dependabot[bot] opened a new pull request, #169:
URL: https://github.com/apache/cordova-fetch/pull/169

   Bumps 
[@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) 
from 9.7.0 to 10.0.2.
   <details>
   <summary>Release notes</summary>
   <p><em>Sourced from <a 
href="https://github.com/npm/cli/releases";>@​npmcli/arborist's 
releases</a>.</em></p>
   <blockquote>
   <h2>arborist: v10.0.2</h2>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2";>10.0.2</a>
 (2026-07-27)</h2>
   <h3>Bug Fixes</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50";><code>74eff59</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9770";>#9770</a> arborist: 
avoid crash when peer back-off detaches a node (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770";>#9770</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c";><code>882d0b2</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9761";>#9761</a> arborist: 
allow audit fix to install safe downgrades (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761";>#9761</a>)
 (<a href="https://github.com/martinrrm";><code>@​martinrrm</code></a>, <a 
href="https://github.com/Copilot";><code>@​Copilot</code></a>)</li>
   </ul>
   <h3>Chores</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210";><code>ddd50e9</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9746";>#9746</a> arborist: 
add missing registry mock in bin links reify test (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746";>#9746</a>)
 (<a href="https://github.com/reggi";><code>@​reggi</code></a>, <a 
href="https://github.com/Copilot";><code>@​Copilot</code></a>)</li>
   </ul>
   <h2>libnpmpack: v10.0.2</h2>
   <h3>Dependencies</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/releases/tag/arborist-v10.0.2";>workspace</a>: 
<code>@npmcli/[email protected]</code></li>
   </ul>
   <h2>arborist: v10.0.1</h2>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0...arborist-v10.0.1";>10.0.1</a>
 (2026-07-10)</h2>
   <h3>Bug Fixes</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c";><code>47fc8b1</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9740";>#9740</a> correct 
bundled sigstore from dev dependency conflict (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740";>#9740</a>)
 (<a href="https://github.com/james-pre";><code>@​james-pre</code></a>)</li>
   </ul>
   <h2>libnpmpack: v10.0.1</h2>
   <h3>Dependencies</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/releases/tag/arborist-v10.0.1";>workspace</a>: 
<code>@npmcli/[email protected]</code></li>
   </ul>
   <h2>arborist: v10.0.0</h2>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.2...arborist-v10.0.0";>10.0.0</a>
 (2026-07-08)</h2>
   <h3>⚠️ BREAKING CHANGES</h3>
   <ul>
   <li><code>npm shrinkwrap</code> is removed, the <code>shrinkwrap</code> 
config alias is removed, and <code>npm-shrinkwrap.json</code> is no longer 
loaded or honored at the project root or from inside dependency tarballs. 
Rename project-root <code>npm-shrinkwrap.json</code> to 
<code>package-lock.json</code>; use <code>bundleDependencies</code> if you need 
to ship a locked dependency tree.</li>
   <li>Preserve https protocol when working with git (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703";>#8703</a>)</li>
   <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || 
&gt;=26.0.0</code></li>
   </ul>
   <h3>Features</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77";><code>5b83698</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9737";>#9737</a> trigger 
release process (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737";>#9737</a>)
 (<a href="https://github.com/reggi";><code>@​reggi</code></a>)</li>
   </ul>
   <h2>libnpmpack: v10.0.0</h2>
   <h2><a 
href="https://github.com/npm/cli/compare/libnpmpack-v10.0.0-pre.2...libnpmpack-v10.0.0";>10.0.0</a>
 (2026-07-08)</h2>
   <h3>⚠️ BREAKING CHANGES</h3>
   <ul>
   <li>npm pack and npm publish now error when a package's overrides apply to 
one or more of its bundled packages (bundledDependencies / bundleDependencies). 
Defining both fields is still allowed as long as no override actually targets a 
bundled package. To resolve the error, remove the affected entries from either 
overrides or the bundle.</li>
   <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || 
&gt;=26.0.0</code></li>
   <li>allow-git and allow-remote now default to &quot;none&quot;; set them to 
&quot;all&quot; (or &quot;root&quot;) to install git or user-supplied 
tarball-URL dependencies.</li>
   </ul>
   <h3>Features</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77";><code>5b83698</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9737";>#9737</a> trigger 
release process (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737";>#9737</a>)
 (<a href="https://github.com/reggi";><code>@​reggi</code></a>)</li>
   </ul>
   <h3>Dependencies</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/releases/tag/arborist-v10.0.0";>workspace</a>: 
<code>@npmcli/[email protected]</code></li>
   </ul>
   <h2>libnpmsearch: v10.0.0</h2>
   <h2><a 
href="https://github.com/npm/cli/compare/libnpmsearch-v10.0.0-pre.0...libnpmsearch-v10.0.0";>10.0.0</a>
 (2026-07-08)</h2>
   <h3>⚠️ BREAKING CHANGES</h3>
   <ul>
   <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || 
&gt;=26.0.0</code></li>
   </ul>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Changelog</summary>
   <p><em>Sourced from <a 
href="https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md";>@​npmcli/arborist's
 changelog</a>.</em></p>
   <blockquote>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2";>10.0.2</a>
 (2026-07-27)</h2>
   <h3>Bug Fixes</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50";><code>74eff59</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9770";>#9770</a> arborist: 
avoid crash when peer back-off detaches a node (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770";>#9770</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c";><code>882d0b2</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9761";>#9761</a> arborist: 
allow audit fix to install safe downgrades (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761";>#9761</a>)
 (<a href="https://github.com/martinrrm";><code>@​martinrrm</code></a>, <a 
href="https://github.com/Copilot";><code>@​Copilot</code></a>)</li>
   </ul>
   <h3>Chores</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210";><code>ddd50e9</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9746";>#9746</a> arborist: 
add missing registry mock in bin links reify test (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746";>#9746</a>)
 (<a href="https://github.com/reggi";><code>@​reggi</code></a>, <a 
href="https://github.com/Copilot";><code>@​Copilot</code></a>)</li>
   </ul>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0...arborist-v10.0.1";>10.0.1</a>
 (2026-07-10)</h2>
   <h3>Bug Fixes</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c";><code>47fc8b1</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9740";>#9740</a> correct 
bundled sigstore from dev dependency conflict (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740";>#9740</a>)
 (<a href="https://github.com/james-pre";><code>@​james-pre</code></a>)</li>
   </ul>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.2...arborist-v10.0.0";>10.0.0</a>
 (2026-07-08)</h2>
   <h3>⚠️ BREAKING CHANGES</h3>
   <ul>
   <li><code>npm shrinkwrap</code> is removed, the <code>shrinkwrap</code> 
config alias is removed, and <code>npm-shrinkwrap.json</code> is no longer 
loaded or honored at the project root or from inside dependency tarballs. 
Rename project-root <code>npm-shrinkwrap.json</code> to 
<code>package-lock.json</code>; use <code>bundleDependencies</code> if you need 
to ship a locked dependency tree.</li>
   <li>Preserve https protocol when working with git (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703";>#8703</a>)</li>
   <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || 
&gt;=26.0.0</code></li>
   </ul>
   <h3>Features</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77";><code>5b83698</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9737";>#9737</a> trigger 
release process (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737";>#9737</a>)
 (<a href="https://github.com/reggi";><code>@​reggi</code></a>)</li>
   </ul>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.1...arborist-v10.0.0-pre.2";>10.0.0-pre.2</a>
 (2026-06-29)</h2>
   <h3>Features</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/b51d156fd9858f418775df9c70859377eba1fa0c";><code>b51d156</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9672";>#9672</a> arborist: 
extend replace-registry-host with URL prefix matching (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/6110";>#6110</a>)
 (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9672";>#9672</a>)
 (<a href="https://github.com/u2mejc";><code>@​u2mejc</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/86416a626e4599791c5d8115ed08aa4369774844";><code>86416a6</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9674";>#9674</a> graduate the 
linked install strategy from experimental to stable (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9674";>#9674</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/c4e53561e5c112f635b1eb5bdca8198d8dffcd12";><code>c4e5356</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9651";>#9651</a> 
install-scripts: prune unused allowScripts entries (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9651";>#9651</a>)
 (<a href="https://github.com/JamieMagee";><code>@​JamieMagee</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/58cd8f591d0fdeafbb8f477fb8b8f5aa2e042c90";><code>58cd8f5</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9586";>#9586</a> 
<code>.npm-extension</code> transformManifest for imperative manifest repairs 
(<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9586";>#9586</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   </ul>
   <h3>Bug Fixes</h3>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/968e42fbd62eb3a6f446466359c9431f41d76b2b";><code>968e42f</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9671";>#9671</a> arborist: 
apply overrides across a file:/workspace link boundary (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9671";>#9671</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/ae6dbeb12a6f4b313a28c99068e34ba834ae91d1";><code>ae6dbeb</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9657";>#9657</a> arborist: 
surface undeclared workspaces under the linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9657";>#9657</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/541c2865bf2a961554c889f5764bf182cc7f60e2";><code>541c286</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9658";>#9658</a> arborist: 
forward transitive overrides through linked store links (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9658";>#9658</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/f9e3a80a3bb8617bf4e8a9fef20c3ecd4f8d7928";><code>f9e3a80</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9655";>#9655</a> arborist: 
correct dev/prod dep flags for workspaces under the linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9655";>#9655</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/6a5bf269408b1d2822e5c4d5c126e2aff850c3c2";><code>6a5bf26</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9654";>#9654</a> arborist: 
load transitive optional deps into linked actual tree (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9654";>#9654</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/803ba701d7a4f188308d99d47d1f5587930acbba";><code>803ba70</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9656";>#9656</a> query: 
report logical dep location under linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9656";>#9656</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/60d0d3d7c4c8b394b4a35b18f138439d75308368";><code>60d0d3d</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9652";>#9652</a> 
allowScripts: close three enforcement gaps (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9652";>#9652</a>)
 (<a href="https://github.com/JamieMagee";><code>@​JamieMagee</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/ca923237e973313b8b1cdf8c9e0dcfdb2ee875a6";><code>ca92323</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9647";>#9647</a> arborist: 
clean up stale .store and hoisted dirs on strategy switch (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9647";>#9647</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/2b976b521e6cf3804a79bd99d17757358d8bfa6b";><code>2b976b5</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9637";>#9637</a> arborist: 
invalid filterNode crash under the linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9637";>#9637</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/0ffce98cb6f2e189fa3a866c1ba1209293fb48f9";><code>0ffce98</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9628";>#9628</a> arborist: 
repair wrong-but-existing symlink target in linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9628";>#9628</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/981e2498589c83859b3c9e8b92a2cc67562dc06b";><code>981e249</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9632";>#9632</a> arborist: 
remove stale .bin shims after uninstall under linked (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9632";>#9632</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/696801574984ad19ffaa9a7200d7e752920a018d";><code>6968015</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9630";>#9630</a> arborist: 
record the linked .store layout in the hidden lockfile (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9630";>#9630</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/2aa1c7cd25399c49f12aab684341cc1743ad1635";><code>2aa1c7c</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9605";>#9605</a> arborist: 
validate peerOptional conflicts in no-save mutations (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9605";>#9605</a>)
 (<a href="https://github.com/dale-lakes";><code>@​dale-lakes</code></a>, <a 
href="https://github.com/dale-lakes";><code>@​dale-lakes</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/690bf170d38a70fb47097f144affda1b2b09f121";><code>690bf17</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9603";>#9603</a> arborist: 
fix audit-report determinism due to dropped via links (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9603";>#9603</a>)
 (<a 
href="https://github.com/arjun-vegeta";><code>@​arjun-vegeta</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/851558c02a9c79412aa454113973cab047a47f20";><code>851558c</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9626";>#9626</a> arborist: 
don't load store packages' devDependencies as required edges (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9626";>#9626</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/989f571fe9064d170f2a4d7c4b1ed238be3851a9";><code>989f571</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9625";>#9625</a> arborist: 
audit the non-isolated tree under the linked strategy (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9625";>#9625</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/765582219fee6ca599ad65681c7b63168801aa15";><code>7655822</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9597";>#9597</a> arborist: 
don't flag inert optional deps in strict-allow-scripts (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9597";>#9597</a>)
 (<a href="https://github.com/JamieMagee";><code>@​JamieMagee</code></a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/00b9f9fdcc673e22487d4ba29347c1305287da6a";><code>00b9f9f</code></a>
 <a href="https://redirect.github.com/npm/cli/pull/9591";>#9591</a> arborist: 
symlink workspace file: deps on non-workspace local packages (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9591";>#9591</a>)
 (<a 
href="https://github.com/manzoorwanijk";><code>@​manzoorwanijk</code></a>)</li>
   </ul>
   <h2><a 
href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.0...arborist-v10.0.0-pre.1";>10.0.0-pre.1</a>
 (2026-06-19)</h2>
   <h3>⚠️ BREAKING CHANGES</h3>
   <ul>
   <li>Preserve https protocol when working with git (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703";>#8703</a>)</li>
   <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || 
&gt;=26.0.0</code></li>
   </ul>
   <h3>Features</h3>
   <!-- raw HTML omitted -->
   </blockquote>
   <p>... (truncated)</p>
   </details>
   <details>
   <summary>Commits</summary>
   <ul>
   <li><a 
href="https://github.com/npm/cli/commit/b888cc9a9ff34a8b023ff47b784692396635397b";><code>b888cc9</code></a>
 chore: release 12.0.2</li>
   <li><a 
href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50";><code>74eff59</code></a>
 fix(arborist): avoid crash when peer back-off detaches a node (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770";>#9770</a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c";><code>882d0b2</code></a>
 fix(arborist): allow audit fix to install safe downgrades (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761";>#9761</a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210";><code>ddd50e9</code></a>
 chore(arborist): add missing registry mock in bin links reify test (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746";>#9746</a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/72a6088fcdd8099d5f07bf7e06f54a24a835fc5f";><code>72a6088</code></a>
 chore: release 12.0.1</li>
   <li><a 
href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c";><code>47fc8b1</code></a>
 fix: correct bundled sigstore from dev dependency conflict (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740";>#9740</a>)</li>
   <li><a 
href="https://github.com/npm/cli/commit/4403f0593bf0555dc4ef6ce51068c9dc460e5420";><code>4403f05</code></a>
 chore: release 12.0.0</li>
   <li><a 
href="https://github.com/npm/cli/commit/fb304e7a522bb45af682ef9eed7b21c29435b827";><code>fb304e7</code></a>
 chore: release 12.0.0-pre.2</li>
   <li><a 
href="https://github.com/npm/cli/commit/b51d156fd9858f418775df9c70859377eba1fa0c";><code>b51d156</code></a>
 feat(arborist): extend replace-registry-host with URL prefix matching (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/6110";>#6110</a>)...</li>
   <li><a 
href="https://github.com/npm/cli/commit/86416a626e4599791c5d8115ed08aa4369774844";><code>86416a6</code></a>
 feat: graduate the linked install strategy from experimental to stable (<a 
href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9674";>#9674</a>)</li>
   <li>Additional commits viewable in <a 
href="https://github.com/npm/cli/commits/arborist-v10.0.2/workspaces/arborist";>compare
 view</a></li>
   </ul>
   </details>
   <br />
   
   
   [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@npmcli/arborist&package-manager=npm_and_yarn&previous-version=9.7.0&new-version=10.0.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
   
   Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting 
`@dependabot rebase`.
   
   [//]: # (dependabot-automerge-start)
   [//]: # (dependabot-automerge-end)
   
   ---
   
   <details>
   <summary>Dependabot commands and options</summary>
   <br />
   
   You can trigger Dependabot actions by commenting on this PR:
   - `@dependabot rebase` will rebase this PR
   - `@dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
   - `@dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
   - `@dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
   - `@dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
   
   
   </details>


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to