deps: upgrade npm to 3.10.8

[zkat]

Checklist

• make -j4 test (UNIX), or vcbuild test nosign (Windows) passes
• tests and/or benchmarks are included
• documentation is changed or added
• commit message follows commit guidelines

Affected core subsystem(s)

• deps

Description of change

Hey y'all!

I know it's been a while, since the npm CLI team moved to a monthly release cadence, but here's the latest and greatest in packaging technology!

Also! It might be of interest to y'all to know that the CLI team is planning to release npm@4 as our next latest with that October release. Of course, npm@3 will continue to be supported, since we're assuming it's what's gonna go into node@6 LTS. The breaking changes in npm@4 will be much less significant than those in npm@3 so it should have less impact overall. 👍

Notable Changes:

• 29cf56d npm/npm#8614 Include scoped packages in bundled dependencies. (@forivall)
• b7f13bc npm/npm#13259 Run top level preinstall script before installing dependencies (@palmerj3)
• 7e0cdff npm/npm#13497 graceful-fs@4.1.5: graceful-fs had a bug fix which fixes a problem (nodejs/node#7846) exposed by recent changes to Node.js. (@thefourtheye)
• 9b88cb8 npm/npm#9984 request@2.74.0 (@zarenner) (@stash-sfdc)
  • Update request library to at least 2.73 to fix a bug where npm install would crash with Cannot read property 'emit' of null.
  • Update request dependency tough-cookie to 2.3.0 to to address https://nodesecurity.io/advisories/130. Versions 0.9.7 through 2.2.2 contain a vulnerable regular expression that, under certain conditions involving long strings of semicolons in the "Set-Cookie" header, causes the event loop to block for excessive amounts of time.
• npm/npm#10073 npm/npm#10073 npm/npm#13692 npm/npm#11735 npm/npm#13394 npm/npm#12718 A series of fixes to shrinkwrap related to optionalDependencies, devDependencies, git dependencies, saving, tracking, etc. tl;dr shrinkwrap should be a lot more reliable now, specially with some corner cases around things that aren't just regular dependencies.
• npm/npm-registry-client#142 Fix EventEmitter warning spam from error handlers on socket. (@addaleax)
• A number of improvements to error reporting on the installer
• Various bugfixes, including for some crashers
• Doc updates
• Other dependency updates

Changelogs

• v3.10.7
• v3.10.8

r: @thealphanerd
r: @addaleax

[zkat]

heads-up that there might be a test failure but I'm not sure why it's happening only on test-npm but I'll check that out tomorrow.

Edit: there was a thing with tap, and manually bumping to tap@7 fixed the issue. Next release will probably include that, but since it's just a testrunner issue. I've included a patch in this PR to that effect.

[gibfahn]

@zkat So all tests passed except for one, and that one was fixed by upgrading to tap@7?

[zkat]

@gibfahn all tests should pass. I pushed a patch that bumps the tap version. This PR should not have any failing tests.

[Fishrock123]

git am fails with a conflict...?

curl -L https://github.com/nodejs/node/pull/8706.patch | git am
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100   138    0   138    0     0    355      0 --:--:-- --:--:-- --:--:--   355
100 3817k    0 3817k    0     0  1490k      0 --:--:--  0:00:02 --:--:-- 1815k
Applying: deps: upgrade npm to 3.10.8
/Users/Jeremiah/Documents/node/.git/rebase-apply/patch:2388: trailing whitespace.
The `--ignore-scripts` argument will cause npm to not execute any 
/Users/Jeremiah/Documents/node/.git/rebase-apply/patch:2527: trailing whitespace.
3. Developer, works on packages they are given access to.  
/Users/Jeremiah/Documents/node/.git/rebase-apply/patch:2536: trailing whitespace.
* Grant access:  
/Users/Jeremiah/Documents/node/.git/rebase-apply/patch:2549: trailing whitespace.
default will only publish internally. 
/Users/Jeremiah/Documents/node/.git/rebase-apply/patch:3139: trailing whitespace.
<p>The <code>--ignore-scripts</code> argument will cause npm to not execute any 


error: deps/npm/node_modules/request/node_modules/form-data/README.md: already exists in working directory
Patch failed at 0001 deps: upgrade npm to 3.10.8


The copy of the patch that failed is found in:
   /Users/Jeremiah/Documents/node/.git/rebase-apply/patch
When you have resolved this problem, run "git am --continue".
If you prefer to skip this patch, run "git am --skip" instead.
To restore the original branch and stop patching, run "git am --abort".

[Fishrock123]

Hmm, git am -3 seems to have worked. Running tests.

[zkat]

@Fishrock123 that's the casing bug again. It looks like my local copy of form-data's README is README.md (???), but the version in their repo is Readme.md (?!?!?!)

Siiiigh :\

[Fishrock123]

Tests passing, LGTM

[Fishrock123]

Thanks! Landed in 33aa953...6b443d1