FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

deps: upgrade npm to 8.19.1 · nodejs/node@8a921fe · GitHub

deps: upgrade npm to 8.19.1 · nodejs/node@8a921fe · GitHub
Skip to content

Navigation Menu

Sign in
Sign in
Sign up

Commit 8a921fe

Browse files
npm-cli-bot
authored and
juanarbol
committed
deps: upgrade npm to 8.19.1
PR-URL: #44486 Reviewed-By: Myles Borins <myles.borins@gmail.com> Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
1 parent 03b8cb8 commit 8a921fe

188 files changed

Lines changed: 1890 additions & 1304 deletions

File tree

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

‎deps/npm/docs/content/commands/npm-access.md‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -35,29 +35,28 @@ For all of the subcommands, `npm access` will perform actions on the packages
3535
in the current working directory if no package name is passed to the
3636
subcommand.
3737
38-
* public / restricted:
38+
* public / restricted (deprecated):
3939
Set a package to be either publicly accessible or restricted.
4040
41-
* grant / revoke:
41+
* grant / revoke (deprecated):
4242
Add or remove the ability of users and teams to have read-only or read-write
4343
access to a package.
4444
45-
* 2fa-required / 2fa-not-required:
45+
* 2fa-required / 2fa-not-required (deprecated):
4646
Configure whether a package requires that anyone publishing it have two-factor
4747
authentication enabled on their account.
4848
49-
* ls-packages:
49+
* ls-packages (deprecated):
5050
Show all of the packages a user or a team is able to access, along with the
5151
access level, except for read-only public packages (it won't print the whole
5252
registry listing)
5353
54-
* ls-collaborators:
54+
* ls-collaborators (deprecated):
5555
Show all of the access privileges for a package. Will only show permissions
5656
for packages to which you have at least read access. If `<user>` is passed in,
5757
the list is filtered only to teams _that_ user happens to belong to.
5858
59-
* edit:
60-
Set the access privileges for a package at once using `$EDITOR`.
59+
* edit (not implemented)
6160
6261
### Details
6362

‎deps/npm/docs/content/commands/npm-query.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -232,4 +232,4 @@ This value is not exported to the environment for child processes.
232232
<!-- AUTOGENERATED CONFIG DESCRIPTIONS END -->
233233
## See Also
234234

235-
* [dependency selector](/using-npm/dependency-selector)
235+
* [dependency selectors](/using-npm/dependency-selectors)

‎deps/npm/docs/content/configuring-npm/npmrc.md‎

Lines changed: 28 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -91,6 +91,34 @@ consistent across updates. Set fields in here using the `./configure`
9191
script that comes with npm. This is primarily for distribution maintainers
9292
to override default configs in a standard and consistent manner.
9393

94+
### Auth related configuration
95+
96+
The settings `_auth`, `_authToken`, `username` and `_password` must all be
97+
scoped to a specific registry. This ensures that `npm` will never send
98+
credentials to the wrong host.
99+
100+
In order to scope these values, they must be prefixed by a URI fragment.
101+
If the credential is meant for any request to a registry on a single host,
102+
the scope may look like `//registry.npmjs.org/:`. If it must be scoped to a
103+
specific path on the host that path may also be provided, such as
104+
`//my-custom-registry.org/unique/path:`.
105+
106+
```
107+
; bad config
108+
_authToken=MYTOKEN
109+
110+
; good config
111+
@myorg:registry=https://somewhere-else.com/myorg
112+
@another:registry=https://somewhere-else.com/another
113+
//registry.npmjs.org/:_authToken=MYTOKEN
114+
; would apply to both @myorg and @another
115+
; //somewhere-else.com/:_authToken=MYTOKEN
116+
; would apply only to @myorg
117+
//somewhere-else.com/myorg/:_authToken=MYTOKEN1
118+
; would apply only to @another
119+
//somewhere-else.com/another/:_authToken=MYTOKEN2
120+
```
121+
94122
### See also
95123

96124
* [npm folders](/configuring-npm/folders)

‎deps/npm/docs/content/using-npm/dependency-selectors.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -144,7 +144,7 @@ const arb = new Arborist({})
144144

145145
```js
146146
// root-level
147-
arb.loadActual((tree) => {
147+
arb.loadActual().then(async (tree) => {
148148
// query all production dependencies
149149
const results = await tree.querySelectorAll('.prod')
150150
console.log(results)
@@ -153,7 +153,7 @@ arb.loadActual((tree) => {
153153

154154
```js
155155
// iterative
156-
arb.loadActual((tree) => {
156+
arb.loadActual().then(async (tree) => {
157157
// query for the deduped version of react
158158
const results = await tree.querySelectorAll('#react:not(:deduped)')
159159
// query the deduped react for git deps

‎deps/npm/docs/output/commands/npm-access.html‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -169,34 +169,33 @@ <h3 id="description">Description</h3>
169169
subcommand.</p>
170170
<ul>
171171
<li>
172-
<p>public / restricted:
172+
<p>public / restricted (deprecated):
173173
Set a package to be either publicly accessible or restricted.</p>
174174
</li>
175175
<li>
176-
<p>grant / revoke:
176+
<p>grant / revoke (deprecated):
177177
Add or remove the ability of users and teams to have read-only or read-write
178178
access to a package.</p>
179179
</li>
180180
<li>
181-
<p>2fa-required / 2fa-not-required:
181+
<p>2fa-required / 2fa-not-required (deprecated):
182182
Configure whether a package requires that anyone publishing it have two-factor
183183
authentication enabled on their account.</p>
184184
</li>
185185
<li>
186-
<p>ls-packages:
186+
<p>ls-packages (deprecated):
187187
Show all of the packages a user or a team is able to access, along with the
188188
access level, except for read-only public packages (it won't print the whole
189189
registry listing)</p>
190190
</li>
191191
<li>
192-
<p>ls-collaborators:
192+
<p>ls-collaborators (deprecated):
193193
Show all of the access privileges for a package. Will only show permissions
194194
for packages to which you have at least read access. If <code>&lt;user&gt;</code> is passed in,
195195
the list is filtered only to teams <em>that</em> user happens to belong to.</p>
196196
</li>
197197
<li>
198-
<p>edit:
199-
Set the access privileges for a package at once using <code>$EDITOR</code>.</p>
198+
<p>edit (not implemented)</p>
200199
</li>
201200
</ul>
202201
<h3 id="details">Details</h3>

‎deps/npm/docs/output/commands/npm-ls.html‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -166,7 +166,7 @@ <h3 id="description">Description</h3>
166166
the results to only the paths to the packages named. Note that nested
167167
packages will <em>also</em> show the paths to the specified packages. For
168168
example, running <code>npm ls promzard</code> in npm's source tree will show:</p>
169-
<pre lang="bash"><code>npm@8.18.0 /path/to/npm
169+
<pre lang="bash"><code>npm@8.19.1 /path/to/npm
170170
└─┬ init-package-json@0.0.4
171171
└── promzard@0.1.5
172172
</code></pre>

‎deps/npm/docs/output/commands/npm-query.html‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -344,7 +344,7 @@ <h4 id="include-workspace-root"><code>include-workspace-root</code></h4>
344344
<!-- raw HTML omitted -->
345345
<h2 id="see-also">See Also</h2>
346346
<ul>
347-
<li><a href="../using-npm/dependency-selector.html">dependency selector</a></li>
347+
<li><a href="../using-npm/dependency-selectors.html">dependency selectors</a></li>
348348
</ul>
349349
</div>
350350

‎deps/npm/docs/output/commands/npm.html‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -149,7 +149,7 @@ <h2 id="table-of-contents">Table of contents</h2>
149149
<!-- raw HTML omitted -->
150150
<!-- raw HTML omitted -->
151151
<h3 id="version">Version</h3>
152-
<p>8.18.0</p>
152+
<p>8.19.1</p>
153153
<h3 id="description">Description</h3>
154154
<p>npm is the package manager for the Node JavaScript platform. It puts
155155
modules in place so that node can find them, and manages dependency

‎deps/npm/docs/output/configuring-npm/npmrc.html‎

Lines changed: 24 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -142,7 +142,7 @@ <h1 id="npmrc">npmrc</h1>
142142

143143
<section id="table_of_contents">
144144
<h2 id="table-of-contents">Table of contents</h2>
145-
<div id="_table_of_contents"><ul><li><a href="#description">Description</a></li><li><a href="#files">Files</a></li><ul><li><a href="#comments">Comments</a></li><li><a href="#per-project-config-file">Per-project config file</a></li><li><a href="#per-user-config-file">Per-user config file</a></li><li><a href="#global-config-file">Global config file</a></li><li><a href="#built-in-config-file">Built-in config file</a></li></ul><li><a href="#see-also">See also</a></li></ul></div>
145+
<div id="_table_of_contents"><ul><li><a href="#description">Description</a></li><li><a href="#files">Files</a></li><ul><li><a href="#comments">Comments</a></li><li><a href="#per-project-config-file">Per-project config file</a></li><li><a href="#per-user-config-file">Per-user config file</a></li><li><a href="#global-config-file">Global config file</a></li><li><a href="#built-in-config-file">Built-in config file</a></li></ul><li><a href="#auth-related-configuration">Auth related configuration</a></li><li><a href="#see-also">See also</a></li></ul></div>
146146
</section>
147147

148148
<div id="_content"><h3 id="description">Description</h3>
@@ -204,6 +204,29 @@ <h4 id="built-in-config-file">Built-in config file</h4>
204204
consistent across updates. Set fields in here using the <code>./configure</code>
205205
script that comes with npm. This is primarily for distribution maintainers
206206
to override default configs in a standard and consistent manner.</p>
207+
<h3 id="auth-related-configuration">Auth related configuration</h3>
208+
<p>The settings <code>_auth</code>, <code>_authToken</code>, <code>username</code> and <code>_password</code> must all be
209+
scoped to a specific registry. This ensures that <code>npm</code> will never send
210+
credentials to the wrong host.</p>
211+
<p>In order to scope these values, they must be prefixed by a URI fragment.
212+
If the credential is meant for any request to a registry on a single host,
213+
the scope may look like <code>//registry.npmjs.org/:</code>. If it must be scoped to a
214+
specific path on the host that path may also be provided, such as
215+
<code>//my-custom-registry.org/unique/path:</code>.</p>
216+
<pre><code>; bad config
217+
_authToken=MYTOKEN
218+
219+
; good config
220+
@myorg:registry=https://somewhere-else.com/myorg
221+
@another:registry=https://somewhere-else.com/another
222+
//registry.npmjs.org/:_authToken=MYTOKEN
223+
; would apply to both @myorg and @another
224+
; //somewhere-else.com/:_authToken=MYTOKEN
225+
; would apply only to @myorg
226+
//somewhere-else.com/myorg/:_authToken=MYTOKEN1
227+
; would apply only to @another
228+
//somewhere-else.com/another/:_authToken=MYTOKEN2
229+
</code></pre>
207230
<h3 id="see-also">See also</h3>
208231
<ul>
209232
<li><a href="../configuring-npm/folders.html">npm folders</a></li>

‎deps/npm/docs/output/using-npm/dependency-selectors.html‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -264,14 +264,14 @@ <h3 id="programmatic-usage">Programmatic Usage</h3>
264264
const arb = new Arborist({})
265265
</code></pre>
266266
<pre lang="js"><code>// root-level
267-
arb.loadActual((tree) =&gt; {
267+
arb.loadActual().then(async (tree) =&gt; {
268268
// query all production dependencies
269269
const results = await tree.querySelectorAll('.prod')
270270
console.log(results)
271271
})
272272
</code></pre>
273273
<pre lang="js"><code>// iterative
274-
arb.loadActual((tree) =&gt; {
274+
arb.loadActual().then(async (tree) =&gt; {
275275
// query for the deduped version of react
276276
const results = await tree.querySelectorAll('#react:not(:deduped)')
277277
// query the deduped react for git deps

0 commit comments

Comments
 (0)

Footer

© 2026 GitHub, Inc.
Back | FazBrowse Home | New Git URL