chore(deps): update npm to v9

This MR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	^8.0.0 -> ^9.0.0

---

Release Notes

npm/cli

v9.6.6

Compare Source

Dependencies

• 70e65b1 #​6423 tuf-js@1.1.5 (#​6423)
• 72291f7 #​6416 read-package-json@6.0.3
• e498f82 #​6416 minimatch@9.0.0
• 13aa7b7 #​6416 minipass@5.0.0
• f2a5678 #​6416 tar@6.1.14
• 69d4dd2 #​6416 npm update
• abdca39 #​6416 sigstore@1.4.0
• 16f68fb #​6416 glob@10.2.2
• 67fcfb1 #​6416 ignore-walk@6.0.3
• bfa2ff3 #​6416 make-fetch-happen@11.1.1
• 877591a #​6416 npm-registry-fetch@14.0.5
• 7630517 #​6416 pacote@15.1.3
• c2d6e0a #​6416 write-file-atomic@5.0.1
• acdf97e #​6416 which@3.0.1
• 00c541a #​6416 ssri@10.0.4
• 1b95e73 #​6416 read-package-json@6.0.2
• 6927fd3 #​6416 fs-minipass@3.0.2
• 3eec56e #​6416 cacache@17.1.0
• 7a2ce3f #​6416 @npmcli/run-script@6.0.1
• 3881770 #​6416 @npmcli/map-workspaces@3.0.4
• Workspace: @npmcli/arborist@6.2.9
• Workspace: libnpmdiff@5.0.17
• Workspace: libnpmexec@5.0.17
• Workspace: libnpmfund@4.0.17
• Workspace: libnpmorg@5.0.4
• Workspace: libnpmpack@5.0.17
• Workspace: libnpmpublish@7.1.4

v9.6.5

Compare Source

Bug Fixes

• 33dc428 #​6374 account for npx package-name with no spec (@​wraithgar)
• 82879f6 #​6225 lazy loading of arborist and pacote (#​6225) (@​wraithgar)
• f4e73ab #​6322 remove incompatible params from ci (#​6322) (@​wraithgar)
• c7fe1c7 #​6328 save raw data to file, not parsed data (@​wraithgar)

Documentation

• 31214a6 #​6381 Update description for publish --provenance flag (#​6381) (@​feelepxyz)
• 997bcdf #​6329 fix npm cache folder location for windows (#​6329) (@​charlie-wong)

Dependencies

• fae5e00 #​6372 sigstore@1.3.0 (#​6372)
• 3fa9542 #​6363 semver@7.5.0
• e49844e #​6363 minipass-fetch@3.0.2
• 357cc29 #​6363 walk-up-path@3.0.1
• 2c80b1e #​6363 ini@4.1.0
• 5933841 #​6363 minipass@4.2.8
• b39d54e #​6363 minimatch@7.4.6
• 201aa5a #​6363 ssri@10.0.3
• acb9120 #​6363 read@2.1.0
• 2472205 #​6363 npm-registry-fetch@14.0.4
• 2780714 #​6363 npm-install-checks@6.1.1
• b5af015 #​6363 make-fetch-happen@11.1.0
• 14c498d #​6363 @npmcli/metavuln-calculator@5.0.1
• Workspace: @npmcli/arborist@6.2.8
• Workspace: @npmcli/config@6.1.6
• Workspace: libnpmdiff@5.0.16
• Workspace: libnpmexec@5.0.16
• Workspace: libnpmfund@4.0.16
• Workspace: libnpmpack@5.0.16

v9.6.4

Compare Source

Documentation

• 54795a3 #​6312 filter archives out of version manager search (#​6312) (@​ljharb)
• 530c285 #​6306 remove reference to npm-packlist (#​6306) (@​staff0rd)

Dependencies

• 85935ac #​6325 ssri@10.0.2 (#​6325)
• f1388b4 #​6317 npm update
• 7dd0129 #​6317 glob@9.3.2
• deca335 #​6317 promise-call-limit@1.0.2
• Workspace: @npmcli/arborist@6.2.7
• Workspace: libnpmdiff@5.0.15
• Workspace: libnpmexec@5.0.15
• Workspace: libnpmfund@4.0.15
• Workspace: libnpmpack@5.0.15

v9.6.3

Compare Source

Bug Fixes

• 829503b #​6304 don't break up log message across lines (@​wraithgar)
• 1435fcf #​6304 do less work loading ./lib/npm.js (@​wraithgar)
• 09b58e4 #​6284 make all color output use an npm instance of chalk (#​6284) (@​lukekarrys)
• e252532 #​6283 do less work looking up commands (#​6283) (@​wraithgar)
• 6a4bcba #​6275 clean up man sorting (@​wraithgar)
• 8a96b65 #​6275 ignore ts and map files (@​wraithgar)
• 94d2b39 #​6271 Do not log warnings about log cleanup when logs_max=0 (#​6271) (@​jmealo)
• 2def359 #​6277 updated ebadplatform messaging to be generated based on the error (#​6277) (@​nlf)

Documentation

• 1e2eb81 #​6311 replace version manager list with a github search (#​6311) (@​wraithgar)
• 9d2be4e #​6289 remove npm bin link (#​6289) (@​KevinRouchut)

Dependencies

• e652dbd #​6308 minimatch@7.4.3 (#​6308)
• 01986d1 #​6307 sigstore@1.2.0 (#​6307)
• ea12627 #​6275 minimatch@7.4.2
• ec3e020 #​6275 glob@9.3.1
• 952fbed #​6275 read-package-json@6.0.1
• dd43d30 #​6275 parse-conflict-json@3.0.1
• d5ce7ca #​6275 npm-install-checks@6.1.0
• 704cd1e #​6275 nopt@7.1.0
• a6da22a #​6275 ignore-walk@6.0.2
• 55955fd #​6275 cacache@17.0.5
• 839b670 #​6275 @npmcli/map-workspaces@3.0.3
• 9a7b8e8 #​6275 @npmcli/git@4.0.4
• 57c0a55 #​6275 npm update
• 74c80f5 #​6275 minipass@4.2.5
• b174c90 #​6275 graceful-fs@4.2.11
• Workspace: @npmcli/arborist@6.2.6
• Workspace: @npmcli/config@6.1.5
• Workspace: libnpmdiff@5.0.14
• Workspace: libnpmexec@5.0.14
• Workspace: libnpmfund@4.0.14
• Workspace: libnpmpack@5.0.14
• Workspace: libnpmpublish@7.1.3

v9.6.2

Compare Source

Bug Fixes

• 4622b42 #​6247 add provenance publish notice (#​6247) (@​bdehamer)

Dependencies

• 434b461 #​6255 sigstore@1.1.1 (#​6255)
• Workspace: @npmcli/config@6.1.4
• Workspace: libnpmpublish@7.1.2

v9.6.1

Compare Source

Bug Fixes

• e455e3f #​6211 send options with grant/revoke requests (#​6211) (@​DavidTanner)
• e4de224 #​6220 clean uri from audit error (#​6220) (@​wraithgar)

Dependencies

• cb45b21 #​6231 npm update
• 1f60a7e #​6231 minipass@4.2.4
• Workspace: @npmcli/arborist@6.2.5
• Workspace: libnpmdiff@5.0.13
• Workspace: libnpmexec@5.0.13
• Workspace: libnpmfund@4.0.13
• Workspace: libnpmpack@5.0.13
• Workspace: libnpmpublish@7.1.1

v9.6.0

Compare Source

Features

• 84fbaf2 #​6216 add preliminary fish shell completion (@​wraithgar)

Bug Fixes

• c4c8754 audit: add signatures to completion (@​wraithgar)
• fc46489 access: only complete once (@​wraithgar)
• b43961a cmd-list: alias only to real commands (@​wraithgar)

Documentation

• 2695e1f #​6187 npm v9 creates package-lock.json v3 (#​6187) (@​tuukka)

Dependencies

• 71ae406 #​6218 @npmcli/installed-package-contents@2.0.2
• Workspace: @npmcli/arborist@6.2.4
• Workspace: libnpmdiff@5.0.12
• Workspace: libnpmexec@5.0.12
• Workspace: libnpmfund@4.0.12
• Workspace: libnpmpack@5.0.12

v9.5.1

Compare Source

Documentation

• 9bc455b #​6188 fixing typos (#​6188) (@​deining)
• ec8c95c #​6186 update OSI link (#​6186) (@​roerohan)

Dependencies

• 7ba3e17 #​6189 npm update
• f7a5200 pacote@15.1.1
• Workspace: @npmcli/arborist@6.2.3
• Workspace: libnpmdiff@5.0.11
• Workspace: libnpmexec@5.0.11
• Workspace: libnpmfund@4.0.11
• Workspace: libnpmpack@5.0.11

v9.5.0

Compare Source

Features

• 79bfd03 #​6153 audit signatures verifies attestations (@​feelepxyz)
• 5fc6473 add provenance attestation (@​bdehamer)

Bug Fixes

• 53f75a4 #​6158 gracefully fallback from auth-type=web (#​6158) (@​MylesBorins)
• ed59aae #​6162 refactor error reporting in audit command (@​bdehamer)

Dependencies

• fad0473 minipass@4.0.3
• 678c6bf minimatch@6.2.0
• 9b4b366 ci-info@3.8.0
• d20ee2a pacote@15.1.0
• Workspace: libnpmpublish@7.1.0
• Workspace: libnpmteam@5.0.3

v9.4.2

Compare Source

Bug Fixes

• d02da52 #​6142 revert install-links default back to false (#​6142) (@​nlf)

Documentation

• 6ea2cd7 #​6134 update references to OTP to be accurate (#​6134) (@​MylesBorins)

Dependencies

• cb6713d #​6143 rebuild package-lock (#​6143)
• 8200f4f #​6133 ignore-walk@6.0.1
• d43f881 map-workspaces@3.0.2
• 99457f1 minimatch@6.1.6
• f4c8c62 init-package-json@5.0.0
• 3c6615f npm-user-validate@2.0.0
• 10445ca remove mkdirp
• ab82492 node-gyp@9.3.1
• 74c5cbb minipass@4.0.2
• 1138038 make-fetch-happen@11.0.3
• c1ccfa1 glob@8.1.0
• 3dc17ce fs-minipass@3.0.1
• 5c84a99 ci-info@3.7.1
• fc5332f read@2.0.0
• Workspace: @npmcli/arborist@6.2.2
• Workspace: @npmcli/config@6.1.3
• Workspace: libnpmdiff@5.0.10
• Workspace: libnpmexec@5.0.10
• Workspace: libnpmfund@4.0.10
• Workspace: libnpmhook@9.0.3
• Workspace: libnpmorg@5.0.3
• Workspace: libnpmpack@5.0.10
• Workspace: libnpmpublish@7.0.8

v9.4.1

Compare Source

Bug Fixes

• 1525a5e #​6082 unpublish with scoped registry (@​wraithgar)

Dependencies

• 721fe3f #​6118 read-package-json-fast@3.0.2
• 6e4a649 pacote@15.0.8
• 1820afe cacache@17.0.4
• 24b2ec4 @npmcli/promise-spawn@6.0.2
• 4b8046e @npmcli/name-from-folder@2.0.0
• 1d4be7a @npmcli/map-workspaces@3.0.1
• a39556f @npmcli/template-oss@4.11.3
• 64b06ed #​6115 http-cache-semantics@4.1.1
• Workspace: @npmcli/arborist@6.2.1
• Workspace: @npmcli/config@6.1.2
• Workspace: libnpmaccess@7.0.2
• Workspace: libnpmdiff@5.0.9
• Workspace: libnpmexec@5.0.9
• Workspace: libnpmfund@4.0.9
• Workspace: libnpmhook@9.0.2
• Workspace: libnpmorg@5.0.2
• Workspace: libnpmpack@5.0.9
• Workspace: libnpmpublish@7.0.7
• Workspace: libnpmsearch@6.0.2
• Workspace: libnpmteam@5.0.2
• Workspace: libnpmversion@4.0.2

v9.4.0

Compare Source

Features

• 8d6d851 #​6078 added --install-strategy=linked (#​6078) (@​fritzy)

Dependencies

• Workspace: @npmcli/arborist@6.2.0
• Workspace: libnpmdiff@5.0.8
• Workspace: libnpmexec@5.0.8
• Workspace: libnpmfund@4.0.8
• Workspace: libnpmpack@5.0.8

v9.3.1

Compare Source

Bug Fixes

• 8be672b #​6050 don't try to deprecate nonexistant versions (#​6050) (@​wraithgar)
• 1c3612c #​6054 use recursive rm in ci command (#​6054) (@​jamesshaw1987, @​burkel24)

v9.3.0

Compare Source

Features

• 753b98e #​5261 rootless workspace init provides suggestion (@​fritzy)

Bug Fixes

• cf175fb #​6044 default auth-type to legacy if otp is configured (#​6044) (@​wraithgar)
• 2383deb #​6037 clean urls from arborist, owner, and ping commands (#​6037) (@​lukekarrys)
• 69f5ff8 view: convert command to use output instead of console (@​lukekarrys)
• dc52222 init: write package.json workspaces paths with / separators (@​lukekarrys)
• 31af1aa refactor help to use @npmcli/promise-spawn (@​lukekarrys)
• 669ef94 fund: correctly parse and use which config (@​lukekarrys)
• 72e6d6f generate workspace support for docs pages (@​lukekarrys)
• 450e50f evaluate configs in command class (@​lukekarrys)
• 28ec922 #​5946 replace rimraf with fs.rm (@​lukekarrys)

Documentation

• f0038e5 #​6048 missing backtick in synopsis of npm init (#​5837) (#​6048) (@​Peallyz)
• ca8ff00 #​6045 update outdated file path to definitions.js (@​ericmutta)
• fe9debd #​6038 fix typos in definitions.js (#​6038) (@​lukekarrys, @​ericmutta)
• fa27aca #​6018 fix typo in removal.md (@​ericmutta)
• 82f69d9 #​6026 fix typo in registry.md (@​ericmutta)

Dependencies

• ec09474 #​5945 minipass-fetch@3.0.1
• Workspace: @npmcli/arborist@6.1.6
• Workspace: @npmcli/config@6.1.1
• Workspace: libnpmdiff@5.0.7
• Workspace: libnpmexec@5.0.7
• Workspace: libnpmfund@4.0.7
• Workspace: libnpmpack@5.0.7

v9.2.0

Compare Source

Features

• cf57ffa #​5888 discrete npm doctor commands (#​5888) (@​wraithgar)

Bug Fixes

• dfd5d46 #​5932 ignore implicit workspaces for completion (#​5932) (@​wraithgar)

Dependencies

• 2f2b146 #​5936 npm-packlist@7.0.4 (#​5936)
• 372d158 #​5935 minimatch@5.1.1 (#​5935)
• 0e6c28b #​5934 ci-info@3.7.0 (#​5934)
• 0a3fe00 #​5933 minipass@4.0.0
• 6b77340 tar@6.1.13
• cf0a174 ssri@10.0.1
• 3da9a1a pacote@15.0.7
• fee9b66 npm-registry-fetch@14.0.3
• e940917 cacache@17.0.3
• 875bd56 npm-package-arg@10.1.0
• 280b7a4 #​5927 npm-packlist@7.0.3
• Workspace: @npmcli/arborist@6.1.5
• Workspace: libnpmaccess@7.0.1
• Workspace: libnpmdiff@5.0.6
• Workspace: libnpmexec@5.0.6
• Workspace: libnpmfund@4.0.6
• Workspace: libnpmhook@9.0.1
• Workspace: libnpmorg@5.0.1
• Workspace: libnpmpack@5.0.6
• Workspace: libnpmpublish@7.0.6
• Workspace: libnpmsearch@6.0.1
• Workspace: libnpmteam@5.0.1

v9.1.3

Compare Source

Bug Fixes

• ffbdea2 #​5894 npm pack filename on scoped packages (#​5894) (@​HenryNguyen5)
• c26d708 #​5884 validate username at get-identity (#​5884) (@​sosoba, @​nlf)

Documentation

• ea948dc #​5881 update description of npm exec (#​5881) (@​styfle, @​wraithgar)
• 40f2c21 #​5865 ci-info url (#​5865) (@​wraithgar)
• 681a45b #​5875 run the comand for directory workspaces (#​5875) (@​1aron)
• 681a45b #​5875 add workspace directory example (#​5875) (@​1aron)

Dependencies

• Workspace: @npmcli/arborist@6.1.4
• Workspace: libnpmdiff@5.0.5
• Workspace: libnpmexec@5.0.5
• Workspace: libnpmfund@4.0.5
• Workspace: libnpmpack@5.0.5
• Workspace: libnpmpublish@7.0.5

v9.1.2

Compare Source

Bug Fixes

• d9654cf #​5861 remove unwanted package.json entries (#​5861) (@​wraithgar)

Dependencies

• a351685 #​5858 move from @​npmcli/ci-detect to ci-info (#​5858)
• Workspace: @npmcli/arborist@6.1.3
• Workspace: libnpmdiff@5.0.4
• Workspace: libnpmexec@5.0.4
• Workspace: libnpmfund@4.0.4
• Workspace: libnpmpack@5.0.4
• Workspace: libnpmpublish@7.0.4

v9.1.1

Compare Source

Documentation

• 1bff064 #​5819 config: document npm config fix (#​5819) (@​wraithgar)

Dependencies

• 335c7e4 #​5813 cacache@17.0.2
• 878ddfb @npmcli/fs@3.1.0
• Workspace: @npmcli/arborist@6.1.2
• Workspace: libnpmdiff@5.0.3
• Workspace: libnpmexec@5.0.3
• Workspace: libnpmfund@4.0.3
• Workspace: libnpmpack@5.0.3
• Workspace: libnpmpublish@7.0.3

v9.1.0

Compare Source

Features

• 706b3d3 #​5779 set --no-audit when installing outside of a project (like --global) (@​fritzy)

Bug Fixes

• 1f5382d #​5789 don't set stdioString for any spawn/run-script calls (@​lukekarrys)
• 8fd614a use promiseSpawn.open instead of opener (@​nlf)
• 41843ad use an absolute path to notepad.exe by default, correct docs (@​nlf)
• 0c5834e #​5758 use hosted-git-info to parse registry urls (#​5758) (@​lukekarrys)

Documentation

• ce6745c #​5763 fixed some typos (#​5763) (@​AndrewDawes)

Dependencies

• b89c19e #​5795 cli-table3@​0.6.3
• 6b6dfca fastest-levenshtein@1.0.16
• 9972ed1 @npmcli/ci-detect@3.0.1
• 024e612 abbrev@2.0.0
• 66f9bcd nopt@7.0.0
• 5730d17 tar@6.1.12
• 2fef570 node-gyp@9.3.0
• abfb28b @npmcli/run-script@6.0.0
• 205e2fd pacote@15.0.6
• ac25863 remove opener, @npmcli/promise-spawn@6.0.1, @npmcli/run-script@5.1.1, @npmcli/git@4.0.3, pacote@15.0.5, which@3.0.0
• Workspace: @npmcli/arborist@6.1.1
• Workspace: @npmcli/config@6.1.0
• Workspace: libnpmdiff@5.0.2
• Workspace: libnpmexec@5.0.2
• Workspace: libnpmfund@4.0.2
• Workspace: libnpmpack@5.0.2
• Workspace: libnpmpublish@7.0.2
• Workspace: libnpmversion@4.0.1

v9.0.1

Compare Source

Documentation

• b5fadd0 #​5742 Better npx link (#​5742) (@​mrienstra)

Dependencies

• de6618e #​5757 @npmcli/promise-spawn@5.0.0 (#​5757)
• 5625274 #​5755 hosted-git-info@6.1.0 (#​5755)
• 32bdd68 #​5754 npm-packlist@7.0.2 (#​5754)
• Workspace: @npmcli/arborist@6.1.0
• Workspace: libnpmdiff@5.0.1
• Workspace: libnpmexec@5.0.1
• Workspace: libnpmfund@4.0.1
• Workspace: libnpmpack@5.0.1
• Workspace: libnpmpublish@7.0.1

v9.0.0

Compare Source

Features

• e3b004c #​5727 move cli and all workspaces out of prerelease mode (@​lukekarrys)

Dependencies

• Workspace: @npmcli/arborist@6.0.0
• Workspace: libnpmaccess@7.0.0
• Workspace: libnpmdiff@5.0.0
• Workspace: libnpmexec@5.0.0
• Workspace: libnpmfund@4.0.0
• Workspace: libnpmhook@9.0.0
• Workspace: libnpmorg@5.0.0
• Workspace: libnpmpack@5.0.0
• Workspace: libnpmpublish@7.0.0
• Workspace: libnpmsearch@6.0.0
• Workspace: libnpmteam@5.0.0
• Workspace: libnpmversion@4.0.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.