All pull requests

Pull requests

• fix(arborist): keep a valid peer when its named update conflicts with a root pin

  #10262·Doomguy-BFG9000 opened Nov 8, 2026·

  ·
  1

• fix: honor --dry-run when approving or denying install scripts

  #10259·DipanshuAmbilkar03 opened Nov 7, 2026·

  ·
  1

• fix(arborist): skip dependency devDependencies in pnpm stores

  #10256·harshitdeora opened Nov 7, 2026·

  ·
  1

  2

• deps: read-cmd-shim@7.0.1

  #10254·martinrrm opened Nov 6, 2026Contributor·

  ·
  1

• fix(arborist): use a set for bundled-dependency traversal

  #10253·github-actions[bot] opened Nov 6, 2026Bot·

  ·

• feat: support Azure Pipelines trusted publishing

  #10252·reggi opened Nov 6, 2026Contributor·

  ·

• fix(arborist): require matching commit for non-hosted git pins

  #10251·ump45nose opened Nov 6, 2026Contributor·1 of 2 tasks·

  ·
  1

• fix(arborist): skip bundle checks without an applicable override (v11 backport)

  #10248·nkolev92 opened Nov 6, 2026Contributor·

  ·

• chore: release 10.9.11

  autorelease: pending
  #10247·github-actions[bot] opened Nov 6, 2026Bot·

  ·
  1

• fix: treat UCRT64 Git Bash as a unix shell on Windows

  #10246·github-actions[bot] opened Nov 6, 2026Bot·

  ·

• fix: skip disconnected orphans in install script checks

  #10245·github-actions[bot] opened Nov 6, 2026Bot·

  ·

• chore: release 12.2.3

  autorelease: pending
  #10244·github-actions[bot] opened Nov 6, 2026Bot·

  ·
  1

• fix(ci): accept lockfiles that omit unpublished optional deps

  #10240·ump45nose opened Nov 6, 2026Contributor·

  ·
  1

• fix(libnpmdiff): keep trailing blank context lines in diffs

  #10238·ump45nose opened Nov 5, 2026Contributor·

  ·
  1

• fix: reject npm sbom --global before serialization

  #10233·ump45nose opened Nov 5, 2026Contributor·

  ·
  1

  1

• fix(libnpmdiff): keep a final blank context line in the diff

  #10231·simshanith opened Nov 5, 2026·

  ·
  1

  1

• fix(pkg): handle null values in property queries

  #10229·wozhenbang2004 opened Nov 5, 2026·

  ·

• fix(arborist): preserve unowned global bin links

  #10223·harshitdeora opened Nov 4, 2026·

  ·
  1

• docs: clarify validation rules for the funding field

  #10222·ysknsid25 opened Nov 4, 2026·

  ·

• fix(config): redact credentials in proxy env vars and empty-password userinfo

  #10221·itsgaldoron opened Nov 4, 2026·

  ·
  1

• fix: write version manifests atomically

  #10220·antsanchez2001 opened Nov 4, 2026·

  ·
  1

• fix(arborist): preserve alias registry credentials (v10 backport)

  #10218·martinrrm opened Nov 3, 2026Contributor·

  ·

• Update npm-shrinkwrap.md

  #10216·55bakohal-dotcom opened Nov 3, 2026·

  ·

• fix(libnpmexec): stop retrying a failed npx lock mkdir forever

  #10215·mithredate opened Nov 3, 2026·

  ·
  1

• fix(version): avoid implicit workspace discovery during single workspace versioning

  #10213·mindulle opened Nov 3, 2026·

  ·
  1