chore(deps): update npm to v11 #1358
Conversation
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
66c4631 to
cf9f370
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
cf9f370 to
e3f4991
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
e3f4991 to
d6376e7
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
d6376e7 to
1a56d46
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
1a56d46 to
605c43e
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
605c43e to
b8b2b53
Compare
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
2 times, most recently
from
5a06a09 to
68e1813
Compare
|
Preview for this PR was built for commit |
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
68e1813 to
5481ad7
Compare
|
Preview for this PR was built for commit |
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
5481ad7 to
5fe371e
Compare
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
package-lock.json
Outdated
| "license": "ISC", | ||
| "dependencies": { | ||
| "@apify/docs-search-modal": "^1.2.2", | ||
| "@docusaurus/theme-common": "^3.7.0", | ||
| "@stackql/docusaurus-plugin-hubspot": "^1.1.0", | ||
| "algoliasearch": "^5.19.0", | ||
| "algoliasearch-helper": "^3.22.6", | ||
| "axios": "^1.11.0", | ||
| "axios": "^1.7.9", |
There was a problem hiding this comment.
Bug: Axios Downgrade Causes Security Vulnerabilities
The axios dependency in the apify-docs-theme workspace was unexpectedly downgraded from ^1.11.0 to ^1.7.9. This is an unintended side effect of updating npm from v10 to v11, likely due to different dependency resolution behavior. This downgrade could reintroduce security vulnerabilities, bugs, or compatibility issues.
Locations (1)
|
Preview for this PR was built for commit |
renovate
bot
force-pushed
the
renovate/npm-11.x
branch
from
5fe371e to
6de9779
Compare
|
Preview for this PR was built for commit |
This PR contains the following updates:
10.9.2->11.5.2Release Notes
npm/cli (npm)
v11.5.2Compare Source
Bug Fixes
7d900c4#8467 oidc visibility check for provenance (#8467) (@reggi, @wraithgar)Documentation
d4e56b2#8459 update snapshot generation command (#8459) (@MikeMcC399)v11.5.1Compare Source
Bug Fixes
476bf17#8457 provenance should only default for oidc (@reggi)v11.5.0Compare Source
Features
1cce318#8336 adds support for oidc publish (#8336) (@reggi)Bug Fixes
7f66f0a#8447 add better hint forbeforeand clean up description (@wraithgar)280817a#8447 add --before param to command help output (@wraithgar)6e47325#8441 Makes 404 errors less scary without revealing existence (#8441) (@owlstronaut)0a97ffd#8429 handle signal exits gracefully (@owlstronaut)5b858c6#8411 ensure progress bars display consistently across all environments (#8411) (@owlstronaut)Documentation
ef3529e#8435 add test snapshot (#8435) (@reggi, @wraithgar)b7758d7#8418 remove reference to Node.js download less common os (#8418) (@MikeMcC399)746ac5d#8380 remove duplicate info (#8380) (@alexsch01)4673e9c#8371 rebrand OS X references to macOS (@MikeMcC399)Dependencies
398fed4#8450[email protected]5b242c9#8450[email protected]d4e8a8a#8450[email protected]e1b37b2#8450[email protected]3cb5884#8450[email protected]daea981#8450[email protected]39ad47d#8450[email protected]a789f33#8450[email protected]1c0d257#8450@npmcli/[email protected]Chores
804a964#8450 update devDependencies in lockfile (@wraithgar)643ae71#8450 update mock-registry to use local arborist (@wraithgar)cf023d7#8421 contributing: prepare easier copy-paste contributing commands (#8421) (@MikeMcC399)3f60b5f#8383@npmcli/[email protected](#8383) (@wraithgar)01f8cc6#8381@npmcli/[email protected](#8381) (@wraithgar)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected]v11.4.2Compare Source
Bug Fixes
f2d6947#8345 move warning to new line whennpm initis canceled (@mbtools)e758dd7#8318 powershell: multiple Invoke-Expression fixes (#8318) (@alexsch01)Documentation
7233cb3#8355 remove deprecated section related temp files (#8355) (@milaninfy)fb7a498#8351 clarify shell used for script (#8351) (@milaninfy)8b55d38#8329 Rename "command" to "script" (#8329) (@DanKaplanSES)Dependencies
7b05420#8358[email protected]e1a3b23#8358[email protected]522efa2#8358[email protected]7a0723f#8358[email protected]9a342a4#8358[email protected]e691ba0#8358@sigstore/[email protected]42ef765#8358[email protected]774c0b1#8358@npmcli/[email protected]dda6f87#8317@npmcli/[email protected]bc08ac7#8317 remove normalize-package-dataChores
0ad1444#8358 dev dependency updates (@wraithgar)@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected]v11.4.1Compare Source
Documentation
3ed764a#8308 Clarify script working directory behavior (fixes #8305) (#8308) (@tarekwfa0110, @owlstronaut)Chores
2f30251#8314 remove references to skimdb.npmjs.com (#8314) (@shmam)9cb9d50#8298 add contributor to changelog entry (#8298) (@wraithgar)Dependencies
@npmcli/[email protected][email protected][email protected][email protected][email protected]v11.4.0Compare Source
Features
a0e60fb#8246 added init-private option (@owlstronaut)57aa89f#8265 use run by default and run-script as the alias (#8265) (@owlstronaut)0d4c023#8234 install: add package info to json output (#8234) (@wraithgar)Bug Fixes
8794fd9#8297 powershell: support pipeline input with Invoke-Expression (#8297) (@alexsch01)b5173d1#8293 docs: corrected github_path (#8293) (@xaos7991)2210d7a#8278 powershell: use Invoke-Expression to pass args (#8278) (@alexsch01, @mbtools)8669d09#8228 add otplease for enable-2fa, disable-2fa, access (#8228) (@reggi, @wraithgar)78b5a6f#8269 correctly handle scenario where prefix is the cwd (#8269) (@owlstronaut, @ficocelliguy)fdc3413#8221 exec: Fails to Execute Binaries Named After Shell Keywords (#8221) (@13sfaith)4b08e2e#8245 docs: prepare script runs for local package links (@milaninfy)1622ac4#8241 handle missingtimein packument to prevent crash onnpm view(@owlstronaut)db8f5da#8110 outdated: add dependent location in long output (#8110) (@milaninfy, @wraithgar)Documentation
d2498df#8295 RemoveCHANGELOGfrom never-ignored list (#8295) (@mrazauskas)4d5c3c1#8283 fixoverridesexample in package-json.md (#8283) (@glasser)96cc4f9#8226 format publish as code to highlight it (@LiangYingC)4990ea0#8226 clarify legacy token creation in npm login and adduser commands (@LiangYingC)Dependencies
c97ef8a#8246[email protected]f48613d#8292@sigstore/[email protected]a4c5e74#8292[email protected]b9156d2#8292[email protected]472a685#8292[email protected]988696e#8292@sigstore/[email protected]569ac84#8292[email protected]2521c9b#8233@sigstore/[email protected]3274d68#8233@npmcli/[email protected]c263626#8233[email protected]78df711#8233[email protected]Chores
e80e38e#8292 dev dependency updates (@wraithgar)3231ee9#8244 update snapshots (@owlstronaut)c561a33#8233 dev dependency updates (@owlstronaut)7eca19c#8215 update workflow permissions for updating Node PR (@owlstronaut)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected]v11.3.0Compare Source
Features
b306d25#8129 addnode-gypas actual config (@wraithgar)Bug Fixes
2f5392a#8135 makenpm runautocomplete work with workspaces (#8135) (@terrainvidia)Documentation
26b6454fix grammer in local path note (@cgay)1c0e83d#7886 fix typo in package-json.md (#7886) (@stoneLeaf)14efa57#8178 fix example package name inoverridesexplainer (#8178) (@G-Rath)4183cba#8162 logging: replace proceeding with preceding in loglevels details (#8162) (@tyleralbee)Dependencies
e57f112#8207[email protected]3daabb1#8207[email protected]c7a7527#8207[email protected]20b09b6#8207[email protected]679bc4a#8129@npmcli/[email protected]Chores
3fbed84#8207 install rimraf as a devdependency for smoke tests (@owlstronaut)43f0b41#8207 dev dependency updates (@wraithgar)26803bc#8147 release integration node 23 yml (#8147) (@reggi)d679a1a#8146 release integration node 23 (#8146) (@reggi)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected]v11.2.0Compare Source
Features
b306d25#8129 addnode-gypas actual config (@wraithgar)Bug Fixes
2f5392a#8135 makenpm runautocomplete work with workspaces (#8135) (@terrainvidia)Documentation
26b6454fix grammer in local path note (@cgay)1c0e83d#7886 fix typo in package-json.md (#7886) (@stoneLeaf)14efa57#8178 fix example package name inoverridesexplainer (#8178) (@G-Rath)4183cba#8162 logging: replace proceeding with preceding in loglevels details (#8162) (@tyleralbee)Dependencies
e57f112#8207[email protected]3daabb1#8207[email protected]c7a7527#8207[email protected]20b09b6#8207[email protected]679bc4a#8129@npmcli/[email protected]Chores
3fbed84#8207 install rimraf as a devdependency for smoke tests (@owlstronaut)43f0b41#8207 dev dependency updates (@wraithgar)26803bc#8147 release integration node 23 yml (#8147) (@reggi)d679a1a#8146 release integration node 23 (#8146) (@reggi)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected]v11.1.0Compare Source
Features
1cce318#8336 adds support for oidc publish (#8336) (@reggi)Bug Fixes
7f66f0a#8447 add better hint forbeforeand clean up description (@wraithgar)280817a#8447 add --before param to command help output (@wraithgar)6e47325#8441 Makes 404 errors less scary without revealing existence (#8441) (@owlstronaut)0a97ffd#8429 handle signal exits gracefully (@owlstronaut)5b858c6#8411 ensure progress bars display consistently across all environments (#8411) (@owlstronaut)Documentation
ef3529e#8435 add test snapshot (#8435) (@reggi, @wraithgar)b7758d7#8418 remove reference to Node.js download less common os (#8418) (@MikeMcC399)746ac5d#8380 remove duplicate info (#8380) (@alexsch01)4673e9c#8371 rebrand OS X references to macOS (@MikeMcC399)Dependencies
398fed4#8450[email protected]5b242c9#8450[email protected]d4e8a8a#8450[email protected]e1b37b2#8450[email protected]3cb5884#8450[email protected]daea981#8450[email protected]39ad47d#8450[email protected]a789f33#8450[email protected]1c0d257#8450@npmcli/[email protected]Chores
804a964#8450 update devDependencies in lockfile (@wraithgar)643ae71#8450 update mock-registry to use local arborist (@wraithgar)cf023d7#8421 contributing: prepare easier copy-paste contributing commands (#8421) (@MikeMcC399)3f60b5f#8383@npmcli/[email protected](#8383) (@wraithgar)01f8cc6#8381@npmcli/[email protected](#8381) (@wraithgar)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected]v11.0.0Compare Source
Documentation
8a911da#7963 ls: removed design change pending section note (#7963) (@milaninfy)Dependencies
5319e48#7973 remove unnecessary sprintf-js files in node_modules (#7973)d369c77#7976[email protected]3b2951a#7976[email protected]a598b7b#7976[email protected]52bcaf6#7976[email protected]aabf345#7976[email protected]28e8761#7976[email protected]Chores
ecd7190#7976 dev dependency updates (@wraithgar)a07f4e0#7976@npmcli/[email protected](@wraithgar)687ab12#7970 remove pre-release mode from npm 11 and workspaces (#7970) (@wraithgar)@npmcli/[email protected]@npmcli/[email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected][email protected]v10.9.3Compare Source
Bug Fixes
7cff878#8343 powershell: use Invoke-Expression to pass args (#8343) (@alexsch01)78dc057#8378 stop working around bug fixed in[email protected](@TrevorBurnham)e510f14#8248 docs: 'pacakge' -> 'package' (#8248) (@t3hmrman)Dependencies
c38ec84#8378[email protected]72564c5#8378[email protected]20fa199#8378[email protected]48c193a#8378[email protected]00fccfb#8378[email protected]5ab8aac#8378[email protected]224c69e#8378[email protected]1e41678#8378[email protected]e9cf30e#8378[email protected]2bedf25#8378[email protected]a795ee0#8378[email protected]8ed043c#8378[email protected]74518d0#8378[email protected]cc7dcfc#8378[email protected]13aea40#8378[email protected]9c81599#8378[email protected]b59097f#8378[email protected]8b29435#8378[email protected]4c8e170#8378[email protected]9bb94a3#8378[email protected]a1dbb0b#8378[email protected]0a5f2ff#8378[email protected]7912c9c#8378[email protected]19028b8#8378[email protected]fd26776#8378[email protected]dbb23ab#8378[email protected]92feb9b#8378@sigstore/[email protected]4fd7174#8378@sigstore/[email protected]b327bc2#8378@npmcli/[email protected]04e7e1c#8378@npmcli/[email protected].90d2aab#8378@npmcli/[email protected]2e47537#8378@npmcli/[email protected]a5eb5dd#8378@npmcli/[email protected]Chores
15e545b#8384@npmcli/[email protected](#8384) (@wraithgar)fb5a9f2#8378@npmcli/[email protected](@wraithgar)19da79a#8378 dev dependency updates (@wraithgar)@npmcli/[email protected][email protected][email protected][email protected][email protected]Configuration
📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.