[Snyk] Upgrade npm from 6.13.7 to 6.14.0

[snyk-bot]

Snyk has created this PR to upgrade npm from 6.13.7 to 6.14.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.
• The recommended version was released 22 days ago, on 2020-02-25.

Release notes

Package name: npm

• 6.14.0 - 2020-02-25
  

  6.14.0 (2020-02-25)

  FEATURES

  • 30f170877 #731 add support for multiple funding sources (@ljharb & @ruyadorno)

  BUG FIXES

  • 55916b130 #508 fix: check npm.config before accessing its members (@kaiyoma)
  • 7d0cd65b2 #733 fix: access grant with unscoped packages (@netanelgilad)
  • 28c3d40d6, 0769c5b20 #945, #697 fix: allow new major versions of node to be automatically considered "supported" (@isaacs, @ljharb)

  DEPENDENCIES

  • 6f39e93 hosted-git-info@2.8.6 (@darcyclarke)
    • fix: passwords & usernames are escaped properly in git deps (@stevenhilder)
  • f14b594ee chownr@1.1.4 (@isaacs)
  • 77044150b npm-packlist@1.4.8 (@isaacs)
  • 1d112461a npm-registry-fetch@4.0.3 (@isaacs)
    • ba8b4fe fix: always bypass cache when ?write=true
  • a47fed760 readable-stream@3.6.0
    • 3bbf2d6 fix: babel's "loose mode" class transform enbrittles BufferList (@ljharb)

  DOCUMENTATION

  • 284c1c055, fbb5f0e50 #729 update lifecycle hooks docs
    (@seanhealy, @mikemimik)
  • 1c272832d #787 fix: trademarks typo (@dnicolson)
  • f6ff41776 #936 fix: postinstall example (@ajaymathur)
  • 373224b16 #939 fix: bad links in publish docs (@vit100)

  MISCELLANEOUS

  • 85c79636d #736 add script to update dist-tags (@mikemimik)
• 6.13.7 - 2020-01-28
  

  6.13.7 (2020-01-28)

  BUG FIXES

  • 7dbb91438 #655 Update CI detection cases (@isaacs)

  DEPENDENCIES

  • 0fb1296c7 libnpx@10.2.2 (@mikemimik)
  • c9b69d569 node-gyp@5.0.7 (@mikemimik)
  • e8dbaf452 bin-links@1.1.7 (@mikemimik)
    • #613 Fixes bin entry for package

from npm GitHub release notes

Commit messages

Package name: npm

• 83293c4 6.14.0
• e01f338 update AUTHORS
• 31ca3a8 docs: changelog for 6.14.0
• 7602146 hosted-git-info@2.8.6
• 3d48893 readable-stream@3.6.0
• ea0ff56 npm-registry-fetch@4.0.3
• 89ce4cc npm-packlist@1.4.8
• a6789b1 chownr@1.1.4
• d383adb fix: supported version implementation update linting & test coverage
• 28c3d40 Use a package.json engines field to specify support
• 0769c5b allow new majors of node to be automatically considered supported
• 30f1708 fund: support multiple funding sources
• 373224b Update npm-publish.md
• f6ff417 updated script to say postinstall to show intention
• 1c27283 Correct typo
• 85c7963 feat: added script to update dist-tags
• 7d0cd65 access: grant is ok with non-scoped
• 284c1c0 docs: updated scripts docs in using-npm section
• fbb5f0e First take on breaking out the lifecycle hooks.
• 55916b1 fix: check `npm.config` before accessing its members

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs