@npmcli/arborist 5.2.0 → 5.2.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -9,7 +9,7 @@ Inspect and manage `node_modules` trees.
9
9
  ![a tree with the word ARBORIST superimposed on it](https://raw.githubusercontent.com/npm/arborist/main/docs/logo.svg?sanitize=true)
10
10
 
11
11
  There's more documentation [in the docs
12
- folder](https://github.com/npm/arborist/tree/main/docs).
12
+ folder](https://github.com/npm/cli/tree/latest/workspaces/arborist/docs).
13
13
 
14
14
  ## USAGE
15
15
 
@@ -673,7 +673,7 @@ Try using the package name instead, e.g:
673
673
  const breakingMessage = isSemVerMajor
674
674
  ? 'a SemVer major change'
675
675
  : 'outside your stated dependency range'
676
- log.warn('audit', `Updating ${name} to ${version},` +
676
+ log.warn('audit', `Updating ${name} to ${version}, ` +
677
677
  `which is ${breakingMessage}.`)
678
678
 
679
679
  await this[_add](node, { add: [`${name}@${version}`] })
package/lib/edge.js CHANGED
@@ -92,7 +92,12 @@ class Edge {
92
92
  return false
93
93
  }
94
94
 
95
- return depValid(node, this.spec, this.accept, this.from)
95
+ // NOTE: this condition means we explicitly do not support overriding
96
+ // bundled or shrinkwrapped dependencies
97
+ const spec = (node.hasShrinkwrap || node.inShrinkwrap || node.inBundle)
98
+ ? this.rawSpec
99
+ : this.spec
100
+ return depValid(node, spec, this.accept, this.from)
96
101
  }
97
102
 
98
103
  explain (seen = []) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@npmcli/arborist",
3
- "version": "5.2.0",
3
+ "version": "5.2.3",
4
4
  "description": "Manage node_modules trees",
5
5
  "dependencies": {
6
6
  "@isaacs/string-locale-compare": "^1.1.0",
@@ -11,7 +11,7 @@
11
11
  "@npmcli/name-from-folder": "^1.0.1",
12
12
  "@npmcli/node-gyp": "^2.0.0",
13
13
  "@npmcli/package-json": "^2.0.0",
14
- "@npmcli/run-script": "^3.0.0",
14
+ "@npmcli/run-script": "^4.1.3",
15
15
  "bin-links": "^3.0.0",
16
16
  "cacache": "^16.0.6",
17
17
  "common-ancestor-path": "^1.0.1",
@@ -25,7 +25,7 @@
25
25
  "npm-pick-manifest": "^7.0.0",
26
26
  "npm-registry-fetch": "^13.0.0",
27
27
  "npmlog": "^6.0.2",
28
- "pacote": "^13.0.5",
28
+ "pacote": "^13.6.1",
29
29
  "parse-conflict-json": "^2.0.1",
30
30
  "proc-log": "^2.0.0",
31
31
  "promise-all-reject-late": "^1.0.0",
@@ -40,7 +40,7 @@
40
40
  },
41
41
  "devDependencies": {
42
42
  "@npmcli/eslint-config": "^3.0.1",
43
- "@npmcli/template-oss": "3.4.2",
43
+ "@npmcli/template-oss": "3.5.0",
44
44
  "benchmark": "^2.1.4",
45
45
  "chalk": "^4.1.0",
46
46
  "minify-registry-metadata": "^2.1.0",
@@ -101,6 +101,6 @@
101
101
  },
102
102
  "templateOSS": {
103
103
  "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
104
- "version": "3.4.2"
104
+ "version": "3.5.0"
105
105
  }
106
106
  }