chore(deps): update npm to v9.9.2 (main) - autoclosed

This MR contains the following updates:

Package	Type	Update	Change
npm (source)	packageManager	minor	9.6.3 -> 9.9.2

---

Release Notes

npm/cli (npm)

v9.9.2

Compare Source

Bug Fixes

• 4c9a5e1 #​6993 look in workspace for exec commands (#​6993) (@​wraithgar)
• bb6f496 #​6992 correctly handle object licenses in SBOM generation (#​6992) (@​bdehamer, @​jamietanna)
• 10db3ca #​6990 pkg: properly output in workspace mode (#​6990) (@​wraithgar)

Documentation

• 6ab06d7 #​6985 update npm-prune description (#​6985) (@​Eomm)

Dependencies

• Workspace: libnpmpublish@7.5.1

v9.9.1

Compare Source

Bug Fixes

• 0dba79a #​6942 add back bin/node-gyp-bin/node-gyp files (@​lukekarrys)
• c93edb5 #​6932 add back bin/node-gyp-bin/node-gyp files (@​lukekarrys)

Documentation

• e6cce28 #​6925 use markdown links instead of html (@​lukekarrys)

v9.9.0

Compare Source

Features

• ecda95a #​6841 add npm sbom command (#​6841) (@​bdehamer)
• fdb8a86 #​6794 add package-lock-only mode to npm query (@​wraithgar)
• 16c04b1 #​6877 add no-package-lock mode to npm audit (@​wraithgar)
• 66ef765 #​6776 Add --cpu and --os option to override platform specific install (#​6776) (@​yukukotani)

Bug Fixes

• c9406f7 #​6791 deprecate: ignore implicit workspace mode (#​6758) (#​6791) (@​wraithgar)
• 0b1d7c3 #​6779 allow searching packages with no description (#​6779) (@​wraithgar, @​lukekarrys)

Documentation

• 9750720 #​6694 fix example path (#​6694) (@​fvilers)

Dependencies

• 588a245 #​6756 npm-pick-manifest@8.0.2
• a76b1df #​6877 sigstore@1.9.0
• 95b5ab0 #​6877 npm-install-checks@6.2.0
• Workspace: @npmcli/arborist@6.5.0
• Workspace: @npmcli/config@6.4.0
• Workspace: libnpmdiff@5.0.20
• Workspace: libnpmexec@6.0.4
• Workspace: libnpmfund@4.2.1
• Workspace: libnpmpack@5.0.20

v9.8.1

Compare Source

Bug Fixes

• 38351c9 #​6651 warn on autocorrected package.json entries during publish (@​wraithgar)
• 02c7ddb #​6642 much clearer npx 'canceled' error (#​6642) (@​rahulio96, @​AaronHamilton965)

Documentation

• 36bf5fe #​6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#​6643) (@​AaronHamilton965, @​rahulio96)

Dependencies

• a0763d3 #​6651 @npmcli/package-json@4.0.1
• 24f5a8b #​6653 supports-color@9.4.0
• f45498b #​6653 chalk@5.3.0
• 44d60eb #​6653 minimatch@9.0.3
• fc9a843 #​6653 bin-links@3.0.2
• daad9ad #​6653 semver@7.5.4
• c1ffd6a #​6653 move @​npmcli/fs, @​npmcli/promise-spawn into dependencies
• Workspace: libnpmexec@6.0.3

v9.8.0

Compare Source

Features

• 67459e7 #​6626 add pkg fix subcommand (@​wraithgar)
• 89b2741 #​6548 add ps1 scripts (#​6548) (@​mribbons, @​lukekarrys)

Dependencies

• b252164 #​6626 @npmcli/package-json@4.0.0
• 9238682 #​6623 sigstore@1.7.0 (#​6623)
• Workspace: @npmcli/arborist@6.3.0
• Workspace: libnpmdiff@5.0.19
• Workspace: libnpmexec@6.0.2
• Workspace: libnpmfund@4.0.19
• Workspace: libnpmpack@5.0.19
• Workspace: libnpmpublish@7.5.0

v9.7.2

Compare Source

Bug Fixes

• 939a188 #​6574 ignore node prereleases in npm engines check (#​6574) (@​wraithgar)
• d980405 #​6556 better color support detection (#​6556) (@​lukekarrys)
• 40d7e09 #​6555 remove unnecessary package.json values (#​6555) (@​lukekarrys)
• 3a7378d #​6554 cleanup bin contents (@​lukekarrys)
• e722439 #​6497 move all definitions to @​npmcli/config package (@​lukekarrys)

Documentation

• 405ffbf #​6557 remove redundant statement about files attribute (#​6557) (@​DaviDevMod)
• cd1e6aa #​6551 add flag package-lock-only for npm install (#​6551) (@​m4rch3n1ng)

Dependencies

• aebc523 #​6585 safe-buffer@5.2.1 string_decoder@1.3.0 (#​6585)
• bb6054b #​6573 tuf-js@1.1.7
• aee4a30 #​6573 strip-ansi@7.1.0
• 6105dbc #​6573 path-scurry@1.9.2
• 22d44e8 #​6573 read-package-json@6.0.4
• fdd02fd #​6573 jackspeak@2.2.1
• 7797075 #​6573 is-core-module@2.12.1
• f9780cc #​6573 sigstore@1.6.0
• 72d6a79 #​6573 semver@7.5.2
• 98f1f5f #​6573 nopt@7.2.0
• 8710ff8 #​6573 pacote@15.2.0
• 0cb539d #​6573 node-gyp@9.4.0
• 39ad586 #​6573 ini@4.1.1
• 5e0070c #​6573 glob@10.2.7 minimatch@9.0.1
• 26cf235 #​6573 cacache@17.1.3
• Workspace: @npmcli/arborist@6.2.10
• Workspace: @npmcli/config@6.2.1
• Workspace: libnpmdiff@5.0.18
• Workspace: libnpmexec@6.0.1
• Workspace: libnpmfund@4.0.18
• Workspace: libnpmpack@5.0.18
• Workspace: libnpmpublish@7.4.0

v9.7.1

Compare Source

Dependencies

• 7467ff6 #​6518 @npmcli/package-json@3.1.1, @npmcli/git@4.1.0

v9.7.0

Compare Source

⚠️ DEPRECATED ⚠️

Features

• a63a6d8 #​6490 add provenanceFile option for libnpmpublish (@​bdehamer)
• 2a8f4f2 #​6490 add new exclusive config item publish-file (@​wraithgar)
• 361e194 #​6483 implement flag --prefer-dedupe for npm install (#​6483) (@​m4rch3n1ng)

Bug Fixes

• 38eb39b #​6514 strip ansi characters from search results (#​6514) (@​wraithgar)
• 4b5ccfc #​6477 make usage and completion static functions (#​6477) (@​lukekarrys)
• 4f39e8c #​6479 refactor engines validation to lint syntax (#​6479) (@​lukekarrys)
• f3cfe12 #​6482 remove unused lib/npm relics (#​6482) (@​lukekarrys)
• 87de0c7 #​6472 move explore command to @​npmcli/package-json (@​wraithgar)
• 636e29e #​6472 move to @​npmcli/package-json where possible (@​wraithgar)
• 37cc797 #​6418 retrieve registry keys via TUF (#​6418) (@​bdehamer)

Documentation

• 83cd5bd #​6480 add global option for uninstall (#​6480) (@​m4rch3n1ng)
• 0400ce3 #​6481 add cli params to npm set, npm get (#​6481) (@​m4rch3n1ng)
• c3638ce #​6468 remove package-lock option for npm ci (#​6468) (@​m4rch3n1ng)

Dependencies

• 060d587 chalk@5.2.0, npm-audit-report@5.0.0
• fc52ca8 #​6472 remove read-package-json-fast
• 3238aa7 #​6472 remove read-package-json
• Workspace: @npmcli/config@6.2.0
• Workspace: libnpmexec@6.0.0
• Workspace: libnpmpublish@7.3.0

v9.6.7

Compare Source

Bug Fixes

• 9202c7d #​6464 npm cache completion (#​6464) (@​m4rch3n1ng)
• 6ce99a8 #​6461 exit codes in node v20 (#​6461) (@​MichaelBitard)
• 23c865f #​6434 deprecate ci-name config (#​6434) (@​wraithgar)

Documentation

• 7751dd4 #​6413 add a comma (#​6413) (@​darryltec)

Dependencies

• afc38a5 #​6458 cacache@17.1.2
• afb936c #​6458 tuf-js@1.1.6
• f6a0884 #​6458 readable-stream@4.4.0
• 858f0ca #​6458 postcss-selector-parser@6.0.13
• 53ecb84 #​6458 path-scurry@1.9.1
• d93f70c #​6458 signal-exit@4.0.2
• 19214b5 #​6458 @npmcli/package-json@3.1.0
• f53e6ff #​6458 sigstore@1.5.2
• 94d6ee7 #​6458 glob@10.2.4
• 902cb80 #​6458 semver@7.5.1
• 35e2e9a #​6458 @npmcli/run-script@6.0.2
• Workspace: @npmcli/config@6.1.7
• Workspace: libnpmpublish@7.2.0

v9.6.6

Compare Source

Dependencies

• 70e65b1 #​6423 tuf-js@1.1.5 (#​6423)
• 72291f7 #​6416 read-package-json@6.0.3
• e498f82 #​6416 minimatch@9.0.0
• 13aa7b7 #​6416 minipass@5.0.0
• f2a5678 #​6416 tar@6.1.14
• 69d4dd2 #​6416 npm update
• abdca39 #​6416 sigstore@1.4.0
• 16f68fb #​6416 glob@10.2.2
• 67fcfb1 #​6416 ignore-walk@6.0.3
• bfa2ff3 #​6416 make-fetch-happen@11.1.1
• 877591a #​6416 npm-registry-fetch@14.0.5
• 7630517 #​6416 pacote@15.1.3
• c2d6e0a #​6416 write-file-atomic@5.0.1
• acdf97e #​6416 which@3.0.1
• 00c541a #​6416 ssri@10.0.4
• 1b95e73 #​6416 read-package-json@6.0.2
• 6927fd3 #​6416 fs-minipass@3.0.2
• 3eec56e #​6416 cacache@17.1.0
• 7a2ce3f #​6416 @npmcli/run-script@6.0.1
• 3881770 #​6416 @npmcli/map-workspaces@3.0.4
• Workspace: @npmcli/arborist@6.2.9
• Workspace: libnpmdiff@5.0.17
• Workspace: libnpmexec@5.0.17
• Workspace: libnpmfund@4.0.17
• Workspace: libnpmorg@5.0.4
• Workspace: libnpmpack@5.0.17
• Workspace: libnpmpublish@7.1.4

v9.6.5

Compare Source

Bug Fixes

• 33dc428 #​6374 account for npx package-name with no spec (@​wraithgar)
• 82879f6 #​6225 lazy loading of arborist and pacote (#​6225) (@​wraithgar)
• f4e73ab #​6322 remove incompatible params from ci (#​6322) (@​wraithgar)
• c7fe1c7 #​6328 save raw data to file, not parsed data (@​wraithgar)

Documentation

• 31214a6 #​6381 Update description for publish --provenance flag (#​6381) (@​feelepxyz)
• 997bcdf #​6329 fix npm cache folder location for windows (#​6329) (@​charlie-wong)

Dependencies

• fae5e00 #​6372 sigstore@1.3.0 (#​6372)
• 3fa9542 #​6363 semver@7.5.0
• e49844e #​6363 minipass-fetch@3.0.2
• 357cc29 #​6363 walk-up-path@3.0.1
• 2c80b1e #​6363 ini@4.1.0
• 5933841 #​6363 minipass@4.2.8
• b39d54e #​6363 minimatch@7.4.6
• 201aa5a #​6363 ssri@10.0.3
• acb9120 #​6363 read@2.1.0
• 2472205 #​6363 npm-registry-fetch@14.0.4
• 2780714 #​6363 npm-install-checks@6.1.1
• b5af015 #​6363 make-fetch-happen@11.1.0
• 14c498d #​6363 @npmcli/metavuln-calculator@5.0.1
• Workspace: @npmcli/arborist@6.2.8
• Workspace: @npmcli/config@6.1.6
• Workspace: libnpmdiff@5.0.16
• Workspace: libnpmexec@5.0.16
• Workspace: libnpmfund@4.0.16
• Workspace: libnpmpack@5.0.16

v9.6.4

Compare Source

Documentation

• 54795a3 #​6312 filter archives out of version manager search (#​6312) (@​ljharb)
• 530c285 #​6306 remove reference to npm-packlist (#​6306) (@​staff0rd)

Dependencies

• 85935ac #​6325 ssri@10.0.2 (#​6325)
• f1388b4 #​6317 npm update
• 7dd0129 #​6317 glob@9.3.2
• deca335 #​6317 promise-call-limit@1.0.2
• Workspace: @npmcli/arborist@6.2.7
• Workspace: libnpmdiff@5.0.15
• Workspace: libnpmexec@5.0.15
• Workspace: libnpmfund@4.0.15
• Workspace: libnpmpack@5.0.15

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.