11.5.1 (2025-07-24)

Bug Fixes

• 476bf17 #8457 provenance should only default for oidc (@reggi)

11.5.0 (2025-07-24)

Features

• 1cce318 #8336 adds support for oidc publish (#8336) (@reggi)

Bug Fixes

• 7f66f0a #8447 add better hint for before and clean up description (@wraithgar)
• 280817a #8447 add --before param to command help output (@wraithgar)
• 6e47325 #8441 Makes 404 errors less scary without revealing existence (#8441) (@owlstronaut)
• 0a97ffd #8429 handle signal exits gracefully (@owlstronaut)
• 5b858c6 #8411 ensure progress bars display consistently across all environments (#8411) (@owlstronaut)

Documentation

• ef3529e #8435 add test snapshot (#8435) (@reggi, @wraithgar)
• b7758d7 #8418 remove reference to Node.js download less common os (#8418) (@MikeMcC399)
• 746ac5d #8380 remove duplicate info (#8380) (@alexsch01)
• 4673e9c #8371 rebrand OS X references to macOS (@MikeMcC399)

Dependencies

• 398fed4 #8450 normalize-package-data@7.0.1
• 5b242c9 #8450 validate-npm-package-name@6.0.2
• d4e8a8a #8450 tuf-js@3.1.0
• e1b37b2 #8450 picomatch@4.0.3
• 3cb5884 #8450 socks@2.8.6
• daea981 #8450 ci-info@4.3.0
• 39ad47d #8450 aproba@2.1.0
• a789f33 #8450 agent-base@7.1.4
• 1c0d257 #8450 @npmcli/metavuln-calculator@9.0.1

Chores

• 804a964 #8450 update devDependencies in lockfile (@wraithgar)
• 643ae71 #8450 update mock-registry to use local arborist (@wraithgar)
• cf023d7 #8421 contributing: prepare easier copy-paste contributing commands (#8421) (@MikeMcC399)
• 3f60b5f #8383 @npmcli/template-oss@4.24.4 (#8383) (@wraithgar)
• 01f8cc6 #8381 @npmcli/template-oss@4.24.3 (#8381) (@wraithgar)
• workspace: @npmcli/arborist@9.1.3
• workspace: @npmcli/config@10.3.1
• workspace: libnpmdiff@8.0.6
• workspace: libnpmexec@10.1.5
• workspace: libnpmfund@7.0.6
• workspace: libnpmpack@9.0.6
• workspace: libnpmpublish@11.1.0

11.1.0 (2025-07-24)

Features

• 1cce318 #8336 adds support for oidc publish (#8336) (@reggi)

Chores

• 3f60b5f #8383 @npmcli/template-oss@4.24.4 (#8383) (@wraithgar)
• 01f8cc6 #8381 @npmcli/template-oss@4.24.3 (#8381) (@wraithgar)

Dependencies

• workspace: @npmcli/arborist@9.1.3

Dependencies

• workspace: @npmcli/arborist@9.1.3

Dependencies

• workspace: @npmcli/arborist@9.1.3

Dependencies

• workspace: @npmcli/arborist@9.1.3

10.3.1 (2025-07-24)

Bug Fixes

• 7f66f0a #8447 add better hint for before and clean up description (@wraithgar)
• 5b858c6 #8411 ensure progress bars display consistently across all environments (#8411) (@owlstronaut)

Documentation

• 4673e9c #8371 rebrand OS X references to macOS (@MikeMcC399)

Chores

• 3f60b5f #8383 @npmcli/template-oss@4.24.4 (#8383) (@wraithgar)
• 01f8cc6 #8381 @npmcli/template-oss@4.24.3 (#8381) (@wraithgar)

9.1.3 (2025-07-24)

Bug Fixes

• 6dbe21a #8436 local transitive dependencies with --install-links=true (@owlstronaut)
• 8042af3 #8431 prune optional peer dependencies that are no longer explicitly depended on (#8431) (@G-Rath)
• c457c75 #8430 remove duplicate loop (#8430) (@G-Rath)
• f7b056f #8400 clean up audit-report code (#8400) (@wraithgar)
• f163d01 #8372 use omit when checking ideal tree engine (#8372) (@owlstronaut)

Chores

• 3f60b5f #8383 @npmcli/template-oss@4.24.4 (#8383) (@wraithgar)
• 01f8cc6 #8381 @npmcli/template-oss@4.24.3 (#8381) (@wraithgar)

10.9.3 (2025-06-25)

Bug Fixes

• 7cff878 #8343 powershell: use Invoke-Expression to pass args (#8343) (@alexsch01)
• 78dc057 #8378 stop working around bug fixed in npm-package-arg@12.0.2 (@TrevorBurnham)
• e510f14 #8248 docs: 'pacakge' -> 'package' (#8248) (@t3hmrman)

Dependencies

• c38ec84 #8378 validate-npm-package-name@6.0.1
• 72564c5 #8378 spdx-license-ids@3.0.21
• 20fa199 #8378 socks@2.8.5
• 48c193a #8378 socks-proxy-agent@8.0.5
• 00fccfb #8378 semver@7.7.2
• 5ab8aac #8378 read@4.1.0
• 224c69e #8378 p-map@7.0.3
• 1e41678 #8378 npm-package-arg@12.0.2
• e9cf30e #8378 nopt@8.1.0
• 2bedf25 #8378 minizlib@3.0.2
• a795ee0 #8378 minipass-fetch@4.0.1
• 8ed043c #8378 https-proxy-agent@7.0.6
• 74518d0 #8378 http-cache-semantics@4.2.0
• cc7dcfc #8378 hosted-git-info@8.1.0
• 13aea40 #8378 foreground-child@3.3.1
• 9c81599 #8378 exponential-backoff@3.1.2
• b59097f #8378 node-gyp@11.2.0
• 8b29435 #8378 debug@4.4.1
• 4c8e170 #8378 cidr-regex@4.1.3
• 9bb94a3 #8378 is-cidr@5.1.1
• a1dbb0b #8378 ci-info@4.2.0
• 0a5f2ff #8378 chalk@5.4.1
• 7912c9c #8378 brace-expansion@2.0.2
• 19028b8 #8378 agent-base@7.1.3
• fd26776 #8378 abbrev@3.0.1
• dbb23ab #8378 sigstore@3.1.0
• 92feb9b #8378 @sigstore/protobuf-specs@0.4.3
• 4fd7174 #8378 @sigstore/tuf@3.1.1
• b327bc2 #8378 @npmcli/run-script@9.1.0
• 04e7e1c #8378 @npmcli/redact@3.2.2.
• 90d2aab #8378 @npmcli/query@4.0.1
• 2e47537 #8378 @npmcli/package-json@6.2.0
• a5eb5dd #8378 @npmcli/git@6.0.3

Chores

• 15e545b #8384 @npmcli/template-oss@4.24.4 (#8384) (@wraithgar)
• fb5a9f2 #8378 @npmcli/template-oss@4.24.3 (@wraithgar)
• 19da79a #8378 dev dependency updates (@wraithgar)
• workspace: @npmcli/arborist@8.0.1
• workspace: libnpmdiff@7.0.1
• workspace: libnpmexec@9.0.1
• workspace: libnpmfund@6.0.1
• workspace: libnpmpack@8.0.1