The npm community forum has been discontinued.
To discuss usage of npm, visit the GitHub Support Community.
A new npm version has been released! As of this release, npm should never ever create root-owned files anywhere other than in root-owned folders. (Ie, this extends 6.10’s inferred cache ownership to node_modules, package.json, package-lock.json, etc.)
This also fixes the unhelpful crash that occurs when the
--user config refers to a user who does not exist on the system, which has plagued Docker users for quite some time now.
npm ci now gets access to the full suite of npm config values, making it once again suitable for installs that rely on
node-gyp having access to those values.
Last but not least, several fixes to
cmd-shim, to allow it to handle several new edge cases, and provide first-class support for PowerShell scripts.
To get it, run:
npm install -g npm@latest
A few meaty bugfixes, and introducing
a12341088#224 Implements peerDependenciesMeta (@arcanis)
2f3b79bba#234 add new forbidden 403 error code (@claudiahdz)
45772af0d#217 npm.community#8863 npm.community#9327 do not descend into directory deps’ child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages (@isaacs and @salomvary)
50cfe113d#229 fixed typo in semver doc (@gall0ws)
e8fb2a1bd#231 Fix spelling mistakes in CHANGELOG-3.md (@XhmikosR)
769d2e057npm/uid-number#7 Better error on invalid
--groupconfigs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no ‘nobody’ user. (@isaacs)
8b43c9624nodejs/node#28987 npm.community#6032 npm.community#6658 npm.community#6069 npm.community#9323 Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. (@isaacs)
8b85eaa47save files with inferred ownership rather than relying on
b7f6e5f02Infer ownership of shrinkwrap files (@isaacs)
54b095d77#235 Add spec to dist-tag remove function (@theberbie)
firstname.lastname@example.org: Infer the ownership of all unpacked files in
node_modules, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. (@isaacs)
9c93ac3#2 npm#3380 Handle environment variables properly (@basbossink)
2d277f8#25 #36 #35 Fix ‘no shebang’ case by always providing
$basedirin shell script (@igorklopov)
$*causing an error when arguments contain parentheses (@satazor)
49f0c13#30 Fix paths for MSYS/MINGW bash (@dscho)
51a8af3#34 Add proper support for PowerShell (@ExE-Boss)
4c37e04#10 Work around quoted batch file names (@isaacs)
- fail properly if
uid-numberraises an error
- fail properly if
Noting a possible regression on Windows:
[Edit: npm v6.11.1 has been released to address this issue.]