Update npm to v10.8.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
npm (source)	10.7.0 -> 10.8.1

---

Release Notes

npm/cli (npm)

v10.8.1

Compare Source

Bug Fixes

• 6b55646 #​7569 exec: look in workspace and root for bin entries (#​7569) (@​wraithgar)
• e4c7a41 #​7564 publish: skip workspace packages marked private on publish (#​7564) (@​milaninfy)
• 8f94ae8 #​7556 utils/tar: index access while match is null (#​7555) (#​7556) (@​NormanPerrin)
• 2d1d8d0 #​7559 adds node: specifier to all native node modules (#​7559) (@​reggi)
• 7d89b55 #​7490 ci: rm workspace node_modules (#​7490) (@​reggi)
• 9122fb6 #​7516 cache: add both full and minified packument to cache (#​7516) (@​milaninfy)
• 9e6686b #​7545 send proper otp token on web auth (#​7545) (@​wraithgar)
• b1db070 #​7534 refactor: use output.buffer and set explicit json mode in query (#​7534) (@​lukekarrys)
• 53cda32 #​7542 refactor ls to use output.buffer for json (#​7542) (@​lukekarrys)
• 61d5771 #​7541 remove json.stringify from all commands (#​7541) (@​lukekarrys)
• 4dfc7d2 #​7540 pass strings to JSON.stringify in --json mode (#​7540) (@​lukekarrys)
• 3cefdf6 #​7538 outdated: return array for outdated deps from multiple workspaces (@​lukekarrys)
• ef4c975 #​7508 view: dont immediately exit on first workspace 404 (#​7508) (@​lukekarrys)

Documentation

• fd6479f #​7560 update publish docs: dist-tag + publish case (#​7560) (@​davidlj95)

Dependencies

• e3f0fd4 #​7568 @npmcli/package-json@5.1.1
• 447a8d7 #​7566 spdx-license-ids@3.0.18
• 83fed2e #​7566 sigstore@2.3.1
• 41291ba #​7566 @sigstore/tuf@2.3.4
• 18b42a4 #​7566 glob@10.4.1
• 5c6759d #​7566 postcss-selector-parser@6.1.0
• 2508a83 #​7566 is-cidr@5.1.0
• 6278fe4 #​7566 ini@4.1.3

v10.8.0

Compare Source

Features

• 1e375c1 #​7442 create exit handler class (#​7442) (@​lukekarrys)

Bug Fixes

• d5c3289 #​7513 refactor: use output buffer and error for more commands (#​7513) (@​lukekarrys)
• 12f103c #​7533 add first param titles to logs where missing (#​7533) (@​lukekarrys)
• badeac2 #​7521 config: use redact on config output (#​7521) (@​lukekarrys)
• 76aef74 #​7520 view: refactor exec and execWorkspaces to call same methods (#​7520) (@​lukekarrys)
• b54cdb8 #​7515 refactor: create new error output primitives (#​7515) (@​lukekarrys)
• e40454c #​7506 view: dont unwrap arrays in json mode (#​7506) (@​lukekarrys)
• 6f64148 require stdout to be a TTY for progress (#​7507) (@​lukekarrys)
• db62910 #​7504 config: be more aggressive about hiding protected values (#​7504) (@​wraithgar)
• 6d456bb #​7497 dont write log file for completion commands (#​7497) (@​lukekarrys)
• 722c0fa #​7463 limit packument cache size based on heap size (@​wraithgar)
• ca1a68d #​7474 log if npm deprecate does not match any version (#​7474) (@​mbtools)
• 261ea19 #​7457 run input.start around help and openining urls (@​lukekarrys)
• 4ab6cf4 #​7459 publish: validate dist-tag (#​7459) (@​reggi)

Documentation

• b2ce025 #​7518 suggest correct bin entry (#​7518) (@​Santoshraj2)
• bdd2aae #​7502 remove obsolete removal using make uninstall (#​7502) (@​avinal)
• c3d2819 #​7496 npm help json/global command on windows (#​7496) (@​klm-turing, @​lukekarrys)
• 268303c #​7479 add npm version to every local help output (#​7479) (@​klm-turing)
• e39d422 #​7473 suggest "npm repo" for showing the repo of a package (#​7473) (@​full-stop)
• f6fff32 #​7433 clarify what peerDependenciesMeta does (#​7433) (@​xuhdev, @​wraithgar)

Dependencies

• 1cdc662 #​7522 @tufjs/repo-mock@2.0.1
• 898bcfd #​7522 @sigstore/protobuf-specs@0.3.2
• fec3c94 #​7522 path-scurry@1.11.1
• cb85973 #​7522 glob@10.3.15
• e189873 #​7498 @sigstore/sign@2.3.1
• c2b28f9 #​7498 minipass@7.1.1
• 9064ffc #​7498 @sigstore/tuf@2.3.3
• fd42986 #​7498 @npmcli/fs@3.1.1
• 4e53e33 #​7498 semver@7.6.2
• f078c82 #​7495 glob@10.3.14
• 58f773c #​7495 path-scurry@1.11.0
• ea0b07d #​7482 pacote@18.0.6
• 8d161a4 #​7482 semver@7.6.1
• 5b2317b #​7463 add lru-cache
• 26fefb8 #​7480 promzard@1.0.2
• 2146e1f #​7480 npm-bundled@3.0.1
• ff6c5d1 #​7480 minipass-fetch@3.0.5
• 419f9b9 #​7480 cmd-shim@6.0.3
• dade2c8 #​7480 minipass@7.1.0
• 18e5312 #​7480 validate-npm-package-name@5.0.1
• d440011 #​7480 npm-user-validate@2.0.1
• 552113e #​7480 ignore-walk@6.0.5
• 7e15b6d #​7480 @npmcli/metavuln-calculator@7.1.1
• 8b20f8c #​7480 ssri@10.0.6
• a9a6dcd #​7480 pacote@18.0.5
• e2fdb65 #​7480 npm-pick-manifest@9.0.1
• 310a7a5 #​7480 normalize-package-data@6.0.1
• e71f541 #​7480 nopt@7.2.1
• 18c3b40 #​7480 json-parse-even-better-errors@3.0.2
• 4c5bf77 #​7480 init-package-json@6.0.3
• 714e3e1 #​7480 hosted-git-info@7.0.2
• f94d672 #​7480 cacache@18.0.3
• 43331e4 #​7480 bin-links@4.0.4
• 8234412 #​7480 @npmcli/promise-spawn@7.0.2
• 6dfaebb #​7480 @npmcli/git@5.0.7
• 63ef498 #​7457 npm-registry-fetch@17.0.1
• 4cbc2d4 #​7457 npm-profile@10.0.0

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.