Skip to content

[pull] latest from npm:latest#10

Open
pull[bot] wants to merge 1821 commits intoanhy999:latestfrom
npm:latest
Open

[pull] latest from npm:latest#10
pull[bot] wants to merge 1821 commits intoanhy999:latestfrom
npm:latest

Conversation

@pull
Copy link

@pull pull bot commented Aug 8, 2022

See Commits and Changes for more details.


Created by pull[bot]

Can you help keep this open source service alive? 💖 Please sponsor : )

@changeset-bot
Copy link

changeset-bot bot commented Aug 8, 2022

⚠️ No Changeset found

Latest commit: 417daa7

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

Schweinepriester and others added 30 commits December 19, 2025 09:40
<!-- What / Why -->
<!-- Describe the request in detail. What it does and why it's being
changed. -->
while reading https://docs.npmjs.com/cli/v11/commands/npm-dedupe

<img width="1582" height="502" alt="image"
src="https://github.com/user-attachments/assets/cc8109a3-6d56-40bb-8cc7-09f6c59e0dd8"
/>

I realized there's probably a typo/logic error/imprecision: the
`c@1.9.0` is mentioned nowhere else.

I assume `c@1.9.9` was meant, because it's listed in the dependency
graph above. but I have no clue about the inner workings of
`npm-dedupe`, so I might be wrong here.

---

alternative solution: noting `c@1.9.x`, but not using a range and
explicitly matching the listed version above inherits more clarity, at
least in my mind

## References
<!-- Examples:
  Related to #0
  Depends on #0
  Blocked by #0
  Fixes #0
  Closes #0
-->

- https://docs.npmjs.com/cli/v11/commands/npm-dedupe
Also updated diff in dev deps
## Add webauth URLs to EOTP error messages

When npm returns an EOTP error with `authUrl` and `doneUrl` in the
response body (web-based OTP flow), these URLs are now included in the
error output.

**What:**
- Display `authUrl` (for browser authentication) and `doneUrl` (for
token retrieval) in non-TTY EOTP error messages
- Include both URLs in `--json` output as `error.authUrl` and
`error.doneUrl`
- Adjusted messaging to differentiate webauth flow from traditional TOTP
authenticator flow

**Why:**
- In non-interactive/CI environments, the webauth URLs were not
surfaced, making it impossible to complete authentication
- Tools wrapping `npm publish` (like
[changesets](changesets/changesets#1773)) need
access to these URLs to implement web OTP support
- The `doneUrl` is required for polling to retrieve the token after
browser authentication completes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.