Release: npm@6.4.0 by zkat · Pull Request #43 · npm/cli

zkat · 2018-08-09T00:20:19Z

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

zkat · 2018-08-09T00:20:19Z

Rendered CHANGELOG

@mkhl

…le (#8) As discussed on npm.community[1], the fact that npm registry authentication tokens cannot be defined using environment variables does not seem justified anymore. The restriction is caused by the config loader translating * all `_` to `-` * the whole variable name to lowercase while the credential checker expects a key ending in `:_authToken`. This change fixes the problem by having the credential checker try a key ending in `:-authtoken` after it tried `:_authToken`. Fixes: https://npm.community/t/233Fixes: npm/npm#15565 PR-URL: #8 Credit: @mkhl Reviewed-By: @zkat

@joebowbeer

Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

@valentin2105

Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

@noahbenham

PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

@iarna

REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

@lennym

`npm audit` currently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of `--audit-level` to `npm audit` to allow it to pass if only vulnerabilities below a certain level are found. Example: `npm audit --audit-level=high` will exit with 0 if only low or moderate level vulns are detected. Fixes: https://npm.community/t/245 PR-URL: #31 Credit: @lennym Reviewed-By: @zkat

@olore

) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

@mwarger

added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

@zkat

Credit: @zkat

@Gudahtt

Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

@shesek

Credit: @shesekFixes: shesek/iferr#2

@isaacs

Fixes: isaacs/node-tar#177 Credit: @isaacs

@iarna

Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

iarna · 2018-08-09T02:12:24Z

+
+### DOCUMENTATION
+
+* [`c3ab25f3f`](https://github.com/npm/cli/commit/c3ab25f3f54038a813f765845a72ee9f9d836d7d)


This is really just a chore and doesn't need to be in the changelog.

iarna · 2018-08-09T02:12:37Z

+
+### NEW FEATURES
+
+* [`6e9f04b0b`](https://github.com/npm/cli/commit/6e9f04b0baed007169d4e0c341f097cf133debf7)


wow the implementation for that ended up being waaay better than it originally was

iarna · 2018-08-09T02:13:15Z

🐑

brody2consult · 2018-08-09T02:24:18Z

They just published node-gyp@3.8.0 which now uses request@^2.8.7 to resolve the npm audit issues, hope to see this package and other npm dependencies updated in turn.

ref: nodejs/node-gyp#1521

@rvagg

Credit: @rvagg

zkat · 2018-08-09T03:56:50Z

@brodybits nice! Thanks for pointing that out! And thanks @rvagg for getting the release out! 🎉 I've updated our dep updates and the changelog. 👍

zkat · 2018-08-09T04:42:26Z

npm@6.4.0-next.0 has been tagged and released. This PR will stay open until npm@6.4.0 goes live. 👍

@mterrel

Bumps [tap](https://github.com/tapjs/node-tap) from 15.2.3 to 16.0.1. - [Release notes](https://github.com/tapjs/node-tap/releases) - [Commits](tapjs/tapjs@v15.2.3...v16.0.1) --- updated-dependencies: - dependency-name: tap dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…runcation (fixesnpm#40 npm#43)

…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

iarnaand others added 14 commits August 1, 2018 20:45

doc: file-specifier: Remove stray comment
c3ab25f

docs: Update --dry-run docs (#34)
af98e76
Remove publish from list of commands not affected by dry-run PR-URL: #34 Credit: @joebowbeer Reviewed-By: @zkat

config: stop filtering out non-ipv4 addresses from local-addrs (#35)
84bfd23
Fixes: #986 PR-URL: #35 Credit: @valentin2105 Reviewed-By: @zkat

docs: Improved repository examples (#36)
e2b0f09
PR-URL: #36 Credit: @noahbenham Reviewed-By: @zkat

colors@1.1.2 (#39)
32e6947
REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. PR-URL: #39 Credit: @iarna Reviewed-By: @zkat

cli: don't check for updates to npm when we are updating npm itself (#32
d811461
) PR-URL: #32 Credit: @olore Reviewed-By: @zkat

docs: added a section for usage with process.env (#14)
e2346e7
added a header for usage with process.env to separate section from 'current lifecycle event' and make it easier to find PR-URL: #14 Credit: @mwarger Reviewed-By: @zkat

libcipm@2.0.1
beb96b9
Credit: @zkat

validate-npm-package-license@3.0.4
348fc91
Fixes: kemitchell/validate-npm-package-license.js#8 Credit: @Gudahtt

iferr@1.0.2
e57d345
Credit: @shesekFixes: shesek/iferr#2

tar@4.4.6
46f1c6a
Fixes: isaacs/node-tar#177 Credit: @isaacs

hosted-git-info@2.7.1
50df1bf
Fixes: npm/hosted-git-info#34Fixes: npm/hosted-git-info#32Fixes: npm/hosted-git-info#35 Credit: @iarna Credit: @Erveon Credit: @huochunpeng

zkat added the release label Aug 9, 2018

zkat requested a review from a team as a code owner August 9, 2018 00:20

iarna approved these changes Aug 9, 2018
View reviewed changes

zkat added 2 commits August 8, 2018 20:49

request@2.87.0
866d776

node-gyp@3.8.0
f861c2b
Credit: @rvagg

zkat force-pushed the release-next branch from c68a8b3 to 6e68d60Compare August 9, 2018 03:56

doc: update changelog for npm@6.4.0
dbbb75c

zkat force-pushed the release-next branch from 6e68d60 to dbbb75cCompare August 9, 2018 04:06

zkat added 2 commits August 8, 2018 21:09

update AUTHORS
214ef61

6.4.0-next.0
361226d

6.4.0
58ece89

zkat merged commit 58ece89 into latestAug 15, 2018

kevinjm39 mentioned this pull request May 1, 2022
[Snyk] Upgrade @npmcli/config from 4.0.0 to 4.0.2 kevinjm39/cli#4
Open

soloinovator mentioned this pull request May 11, 2022
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.2 to 2.0.3 soloinovator/cli#15
Open

NOUIY mentioned this pull request May 12, 2022
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.0 to 2.0.3 NOUIY/cli#17
Open

Mhmonicox mentioned this pull request May 12, 2022
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.2 to 2.0.3 Mhmonicox/cli#4
Open

This was referenced May 13, 2022
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.0 to 2.0.3 NOUIY/cli#18
Open
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.0 to 2.0.3 NOUIY/cli#20
Open
[Snyk] Upgrade @npmcli/map-workspaces from 2.0.0 to 2.0.3 NOUIY/cli#21
Open

hojatA1 mentioned this pull request Jun 23, 2023
[Snyk] Fix for 1 vulnerabilities hojatA1/npm.cli#26
Open

EMWickd mentioned this pull request Jun 24, 2023
[Snyk] Fix for 1 vulnerabilities EMWickd/cli#30
Open

varmakarthik12 mentioned this pull request Nov 30, 2023
[Snyk] Fix for 1 vulnerabilities varmakarthik12/cli#38
Closed

Jah-yee pushed a commit to Jah-yee/cli that referenced this pull request Apr 16, 2026
fix(table): flatten nested objects to dot-notation, safe multi-byte t…
bcd2401
…runcation (fixesnpm#40 npm#43)

Jah-yee pushed a commit to Jah-yee/cli that referenced this pull request Apr 16, 2026
Merge pull requestnpm#51from googleworkspace/fix/table-flatten-and-…
e41bd89
…unicode fix(table): flatten nested objects to dot-notation, safe multi-byte truncation (fixesnpm#40 npm#43)

github-actionsBot referenced this pull request in Kevinlee7250/cli Jun 10, 2026
📊 대시보드 데이터 업데이트 (#43)
f038129

github-actionsBot referenced this pull request in Kevinlee7250/cli Jul 1, 2026
🤖 봇 응답 (#43)
d9e914d

github-actionsBot referenced this pull request in Kevinlee7250/cli Jul 7, 2026
🔧 자동 수리 완료 (#43)
f69ecb1

github-actionsBot referenced this pull request in Kevinlee7250/cli Jul 28, 2026
🔥 트렌드 선점 후보 갱신 (#43)
92196a3

github-actionsBot referenced this pull request in Kevinlee7250/cli Aug 22, 2026
🔍 구글 색인 상태 리포트 (#43)
6cab2ae