FazBrowse GitHub Viewer | Trending |
URL:
| Home
Tools: [Download Repo ZIP]   [Original HTTPS Page]

deps: upgrade npm to 7.21.0 by npm-robot · Pull Request #39813 · nodejs/node · GitHub

/ node Public

deps: upgrade npm to 7.21.0 - #39813

Closed
npm-robot wants to merge 1 commit into
nodejs:masterfrom
npm:npm-7.21.0
ConversationCommits (1)ChecksFiles changed
Closed

deps: upgrade npm to 7.21.0#39813
npm-robot wants to merge 1 commit into
nodejs:masterfrom
npm:npm-7.21.0

Conversation

npm-robot commented Aug 19, 2021 •
edited by lpinca
Loading

Copy link
Copy Markdown
Contributor

v7.21.0 (2021-08-19)

FEATURES

BUG FIXES

DEPENDENCIES

  • df57f0d53 @npmcli/run-script@1.8.6
  • 8183976cf normalize-package-data@3.0.3:
    • fix: account for "licence" as spelling variant
  • f07772401 init-package-json@2.0.4
  • 991a3bd39 read-package-json@4.0.0
  • e9e5ee560 @npmcli/arborist@2.8.2:
    • fix: treat top-level global packages as "top" nodes
    • fix: load global symlinks implicitly as file: deps
    • fix(reify): debug crash when extracting into symlink
    • fix: node_modules must be a directory
    • fix: make Node.children() a case-insensitive Map
    • fix(reify): verify existing deps in nm are dirs
  • b6f40b5f8 tar@6.1.10:
    • fix: prune dirCache properly for unicode, windows
    • fix: reserve paths properly for unicode, windows
    • fix: prevent path escape using drive-relative paths
    • fix: drop dirCache for symlink on all platforms
  • 218cacadc is-core-module@2.6.0
  • 7ac621cd1 smart-buffer@4.2.0
  • 94f92de13 make-fetch-happen@9.0.5
  • 71cdfd898 spdx-license-ids@3.0.10:
    • update license list to v3.14

v7.20.6 (2021-08-12)

DEPENDENCIES

  • 5bebf280f tar@6.1.8
    • fix: reserve paths case-insensitively
  • 5d89de44d tar@6.1.7:
    • fix: normalize paths on Windows systems
  • a1bdbea97 #3569 remove byte-size (@wraithgar)
  • 61782fa85 @npmcli/map-workspaces@1.0.4:
    • fix: better error message for duplicate workspace names
  • b88f770fa @npmcli/arborist@2.8.1:
    • #3632 Fix "cannot read property path of null" error in 'npm dedupe'
    • fix(shrinkwrap): always set name on the root node

DOCUMENTATION

v7.20.5 (2021-08-05)

DEPENDENCIES

  • 44377738e graceful-fs@4.2.8
    • fix: start retrying immediately, stop after 60 seconds

v7.20.4 (2021-08-05)

BUG FIXES

DEPENDENCIES

  • 15fae4941 tar@6.1.6:
    • fix: properly handle top-level files when using strip
    • Avoid an unlikely but theoretically possible redos
    • WriteEntry backpressure
    • fix(unpack): always resume parsing after an entry error
    • fix(unpack): fix hang on large file on open() fail
    • fix: properly prefix hard links
  • 745326de0 libnpmexec@2.0.1:
    • Clear progress bar which overlays confirm prompt
  • e82bcd4e8 graceful-fs@4.2.7:
    • fix: start retrying immediately, stop after 10 attempts

nodejs-github-bot added dont-land-on-v12.x fast-track PRs that do not need to wait for 48 hours to land. needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. labels Aug 19, 2021

github-actions Bot commented Aug 19, 2021

Copy link
Copy Markdown
Contributor

Fast-track has been requested by @nodejs-github-bot. Please 👍 to approve.

lpinca mentioned this pull request Aug 19, 2021
Closed

npm-robot commented Aug 19, 2021

Copy link
Copy Markdown
Contributor Author

Supersedes #39681

lpinca mentioned this pull request Aug 19, 2021
Closed

nodejs-github-bot commented Aug 19, 2021

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/39602/

MylesBorins approved these changes Aug 19, 2021
View reviewed changes

MylesBorins left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Choose a reason Spam Abuse Off Topic Outdated Duplicate Resolved Low Quality

LGTM

nodejs-github-bot commented Aug 20, 2021

Copy link
Copy Markdown
Collaborator

CI: https://ci.nodejs.org/job/node-test-pull-request/39604/

lpinca pushed a commit that referenced this pull request Aug 20, 2021
deps: upgrade npm to 7.21.0
248f4c3 
PR-URL: #39813
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Rich Trott <rtrott@gmail.com>

lpinca commented Aug 20, 2021

Copy link
Copy Markdown
Member

Landed in 248f4c3.

lpinca closed this Aug 20, 2021

targos commented Aug 22, 2021 •
edited
Loading

Copy link
Copy Markdown
Member

@nodejs/npm this doesn't land cleanly on v16.x-staging. Can you please backport (if possible, in a way that future updates can be cherry-picked from master)?

MylesBorins added a commit that referenced this pull request Aug 23, 2021
deps: upgrade npm to 7.21.0
cce95c4 
PR-URL: #39813
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>
Reviewed-By: Tobias Nießen <tniessen@tnie.de>
Reviewed-By: Rich Trott <rtrott@gmail.com>

MylesBorins commented Aug 23, 2021 •
edited
Loading

Copy link
Copy Markdown
Contributor

@targos I've landed the change in cce95c4

Will double check with team to ensure it is correct (I'm running the update script to ensure the output is expected / consistent)

edit: I've manually confirmed that the release is exactly what is expectd 🎉

targos commented Aug 23, 2021

Copy link
Copy Markdown
Member

@MylesBorins awesome, thanks!

redick-simon commented Aug 25, 2021

Copy link
Copy Markdown

Hi team,
When we can expect this to be shipped with node 16.x, current npm 7.20.3 has some vulnerability issue due to tar 6.1.0

Please let me know in case we can expect a node release in this week.

Thanks!!

targos mentioned this pull request Aug 25, 2021
Merged

targos commented Aug 25, 2021

Copy link
Copy Markdown
Member

Expect a release in the next 24 hours: #39875

Trott commented Aug 25, 2021

Copy link
Copy Markdown
Member

Hi team,
When we can expect this to be shipped with node 16.x, current npm 7.20.3 has some vulnerability issue due to tar 6.1.0

Please let me know in case we can expect a node release in this week.

Thanks!!

@redick-simon npm install -g npm will install the updated version on your system. You don't need to wait for a Node.js release to get the update. (You might already know this and you want/need a release with it for a specific use case, in which case this comment is for the benefit of other readers/observers.)

redick-simon commented Aug 25, 2021

Copy link
Copy Markdown

Thanks @Trott ! Actually I'm waiting for node docker image free of tar vulnerability issue.

darcyclarke mentioned this pull request Aug 26, 2021
Closed
1 task
wraithgar deleted the npm-7.21.0 branch June 26, 2025 15:43
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters. Learn more about bidirectional Unicode characters
Show hidden characters
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Trott Trott approved these changes
lpinca lpinca approved these changes
tniessen tniessen approved these changes
+1 more reviewer
MylesBorins MylesBorins approved these changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

fast-track PRs that do not need to wait for 48 hours to land. needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

8 participants

Back | FazBrowse Home | New Git URL