v8.4.0 #4339
Merged
v8.4.0 #4339
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Arborist was not loading the actual tree when using named updates for global updates, that would result in removing all previously installed deps from a global install anytime the user would try to run `npm update <pkgname>`. This changeset fixes the problem by allowing the load of the actual tree if the `global` and `update.names` options are defined. Added a few more tests to illustrate but some of the snapshots already included were actually demonstrating the problem by having empty trees as result, these are now also updated with the expected tree result. Fixes: #3175
* feat(arborist): add named updates validation Arborist update does not support anything other than dependency names, that is confusing to some users that are used to provide semver ranges when using `npm install` and other commands. This changeset adds validation to the values provided as arguments in `npm update` and will throw a `EUPDATEARGS` error in case the user tries to use semver ranges, e.g: `npm update abbrev@1.0.0` Relates to: #4240
… permissions (#4258) * fix(arborist): shrinkwrap throws trying to read a folder without permissions Fix an issue where shrinkwrap throws an error when trying to read a folder that it doesn't have permissions to, instead of returning a correct object with an error
When updating dependencies we need an extra check when filtering nodes to be updated that ensures we do not override semver ranges that are pointing to an exact version. e.g: =1.0.0, 1.0.0 Fixes: #4329
|
found 20 benchmarks with statistically significant performance improvements
timing results
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
v8.4.0 (2022-01-27)
Features
fbe48a840#4307 feat(arborist): add named updates validation (@ruyadorno)Bug Fixes
1f853f8bf#4306 fix(arborist): load actual tree on named updates (@ruyadorno)90c384ccc#4326 fix(logout): require proper auth.js from npm-registry-fetch (@wraithgar)fabcf431a#4327 fix(arborist): correctly load overrides on workspace edges, closes #4205 (@nlf)8c3b143ca#4258 fix(arborist): shrinkwrap throws when trying to read a folder without permissions (@Linkgoron)b51b29c56#4334 fix(arborist): update save exact (@ruyadorno)Dependencies
8558527c7#4333 deps:make-fetch-happen@10.0.01bfc507f2#4326 deps:npm-registry-fetch@12.0.152c9608e7#4326 deps:pacote@12.0.32bbeedfeb#4326 deps:npm-profile@6.0.09652d685bchore(release):@npmcli/arborist@4.3.0(@wraithgar)0ee4927d2chore(release):libnpmaccess@5.0.1(@wraithgar)6c0dc1ffbchore(release):libnpmexec@3.0.3(@wraithgar)41b8f7b6fchore(release):libnpmorg@3.0.1(@wraithgar)433e6aafbchore(release):libnpmpublish@5.0.1(@wraithgar)6654b6efechore(release):libnpmsearch@4.0.1(@wraithgar)3423a9804chore(release):libnpmteam@3.0.1(@wraithgar)fb03e485dchore(release):libnpmhook@7.0.1(@wraithgar)