Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly
Appearance settings

Commit 0d7e4d2

Browse filesBrowse files
MylesBorinsMylesBorins
committed
deps: update npm to 5.5.1
Closes: #16280 PR-URL: #16509 Fixes: #14161 Reviewed-By: Daijiro Wachi <daijiro.wachi@gmail.com> Reviewed-By: Anna Henningsen <anna@addaleax.net> Reviewed-By: Michaël Zasso <targos@protonmail.com>
1 parent 4359a93 commit 0d7e4d2
Copy full SHA for 0d7e4d2

File tree

Expand file treeCollapse file tree

1,388 files changed

+92493
-19935
lines changed
Open diff view settings
Filter options

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.
Dismiss banner
Expand file treeCollapse file tree

1,388 files changed

+92493
-19935
lines changed
Open diff view settings
Collapse file

‎deps/npm/CHANGELOG.md‎

Copy file name to clipboardExpand all lines: deps/npm/CHANGELOG.md
+115Lines changed: 115 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,118 @@
1+
## v5.5.1 (2017-10-04):
2+
3+
A very quick, record time, patch release, of a bug fix to a (sigh) last minute bug fix.
4+
5+
* [`e628e058b`](https://github.com/npm/npm/commit/e628e058b)
6+
Fix login to properly recognize OTP request and store bearer tokens.
7+
([@Rebecca Turner](https://github.com/Rebecca Turner))
8+
9+
## v5.5.0 (2017-10-04):
10+
11+
Hey y'all, this is a big new feature release! We've got some security
12+
related goodies plus a some quality-of-life improvements for anyone who uses
13+
the public registry (so, virtually everyone).
14+
15+
The changes largely came together in one piece, so I'm just gonna leave the commit line here:
16+
17+
* [`f6ebf5e8b`](https://github.com/npm/npm/commit/f6ebf5e8bd6a212c7661e248c62c423f2b54d978)
18+
[`f97ad6a38`](https://github.com/npm/npm/commit/f97ad6a38412581d059108ea29be470acb4fa510)
19+
[`f644018e6`](https://github.com/npm/npm/commit/f644018e6ef1ff7523c6ec60ae55a24e87a9d9ae)
20+
[`8af91528c`](https://github.com/npm/npm/commit/8af91528ce6277cd3a8c7ca8c8102671baf10d2f)
21+
[`346a34260`](https://github.com/npm/npm/commit/346a34260b5fba7de62717135f3e083cc4820853)
22+
Two factor authentication, profile editing and token management.
23+
([@iarna](https://github.com/iarna))
24+
25+
### TWO FACTOR AUTHENTICATION
26+
27+
You can now enable two-factor authentication for your npm account. You can
28+
even do it from the CLI. In fact, you have to, for the time being:
29+
30+
```
31+
npm profile enable-tfa
32+
```
33+
34+
With the default two-factor authentication mode you'll be prompted to enter
35+
a one-time password when logging in, when publishing and when modifying access rights to
36+
your modules.
37+
38+
### TOKEN MANAGEMENT
39+
40+
You can now create, list and delete authentication tokens from the comfort
41+
of the command line. Authentication tokens created this way can have NEW
42+
restrictions placed on them. For instance, you can create a `read-only`
43+
token to give to your CI. It will be able to download your private modules
44+
but it won't be able to publish or modify modules. You can also create
45+
tokens that can only be used from certain network addresses. This way you
46+
can lock down access to your corporate VPN or other trusted machines.
47+
48+
Deleting tokens isn't new, you could [do it via the
49+
website](https://www.npmjs.com/settings/tokens) but now you can do it via
50+
the CLI as well.
51+
52+
### CHANGE YOUR PASSWORD, SET YOUR EMAIL
53+
54+
You can finally change your password from the CLI with `npm profile set
55+
password`! You can also update your email address with `npm profile set
56+
email <address>`. If you change your email address we'll send you a new
57+
verification email so you verify that its yours.
58+
59+
### AND EVERYTHING ELSE ON YOUR PROFILE
60+
61+
You can also update all of the other attributes of your profile that
62+
previously you could only update via the website: `fullname`, `homepage`,
63+
`freenode`, `twitter` and `github`.
64+
65+
### AVAILABLE STAND ALONE
66+
67+
All of these features were implemented in a stand alone library, so if you
68+
have use for them in your own project you can find them in
69+
[npm-profile](https://www.npmjs.com/package/npm-profile) on the registry.
70+
There's also a little mini-cli written just for it at
71+
[npm-profile-cli](https://www.npmjs.com/package/npm-profile-cli). You might
72+
also be interested in the [API
73+
documentation](https://github.com/npm/registry/tree/master/docs) for these
74+
new features: [user profile editing](https://github.com/npm/registry/blob/master/docs/user/profile.md) and
75+
[authentication](https://github.com/npm/registry/blob/master/docs/user/authentication.md).
76+
77+
### BUG FIXES
78+
79+
* [`5ee55dc71`](https://github.com/npm/npm/commit/5ee55dc71b8b74b8418c3d5ec17483a07b3b6777)
80+
install.sh: Drop support for upgrading from npm@1 as npm@5 can't run on
81+
any Node.js version that ships npm@1. This fixes an issue some folks were seeing when trying
82+
to upgrade using `curl | http://npmjs.com/install.sh`.
83+
([@iarna](https://github.com/iarna))
84+
* [`5cad1699a`](https://github.com/npm/npm/commit/5cad1699a7a0fc85ac7f77a95087a9647f75e344)
85+
`npm-lifecycle@1.0.3` Fix a bug where when more than one lifecycle script
86+
got queued to run, npm would crash.
87+
([@zkat](https://github.com/zkat))
88+
* [`cd256cbb2`](https://github.com/npm/npm/commit/cd256cbb2f97fcbcb82237e94b66eac80e493626)
89+
`npm-packlist@1.1.9` Fix a bug where test directories would always be
90+
excluded from published modules.
91+
([@isaacs](https://github.com/isaacs))
92+
* [`2a11f0215`](https://github.com/npm/npm/commit/2a11f021561acb1eb1ad4ad45ad955793b1eb4af)
93+
Fix formatting of unsupported version warning
94+
([@iarna](https://github.com/iarna))
95+
96+
### DEPENDENCY UPDATES
97+
98+
* [`6d2a285a5`](https://github.com/npm/npm/commit/6d2a285a58655f10834f64d38449eb1f3c8b6c47)
99+
`npm-registry-client@8.5.0`
100+
* [`69e64e27b`](https://github.com/npm/npm/commit/69e64e27bf58efd0b76b3cf6e8182c77f8cc452f)
101+
`request@2.83.0`
102+
* [`34e0f4209`](https://github.com/npm/npm/commit/34e0f42090f6153eb5462f742e402813e4da56c8)
103+
`abbrev@1.1.1`
104+
* [`10d31739d`](https://github.com/npm/npm/commit/10d31739d39765f1f0249f688bd934ffad92f872)
105+
`aproba@1.2.0`
106+
* [`2b02e86c0`](https://github.com/npm/npm/commit/2b02e86c06cf2a5fe7146404f5bfd27f190ee4f4)
107+
`meant@1.0.1`
108+
* [`b81fff808`](https://github.com/npm/npm/commit/b81fff808ee269361d3dcf38c1b6019f1708ae02)
109+
`rimraf@2.6.2`:
110+
Fixes a long standing bug in rimraf's attempts to work around Windows limitations
111+
where it owns a file and can change its perms but can't remove it without
112+
first changing its perms. This _may_ be an improvement for Windows users of npm under
113+
some circumstances.
114+
([@isaacs](https://github.com/isaacs))
115+
1116
## v5.4.2 (2017-09-14):
2117

3118
This is a small bug fix release wrapping up most of the issues introduced with 5.4.0.
Collapse file

‎deps/npm/doc/cli/npm-access.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/cli/npm-access.md
+3Lines changed: 3 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -60,6 +60,9 @@ You must have privileges to set the access of a package:
6060
* You have been given read-write privileges for a package, either as a member
6161
of a team or directly as an owner.
6262

63+
If you have two-factor authentication enabled then you'll have to pass in an
64+
otp with `--otp` when making access changes.
65+
6366
If your account is not paid, then attempts to publish scoped packages will fail
6467
with an HTTP 402 status code (logically enough), unless you use
6568
`--access=public`.
Collapse file

‎deps/npm/doc/cli/npm-dist-tag.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/cli/npm-dist-tag.md
+3-1Lines changed: 3 additions & 1 deletion
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,9 @@ Add, remove, and enumerate distribution tags on a package:
1515

1616
* add:
1717
Tags the specified version of the package with the specified tag, or the
18-
`--tag` config if not specified.
18+
`--tag` config if not specified. The tag you're adding is `latest` and you
19+
have two-factor authentication on auth-and-writes then you'll need to include
20+
an otp on the command line with `--otp`.
1921

2022
* rm:
2123
Clear a tag that is no longer in use from the package.
Collapse file

‎deps/npm/doc/cli/npm-owner.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/cli/npm-owner.md
+4Lines changed: 4 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -27,6 +27,10 @@ Note that there is only one level of access. Either you can modify a package,
2727
or you can't. Future versions may contain more fine-grained access levels, but
2828
that is not implemented at this time.
2929

30+
If you have two-factor authentication enabled with `auth-and-writes` then
31+
you'll need to include an otp on the command line when changing ownership
32+
with `--otp`.
33+
3034
## SEE ALSO
3135

3236
* npm-publish(1)
Collapse file

‎deps/npm/doc/cli/npm-profile.md‎

Copy file name to clipboard
+74Lines changed: 74 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,74 @@
1+
npm-profile(1) -- Change settings on your registry profile
2+
==========================================================
3+
4+
## SYNOPSIS
5+
6+
npm profile get [--json|--parseable] [<property>]
7+
npm profile set [--json|--parseable] <property> <value>
8+
npm profile set password
9+
npm profile enable-2fa [auth-and-writes|auth-only]
10+
npm profile disable-2fa
11+
12+
## DESCRIPTION
13+
14+
Change your profile information on the registry. This not be available if
15+
you're using a non-npmjs registry.
16+
17+
* `npm profile get [<property>]`:
18+
Display all of the properties of your profile, or one or more specific
19+
properties. It looks like:
20+
21+
```
22+
+-----------------+---------------------------+
23+
| name | example |
24+
+-----------------+---------------------------+
25+
| email | me@example.com (verified) |
26+
+-----------------+---------------------------+
27+
| two factor auth | auth-and-writes |
28+
+-----------------+---------------------------+
29+
| fullname | Example User |
30+
+-----------------+---------------------------+
31+
| homepage | |
32+
+-----------------+---------------------------+
33+
| freenode | |
34+
+-----------------+---------------------------+
35+
| twitter | |
36+
+-----------------+---------------------------+
37+
| github | |
38+
+-----------------+---------------------------+
39+
| created | 2015-02-26T01:38:35.892Z |
40+
+-----------------+---------------------------+
41+
| updated | 2017-10-02T21:29:45.922Z |
42+
+-----------------+---------------------------+
43+
```
44+
45+
* `npm profile set <property> <value>`:
46+
Set the value of a profile property. You can set the following properties this way:
47+
email, fullname, homepage, freenode, twitter, github
48+
49+
* `npm profile set password`:
50+
Change your password. This is interactive, you'll be prompted for your
51+
current password and a new password. You'll also be prompted for an OTP
52+
if you have two-factor authentication enabled.
53+
54+
* `npm profile enable-2fa [auth-and-writes|auth-only]`:
55+
Enables two-factor authentication. Defaults to `auth-and-writes` mode. Modes are:
56+
* `auth-only`: Require an OTP when logging in or making changes to your
57+
account's authentication. The OTP will be required on both the website
58+
and the command line.
59+
* `auth-and-writes`: Requires an OTP at all the times `auth-only` does, and also requires one when
60+
publishing a module, setting the `latest` dist-tag, or changing access
61+
via `npm access` and `npm owner`.
62+
63+
* `npm profile disable-2fa`:
64+
Disables two-factor authentication.
65+
66+
## DETAILS
67+
68+
All of the `npm profile` subcommands accept `--json` and `--parseable` and
69+
will tailor their output based on those. Some of these commands may not be
70+
available on non npmjs.com registries.
71+
72+
## SEE ALSO
73+
74+
* npm-config(7)
Collapse file

‎deps/npm/doc/cli/npm-publish.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/cli/npm-publish.md
+7-1Lines changed: 7 additions & 1 deletion
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ npm-publish(1) -- Publish a package
44

55
## SYNOPSIS
66

7-
npm publish [<tarball>|<folder>] [--tag <tag>] [--access <public|restricted>]
7+
npm publish [<tarball>|<folder>] [--tag <tag>] [--access <public|restricted>] [--otp otpcode]
88

99
Publishes '.' if no argument supplied
1010
Sets tag 'latest' if no --tag specified
@@ -41,6 +41,11 @@ specifying a different default registry or using a `npm-scope(7)` in the name
4141
If you don't have a paid account, you must publish with `--access public`
4242
to publish scoped packages.
4343

44+
* `[--otp <otpcode>]`
45+
If you have two-factor authentication enabled in `auth-and-writes` mode
46+
then you can provide a code from your authenticator with this. If you
47+
don't include this and you're running from a TTY then you'll be prompted.
48+
4449
Fails if the package name and version combination already exists in
4550
the specified registry.
4651

@@ -65,3 +70,4 @@ packs them into a tarball to be uploaded to the registry.
6570
* npm-deprecate(1)
6671
* npm-dist-tag(1)
6772
* npm-pack(1)
73+
* npm-profile(1)
Collapse file

‎deps/npm/doc/cli/npm-token.md‎

Copy file name to clipboard
+59Lines changed: 59 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,59 @@
1+
npm-token(1) -- Manage your authentication tokens
2+
=================================================
3+
4+
## SYNOPSIS
5+
6+
npm token list [--json|--parseable]
7+
npm token create [--read-only] [--cidr=1.1.1.1/24,2.2.2.2/16]
8+
npm token delete <id|token>
9+
10+
## DESCRIPTION
11+
12+
This list you list, create and delete authentication tokens.
13+
14+
* `npm token list`:
15+
Shows a table of all active authentication tokens. You can request this as
16+
JSON with `--json` or tab-separated values with `--parseable`.
17+
```
18+
+--------+---------+------------+----------+----------------+
19+
| id | token | created | read-only | CIDR whitelist |
20+
+--------+---------+------------+----------+----------------+
21+
| 7f3134 | 1fa9ba… | 2017-10-02 | yes | |
22+
+--------+---------+------------+----------+----------------+
23+
| c03241 | af7aef… | 2017-10-02 | no | 192.168.0.1/24 |
24+
+--------+---------+------------+----------+----------------+
25+
| e0cf92 | 3a436a… | 2017-10-02 | no | |
26+
+--------+---------+------------+----------+----------------+
27+
| 63eb9d | 74ef35… | 2017-09-28 | no | |
28+
+--------+---------+------------+----------+----------------+
29+
| 2daaa8 | cbad5f… | 2017-09-26 | no | |
30+
+--------+---------+------------+----------+----------------+
31+
| 68c2fe | 127e51… | 2017-09-23 | no | |
32+
+--------+---------+------------+----------+----------------+
33+
| 6334e1 | 1dadd1… | 2017-09-23 | no | |
34+
+--------+---------+------------+----------+----------------+
35+
```
36+
37+
* `npm token create [--read-only] [--cidr=<cidr-ranges>]`:
38+
Create a new authentication token. It can be `--read-only` or accept a list of
39+
[CIDR](https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing) ranges to
40+
limit use of this token to. This will prompt you for your password, and, if you have
41+
two-factor authentication enabled, an otp.
42+
43+
```
44+
+----------------+--------------------------------------+
45+
| token | a73c9572-f1b9-8983-983d-ba3ac3cc913d |
46+
+----------------+--------------------------------------+
47+
| cidr_whitelist | |
48+
+----------------+--------------------------------------+
49+
| readonly | false |
50+
+----------------+--------------------------------------+
51+
| created | 2017-10-02T07:52:24.838Z |
52+
+----------------+--------------------------------------+
53+
```
54+
55+
* `npm token delete <token|id>`:
56+
This removes an authentication token, making it immediately unusable. This can accept
57+
both complete tokens (as you get back from `npm token create` and will
58+
find in your `.npmrc`) and ids as seen in the `npm token list` output.
59+
This will NOT accept the truncated token found in `npm token list` output.
Collapse file

‎deps/npm/doc/misc/npm-config.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/misc/npm-config.md
+22Lines changed: 22 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -269,6 +269,13 @@ PEM format (Windows calls it "Base-64 encoded X.509 (.CER)") with newlines repla
269269

270270
It is _not_ the path to a certificate file (and there is no "certfile" option).
271271

272+
### cidr
273+
274+
* Default: `null`
275+
* Type: String, Array, null
276+
277+
This is a list of CIDR address to be used when configuring limited access tokens with the `npm token create` command.
278+
272279
### color
273280

274281
* Default: true
@@ -699,6 +706,14 @@ Attempt to install packages in the `optionalDependencies` object. Note
699706
that if these packages fail to install, the overall installation
700707
process is not aborted.
701708

709+
### otp
710+
711+
* Default: null
712+
* Type: Number
713+
714+
This is a one-time password from a two-factor authenticator. It's needed
715+
when publishing or changing package permissions with `npm access`.
716+
702717
### package-lock
703718

704719
* Default: true
@@ -773,6 +788,13 @@ A proxy to use for outgoing http requests. If the `HTTP_PROXY` or
773788
`http_proxy` environment variables are set, proxy settings will be
774789
honored by the underlying `request` library.
775790

791+
### read-only
792+
793+
* Default: false
794+
* Type: Boolean
795+
796+
This is used to mark a token as unable to publish when configuring limited access tokens with the `npm token create` command.
797+
776798
### rebuild-bundle
777799

778800
* Default: true
Collapse file

‎deps/npm/doc/misc/npm-index.md‎

Copy file name to clipboardExpand all lines: deps/npm/doc/misc/npm-index.md
+8Lines changed: 8 additions & 0 deletions
  • Display the source diff
  • Display the rich diff
Original file line numberDiff line numberDiff line change
@@ -129,6 +129,10 @@ Ping npm registry
129129

130130
Display prefix
131131

132+
### npm-profile(1)
133+
134+
Change settings on your registry profile
135+
132136
### npm-prune(1)
133137

134138
Remove extraneous packages
@@ -189,6 +193,10 @@ Manage organization teams and team memberships
189193

190194
Test a package
191195

196+
### npm-token(1)
197+
198+
Manage your authentication tokens
199+
192200
### npm-uninstall(1)
193201

194202
Remove a package
Collapse file

‎deps/npm/html/doc/README.html‎

Copy file name to clipboardExpand all lines: deps/npm/html/doc/README.html
+1-1Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -127,5 +127,5 @@ <h2 id="see-also">SEE ALSO</h2>
127127
<tr><td style="width:60px;height:10px;background:rgb(237,127,127)" colspan=6>&nbsp;</td><td colspan=10 style="width:10px;height:10px;background:rgb(237,127,127)">&nbsp;</td></tr>
128128
<tr><td colspan=5 style="width:50px;height:10px;background:#fff">&nbsp;</td><td style="width:40px;height:10px;background:rgb(237,127,127)" colspan=4>&nbsp;</td><td style="width:90px;height:10px;background:#fff" colspan=9>&nbsp;</td></tr>
129129
</table>
130-
<p id="footer"><a href="../doc/README.html">README</a> &mdash; npm@5.4.2</p>
130+
<p id="footer"><a href="../doc/README.html">README</a> &mdash; npm@5.5.1</p>
131131

0 commit comments

Comments
0 (0)
Morty Proxy This is a proxified and sanitized view of the page, visit original site.