e6e40c99279e5a3e3) [#7508](https://github.com/npm/cli/pull/7508) view: dont immediately exit on first workspace 404 (#7508) (@lukekarrys)
+
+### Documentation
+
+* [`fd6479f`](https://github.com/npm/cli/commit/fd6479f85b9cf14a23cb4f9a049e0ea68632d8e9) [#7560](https://github.com/npm/cli/pull/7560) update publish docs: dist-tag + publish case (#7560) (@davidlj95)
+
+### Dependencies
+
+* [`e3f0fd4`](https://github.com/npm/cli/commit/e3f0fd45d97569a0d6c2a67e179e4a5f13eb9442) [#7568](https://github.com/npm/cli/pull/7568) `@npmcli/package-json@5.1.1`
+* [`447a8d7`](https://github.com/npm/cli/commit/447a8d7f3124bf9f69453098ce31b56bad20efd7) [#7566](https://github.com/npm/cli/pull/7566) `spdx-license-ids@3.0.18`
+* [`83fed2e`](https://github.com/npm/cli/commit/83fed2e8ec253051d60babdf2b10e2f2c64df318) [#7566](https://github.com/npm/cli/pull/7566) `sigstore@2.3.1`
+* [`41291ba`](https://github.com/npm/cli/commit/41291bab34d3f7351c94e97e89ac1f85b0950188) [#7566](https://github.com/npm/cli/pull/7566) `@sigstore/tuf@2.3.4`
+* [`18b42a4`](https://github.com/npm/cli/commit/18b42a46abdbc26a28f2e16ea74a1812d8de4c4d) [#7566](https://github.com/npm/cli/pull/7566) `glob@10.4.1`
+* [`5c6759d`](https://github.com/npm/cli/commit/5c6759decb00dfbe377c0ad41f85a3222f79a36a) [#7566](https://github.com/npm/cli/pull/7566) `postcss-selector-parser@6.1.0`
+* [`2508a83`](https://github.com/npm/cli/commit/2508a83e6d2936d15c210b9dee41098131ed6aff) [#7566](https://github.com/npm/cli/pull/7566) `is-cidr@5.1.0`
+* [`6278fe4`](https://github.com/npm/cli/commit/6278fe430bb7c3ecfae730f9ea084501e57c0e2c) [#7566](https://github.com/npm/cli/pull/7566) `ini@4.1.3`
+
+### Chores
+
+* [`2d84091`](https://github.com/npm/cli/commit/2d840917bbeff6a1eb5accc10a5ec1c2280b9470) [#7568](https://github.com/npm/cli/pull/7568) fix snapshots for updated @npmcli/package-json (@wraithgar)
+* [`6574dc9`](https://github.com/npm/cli/commit/6574dc98705cf0a88ea6fe41a57d0d0adfcea439) [#7566](https://github.com/npm/cli/pull/7566) dev dependency updates (@wraithgar)
+
+### Chores
+
+* [`2d84091`](https://github.com/npm/cli/commit/2d840917bbeff6a1eb5accc10a5ec1c2280b9470) [#7568](https://github.com/npm/cli/pull/7568) fix snapshots for updated @npmcli/package-json (@wraithgar)
+* [`6574dc9`](https://github.com/npm/cli/commit/6574dc98705cf0a88ea6fe41a57d0d0adfcea439) [#7566](https://github.com/npm/cli/pull/7566) dev dependency updates (@wraithgar)
+
 ## [10.8.0](https://github.com/npm/cli/compare/v10.7.0...v10.8.0) (2024-05-15)
 
 ### Features

bin/npm-prefix.js

@@ -3,7 +3,7 @@
 // without having to load all of npm first
 // It does not accept argv params
 
-const path = require('path')
+const path = require('node:path')
 const Config = require('@npmcli/config')
 const { definitions, flatten, shorthands } = require('@npmcli/config/lib/definitions')
 const config = new Config({

lib/cli/entry.js

@@ -12,7 +12,7 @@ module.exports = async (process, validateEngines) => {
   }
 
   // Patch the global fs module here at the app level
-  require('graceful-fs').gracefulify(require('fs'))
+  require('graceful-fs').gracefulify(require('node:fs'))
 
   const satisfies = require('semver/functions/satisfies')
   const ExitHandler = require('./exit-handler.js')

lib/cli/update-notifier.js

@@ -6,8 +6,8 @@ const ciInfo = require('ci-info')
 const gt = require('semver/functions/gt')
 const gte = require('semver/functions/gte')
 const parse = require('semver/functions/parse')
-const { stat, writeFile } = require('fs/promises')
-const { resolve } = require('path')
+const { stat, writeFile } = require('node:fs/promises')
+const { resolve } = require('node:path')
 
 // update check frequency
 const DAILY = 1000 * 60 * 60 * 24

lib/commands/cache.js

@@ -1,7 +1,7 @@
 const cacache = require('cacache')
 const pacote = require('pacote')
-const fs = require('fs/promises')
-const { join } = require('path')
+const fs = require('node:fs/promises')
+const { join } = require('node:path')
 const semver = require('semver')
 const BaseCommand = require('../base-cmd.js')
 const npa = require('npm-package-arg')

lib/commands/ci.js

@@ -1,7 +1,7 @@
 const reifyFinish = require('../utils/reify-finish.js')
 const runScript = require('@npmcli/run-script')
-const fs = require('fs/promises')
-const path = require('path')
+const fs = require('node:fs/promises')
+const path = require('node:path')
 const { log, time } = require('proc-log')
 const validateLockfile = require('../utils/validate-lockfile.js')
 const ArboristWorkspaceCmd = require('../arborist-cmd.js')

lib/commands/completion.js

@@ -28,9 +28,9 @@
 // one per line for the shell completion method to consume in IFS=$'\n' mode
 // as an array.
 
-const fs = require('fs/promises')
+const fs = require('node:fs/promises')
 const nopt = require('nopt')
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const { output } = require('proc-log')
 const Npm = require('../npm.js')
 const { definitions, shorthands } = require('@npmcli/config/lib/definitions')

lib/commands/diff.js

@@ -1,4 +1,4 @@
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const semver = require('semver')
 const libnpmdiff = require('libnpmdiff')
 const npa = require('npm-package-arg')

lib/commands/doctor.js

@@ -1,9 +1,9 @@
 const cacache = require('cacache')
-const { access, lstat, readdir, constants: { R_OK, W_OK, X_OK } } = require('fs/promises')
+const { access, lstat, readdir, constants: { R_OK, W_OK, X_OK } } = require('node:fs/promises')
 const fetch = require('make-fetch-happen')
 const which = require('which')
 const pacote = require('pacote')
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const semver = require('semver')
 const { log, output } = require('proc-log')
 const ping = require('../utils/ping.js')

lib/commands/edit.js

@@ -1,6 +1,6 @@
-const { resolve } = require('path')
-const { lstat } = require('fs/promises')
-const cp = require('child_process')
+const { resolve } = require('node:path')
+const { lstat } = require('node:fs/promises')
+const cp = require('node:child_process')
 const completion = require('../utils/installed-shallow.js')
 const BaseCommand = require('../base-cmd.js')
 

lib/commands/exec.js

@@ -1,4 +1,4 @@
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const libexec = require('libnpmexec')
 const BaseCommand = require('../base-cmd.js')
 
@@ -39,11 +39,8 @@ class Exec extends BaseCommand {
   }
 
   async callExec (args, { name, locationMsg, runPath } = {}) {
-    // This is where libnpmexec will look for locally installed packages at the project level
-    const localPrefix = this.npm.localPrefix
-    // This is where libnpmexec will look for locally installed packages at the workspace level
     let localBin = this.npm.localBin
-    let path = localPrefix
+    let pkgPath = this.npm.localPrefix
 
     // This is where libnpmexec will actually run the scripts from
     if (!runPath) {
@@ -54,7 +51,7 @@ class Exec extends BaseCommand {
       localBin = resolve(this.npm.localDir, name, 'node_modules', '.bin')
       // We also need to look for `bin` entries in the workspace package.json
       // libnpmexec will NOT look in the project root for the bin entry
-      path = runPath
+      pkgPath = runPath
     }
 
     const call = this.npm.config.get('call')
@@ -84,16 +81,25 @@ class Exec extends BaseCommand {
       // we explicitly set packageLockOnly to false because if it's true
       // when we try to install a missing package, we won't actually install it
       packageLockOnly: false,
-      // copy args so they dont get mutated
-      args: [...args],
+      // what the user asked to run args[0] is run by default
+      args: [...args], // copy args so they dont get mutated
+      // specify a custom command to be run instead of args[0]
       call,
       chalk,
+      // where to look for bins globally, if a file matches call or args[0] it is called
       globalBin,
+      // where to look for packages globally, if a package matches call or args[0] it is called
       globalPath,
+      // where to look for bins locally, if a file matches call or args[0] it is called
       localBin,
       locationMsg,
+      // packages that need to be installed
       packages,
-      path,
+      // path where node_modules is
+      path: this.npm.localPrefix,
+      // where to look for package.json#bin entries first
+      pkgPath,
+      // cwd to run from
       runPath,
       scriptShell,
       yes,

lib/commands/explain.js

@@ -1,7 +1,7 @@
 const { explainNode } = require('../utils/explain-dep.js')
 const npa = require('npm-package-arg')
 const semver = require('semver')
-const { relative, resolve } = require('path')
+const { relative, resolve } = require('node:path')
 const validName = require('validate-npm-package-name')
 const { output } = require('proc-log')
 const ArboristWorkspaceCmd = require('../arborist-cmd.js')

lib/commands/explore.js

@@ -1,6 +1,6 @@
 const pkgJson = require('@npmcli/package-json')
 const runScript = require('@npmcli/run-script')
-const { join, relative } = require('path')
+const { join, relative } = require('node:path')
 const { log, output } = require('proc-log')
 const completion = require('../utils/installed-shallow.js')
 const BaseCommand = require('../base-cmd.js')

lib/commands/help.js

@@ -1,5 +1,5 @@
 const spawn = require('@npmcli/promise-spawn')
-const path = require('path')
+const path = require('node:path')
 const { openUrl } = require('../utils/open-url.js')
 const { glob } = require('glob')
 const { output, input } = require('proc-log')

lib/commands/init.js

@@ -1,6 +1,6 @@
-const { statSync } = require('fs')
-const { relative, resolve } = require('path')
-const { mkdir } = require('fs/promises')
+const { statSync } = require('node:fs')
+const { relative, resolve } = require('node:path')
+const { mkdir } = require('node:fs/promises')
 const initJson = require('init-package-json')
 const npa = require('npm-package-arg')
 const libexec = require('libnpmexec')

lib/commands/link.js

@@ -1,5 +1,5 @@
-const { readdir } = require('fs/promises')
-const { resolve } = require('path')
+const { readdir } = require('node:fs/promises')
+const { resolve } = require('node:path')
 const npa = require('npm-package-arg')
 const pkgJson = require('@npmcli/package-json')
 const semver = require('semver')

lib/commands/ls.js

@@ -1,4 +1,4 @@
-const { resolve, relative, sep } = require('path')
+const { resolve, relative, sep } = require('node:path')
 const archy = require('archy')
 const { breadth } = require('treeverse')
 const npa = require('npm-package-arg')

lib/commands/profile.js

@@ -1,5 +1,5 @@
-const { inspect } = require('util')
-const { URL } = require('url')
+const { inspect } = require('node:util')
+const { URL } = require('node:url')
 const { log, output } = require('proc-log')
 const { get, set, createToken } = require('npm-profile')
 const qrcodeTerminal = require('qrcode-terminal')

lib/commands/publish.js

@@ -127,6 +127,15 @@ class Publish extends BaseCommand {
     const noCreds = !(creds.token || creds.username || creds.certfile && creds.keyfile)
     const outputRegistry = replaceInfo(registry)
 
+    // if a workspace package is marked private then we skip it
+    if (workspace && manifest.private) {
+      throw Object.assign(
+        new Error(`This package has been marked as private
+  Remove the 'private' field from the package.json to publish it.`),
+        { code: 'EPRIVATE' }
+      )
+    }
+
     if (noCreds) {
       const msg = `This command requires you to be logged in to ${outputRegistry}`
       if (dryRun) {

lib/commands/rebuild.js

@@ -1,4 +1,4 @@
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const { output } = require('proc-log')
 const npa = require('npm-package-arg')
 const semver = require('semver')

lib/commands/repo.js

@@ -1,4 +1,4 @@
-const { URL } = require('url')
+const { URL } = require('node:url')
 const PackageUrlCmd = require('../package-url-cmd.js')
 
 class Repo extends PackageUrlCmd {

lib/commands/shrinkwrap.js

@@ -1,5 +1,5 @@
-const { resolve, basename } = require('path')
-const { unlink } = require('fs/promises')
+const { resolve, basename } = require('node:path')
+const { unlink } = require('node:fs/promises')
 const { log } = require('proc-log')
 const BaseCommand = require('../base-cmd.js')
 

lib/commands/uninstall.js

@@ -1,4 +1,4 @@
-const { resolve } = require('path')
+const { resolve } = require('node:path')
 const pkgJson = require('@npmcli/package-json')
 const reifyFinish = require('../utils/reify-finish.js')
 const completion = require('../utils/installed-shallow.js')