[pull] latest from npm:latest

.commitlintrc.js

@@ -7,5 +7,6 @@ module.exports = {
     'header-max-length': [2, 'always', 80],
     'subject-case': [0],
     'body-max-line-length': [0],
+    'footer-max-line-length': [0],
   },
 }

.eslintrc.js

@@ -12,6 +12,8 @@ module.exports = {
   root: true,
   ignorePatterns: [
     'tap-testdir*/',
+    '/node_modules/.bin/',
+    '/node_modules/.cache/',
     'docs/**',
     'smoke-tests/**',
     'mock-globals/**',

.gitattributes

@@ -16,6 +16,7 @@
 /node_modules/.gitignore text eol=lf
 /workspaces/arborist/test/fixtures/.gitignore text eol=lf
 /DEPENDENCIES.md text eol=lf
+/DEPENDENCIES.json text eol=lf
 /AUTHORS text eol=lf
 
 # fixture tarballs should be treated as binary

.github/actions/create-check/action.yml

@@ -25,7 +25,7 @@ runs:
       with:
         result-encoding: string
         script: |
-          const { repo: { owner, repo}, runId, serverUrl } = context          
+          const { repo: { owner, repo}, runId, serverUrl } = context
           const { JOB_NAME, SHA } = process.env
 
           const job = await github.rest.actions.listJobsForWorkflowRun({

.github/actions/install-latest-npm/action.yml

@@ -44,7 +44,7 @@ runs:
             MATCH=$SPEC
             echo "Found compatible version: npm@$MATCH"
             break
-          fi  
+          fi
         done
 
         if [ -z $MATCH ]; then

.github/workflows/audit.yml

@@ -8,6 +8,9 @@ on:
     # "At 08:00 UTC (01:00 PT) on Monday" https://crontab.guru/#0_8_*_*_1
     - cron: "0 8 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   audit:
     name: Audit Dependencies

.github/workflows/ci-libnpmaccess.yml

@@ -17,6 +17,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -48,9 +51,9 @@ jobs:
       - name: Reset Deps
         run: node scripts/resetdeps.js
       - name: Lint
-        run: npm run lint --ignore-scripts -w libnpmaccess
+        run: npm run lint --ignore-scripts --workspace libnpmaccess
       - name: Post Lint
-        run: npm run postlint --ignore-scripts -w libnpmaccess
+        run: npm run postlint --ignore-scripts --workspace libnpmaccess
 
   test:
     name: Test - ${{ matrix.platform.name }} - ${{ matrix.node-version }}
@@ -72,23 +75,17 @@ jobs:
             os: windows-latest
             shell: cmd
         node-version:
-          - 16.14.0
-          - 16.x
-          - 18.0.0
-          - 18.x
+          - 20.17.0
           - 20.x
+          - 22.9.0
           - 22.x
         exclude:
           - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.14.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.x
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.0.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.x
+            node-version: 20.17.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 20.x
+          - platform: { name: macOS, os: macos-13, shell: bash }
+            node-version: 22.9.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 22.x
     runs-on: ${{ matrix.platform.os }}
@@ -120,6 +117,6 @@ jobs:
       - name: Add Problem Matcher
         run: echo "::add-matcher::.github/matchers/tap.json"
       - name: Test
-        run: npm test --ignore-scripts -w libnpmaccess
+        run: npm test --ignore-scripts --workspace libnpmaccess
       - name: Check Git Status
         run: node scripts/git-dirty.js

.github/workflows/ci-libnpmdiff.yml

@@ -17,6 +17,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -48,9 +51,9 @@ jobs:
       - name: Reset Deps
         run: node scripts/resetdeps.js
       - name: Lint
-        run: npm run lint --ignore-scripts -w libnpmdiff
+        run: npm run lint --ignore-scripts --workspace libnpmdiff
       - name: Post Lint
-        run: npm run postlint --ignore-scripts -w libnpmdiff
+        run: npm run postlint --ignore-scripts --workspace libnpmdiff
 
   test:
     name: Test - ${{ matrix.platform.name }} - ${{ matrix.node-version }}
@@ -72,23 +75,17 @@ jobs:
             os: windows-latest
             shell: cmd
         node-version:
-          - 16.14.0
-          - 16.x
-          - 18.0.0
-          - 18.x
+          - 20.17.0
           - 20.x
+          - 22.9.0
           - 22.x
         exclude:
           - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.14.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.x
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.0.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.x
+            node-version: 20.17.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 20.x
+          - platform: { name: macOS, os: macos-13, shell: bash }
+            node-version: 22.9.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 22.x
     runs-on: ${{ matrix.platform.os }}
@@ -120,6 +117,6 @@ jobs:
       - name: Add Problem Matcher
         run: echo "::add-matcher::.github/matchers/tap.json"
       - name: Test
-        run: npm test --ignore-scripts -w libnpmdiff
+        run: npm test --ignore-scripts --workspace libnpmdiff
       - name: Check Git Status
         run: node scripts/git-dirty.js

.github/workflows/ci-libnpmexec.yml

@@ -17,6 +17,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -48,9 +51,9 @@ jobs:
       - name: Reset Deps
         run: node scripts/resetdeps.js
       - name: Lint
-        run: npm run lint --ignore-scripts -w libnpmexec
+        run: npm run lint --ignore-scripts --workspace libnpmexec
       - name: Post Lint
-        run: npm run postlint --ignore-scripts -w libnpmexec
+        run: npm run postlint --ignore-scripts --workspace libnpmexec
 
   test:
     name: Test - ${{ matrix.platform.name }} - ${{ matrix.node-version }}
@@ -72,23 +75,17 @@ jobs:
             os: windows-latest
             shell: cmd
         node-version:
-          - 16.14.0
-          - 16.x
-          - 18.0.0
-          - 18.x
+          - 20.17.0
           - 20.x
+          - 22.9.0
           - 22.x
         exclude:
           - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.14.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.x
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.0.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.x
+            node-version: 20.17.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 20.x
+          - platform: { name: macOS, os: macos-13, shell: bash }
+            node-version: 22.9.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 22.x
     runs-on: ${{ matrix.platform.os }}
@@ -120,6 +117,6 @@ jobs:
       - name: Add Problem Matcher
         run: echo "::add-matcher::.github/matchers/tap.json"
       - name: Test
-        run: npm test --ignore-scripts -w libnpmexec
+        run: npm test --ignore-scripts --workspace libnpmexec
       - name: Check Git Status
         run: node scripts/git-dirty.js

.github/workflows/ci-libnpmfund.yml

@@ -17,6 +17,9 @@ on:
     # "At 09:00 UTC (02:00 PT) on Monday" https://crontab.guru/#0_9_*_*_1
     - cron: "0 9 * * 1"
 
+permissions:
+  contents: read
+
 jobs:
   lint:
     name: Lint
@@ -48,9 +51,9 @@ jobs:
       - name: Reset Deps
         run: node scripts/resetdeps.js
       - name: Lint
-        run: npm run lint --ignore-scripts -w libnpmfund
+        run: npm run lint --ignore-scripts --workspace libnpmfund
       - name: Post Lint
-        run: npm run postlint --ignore-scripts -w libnpmfund
+        run: npm run postlint --ignore-scripts --workspace libnpmfund
 
   test:
     name: Test - ${{ matrix.platform.name }} - ${{ matrix.node-version }}
@@ -72,23 +75,17 @@ jobs:
             os: windows-latest
             shell: cmd
         node-version:
-          - 16.14.0
-          - 16.x
-          - 18.0.0
-          - 18.x
+          - 20.17.0
           - 20.x
+          - 22.9.0
           - 22.x
         exclude:
           - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.14.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 16.x
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.0.0
-          - platform: { name: macOS, os: macos-13, shell: bash }
-            node-version: 18.x
+            node-version: 20.17.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 20.x
+          - platform: { name: macOS, os: macos-13, shell: bash }
+            node-version: 22.9.0
           - platform: { name: macOS, os: macos-13, shell: bash }
             node-version: 22.x
     runs-on: ${{ matrix.platform.os }}
@@ -120,6 +117,6 @@ jobs:
       - name: Add Problem Matcher
         run: echo "::add-matcher::.github/matchers/tap.json"
       - name: Test
-        run: npm test --ignore-scripts -w libnpmfund
+        run: npm test --ignore-scripts --workspace libnpmfund
       - name: Check Git Status
         run: node scripts/git-dirty.js