Skip to content

deps: Bump @npmcli/config from 10.12.0 to 11.0.1 - #1494

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npmcli/config-11.0.1
Open

deps: Bump @npmcli/config from 10.12.0 to 11.0.1#1494
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/npmcli/config-11.0.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps @npmcli/config from 10.12.0 to 11.0.1.

Release notes

Sourced from @​npmcli/config's releases.

libnpmexec: v11.0.1

Dependencies

config: v11.0.1

11.0.1 (2026-07-27)

Documentation

config: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • unknown configs in .npmrc, unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning.

Features

libnpmaccess: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

Features

libnpmexec: v11.0.0

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0

Features

Dependencies

config: v11.0.0-pre.3

11.0.0-pre.3 (2026-07-08)

Features

config: v11.0.0-pre.2

11.0.0-pre.2 (2026-06-29)

Features

... (truncated)

Changelog

Sourced from @​npmcli/config's changelog.

11.0.1 (2026-07-27)

Documentation

11.0.0 (2026-07-08)

⚠️ BREAKING CHANGES

  • npm shrinkwrap is removed, the shrinkwrap config alias is removed, and npm-shrinkwrap.json is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root npm-shrinkwrap.json to package-lock.json; use bundleDependencies if you need to ship a locked dependency tree.
  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning. (Unknown .npmrc configs still warn by default; opt into erroring with the new strict-npmrc config.)

Features

11.0.0-pre.3 (2026-07-08)

Features

11.0.0-pre.2 (2026-06-29)

Features

Bug Fixes

Documentation

11.0.0-pre.1 (2026-06-19)

⚠️ BREAKING CHANGES

  • The default license for npm init has been changed from "ISC" to an empty string. If not set, the license field will be omitted from new packages.
  • npm now supports node ^22.22.2 || ^24.15.0 || >=26.0.0
  • allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.
  • unknown CLI flags, abbreviated flags, and single-hyphen multi-char shorthands now throw instead of warning. (Unknown .npmrc configs still warn by default; opt into erroring with the new strict-npmrc config.)

Features

Bug Fixes

... (truncated)

Commits
  • b888cc9 chore: release 12.0.2
  • 9e17dc0 docs: clarify npm 12 unknown-config breaking change in changelogs (#9805)
  • 4403f05 chore: release 12.0.0
  • 230e221 chore: release 12.0.0-pre.3
  • fd75880 feat: warn instead of error on unknown .npmrc configs (#9729)
  • fb304e7 chore: release 12.0.0-pre.2
  • b51d156 feat(arborist): extend replace-registry-host with URL prefix matching (#6110)...
  • fdcfcee docs: recommend install-strategy=linked to catch phantom dependencies (#9678)
  • 86416a6 feat: graduate the linked install strategy from experimental to stable (#9674)
  • 7655822 fix(arborist): don't flag inert optional deps in strict-allow-scripts (#9597)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Automated dependency update javascript Pull requests that update Javascript code labels Aug 2, 2026
@dependabot
deps: Bump @npmcli/config from 10.12.0 to 11.0.1
d4f3afd 
Bumps [@npmcli/config](https://github.com/npm/cli/tree/HEAD/workspaces/config) from 10.12.0 to 11.0.1.
- [Release notes](https://github.com/npm/cli/releases)
- [Changelog](https://github.com/npm/cli/blob/latest/workspaces/config/CHANGELOG.md)
- [Commits](https://github.com/npm/cli/commits/config-v11.0.1/workspaces/config)

---
updated-dependencies:
- dependency-name: "@npmcli/config"
  dependency-version: 11.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/npmcli/config-11.0.1 branch from ba5685c to d4f3afd Compare August 5, 2026 14:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Automated dependency update javascript Pull requests that update Javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants