the npm blog

Happy Friday! 🎉

This week’s release brings two new features, starting with a brand new command: npm set-script that helps you manage your package.json scripts - thanks to the community contribution from @Yash-Singh1 🏆

Also npm exec (no args) now triggers an interactive subshell that enables you to run installed binaries (similar to how scripts from your package.json can access binaries when running npm run).

Update now and give them a try:

npm install -g npm@7

You can see the full changelog for more details:

7.1.0 (2020-12-04)

FEATURES

• 6b1575110 #2237 add npm set-script command (@Yash-Singh1)
• 15d7333f8 add interactive npm exec (@isaacs)

BUG FIXES

• 2a1192e4b #2202 Do not run interactive npm exec in CI when a TTY (@isaacs)

DOCUMENTATION

• 0599cc37d #2271 don’t wrap code block (@ethomson)

DEPENDENCIES

• def85c726 @npmcli/[email protected]
  • fixes running npm exec from file system root folder
• 4c94673ab [email protected]

🎉 Happy Release/Recap Friday! We shipped two releases 🚀 this past week addressing even more user feedback & improving our test coverage.

You can get the latest npm in the usual way:

npm install -g npm@7

7.0.15 (2020-11-27)

DEPENDENCIES

• 00e6028ef @npmcli/[email protected]
  • do not override user-defined shorthand values when saving package.json

BUG FIXES

• 9c3413fbc #2034 #2245 npm link <pkg> should not save package.json (@ruyadorno)

DOCUMENTATION

• 1875347f9 #2196 remove doc on obsolete unsafe-perm flag (@kaizhu256)
• f51e50603 #2200 config.md cleanup (@alexwoollam)
• 997cbdb40 #2238 Fix broken link to package.json documentation (@d-fischer)
• 9da972dc4 #2241 npm star docs cleanup (@ruyadorno)

7.0.14 (2020-11-23)

DEPENDENCIES

• 09d21ab90 @npmcli/[email protected]
  • fix a regression in how scripts are escaped

Hooray, it’s Friday! We made it through Friday the 13th last week, so this week we went ahead and cut two shiny new releases.

Included are several bug fixes that our wonderful users reported to us, as well as some improvements to our Windows compatibility.

You can install the usual way:

npm install -g npm@7

7.0.13 (2020-11-20)

BUG FIXES

• 5fc56b6db npm/statusboard#174 #2204 fix npm unstar command (@ruyadorno)
• 7842b4d4d npm/statusboard#182 #2205 fix npm version usage output (@ruyadorno)
• a0adbf9f8 #2206 #2213 fix: fix flatOptions usage in npm init (@ruyadorno)

DEPENDENCIES

• 3daaf000a @npmcli/[email protected]
  • fixes some windows specific bugs in how paths are handled and compared

DOCUMENTATION

• 084a7b6ad #2210 docs: Fix typo (@HollowMan6)

7.0.12 (2020-11-17)

BUG FIXES

• 7b89576bd #2174 fix running empty scripts with npm run-script (@nlf)
• bc9afb195 #2002 #2184 Preserve builtin conf when installing npm globally (@isaacs)

DEPENDENCIES

• b74c05d88 @npmcli/[email protected]
  • fix windows command-line argument escaping

DOCUMENTATION

• 4e522fdc9 #2179 remove mention to –parseable option from npm audit docs (@Primajin)

Happy Friday the 13th! What better way to tempt the fates on this auspicious day than with an npm CLI release?

This addresses more bugs reported by the wonderful members of our community, including some ERESOLVE errors and missing bin files when upgrading from lockfiles created by npm v6.

Install it in the usual way:

npm install -g npm@7

7.0.11 (2020-11-13)

DEPENDENCIES

• 629a667a9 [email protected]
• de9891bd2 [email protected]
• c3e7aa31c #2123 #1957 @npmcli/[email protected]

BUG FIXES

• a8aa38513 #2134 #2156 Fix cannot read property length of undefined in ERESOLVE explanation code (@isaacs)
• 1dbf0f9bb #2150 #2155 send json errors to stderr, not stdout (@isaacs)
• fd1d7a21b #1927 #2154 Set process.title a bit more usefully (@isaacs)
• 2a80c67ef #2008 #2153 Support legacy auth tokens for registries that use them (@ruyadorno)
• 786e36404 #2017 #2159 pass all options to Arborist for npm ci (@darcyclarke)
• b47ada7d1 #2161 fixed typo (@scarabedore)

Happy Friday 🎉 It’s been a long week but we hope we can brighten your day a bit with another round of releases to npm v7.

You can get the latest release in the usual ways

npm install -g npm@7

7.0.9 (2020-11-06)

BUG FIXES

• 96a0d2802 default the ‘start’ script when server.js present (@isaacs)
• 7716e423e #2075 #2071 print the registry when using 'npm login’ (@Wicked7000)
• 7046fe10c #2122 tests for npm cache command (@nlf)

DEPENDENCIES

• 74325f53b #2124 @npmcli/[email protected]:
  • Export the isServerPackage method
  • Proxy signals to and from foreground child processes
• 0e58e6f6b #1984 #2079 #1923 #606 #2031 @npmcli/[email protected]:
  • Process deps for all link nodes
  • Use junctions instead of symlinks
  • Use @npmcli/move-file instead of fs.rename
• 1dad328a1 #1865 #2106 #2084 [email protected]:
  • Properly set the installation command for prepare scripts when installing git/dir deps
• e090d706c #2097 [email protected]:
  • Do not crash when the package.json file lacks a 'version’ field
• 8fa541a10 [email protected]

7.0.8 (2020-11-03)

DOCUMENTATION

• 052e977b9 #1822 #1247 add section on peerDependenciesMeta field in package.json (@foxxyz)
• 52d32d175 #1970 match npm-exec.md -p usage with lib/exec.js (@dr-js)
• 48ee8d01e #2096 Fix RFC links in changelog (@jtojnar)

BUG FIXES

• 6cd3cd08a Support all conf keys in publishConfig
• a1f9be8a7 #2074 Support publishing any kind of spec, not just directories

DEPENDENCIES

• 545382df6 [email protected]:
  • Support publishing things other than folders
• 7d88f1719 [email protected]
• 823b40a4e [email protected]
• 90bf57826 [email protected]
• e5a413577 [email protected]
• fc5aa7b4a [email protected]
• 9fc1dee13 [email protected]
• 0ea870ec5 [email protected]
• 32fd744ea [email protected]
• fc76f3d9f @npmcli/[email protected]
  • Fix cannot read property 'description' of undefined in npm ls when package-lock.json is corrupted
  • Do not allow peerDependencies to be nested under dependents in any circumstances
  • Always resolve peerDependencies in --prefer-dedupe mode

7.0.7 (2020-10-30)

BUG FIXES

• 3990b422d #2067 use sh as default unix shell, not bash (@isaacs)
• 81d6ceef6 #1975 fix npm exec on folders missing package.json (@ruyadorno)
• 2a680e91a #2083 delete the contents of node_modules only in npm ci (@nlf)
• 2636fe1f4 #2086 disable banner output if loglevel is silent in npm run-script (@macno)

DEPENDENCIES

• 4156f053e @npmcli/[email protected]
  • restore the default npm start script
• 1900ae9ad @npmcli/[email protected]
  • fix errors when processing scripts as root
• 8cb0c166c @npmcli/[email protected]
  • make sure missing bin links get set on reify

Another Tuesday, another release (or three)!

This week we released some bug fixes, a few documentation updates, and some dependency updates while we continue improving the npm 7 experience for everyone.

You can get the latest release in the usual ways

npm install -g npm@7

7.0.6 (2020-10-27)

BUG FIXES

• 46c7f792a #2047 #1935 skip the prompt when in a known ci environment (@nlf)
• f8f6e1fad #2049 properly remove pycache in release script (@MylesBorins)
• 5db95b393 #2050 pack: do not show individual files of bundled deps (@isaacs)
• 3ee8f3b34 #2051 view: Better errors when package.json is not JSON (@isaacs)

DEPENDENCIES

• 99ae633f6 [email protected]
  • respect gitTagVersion = false
• d4173f58d @npmcli/[email protected]
  • do not return empty buffer when stdio is inherited
  • attach child process to returned promise
• c09380fa5 @npmcli/[email protected]
  • forward SIGINT and SIGTERM to children that inherit stdio
• b154861ad @npmcli/[email protected]
• ffea6596b [email protected]
  • support http proxy for https registries

7.0.5 (2020-10-23)

• 77ad86b5e Merge docs deps with main project

7.0.4 (2020-10-23)

DOCUMENTATION

• cc026daf8 docs: npm-dedupe through npm-install
• aec77acf8 #1915 use “dockhand” for faster static documentation generation (@ethomson)
• aeb10d210 #2024 Fix post-install script name (@irajtaghlidi)

BUG FIXES

• 59e8dd6c6 #2015 #2016 Properly set npm_command environment variable.

TESTS

• 39ad1ad9e #2001 npm config tests (@ruyadorno)
• b9c1caa8e #2026 npm owner test and refactor (@ruyadorno)

DEPENDENCIES

• ed6e6a9d3 [email protected]

• b737ee999 #2009 #2007 [email protected]:

  • Maintain order in package.json files array globs
  • Strip slashes from package files list results

• 783965508 #1997 #2000 #2005 @npmcli/[email protected]

  • Ensure that root is added when root.meta is set
  • Include all edges in explain() output when a root edge exists
  • Do not conflict on meta-peers that will not be replaced
  • Install peerOptionals if explicitly requested, or dev

Hello everyone 😄 happy npm7 patch-release day! In the last week we had a bunch of fixes that you can now get with: npm install -g npm@7.

It includes some fixes for installing peer dependencies, add/update documentation and a number of bug fixes, including some community contributions that you can check over here in the changelogs:

7.0.3 (2020-10-20)

BUG FIXES

• ce4724a38 #1986 check result when determining exit code of ls <filter> (@G-Rath)
• 00d926f8d #1987 don’t suppress run output when --silent is passed (@G-Rath)
• 043da2347 improve cache clear error message (@isaacs)

DOCUMENTATION

• a57f5c466 update docs for: access, adduser, audit, bin, bugs, build, cache, ci, completion, config and dedupe (@isaacs)
• 5b88b72b9 remove the long-gone bundle command (@isaacs)
• ae09aa5c1 #1993 document –save-peer as a common option to npm install (@JakeChampion)
• c9993e6b1 #1982 fix url links for init-package-json/node-semver (@takenspc)

DEPENDENCIES

• 5d9df8395 [email protected]

7.0.2 (2020-10-16)

DOCUMENTATION

• 9476734b7 #1967 add mention to workspaces prepare lifecycle (@ruyadorno)

BUG FIXES

• 5cf71c689 #1971 owner rm at local pkg not work (@ShangguanQuail)

DEPENDENCIES

• 722b7ae63 #1974 patch node-gyp (@targos)
• 4ae825c01 #1976 patch node-gyp (@MylesBorins)
• 181eabf13 @npmcli/[email protected]
  • fix workspaces prepare lifecycle scripts
  • fix peer deps overchecks resulting in ERESOLVE
• 6cc115409 [email protected]
• dbf9d6d1f [email protected]

7.0.1 (2020-10-15)

DOCUMENTATION

• 03fca6a3b Adds docs on workspaces, explaining its basic concept and how to use it. (@ruyadorno)

BUG FIXES

• 2ccb63659 #1951 #1956 Handle errors from audit endpoint appropriately (@isaacs)

DEPENDENCIES

• 120e62736 [email protected]
• 6560b8d95 @npmcli/[email protected]
  • do not drop scope information when fetching scoped package tarballs
  • fix cycles/ordering resolution when peer deps require nesting
• 282a1e008 [email protected]
• b259edcb4 [email protected]

🎉 Happy release Tuesday! Today marks a major milestone for the npm CLI team - we’ve officially cut [email protected]. If you’ve been following along this past year, or more, you’ll now that we’ve been working hard to bring you this release. Our focus & determination excelerated these past 3 months as we picked up a weekly+ release cadence & began addressing bugs/feedback during our beta/rc windows.

As I’ve mentioned before, we’ve still got a lot of room for improvement but we think that the cli is in a very stable place today & ready for you to use. npm v7 will be shipping with Node.js v15 (a PR to land this work will be opened shortly) & we hope to continue the pace of change/improvement as we head in to this last quarter of the year.

You can start using this update today by running:

npm install -g npm@7

Here’s some notable changes for v7.0.0 & v7.0.0-rc.4 (which landed 2020-10-09 last week):

v7.0.0 (2020-10-12)

BUG FIXES

• 7bcdb3636 #1949 fix: ensure publishConfig is passed through (@nlf)
• 97978462e fix: patch config.js to remove duplicate vals (@darcyclarke)

DOCUMENTION

• 60769d757 #1911 docs: v7 npm-install refresh (@ruyadorno)
• 08de49042 #1938 docs: v7 using npm config updates (@ruyadorno)

DEPENDENCIES

• 15366a1cf [email protected]
• f04a74140 [email protected]
  • 1de21dce0 fix: support dot-separated aliases defined in a .npmrc ini files for init-* configs (@ruyadorno)
• a67275cd9 [email protected]
• 6fb83b78d [email protected]
• 1ca30cc9b [email protected]
• 28a2d2ba4 @npmcli/[email protected]
  • npm/rfcs#239 Improve handling of conflicting peerDependencies in transitive dependencies, so that --force will always accept a best effort override, and --strict-peer-deps will fail faster on conflicts.
• 9306c6833 [email protected]
• fafb348ef [email protected]
• 365f2e756 [email protected]

v7.0.0-rc.4 (2020-10-09)

• 09b456f2d @npmcli/[email protected]
  • #1919 exposes npm_config_user_agent env variable (@nlf)
• e859fba9e #1936 fix npx for non-interactive shells (@nlf)
• 9320b8e4f #1906 restore old npx behavior of running existing bins first (@nlf)
• 7bd47ca2c @npmcli/[email protected]
  • fixed handling of invalid package.json file
• 02737453b [email protected]
  • do not calculate integrity values of http errors

To read the full list of changes in v7, check out our CHANGELOG.md

Sometimes, “releasing at least weekly” means 3 releases in one week. This was one such week :)

The release candidates are getting more stable as we fix more of the bugs that our brave testers are putting them through their paces and giving us feedback.

You can get this update in the standard way, by running this command in your terminal:

npm install -g npm@next-7

Full changelogs below.

v7.0.0-rc.3 (2020-10-06)

• d816c2efa c8f0d5457 d48086d0d f34595f2e #1902 tests for several commands (@nlf)
• 6d49207db #1903 Revert “Remove unused npx binary” (@MylesBorins)
• 138dfc202 set executable permissions on bins that node installer uses
• b06d68078 @npmcli/[email protected]
  • Do not remove node_modules folders from Workspaces when loadActual races with buildIdealTree (@ruyadorno)
• 2509e3a1b [email protected]

v7.0.0-rc.2 (2020-10-02)

• 6de81a013 @npmcli/[email protected]
  • Fix regression running ‘install’ scripts when package.json does not contain a scripts object

v7.0.0-rc.1 (2020-10-02)

• 281a7f39a @npmcli/[email protected]
  • Allow npm update to update bundled root dependencies
  • Only do implicit node-gyp build for gyp files named binding.gyp
• 384f5ec47 update minipass-fetch to fix many 'cb() never called’ errors
• 7b1e75906 @npmcli/[email protected]
  • Only do implicit node-gyp build for gyp files named binding.gyp
• c20e2f0c7 #1892 Support --omit options in npm outdated

🎉 Happy Thursday! Over the past few months the cli team has been working hard to ship a release each week to clean up & stabilize the npm v7 beta; We’re excited about where we are today & have cut our first release candidate this morning.

Our intent is to continue to ship weekly improvements as more & more of the community adopts npm@7 & hope you’ll continue to give us feedback.

You can get today’s release as you usually do:

npm i -g npm@next-7

v7.0.0-rc.0 (2020-10-01)

• 3b417055c #1859 fix proxy and https-proxy config support (@badeggg)
• dd7d7a284 @npmcli/[email protected]
  • #1849 Do not drop peer/dev dep while saving if both set
  • Do not install or build if there is a global top bin conflict
  • Default to building node-gyp dependencies
• 40c17e12c [email protected]
• 47a8ca1d7 [email protected]
• 81073f99a [email protected]
• 67793abd4 [email protected]
• a27e8d006 [email protected]
• 893fed45e [email protected]
• bc20e0c8a [email protected]
• a2b8fd3c1 [email protected]
• ee4c85b87 [email protected]
• 4bdad5fdf [email protected]
• c394937ec @npmcli/[email protected]
  • Default to building node-gyp dependencies and projects
• remove many unused dependencies (@ruyadorno)
  • 558e9781a deep-equal
  • 2aa9a1f8a request
  • d77594e52 npm-registry-couchapp
  • 8ec84d9f6 tacks
  • a07b421f7 lincesee
  • 41126e165 npm-cache-filename
  • 130da51b5 npm-registry-mock
  • b355af486 sprintf-js
  • 721c0a873 uid-number
  • 9c920e5f5 umask
  • aae1c38bb config-chain
  • 450845eac find-npm-prefix
  • 963d542d3 has-unicode
  • cad9cbc70 infer-owner
  • 3ae02914d lockfile
  • 7bc474d7c once
  • 5c5e0099a retry
  • cfaddd334 sha
  • 3a978ffc7 slide