Update npm to v12 #11

Open
renovate-bot wants to merge 1 commit from renovate/npm-12.x into main
Collaborator

This PR contains the following updates:

Package Change Age Confidence
npm (source) ^11.3.0^12.0.0 age confidence

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

npm/cli (npm)

v12.0.2

Compare Source

Bug Fixes
Documentation
Chores
Dependencies

v12.0.1

Compare Source

Bug Fixes
Dependencies

v12.0.0

Compare Source

⚠️ BREAKING CHANGES
  • npm view --json now always returns an array.
  • npm sbom --sbom-format=cyclonedx now reports the name field from each package's package.json instead of the on-disk directory name. The name, bom-ref, and purl of the root component and of aliased dependencies may change.
  • npm no longer registers man pages with the system when installed globally. man npm-install will no longer work, but npm help install is unaffected.
  • The npm pkg output is no longer forced to json. This means you can get single values without having to worry about wrapping of the values. It also outputs non-json content more similarly to npm view.
  • npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
  • The Twitter and Freenode profile fields have been removed from the npm registry. This means that users will no longer be able to set or view these fields in their npm profiles.
  • npm will no longer attempt to resolve the path to node via whichnode. process.execPath is already set by Node to the resolved real path of the node binary, so the lookup was redundant. Scripts that expected npm to override process.execPath with a PATH-resolved (potentially symlinked) node path may be affected.
  • the --json output of npm pack and npm publish have changed. They are now always consistent, and in the same format.
  • the star, stars and unstar commands have been removed
  • The npm adduser command has been removed. Create and manage user accounts on the npm website, and use npm login to authenticate on the command line.
  • Preserve https protocol when working with git (#​8703)
  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • root `preinstall` now runs before dependencies are installed.
  • unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning. (Unknown .npmrc configs still warn by default; opt into erroring with the new strict-npmrc config.)
Chores
Dependencies

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [npm](https://docs.npmjs.com/) ([source](https://github.com/npm/cli)) | [`^11.3.0` → `^12.0.0`](https://renovatebot.com/diffs/npm/npm/11.19.0/12.0.2) | ![age](https://developer.mend.io/api/mc/badges/age/npm/npm/12.0.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/npm/11.19.0/12.0.2?slim=true) | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/5) for more information. --- ### Release Notes <details> <summary>npm/cli (npm)</summary> ### [`v12.0.2`](https://github.com/npm/cli/blob/HEAD/CHANGELOG.md#1202-2026-07-27) [Compare Source](https://github.com/npm/cli/compare/v12.0.1...v12.0.2) ##### Bug Fixes - [`834408e`](https://github.com/npm/cli/commit/834408e8f0f2295d02205d8ff5d011c859835225) [#&#8203;9760](https://github.com/npm/cli/pull/9760) pack: honor min-release-age-exclude ([#&#8203;9760](https://github.com/npm/cli/issues/9760)) ([@&#8203;martinrrm](https://github.com/martinrrm), [@&#8203;Copilot](https://github.com/Copilot)) - [`ef6cfea`](https://github.com/npm/cli/commit/ef6cfeaae218d1177e29f4fd26c591d0a1b86a46) [#&#8203;9786](https://github.com/npm/cli/pull/9786) owner: use scoped registry for user lookup ([#&#8203;9786](https://github.com/npm/cli/issues/9786)) ([@&#8203;martinrrm](https://github.com/martinrrm), [@&#8203;Copilot](https://github.com/Copilot)) ##### Documentation - [`9e17dc0`](https://github.com/npm/cli/commit/9e17dc064782ca1a1fd7f549e5a2fc7903f7fe51) [#&#8203;9805](https://github.com/npm/cli/pull/9805) clarify npm 12 unknown-config breaking change in changelogs ([#&#8203;9805](https://github.com/npm/cli/issues/9805)) ([@&#8203;Hashim1999164](https://github.com/Hashim1999164)) ##### Chores - [`7b1f6c1`](https://github.com/npm/cli/commit/7b1f6c173d17b3bf30e45426f6df39473c6a1163) [#&#8203;9747](https://github.com/npm/cli/pull/9747) parse pack --json object output in node integration ([#&#8203;9747](https://github.com/npm/cli/issues/9747)) ([@&#8203;reggi](https://github.com/reggi), [@&#8203;Copilot](https://github.com/Copilot)) ##### Dependencies - [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.2): `@npmcli/arborist@10.0.2` - [workspace](https://github.com/npm/cli/releases/tag/config-v11.0.1): `@npmcli/config@11.0.1` - [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.2): `libnpmdiff@9.0.2` - [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.2): `libnpmexec@11.0.2` - [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.2): `libnpmfund@8.0.2` - [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.2): `libnpmpack@10.0.2` ### [`v12.0.1`](https://github.com/npm/cli/blob/HEAD/CHANGELOG.md#1201-2026-07-10) [Compare Source](https://github.com/npm/cli/compare/v12.0.0...v12.0.1) ##### Bug Fixes - [`ecb02a8`](https://github.com/npm/cli/commit/ecb02a88a7ca0940d25957d941dc7c66736af4f7) [#&#8203;9745](https://github.com/npm/cli/pull/9745) view: avoid wrapping array results ([#&#8203;9745](https://github.com/npm/cli/issues/9745)) ([@&#8203;reggi](https://github.com/reggi), [@&#8203;martinrrm](https://github.com/martinrrm), [@&#8203;Copilot](https://github.com/Copilot)) - [`47fc8b1`](https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c) [#&#8203;9740](https://github.com/npm/cli/pull/9740) correct bundled sigstore from dev dependency conflict ([#&#8203;9740](https://github.com/npm/cli/issues/9740)) ([@&#8203;james-pre](https://github.com/james-pre)) ##### Dependencies - [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.1): `@npmcli/arborist@10.0.1` - [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.1): `libnpmdiff@9.0.1` - [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.1): `libnpmexec@11.0.1` - [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.1): `libnpmfund@8.0.1` - [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.1): `libnpmpack@10.0.1` ### [`v12.0.0`](https://github.com/npm/cli/blob/HEAD/CHANGELOG.md#1200-2026-07-08) [Compare Source](https://github.com/npm/cli/compare/v11.19.0...v12.0.0) ##### ⚠️ BREAKING CHANGES - npm view --json now always returns an array. - `npm sbom --sbom-format=cyclonedx` now reports the `name` field from each package's `package.json` instead of the on-disk directory name. The `name`, `bom-ref`, and `purl` of the root component and of aliased dependencies may change. - npm no longer registers man pages with the system when installed globally. `man npm-install` will no longer work, but `npm help install` is unaffected. - The `npm pkg` output is no longer forced to json. This means you can get single values without having to worry about wrapping of the values. It also outputs non-json content more similarly to `npm view`. - `npm shrinkwrap` is removed, the `shrinkwrap` config alias is removed, and `npm-shrinkwrap.json` is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root `npm-shrinkwrap.json` to `package-lock.json`; use `bundleDependencies` if you need to ship a locked dependency tree. - The Twitter and Freenode profile fields have been removed from the npm registry. This means that users will no longer be able to set or view these fields in their npm profiles. - npm will no longer attempt to resolve the path to node via whichnode. process.execPath is already set by Node to the resolved real path of the node binary, so the lookup was redundant. Scripts that expected npm to override process.execPath with a PATH-resolved (potentially symlinked) node path may be affected. - the --json output of `npm pack` and `npm publish` have changed. They are now always consistent, and in the same format. - the `star`, `stars` and `unstar` commands have been removed - The `npm adduser` command has been removed. Create and manage user accounts on the npm website, and use `npm login` to authenticate on the command line. - Preserve https protocol when working with git ([#&#8203;8703](https://github.com/npm/cli/issues/8703)) - The default license for `npm init` has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages. - `npm` now supports node `^22.22.2 || ^24.15.0 || >=26.0.0` - allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies. - root \`preinstall\` now runs before dependencies are installed. - unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning. (Unknown `.npmrc` configs still warn by default; opt into erroring with the new `strict-npmrc` config.) ##### Chores - [`b77b532`](https://github.com/npm/cli/commit/b77b5321bd6dc8d4c028b89f3e4bc9c9a2209f8f) [#&#8203;9735](https://github.com/npm/cli/pull/9735) remove pre-release mode from npm 12 and workspaces ([#&#8203;9735](https://github.com/npm/cli/issues/9735)) ([@&#8203;reggi](https://github.com/reggi), [@&#8203;Copilot](https://github.com/Copilot)) ##### Dependencies - [workspace](https://github.com/npm/cli/releases/tag/arborist-v10.0.0): `@npmcli/arborist@10.0.0` - [workspace](https://github.com/npm/cli/releases/tag/config-v11.0.0): `@npmcli/config@11.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmaccess-v11.0.0): `libnpmaccess@11.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v9.0.0): `libnpmdiff@9.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v11.0.0): `libnpmexec@11.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v8.0.0): `libnpmfund@8.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmorg-v9.0.0): `libnpmorg@9.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v10.0.0): `libnpmpack@10.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmpublish-v12.0.0): `libnpmpublish@12.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmsearch-v10.0.0): `libnpmsearch@10.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmteam-v9.0.0): `libnpmteam@9.0.0` - [workspace](https://github.com/npm/cli/releases/tag/libnpmversion-v9.0.0): `libnpmversion@9.0.0` </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC41LjIiLCJ1cGRhdGVkSW5WZXIiOiI0NC4yOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update npm to v12
All checks were successful
Lint info.xml / info.xml lint (pull_request) Successful in 2s
PHPUnit SQLite / changes (pull_request) Successful in 5s
Static analysis / versions (pull_request) Successful in 4s
REUSE Compliance Check / reuse-compliance-check (pull_request) Successful in 4s
PHPUnit SQLite / versions (pull_request) Successful in 11s
PHPUnit SQLite / SQLite PHP 8.5 Nextcloud master (8.5, master) (pull_request) Has been skipped
PHP / versions (pull_request) Successful in 11s
Node / NPM (pull_request) Successful in 18s
PHPUnit SQLite / phpunit-sqlite-summary (pull_request) Successful in 1s
Static analysis / static-psalm-analysis dev-master (dev-master, 8.5) (pull_request) Successful in 1m24s
Static analysis / static-psalm-analysis dev-stable32 (dev-stable32, 8.4) (pull_request) Successful in 1m18s
Static analysis / static-psalm-analysis dev-stable31 (dev-stable31, 8.4) (pull_request) Successful in 1m45s
Static analysis / static-psalm-analysis dev-stable33 (dev-stable33, 8.5) (pull_request) Successful in 1m17s
Static analysis / static-psalm-analysis dev-stable34 (dev-stable34, 8.5) (pull_request) Successful in 1m26s
PHP / PHP 8.1 (8.1) (pull_request) Successful in 1m22s
Static analysis / static-psalm-analysis-summary (pull_request) Successful in 1s
PHP / PHP 8.5 (8.5) (pull_request) Successful in 1m25s
651e68c4f9
All checks were successful
Lint info.xml / info.xml lint (pull_request) Successful in 2s
PHPUnit SQLite / changes (pull_request) Successful in 5s
Static analysis / versions (pull_request) Successful in 4s
REUSE Compliance Check / reuse-compliance-check (pull_request) Successful in 4s
PHPUnit SQLite / versions (pull_request) Successful in 11s
PHPUnit SQLite / SQLite PHP 8.5 Nextcloud master (8.5, master) (pull_request) Has been skipped
PHP / versions (pull_request) Successful in 11s
Node / NPM (pull_request) Successful in 18s
PHPUnit SQLite / phpunit-sqlite-summary (pull_request) Successful in 1s
Static analysis / static-psalm-analysis dev-master (dev-master, 8.5) (pull_request) Successful in 1m24s
Static analysis / static-psalm-analysis dev-stable32 (dev-stable32, 8.4) (pull_request) Successful in 1m18s
Static analysis / static-psalm-analysis dev-stable31 (dev-stable31, 8.4) (pull_request) Successful in 1m45s
Static analysis / static-psalm-analysis dev-stable33 (dev-stable33, 8.5) (pull_request) Successful in 1m17s
Static analysis / static-psalm-analysis dev-stable34 (dev-stable34, 8.5) (pull_request) Successful in 1m26s
PHP / PHP 8.1 (8.1) (pull_request) Successful in 1m22s
Static analysis / static-psalm-analysis-summary (pull_request) Successful in 1s
PHP / PHP 8.5 (8.5) (pull_request) Successful in 1m25s
This pull request can be merged automatically.
This branch is out-of-date with the base branch
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/npm-12.x:renovate/npm-12.x
git switch renovate/npm-12.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/npm-12.x
git switch renovate/npm-12.x
git rebase main
git switch main
git merge --ff-only renovate/npm-12.x
git switch renovate/npm-12.x
git rebase main
git switch main
git merge --no-ff renovate/npm-12.x
git switch main
git merge --squash renovate/npm-12.x
git switch main
git merge --ff-only renovate/npm-12.x
git switch main
git merge renovate/npm-12.x
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
lukasdotcom/nextcloud-shortcuts!11
No description provided.