GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — deps: upgrade npm to 6.1.0 by iarna · Pull Request #20190 · nodejs/node

Conversation

@iarna

@iarna iarna commented Apr 21, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member
Checklist
  • make test-npm passes
  • commit message follows commit guidelines
Where this should land
  • Node 10
  • Node 8
Breaking changes

This is a major release, so it does include breaking changes. They are, however, very minor and important:

  • npm update and npm outdated now will not suggest versions greater than the version tagged as latest. This is in alignment with the use of tags for release trains or experimental versions, while not requiring the use of prerelease version numbers.
  • npm install will now do its best to avoid versions that are marked as deprecated. That is makes npm deprecate similar to how the gem yank command works in ruby. If you specifically ask for a deprecated version you will still get it.
  • npm will now report that it no longer supports node v4 and node v7.
Notable changes
  • Flattening npm's dependency tree to take advantage of the MacOS installer rewrite will fix npm causes the windows installer (.msi) to almost reach MAX_PATH (and using the .zip can easily exceed it) #19449
  • npm init now can take an argument and it will run a matching create-… script from the registry. An amalgam of npx and yarn create.
  • npm audit provides a vulnerability scanner. The registry side of this will be available soon. Details are discussed in the CHANGELOG
  • npm audit fix to help users automatically fix vulnerabilities found with npm audit.
  • Webhook management is now included with the cli as the npm hook command. Previously this functionality was found in the module wombat. With webhooks you can request notification whenever a package updates.
  • Rewrite binaries less. Previously if we found a CRLF in a binary that had a shebang then we would convert the entire file to unix line endings. With this change we only convert the shebang line itself.
  • Eliminate use of new Buffer in npm
  • Rewritten and prettier npm view
  • npm pack and npm publish previews when running them with --dry-run
  • npm ci, new, faster, lock-file only install mode and npm cit to install and test
  • Automatic git merge conflict resolution on conflicts in lock-files.
  • A slew of bug fixes are stabilizing lock-files when using partial installs (eg, --only=production, --no-optional, etc)
Changelogs
  • v5.7.0
  • v5.7.1
  • v5.8.0
  • v6.0.0
  • v6.0.1
  • v6.1.0

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

ChALkeR, TheLarkInn, trivikr, bricss, ex1st, slanterns, OlegLustenko, LitoMore, Asjas, b1f6c1c4, and 8 more reacted with thumbs up emoji bricss, LitoMore, wncm, and bajtos reacted with hooray emoji bricss, LitoMore, thorn0, victorandree, wncm, bajtos, and jmjpro reacted with heart emoji
All reactions
  • 👍 18 reactions
  • 🎉 4 reactions
  • ❤️ 7 reactions
@iarna iarna added the npm Issues and PRs related to the npm client dependency or the npm registry. label Apr 21, 2018
@ChALkeR

ChALkeR commented Apr 21, 2018

Copy link
Copy Markdown
Member

/cc @jasnell

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@Trott Trott added this to the 10.0.0 milestone Apr 21, 2018
@Trott Trott added the v10.x label Apr 21, 2018
Trott
Trott approved these changes Apr 21, 2018
View reviewed changes

@Trott Trott left a comment

Copy link
Copy Markdown
Member

There was a problem hiding this comment.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Rubber-stamp LGTM if Ci is green. Probably want to run CITGM too?

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
@jasnell

jasnell commented Apr 21, 2018

Copy link
Copy Markdown
Member

This is likely semver-major.
Without explicit TSC sign off it will not land in 10.0.0.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@Trott

Trott commented Apr 21, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

@nodejs/tsc I'm labeling this tsc-review. Please indicate endorsement or opposition to landing this in 10.0.0 with a 👍 or a 👎 on this comment. Of course, feel free to leave a comment yourself if you want to explain your position or ask a question.

[EDIT: Just to make sure there's no confusion, 👍 means you approve landing this in 10.0.0 and 👎 means you are opposed to it. Heck, let's throw in 😕 for anyone who wants to indicate they have no opinion either way, basically abstaining.]

mcollina, MylesBorins, addaleax, WaleedAshraf, RatoX, FallenRiteMonk, rodoabad, dnalborczyk, lance, cesarfd, and 3 more reacted with thumbs up emoji rvagg, cjihrig, jasnell, targos, and fhinkel reacted with thumbs down emoji TimothyGu reacted with confused emoji
All reactions
  • 👍 13 reactions
  • 👎 5 reactions
  • 😕 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@Trott Trott added the tsc-review label Apr 21, 2018
@ChALkeR

ChALkeR commented Apr 21, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

@Trott it should be noted that this is not 6.0.0 yet — it looks like 6.0.0 hasn't been tagged.
See https://github.com/npm/npm/releases/tag/v6.0.0-next.2

@iarna Is this WiP? What's the ETA for 6.0.0?

Trott reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@iarna

iarna commented Apr 21, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member Author

@ChALkeR Our plans over the last several months has been to only badge 6.0.0 in conjunction with the Node 10 release, assuming npm6 lands in Node 10. The version badged as 6.0.0 and tagged as latest will otherwise be exactly the same as 6.0.0-next.2. (I have a sneaking suspicion that our plans were not communicated and coordinated where I thought they were, so if this is the first you all are hearing of this, I appologize.)

ChALkeR reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@MylesBorins

MylesBorins commented Apr 21, 2018

Copy link
Copy Markdown
Contributor

@iarna what are the semver major changes from 5 -> 6

Is it possible that this could be semver minor? If so we could also backport to 8.x

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@iarna

iarna commented Apr 21, 2018

Copy link
Copy Markdown
Member Author

@MylesBorins I think I answered all these questions in opening:

The major changes are described under "breaking changes" in the summary. They are quite minor but they aren't semver minor. I'm of the opinion that they're valuable enough that we should lobby to include them in Node 8, but YMMV.

And if you look under "where should this land" I said:

Node 8; … If we all end up deciding that's not the way to go, I do have an alternate release line with everything but the breaking changes here that I can PR for it.

There's a 5.10.0 rc currently published, but I'd want to do a 5.11 with the non-breaking things from 6 if it's decided that Node 8 can't take 6.

LitoMore reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mcollina

mcollina commented Apr 21, 2018

Copy link
Copy Markdown
Member

Considering the status of things, +1 to fast-track with CI and CITGM ok.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mcollina mcollina mentioned this pull request Apr 21, 2018
Coordination on npm releases nodejs/TSC#528
Closed
@ChALkeR

ChALkeR commented Apr 21, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

Our plans over the last several months has been to only badge 6.0.0 in conjunction with the Node 10 release, assuming npm6 lands in Node 10. The version badged as 6.0.0 and tagged as latest will otherwise be exactly the same as 6.0.0-next.2.

@iarna Yes, that looks good to me then. Huge +1 to getting npm@6 into 10.0.0.
That said, I did not do a proper review of this PR — don't consider this comment as such.

+1 to fast-track

@mcollina I don't think this could be fast-tracked, could it?

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mcollina

mcollina commented Apr 21, 2018

Copy link
Copy Markdown
Member

If we plan to release on Tuesday 24th, there won’t be 72 hours (weekend time) to be able to issue another rc with this in.

If we want to have this in 10.0.0, this should have landed weeks ago. The longer we wait the worse it’ll get.

We need TSC approval anyway.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@addaleax

addaleax commented Apr 21, 2018

Copy link
Copy Markdown
Member

As I understand #20121 (comment), we essentially want a @nodejs/tsc vote for this.

I’m okay with landing this in 10.0.0, but yes, it’s way past the deadline and not exactly a trivial change, so I think it would be a good option to include it in the first semver-minor release, given how small the actual breakages here are.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@jasnell

jasnell commented Apr 21, 2018

Copy link
Copy Markdown
Member

No, this pr cannot be fast tracked in the normal sense. It's too large, needs more review, and adequate consideration. I'm leaning strongly against rushing it in to 10.0.0 and potentially landing it as a minor in a 10.x minor later.

bricss, gibfahn, TimothyGu, mhdawson, and WaleedAshraf reacted with thumbs up emoji
All reactions
  • 👍 5 reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@cjihrig

cjihrig commented Apr 21, 2018

Copy link
Copy Markdown
Contributor

+1 to landing it in a semver minor.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@joyeecheung

joyeecheung commented Apr 21, 2018

Copy link
Copy Markdown
Member

I am leaning towards landing it as semver minor as well

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mcollina

mcollina commented Apr 21, 2018

Copy link
Copy Markdown
Member

I’m also +1 to landing as a minor after 10.0.0 is released as well.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@MylesBorins

MylesBorins commented Apr 21, 2018 via email

Copy link
Copy Markdown
Contributor
+1 for semver minor after the release. Good precident for landing it on 8.x
…
On Sat, Apr 21, 2018, 11:07 AM Matteo Collina ***@***.***> wrote: I’m also +1 to landing as a minor after 10.0.0 is released as well. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#20190 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AAecV832X4VRsisU0l_tAC7vUyZqgPSDks5tq0s5gaJpZM4TeUV9> .
finnhvman reacted with thumbs up emoji
All reactions
  • 👍 1 reaction

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@BridgeAR BridgeAR mentioned this pull request Apr 22, 2018
update npm to 5.8.0 #19840
Closed
@TimothyGu

TimothyGu commented Apr 22, 2018

Copy link
Copy Markdown
Member

+1 on landing this as semver-minor.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@mhdawson

mhdawson commented Apr 23, 2018 •
edited
Loading

Uh oh!

There was an error while loading. Please reload this page.

Copy link
Copy Markdown
Member

+1 on landing this as semver-minor after the release.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@jasnell jasnell removed this from the 10.0.0 milestone Apr 23, 2018
@jasnell

jasnell commented Apr 23, 2018

Copy link
Copy Markdown
Member

Removing this from the 10.0.0 milestone.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@Trott

Trott commented Apr 23, 2018

Copy link
Copy Markdown
Member

Seems like there's consensus on landing this in 10.x but not 10.0. Removing tsc-review label. Can re-add if there are advocates for landing in 10.0 and not a subsequent 10.x release.

All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

@Trott Trott removed the tsc-review label Apr 23, 2018
@BridgeAR BridgeAR added the semver-minor PRs that contain new features and should be released in the next minor version. label Apr 24, 2018
iarna added a commit that referenced this pull request May 25, 2018
@iarna
deps: upgrade npm to 6.1.0
468ab45
PR-URL: #20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
targos pushed a commit that referenced this pull request May 25, 2018
@iarna @targos
deps: upgrade npm to 6.1.0
d0cdcb6
PR-URL: #20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
@MylesBorins MylesBorins mentioned this pull request May 29, 2018
v10.3.0 proposal #21011
Merged
MylesBorins added a commit that referenced this pull request May 29, 2018
@MylesBorins
2018-05-29, Version 10.3.0 (Current)
b68b1df
Notable Changes:

* **deps**:
  - upgrade npm to 6.1.0 (Rebecca Turner)
    #20190
* **fs**:
  - fix reads with pos \> 4GB (Mathias Buus)
    #21003
* **net**:
  - new option to allow IPC servers to be readable and writable
    by all users (Bartosz Sosnowski)
    #19472
* **stream**:
  - fix removeAllListeners() for Stream.Readable to work as expected
    when no arguments are passed (Kael Zhang)
    #20924
* **Added new collaborators**
  - John-David Dalton (https://github.com/jdalton)

PR-URL: #21011
MylesBorins added a commit that referenced this pull request May 29, 2018
@MylesBorins
2018-05-29, Version 10.3.0 (Current)
c1dae43
Notable Changes:

* **deps**:
  - upgrade npm to 6.1.0 (Rebecca Turner)
    #20190
* **fs**:
  - fix reads with pos \> 4GB (Mathias Buus)
    #21003
* **net**:
  - new option to allow IPC servers to be readable and writable
    by all users (Bartosz Sosnowski)
    #19472
* **stream**:
  - fix removeAllListeners() for Stream.Readable to work as expected
    when no arguments are passed (Kael Zhang)
    #20924
* **Added new collaborators**
  - John-David Dalton (https://github.com/jdalton)

PR-URL: #21011
MylesBorins added a commit that referenced this pull request May 29, 2018
@MylesBorins
2018-05-29, Version 10.3.0 (Current)
9ae658e
Notable Changes:

* **deps**:
  - upgrade npm to 6.1.0 (Rebecca Turner)
    #20190
* **fs**:
  - fix reads with pos \> 4GB (Mathias Buus)
    #21003
* **net**:
  - new option to allow IPC servers to be readable and writable
    by all users (Bartosz Sosnowski)
    #19472
* **stream**:
  - fix removeAllListeners() for Stream.Readable to work as expected
    when no arguments are passed (Kael Zhang)
    #20924
* **Added new collaborators**
  - John-David Dalton (https://github.com/jdalton)

PR-URL: #21011
hashseed pushed a commit to v8/node that referenced this pull request Jun 6, 2018
@iarna @hashseed
deps: upgrade npm to 6.1.0
6890e0a
PR-URL: nodejs#20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
princjef pushed a commit to princjef/node that referenced this pull request Jun 12, 2018
@iarna @princjef
deps: upgrade npm to 6.1.0
3de9b50
PR-URL: nodejs#20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
@princjef princjef mentioned this pull request Jun 13, 2018
[v8.x backport] deps: upgrade npm to 6.1.0 #21302
Closed
4 tasks done
MylesBorins pushed a commit that referenced this pull request Jun 14, 2018
@iarna @MylesBorins
deps: upgrade npm to 6.1.0
f686e0f
Backport-PR-URL: #21302
PR-URL: #20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
@MylesBorins MylesBorins mentioned this pull request Jul 9, 2018
v8.12.0 proposal #21593
Merged
rvagg pushed a commit that referenced this pull request Aug 16, 2018
@iarna @rvagg
deps: upgrade npm to 6.1.0
6772364
Backport-PR-URL: #21302
PR-URL: #20190
Reviewed-By: Rich Trott <[email protected]>
Reviewed-By: Ruben Bridgewater <[email protected]>
Reviewed-By: Tiancheng "Timothy" Gu <[email protected]>
Reviewed-By: Benjamin Gruenbaum <[email protected]>
Reviewed-By: Michaël Zasso <[email protected]>
@richardlau richardlau mentioned this pull request May 20, 2020
npm currency on Node v12 nodejs/TSC#869
Closed
@wraithgar
wraithgar deleted the npm-6.0.0 branch June 26, 2025 15:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Trott Trott Trott approved these changes
@benjamingr benjamingr benjamingr approved these changes
@BridgeAR BridgeAR BridgeAR approved these changes
+2 more reviewers
@TimothyGu TimothyGu TimothyGu approved these changes
@targos targos targos approved these changes
Reviewers whose approvals may not affect merge requirements

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

author ready PRs with CI started, the required approvals, and no outstanding review comments. npm Issues and PRs related to the npm client dependency or the npm registry. semver-minor PRs that contain new features and should be released in the next minor version.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

npm causes the windows installer (.msi) to almost reach MAX_PATH (and using the .zip can easily exceed it)

Uh oh!

There was an error while loading. Please reload this page.

16 participants

@iarna @ChALkeR @jasnell @Trott @MylesBorins @mcollina @addaleax @cjihrig @joyeecheung @TimothyGu @mhdawson @targos @devsnek @BridgeAR @richardlau @benjamingr
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.