v6.4.0
NEW FEATURES
6e9f04b0bnpm/cli#8 Search for authentication token defined by environment variables by preventing the translation layer from env variable to npm option from breaking:_authToken. (@mkhl)84bfd23e7npm/cli#35 Stop filtering out non-IPv4 addresses fromlocal-addrs, making npm actually use IPv6 addresses when it must. (@valentin2105)792c8c709npm/cli#31 configurable audit level for non-zero exitnpm auditcurrently exits with exit code 1 if any vulnerabilities are found of any level. Add a flag of--audit-leveltonpm auditto allow it to pass if only vulnerabilities below a certain level are found. Example:npm audit --audit-level=highwill exit with 0 if only low or moderate level vulns are detected. (@lennym)
BUGFIXES
d81146181npm/cli#32 Don't check for updates to npm when we are updating npm itself. (@olore)
DEPENDENCY UPDATES
A very special dependency update event! Since the release of [email protected], an awkward version conflict that was preventing request from begin flattened was resolved. This means two things:
- We've cut down the npm tarball size by another 200kb, to 4.6MB
npm auditnow shows no vulnerabilities for npm itself!
Thanks, @rvagg!
866d776c2[email protected](@simov)f861c2b57[email protected](@rvagg)32e6947c6npm/cli#39[email protected]: REVERT REVERT, newer versions of this library are broken and print ansi codes even when disabled. (@iarna)beb96b92c[email protected](@zkat)348fc91ad[email protected]: Fixes errors with empty or string-only license fields. (@Gudahtt)e57d34575[email protected](@shesek)46f1c6ad4[email protected](@isaacs)50df1bf69[email protected](@iarna)
(@Erveon) (@huochunpeng)
DOCUMENTATION
af98e76ednpm/cli#34 Removenpm publishfrom list of commands not affected by--dry-run. (@joebowbeer)e2b0f0921npm/cli#36 Tweak formatting in repository field examples. (@noahbenham)e2346e770npm/cli#14 Usedprocess.envexamples to make accessing certainnpm run-scriptsenvironment variables more clear. (@mwarger)