Skip to content

[pull] latest from npm:latest#162

Merged
pull[bot] merged 4 commits into
DavidLacombe46:latestfrom
npm:latest
May 21, 2026
Merged

[pull] latest from npm:latest#162
pull[bot] merged 4 commits into
DavidLacombe46:latestfrom
npm:latest

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented May 21, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

36degrees and others added 4 commits May 21, 2026 08:49
…riables (#9385)

npm sets two additional environment variables `npm_old_version` and
`npm_new_version` when running the `preversion`, `version`,
`postversion` scripts, but these aren’t documented anywhere.

Document the variables in the ‘Scripts’ docs, and cross-reference them
from the documentation for the version command (and the libnpmversion
readme).

I've tried to match the existing formatting conventions for each
document. Please let me know if anything needs to change.
…9372)

Fixes #9142, Fixes #9184

When \`npm config edit\` or \`npm edit\` opens an interactive editor,
the progress spinner keeps running and writes ANSI control codes into
the buffer, garbling the display. Neither command called
\`input.start()\` before opening the editor, though \`help.js\` and
\`open-url.js\` already handle this correctly. Wrapping both editor
spawns in \`input.start()\` lets the spinner step aside while the editor
has control of the terminal, and closes both issues at once.

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
BREAKING CHANGE: unknown configs in .npmrc, unknown CLI flags,
abbreviated flags, and single-hyphen multi-char shorthands now throw
instead of warning.

Closes npm/statusboard#1084.
 
 Unknown configs are now hard errors instead of warnings:
 
- Unknown keys in `.npmrc` (project/user/global/builtin), aggregated
across files
 - Unknown CLI flags (`--bogus`)
 - Abbreviated flags (`--dry` for `--dry-run`)
 - Single-hyphen multi-char flags (`-longflag`)
 
 Env (`npm_config_*`) and `publishConfig` unknowns still warn.
 
`config`, `help`, `doctor`, `completion`, and `version` opt out via
`static skipConfigValidation = true` so `npm config fix` and friends
keep working when `.npmrc` is broken.
 
 ### Notable breaks
 
- Legacy top-level auth keys (`email`, `_authToken`, `_password`,
`username`, `certfile`, `keyfile`) must be in scoped/nerfdart form. Run
`npm config fix` to migrate.
 - `-j` no longer expands to `--json`. Use `--json`.
BREAKING CHANGE: root \`preinstall\` now runs before dependencies are installed.
@pull pull Bot locked and limited conversation to collaborators May 21, 2026
@pull pull Bot added the ⤵️ pull label May 21, 2026
@pull pull Bot merged commit 2a03860 into DavidLacombe46:latest May 21, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants