FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

deps: upgrade npm to 11.8.0 · nodejs/node@048f7a5 · GitHub

deps: upgrade npm to 11.8.0 · nodejs/node@048f7a5 · GitHub
Skip to content

Navigation Menu

Sign in
Sign in
Sign up

Commit 048f7a5

Browse files
npm-cli-bot
authored and
aduh95
committed
deps: upgrade npm to 11.8.0
PR-URL: #61466 Reviewed-By: Jordan Harband <ljharb@gmail.com> Reviewed-By: Luigi Pinca <luigipinca@gmail.com> Reviewed-By: Colin Ihrig <cjihrig@gmail.com> Reviewed-By: Rafael Gonzaga <rafael.nunu@hotmail.com>
1 parent 482b256 commit 048f7a5

321 files changed

Lines changed: 1961 additions & 5185 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎deps/npm/docs/content/commands/npm-dedupe.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -48,7 +48,7 @@ a
4848
```
4949
5050
During the installation process, the `c@1.0.3` dependency for `b` was placed in the root of the tree.
51-
Though `d`'s dependency on `c@1.x` could have been satisfied by `c@1.0.3`, the newer `c@1.9.0` dependency was used, because npm favors updates by default, even when doing so causes duplication.
51+
Though `d`'s dependency on `c@1.x` could have been satisfied by `c@1.0.3`, the newer `c@1.9.9` dependency was used, because npm favors updates by default, even when doing so causes duplication.
5252

5353
Running `npm dedupe` will cause npm to note the duplication and re-evaluate, deleting the nested `c` module, because the one in the root is sufficient.
5454

‎deps/npm/docs/content/commands/npm-install.md‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,18 @@ If the package has a package-lock, or an npm shrinkwrap file, or a yarn lock fil
2323

2424
See [package-lock.json](/configuring-npm/package-lock-json) and [`npm shrinkwrap`](/commands/npm-shrinkwrap).
2525

26+
#### How `npm install` uses `package-lock.json`
27+
28+
When you run `npm install` without arguments, npm compares `package.json` and `package-lock.json`:
29+
30+
* **If the lockfile's resolved versions satisfy the `package.json` ranges:** npm uses the exact versions from `package-lock.json` to ensure reproducible builds across environments.
31+
32+
* **If the ranges don't match:** npm resolves new versions that satisfy the `package.json` ranges and updates `package-lock.json` accordingly. This happens when you modify version ranges in `package.json` (e.g., changing `^7.0.0` to `^8.0.0`). Note that changing a range within the same major version (e.g., `^7.0.0` to `^7.1.0`) will only update the metadata in the lockfile if the currently installed version still satisfies the new range.
33+
34+
In essence, `package-lock.json` locks your dependencies to specific versions, but `package.json` is the source of truth for acceptable version ranges. When the lockfile's versions satisfy the `package.json` ranges, the lockfile wins. When they conflict, `package.json` wins and the lockfile is updated.
35+
36+
If you want to install packages while ensuring that `package.json` is not modified and that both files are strictly in sync, use [`npm ci`](/commands/npm-ci) instead.
37+
2638
A `package` is:
2739

2840
* a) a folder containing a program described by a [`package.json`](/configuring-npm/package-json) file

‎deps/npm/docs/content/commands/npm-ls.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ Note that nested packages will *also* show the paths to the specified packages.
2323
For example, running `npm ls promzard` in npm's source tree will show:
2424

2525
```bash
26-
npm@11.7.0 /path/to/npm
26+
npm@11.8.0 /path/to/npm
2727
└─┬ init-package-json@0.0.4
2828
└── promzard@0.1.5
2929
```

‎deps/npm/docs/content/commands/npm.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ Note: This command is unaware of workspaces.
1414

1515
### Version
1616

17-
11.7.0
17+
11.8.0
1818

1919
### Description
2020

‎deps/npm/docs/output/commands/npm-access.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-access----1170">
144+
<h1 id="----npm-access----1180">
145145
<span>npm-access</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Set access level on published packages</span>
149149
</header>

‎deps/npm/docs/output/commands/npm-adduser.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-adduser----1170">
144+
<h1 id="----npm-adduser----1180">
145145
<span>npm-adduser</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Add a registry user account</span>
149149
</header>

‎deps/npm/docs/output/commands/npm-audit.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-audit----1170">
144+
<h1 id="----npm-audit----1180">
145145
<span>npm-audit</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Run a security audit</span>
149149
</header>

‎deps/npm/docs/output/commands/npm-bugs.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-bugs----1170">
144+
<h1 id="----npm-bugs----1180">
145145
<span>npm-bugs</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Report bugs for a package in a web browser</span>
149149
</header>

‎deps/npm/docs/output/commands/npm-cache.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-cache----1170">
144+
<h1 id="----npm-cache----1180">
145145
<span>npm-cache</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Manipulates packages cache</span>
149149
</header>

‎deps/npm/docs/output/commands/npm-ci.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -141,9 +141,9 @@
141141

142142
<section id="content">
143143
<header class="title">
144-
<h1 id="----npm-ci----1170">
144+
<h1 id="----npm-ci----1180">
145145
<span>npm-ci</span>
146-
<span class="version">@11.7.0</span>
146+
<span class="version">@11.8.0</span>
147147
</h1>
148148
<span class="description">Clean install a project</span>
149149
</header>

0 commit comments

Comments
 (0)

Footer

© 2026 GitHub, Inc.
Back | FazBrowse Home | New Git URL