pacote

18.0.6 (2024-05-07)

Bug Fixes

• 79441a5 #371 clean up requires (#371) (@wraithgar)
• b19aacb #369 isolate full and corgi packuments in packumentCache (#369) (@wraithgar)

18.0.5 (2024-05-06)

Bug Fixes

• 5e75582 #368 dont set _contentLength if not in headers (#368) (@lukekarrys)
• 1b6950b #365 move bin to its own directory (@lukekarrys)
• 1b6950b #365 refactor: symbol cleanup (#365) (@lukekarrys)

18.0.4 (2024-05-04)

Bug Fixes

• 5fd2c80 #363 linting: no-unused-vars (@lukekarrys)

Chores

• d867639 #363 bump @npmcli/template-oss to 4.22.0 (@lukekarrys)
• a235f37 #363 postinstall for dependabot template-oss PR (@lukekarrys)

18.0.3 (2024-04-30)

Dependencies

• 5ecce7a #360 [email protected] (#360)

18.0.2 (2024-04-24)

Bug Fixes

• 116b277 #358 don't strip underscore attributes in .manifest() (#358) (@wraithgar)

18.0.1 (2024-04-23)

Bug Fixes

• b547e0d #356 use @npmcli/package-json (#356) (@lukekarrys)

18.0.0 (2024-04-15)

⚠️ BREAKING CHANGES

• The silent option was used to control whether @npmcli/run-script would write a banner via console.log. Now ouput will be emitted via an process.emit('output').

Features

• 0c04569 #352 remove silent option (@lukekarrys)

Dependencies

• cb3abc2 #352 bump @npmcli/run-script from 7.0.4 to 8.0.0 (@dependabot[bot])

Chores

• 7089bb1 #355 postinstall for dependabot template-oss PR (@lukekarrys)
• 4952672 #355 bump @npmcli/template-oss from 4.21.3 to 4.21.4 (@dependabot[bot])

17.0.7 (2024-04-12)

Dependencies

• e07c3e5 #350 [email protected] (#350)

17.0.6 (2024-01-16)

Dependencies

• 0a5920f #343 bump sigstore from 2.0.0 to 2.2.0 (#343) (@bdehamer)

Chores

• 6fd23ad #342 postinstall for dependabot template-oss PR (@lukekarrys)
• c3b398a #342 bump @npmcli/template-oss from 4.21.1 to 4.21.3 (@dependabot[bot])
• 4557919 #337 postinstall for dependabot template-oss PR (@lukekarrys)
• c7e293c #337 bump @npmcli/template-oss from 4.19.0 to 4.21.1 (@dependabot[bot])

17.0.5 (2023-12-01)

Bug Fixes

• 0c96b9e #338 bug to support rotated keys in signature/attestation audit (#338) (@feelepxyz)

17.0.4 (2023-08-30)

Dependencies

• ba8f790 #309 bump @npmcli/promise-spawn from 6.0.2 to 7.0.0
• 2c0d3ae #308 bump @npmcli/run-script from 6.0.2 to 7.0.0

17.0.3 (2023-08-24)

Dependencies

• ace7c28 #305 bump npm-packlist from 7.0.4 to 8.0.0

17.0.2 (2023-08-18)

Dependencies

• c3b892d #303 bump sigstore from 1.3.0 to 2.0.0

17.0.1 (2023-08-15)

Dependencies

• 6ddae13 #302 bump npm-registry-fetch from 15.0.0 to 16.0.0
• 42bf787 #300 bump npm-pick-manifest from 8.0.2 to 9.0.0

17.0.0 (2023-08-15)

⚠️ BREAKING CHANGES

• support for node <=16.13 has been removed

Bug Fixes

• 2db2fb5 #296 drop node 16.13.x support (@lukekarrys)

Dependencies

• e9e964b #299 bump read-package-json from 6.0.4 to 7.0.0
• 5d26500 #298 bump npm-package-arg from 10.1.0 to 11.0.0
• d13bb9c #294 bump @npmcli/git from 4.1.0 to 5.0.0
• 7a25e39 #293 bump cacache from 17.1.4 to 18.0.0

16.0.0 (2023-07-28)

⚠️ BREAKING CHANGES

• the underlying fetch module now uses @npmcli/agent. Backwards compatibility should be fully implemented but due to the scope of this change it was made a breaking change out of an abundance of caution.
• support for node 14 has been removed

Bug Fixes

• 73b6297 #290 drop node14 support (#290) (@wraithgar)

Dependencies

• 8dc6a32 bump minipass from 5.0.0 to 7.0.2
• 7cebf19 bump npm-registry-fetch from 14.0.5 to 15.0.0

15.2.0 (2023-05-03)

Features

• 3307ad9 #278 configurable TUF cache dir (#278) (@bdehamer)

15.1.3 (2023-04-27)

Dependencies

• c99db13 #271 bump minipass from 4.2.7 to 5.0.0 (#271)

15.1.2 (2023-04-20)

Documentation

• 43363dd #266 update dist details (#266) (@wraithgar)

Dependencies

• d5cb3df #276 [email protected] (#276)
• c231986 #267 sigstore@^1.1.0

15.1.1 (2023-02-21)

Bug Fixes

• 8f4e39c #261 always ignore ownership from tar headers (#261) (@nlf)