Bumps [tar](https://github.com/isaacs/node-tar) and [npm](https://github.com/npm/cli). These dependencies needed to be updated together. Updates `tar` from 7.5.16 to 7.5.19 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/isaacs/node-tar/commit/be440da64e9fe80c68c755d8147328ea1cc2a9ad"><code>be440da</code></a> 7.5.19</li> <li><a href="https://github.com/isaacs/node-tar/commit/2812e9338665659b183aa7226518c307044957d3"><code>2812e93</code></a> add maxDecompressionRatio guard against explosive decompression</li> <li><a href="https://github.com/isaacs/node-tar/commit/9ecd4d2956fd915507eca018ddc1fea727fbba93"><code>9ecd4d2</code></a> 7.5.18</li> <li><a href="https://github.com/isaacs/node-tar/commit/9e78bf058b2c22dd4d52e00d8922d5c06fc2f7b5"><code>9e78bf0</code></a> refuse to let header size be less than 0</li> <li><a href="https://github.com/isaacs/node-tar/commit/e02a4e9e013c4be95302e2eb2047a942b883c27b"><code>e02a4e9</code></a> pax: parse values according to known types</li> <li><a href="https://github.com/isaacs/node-tar/commit/9cbdb31e5e8dbcb97a642e0f91e2d1e342585946"><code>9cbdb31</code></a> 7.5.17</li> <li><a href="https://github.com/isaacs/node-tar/commit/7a635c29f5edbf083557374d43984273ecfed5b3"><code>7a635c2</code></a> terminate pax strings on nul bytes</li> <li>See full diff in <a href="https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.19">compare view</a></li> </ul> </details> <br /> Updates `npm` from 11.17.0 to 11.18.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/releases">npm's releases</a>.</em></p> <blockquote> <h2>v11.18.0</h2> <h2><a href="https://github.com/npm/cli/compare/v11.17.0...v11.18.0">11.18.0</a> (2026-06-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3021ad60d9a381ac8c64617843de661b2a0d4620"><code>3021ad6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9694">#9694</a> arborist: extend replace-registry-host with URL prefix matching (<a href="https://redirect.github.com/npm/cli/issues/6110">#6110</a>) (<a href="https://redirect.github.com/npm/cli/issues/9694">#9694</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/u2mejc"><code>@u2mejc</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/abd8c6b0ce01f2c2c964b1b14e53b37db90be2f5"><code>abd8c6b</code></a> <a href="https://redirect.github.com/npm/cli/pull/9677">#9677</a> graduate the linked install strategy from experimental to stable (<a href="https://redirect.github.com/npm/cli/issues/9677">#9677</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/9420673bcdc59c4acb35c406308bb641c2aef635"><code>9420673</code></a> <a href="https://redirect.github.com/npm/cli/pull/9662">#9662</a> install-scripts: prune unused allowScripts entries (<a href="https://redirect.github.com/npm/cli/issues/9662">#9662</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/fc9d4c72d8ee300a843e8186c5fc39e9c3e874ae"><code>fc9d4c7</code></a> <a href="https://redirect.github.com/npm/cli/pull/9635">#9635</a> namespace install-script approval commands under npm install-scripts (<a href="https://redirect.github.com/npm/cli/issues/9635">#9635</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/073253f8642d1177000b8d18ebe0abcad2ac9b1a"><code>073253f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9564">#9564</a> warn when min-release-age blocks an audit fix (<a href="https://redirect.github.com/npm/cli/issues/9564">#9564</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/598ffdba4495e9b6ad11a830bb874baa49fd8a25"><code>598ffdb</code></a> <a href="https://redirect.github.com/npm/cli/pull/9693">#9693</a> sbom: percent-encode vcs_url qualifier in generated purls (<a href="https://redirect.github.com/npm/cli/issues/9693">#9693</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/ubeddulla"><code>@ubeddulla</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/05793d05230e99421d3611c919ba5ab4c4f49a8a"><code>05793d0</code></a> <a href="https://redirect.github.com/npm/cli/pull/9691">#9691</a> output all the required parameters for npm token list (<a href="https://redirect.github.com/npm/cli/issues/9691">#9691</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/rijildaniel"><code>@rijildaniel</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/cd5713990b2436950158120a7306f6e7de84e21c"><code>cd57139</code></a> <a href="https://redirect.github.com/npm/cli/pull/9669">#9669</a> arborist: surface undeclared workspaces under the linked strategy (backport release/v11) (<a href="https://redirect.github.com/npm/cli/issues/9669">#9669</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/5b6ff9c23e5fbfdfea3bf4c53e3e8094179197c5"><code>5b6ff9c</code></a> <a href="https://redirect.github.com/npm/cli/pull/9667">#9667</a> reify: report added count for fresh linked installs (<a href="https://redirect.github.com/npm/cli/issues/9667">#9667</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>, <a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/8f13beb2cae8582b50ab44ef43154c4c6aaf8a27"><code>8f13beb</code></a> <a href="https://redirect.github.com/npm/cli/pull/9664">#9664</a> query: report logical dep location under linked strategy (<a href="https://redirect.github.com/npm/cli/issues/9664">#9664</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/168ba30915a844075d9217de46030a8f6ce09903"><code>168ba30</code></a> <a href="https://redirect.github.com/npm/cli/pull/9663">#9663</a> allowScripts: close enforcement gaps (<a href="https://redirect.github.com/npm/cli/issues/9652">#9652</a>) (backport release/v11) (<a href="https://redirect.github.com/npm/cli/issues/9663">#9663</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/ae64f883f8345f53cb20f968fafffbb2e6d0c9f6"><code>ae64f88</code></a> <a href="https://redirect.github.com/npm/cli/pull/9648">#9648</a> exec: resolve workspace-local bin under the linked install strategy (<a href="https://redirect.github.com/npm/cli/issues/9648">#9648</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/784cbe99c3e35b128ee0a5e6ff569517305a5c33"><code>784cbe9</code></a> <a href="https://redirect.github.com/npm/cli/pull/9636">#9636</a> ls: restore 100% coverage on release/v11 after <a href="https://redirect.github.com/npm/cli/issues/9633">#9633</a> (<a href="https://redirect.github.com/npm/cli/issues/9636">#9636</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/70f0ea5a0642919f8d2bee9c3c61490e12846b4e"><code>70f0ea5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9607">#9607</a> approve-scripts: approve deps with no resolved URL by name (<a href="https://redirect.github.com/npm/cli/issues/9607">#9607</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/b2e63385c991cfc1430e8e5c347f33a7fd47e0e9"><code>b2e6338</code></a> <a href="https://redirect.github.com/npm/cli/pull/9602">#9602</a> arborist: don't flag inert optional deps in strict-allow-scripts (<a href="https://redirect.github.com/npm/cli/issues/9602">#9602</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/6ad5715c6500b388c64f76826a5038db990aea3a"><code>6ad5715</code></a> <a href="https://redirect.github.com/npm/cli/pull/9595">#9595</a> link: scope <code>npm link --workspace</code> to the workspace, not the root (<a href="https://redirect.github.com/npm/cli/issues/9595">#9595</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3658bb5354f6c72fd9b1c778bba6e933ba7ec4cc"><code>3658bb5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9690">#9690</a> recommend install-strategy=linked to catch phantom dependencies (<a href="https://redirect.github.com/npm/cli/issues/9690">#9690</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/54656b60361318204a72aca9409c2dd4ce4a2c20"><code>54656b6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>undici@6.27.0</code></li> <li><a href="https://github.com/npm/cli/commit/31c4773502b8a3bca5d853270d53d46fe9749ce1"><code>31c4773</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>brace-expansion@5.0.7</code></li> <li><a href="https://github.com/npm/cli/commit/e773c7792c7611d48a44ef4bb532f627d4e94f7c"><code>e773c77</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>tar@7.5.19</code></li> <li><a href="https://github.com/npm/cli/commit/f05f6afbafaaf46e38ac4cc0d4e8ea76c7d7c330"><code>f05f6af</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>semver@7.8.5</code></li> <li><a href="https://github.com/npm/cli/commit/804f9badd99c5c530db0a6c288b18104512d10c3"><code>804f9ba</code></a> <a href="https://redirect.github.com/npm/cli/pull/9580">#9580</a> <code>npm-profile@12.0.2</code></li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f79b37f01b9c624d9dd3806f2f04b3f5e3434e31"><code>f79b37f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> dev dependency updates (<a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/a04cd845e9784ac8a03c1db721dc7a366eadb4f1"><code>a04cd84</code></a> <a href="https://redirect.github.com/npm/cli/pull/9584">#9584</a> add web-login proxy doneUrl regression for npm-profile fix (<a href="https://redirect.github.com/npm/cli/issues/9584">#9584</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.9.0">workspace</a>: <code>@npmcli/arborist@9.9.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.12.0">workspace</a>: <code>@npmcli/config@10.12.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.1.11">workspace</a>: <code>libnpmdiff@8.1.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.3.1">workspace</a>: <code>libnpmexec@10.3.1</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.25">workspace</a>: <code>libnpmfund@7.0.25</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.1.11">workspace</a>: <code>libnpmpack@9.1.11</code></li> </ul> <p>arborist: 9.9.0</p> <h2><a href="https://github.com/npm/cli/compare/arborist-v9.8.0...arborist-v9.9.0">9.9.0</a> (2026-06-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3021ad60d9a381ac8c64617843de661b2a0d4620"><code>3021ad6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9694">#9694</a> arborist: extend replace-registry-host with URL prefix matching (<a href="https://redirect.github.com/npm/cli/issues/6110">#6110</a>) (<a href="https://redirect.github.com/npm/cli/issues/9694">#9694</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/u2mejc"><code>@u2mejc</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/abd8c6b0ce01f2c2c964b1b14e53b37db90be2f5"><code>abd8c6b</code></a> <a href="https://redirect.github.com/npm/cli/pull/9677">#9677</a> graduate the linked install strategy from experimental to stable (<a href="https://redirect.github.com/npm/cli/issues/9677">#9677</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/9420673bcdc59c4acb35c406308bb641c2aef635"><code>9420673</code></a> <a href="https://redirect.github.com/npm/cli/pull/9662">#9662</a> install-scripts: prune unused allowScripts entries (<a href="https://redirect.github.com/npm/cli/issues/9662">#9662</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/073253f8642d1177000b8d18ebe0abcad2ac9b1a"><code>073253f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9564">#9564</a> warn when min-release-age blocks an audit fix (<a href="https://redirect.github.com/npm/cli/issues/9564">#9564</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/774875ba675a4b98e39dd0795e6ab2eb6a0ab8b6"><code>774875b</code></a> <a href="https://redirect.github.com/npm/cli/pull/9686">#9686</a> arborist: keep bin links for allowScripts-denied packages (<a href="https://redirect.github.com/npm/cli/issues/9686">#9686</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/719de1e4677086015f66167f15d0b612438de247"><code>719de1e</code></a> <a href="https://redirect.github.com/npm/cli/pull/9673">#9673</a> arborist: apply overrides across a file: link (backport release/v11) (<a href="https://redirect.github.com/npm/cli/issues/9673">#9673</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/blob/v11.18.0/CHANGELOG.md">npm's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/cli/compare/v11.17.0...v11.18.0">11.18.0</a> (2026-06-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3021ad60d9a381ac8c64617843de661b2a0d4620"><code>3021ad6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9694">#9694</a> arborist: extend replace-registry-host with URL prefix matching (<a href="https://redirect.github.com/npm/cli/issues/6110">#6110</a>) (<a href="https://redirect.github.com/npm/cli/issues/9694">#9694</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/u2mejc"><code>@u2mejc</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/abd8c6b0ce01f2c2c964b1b14e53b37db90be2f5"><code>abd8c6b</code></a> <a href="https://redirect.github.com/npm/cli/pull/9677">#9677</a> graduate the linked install strategy from experimental to stable (<a href="https://redirect.github.com/npm/cli/issues/9677">#9677</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/9420673bcdc59c4acb35c406308bb641c2aef635"><code>9420673</code></a> <a href="https://redirect.github.com/npm/cli/pull/9662">#9662</a> install-scripts: prune unused allowScripts entries (<a href="https://redirect.github.com/npm/cli/issues/9662">#9662</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/fc9d4c72d8ee300a843e8186c5fc39e9c3e874ae"><code>fc9d4c7</code></a> <a href="https://redirect.github.com/npm/cli/pull/9635">#9635</a> namespace install-script approval commands under npm install-scripts (<a href="https://redirect.github.com/npm/cli/issues/9635">#9635</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/073253f8642d1177000b8d18ebe0abcad2ac9b1a"><code>073253f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9564">#9564</a> warn when min-release-age blocks an audit fix (<a href="https://redirect.github.com/npm/cli/issues/9564">#9564</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/598ffdba4495e9b6ad11a830bb874baa49fd8a25"><code>598ffdb</code></a> <a href="https://redirect.github.com/npm/cli/pull/9693">#9693</a> sbom: percent-encode vcs_url qualifier in generated purls (<a href="https://redirect.github.com/npm/cli/issues/9693">#9693</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/ubeddulla"><code>@ubeddulla</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/05793d05230e99421d3611c919ba5ab4c4f49a8a"><code>05793d0</code></a> <a href="https://redirect.github.com/npm/cli/pull/9691">#9691</a> output all the required parameters for npm token list (<a href="https://redirect.github.com/npm/cli/issues/9691">#9691</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/rijildaniel"><code>@rijildaniel</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/cd5713990b2436950158120a7306f6e7de84e21c"><code>cd57139</code></a> <a href="https://redirect.github.com/npm/cli/pull/9669">#9669</a> arborist: surface undeclared workspaces under the linked strategy (backport release/v11) (<a href="https://redirect.github.com/npm/cli/issues/9669">#9669</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/5b6ff9c23e5fbfdfea3bf4c53e3e8094179197c5"><code>5b6ff9c</code></a> <a href="https://redirect.github.com/npm/cli/pull/9667">#9667</a> reify: report added count for fresh linked installs (<a href="https://redirect.github.com/npm/cli/issues/9667">#9667</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>, <a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/8f13beb2cae8582b50ab44ef43154c4c6aaf8a27"><code>8f13beb</code></a> <a href="https://redirect.github.com/npm/cli/pull/9664">#9664</a> query: report logical dep location under linked strategy (<a href="https://redirect.github.com/npm/cli/issues/9664">#9664</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/168ba30915a844075d9217de46030a8f6ce09903"><code>168ba30</code></a> <a href="https://redirect.github.com/npm/cli/pull/9663">#9663</a> allowScripts: close enforcement gaps (<a href="https://redirect.github.com/npm/cli/issues/9652">#9652</a>) (backport release/v11) (<a href="https://redirect.github.com/npm/cli/issues/9663">#9663</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/ae64f883f8345f53cb20f968fafffbb2e6d0c9f6"><code>ae64f88</code></a> <a href="https://redirect.github.com/npm/cli/pull/9648">#9648</a> exec: resolve workspace-local bin under the linked install strategy (<a href="https://redirect.github.com/npm/cli/issues/9648">#9648</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/784cbe99c3e35b128ee0a5e6ff569517305a5c33"><code>784cbe9</code></a> <a href="https://redirect.github.com/npm/cli/pull/9636">#9636</a> ls: restore 100% coverage on release/v11 after <a href="https://redirect.github.com/npm/cli/issues/9633">#9633</a> (<a href="https://redirect.github.com/npm/cli/issues/9636">#9636</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/70f0ea5a0642919f8d2bee9c3c61490e12846b4e"><code>70f0ea5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9607">#9607</a> approve-scripts: approve deps with no resolved URL by name (<a href="https://redirect.github.com/npm/cli/issues/9607">#9607</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/b2e63385c991cfc1430e8e5c347f33a7fd47e0e9"><code>b2e6338</code></a> <a href="https://redirect.github.com/npm/cli/pull/9602">#9602</a> arborist: don't flag inert optional deps in strict-allow-scripts (<a href="https://redirect.github.com/npm/cli/issues/9602">#9602</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/6ad5715c6500b388c64f76826a5038db990aea3a"><code>6ad5715</code></a> <a href="https://redirect.github.com/npm/cli/pull/9595">#9595</a> link: scope <code>npm link <path> --workspace</code> to the workspace, not the root (<a href="https://redirect.github.com/npm/cli/issues/9595">#9595</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h3>Documentation</h3> <ul> <li><a href="https://github.com/npm/cli/commit/3658bb5354f6c72fd9b1c778bba6e933ba7ec4cc"><code>3658bb5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9690">#9690</a> recommend install-strategy=linked to catch phantom dependencies (<a href="https://redirect.github.com/npm/cli/issues/9690">#9690</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/commit/54656b60361318204a72aca9409c2dd4ce4a2c20"><code>54656b6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>undici@6.27.0</code></li> <li><a href="https://github.com/npm/cli/commit/31c4773502b8a3bca5d853270d53d46fe9749ce1"><code>31c4773</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>brace-expansion@5.0.7</code></li> <li><a href="https://github.com/npm/cli/commit/e773c7792c7611d48a44ef4bb532f627d4e94f7c"><code>e773c77</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>tar@7.5.19</code></li> <li><a href="https://github.com/npm/cli/commit/f05f6afbafaaf46e38ac4cc0d4e8ea76c7d7c330"><code>f05f6af</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> <code>semver@7.8.5</code></li> <li><a href="https://github.com/npm/cli/commit/804f9badd99c5c530db0a6c288b18104512d10c3"><code>804f9ba</code></a> <a href="https://redirect.github.com/npm/cli/pull/9580">#9580</a> <code>npm-profile@12.0.2</code></li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/f79b37f01b9c624d9dd3806f2f04b3f5e3434e31"><code>f79b37f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9696">#9696</a> dev dependency updates (<a href="https://github.com/owlstronaut"><code>@owlstronaut</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/a04cd845e9784ac8a03c1db721dc7a366eadb4f1"><code>a04cd84</code></a> <a href="https://redirect.github.com/npm/cli/pull/9584">#9584</a> add web-login proxy doneUrl regression for npm-profile fix (<a href="https://redirect.github.com/npm/cli/issues/9584">#9584</a>) (<a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot], <a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v9.9.0">workspace</a>: <code>@npmcli/arborist@9.9.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/config-v10.12.0">workspace</a>: <code>@npmcli/config@10.12.0</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmdiff-v8.1.11">workspace</a>: <code>libnpmdiff@8.1.11</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmexec-v10.3.1">workspace</a>: <code>libnpmexec@10.3.1</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.25">workspace</a>: <code>libnpmfund@7.0.25</code></li> <li><a href="https://github.com/npm/cli/releases/tag/libnpmpack-v9.1.11">workspace</a>: <code>libnpmpack@9.1.11</code></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/cli/commit/a9c8c06d245347da89c798ebc82fdceb221de08b"><code>a9c8c06</code></a> chore: release 11.18.0</li> <li><a href="https://github.com/npm/cli/commit/f79b37f01b9c624d9dd3806f2f04b3f5e3434e31"><code>f79b37f</code></a> chore: dev dependency updates</li> <li><a href="https://github.com/npm/cli/commit/54656b60361318204a72aca9409c2dd4ce4a2c20"><code>54656b6</code></a> deps: undici@6.27.0</li> <li><a href="https://github.com/npm/cli/commit/31c4773502b8a3bca5d853270d53d46fe9749ce1"><code>31c4773</code></a> deps: brace-expansion@5.0.7</li> <li><a href="https://github.com/npm/cli/commit/e773c7792c7611d48a44ef4bb532f627d4e94f7c"><code>e773c77</code></a> deps: tar@7.5.19</li> <li><a href="https://github.com/npm/cli/commit/f05f6afbafaaf46e38ac4cc0d4e8ea76c7d7c330"><code>f05f6af</code></a> deps: semver@7.8.5</li> <li><a href="https://github.com/npm/cli/commit/3021ad60d9a381ac8c64617843de661b2a0d4620"><code>3021ad6</code></a> feat(arborist): extend replace-registry-host with URL prefix matching (<a href="https://redirect.github.com/npm/cli/issues/6110">#6110</a>)...</li> <li><a href="https://github.com/npm/cli/commit/598ffdba4495e9b6ad11a830bb874baa49fd8a25"><code>598ffdb</code></a> fix(sbom): percent-encode vcs_url qualifier in generated purls (<a href="https://redirect.github.com/npm/cli/issues/9693">#9693</a>)</li> <li><a href="https://github.com/npm/cli/commit/f3f246580c8fa136ec90c5b7d96b940a6f6a90b0"><code>f3f2465</code></a> fix(exec): prevent shared binPaths pollution across workspace runs (<a href="https://redirect.github.com/npm/cli/issues/9692">#9692</a>)</li> <li><a href="https://github.com/npm/cli/commit/05793d05230e99421d3611c919ba5ab4c4f49a8a"><code>05793d0</code></a> fix: output all the required parameters for npm token list (<a href="https://redirect.github.com/npm/cli/issues/9691">#9691</a>)</li> <li>Additional commits viewable in <a href="https://github.com/npm/cli/compare/v11.17.0...v11.18.0">compare view</a></li> </ul> </details> <br /> You can trigger a rebase of this PR by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/melink14/rikaikun/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

File tree

0 commit comments