chore(deps): update npm to v10 - abandoned

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	^8.19.4 -> ^10.8.0

---

Release Notes

npm/cli (npm)

v10.8.0

Compare Source

Features

• 1e375c1 #​7442 create exit handler class (#​7442) (@​lukekarrys)

Bug Fixes

• d5c3289 #​7513 refactor: use output buffer and error for more commands (#​7513) (@​lukekarrys)
• 12f103c #​7533 add first param titles to logs where missing (#​7533) (@​lukekarrys)
• badeac2 #​7521 config: use redact on config output (#​7521) (@​lukekarrys)
• 76aef74 #​7520 view: refactor exec and execWorkspaces to call same methods (#​7520) (@​lukekarrys)
• b54cdb8 #​7515 refactor: create new error output primitives (#​7515) (@​lukekarrys)
• e40454c #​7506 view: dont unwrap arrays in json mode (#​7506) (@​lukekarrys)
• 6f64148 require stdout to be a TTY for progress (#​7507) (@​lukekarrys)
• db62910 #​7504 config: be more aggressive about hiding protected values (#​7504) (@​wraithgar)
• 6d456bb #​7497 dont write log file for completion commands (#​7497) (@​lukekarrys)
• 722c0fa #​7463 limit packument cache size based on heap size (@​wraithgar)
• ca1a68d #​7474 log if npm deprecate does not match any version (#​7474) (@​mbtools)
• 261ea19 #​7457 run input.start around help and openining urls (@​lukekarrys)
• 4ab6cf4 #​7459 publish: validate dist-tag (#​7459) (@​reggi)

Documentation

• b2ce025 #​7518 suggest correct bin entry (#​7518) (@​Santoshraj2)
• bdd2aae #​7502 remove obsolete removal using make uninstall (#​7502) (@​avinal)
• c3d2819 #​7496 npm help json/global command on windows (#​7496) (@​klm-turing, @​lukekarrys)
• 268303c #​7479 add npm version to every local help output (#​7479) (@​klm-turing)
• e39d422 #​7473 suggest "npm repo" for showing the repo of a package (#​7473) (@​full-stop)
• f6fff32 #​7433 clarify what peerDependenciesMeta does (#​7433) (@​xuhdev, @​wraithgar)

Dependencies

• 1cdc662 #​7522 @tufjs/repo-mock@2.0.1
• 898bcfd #​7522 @sigstore/protobuf-specs@0.3.2
• fec3c94 #​7522 path-scurry@1.11.1
• cb85973 #​7522 glob@10.3.15
• e189873 #​7498 @sigstore/sign@2.3.1
• c2b28f9 #​7498 minipass@7.1.1
• 9064ffc #​7498 @sigstore/tuf@2.3.3
• fd42986 #​7498 @npmcli/fs@3.1.1
• 4e53e33 #​7498 semver@7.6.2
• f078c82 #​7495 glob@10.3.14
• 58f773c #​7495 path-scurry@1.11.0
• ea0b07d #​7482 pacote@18.0.6
• 8d161a4 #​7482 semver@7.6.1
• 5b2317b #​7463 add lru-cache
• 26fefb8 #​7480 promzard@1.0.2
• 2146e1f #​7480 npm-bundled@3.0.1
• ff6c5d1 #​7480 minipass-fetch@3.0.5
• 419f9b9 #​7480 cmd-shim@6.0.3
• dade2c8 #​7480 minipass@7.1.0
• 18e5312 #​7480 validate-npm-package-name@5.0.1
• d440011 #​7480 npm-user-validate@2.0.1
• 552113e #​7480 ignore-walk@6.0.5
• 7e15b6d #​7480 @npmcli/metavuln-calculator@7.1.1
• 8b20f8c #​7480 ssri@10.0.6
• a9a6dcd #​7480 pacote@18.0.5
• e2fdb65 #​7480 npm-pick-manifest@9.0.1
• 310a7a5 #​7480 normalize-package-data@6.0.1
• e71f541 #​7480 nopt@7.2.1
• 18c3b40 #​7480 json-parse-even-better-errors@3.0.2
• 4c5bf77 #​7480 init-package-json@6.0.3
• 714e3e1 #​7480 hosted-git-info@7.0.2
• f94d672 #​7480 cacache@18.0.3
• 43331e4 #​7480 bin-links@4.0.4
• 8234412 #​7480 @npmcli/promise-spawn@7.0.2
• 6dfaebb #​7480 @npmcli/git@5.0.7
• 63ef498 #​7457 npm-registry-fetch@17.0.1
• 4cbc2d4 #​7457 npm-profile@10.0.0

v10.7.0

Compare Source

Features

• 7e349f4 #​7432 add spinner (#​7432) (@​lukekarrys)

Bug Fixes

• d679ce8 #​7449 linting: no-unused-vars (@​wraithgar)
• 2558283 #​7450 powershell: fallback to script root if globalPrefix does not exist (#​7450) (@​lukekarrys)
• bc4c342 #​7448 account for registries with no publisher in search (#​7448) (@​wraithgar)
• bcc781a #​7439 move run-script banners to stderr when in json mode (#​7439) (@​lukekarrys)
• 104fcb5 #​7438 remove doctor log for each file permission check (#​7438) (@​lukekarrys)
• 5230647 #​7422 rewrite powershell scripts to use PSScriptRoot (#​7422) (@​lukekarrys)
• 71cbd91 #​7421 hide banner for exec and explore (#​7421) (@​lukekarrys)
• 57ebebf #​7418 update repository.url in package.json (#​7418) (@​wraithgar)

Documentation

• 1674136 #​7441 correct search help output (#​7441) (@​wraithgar)

Dependencies

• 80eec03 #​7453 @npmcli/redact@2.0.0
• a7145d4 #​7453 npm-registry-fetch@17.0.0
• a785766 #​7453 pacote@18.0.3
• 65d76db #​7453 npm-profile@9.0.2
• cadc0f0 #​7449 hoist production copy of sprintf-js
• 2cffdfe #​7449 lru-cache@10.2.2
• 432efb5 #​7449 make-fetch-happen@13.0.1
• 9da5738 #​7437 @npmcli/run-script@8.1.0 (#​7437)
• 762888a #​7429 update dependencies for workspaces (#​7429)
• workspace: @npmcli/arborist@7.5.1
• workspace: @npmcli/config@8.3.1
• workspace: libnpmaccess@8.0.5
• workspace: libnpmdiff@6.1.1
• workspace: libnpmexec@8.1.0
• workspace: libnpmfund@5.0.9
• workspace: libnpmhook@10.0.4
• workspace: libnpmorg@6.0.5
• workspace: libnpmpack@7.0.1
• workspace: libnpmpublish@9.0.7
• workspace: libnpmsearch@7.0.4
• workspace: libnpmteam@6.0.4
• workspace: libnpmversion@6.0.1

Chores

• 356c374 #​7453 fix test fixture for new redact behavior (@​wraithgar)
• 2fba4b7 #​7449 update devDependencies in lockfile (@​wraithgar)

v10.6.0

Compare Source

Features

• 9123de4 #​7373 do all ouput over proc-log events (@​lukekarrys)
• 9622597 #​7339 refactor terminal display (#​7339) (@​lukekarrys)

Bug Fixes

• 0e74ee4 #​7416 clean up npm object (#​7416) (@​wraithgar)
• c060e60 #​7415 return command and argv from load (@​lukekarrys)
• 180b919 #​7415 remove unused npm.setCmd method (@​lukekarrys)
• 0708b3b #​7414 use name of level instead of label for logging prefixes (#​7414) (@​lukekarrys)
• 7f4e667 #​7403 redact when displaying non-ascii arguments (@​lukekarrys)
• 06202f0 #​7403 store unref promises for awaiting in tests (@​lukekarrys)
• e5f1948 #​7403 run update notifier after exec but before waiting (@​lukekarrys)
• f309c1c #​7403 refactor: move timer and error logfile messages to lib/npm (@​lukekarrys)
• 43e6194 #​7403 dont show run script banners in silent (@​lukekarrys)
• 694dba9 #​7403 dont expose as many public properties of timers (@​lukekarrys)
• 7ca6d84 #​7403 use proc-log META for flush and force (@​lukekarrys)
• 2538438 #​7403 dont write timing logs to file unless requested (@​lukekarrys)
• 7e04417 #​7403 rename base-cmd to match other commands (@​lukekarrys)
• fc68547 #​7403 remove some npm.load timers and exit earlier for --versions (@​lukekarrys)
• 28019d5 #​7403 cleanup: move cli specific files to separate dir (@​lukekarrys)
• 469f788 #​7403 cleanup: newlines and whitespace (@​lukekarrys)
• 4ab6401 #​7403 cleanup: dont nest files utils dir (@​lukekarrys)
• 78447d7 #​7399 prefer fs/promises over promisify (#​7399) (@​lukekarrys)
• d531f8b #​7407 Remove table output from search and tar summary (@​wraithgar)
• c209e98 #​7401 Remove table output from many commands (@​wraithgar)
• ad7ab8c #​7388 perf: lazy loading optimizations (#​7388) (@​wraithgar)
• 8eae4b3 #​7385 token: properly await registry request (#​7385) (@​wraithgar)
• 9216d59 #​7377 better output colors (#​7377) (@​wraithgar)
• 6512112 #​7378 use proc-log for all timers (@​lukekarrys)
• 2a80dab #​7370 typo in npm access usage (#​7370) (@​mbtools)

Documentation

• dfa4cab #​7401 update output examples (@​wraithgar)
• 140b9c9 #​7382 package-json: note that line endings are inferred (#​7382) (@​ertw)
• c16dd4e #​7367 Document that overrides only work in the root package.json (#​7367) (@​s100)

Dependencies

• 36adff3 #​7408 pacote@18.0.2
• 486d46c #​7408 @npmcli/installed-package-contents@2.1.0
• 157d0ae #​7408 @npmcli/package-json@5.1.0
• b0ca163 #​7409 remove @​npmcli/disparity-colors
• c77f035 #​7407 remove columnify
• 2ec690d #​7401 move cli-table3 to devDependencies
• fc6e291 #​7392 proc-log@4.2.0 (#​7392)
• 38ed048 #​7378 @npmcli/metavuln-calculator@7.1.0
• 7678a3d #​7378 proc-log@4.1.0
• 87f6c09 #​7373 @npmcli/metavuln-calculator@7.0.1
• b8f8b41 #​7373 @npmcli/run-script@8.0.0
• 79f79c7 #​7373 proc-log@4.0.0
• 9027266 #​7373 pacote@18.0.0
• ee4b3e0 #​7373 npm-registry-fetch@16.2.1
• 0e7789b #​7373 npm-profile@9.0.1
• ac98fd3 #​7373 npm-package-arg@11.0.2
• 9351570 #​7373 @npmcli/package-json@5.0.3
• d3a0cfa #​7373 @npmcli/git@5.0.6
• workspace: @npmcli/arborist@7.5.0
• workspace: @npmcli/config@8.3.0
• workspace: libnpmaccess@8.0.4
• workspace: libnpmdiff@6.1.0
• workspace: libnpmexec@8.0.0
• workspace: libnpmfund@5.0.8
• workspace: libnpmhook@10.0.3
• workspace: libnpmorg@6.0.4
• workspace: libnpmpack@7.0.0
• workspace: libnpmpublish@9.0.6
• workspace: libnpmsearch@7.0.3
• workspace: libnpmteam@6.0.3
• workspace: libnpmversion@6.0.0

Chores

• 3cbc258 #​7403 test for early version exit (@​lukekarrys)
• 08e0c0e #​7403 move sigstore json files to fixtures dir (@​lukekarrys)
• ea66e95 #​7380 remove licensee as a devDependency (#​7380) (@​lukekarrys, @​wraithgar)
• 9333e9d #​7386 reduce windows shim test flakes (#​7386) (@​lukekarrys)

v10.5.2

Compare Source

Bug Fixes

• ef381b1 #​7363 use @​npmcli/redact for url cleaning (#​7363) (@​lukekarrys)
• 3760dd2 #​7361 perf: do less work loading config (#​7361) (@​wraithgar)
• 64bcf4c #​7360 perf: only initialize workpaces when we are inside a workspace (#​7360) (@​H4ad)
• 5a28a29 #​7352 perf: lazy load workspace dependency (#​7352) (@​H4ad)
• 5fc0f9d #​7347 lazy load validate npm package name on error message (#​7347) (@​H4ad)
• c929ed1 #​7321 prioritize CLI flags over publishConfig settings (#​7321) (@​roni-berlin)
• 70497cb #​7346 perf: avoid importing the entire semver package for update-notifier (#​7346) (@​H4ad)

Documentation

• 90ba1c9 #​7340 fix incorrect ISO 8601 reference (#​7340) (@​emmanuel-ferdman)

Dependencies

• 699a1de #​7362 @npmcli/map-workspaces@3.0.6
• 49fb9b7 #​7362 socks@2.8.3
• f69052e #​7362 @npmcli/package-json@5.0.2
• c18a0ad #​7357 sigstore@2.3.0
• fd4153b #​7357 socks@2.8.2
• d6b705a #​7357 postcss-selector-parser@6.0.16
• 248c177 #​7357 hasown@2.0.2
• 4af9e86 #​7357 builtins@5.1.0
• 7546b56 #​7357 @npmcli/agent@2.2.2
• d38fd4f #​7357 spdx-expression-parse@4.0.0
• 913b326 #​7357 is-cidr@5.0.5
• 84bbbd4 #​7357 @npmcli/package-json@5.0.1
• a0f5048 #​7357 @npmcli/git@5.0.5
• workspace: @npmcli/arborist@7.4.2
• workspace: @npmcli/config@8.2.2
• workspace: libnpmdiff@6.0.9
• workspace: libnpmexec@7.0.10
• workspace: libnpmfund@5.0.7
• workspace: libnpmpack@6.0.9

Chores

• 81be28d #​7357 dev dependency updates (@​wraithgar)

v10.5.1

Compare Source

Bug Fixes

• 17d97d2 #​7334 use @​npmcli/redact for log redactions (@​lukekarrys)
• 8cab136 #​7324 ensure maxSockets is respected (#​7324) (@​lukekarrys)
• 9bffa13 #​7320 query: properly return :missing nodes (#​7320) (@​wraithgar)
• 9d4e85f #​7297 search: include searchlimit option in help output (#​7297) (@​10xLaCroixDrinker)
• bdb3c28 #​7274 added check for dry-run (#​7274) (@​cod1r)
• 7f1ab88 #​7271 more lightweight npm bin discovery in windows (#​7271) (@​wraithgar)

Documentation

• 1da5cf0 #​7198 add link to engines section (#​7198) (@​uiolee)
• 1114a12 #​7307 fix incorrect npm audit key response link (#​7307) (@​davidlj95)
• 9807caf #​7304 update audit docs with provenance info (#​7304) (@​bdehamer)
• e1ecfa7 #​7285 Correct capitalization for URL (#​7285) (@​coliff)

Dependencies

• 87a61fc #​7334 npm-registry-fetch@16.2.0
• 5469614 #​7327 init-package-json@6.0.2
• 5469614 #​7327 promzard@1.0.1
• 5469614 #​7327 read@3.0.1 (#​7327)
• 9ccff72 #​7329 tar@6.2.1
• 7201a00 #​7329 node-gyp@10.1.0
• 6fd94f2 #​7329 minimatch@9.0.4
• b048592 #​7329 ini@4.1.2
• c54a84a #​7329 glob@10.3.12
• 6853531 #​7329 cli-table3@​0.6.4
• c9315cb #​7329 binary-extensions@2.3.0
• 5bb0031 #​7329 @sigstore/tuf@2.3.2
• 8cab136 #​7324 agent-base@7.1.1 (@​lukekarrys)
• workspace: @npmcli/arborist@7.4.1
• workspace: @npmcli/config@8.2.1
• workspace: libnpmaccess@8.0.3
• workspace: libnpmdiff@6.0.8
• workspace: libnpmexec@7.0.9
• workspace: libnpmfund@5.0.6
• workspace: libnpmhook@10.0.2
• workspace: libnpmorg@6.0.3
• workspace: libnpmpack@6.0.8
• workspace: libnpmpublish@9.0.5
• workspace: libnpmsearch@7.0.2
• workspace: libnpmteam@6.0.2

Chores

• 8cab136 #​7324 add smoke-test for large prod installs (@​lukekarrys)
• 0dab381 #​7258 jsdom@24.0.0 (#​7258) (@​wraithgar)
• af3c48e #​7262 test refactor (#​7262) (@​wraithgar)

v10.5.0

Compare Source

Features

• 2366edc #​7218 query: add :vuln pseudo selector (@​wraithgar)
• 4f3ddbb #​5966 add --expect-entries to npm query (@​wraithgar)

Bug Fixes

• 818957c #​7158 pack, publish: default foreground-scripts to true (#​7158) (@​ljharb)
• d04111d #​7197 view: filter out invalid semver (#​7197) (@​wraithgar)
• b0a3ba0 #​7195 prevent adding invalid dist-tag (#​7195) (@​wraithgar)

Documentation

• c4741fe #​7254 Remove additional example and comments about uninstall script (#​7254) (@​rveerd)
• 686a622 #​7247 scope: update example command to work in windows (#​7247) (@​robertobasile84)
• 95b5057 #​5966 clarify in-range and out-of-range in dependency selectors (@​wraithgar)
• 5b7184f #​7190 workspaces: fix grammar (#​7190) (@​alekstech)
• 0dd03f9 #​7182 fix typos (#​7182) (@​GoodDaisy)

Dependencies

• 16d4c9f #​7218 @npmcli/query@3.1.0
• 06247d1 #​7242 spdx-license-ids@3.0.17
• 79d1e0b #​7242 spdx-exceptions@2.5.0
• 67e853a #​7242 socks@2.8.0
• 4c9fe4b #​7242 lru-cache@10.2.0
• 4a50c5a #​7242 https-proxy-agent@7.0.4
• ed3f254 #​7242 http-proxy-agent@7.0.2
• 8ec4fd5 #​7242 hasown@2.0.1
• 98b1189 #​7242 @npmcli/agent@2.2.1
• dafa903 #​7242 sigstore@2.2.2
• d0bcb76 #​7242 diff@5.2.0
• a13808e #​7242 semver@7.6.0
• d6521ac #​7242 @sigstore/tuf@2.3.1
• 43cac2f #​7242 ip@2.0.1
• workspace: @npmcli/arborist@7.4.0
• workspace: @npmcli/config@8.2.0
• workspace: libnpmdiff@6.0.7
• workspace: libnpmexec@7.0.8
• workspace: libnpmfund@5.0.5
• workspace: libnpmpack@6.0.7

Chores

• d6bc684 #​7242 update devDependencies in lockfile (@​wraithgar)

v10.4.0

Compare Source

Features

• 35a098c #​7175 display tree diff on --long (@​wraithgar)
• dffca29 #​7174 format: print --dry-run diffs in table format (#​7174) (@​ritaaktay)
• 6d5f9ac #​7133 dedupe - display difference when --dry-run is enabled (#​7133) (@​Blaumaus)

Bug Fixes

• ec06f77 #​7175 inline diff table code w/ summary code (@​wraithgar)
• d4ebfba #​7157 use util.stripVTControlCharacters instead of strip-ansi (@​wraithgar)
• 81c95c7 #​7063 don't reset update notifier duration on every check (#​7063) (@​wraithgar)

Documentation

• 2b7eaad #​7168 package-json: Reword warning about publishing local dependencies (#​7168) (@​DanKaplanSES)
• 67ab0f7 #​7142 update: Replace comma with period in run on sentence (#​7142) (@​DanKaplanSES)
• 05c69dc #​7150 config: State default configuration file affected by npm config set (#​7150) (@​DanKaplanSES)
• 44f4518 #​7149 Link to the config command in the npm configuration description (#​7149) (@​DanKaplanSES)
• dd5699f #​7152 update: Fix a typo and remove unneeded statement (#​7152) (@​DanKaplanSES)

Dependencies

• ec77e81 #​7124 promise-call-limit@3.0.1
• e32189c #​7173 deduplicate tree
• b7af4d9 #​7173 tar-stream@3.1.7
• 6883743 #​7173 @npmcli/run-script@7.0.4
• 739634d #​7157 remove strip-ansi
• 162c82e #​7148 pacote@17.0.6 (#​7148) (@​bdehamer)
• a50b03b #​7141 sigstore@2.2.0 (#​7141) (@​bdehamer)
• f696b51 #​7132 @sigstore/tuf@2.3.0 (#​7132) (@​bdehamer)
• workspace: @npmcli/arborist@7.3.1
• workspace: libnpmdiff@6.0.6
• workspace: libnpmexec@7.0.7
• [worksp

---

Configuration

📅 Schedule: Branch creation - "after 6am and before 10am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

Images automagically compressed by Calibre's image-actions ✨

Compression reduced images by 13.2%, saving 6.41 KB.

Filename	Before	After	Improvement	Visual comparison
template/public/img/uploads/688db3f550.png	8.66 KB	7.73 KB	-10.8%	View diff
template/public/img/uploads/e677be7c9e.png	7.69 KB	6.13 KB	-20.3%	View diff
template/public/img/uploads/festcakes.webp	32.18 KB	28.27 KB	-12.2%	View diff

26 images did not require optimisation.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[renovate]

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.