v11.14.1

11.14.1 (2026-05-08)

Bug Fixes

• dca12cb #9328 remove settings (#9328) (@github-actions[bot], @owlstronaut)

v11.14.0

11.14.0 (2026-05-06)

Features

• 45fc5e0 #9288 add allow-directory, allow-file, and allow-remote (#9288) (@github-actions[bot], @wraithgar)

Bug Fixes

• 6c17544 #9318 sbom: dedupe per-node dependsOn / relationships (#9318) (@github-actions[bot], @mikaelkristiansson)

Dependencies

• 840fe18 #9322 socks@10.1.1
• b771289 #9322 ip-address@10.1.1
• addffcb #9322 cidr-regex@5.0.5

Chores

• 041fd58 #9322 dev dependency updates (@owlstronaut)
• 89c505a #9320 add cli-triage team as codeowner (#9320) (@github-actions[bot], @owlstronaut)
• workspace: @npmcli/arborist@9.5.0
• workspace: @npmcli/config@10.9.0
• workspace: libnpmdiff@8.1.7
• workspace: libnpmexec@10.2.7
• workspace: libnpmfund@7.0.21
• workspace: libnpmpack@9.1.7

libnpmpack: v9.1.7

Dependencies

• workspace: @npmcli/arborist@9.5.0

libnpmfund: v7.0.21

Dependencies

• workspace: @npmcli/arborist@9.5.0

libnpmexec: v10.2.7

Dependencies

• workspace: @npmcli/arborist@9.5.0

libnpmdiff: v8.1.7

Dependencies

• workspace: @npmcli/arborist@9.5.0

config: v10.9.0

10.9.0 (2026-05-06)

Features

• 45fc5e0 #9288 add allow-directory, allow-file, and allow-remote (#9288) (@github-actions[bot], @wraithgar)

Bug Fixes

• 574b73a #9293 config: preserve min-release-age after flattening (@lawrence3699)

arborist: v9.5.0

9.5.0 (2026-05-06)

Features

• 20fb6a0 #9312 arborist: add lockfileString() for in-memory lockfile generation (@ljharb)

Bug Fixes

• c3ea2cf #9315 arborist: clean up orphan top-level symlinks in linked strategy (#9315) (@github-actions[bot], @manzoorwanijk)
• 3298369 #9303 arborist: ignore hidden entries in global update (#9299) (@Grynn)
• e19b349 #9301 prefer existing tree nodes for peerOptional deps (#9249) (#9283) (@everett1992)
• e7805c3 #9254 arborist: propagate overrides through Link nodes to targets (#9198) (@manzoorwanijk)

v11.13.0

11.13.0 (2026-04-22)

Features

• 8e8dadb #9246 add u as alias for update command (#9246) (@github-actions[bot], @Ausoj)

Bug Fixes

• ecd161b #9258 ignore intended error code (@owlstronaut)

Dependencies

• 8d2fdcd #9272 lru-cache@11.3.5
• e603d36 #9272 node-gyp@12.3.0
• d48b7da #9272 is-cidr@6.0.4
• 032a5ca #9240 @sigstore/protobuf-specs@0.5.1
• 33a81e7 #9240 tinyglobby@0.2.16
• 68dc4a0 #9240 picomatch@4.0.4
• 1bb6703 #9240 lru-cache@11.3.3
• 37059e4 #9240 diff@8.0.4
• fb450ab #9240 minimatch@10.2.5
• 7c4bbbf #9240 tar@7.5.13
• 703a3bc #9240 minipass-flush@1.0.6

Chores

• e0724ac #9272 dev dependency updates (@owlstronaut)
• d249341 #9230 don't run npm update in CI (@owlstronaut)
• workspace: @npmcli/arborist@9.4.3
• workspace: libnpmdiff@8.1.6
• workspace: libnpmexec@10.2.6
• workspace: libnpmfund@7.0.20
• workspace: libnpmpack@9.1.6

libnpmpack: v9.1.6

Dependencies

• workspace: @npmcli/arborist@9.4.3