Visitar URL original
chore(deps): update dependency npm to v12 by renovate[bot] · Pull Request #163 · dborgards/marscript · GitHub
Skip to content

chore(deps): update dependency npm to v12 - #163

Merged
dborgards merged 1 commit into
mainfrom
renovate/npm-12.x
Nov 2, 2026
Merged

dborgards merged 1 commit into
mainfrom
renovate/npm-12.x

Conversation

@renovate

@renovate renovate Bot commented Nov 1, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
npm (source) 11.21.1 → 12.2.1 age confidence

Release Notes

npm/cli (npm)

v12.2.1

Compare Source

Bug Fixes
Dependencies

v12.2.0

Compare Source

Features
Documentation
Dependencies

v12.1.0

Compare Source

Features
Bug Fixes
Documentation
Dependencies
Chores

v12.0.2

Compare Source

Bug Fixes
Documentation
Chores
Dependencies

v12.0.1

Compare Source

Features
Bug Fixes
Documentation
Dependencies
Chores

v12.0.0

Compare Source

⚠️ BREAKING CHANGES
  • npm view --json now always returns an array.
  • npm sbom --sbom-format=cyclonedx now reports the name field from each package's package.json instead of the on-disk directory name. The name, bom-ref, and purl of the root component and of aliased dependencies may change.
  • npm no longer registers man pages with the system when installed globally. man npm-install will no longer work, but npm help install is unaffected.
  • The npm pkg output is no longer forced to json. This means you can get single values without having to worry about wrapping of the values. It also outputs non-json content more similarly to npm view.
  • npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
  • The Twitter and Freenode profile fields have been removed from the npm registry. This means that users will no longer be able to set or view these fields in their npm profiles.
  • npm will no longer attempt to resolve the path to node via whichnode. process.execPath is already set by Node to the resolved real path of the node binary, so the lookup was redundant. Scripts that expected npm to override process.execPath with a PATH-resolved (potentially symlinked) node path may be affected.
  • the --json output of npm pack and npm publish have changed. They are now always consistent, and in the same format.
  • the star, stars and unstar commands have been removed
  • The npm adduser command has been removed. Create and manage user accounts on the npm website, and use npm login to authenticate on the command line.
  • Preserve https protocol when working with git (#​8703)
  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • root `preinstall` now runs before dependencies are installed.
  • unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning. (Unknown .npmrc configs still warn by default; opt into erroring with the new strict-npmrc config.)
  • Dependency lifecycle scripts are now blocked by default unless allowed by the root package's allowScripts policy. After installing, run npm install-scripts approve to record approvals and npm rebuild to execute newly approved scripts.
Chores
Dependencies

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

dborgards pushed a commit that referenced this pull request Nov 2, 2026
## [1.3.6](v1.3.5...v1.3.6) (2026-11-02)

### Bug Fixes

* **renovate:** generate lockfiles with npm 11 ([cae81c7](cae81c7)), closes [npm/cli#9800](npm/cli#9800) [#163](#163)
@renovate
renovate Bot force-pushed the renovate/npm-12.x branch from 2fe97b0 to 61262dd Compare November 2, 2026 06:26
@renovate renovate Bot changed the title chore(deps): update dependency npm to v12 chore(deps): update npm tool constraint to v12 Nov 2, 2026
@renovate
renovate Bot force-pushed the renovate/npm-12.x branch from 61262dd to 4606eb9 Compare November 2, 2026 06:30
@renovate
renovate Bot force-pushed the renovate/npm-12.x branch from 4606eb9 to 152d3cf Compare November 2, 2026 06:39
@renovate renovate Bot changed the title chore(deps): update npm tool constraint to v12 chore(deps): update dependency npm to v12 Nov 2, 2026
@dborgards
dborgards merged commit b15d203 into main Nov 2, 2026
2 checks passed
@dborgards
dborgards deleted the renovate/npm-12.x branch November 2, 2026 06:45
@dborgards

Copy link
Copy Markdown
Owner

🎉 This PR is included in version 1.3.8 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant