npm - @salesforce/cli - Versions diffs - 2.159.0 → 2.159.1 - Mend

@salesforce/cli 2.159.0 → 2.159.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (301) hide show

package/node_modules/npm/man/man1/npm-profile.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-PROFILE" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-PROFILE" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-profile\fR - Change settings on your registry profile
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-prune.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-PRUNE" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-PRUNE" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-prune\fR - Remove extraneous packages
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-publish.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-PUBLISH" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-PUBLISH" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-publish\fR - Publish a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-query.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-QUERY" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-QUERY" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-query\fR - Dependency selector query
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-rebuild.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-REBUILD" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-REBUILD" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-rebuild\fR - Rebuild a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-repo.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-REPO" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-REPO" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-repo\fR - Open package repository page in the browser
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-restart.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-RESTART" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-RESTART" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-restart\fR - Restart a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-root.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-ROOT" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-ROOT" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-root\fR - Display npm root
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-run.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-RUN" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-RUN" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-run\fR - Run arbitrary package scripts
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-sbom.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-SBOM" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-SBOM" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-sbom\fR - Generate a Software Bill of Materials (SBOM)
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-search.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-SEARCH" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-SEARCH" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-search\fR - Search for packages
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-set.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-SET" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-SET" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-set\fR - Set a value in the npm configuration
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-shrinkwrap.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-SHRINKWRAP" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-SHRINKWRAP" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-shrinkwrap\fR - Lock down dependency versions for publication
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-stage.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-STAGE" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-STAGE" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-stage\fR - Stage packages for publishing
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-star.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-STAR" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-STAR" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-star\fR - Mark your favorite packages
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-stars.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-STARS" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-STARS" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-stars\fR - View packages marked as favorites
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-start.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-START" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-START" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-start\fR - Start a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-stop.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-STOP" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-STOP" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-stop\fR - Stop a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-team.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-TEAM" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-TEAM" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-team\fR - Manage organization teams and team memberships
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-test.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-TEST" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-TEST" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-test\fR - Test a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-token.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-TOKEN" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-TOKEN" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-token\fR - Manage your authentication tokens
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-trust.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-TRUST" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-TRUST" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-trust\fR - Manage trusted publishing relationships between packages and CI/CD providers
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-undeprecate.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-UNDEPRECATE" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-UNDEPRECATE" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-undeprecate\fR - Undeprecate a version of a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-uninstall.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-UNINSTALL" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-UNINSTALL" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-uninstall\fR - Remove a package
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-unpublish.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-UNPUBLISH" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-UNPUBLISH" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-unpublish\fR - Remove a package from the registry
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-unstar.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-UNSTAR" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-UNSTAR" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-unstar\fR - Remove an item from your favorite packages
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-update.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-UPDATE" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-UPDATE" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-update\fR - Update packages
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-version.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-VERSION" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-VERSION" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-version\fR - Bump a package version
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-view.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-VIEW" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-VIEW" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-view\fR - View registry info
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm-whoami.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-WHOAMI" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-WHOAMI" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-whoami\fR - Display npm username
 .SS "Synopsis"

package/node_modules/npm/man/man1/npm.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPM" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm\fR - javascript package manager
 .SS "Synopsis"
@@ -12,7 +12,7 @@ npm
 Note: This command is unaware of workspaces.
 .SS "Version"
 .P
-11.21.1
+11.21.2
 .SS "Description"
 .P
 npm is the package manager for the Node JavaScript platform. It puts modules in place so that node can find them, and manages dependency conflicts intelligently.

package/node_modules/npm/man/man1/npx.1 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPX" "1" "October 2026" "NPM@11.21.1" ""
+.TH "NPX" "1" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpx\fR - Run a command from a local or remote npm package
 .SS "Synopsis"

package/node_modules/npm/man/man5/folders.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "FOLDERS" "5" "October 2026" "NPM@11.21.1" ""
+.TH "FOLDERS" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBFolders\fR - Folder structures used by npm
 .SS "Description"

package/node_modules/npm/man/man5/install.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "INSTALL" "5" "October 2026" "NPM@11.21.1" ""
+.TH "INSTALL" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBInstall\fR - Download and install node and npm
 .SS "Description"

package/node_modules/npm/man/man5/npm-global.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "FOLDERS" "5" "October 2026" "NPM@11.21.1" ""
+.TH "FOLDERS" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBFolders\fR - Folder structures used by npm
 .SS "Description"

package/node_modules/npm/man/man5/npm-json.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "PACKAGE.JSON" "5" "October 2026" "NPM@11.21.1" ""
+.TH "PACKAGE.JSON" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBpackage.json\fR - Specifics of npm's package.json handling
 .SS "Description"

package/node_modules/npm/man/man5/npm-shrinkwrap-json.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "NPM-SHRINKWRAP.JSON" "5" "October 2026" "NPM@11.21.1" ""
+.TH "NPM-SHRINKWRAP.JSON" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBnpm-shrinkwrap.json\fR - A publishable lockfile
 .SS "Description"

package/node_modules/npm/man/man5/npmrc.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH ".NPMRC" "5" "October 2026" "NPM@11.21.1" ""
+.TH ".NPMRC" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fB.npmrc\fR - The npm config files
 .SS "Description"

package/node_modules/npm/man/man5/package-json.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "PACKAGE.JSON" "5" "October 2026" "NPM@11.21.1" ""
+.TH "PACKAGE.JSON" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBpackage.json\fR - Specifics of npm's package.json handling
 .SS "Description"

package/node_modules/npm/man/man5/package-lock-json.5 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "PACKAGE-LOCK.JSON" "5" "October 2026" "NPM@11.21.1" ""
+.TH "PACKAGE-LOCK.JSON" "5" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBpackage-lock.json\fR - A manifestation of the manifest
 .SS "Description"

package/node_modules/npm/man/man7/config.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "CONFIG" "7" "October 2026" "NPM@11.21.1" ""
+.TH "CONFIG" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBConfig\fR - About npm configuration
 .SS "Description"

package/node_modules/npm/man/man7/dependency-selectors.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "SELECTORS" "7" "October 2026" "NPM@11.21.1" ""
+.TH "SELECTORS" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBSelectors\fR - Dependency Selector Syntax & Querying
 .SS "Description"

package/node_modules/npm/man/man7/developers.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "DEVELOPERS" "7" "October 2026" "NPM@11.21.1" ""
+.TH "DEVELOPERS" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBDevelopers\fR - Developer guide
 .SS "Description"

package/node_modules/npm/man/man7/logging.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "LOGGING" "7" "October 2026" "NPM@11.21.1" ""
+.TH "LOGGING" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBLogging\fR - Why, What & How we Log
 .SS "Description"

package/node_modules/npm/man/man7/orgs.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "ORGANIZATIONS" "7" "October 2026" "NPM@11.21.1" ""
+.TH "ORGANIZATIONS" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBOrganizations\fR - Working with teams & organizations
 .SS "Description"

package/node_modules/npm/man/man7/package-spec.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "SPEC" "7" "October 2026" "NPM@11.21.1" ""
+.TH "SPEC" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBspec\fR - Package name specifier
 .SS "Description"

package/node_modules/npm/man/man7/registry.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "REGISTRY" "7" "October 2026" "NPM@11.21.1" ""
+.TH "REGISTRY" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBRegistry\fR - The JavaScript Package Registry
 .SS "Description"

package/node_modules/npm/man/man7/removal.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "REMOVAL" "7" "October 2026" "NPM@11.21.1" ""
+.TH "REMOVAL" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBRemoval\fR - Cleaning the slate
 .SS "Synopsis"

package/node_modules/npm/man/man7/scope.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "SCOPE" "7" "October 2026" "NPM@11.21.1" ""
+.TH "SCOPE" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBScope\fR - Scoped packages
 .SS "Description"

package/node_modules/npm/man/man7/scripts.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "SCRIPTS" "7" "October 2026" "NPM@11.21.1" ""
+.TH "SCRIPTS" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBScripts\fR - How npm handles the "scripts" field
 .SS "Description"

package/node_modules/npm/man/man7/workspaces.7 CHANGED Viewed

@@ -1,4 +1,4 @@
-.TH "WORKSPACES" "7" "October 2026" "NPM@11.21.1" ""
+.TH "WORKSPACES" "7" "November 2026" "NPM@11.21.2" ""
 .SH "NAME"
 \fBWorkspaces\fR - Working with workspaces
 .SS "Description"

package/node_modules/npm/node_modules/@npmcli/promise-spawn/lib/index.js CHANGED Viewed

@@ -83,20 +83,27 @@ const spawnWithShell = (cmd, args, opts, extra) => {
   if (isCmd) {
     let doubleEscape = false
-    // find the actual command we're running
+    // Decode the executable token so escaped batch shims still get double escaping.
     let initialCmd = ''
     let insideQuotes = false
     for (let i = 0; i < cmd.length; ++i) {
       const char = cmd.charAt(i)
+      if (char === '^' && !insideQuotes && i + 1 < cmd.length) {
+        initialCmd += cmd.charAt(++i)
+        continue
+      }
       if (char === ' ' && !insideQuotes) {
         break
       }
       initialCmd += char
-      if (char === '"' || char === "'") {
+      if (char === '"') {
         insideQuotes = !insideQuotes
       }
     }
+    if (initialCmd.startsWith('"') && initialCmd.endsWith('"')) {
+      initialCmd = initialCmd.slice(1, -1)
+    }
     let pathToInitial
     try {

package/node_modules/npm/node_modules/@npmcli/promise-spawn/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@npmcli/promise-spawn",
-  "version": "9.0.1",
+  "version": "9.0.2",
   "files": [
     "bin/",
     "lib/"
@@ -43,7 +43,8 @@
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
     "version": "4.28.0",
-    "publish": true
+    "publish": true,
+    "backport": 9
   },
   "dependencies": {
     "which": "^6.0.0"

package/node_modules/npm/node_modules/bin-links/lib/get-paths.js CHANGED Viewed

@@ -5,11 +5,13 @@ const binTarget = require('./bin-target.js')
 const manTarget = require('./man-target.js')
 const { resolve, basename, extname } = require('path')
 const isWindows = require('./is-windows.js')
+const normalize = require('npm-normalize-package-bin')
 module.exports = ({ path, pkg, global, top }) => {
   if (top && !global) {
     return []
   }
+  pkg = normalize({ ...pkg })
   const binSet = []
   const binTarg = binTarget({ path, top })
   if (pkg.bin) {

package/node_modules/npm/node_modules/bin-links/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "bin-links",
-  "version": "6.0.2",
+  "version": "6.0.3",
   "description": "JavaScript package binary linker",
   "main": "./lib/index.js",
   "scripts": {
@@ -57,6 +57,7 @@
     "windowsCI": false,
     "version": "4.30.0",
     "publish": true,
+    "backport": 6,
     "updateNpm": false,
     "latestCiVersion": 24
   }

package/node_modules/npm/node_modules/ip-address/dist/common.js CHANGED Viewed

@@ -145,10 +145,10 @@ function stringToPaddedHex(numberString) {
  */
 function testBit(binaryValue, position) {
     const { length } = binaryValue;
-    if (position > length) {
+    if (position >= length) {
         return false;
     }
-    const positionInString = length - position;
+    const positionInString = length - position - 1;
     return binaryValue.substring(positionInString, positionInString + 1) === '1';
 }
 //# sourceMappingURL=common.js.map

package/node_modules/npm/node_modules/ip-address/dist/ipv4.js CHANGED Viewed

@@ -235,6 +235,13 @@ class Address4 {
      * address.correctForm(); // '192.0.2.42'
      */
     static fromArpa(arpaFormAddress) {
+        // A 15-character address, a "/32" prefix length and ".in-addr.arpa.": the
+        // longest name is 32 characters. Longer input is rejected before its
+        // labels are split, as the constructor does at its own limit.
+        const longest = constants.GROUPS * 4 - 1 + '/32'.length + '.in-addr.arpa.'.length;
+        if (arpaFormAddress.length > longest) {
+            throw new address_error_1.AddressError(`in-addr.arpa names are at most ${longest} characters.`);
+        }
         // remove an ending ".in-addr.arpa", in any case and with or without the
         // root dot, as Address6.fromArpa does for ".ip6.arpa"
         const leader = arpaFormAddress.replace(/(\.in-addr\.arpa)?\.?$/i, '');

package/node_modules/npm/node_modules/ip-address/dist/ipv6.js CHANGED Viewed

@@ -139,10 +139,13 @@ class Address6 {
         if (/\//.test(address)) {
             throw new address_error_1.AddressError('Invalid subnet mask.');
         }
-        const zone = constants6.RE_ZONE_STRING.exec(address);
-        if (zone) {
-            this.zone = zone[0];
-            address = address.replace(constants6.RE_ZONE_STRING, '');
+        // A zone runs from the first `%` to the end of the input and holds no line
+        // terminator. Finding it by index reads the input once, where matching
+        // RE_ZONE_STRING retries from every `%` that a line terminator disqualifies.
+        const zoneStart = address.indexOf('%');
+        if (zoneStart !== -1 && /^.*$/.test(address.slice(zoneStart))) {
+            this.zone = address.slice(zoneStart);
+            address = address.slice(0, zoneStart);
         }
         // The longest well-formed address is all but the last two groups written
         // as four hex digits with their colons, then a 15-character dotted quad:

package/node_modules/npm/node_modules/ip-address/dist/v6/constants.js CHANGED Viewed

@@ -81,6 +81,9 @@ exports.RE_SUBNET_STRING = /\/\d{1,3}(?=%|$)/;
  * A regular expression that matches an IPv6 zone
  * @memberof Address6
  * @static
+ * @deprecated Takes quadratic time on input holding many `%` characters
+ * followed by a line terminator. The library finds the zone by index, as
+ * `Address6`'s constructor shows, and 11.0.0 removes this export.
  */
 exports.RE_ZONE_STRING = /%.*$/;
 exports.RE_URL = /^(?:\[([0-9a-f:.]+)\]|([0-9a-f:.]+))(?:[/?#].*)?$/i;

package/node_modules/npm/node_modules/ip-address/package.json CHANGED Viewed

@@ -16,13 +16,14 @@
     "bigint",
     "browser"
   ],
-  "version": "10.7.2",
+  "version": "10.7.5",
   "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
   "license": "MIT",
   "main": "dist/ip-address.js",
   "types": "dist/ip-address.d.ts",
   "scripts": {
     "docs": "tsx scripts/build-readme.ts",
+    "docs:check": "tsx scripts/build-readme.ts --check",
     "build": "rm -rf dist; mkdir dist; tsc",
     "prepack": "npm run docs && npm run build",
     "prepare": "git config core.hooksPath hooks || true",
@@ -79,7 +80,7 @@
     "eslint-plugin-import": "^2.32.0",
     "eslint-plugin-prettier": "^5.5.5",
     "eslint-plugin-sort-imports-es6-autofix": "^0.6.0",
-    "mocha": "^11.7.5",
+    "mocha": "^12.0.3",
     "monocart-coverage-reports": "^2.12.11",
     "prettier": "^3.8.3",
     "source-map-support": "^0.5.21",

package/node_modules/npm/node_modules/libnpmexec/README.md CHANGED Viewed

@@ -28,7 +28,7 @@ await libexec({
 - `opts`:
   - `args`: List of pkgs to execute **Array<String>**, defaults to `[]`
-  - `call`: An alternative command to run when using `packages` option **String**, defaults to empty string.
+  - `call`: An alternative shell script to run when using `packages` option **String**, defaults to empty string. Unlike an executable selected from `args` or a package's `bin`, this is intentionally interpreted as shell syntax.
   - `cache`: The path location to where the npm cache folder is placed **String**
   - `npxCache`: The path location to where the npx cache folder is placed **String**
   - `chalk`: Chalk instance to use for colors? **Required**
@@ -42,6 +42,14 @@ await libexec({
   - `yes`: Should skip download confirmation prompt when fetching missing packages from the registry? **Boolean**
   - `registry`, `cache`, and more options that are forwarded to [@npmcli/arborist](https://github.com/npm/cli/blob/latest/workspaces/arborist/README.md) and [pacote](https://github.com/npm/pacote/#options) **Object**
+  Executable names are escaped for the selected shell, including POSIX shells and
+  PowerShell used on Windows. For inferred PowerShell invocations, arguments are
+  also escaped as literal strings. With `cmd.exe`, executable names containing double
+  quotes, percent signs, exclamation marks, or control characters are rejected
+  with `EINVALIDCOMMAND`. Use a bin name without these characters. On a matching
+  npx-cache hit, command selection uses the installed package's `bin` rather than
+  the registry's bin metadata.
 ## LICENSE
 [ISC](./LICENSE)

package/node_modules/npm/node_modules/libnpmexec/lib/index.js CHANGED Viewed

@@ -267,8 +267,8 @@ const exec = async (opts) => {
     })
     const lockPath = join(installDir, 'concurrency.lock')
     const npxTree = await withLock(lockPath, () => npxArb.loadActual())
-    await Promise.all(needInstall.map(async ({ spec }) => {
-      const { manifest } = await missingFromTree({
+    await Promise.all(needInstall.map(async ({ spec, manifest: requestedManifest }) => {
+      const { manifest, node } = await missingFromTree({
         spec,
         tree: npxTree,
         flatOptions,
@@ -281,6 +281,10 @@ const exec = async (opts) => {
         } else {
           add.push(manifest._id)
         }
+      } else if (needPackageCommandSwap && commandManifest === requestedManifest) {
+        // A cache hit must use the installed bin, not mutable registry metadata.
+        commandManifest = node.package
+        args[0] = getBinFromManifest(commandManifest)
       }
     }))