deps: upgrade npm to 4.0.5 #10330

zkat · 2016-12-19T05:10:57Z

Checklist

make -j8 test (UNIX), or vcbuild test nosign (Windows) passes
tests and/or benchmarks are included
documentation is changed or added
commit message follows commit guidelines

Affected core subsystem(s)

deps

Description of change

Breaking Changes

npm search rewritten to stream results, and no longer supports sorting.
npm scripts no longer prepend the path of the node executable used to run npm before running scripts. A --scripts-prepend-node-path option has been added to configure this behavior. (/cc @addaleax)
prepublish has been deprecated, replaced by prepare. A prepublishOnly script has been temporarily added, which will only run on npm publish. NOTE: This change only affects users publishing new versions of their packages and developers installing through git and local deps. Registry installs should be (mostly) unaffected by this change.
npm outdated exits with exit code 1 if it finds any outdated packages. (/cc @watilde)
npm tag has been removed after a deprecation cycle. Use npm dist-tag.
Partial shrinkwraps are no longer supported. npm-shrinkwrap.json is considered a complete installation manifest except for devDependencies. This will affect certain projects that relied heavily on this feature, most notably hapi.
devDependencies are now included in npm-shrinkwrap.json by default. This should make the transition to npm@5 easier.

Other Notable Changes

npm will now send Npm-In-CI and Npm-Scope headers to registries when fetching modules. The former will allow registries to more accurately distinguish between CI and user traffic. The latter will allow registries to implement features on the basis of the scope of the project (rather than the module actually being installed).
d8471a2 npm/npm#12811 Fixes issue where npm install needed to be run twice when devDependencies had conflicting subdeps with dependencies. (@schmod)

Changelogs

r: @Fishrock123
r: @addaleax
r: @jasnell

addaleax · 2016-12-19T06:20:14Z

CI: https://ci.nodejs.org/job/node-test-commit/6719/

I’m +1 on pulling this into Node 7.

Fishrock123 · 2016-12-19T15:26:07Z

@addaleax Remember, the regular CI does not significantly test npm. make test-npm passes for me, it is only a matter of deciding when to land into v7.

Fishrock123 · 2016-12-20T16:37:22Z

I'll merge this to master after we discuss it on the CTC agenda tomorrow.

jasnell · 2016-12-21T16:30:28Z

Discussed briefly on the CTC call today but we did not have quorum to make any actual decisions. There were no objections to getting this landed in master or v7. @nodejs/ctc ... if anyone has objections please raise them here as soon as possible!

MylesBorins

tests pass locally LGTM

MylesBorins · 2016-12-28T20:31:09Z

landed in 9946519

PR-URL: #10330 Reviewed-By: Myles Borins <myles.borins@gmail.com>

evanlucas · 2017-01-04T16:46:01Z

Should this be marked semver-minor?

addaleax · 2017-01-04T16:48:39Z

@evanlucas Yea, I think that makes sense here

PR-URL: #10330 Reviewed-By: Myles Borins <myles.borins@gmail.com>

Notable changes: * buffer: - Improve performance of Buffer allocation by ~11% (Brian White) #10443 - Improve performance of Buffer.from() by ~50% (Brian White) #10443 * events: Improve performance of EventEmitter.once() by ~27% (Brian White) #10445 * fs: Allow passing Uint8Array to fs methods where Buffers are supported. (Anna Henningsen) #10382 * http: Improve performance of http server by ~7% (Brian White) #6533 * npm: Upgrade to v4.0.5 (Kat Marchán) #10330 PR-URL: #10589

jdalton · 2017-01-05T16:07:46Z

@zkat

Can you cover the shrinkwrap change a bit more? The two notes state:

Partial shrinkwraps are no longer supported. npm-shrinkwrap.json is considered a complete installation manifest except for devDependencies. This will affect certain projects that relied heavily on this feature, most notably hapi.

devDependencies are now included in npm-shrinkwrap.json by default. This should make the transition to npm@5 easier.

The lines that are throwing me are:

npm-shrinkwrap.json is considered a complete installation manifest except for devDependencies.

Followed by:

devDependencies are now included in npm-shrinkwrap.json by default.

Are devDepenencies included but somehow treated less complete than direct dependencies?

zkat · 2017-01-06T09:05:35Z

@jdalton I'm gonna ping @iarna on this to check this cause I may be confused (and this stuff is changing again soon), but lmk if this helps clarify things:

Command	State	Result
`npm shrinkwrap`	No shrinkwrap	all dependencies, including `devDependencies`, end up in `npm-shrinkwrap.json`
`npm shrinkwrap`	Existing shrinkwrap, `devDeps` not present	`devDependencies` added to `npm-shrinkwrap.json`
`npm i`	existing `npm-shrinkwrap.json` from above, with devDeps in it	installation is done entirely from shrinkwrap
`npm i`	`npm-shrinkwrap.json` was created without `devDeps` (or there's missing `devDeps`)	`dependencies` installed from shrinkwrap, `devDependencies` picked up from `package.json` and added.

jdalton · 2017-01-06T15:59:13Z

@zkat

but lmk if this helps clarify things

It does. Thank you!

Notable changes: * buffer: - Improve performance of Buffer allocation by ~11% (Brian White) nodejs/node#10443 - Improve performance of Buffer.from() by ~50% (Brian White) nodejs/node#10443 * events: Improve performance of EventEmitter.once() by ~27% (Brian White) nodejs/node#10445 * fs: Allow passing Uint8Array to fs methods where Buffers are supported. (Anna Henningsen) nodejs/node#10382 * http: Improve performance of http server by ~7% (Brian White) nodejs/node#6533 * npm: Upgrade to v4.0.5 (Kat Marchán) nodejs/node#10330 PR-URL: nodejs/node#10589 Signed-off-by: Ilkka Myller <ilkka.myller@nodefield.com>

deps: upgrade npm to 4.0.5

9c0ae69

nodejs-github-bot added npm Issues and PRs related to the npm client dependency or the npm registry. lts-watch-v6.x labels Dec 19, 2016

addaleax added ctc-agenda and removed lts-watch-v6.x labels Dec 19, 2016

addaleax mentioned this pull request Dec 19, 2016

deps: upgrade npm to 4.0.2 #9848

Closed

4 tasks

Trott mentioned this pull request Dec 19, 2016

Node.js Foundation Core Technical Committee (CTC) Meeting 2016-12-21 nodejs/CTC#50

Closed

phillipj mentioned this pull request Dec 19, 2016

Wrong inline ARM Jenkins status on node PRs nodejs/github-bot#108

Closed

Trott mentioned this pull request Dec 26, 2016

Node.js Foundation Core Technical Committee (CTC) Meeting 2016-12-28 nodejs/CTC#51

Closed

MylesBorins approved these changes Dec 28, 2016

View reviewed changes

MylesBorins closed this Dec 28, 2016

MylesBorins pushed a commit that referenced this pull request Dec 28, 2016

deps: upgrade npm to 4.0.5

9946519

PR-URL: #10330 Reviewed-By: Myles Borins <myles.borins@gmail.com>

addaleax added the semver-minor PRs that contain new features and should be released in the next minor version. label Jan 4, 2017

evanlucas pushed a commit that referenced this pull request Jan 4, 2017

deps: upgrade npm to 4.0.5

92eacdb

PR-URL: #10330 Reviewed-By: Myles Borins <myles.borins@gmail.com>

evanlucas mentioned this pull request Jan 4, 2017

v7.4.0 release proposal #10589

Merged

This comment was marked as abuse.

Sign in to view

azu mentioned this pull request Jan 6, 2017

Package manager jser/report#2

Open

Trott removed the ctc-agenda label Feb 9, 2017

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: upgrade npm to 4.0.5 #10330

deps: upgrade npm to 4.0.5 #10330

zkat commented Dec 19, 2016

addaleax commented Dec 19, 2016

Fishrock123 commented Dec 19, 2016 •

edited

Loading

Fishrock123 commented Dec 20, 2016

jasnell commented Dec 21, 2016

MylesBorins left a comment

MylesBorins commented Dec 28, 2016

evanlucas commented Jan 4, 2017

addaleax commented Jan 4, 2017

This comment was marked as abuse.

jdalton commented Jan 5, 2017 •

edited

Loading

zkat commented Jan 6, 2017

jdalton commented Jan 6, 2017 •

edited

Loading

deps: upgrade npm to 4.0.5 #10330

deps: upgrade npm to 4.0.5 #10330

Conversation

zkat commented Dec 19, 2016

Checklist

Affected core subsystem(s)

Description of change

Breaking Changes

Other Notable Changes

Changelogs

addaleax commented Dec 19, 2016

Fishrock123 commented Dec 19, 2016 • edited Loading

Fishrock123 commented Dec 20, 2016

jasnell commented Dec 21, 2016

MylesBorins left a comment

Choose a reason for hiding this comment

MylesBorins commented Dec 28, 2016

evanlucas commented Jan 4, 2017

addaleax commented Jan 4, 2017

This comment was marked as abuse.

jdalton commented Jan 5, 2017 • edited Loading

zkat commented Jan 6, 2017

jdalton commented Jan 6, 2017 • edited Loading

Fishrock123 commented Dec 19, 2016 •

edited

Loading

jdalton commented Jan 5, 2017 •

edited

Loading

jdalton commented Jan 6, 2017 •

edited

Loading