10.9.5 (2026-03-04)

Bug Fixes

• 794f6c8 #9011 backport linked strategy fixes from multiple PRs to v10 (#9011) (@manzoorwanijk)

Dependencies

• 6717032 #9056 tuf-js@3.1.0
• e4e25ea #9056 tinyglobby@0.2.15
• 9464329 #9056 socks@2.8.7
• 23c3e17 #9056 postcss-selector-parser@7.1.1
• 77f9c29 #9056 p-map@7.0.4
• f1a0315 #9056 npm-install-checks@7.1.2
• ad7d3ac #9056 normalize-package-data@7.0.1
• 63a7c82 #9056 node-gyp@11.5.0
• 569d807 #9056 isexe@3.1.5
• 7dbe993 #9056 fdir@6.5.0
• f241a38 #9056 exponential-backoff@3.1.3
• bdeabff #9056 ci-info@4.4.0
• d8ebcd5 #9056 aproba@2.1.0
• be1b008 #9056 spdx-license-ids@3.0.23
• 1005efd #9056 strip-ansi@7.2.0
• d00bf96 #9056 diff@5.2.2
• 7a74819 #9056 debug@4.4.3
• 938db00 #9056 minipass@7.1.3
• 70e90e5 #9056 minimatch@9.0.9
• 733ff41 #9056 glob@10.5.0
• ea8227a #9056 ansi-styles@6.2.3
• edd20ef #9056 ansi-regex@6.2.2
• 2592b45 #9056 agent-base@7.7.4
• 3174366 #9056 semver@7.7.4
• 380df0e #9056 tar@7.5.9
• 49025ae #9056 chalk@5.6.2
• 64601cd #9056 @npmcli/promise-spawn@8.0.3
• 0e23c00 #9056 validate-npm-package-name@6.0.2

Chores

• 72cc7de #9056 template-oss@4.29.0 (@wraithgar)
• 51711b8 #9056 dev dependency updates (@wraithgar)
• workspace: @npmcli/arborist@8.0.2
• workspace: libnpmdiff@7.0.2
• workspace: libnpmexec@9.0.2
• workspace: libnpmfund@6.0.2
• workspace: libnpmpack@8.0.2
• workspace: libnpmpublish@10.0.2

10.0.2 (2026-03-04)

Dependencies

• bdeabff #9056 ci-info@4.4.0

Chores

• 72cc7de #9056 template-oss@4.29.0 (@wraithgar)
• 15e545b #8384 @npmcli/template-oss@4.24.4 (#8384) (@wraithgar)
• fb5a9f2 #8378 @npmcli/template-oss@4.24.3 (@wraithgar)

Dependencies

• workspace: @npmcli/arborist@8.0.2

Dependencies

• workspace: @npmcli/arborist@8.0.2

Dependencies

• workspace: @npmcli/arborist@8.0.2

Dependencies

• workspace: @npmcli/arborist@8.0.2

8.0.2 (2026-03-04)

Bug Fixes

• 794f6c8 #9011 backport linked strategy fixes from multiple PRs to v10 (#9011) (@manzoorwanijk)

Chores

• 72cc7de #9056 template-oss@4.29.0 (@wraithgar)

11.11.0 (2026-02-25)

Features

• 4fcd352 #9017 add :type(registry) to query selector syntax (#9017) (@wraithgar)
• e1b21f0 #8909 adds circleci to trust command (#8909) (@owlstronaut)
• 9a33ad0 #8925 adds circleci to oidc (#8925) (@owlstronaut)

Bug Fixes

• 4426411 #9026 npm audit signatures for keyless attestation registries (#9026) (@ajayk)
• 658b323 #9010 handle legacy licenses array in sbom output (#9010) (@JNC4)

Documentation

• 143f8cd #9007 docs shouldn't wrap yaml description (#9007) (@owlstronaut)

Dependencies

• 7798b6e #9027 @gar/promise-retry@1.0.2
• 4838864 #9027 balanced-match@4.0.4
• 0c200dd #9027 brace-expansion@5.0.3
• f0606bb #9027 spdx-license-ids@3.0.23
• d43f350 #9027 make-fetch-happen@15.0.4
• 4d0918a #9027 @npmcli/git@7.0.2
• 8912ca7 #9027 minipass-fetch@5.0.2
• 450ff35 #9027 npm-packlist@10.0.4
• 20ef5a5 #9027 pacote@21.4.0
• 60f332c #9008 remove promise-retry
• cb8b9c7 #9008 add @gar/promise-retry@1.0.0
• workspace: @npmcli/arborist@9.4.0
• workspace: libnpmdiff@8.1.3
• workspace: libnpmexec@10.2.3
• workspace: libnpmfund@7.0.17
• workspace: libnpmpack@9.1.3

Dependencies

• workspace: @npmcli/arborist@9.4.0

Dependencies

• workspace: @npmcli/arborist@9.4.0