chore: release 9.9.3 by github-actions[bot] · Pull Request #7010 · npm/cli

github-actions · 2023-11-21T15:30:55Z

🤖 I have created a release beep boop

9.9.3

9.9.3 (2024-02-26)

Bug Fixes

88ea8c7 #7010 set objectMode for search filter stream (@lukekarrys)
8d9d735 #7010 unpublish: bubble up all errors parsing local package.json (fix(unpublish): bubble up all errors parsing local package.json #7049) (@wraithgar)
e0e75e5 #7010 unpublish bugfixes (fix: unpublish bugfixes #7039) (@wraithgar)
4d59ce1 #7047 reverse direction of SPDX SBOM dep rels (fix: reverse direction of SPDX SBOM dep rels #7047) (@bdehamer, @antonbauhofer)
878f22b #7008 properly catch missing url opener error (@wraithgar)
91a8eca #7008 properly catch missing url opener error on interactive prompt (@wraithgar)

Dependencies

1968e0e #7010 spdx-license-ids@3.0.17
d130576 #7010 spdx-exceptions@2.5.0
00f28b8 #7010 signal-exit@4.1.0
57096c3 #7010 postcss-selector-parser@6.0.15
3ce677e #7010 minipass-fetch@3.0.4
89757ed #7010 is-core-module@2.13.1
bc1e841 #7010 socks@2.8.1
01f4049 #7010 ignore-walk@6.0.4
15f8982 #7010 function-bind@1.1.2
88ff949 #7010 cmd-shim@6.0.2
3e298f6 #7010 bin-links@4.0.3
35a6286 #7010 are-we-there-yet@4.0.2
aeb28c4 #7010 agentkeepalive@4.5.0
edc7e23 #7010 @npmcli/query@3.1.0
00a3a08 #7010 tar@6.2.0
7f424c3 #7010 ssri@10.0.5
79b8538 #7010 semver@7.6.0
b5faf10 #7010 npm-install-checks@6.3.0
2c62266 #7010 node-gyp@9.4.1
cc0516b #7010 minipass@7.0.4
651d362 #7010 json-parse-even-better-errors@3.0.1
4b239c6 #7010 glob@10.3.10
2f65b46 #7010 fs-minipass@3.0.3
6c73ddf #7010 diff@5.2.0
73ee6cc #7010 ci-info@4.0.0
64715a4 #7010 cacache@17.1.4
workspace: @npmcli/arborist@6.5.1
workspace: @npmcli/config@6.4.1
workspace: libnpmaccess@7.0.3
workspace: libnpmdiff@5.0.21
workspace: libnpmexec@6.0.5
workspace: libnpmfund@4.2.2
workspace: libnpmhook@9.0.4
workspace: libnpmorg@5.0.5
workspace: libnpmpack@5.0.21
workspace: libnpmpublish@7.5.2
workspace: libnpmsearch@6.0.3
workspace: libnpmteam@5.0.4
workspace: libnpmversion@4.0.3

Chores

77fa150 #7252 release: do not exclude docs directory from CLI release commits (chore(release): do not exclude docs directory from CLI release commits #7162) (@lukekarrys)
1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
6780643 #7010 dev dependency updates (@wraithgar)
ce701e9 #7048 fix tests for zlib differences between node versions (chore: fix tests for zlib differences between node versions #7048) (@wraithgar)

arborist: 6.5.1

6.5.1 (2024-02-26)

Dependencies

edc7e23 #7010 @npmcli/query@3.1.0

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

config: 6.4.1

6.4.1 (2024-02-26)

Dependencies

73ee6cc #7010 ci-info@4.0.0

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmaccess: 7.0.3

7.0.3 (2024-02-26)

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)
1c8d17a #6416 @npmcli/template-oss@4.14.1 (@wraithgar)
99cf197 #6275 @npmcli/template-oss@4.12.1 (@wraithgar)
b48c43f #6229 @npmcli/template-oss@4.12.0 (chore: @npmcli/template-oss@4.12.0 #6229) (@lukekarrys)
66dd0d6 #6144 template-oss@4.11.4 (chore: template-oss@4.11.4 #6144) (@lukekarrys)
4bf4c22 #6133 deps: nock@13.3.0 (@lukekarrys)
5bb0d15 #6133 deps: tap@16.3.4 (@lukekarrys)

libnpmdiff: 5.0.21

5.0.21 (2024-02-26)

Dependencies

workspace: @npmcli/arborist@6.5.1

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmexec: 6.0.5

6.0.5 (2024-02-26)

Dependencies

73ee6cc #7010 ci-info@4.0.0
workspace: @npmcli/arborist@6.5.1

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmfund: 4.2.2

4.2.2 (2024-02-26)

Dependencies

workspace: @npmcli/arborist@6.5.1

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmhook: 9.0.4

9.0.4 (2024-02-26)

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)
1c8d17a #6416 @npmcli/template-oss@4.14.1 (@wraithgar)
99cf197 #6275 @npmcli/template-oss@4.12.1 (@wraithgar)
b48c43f #6229 @npmcli/template-oss@4.12.0 (chore: @npmcli/template-oss@4.12.0 #6229) (@lukekarrys)

libnpmorg: 5.0.5

5.0.5 (2024-02-26)

Dependencies

cc0516b #7010 minipass@7.0.4

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)

libnpmpack: 5.0.21

5.0.21 (2024-02-26)

Dependencies

workspace: @npmcli/arborist@6.5.1

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmpublish: 7.5.2

7.5.2 (2024-02-26)

Dependencies

73ee6cc #7010 ci-info@4.0.0

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)

libnpmsearch: 6.0.3

6.0.3 (2024-02-26)

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)
1c8d17a #6416 @npmcli/template-oss@4.14.1 (@wraithgar)
99cf197 #6275 @npmcli/template-oss@4.12.1 (@wraithgar)
b48c43f #6229 @npmcli/template-oss@4.12.0 (chore: @npmcli/template-oss@4.12.0 #6229) (@lukekarrys)
66dd0d6 #6144 template-oss@4.11.4 (chore: template-oss@4.11.4 #6144) (@lukekarrys)
4bf4c22 #6133 deps: nock@13.3.0 (@lukekarrys)
5bb0d15 #6133 deps: tap@16.3.4 (@lukekarrys)

libnpmteam: 5.0.4

5.0.4 (2024-02-26)

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)
1c8d17a #6416 @npmcli/template-oss@4.14.1 (@wraithgar)
99cf197 #6275 @npmcli/template-oss@4.12.1 (@wraithgar)
b48c43f #6229 @npmcli/template-oss@4.12.0 (chore: @npmcli/template-oss@4.12.0 #6229) (@lukekarrys)

libnpmversion: 4.0.3

4.0.3 (2024-02-26)

Chores

1d4c464 #7252 @npmcli/template-oss@4.21.3 (@lukekarrys)
608005d #6812 @npmcli/template-oss@4.19.0 (chore: @npmcli/template-oss@4.19.0 #6812) (@wraithgar)
3829998 #6654 @npmcli/template-oss@4.18.0 (chore: @npmcli/template-oss@4.18.0 #6654) (@wraithgar)
1c8d17a #6416 @npmcli/template-oss@4.14.1 (@wraithgar)
99cf197 #6275 @npmcli/template-oss@4.12.1 (@wraithgar)
b48c43f #6229 @npmcli/template-oss@4.12.0 (chore: @npmcli/template-oss@4.12.0 #6229) (@lukekarrys)
66dd0d6 #6144 template-oss@4.11.4 (chore: template-oss@4.11.4 #6144) (@lukekarrys)
5bb0d15 #6133 deps: tap@16.3.4 (@lukekarrys)

This PR was generated with Release Please. See documentation.

github-actions · 2023-11-21T15:31:00Z

Release Manager

Release workflow run: https://github.com/npm/cli/actions/runs/8054462488

Release Checklist for v9.9.3

1. Checkout the release branch

Ensure git status is not dirty on this branch after resetting deps. If it is, then something is probably wrong with the automated release process.
```
gh pr checkout 7010 --force
```
```
npm run resetdeps
```
```
node scripts/git-dirty.js
```
2. Check CI status
```
gh pr checks --watch
```
3. Publish the CLI and workspaces

Warning:
This will publish all updated workspaces to latest, prerelease or backport depending on their version, and will publish the CLI with the dist-tag set to next-9.

Note:
The --test argument can optionally be omitted to run the publish process without running any tests locally.
```
node scripts/publish.js --test
```

4. Optionally install and test npm@9.9.3 locally

npm i -g npm@9.9.3

npm --version
npm whoami
npm help install
# etc

5. Set latest dist-tag to newly published version

Warning:
NOT FOR PRERELEASE: Do not run this step for prereleases or if 9 is not being set to latest.
```
node . dist-tag add npm@9.9.3 latest
```

6. Trigger docs.npmjs.com update

gh workflow run update-cli.yml --repo npm/documentation

7. Merge release PR

gh pr merge --rebase

git checkout release/v9

git fetch

git reset --hard origin/release/v9

node . run resetdeps

8. Wait For Release Tags

Warning:
The remaining steps all require the GitHub tags and releases to be created first. These are done once this PR has been labelled with autorelease: tagged.

Release Please will run on the just merged release commit and create GitHub releases and tags for each package. The release bot will will comment on this PR when the releases and tags are created.

Note:
The release workflow also includes the Node integration tests which do not need to finish before continuing.

You can watch the release workflow in your terminal with the following command:
```
gh run watch `gh run list -R npm/cli -w release -b release/v9 -L 1 --json databaseId -q ".[0].databaseId"`
```
9. Mark GitHub Release as latest

Warning:
You must wait for CI to create the release tags before running this step. These are done once this PR has been labelled with autorelease: tagged.

Release Please will make GitHub Releases for the CLI and all workspaces, but GitHub has UI affordances for which release should appear as the "latest", which should always be the CLI. To mark the CLI release as latest run this command:
```
gh release -R npm/cli edit v9.9.3 --latest
```
10. Open nodejs/node PR to update npm to latest

Warning:
You must wait for CI to create the release tags before running this step. These are done once this PR has been labelled with autorelease: tagged.

Trigger the Create Node PR action. This will open a PR on nodejs/node to the main branch.

Note:
The resulting PR may need to be labelled if it is not intended to land on old Node versions.

First, sync our fork of node with the upstream source:
```
gh repo sync npm/node --source nodejs/node --force
```
Then, if we are opening a PR against the latest version of node:
```
gh workflow run create-node-pr.yml -f spec=next-9
```
If the PR should be opened on a different branch (such as when doing backports) then run it with -f branch=<BRANCH_NAME>. There is also a shortcut to target a specific Node version by specifying a major version number with -f branch=18 (or similar).

For example, this will create a PR on nodejs/node to the v16.x-staging branch:
```
gh workflow run create-node-pr.yml -f spec=next-9 -f branch=16
```
11. Label and fast-track nodejs/node PR

Note:
This requires being a nodejs collaborator. Currently @lukekarrys is so ping them to do these steps!
- Thumbs-up reaction on the Fast-track comment
- Add an LGTM / Approval
- Add request-ci label to get it running CI
- Add commit-queue label once everything is green

github-actions · 2024-02-28T17:28:43Z

🤖 Release is at https://github.com/npm/cli/releases/tag/v9.9.3 🌻

github-actions · 2024-02-28T17:28:45Z

🤖 Release is at https://github.com/npm/cli/releases/tag/arborist-v6.5.1 🌻

github-actions · 2024-02-28T17:28:46Z

🤖 Release is at https://github.com/npm/cli/releases/tag/config-v6.4.1 🌻

github-actions · 2024-02-28T17:28:48Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmaccess-v7.0.3 🌻

github-actions · 2024-02-28T17:28:49Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmdiff-v5.0.21 🌻

github-actions · 2024-02-28T17:28:51Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmexec-v6.0.5 🌻

github-actions · 2024-02-28T17:28:52Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmfund-v4.2.2 🌻

github-actions · 2024-02-28T17:28:54Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmhook-v9.0.4 🌻

github-actions · 2024-02-28T17:28:55Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmorg-v5.0.5 🌻

github-actions · 2024-02-28T17:28:57Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmpack-v5.0.21 🌻

github-actions · 2024-02-28T17:28:58Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmpublish-v7.5.2 🌻

github-actions · 2024-02-28T17:29:00Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmsearch-v6.0.3 🌻

github-actions · 2024-02-28T17:29:01Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmteam-v5.0.4 🌻

github-actions · 2024-02-28T17:29:03Z

🤖 Release is at https://github.com/npm/cli/releases/tag/libnpmversion-v4.0.3 🌻

github-actions · 2024-02-28T17:29:36Z

Release Workflow

npm@9.9.3 https://github.com/npm/cli/releases/tag/v9.9.3
@npmcli/arborist@6.5.1 https://github.com/npm/cli/releases/tag/arborist-v6.5.1
@npmcli/config@6.4.1 https://github.com/npm/cli/releases/tag/config-v6.4.1
libnpmaccess@7.0.3 https://github.com/npm/cli/releases/tag/libnpmaccess-v7.0.3
libnpmdiff@5.0.21 https://github.com/npm/cli/releases/tag/libnpmdiff-v5.0.21
libnpmexec@6.0.5 https://github.com/npm/cli/releases/tag/libnpmexec-v6.0.5
libnpmfund@4.2.2 https://github.com/npm/cli/releases/tag/libnpmfund-v4.2.2
libnpmhook@9.0.4 https://github.com/npm/cli/releases/tag/libnpmhook-v9.0.4
libnpmorg@5.0.5 https://github.com/npm/cli/releases/tag/libnpmorg-v5.0.5
libnpmpack@5.0.21 https://github.com/npm/cli/releases/tag/libnpmpack-v5.0.21
libnpmpublish@7.5.2 https://github.com/npm/cli/releases/tag/libnpmpublish-v7.5.2
libnpmsearch@6.0.3 https://github.com/npm/cli/releases/tag/libnpmsearch-v6.0.3
libnpmteam@5.0.4 https://github.com/npm/cli/releases/tag/libnpmteam-v5.0.4
libnpmversion@4.0.3 https://github.com/npm/cli/releases/tag/libnpmversion-v4.0.3
Workflow run: ❌ https://github.com/npm/cli/actions/runs/8084535950

🚨🚨🚨

@npm/cli-team: The post-release workflow failed for this release. Manual steps may need to be taken after examining the workflow output.

🚨🚨🚨

github-actions bot requested a review from a team as a code owner November 21, 2023 15:30

github-actions bot added the autorelease: pending label Nov 21, 2023

github-actions bot force-pushed the release-please--branches--release/v9 branch from 55cbcc2 to 7e0006c Compare November 21, 2023 15:31

github-actions bot force-pushed the release-please--branches--release/v9 branch 6 times, most recently from 40091f5 to b3306bf Compare December 1, 2023 20:43

github-actions bot force-pushed the release-please--branches--release/v9 branch 3 times, most recently from 412b871 to 9091397 Compare February 26, 2024 19:29

chore: release 9.9.3

48abfeb

github-actions bot force-pushed the release-please--branches--release/v9 branch from 9091397 to 48abfeb Compare February 26, 2024 19:30

wraithgar self-assigned this Feb 26, 2024

wraithgar merged commit 4998adf into release/v9 Feb 28, 2024

wraithgar deleted the release-please--branches--release/v9 branch February 28, 2024 17:23

github-actions bot added autorelease: tagged and removed autorelease: pending labels Feb 28, 2024

errodrigues mentioned this pull request Feb 28, 2024

Server-Side-Request Forgery vulnerability introduced in npm 10.4 [BUG] <title> #7216

Closed

2 tasks

Conversation

github-actions bot commented Nov 21, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

🤖 I have created a release beep boop

9.9.3 (2024-02-26)

Bug Fixes

Dependencies

Chores

6.5.1 (2024-02-26)

Dependencies

Chores

6.4.1 (2024-02-26)

Dependencies

Chores

7.0.3 (2024-02-26)

Chores

5.0.21 (2024-02-26)

Dependencies

Chores

6.0.5 (2024-02-26)

Dependencies

Chores

4.2.2 (2024-02-26)

Dependencies

Chores

9.0.4 (2024-02-26)

Chores

5.0.5 (2024-02-26)

Dependencies

Chores

5.0.21 (2024-02-26)

Dependencies

Chores

7.5.2 (2024-02-26)

Dependencies

Chores

6.0.3 (2024-02-26)

Chores

5.0.4 (2024-02-26)

Chores

4.0.3 (2024-02-26)

Chores

Uh oh!

github-actions bot commented Nov 21, 2023 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Manager

Release Checklist for v9.9.3

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024

Uh oh!

github-actions bot commented Feb 28, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Workflow

Uh oh!

github-actions bot commented Nov 21, 2023 •

edited

Loading

github-actions bot commented Nov 21, 2023 •

edited

Loading

github-actions bot commented Feb 28, 2024 •

edited

Loading