Sourced from libnpmpack's releases.

libnpmpack: v9.0.11

Dependencies

• workspace: @npmcli/arborist@9.1.8

libnpmpack: v9.0.10

Dependencies

• workspace: @npmcli/arborist@9.1.7

Sourced from libnpmpack's changelog.

Changelog

11.7.0 (2025-12-09)

Features

• b380d15 #8697 add deduping to notices unless in verbose+ mode (@​owlstronaut)

Bug Fixes

• 4ebb831 #8839 updates hints to use cli paradigm (@​owlstronaut)
• 7896e51 #8838 update the token list text (@​owlstronaut)
• 8ab8668 #8836 query: support package-lock-only in workspaces (@​watilde)
• 35e8d38 #8322 properly handle newlines with input when using the spinner (#8322) (@​mbtools)
• 0c0faae #8780 adduser: improve email prompt (#8780) (@​mbtools)

Documentation

• 7f2ab9d #8810 scripts: replace deprecated prepublish and install examples with prepare (Max Black)
• 91ebab7 #8847 remove note about token create being disabled (@​owlstronaut)
• 2030250 #8822 scripts: clarify prepare script runs with --production (Max Black)
• 33a50d7 #8821 scripts: update npm_package_* environment variables documentation (Max Black)
• 50508f9 #8793 package-json: add documentation for type field (#8793) (@​MaxBlack-dev, Max Black)
• aa1dd7e #8823 scripts: document that prepare scripts run concurrently in workspaces (Max Black)
• 3f48487 #8820 package-spec: fix alias syntax in examples (Max Black)
• dd104da #8812 version: add note about git version requirements (Max Black)
• 58afdcc #8792 install: clarify prerelease version range behavior (Max Black)
• 9f818e8 #8795 npm-view: clarify object property access syntax and provide examples (Max Black)
• 39c2f2e #8791 add examples for command line flags including --prefix (Max Black)
• 1298530 #8790 clarify version field can be omitted in package-lock (Max Black)
• 090b6ca #8794 npx: clarify that arguments are passed to executed command (Max Black)
• a864f80 #8787 document gypfile field in package.json (Max Black)
• 2fc689d #8788 add field access patterns to npm view (Max Black)
• 4850639 #8796 package-json: add examples for replacing dependencies with forks in overrides (Max Black)
• 4864dd4 #8798 npm-install: document engines field priority when installing packages (Max Black)
• 95d25cd #8799 package-json: clarify repository field normalization during publish (Max Black)
• a367f9b #8800 package-lock-json: clarify that version field may be omitted for certain dependencies (Max Black)
• ffc9b71 #8801 npm-install: clarify --tag does not override package.json (#8801) (@​MaxBlack-dev, Max Black)
• 73688ca #8735 clarify npm version behavior with prerelease versions (#8735) (@​yashwantbezawada)
• 4a32606 #8785 updates the token create documentation (#8785) (@​owlstronaut, @​wraithgar)

Chores

• 54929ce #8836 update baseline-browser-mapping (@​watilde)

Dependencies

• workspace: @npmcli/arborist@9.1.9
• workspace: @npmcli/config@10.4.5
• workspace: libnpmdiff@8.0.12
• workspace: libnpmexec@10.1.11
• workspace: libnpmfund@7.0.12
• workspace: libnpmpack@9.0.12

11.6.4 (2025-11-25)

Documentation

• dfb83c7 #8749 add example for keywords field (#8749) (@​MaxBlack-dev, Max Black)

... (truncated)

• 5271485 chore: release 11.6.4
• 7da8fdd chore: release 11.6.3
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)