dependabot[bot] opened a new pull request, #169: URL: https://github.com/apache/cordova-fetch/pull/169
Bumps [@npmcli/arborist](https://github.com/npm/cli/tree/HEAD/workspaces/arborist) from 9.7.0 to 10.0.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/releases">@npmcli/arborist's releases</a>.</em></p> <blockquote> <h2>arborist: v10.0.2</h2> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2">10.0.2</a> (2026-07-27)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50"><code>74eff59</code></a> <a href="https://redirect.github.com/npm/cli/pull/9770">#9770</a> arborist: avoid crash when peer back-off detaches a node (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770">#9770</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c"><code>882d0b2</code></a> <a href="https://redirect.github.com/npm/cli/pull/9761">#9761</a> arborist: allow audit fix to install safe downgrades (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761">#9761</a>) (<a href="https://github.com/martinrrm"><code>@martinrrm</code></a>, <a href="https://github.com/Copilot"><code>@Copilot</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210"><code>ddd50e9</code></a> <a href="https://redirect.github.com/npm/cli/pull/9746">#9746</a> arborist: add missing registry mock in bin links reify test (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746">#9746</a>) (<a href="https://github.com/reggi"><code>@reggi</code></a>, <a href="https://github.com/Copilot"><code>@Copilot</code></a>)</li> </ul> <h2>libnpmpack: v10.0.2</h2> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v10.0.2">workspace</a>: <code>@npmcli/[email protected]</code></li> </ul> <h2>arborist: v10.0.1</h2> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0...arborist-v10.0.1">10.0.1</a> (2026-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c"><code>47fc8b1</code></a> <a href="https://redirect.github.com/npm/cli/pull/9740">#9740</a> correct bundled sigstore from dev dependency conflict (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740">#9740</a>) (<a href="https://github.com/james-pre"><code>@james-pre</code></a>)</li> </ul> <h2>libnpmpack: v10.0.1</h2> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v10.0.1">workspace</a>: <code>@npmcli/[email protected]</code></li> </ul> <h2>arborist: v10.0.0</h2> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.2...arborist-v10.0.0">10.0.0</a> (2026-07-08)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li><code>npm shrinkwrap</code> is removed, the <code>shrinkwrap</code> config alias is removed, and <code>npm-shrinkwrap.json</code> is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root <code>npm-shrinkwrap.json</code> to <code>package-lock.json</code>; use <code>bundleDependencies</code> if you need to ship a locked dependency tree.</li> <li>Preserve https protocol when working with git (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703">#8703</a>)</li> <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || >=26.0.0</code></li> </ul> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77"><code>5b83698</code></a> <a href="https://redirect.github.com/npm/cli/pull/9737">#9737</a> trigger release process (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737">#9737</a>) (<a href="https://github.com/reggi"><code>@reggi</code></a>)</li> </ul> <h2>libnpmpack: v10.0.0</h2> <h2><a href="https://github.com/npm/cli/compare/libnpmpack-v10.0.0-pre.2...libnpmpack-v10.0.0">10.0.0</a> (2026-07-08)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li>npm pack and npm publish now error when a package's overrides apply to one or more of its bundled packages (bundledDependencies / bundleDependencies). Defining both fields is still allowed as long as no override actually targets a bundled package. To resolve the error, remove the affected entries from either overrides or the bundle.</li> <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || >=26.0.0</code></li> <li>allow-git and allow-remote now default to "none"; set them to "all" (or "root") to install git or user-supplied tarball-URL dependencies.</li> </ul> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77"><code>5b83698</code></a> <a href="https://redirect.github.com/npm/cli/pull/9737">#9737</a> trigger release process (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737">#9737</a>) (<a href="https://github.com/reggi"><code>@reggi</code></a>)</li> </ul> <h3>Dependencies</h3> <ul> <li><a href="https://github.com/npm/cli/releases/tag/arborist-v10.0.0">workspace</a>: <code>@npmcli/[email protected]</code></li> </ul> <h2>libnpmsearch: v10.0.0</h2> <h2><a href="https://github.com/npm/cli/compare/libnpmsearch-v10.0.0-pre.0...libnpmsearch-v10.0.0">10.0.0</a> (2026-07-08)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || >=26.0.0</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/npm/cli/blob/latest/workspaces/arborist/CHANGELOG.md">@npmcli/arborist's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.1...arborist-v10.0.2">10.0.2</a> (2026-07-27)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50"><code>74eff59</code></a> <a href="https://redirect.github.com/npm/cli/pull/9770">#9770</a> arborist: avoid crash when peer back-off detaches a node (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770">#9770</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c"><code>882d0b2</code></a> <a href="https://redirect.github.com/npm/cli/pull/9761">#9761</a> arborist: allow audit fix to install safe downgrades (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761">#9761</a>) (<a href="https://github.com/martinrrm"><code>@martinrrm</code></a>, <a href="https://github.com/Copilot"><code>@Copilot</code></a>)</li> </ul> <h3>Chores</h3> <ul> <li><a href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210"><code>ddd50e9</code></a> <a href="https://redirect.github.com/npm/cli/pull/9746">#9746</a> arborist: add missing registry mock in bin links reify test (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746">#9746</a>) (<a href="https://github.com/reggi"><code>@reggi</code></a>, <a href="https://github.com/Copilot"><code>@Copilot</code></a>)</li> </ul> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0...arborist-v10.0.1">10.0.1</a> (2026-07-10)</h2> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c"><code>47fc8b1</code></a> <a href="https://redirect.github.com/npm/cli/pull/9740">#9740</a> correct bundled sigstore from dev dependency conflict (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740">#9740</a>) (<a href="https://github.com/james-pre"><code>@james-pre</code></a>)</li> </ul> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.2...arborist-v10.0.0">10.0.0</a> (2026-07-08)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li><code>npm shrinkwrap</code> is removed, the <code>shrinkwrap</code> config alias is removed, and <code>npm-shrinkwrap.json</code> is no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-root <code>npm-shrinkwrap.json</code> to <code>package-lock.json</code>; use <code>bundleDependencies</code> if you need to ship a locked dependency tree.</li> <li>Preserve https protocol when working with git (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703">#8703</a>)</li> <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || >=26.0.0</code></li> </ul> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/5b83698a4f76e3f2962b9954dddb180fa85d4c77"><code>5b83698</code></a> <a href="https://redirect.github.com/npm/cli/pull/9737">#9737</a> trigger release process (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9737">#9737</a>) (<a href="https://github.com/reggi"><code>@reggi</code></a>)</li> </ul> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.1...arborist-v10.0.0-pre.2">10.0.0-pre.2</a> (2026-06-29)</h2> <h3>Features</h3> <ul> <li><a href="https://github.com/npm/cli/commit/b51d156fd9858f418775df9c70859377eba1fa0c"><code>b51d156</code></a> <a href="https://redirect.github.com/npm/cli/pull/9672">#9672</a> arborist: extend replace-registry-host with URL prefix matching (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/6110">#6110</a>) (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9672">#9672</a>) (<a href="https://github.com/u2mejc"><code>@u2mejc</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/86416a626e4599791c5d8115ed08aa4369774844"><code>86416a6</code></a> <a href="https://redirect.github.com/npm/cli/pull/9674">#9674</a> graduate the linked install strategy from experimental to stable (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9674">#9674</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/c4e53561e5c112f635b1eb5bdca8198d8dffcd12"><code>c4e5356</code></a> <a href="https://redirect.github.com/npm/cli/pull/9651">#9651</a> install-scripts: prune unused allowScripts entries (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9651">#9651</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/58cd8f591d0fdeafbb8f477fb8b8f5aa2e042c90"><code>58cd8f5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9586">#9586</a> <code>.npm-extension</code> transformManifest for imperative manifest repairs (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9586">#9586</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><a href="https://github.com/npm/cli/commit/968e42fbd62eb3a6f446466359c9431f41d76b2b"><code>968e42f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9671">#9671</a> arborist: apply overrides across a file:/workspace link boundary (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9671">#9671</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/ae6dbeb12a6f4b313a28c99068e34ba834ae91d1"><code>ae6dbeb</code></a> <a href="https://redirect.github.com/npm/cli/pull/9657">#9657</a> arborist: surface undeclared workspaces under the linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9657">#9657</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/541c2865bf2a961554c889f5764bf182cc7f60e2"><code>541c286</code></a> <a href="https://redirect.github.com/npm/cli/pull/9658">#9658</a> arborist: forward transitive overrides through linked store links (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9658">#9658</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/f9e3a80a3bb8617bf4e8a9fef20c3ecd4f8d7928"><code>f9e3a80</code></a> <a href="https://redirect.github.com/npm/cli/pull/9655">#9655</a> arborist: correct dev/prod dep flags for workspaces under the linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9655">#9655</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/6a5bf269408b1d2822e5c4d5c126e2aff850c3c2"><code>6a5bf26</code></a> <a href="https://redirect.github.com/npm/cli/pull/9654">#9654</a> arborist: load transitive optional deps into linked actual tree (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9654">#9654</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/803ba701d7a4f188308d99d47d1f5587930acbba"><code>803ba70</code></a> <a href="https://redirect.github.com/npm/cli/pull/9656">#9656</a> query: report logical dep location under linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9656">#9656</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/60d0d3d7c4c8b394b4a35b18f138439d75308368"><code>60d0d3d</code></a> <a href="https://redirect.github.com/npm/cli/pull/9652">#9652</a> allowScripts: close three enforcement gaps (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9652">#9652</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/ca923237e973313b8b1cdf8c9e0dcfdb2ee875a6"><code>ca92323</code></a> <a href="https://redirect.github.com/npm/cli/pull/9647">#9647</a> arborist: clean up stale .store and hoisted dirs on strategy switch (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9647">#9647</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/2b976b521e6cf3804a79bd99d17757358d8bfa6b"><code>2b976b5</code></a> <a href="https://redirect.github.com/npm/cli/pull/9637">#9637</a> arborist: invalid filterNode crash under the linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9637">#9637</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/0ffce98cb6f2e189fa3a866c1ba1209293fb48f9"><code>0ffce98</code></a> <a href="https://redirect.github.com/npm/cli/pull/9628">#9628</a> arborist: repair wrong-but-existing symlink target in linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9628">#9628</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/981e2498589c83859b3c9e8b92a2cc67562dc06b"><code>981e249</code></a> <a href="https://redirect.github.com/npm/cli/pull/9632">#9632</a> arborist: remove stale .bin shims after uninstall under linked (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9632">#9632</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/696801574984ad19ffaa9a7200d7e752920a018d"><code>6968015</code></a> <a href="https://redirect.github.com/npm/cli/pull/9630">#9630</a> arborist: record the linked .store layout in the hidden lockfile (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9630">#9630</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/2aa1c7cd25399c49f12aab684341cc1743ad1635"><code>2aa1c7c</code></a> <a href="https://redirect.github.com/npm/cli/pull/9605">#9605</a> arborist: validate peerOptional conflicts in no-save mutations (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9605">#9605</a>) (<a href="https://github.com/dale-lakes"><code>@dale-lakes</code></a>, <a href="https://github.com/dale-lakes"><code>@dale-lakes</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/690bf170d38a70fb47097f144affda1b2b09f121"><code>690bf17</code></a> <a href="https://redirect.github.com/npm/cli/pull/9603">#9603</a> arborist: fix audit-report determinism due to dropped via links (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9603">#9603</a>) (<a href="https://github.com/arjun-vegeta"><code>@arjun-vegeta</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/851558c02a9c79412aa454113973cab047a47f20"><code>851558c</code></a> <a href="https://redirect.github.com/npm/cli/pull/9626">#9626</a> arborist: don't load store packages' devDependencies as required edges (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9626">#9626</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/989f571fe9064d170f2a4d7c4b1ed238be3851a9"><code>989f571</code></a> <a href="https://redirect.github.com/npm/cli/pull/9625">#9625</a> arborist: audit the non-isolated tree under the linked strategy (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9625">#9625</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/765582219fee6ca599ad65681c7b63168801aa15"><code>7655822</code></a> <a href="https://redirect.github.com/npm/cli/pull/9597">#9597</a> arborist: don't flag inert optional deps in strict-allow-scripts (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9597">#9597</a>) (<a href="https://github.com/JamieMagee"><code>@JamieMagee</code></a>)</li> <li><a href="https://github.com/npm/cli/commit/00b9f9fdcc673e22487d4ba29347c1305287da6a"><code>00b9f9f</code></a> <a href="https://redirect.github.com/npm/cli/pull/9591">#9591</a> arborist: symlink workspace file: deps on non-workspace local packages (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9591">#9591</a>) (<a href="https://github.com/manzoorwanijk"><code>@manzoorwanijk</code></a>)</li> </ul> <h2><a href="https://github.com/npm/cli/compare/arborist-v10.0.0-pre.0...arborist-v10.0.0-pre.1">10.0.0-pre.1</a> (2026-06-19)</h2> <h3>⚠️ BREAKING CHANGES</h3> <ul> <li>Preserve https protocol when working with git (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/8703">#8703</a>)</li> <li><code>npm</code> now supports node <code>^22.22.2 || ^24.15.0 || >=26.0.0</code></li> </ul> <h3>Features</h3> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/npm/cli/commit/b888cc9a9ff34a8b023ff47b784692396635397b"><code>b888cc9</code></a> chore: release 12.0.2</li> <li><a href="https://github.com/npm/cli/commit/74eff59db40b4aff9665f4083b475a000bb46e50"><code>74eff59</code></a> fix(arborist): avoid crash when peer back-off detaches a node (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9770">#9770</a>)</li> <li><a href="https://github.com/npm/cli/commit/882d0b246b224c37e078f9c581177d99b289476c"><code>882d0b2</code></a> fix(arborist): allow audit fix to install safe downgrades (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9761">#9761</a>)</li> <li><a href="https://github.com/npm/cli/commit/ddd50e92370073a1ea0e0e4483de4088e8e34210"><code>ddd50e9</code></a> chore(arborist): add missing registry mock in bin links reify test (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9746">#9746</a>)</li> <li><a href="https://github.com/npm/cli/commit/72a6088fcdd8099d5f07bf7e06f54a24a835fc5f"><code>72a6088</code></a> chore: release 12.0.1</li> <li><a href="https://github.com/npm/cli/commit/47fc8b191a841ec177f2d7d486dde1b66dc0045c"><code>47fc8b1</code></a> fix: correct bundled sigstore from dev dependency conflict (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9740">#9740</a>)</li> <li><a href="https://github.com/npm/cli/commit/4403f0593bf0555dc4ef6ce51068c9dc460e5420"><code>4403f05</code></a> chore: release 12.0.0</li> <li><a href="https://github.com/npm/cli/commit/fb304e7a522bb45af682ef9eed7b21c29435b827"><code>fb304e7</code></a> chore: release 12.0.0-pre.2</li> <li><a href="https://github.com/npm/cli/commit/b51d156fd9858f418775df9c70859377eba1fa0c"><code>b51d156</code></a> feat(arborist): extend replace-registry-host with URL prefix matching (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/6110">#6110</a>)...</li> <li><a href="https://github.com/npm/cli/commit/86416a626e4599791c5d8115ed08aa4369774844"><code>86416a6</code></a> feat: graduate the linked install strategy from experimental to stable (<a href="https://github.com/npm/cli/tree/HEAD/workspaces/arborist/issues/9674">#9674</a>)</li> <li>Additional commits viewable in <a href="https://github.com/npm/cli/commits/arborist-v10.0.2/workspaces/arborist">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
