github-starred/pangolin
2
0
Fork 0
mirror of https://github.com/fosrl/pangolin.git synced 2026-05-25 23:02:14 -05:00
Code Issues 959 Packages Projects Releases 74 Wiki Activity

[PR #1942] [MERGED] Bump glob and npm #2771

New Issue
Closed
opened 2026-04-16 09:35:45 -05:00 by GiteaMirror · 0 comments
GiteaMirror commented 2026-04-16 09:35:45 -05:00
Owner
Copy Link

📋 Pull Request Information

Original PR: https://github.com/fosrl/pangolin/pull/1942
Author: @dependabot[bot]
Created: 11/29/2025
Status: ✅ Merged
Merged: 11/29/2025
Merged by: @oschwartz10612

Base: main ← Head: dependabot/npm_and_yarn/multi-f170272c46

📝 Commits (1)

📊 Changes

2 files changed (+251 additions, -687 deletions)

View changed files

📝 package-lock.json (+249 -685)
📝 package.json (+2 -2)

📄 Description

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps glob to 11.1.0 and updates ancestor dependencies glob and npm. These dependencies need to be updated together.

Updates glob from 11.0.3 to 11.1.0

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits
  • 2551fb5 11.1.0
  • 47473c0 bin: Do not expose filenames to shell expansion
  • bc33fe1 skip tilde test on systems that lack tilde expansion
  • 59bf9ca fix notes
  • dde4fa6 docs(README): add #anchor and improve notes
  • 0559b0e docs: add better links to path-scurry docs
  • c9773c2 fix: correct typos in README.md
  • 13e68ea Fix punctuation in traversal function documentation
  • 1527e2b fix repo url
  • 7e190e8 fix typo maths → paths
  • Additional commits viewable in compare view

Updates glob from 10.4.5 to 10.5.0

Changelog

Sourced from glob's changelog.

changeglob

13

  • Move the CLI program out to a separate package, glob-bin. Install that if you'd like to continue using glob from the command line.

12

  • Remove the unsafe --shell option. The --shell option is now ONLY supported on known shells where the behavior can be implemented safely.

11.1

GHSA-5j98-mcp5-4vw2

  • Add the --shell option for the command line, with a warning that this is unsafe. (It will be removed in v12.)
  • Add the --cmd-arg/-g as a way to safely add positional arguments to the command provided to the CLI tool.
  • Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding shell:true execution.

11.0

  • Drop support for node before v20

10.4

  • Add includeChildMatches: false option
  • Export the Ignore class

10.3

  • Add --default -p flag to provide a default pattern
  • exclude symbolic links to directories when follow and nodir are both set

10.2

  • Add glob cli

10.1

  • Return '.' instead of the empty string '' when the current working directory is returned as a match.
  • Add posix: true option to return / delimited paths, even on

... (truncated)

Commits
  • 2551fb5 11.1.0
  • 47473c0 bin: Do not expose filenames to shell expansion
  • bc33fe1 skip tilde test on systems that lack tilde expansion
  • 59bf9ca fix notes
  • dde4fa6 docs(README): add #anchor and improve notes
  • 0559b0e docs: add better links to path-scurry docs
  • c9773c2 fix: correct typos in README.md
  • 13e68ea Fix punctuation in traversal function documentation
  • 1527e2b fix repo url
  • 7e190e8 fix typo maths → paths
  • Additional commits viewable in compare view

Updates npm from 11.6.2 to 11.6.4

Release notes

Sourced from npm's releases.

v11.6.4

11.6.4 (2025-11-25)

Documentation

Dependencies

v11.6.3

11.6.3 (2025-11-19)

Bug Fixes

Documentation

Dependencies

... (truncated)

Changelog

Sourced from npm's changelog.

11.6.4 (2025-11-25)

Documentation

Dependencies

11.6.3 (2025-11-19)

Bug Fixes

Documentation

Dependencies

... (truncated)

Commits
  • 5271485 chore: release 11.6.4
  • f56bb13 deps: proc-log@6.1.0 (#8779)
  • b118364 fix: undefined override set conflicts shouldn't error
  • dfb83c7 docs: add example for keywords field (#8749)
  • 1b1e227 docs: remove outdated roadmap link (#8750)
  • 1333d57 docs: clarify .npmrc naming convention for environment variable overrides (#8...
  • 22cddb8 docs: add workspace dependencies example to workspaces
  • 17e154c docs: standardize env vars to uppercase convention
  • 1e51a25 docs: fix lifecycle event order for prepare script
  • 8d72bc9 docs: add os, cpu, and funding fields to package-lock.json
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/pangolin/pull/1942 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 11/29/2025 **Status:** ✅ Merged **Merged:** 11/29/2025 **Merged by:** [@oschwartz10612](https://github.com/oschwartz10612) **Base:** `main` ← **Head:** `dependabot/npm_and_yarn/multi-f170272c46` --- ### 📝 Commits (1) - [`49348c6`](https://github.com/fosrl/pangolin/commit/49348c6ab70ae989e12f42ae900a60be41ec480b) Bump glob and npm ### 📊 Changes **2 files changed** (+251 additions, -687 deletions) <details> <summary>View changed files</summary> 📝 `package-lock.json` (+249 -685) 📝 `package.json` (+2 -2) </details> ### 📄 Description [//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [glob](https://github.com/isaacs/node-glob) to 11.1.0 and updates ancestor dependencies [glob](https://github.com/isaacs/node-glob) and [npm](https://github.com/npm/cli). These dependencies need to be updated together. Updates `glob` from 11.0.3 to 11.1.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/node-glob/blob/main/changelog.md">glob's changelog</a>.</em></p> <blockquote> <h1>changeglob</h1> <h2>13</h2> <ul> <li>Move the CLI program out to a separate package, <code>glob-bin</code>. Install that if you'd like to continue using glob from the command line.</li> </ul> <h2>12</h2> <ul> <li>Remove the unsafe <code>--shell</code> option. The <code>--shell</code> option is now ONLY supported on known shells where the behavior can be implemented safely.</li> </ul> <h2>11.1</h2> <p><a href="https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2">GHSA-5j98-mcp5-4vw2</a></p> <ul> <li>Add the <code>--shell</code> option for the command line, with a warning that this is unsafe. (It will be removed in v12.)</li> <li>Add the <code>--cmd-arg</code>/<code>-g</code> as a way to <em>safely</em> add positional arguments to the command provided to the CLI tool.</li> <li>Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding <code>shell:true</code> execution.</li> </ul> <h2>11.0</h2> <ul> <li>Drop support for node before v20</li> </ul> <h2>10.4</h2> <ul> <li>Add <code>includeChildMatches: false</code> option</li> <li>Export the <code>Ignore</code> class</li> </ul> <h2>10.3</h2> <ul> <li>Add <code>--default -p</code> flag to provide a default pattern</li> <li>exclude symbolic links to directories when <code>follow</code> and <code>nodir</code> are both set</li> </ul> <h2>10.2</h2> <ul> <li>Add glob cli</li> </ul> <h2>10.1</h2> <ul> <li>Return <code>'.'</code> instead of the empty string <code>''</code> when the current working directory is returned as a match.</li> <li>Add <code>posix: true</code> option to return <code>/</code> delimited paths, even on</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-glob/commit/2551fb51440d402fa2120457bf460e546ee9964d"><code>2551fb5</code></a> 11.1.0</li> <li><a href="https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146"><code>47473c0</code></a> bin: Do not expose filenames to shell expansion</li> <li><a href="https://github.com/isaacs/node-glob/commit/bc33fe1c6a47abd497703d79ad96036e7891ff62"><code>bc33fe1</code></a> skip tilde test on systems that lack tilde expansion</li> <li><a href="https://github.com/isaacs/node-glob/commit/59bf9ca211bda5636c4fe9e32d41530c90a4f30d"><code>59bf9ca</code></a> fix notes</li> <li><a href="https://github.com/isaacs/node-glob/commit/dde4fa66c87e24b37bb5be28ed10c6e12019edac"><code>dde4fa6</code></a> docs(README): add #anchor and improve <code>note</code>s</li> <li><a href="https://github.com/isaacs/node-glob/commit/0559b0ed13c0f8147cd2ac9d48bb49684caaf20e"><code>0559b0e</code></a> docs: add better links to path-scurry docs</li> <li><a href="https://github.com/isaacs/node-glob/commit/c9773c249b4b9ed6b2447222c226f9d20c6ce916"><code>c9773c2</code></a> fix: correct typos in <code>README.md</code></li> <li><a href="https://github.com/isaacs/node-glob/commit/13e68eadbc4f0aacd9d6ffbcb4b28a34d5d8512c"><code>13e68ea</code></a> Fix punctuation in traversal function documentation</li> <li><a href="https://github.com/isaacs/node-glob/commit/1527e2b8107e95122ab6e9b6f6312f121693d53d"><code>1527e2b</code></a> fix repo url</li> <li><a href="https://github.com/isaacs/node-glob/commit/7e190e8776a7fa66fba40827de5f9effd1c52f9d"><code>7e190e8</code></a> fix typo <code>maths</code> → <code>paths</code></li> <li>Additional commits viewable in <a href="https://github.com/isaacs/node-glob/compare/v11.0.3...v11.1.0">compare view</a></li> </ul> </details> <br /> Updates `glob` from 10.4.5 to 10.5.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/isaacs/node-glob/blob/main/changelog.md">glob's changelog</a>.</em></p> <blockquote> <h1>changeglob</h1> <h2>13</h2> <ul> <li>Move the CLI program out to a separate package, <code>glob-bin</code>. Install that if you'd like to continue using glob from the command line.</li> </ul> <h2>12</h2> <ul> <li>Remove the unsafe <code>--shell</code> option. The <code>--shell</code> option is now ONLY supported on known shells where the behavior can be implemented safely.</li> </ul> <h2>11.1</h2> <p><a href="https://github.com/isaacs/node-glob/security/advisories/GHSA-5j98-mcp5-4vw2">GHSA-5j98-mcp5-4vw2</a></p> <ul> <li>Add the <code>--shell</code> option for the command line, with a warning that this is unsafe. (It will be removed in v12.)</li> <li>Add the <code>--cmd-arg</code>/<code>-g</code> as a way to <em>safely</em> add positional arguments to the command provided to the CLI tool.</li> <li>Detect commands with space or quote characters on known shells, and pass positional arguments to them safely, avoiding <code>shell:true</code> execution.</li> </ul> <h2>11.0</h2> <ul> <li>Drop support for node before v20</li> </ul> <h2>10.4</h2> <ul> <li>Add <code>includeChildMatches: false</code> option</li> <li>Export the <code>Ignore</code> class</li> </ul> <h2>10.3</h2> <ul> <li>Add <code>--default -p</code> flag to provide a default pattern</li> <li>exclude symbolic links to directories when <code>follow</code> and <code>nodir</code> are both set</li> </ul> <h2>10.2</h2> <ul> <li>Add glob cli</li> </ul> <h2>10.1</h2> <ul> <li>Return <code>'.'</code> instead of the empty string <code>''</code> when the current working directory is returned as a match.</li> <li>Add <code>posix: true</code> option to return <code>/</code> delimited paths, even on</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-glob/commit/2551fb51440d402fa2120457bf460e546ee9964d"><code>2551fb5</code></a> 11.1.0</li> <li><a href="https://github.com/isaacs/node-glob/commit/47473c046b91c67269df7a66eab782a6c2716146"><code>47473c0</code></a> bin: Do not expose filenames to shell expansion</li> <li><a href="https://github.com/isaacs/node-glob/commit/bc33fe1c6a47abd497703d79ad96036e7891ff62"><code>bc33fe1</code></a> skip tilde test on systems that lack tilde expansion</li> <li><a href="https://github.com/isaacs/node-glob/commit/59bf9ca211bda5636c4fe9e32d41530c90a4f30d"><code>59bf9ca</code></a> fix notes</li> <li><a href="https://github.com/isaacs/node-glob/commit/dde4fa66c87e24b37bb5be28ed10c6e12019edac"><code>dde4fa6</code></a> docs(README): add #anchor and improve <code>note</code>s</li> <li><a href="https://github.com/isaacs/node-glob/commit/0559b0ed13c0f8147cd2ac9d48bb49684caaf20e"><code>0559b0e</code></a> docs: add better links to path-scurry docs</li> <li><a href="https://github.com/isaacs/node-glob/commit/c9773c249b4b9ed6b2447222c226f9d20c6ce916"><code>c9773c2</code></a> fix: correct typos in <code>README.md</code></li> <li><a href="https://github.com/isaacs/node-glob/commit/13e68eadbc4f0aacd9d6ffbcb4b28a34d5d8512c"><code>13e68ea</code></a> Fix punctuation in traversal function documentation</li> <li><a href="https://github.com/isaacs/node-glob/commit/1527e2b8107e95122ab6e9b6f6312f121693d53d"><code>1527e2b</code></a> fix repo url</li> <li><a href="https://github.com/isaacs/node-glob/commit/7e190e8776a7fa66fba40827de5f9effd1c52f9d"><code>7e190e8</code></a> fix typo <code>maths</code> → <code>paths</code></li> <li>Additional commits viewable in <a href="https://github.com/isaacs/node-glob/compare/v11.0.3...v11.1.0">compare view</a></li> </ul> </details> <br /> Updates `npm` from 11.6.2 to 11.6.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/releases">npm's releases</a>.</em></p> <blockquote> <h2>v11.6.4</h2> <h2><a href="https://github.com/npm/cli/compare/v11.6.3...v11.6.4">11.6.4</a> (2025-11-25)</h2> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/dfb83c7887810abd555a2ab62a681858aabe2430"><code>dfb83c7</code></a> <a href="https://redirect.github.com/npm/cli/pull/8749">#8749</a> add example for keywords field (<a href="https://redirect.github.com/npm/cli/issues/8749">#8749</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1b1e227d234dc6132832e1a65141260d3601838b"><code>1b1e227</code></a> <a href="https://redirect.github.com/npm/cli/pull/8750">#8750</a> remove outdated roadmap link (<a href="https://redirect.github.com/npm/cli/issues/8750">#8750</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1333d576448c3868a29a65cf9cfb0d07ccfccd93"><code>1333d57</code></a> <a href="https://redirect.github.com/npm/cli/pull/8752">#8752</a> clarify .npmrc naming convention for environment variable overrides (<a href="https://redirect.github.com/npm/cli/issues/8752">#8752</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/22cddb83f884c179258dabe6f20954246074c623"><code>22cddb8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8755">#8755</a> add workspace dependencies example to workspaces (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/17e154cac7394b1baa3987c5b9b168762d9ba4ad"><code>17e154c</code></a> <a href="https://redirect.github.com/npm/cli/pull/8756">#8756</a> standardize env vars to uppercase convention (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1e51a25d02508fbfa1d5d53602d35669115e55ff"><code>1e51a25</code></a> <a href="https://redirect.github.com/npm/cli/pull/8754">#8754</a> fix lifecycle event order for prepare script (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/8d72bc99dc705e04e25f24b05cac0f72934608b4"><code>8d72bc9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8753">#8753</a> add os, cpu, and funding fields to package-lock.json (Max Black)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f56bb133bbd07f92b32f776f310bcd2aa26cbdfc"><code>f56bb13</code></a> <a href="https://redirect.github.com/npm/cli/pull/8779">#8779</a> <code>proc-log@6.1.0</code> (<a href="https://redirect.github.com/npm/cli/issues/8779">#8779</a>)</li> <li><a href="https://github.com/npm/cli/commit/f96322350e497f90a54c8a1cfd952b3329f00492"><code>f963223</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>proggy@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/f51e4aaf06ac6703abe053a95fe25b8efca3c527"><code>f51e4aa</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>nopt@9.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/2d15040390697cd78c9a9db3f0dbafab51a6e3e9"><code>2d15040</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/query@5.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/9d77b84ce961a28941af8b1a597a03e308828cd4"><code>9d77b84</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/installed-package-contents@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/e2ac092fdab0ccbf3b20abbac7ff1ebb7cda9a88"><code>e2ac092</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>read@5.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/6e5bfd93f5423ab0b89fd81493969af108438066"><code>6e5bfd9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>init-package-json@8.2.4</code></li> <li><a href="https://github.com/npm/cli/commit/7f8e2376e289fc46410f68b7c686d3868ad837c0"><code>7f8e237</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>p-map@7.0.4</code></li> <li><a href="https://github.com/npm/cli/commit/a4aa218fa0a3cc5fc65bc516bc4c83fd4bac7fd8"><code>a4aa218</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>npm-user-validate@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/643044690be9554366e0cbd5bc42afa77c4acc45"><code>6430446</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>npm-audit-report@7.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/58650dc089c74d090c51d1cb2f269f2d605dcca0"><code>58650dc</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/fs@5.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/4a11146aa7e3d06c42793ef5daf3c19b37bdc7ce"><code>4a11146</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>glob@13.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/00511d426a7f8d761700b315a0f660854a782353"><code>00511d4</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/cacache@20.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/224afa27174f43695ac308de9f849529419a59b2"><code>224afa2</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/map-workspaces@5.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/664ac341efef746ac47d08fcd8cc4cc105f1445b"><code>664ac34</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/package-json@7.0.4</code></li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.1.8">workspace</a>: <code>@npmcli/arborist@9.1.8</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.4.4">workspace</a>: <code>@npmcli/config@10.4.4</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.0.11">workspace</a>: <code>libnpmdiff@8.0.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.1.10">workspace</a>: <code>libnpmexec@10.1.10</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.11">workspace</a>: <code>libnpmfund@7.0.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.0.11">workspace</a>: <code>libnpmpack@9.0.11</code></li> </ul> <h2>v11.6.3</h2> <h2><a href="https://github.com/npm/cli/compare/v11.6.2...v11.6.3">11.6.3</a> (2025-11-19)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/c6242d92e5227e0a772d9cfe474ea57776af79e0"><code>c6242d9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8706">#8706</a> change npm profile to create tokens with GAT support (<a href="https://redirect.github.com/npm/cli/issues/8706">#8706</a>) (<a href="https://github.com/owlstronaut"><code>@​owlstronaut</code></a>, <a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/cbc6fa9cd7c582053be77a56677191313c7e8d98"><code>cbc6fa9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8731">#8731</a> order of version information in error message (<a href="https://redirect.github.com/npm/cli/issues/8731">#8731</a>) (<a href="https://github.com/piotrd"><code>@​piotrd</code></a>, <a href="https://github.com/pd-be"><code>@​pd-be</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/11dbd7e36287695801f02a43e53b24fc2d72a545"><code>11dbd7e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8709">#8709</a> display full token when creating authentication tokens (<a href="https://redirect.github.com/npm/cli/issues/8709">#8709</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/49a4eefd613dbb60bcff3dac39129f70586d3cff"><code>49a4eef</code></a> <a href="https://redirect.github.com/npm/cli/pull/8676">#8676</a> use look behind regex for trailing slash stripping (<a href="https://redirect.github.com/npm/cli/issues/8676">#8676</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/b1aee62082d7b25ec07f64e906afd76840907fbd"><code>b1aee62</code></a> <a href="https://redirect.github.com/npm/cli/pull/8645">#8645</a> dep flag calculation (<a href="https://redirect.github.com/npm/cli/issues/8645">#8645</a>) (<a href="https://github.com/liamcmitchell"><code>@​liamcmitchell</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/ca53c21e8a0f0e659e891415735e184443b8f48b"><code>ca53c21</code></a> <a href="https://redirect.github.com/npm/cli/pull/8745">#8745</a> add workspace usage examples (<a href="https://redirect.github.com/npm/cli/issues/8745">#8745</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/e71ca0e1934b805c97485b39501653655a54c919"><code>e71ca0e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8746">#8746</a> add --save flag to documentation (<a href="https://redirect.github.com/npm/cli/issues/8746">#8746</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/06510a8720fa180e9ef9093d9caee2e85bbc5165"><code>06510a8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8683">#8683</a> add ignore-scripts option to npm version help and docs (<a href="https://redirect.github.com/npm/cli/issues/8683">#8683</a>) (<a href="https://github.com/Tejas242"><code>@​Tejas242</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/7f7223833b9f655ea82039cf389ed8d03fb3b212"><code>7f72238</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>cacache@20.0.2</code></li> <li><a href="https://github.com/npm/cli/commit/7ac9db8564312ffd57a8f622634d6f3de080c472"><code>7ac9db8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>init-package-json@8.2.3</code></li> <li><a href="https://github.com/npm/cli/commit/41e97c65d1d9d0bf7fa80d4b018ff4c051b1487b"><code>41e97c6</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>validate-npm-package-name@7.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/6b1fbe1ef3db7f5782809abdcdf6c53ff7542330"><code>6b1fbe1</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>npm-package-arg@13.0.2</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/blob/latest/CHANGELOG.md">npm's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/cli/compare/v11.6.3...v11.6.4">11.6.4</a> (2025-11-25)</h2> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/dfb83c7887810abd555a2ab62a681858aabe2430"><code>dfb83c7</code></a> <a href="https://redirect.github.com/npm/cli/pull/8749">#8749</a> add example for keywords field (<a href="https://redirect.github.com/npm/cli/issues/8749">#8749</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1b1e227d234dc6132832e1a65141260d3601838b"><code>1b1e227</code></a> <a href="https://redirect.github.com/npm/cli/pull/8750">#8750</a> remove outdated roadmap link (<a href="https://redirect.github.com/npm/cli/issues/8750">#8750</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1333d576448c3868a29a65cf9cfb0d07ccfccd93"><code>1333d57</code></a> <a href="https://redirect.github.com/npm/cli/pull/8752">#8752</a> clarify .npmrc naming convention for environment variable overrides (<a href="https://redirect.github.com/npm/cli/issues/8752">#8752</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/22cddb83f884c179258dabe6f20954246074c623"><code>22cddb8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8755">#8755</a> add workspace dependencies example to workspaces (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/17e154cac7394b1baa3987c5b9b168762d9ba4ad"><code>17e154c</code></a> <a href="https://redirect.github.com/npm/cli/pull/8756">#8756</a> standardize env vars to uppercase convention (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/1e51a25d02508fbfa1d5d53602d35669115e55ff"><code>1e51a25</code></a> <a href="https://redirect.github.com/npm/cli/pull/8754">#8754</a> fix lifecycle event order for prepare script (Max Black)</li> <li><a href="https://github.com/npm/cli/commit/8d72bc99dc705e04e25f24b05cac0f72934608b4"><code>8d72bc9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8753">#8753</a> add os, cpu, and funding fields to package-lock.json (Max Black)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f56bb133bbd07f92b32f776f310bcd2aa26cbdfc"><code>f56bb13</code></a> <a href="https://redirect.github.com/npm/cli/pull/8779">#8779</a> <code>proc-log@6.1.0</code> (<a href="https://redirect.github.com/npm/cli/issues/8779">#8779</a>)</li> <li><a href="https://github.com/npm/cli/commit/f96322350e497f90a54c8a1cfd952b3329f00492"><code>f963223</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>proggy@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/f51e4aaf06ac6703abe053a95fe25b8efca3c527"><code>f51e4aa</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>nopt@9.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/2d15040390697cd78c9a9db3f0dbafab51a6e3e9"><code>2d15040</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/query@5.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/9d77b84ce961a28941af8b1a597a03e308828cd4"><code>9d77b84</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/installed-package-contents@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/e2ac092fdab0ccbf3b20abbac7ff1ebb7cda9a88"><code>e2ac092</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>read@5.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/6e5bfd93f5423ab0b89fd81493969af108438066"><code>6e5bfd9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>init-package-json@8.2.4</code></li> <li><a href="https://github.com/npm/cli/commit/7f8e2376e289fc46410f68b7c686d3868ad837c0"><code>7f8e237</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>p-map@7.0.4</code></li> <li><a href="https://github.com/npm/cli/commit/a4aa218fa0a3cc5fc65bc516bc4c83fd4bac7fd8"><code>a4aa218</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>npm-user-validate@4.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/643044690be9554366e0cbd5bc42afa77c4acc45"><code>6430446</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>npm-audit-report@7.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/58650dc089c74d090c51d1cb2f269f2d605dcca0"><code>58650dc</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/fs@5.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/4a11146aa7e3d06c42793ef5daf3c19b37bdc7ce"><code>4a11146</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>glob@13.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/00511d426a7f8d761700b315a0f660854a782353"><code>00511d4</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/cacache@20.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/224afa27174f43695ac308de9f849529419a59b2"><code>224afa2</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/map-workspaces@5.0.3</code></li> <li><a href="https://github.com/npm/cli/commit/664ac341efef746ac47d08fcd8cc4cc105f1445b"><code>664ac34</code></a> <a href="https://redirect.github.com/npm/cli/pull/8770">#8770</a> <code>@npmcli/package-json@7.0.4</code></li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.1.8">workspace</a>: <code>@npmcli/arborist@9.1.8</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.4.4">workspace</a>: <code>@npmcli/config@10.4.4</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.0.11">workspace</a>: <code>libnpmdiff@8.0.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.1.10">workspace</a>: <code>libnpmexec@10.1.10</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.11">workspace</a>: <code>libnpmfund@7.0.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.0.11">workspace</a>: <code>libnpmpack@9.0.11</code></li> </ul> <h2><a href="https://github.com/npm/cli/compare/v11.6.2...v11.6.3">11.6.3</a> (2025-11-19)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/c6242d92e5227e0a772d9cfe474ea57776af79e0"><code>c6242d9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8706">#8706</a> change npm profile to create tokens with GAT support (<a href="https://redirect.github.com/npm/cli/issues/8706">#8706</a>) (<a href="https://github.com/owlstronaut"><code>@​owlstronaut</code></a>, <a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/cbc6fa9cd7c582053be77a56677191313c7e8d98"><code>cbc6fa9</code></a> <a href="https://redirect.github.com/npm/cli/pull/8731">#8731</a> order of version information in error message (<a href="https://redirect.github.com/npm/cli/issues/8731">#8731</a>) (<a href="https://github.com/piotrd"><code>@​piotrd</code></a>, <a href="https://github.com/pd-be"><code>@​pd-be</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/11dbd7e36287695801f02a43e53b24fc2d72a545"><code>11dbd7e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8709">#8709</a> display full token when creating authentication tokens (<a href="https://redirect.github.com/npm/cli/issues/8709">#8709</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/49a4eefd613dbb60bcff3dac39129f70586d3cff"><code>49a4eef</code></a> <a href="https://redirect.github.com/npm/cli/pull/8676">#8676</a> use look behind regex for trailing slash stripping (<a href="https://redirect.github.com/npm/cli/issues/8676">#8676</a>) (<a href="https://github.com/wraithgar"><code>@​wraithgar</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/b1aee62082d7b25ec07f64e906afd76840907fbd"><code>b1aee62</code></a> <a href="https://redirect.github.com/npm/cli/pull/8645">#8645</a> dep flag calculation (<a href="https://redirect.github.com/npm/cli/issues/8645">#8645</a>) (<a href="https://github.com/liamcmitchell"><code>@​liamcmitchell</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/ca53c21e8a0f0e659e891415735e184443b8f48b"><code>ca53c21</code></a> <a href="https://redirect.github.com/npm/cli/pull/8745">#8745</a> add workspace usage examples (<a href="https://redirect.github.com/npm/cli/issues/8745">#8745</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/e71ca0e1934b805c97485b39501653655a54c919"><code>e71ca0e</code></a> <a href="https://redirect.github.com/npm/cli/pull/8746">#8746</a> add --save flag to documentation (<a href="https://redirect.github.com/npm/cli/issues/8746">#8746</a>) (<a href="https://github.com/MaxBlack-dev"><code>@​MaxBlack-dev</code></a>, Max Black)</li> <li><a href="https://github.com/npm/cli/commit/06510a8720fa180e9ef9093d9caee2e85bbc5165"><code>06510a8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8683">#8683</a> add ignore-scripts option to npm version help and docs (<a href="https://redirect.github.com/npm/cli/issues/8683">#8683</a>) (<a href="https://github.com/Tejas242"><code>@​Tejas242</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/7f7223833b9f655ea82039cf389ed8d03fb3b212"><code>7f72238</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>cacache@20.0.2</code></li> <li><a href="https://github.com/npm/cli/commit/7ac9db8564312ffd57a8f622634d6f3de080c472"><code>7ac9db8</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>init-package-json@8.2.3</code></li> <li><a href="https://github.com/npm/cli/commit/41e97c65d1d9d0bf7fa80d4b018ff4c051b1487b"><code>41e97c6</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>validate-npm-package-name@7.0.0</code></li> <li><a href="https://github.com/npm/cli/commit/6b1fbe1ef3db7f5782809abdcdf6c53ff7542330"><code>6b1fbe1</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>npm-package-arg@13.0.2</code></li> <li><a href="https://github.com/npm/cli/commit/aa1d486a4e4a82de16d4c63154a1b1a89ad09e6d"><code>aa1d486</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>@npmcli/promise-spawn@9.0.1</code></li> <li><a href="https://github.com/npm/cli/commit/599c819e525f235bab08c9395e7f357d4d2454a6"><code>599c819</code></a> <a href="https://redirect.github.com/npm/cli/pull/8723">#8723</a> <code>which@6.0.0</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/cli/commit/52714855e62a196fb853872f5106803605ab0ec4"><code>5271485</code></a> chore: release 11.6.4</li> <li><a href="https://github.com/npm/cli/commit/f56bb133bbd07f92b32f776f310bcd2aa26cbdfc"><code>f56bb13</code></a> deps: proc-log@6.1.0 (<a href="https://redirect.github.com/npm/cli/issues/8779">#8779</a>)</li> <li><a href="https://github.com/npm/cli/commit/b1183644faea618ee36af513c5bfc3387ada0f7e"><code>b118364</code></a> fix: undefined override set conflicts shouldn't error</li> <li><a href="https://github.com/npm/cli/commit/dfb83c7887810abd555a2ab62a681858aabe2430"><code>dfb83c7</code></a> docs: add example for keywords field (<a href="https://redirect.github.com/npm/cli/issues/8749">#8749</a>)</li> <li><a href="https://github.com/npm/cli/commit/1b1e227d234dc6132832e1a65141260d3601838b"><code>1b1e227</code></a> docs: remove outdated roadmap link (<a href="https://redirect.github.com/npm/cli/issues/8750">#8750</a>)</li> <li><a href="https://github.com/npm/cli/commit/1333d576448c3868a29a65cf9cfb0d07ccfccd93"><code>1333d57</code></a> docs: clarify .npmrc naming convention for environment variable overrides (<a href="https://redirect.github.com/npm/cli/issues/8">#8</a>...</li> <li><a href="https://github.com/npm/cli/commit/22cddb83f884c179258dabe6f20954246074c623"><code>22cddb8</code></a> docs: add workspace dependencies example to workspaces</li> <li><a href="https://github.com/npm/cli/commit/17e154cac7394b1baa3987c5b9b168762d9ba4ad"><code>17e154c</code></a> docs: standardize env vars to uppercase convention</li> <li><a href="https://github.com/npm/cli/commit/1e51a25d02508fbfa1d5d53602d35669115e55ff"><code>1e51a25</code></a> docs: fix lifecycle event order for prepare script</li> <li><a href="https://github.com/npm/cli/commit/8d72bc99dc705e04e25f24b05cac0f72934608b4"><code>8d72bc9</code></a> docs: add os, cpu, and funding fields to package-lock.json</li> <li>Additional commits viewable in <a href="https://github.com/npm/cli/compare/v11.6.2...v11.6.4">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/fosrl/pangolin/network/alerts). </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-04-16 09:35:45 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
api
authentication
bug
config
dependencies
docker
documentation
enhancement
good first issue
help wanted
Improvement
Look Into
needs investigating
networking
new feature
non-critical bug
potential bug
pull-request
Mirrored from GitHub Pull Request
 question
reverse proxy
Security
stale
ui
wontfix
No Label pull-request
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
GiteaMirror ninjasurge
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/pangolin#2771
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?