Update dependency npm to v9.9.4

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
npm (source)	9.7.2 → 9.9.4

---

Release Notes

npm/cli (npm)

v9.9.4

Compare Source

Dependencies

• 080e201 #​7930 hosted-git-info@6.1.3 (#​7930)
• 401bb86 #​7928 tar@6.2.1
• cfb3b77 #​7928 cross-spawn@7.0.6
• 6a5f8a8 #​7928 debug@4.3.7
• 72df313 #​7928 hosted-git-info@6.1.2

v9.9.3

Compare Source

Bug Fixes

• 88ea8c7 #​7010 set objectMode for search filter stream (@​lukekarrys)
• 8d9d735 #​7010 unpublish: bubble up all errors parsing local package.json (#​7049) (@​wraithgar)
• e0e75e5 #​7010 unpublish bugfixes (#​7039) (@​wraithgar)
• 4d59ce1 #​7047 reverse direction of SPDX SBOM dep rels (#​7047) (@​bdehamer, @​antonbauhofer)
• 878f22b #​7008 properly catch missing url opener error (@​wraithgar)
• 91a8eca #​7008 properly catch missing url opener error on interactive prompt (@​wraithgar)

Dependencies

• 1968e0e #​7010 spdx-license-ids@3.0.17
• d130576 #​7010 spdx-exceptions@2.5.0
• 00f28b8 #​7010 signal-exit@4.1.0
• 57096c3 #​7010 postcss-selector-parser@6.0.15
• 3ce677e #​7010 minipass-fetch@3.0.4
• 89757ed #​7010 is-core-module@2.13.1
• bc1e841 #​7010 socks@2.8.1
• 01f4049 #​7010 ignore-walk@6.0.4
• 15f8982 #​7010 function-bind@1.1.2
• 88ff949 #​7010 cmd-shim@6.0.2
• 3e298f6 #​7010 bin-links@4.0.3
• 35a6286 #​7010 are-we-there-yet@4.0.2
• aeb28c4 #​7010 agentkeepalive@4.5.0
• edc7e23 #​7010 @npmcli/query@3.1.0
• 00a3a08 #​7010 tar@6.2.0
• 7f424c3 #​7010 ssri@10.0.5
• 79b8538 #​7010 semver@7.6.0
• b5faf10 #​7010 npm-install-checks@6.3.0
• 2c62266 #​7010 node-gyp@9.4.1
• cc0516b #​7010 minipass@7.0.4
• 651d362 #​7010 json-parse-even-better-errors@3.0.1
• 4b239c6 #​7010 glob@10.3.10
• 2f65b46 #​7010 fs-minipass@3.0.3
• 6c73ddf #​7010 diff@5.2.0
• 73ee6cc #​7010 ci-info@4.0.0
• 64715a4 #​7010 cacache@17.1.4
• workspace: @npmcli/arborist@6.5.1
• workspace: @npmcli/config@6.4.1
• workspace: libnpmaccess@7.0.3
• workspace: libnpmdiff@5.0.21
• workspace: libnpmexec@6.0.5
• workspace: libnpmfund@4.2.2
• workspace: libnpmhook@9.0.4
• workspace: libnpmorg@5.0.5
• workspace: libnpmpack@5.0.21
• workspace: libnpmpublish@7.5.2
• workspace: libnpmsearch@6.0.3
• workspace: libnpmteam@5.0.4
• workspace: libnpmversion@4.0.3

Chores

• 77fa150 #​7252 release: do not exclude docs directory from CLI release commits (#​7162) (@​lukekarrys)
• 1d4c464 #​7252 @npmcli/template-oss@4.21.3 (@​lukekarrys)
• 6780643 #​7010 dev dependency updates (@​wraithgar)
• ce701e9 #​7048 fix tests for zlib differences between node versions (#​7048) (@​wraithgar)

v9.9.2

Compare Source

Bug Fixes

• 4c9a5e1 #​6993 look in workspace for exec commands (#​6993) (@​wraithgar)
• bb6f496 #​6992 correctly handle object licenses in SBOM generation (#​6992) (@​bdehamer, @​jamietanna)
• 10db3ca #​6990 pkg: properly output in workspace mode (#​6990) (@​wraithgar)

Documentation

• 6ab06d7 #​6985 update npm-prune description (#​6985) (@​Eomm)

Dependencies

• Workspace: libnpmpublish@7.5.1

v9.9.1

Compare Source

Bug Fixes

• 0dba79a #​6942 add back bin/node-gyp-bin/node-gyp files (@​lukekarrys)
• c93edb5 #​6932 add back bin/node-gyp-bin/node-gyp files (@​lukekarrys)

Documentation

• e6cce28 #​6925 use markdown links instead of html (@​lukekarrys)

v9.9.0

Compare Source

Features

• ecda95a #​6841 add npm sbom command (#​6841) (@​bdehamer)
• fdb8a86 #​6794 add package-lock-only mode to npm query (@​wraithgar)
• 16c04b1 #​6877 add no-package-lock mode to npm audit (@​wraithgar)
• 66ef765 #​6776 Add --cpu and --os option to override platform specific install (#​6776) (@​yukukotani)

Bug Fixes

• c9406f7 #​6791 deprecate: ignore implicit workspace mode (#​6758) (#​6791) (@​wraithgar)
• 0b1d7c3 #​6779 allow searching packages with no description (#​6779) (@​wraithgar, @​lukekarrys)

Documentation

• 9750720 #​6694 fix example path (#​6694) (@​fvilers)

Dependencies

• 588a245 #​6756 npm-pick-manifest@8.0.2
• a76b1df #​6877 sigstore@1.9.0
• 95b5ab0 #​6877 npm-install-checks@6.2.0
• Workspace: @npmcli/arborist@6.5.0
• Workspace: @npmcli/config@6.4.0
• Workspace: libnpmdiff@5.0.20
• Workspace: libnpmexec@6.0.4
• Workspace: libnpmfund@4.2.1
• Workspace: libnpmpack@5.0.20

v9.8.1

Compare Source

Bug Fixes

• 38351c9 #​6651 warn on autocorrected package.json entries during publish (@​wraithgar)
• 02c7ddb #​6642 much clearer npx 'canceled' error (#​6642) (@​rahulio96, @​AaronHamilton965)

Documentation

• 36bf5fe #​6643 Added steps for using npm/npx locally to CONTRIBUTING.md (#​6643) (@​AaronHamilton965, @​rahulio96)

Dependencies

• a0763d3 #​6651 @npmcli/package-json@4.0.1
• 24f5a8b #​6653 supports-color@9.4.0
• f45498b #​6653 chalk@5.3.0
• 44d60eb #​6653 minimatch@9.0.3
• fc9a843 #​6653 bin-links@3.0.2
• daad9ad #​6653 semver@7.5.4
• c1ffd6a #​6653 move @​npmcli/fs, @​npmcli/promise-spawn into dependencies
• Workspace: libnpmexec@6.0.3

v9.8.0

Compare Source

Features

• 67459e7 #​6626 add pkg fix subcommand (@​wraithgar)
• 89b2741 #​6548 add ps1 scripts (#​6548) (@​mribbons, @​lukekarrys)

Dependencies

• b252164 #​6626 @npmcli/package-json@4.0.0
• 9238682 #​6623 sigstore@1.7.0 (#​6623)
• Workspace: @npmcli/arborist@6.3.0
• Workspace: libnpmdiff@5.0.19
• Workspace: libnpmexec@6.0.2
• Workspace: libnpmfund@4.0.19
• Workspace: libnpmpack@5.0.19
• Workspace: libnpmpublish@7.5.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 114cf74

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR