feat: add allow-directory, allow-file, and allow-remote (#9288)

Backport of #9287 to `release/v11`.

Co-authored-by: Gar <gar+gh@danger.computer>

Author: github-actions[bot]

lib/commands/ci.js

@@ -21,7 +21,10 @@ class CI extends ArboristWorkspaceCmd {
     'strict-peer-deps',
     'foreground-scripts',
     'ignore-scripts',
+    'allow-directory',
+    'allow-file',
     'allow-git',
+    'allow-remote',
     'audit',
     'bin-links',
     'fund',

lib/commands/dedupe.js

@@ -14,7 +14,10 @@ class Dedupe extends ArboristWorkspaceCmd {
     'omit',
     'include',
     'ignore-scripts',
+    'allow-directory',
+    'allow-file',
     'allow-git',
+    'allow-remote',
     'audit',
     'bin-links',
     'fund',

lib/commands/install.js

@@ -27,7 +27,10 @@ class Install extends ArboristWorkspaceCmd {
     'package-lock-only',
     'foreground-scripts',
     'ignore-scripts',
+    'allow-directory',
+    'allow-file',
     'allow-git',
+    'allow-remote',
     'audit',
     'before',
     'min-release-age',

lib/commands/link.js

@@ -25,7 +25,10 @@ class Link extends ArboristWorkspaceCmd {
     'omit',
     'include',
     'ignore-scripts',
+    'allow-directory',
+    'allow-file',
     'allow-git',
+    'allow-remote',
     'audit',
     'bin-links',
     'fund',

smoke-tests/tap-snapshots/test/index.js.test.cjs

@@ -59,8 +59,9 @@ npm error [--install-strategy <hoisted|nested|shallow|linked>] [--legacy-bundlin
 npm error [--global-style] [--omit <dev|optional|peer> [--omit <dev|optional|peer> ...]]
 npm error [--include <prod|dev|optional|peer> [--include <prod|dev|optional|peer> ...]]
 npm error [--strict-peer-deps] [--foreground-scripts] [--ignore-scripts]
-npm error [--allow-git <all|none|root>] [--no-audit] [--no-bin-links] [--no-fund]
-npm error [--dry-run]
+npm error [--allow-directory <all|none|root>] [--allow-file <all|none|root>]
+npm error [--allow-git <all|none|root>] [--allow-remote <all|none|root>] [--no-audit]
+npm error [--no-bin-links] [--no-fund] [--dry-run]
 npm error [-w|--workspace <workspace-name> [-w|--workspace <workspace-name> ...]]
 npm error [--workspaces] [--include-workspace-root] [--install-links]
 npm error
@@ -88,9 +89,18 @@ npm error
 npm error   --ignore-scripts
 npm error     If true, npm does not run scripts specified in package.json files.
 npm error
+npm error   --allow-directory
+npm error     Limits the ability for npm to install dependencies from directories.
+npm error
+npm error   --allow-file
+npm error     Limits the ability for npm to install dependencies from tarball files.
+npm error
 npm error   --allow-git
 npm error     Limits the ability for npm to fetch dependencies from git references.
 npm error
+npm error   --allow-remote
+npm error     Limits the ability for npm to fetch dependencies from urls.
+npm error
 npm error   --audit
 npm error     When "true" submit audit reports alongside the current npm command to the
 npm error

tap-snapshots/test/lib/commands/config.js.test.cjs

@@ -16,7 +16,10 @@ exports[`test/lib/commands/config.js TAP config list --json > output matches sna
   "access": null,
   "all": false,
   "allow-same-version": false,
+  "allow-directory": "all",
+  "allow-file": "all",
   "allow-git": "all",
+  "allow-remote": "all",
   "also": null,
   "audit": true,
   "audit-level": null,
@@ -192,7 +195,10 @@ exports[`test/lib/commands/config.js TAP config list --long > output matches sna
 _auth = (protected)
 access = null
 all = false
+allow-directory = "all"
+allow-file = "all"
 allow-git = "all"
+allow-remote = "all"
 allow-same-version = false
 also = null
 audit = true