chore(deps): update npm to v11

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
npm (source)	10.9.2 -> 11.6.0

---

Release Notes

npm/cli (npm)

v11.6.0

Compare Source

Features

• bdcc10d #​8359 add support for optional env var replacements in .npmrc (#​8359) (@​aczekajski, @​owlstronaut)

Bug Fixes

• dd4cee9 #​8539 powershell: improve argument parsing (#​8539) (@​alexsch01)
• 5f18557 #​8532 powershell: fix issue with modified InvocationName (#​8532) (@​alexsch01)
• 9e5abf1 #​8529 add redaction to log format egress (#​8529) (@​wraithgar)
• 75ce64a #​8524 revert handle signal exits gracefully (#​8524) (@​owlstronaut)
• 5d82d0b #​8469 ps1 scripts in powershell 5.1 (#​8469) (@​splatteredbits)

Dependencies

• workspace: @npmcli/arborist@9.1.4
• workspace: @npmcli/config@10.4.0
• workspace: libnpmdiff@8.0.7
• workspace: libnpmexec@10.1.6
• workspace: libnpmfund@7.0.7
• workspace: libnpmpack@9.0.7

v11.5.2

Compare Source

Bug Fixes

• 7d900c4 #​8467 oidc visibility check for provenance (#​8467) (@​reggi, @​wraithgar)

Documentation

• d4e56b2 #​8459 update snapshot generation command (#​8459) (@​MikeMcC399)

v11.5.1

Compare Source

Bug Fixes

• 476bf17 #​8457 provenance should only default for oidc (@​reggi)

v11.5.0

Compare Source

Features

• 1cce318 #​8336 adds support for oidc publish (#​8336) (@​reggi)

Bug Fixes

• 7f66f0a #​8447 add better hint for before and clean up description (@​wraithgar)
• 280817a #​8447 add --before param to command help output (@​wraithgar)
• 6e47325 #​8441 Makes 404 errors less scary without revealing existence (#​8441) (@​owlstronaut)
• 0a97ffd #​8429 handle signal exits gracefully (@​owlstronaut)
• 5b858c6 #​8411 ensure progress bars display consistently across all environments (#​8411) (@​owlstronaut)

Documentation

• ef3529e #​8435 add test snapshot (#​8435) (@​reggi, @​wraithgar)
• b7758d7 #​8418 remove reference to Node.js download less common os (#​8418) (@​MikeMcC399)
• 746ac5d #​8380 remove duplicate info (#​8380) (@​alexsch01)
• 4673e9c #​8371 rebrand OS X references to macOS (@​MikeMcC399)

Dependencies

• 398fed4 #​8450 normalize-package-data@7.0.1
• 5b242c9 #​8450 validate-npm-package-name@6.0.2
• d4e8a8a #​8450 tuf-js@3.1.0
• e1b37b2 #​8450 picomatch@4.0.3
• 3cb5884 #​8450 socks@2.8.6
• daea981 #​8450 ci-info@4.3.0
• 39ad47d #​8450 aproba@2.1.0
• a789f33 #​8450 agent-base@7.1.4
• 1c0d257 #​8450 @npmcli/metavuln-calculator@9.0.1

Chores

• 804a964 #​8450 update devDependencies in lockfile (@​wraithgar)
• 643ae71 #​8450 update mock-registry to use local arborist (@​wraithgar)
• cf023d7 #​8421 contributing: prepare easier copy-paste contributing commands (#​8421) (@​MikeMcC399)
• 3f60b5f #​8383 @npmcli/template-oss@4.24.4 (#​8383) (@​wraithgar)
• 01f8cc6 #​8381 @npmcli/template-oss@4.24.3 (#​8381) (@​wraithgar)
• workspace: @npmcli/arborist@9.1.3
• workspace: @npmcli/config@10.3.1
• workspace: libnpmdiff@8.0.6
• workspace: libnpmexec@10.1.5
• workspace: libnpmfund@7.0.6
• workspace: libnpmpack@9.0.6
• workspace: libnpmpublish@11.1.0

v11.4.2

Compare Source

Bug Fixes

• f2d6947 #​8345 move warning to new line when npm init is canceled (@​mbtools)
• e758dd7 #​8318 powershell: multiple Invoke-Expression fixes (#​8318) (@​alexsch01)

Documentation

• 7233cb3 #​8355 remove deprecated section related temp files (#​8355) (@​milaninfy)
• fb7a498 #​8351 clarify shell used for script (#​8351) (@​milaninfy)
• 8b55d38 #​8329 Rename "command" to "script" (#​8329) (@​DanKaplanSES)

Dependencies

• 7b05420 #​8358 fdir@6.4.6
• e1a3b23 #​8358 tinyglobby@0.2.14
• 522efa2 #​8358 socks@2.8.5
• 7a0723f #​8358 debug@4.4.1
• 9a342a4 #​8358 brace-expansion@2.0.2
• e691ba0 #​8358 @sigstore/protobuf-specs@0.4.3
• 42ef765 #​8358 validate-npm-package-name@6.0.1
• 774c0b1 #​8358 @npmcli/redact@3.2.2
• dda6f87 #​8317 @npmcli/package-json@6.2.0
• bc08ac7 #​8317 remove normalize-package-data

Chores

• 0ad1444 #​8358 dev dependency updates (@​wraithgar)
• workspace: @npmcli/arborist@9.1.2
• workspace: libnpmdiff@8.0.5
• workspace: libnpmexec@10.1.4
• workspace: libnpmfund@7.0.5
• workspace: libnpmpack@9.0.5
• workspace: libnpmpublish@11.0.1

v11.4.1

Compare Source

Documentation

• 3ed764a #​8308 Clarify script working directory behavior (fixes #​8305) (#​8308) (@​tarekwfa0110, @​owlstronaut)

Chores

• 2f30251 #​8314 remove references to skimdb.npmjs.com (#​8314) (@​shmam)
• 9cb9d50 #​8298 add contributor to changelog entry (#​8298) (@​wraithgar)

Dependencies

• workspace: @npmcli/arborist@9.1.1
• workspace: libnpmdiff@8.0.4
• workspace: libnpmexec@10.1.3
• workspace: libnpmfund@7.0.4
• workspace: libnpmpack@9.0.4

v11.4.0

Compare Source

Features

• a0e60fb #​8246 added init-private option (@​owlstronaut)
• 57aa89f #​8265 use run by default and run-script as the alias (#​8265) (@​owlstronaut)
• 0d4c023 #​8234 install: add package info to json output (#​8234) (@​wraithgar)

Bug Fixes

• 8794fd9 #​8297 powershell: support pipeline input with Invoke-Expression (#​8297) (@​alexsch01)
• b5173d1 #​8293 docs: corrected github_path (#​8293) (@​xaos7991)
• 2210d7a #​8278 powershell: use Invoke-Expression to pass args (#​8278) (@​alexsch01, @​mbtools)
• 8669d09 #​8228 add otplease for enable-2fa, disable-2fa, access (#​8228) (@​reggi, @​wraithgar)
• 78b5a6f #​8269 correctly handle scenario where prefix is the cwd (#​8269) (@​owlstronaut, @​ficocelliguy)
• fdc3413 #​8221 exec: Fails to Execute Binaries Named After Shell Keywords (#​8221) (@​13sfaith)
• 4b08e2e #​8245 docs: prepare script runs for local package links (@​milaninfy)
• 1622ac4 #​8241 handle missing time in packument to prevent crash on npm view (@​owlstronaut)
• db8f5da #​8110 outdated: add dependent location in long output (#​8110) (@​milaninfy, @​wraithgar)

Documentation

• d2498df #​8295 Remove CHANGELOG from never-ignored list (#​8295) (@​mrazauskas)
• 4d5c3c1 #​8283 fix overrides example in package-json.md (#​8283) (@​glasser)
• 96cc4f9 #​8226 format publish as code to highlight it (@​LiangYingC)
• 4990ea0 #​8226 clarify legacy token creation in npm login and adduser commands (@​LiangYingC)

Dependencies

• c97ef8a #​8246 init-package-json@8.2.1
• f48613d #​8292 @sigstore/verify@2.1.1
• a4c5e74 #​8292 tinyglobby@0.2.13
• b9156d2 #​8292 http-cache-semantics@4.2.0
• 472a685 #​8292 binary-extensions@3.1.0
• 988696e #​8292 @sigstore/tuf@3.1.1
• 569ac84 #​8292 semver@7.7.2
• 2521c9b #​8233 @sigstore/protobuf-specs@0.4.1
• 3274d68 #​8233 @npmcli/query@4.0.1
• c263626 #​8233 abbrev@3.0.1
• 78df711 #​8233 hosted-git-info@8.1.0

Chores

• e80e38e #​8292 dev dependency updates (@​wraithgar)
• 3231ee9 #​8244 update snapshots (@​owlstronaut)
• c561a33 #​8233 dev dependency updates (@​owlstronaut)
• 7eca19c #​8215 update workflow permissions for updating Node PR (@​owlstronaut)
• workspace: @npmcli/arborist@9.1.0
• workspace: @npmcli/config@10.3.0
• workspace: libnpmaccess@10.0.1
• workspace: libnpmdiff@8.0.3
• workspace: libnpmexec@10.1.2
• workspace: libnpmfund@7.0.3
• workspace: libnpmpack@9.0.3
• workspace: libnpmteam@8.0.1
• workspace: libnpmversion@8.0.1

v11.3.0

Compare Source

Features

• b306d25 #​8129 add node-gyp as actual config (@​wraithgar)

Bug Fixes

• 2f5392a #​8135 make npm run autocomplete work with workspaces (#​8135) (@​terrainvidia)

Documentation

• 26b6454 fix grammer in local path note (@​cgay)
• 1c0e83d #​7886 fix typo in package-json.md (#​7886) (@​stoneLeaf)
• 14efa57 #​8178 fix example package name in overrides explainer (#​8178) (@​G-Rath)
• 4183cba #​8162 logging: replace proceeding with preceding in loglevels details (#​8162) (@​tyleralbee)

Dependencies

• e57f112 #​8207 minipass-fetch@4.0.1
• 3daabb1 #​8207 minizlib@3.0.2
• c7a7527 #​8207 ci-info@4.2.0
• 20b09b6 #​8207 node-gyp@11.2.0
• 679bc4a #​8129 @npmcli/run-script@9.1.0

Chores

• 3fbed84 #​8207 install rimraf as a devdependency for smoke tests (@​owlstronaut)
• 43f0b41 #​8207 dev dependency updates (@​wraithgar)
• 26803bc #​8147 release integration node 23 yml (#​8147) (@​reggi)
• d679a1a #​8146 release integration node 23 (#​8146) (@​reggi)
• workspace: @npmcli/arborist@9.0.2
• workspace: @npmcli/config@10.2.0
• workspace: libnpmdiff@8.0.2
• workspace: libnpmexec@10.1.1
• workspace: libnpmfund@7.0.2
• workspace: libnpmpack@9.0.2

v11.2.0

Compare Source

Features

• b306d25 #​8129 add node-gyp as actual config (@​wraithgar)

Bug Fixes

• 2f5392a #​8135 make npm run autocomplete work with workspaces (#​8135) (@​terrainvidia)

Documentation

• 26b6454 fix grammer in local path note (@​cgay)
• 1c0e83d #​7886 fix typo in package-json.md (#​7886) (@​stoneLeaf)
• 14efa57 #​8178 fix example package name in overrides explainer (#​8178) (@​G-Rath)
• 4183cba #​8162 logging: replace proceeding with preceding in loglevels details (#​8162) (@​tyleralbee)

Dependencies

• e57f112 #​8207 minipass-fetch@4.0.1
• 3daabb1 #​8207 minizlib@3.0.2
• c7a7527 #​8207 ci-info@4.2.0
• 20b09b6 #​8207 node-gyp@11.2.0
• 679bc4a #​8129 @npmcli/run-script@9.1.0

Chores

• 3fbed84 #​8207 install rimraf as a devdependency for smoke tests (@​owlstronaut)
• 43f0b41 #​8207 dev dependency updates (@​wraithgar)
• 26803bc #​8147 release integration node 23 yml (#​8147) (@​reggi)
• d679a1a #​8146 release integration node 23 (#​8146) (@​reggi)
• workspace: @npmcli/arborist@9.0.2
• workspace: @npmcli/config@10.2.0
• workspace: libnpmdiff@8.0.2
• workspace: libnpmexec@10.1.1
• workspace: libnpmfund@7.0.2
• workspace: libnpmpack@9.0.2

v11.1.0

Compare Source

Features

• 1cce318 #​8336 adds support for oidc publish (#​8336) (@​reggi)

Bug Fixes

• 7f66f0a #​8447 add better hint for before and clean up description (@​wraithgar)
• 280817a #​8447 add --before param to command help output (@​wraithgar)
• 6e47325 #​8441 Makes 404 errors less scary without revealing existence (#​8441) (@​owlstronaut)
• 0a97ffd #​8429 handle signal exits gracefully (@​owlstronaut)
• 5b858c6 #​8411 ensure progress bars display consistently across all environments (#​8411) (@​owlstronaut)

Documentation

• ef3529e #​8435 add test snapshot (#​8435) (@​reggi, @​wraithgar)
• b7758d7 #​8418 remove reference to Node.js download less common os (#​8418) (@​MikeMcC399)
• 746ac5d #​8380 remove duplicate info (#​8380) (@​alexsch01)
• 4673e9c #​8371 rebrand OS X references to macOS (@​MikeMcC399)

Dependencies

• 398fed4 #​8450 normalize-package-data@7.0.1
• 5b242c9 #​8450 validate-npm-package-name@6.0.2
• d4e8a8a #​8450 tuf-js@3.1.0
• e1b37b2 #​8450 picomatch@4.0.3
• 3cb5884 #​8450 socks@2.8.6
• daea981 #​8450 ci-info@4.3.0
• 39ad47d #​8450 aproba@2.1.0
• a789f33 #​8450 agent-base@7.1.4
• 1c0d257 #​8450 @npmcli/metavuln-calculator@9.0.1

Chores

• 804a964 #​8450 update devDependencies in lockfile (@​wraithgar)
• 643ae71 #​8450 update mock-registry to use local arborist (@​wraithgar)
• cf023d7 #​8421 contributing: prepare easier copy-paste contributing commands (#​8421) (@​MikeMcC399)
• 3f60b5f #​8383 @npmcli/template-oss@4.24.4 (#​8383) (@​wraithgar)
• 01f8cc6 #​8381 @npmcli/template-oss@4.24.3 (#​8381) (@​wraithgar)
• workspace: @npmcli/arborist@9.1.3
• workspace: @npmcli/config@10.3.1
• workspace: libnpmdiff@8.0.6
• workspace: libnpmexec@10.1.5
• workspace: libnpmfund@7.0.6
• workspace: libnpmpack@9.0.6
• workspace: libnpmpublish@11.1.0

v11.0.0

Compare Source

Documentation

• 8a911da #​7963 ls: removed design change pending section note (#​7963) (@​milaninfy)

Dependencies

• 5319e48 #​7973 remove unnecessary sprintf-js files in node_modules (#​7973)
• d369c77 #​7976 socks-proxy-agent@8.0.5
• 3b2951a #​7976 https-proxy-agent@7.0.6
• a598b7b #​7976 agent-base@7.1.3
• 52bcaf6 #​7976 debug@4.4.0
• aabf345 #​7976 p-map@7.0.3
• 28e8761 #​7976 npm-package-arg@12.0.1

Chores

• ecd7190 #​7976 dev dependency updates (@​wraithgar)
• a07f4e0 #​7976 @npmcli/template-oss@4.23.6 (@​wraithgar)
• 687ab12 #​7970 remove pre-release mode from npm 11 and workspaces (#​7970) (@​wraithgar)
• workspace: @npmcli/arborist@9.0.0
• workspace: @npmcli/config@10.0.0
• workspace: libnpmaccess@10.0.0
• workspace: libnpmdiff@8.0.0
• workspace: libnpmexec@10.0.0
• workspace: libnpmfund@7.0.0
• workspace: libnpmorg@8.0.0
• workspace: libnpmpack@9.0.0
• workspace: libnpmpublish@11.0.0
• workspace: libnpmsearch@9.0.0
• workspace: libnpmteam@8.0.0
• workspace: libnpmversion@8.0.0

v10.9.3

Compare Source

Bug Fixes

• 7cff878 #​8343 powershell: use Invoke-Expression to pass args (#​8343) (@​alexsch01)
• 78dc057 #​8378 stop working around bug fixed in npm-package-arg@12.0.2 (@​TrevorBurnham)
• e510f14 #​8248 docs: 'pacakge' -> 'package' (#​8248) (@​t3hmrman)

Dependencies

• c38ec84 #​8378 validate-npm-package-name@6.0.1
• 72564c5 #​8378 spdx-license-ids@3.0.21
• 20fa199 #​8378 socks@2.8.5
• 48c193a #​8378 socks-proxy-agent@8.0.5
• 00fccfb #​8378 semver@7.7.2
• 5ab8aac #​8378 read@4.1.0
• 224c69e #​8378 p-map@7.0.3
• 1e41678 #​8378 npm-package-arg@12.0.2
• e9cf30e #​8378 nopt@8.1.0
• 2bedf25 #​8378 minizlib@3.0.2
• a795ee0 #​8378 minipass-fetch@4.0.1
• 8ed043c #​8378 https-proxy-agent@7.0.6
• 74518d0 #​8378 http-cache-semantics@4.2.0
• cc7dcfc #​8378 hosted-git-info@8.1.0
• 13aea40 #​8378 foreground-child@3.3.1
• 9c81599 #​8378 exponential-backoff@3.1.2
• b59097f #​8378 node-gyp@11.2.0
• 8b29435 #​8378 debug@4.4.1
• 4c8e170 #​8378 cidr-regex@4.1.3
• 9bb94a3 #​8378 is-cidr@5.1.1
• a1dbb0b #​8378 ci-info@4.2.0
• 0a5f2ff #​8378 chalk@5.4.1
• 7912c9c #​8378 brace-expansion@2.0.2
• 19028b8 #​8378 agent-base@7.1.3
• fd26776 #​8378 abbrev@3.0.1
• dbb23ab #​8378 sigstore@3.1.0
• 92feb9b #​8378 @sigstore/protobuf-specs@0.4.3
• 4fd7174 #​8378 @sigstore/tuf@3.1.1
• b327bc2 #​8378 @npmcli/run-script@9.1.0
• 04e7e1c #​8378 @npmcli/redact@3.2.2.
• 90d2aab #​8378 @npmcli/query@4.0.1
• 2e47537 #​8378 @npmcli/package-json@6.2.0
• a5eb5dd #​8378 @npmcli/git@6.0.3

Chores

• 15e545b #​8384 @npmcli/template-oss@4.24.4 (#​8384) (@​wraithgar)
• fb5a9f2 #​8378 @npmcli/template-oss@4.24.3 (@​wraithgar)
• 19da79a #​8378 dev dependency updates (@​wraithgar)
• workspace: @npmcli/arborist@8.0.1
• workspace: libnpmdiff@7.0.1
• workspace: libnpmexec@9.0.1
• workspace: libnpmfund@6.0.1
• workspace: `libn

---

Configuration

📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.