deps: upgrade npm to 8.4.1

PR-URL: https://github.com/nodejs/node/pull/41836
Reviewed-By: Ruy Adorno <ruyadorno@github.com>
Reviewed-By: Mohammed Keyvanzadeh <mohammadkeyvanzade94@gmail.com>
Reviewed-By: Beth Griggs <bgriggs@redhat.com>
Reviewed-By: Colin Ihrig <cjihrig@gmail.com>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Reviewed-By: Luigi Pinca <luigipinca@gmail.com>
Reviewed-By: Mestery <mestery@protonmail.com>

deps/npm/docs/content/configuring-npm/package-json.md

@@ -838,6 +838,10 @@ include any versions, as that information is specified in `dependencies`.
 
 If this is spelled `"bundleDependencies"`, then that is also honored.
 
+Alternatively, `"bundledDependencies"` can be defined as a boolean value. A
+value of `true` will bundle all dependencies, a value of `false` will bundle
+none.
+
 ### optionalDependencies
 
 If a dependency can be used, but you would like npm to proceed if it cannot

deps/npm/docs/content/using-npm/config.md

@@ -1190,6 +1190,8 @@ When package package-locks are disabled, automatic pruning of extraneous
 modules will also be disabled. To remove extraneous modules with
 package-locks disabled use `npm prune`.
 
+This configuration does not affect `npm ci`.
+
 <!-- automatically generated, do not edit manually -->
 <!-- see lib/utils/config/definitions.js -->
 

deps/npm/docs/output/commands/npm-ls.html

@@ -160,7 +160,7 @@ tree at all, use <a href="../commands/npm-explain.html"><code>npm explain</code>
 the results to only the paths to the packages named.  Note that nested
 packages will <em>also</em> show the paths to the specified packages.  For
 example, running <code>npm ls promzard</code> in npm's source tree will show:</p>
-<pre lang="bash"><code>npm@8.3.2 /path/to/npm
+<pre lang="bash"><code>npm@8.4.1 /path/to/npm
 └─┬ init-package-json@0.0.4
   └── promzard@0.1.5
 </code></pre>

deps/npm/docs/output/commands/npm.html

@@ -149,7 +149,7 @@ npm command-line interface
 <pre lang="bash"><code>npm &lt;command&gt; [args]
 </code></pre>
 <h3 id="version">Version</h3>
-<p>8.3.2</p>
+<p>8.4.1</p>
 <h3 id="description">Description</h3>
 <p>npm is the package manager for the Node JavaScript platform.  It puts
 modules in place so that node can find them, and manages dependency

deps/npm/docs/output/configuring-npm/package-json.html

@@ -774,6 +774,9 @@ This file contains the dependencies <code>renderized</code> and <code>super-stre
 can be installed in a new project by executing <code>npm install awesome-web-framework-1.0.0.tgz</code>.  Note that the package names do not
 include any versions, as that information is specified in <code>dependencies</code>.</p>
 <p>If this is spelled <code>"bundleDependencies"</code>, then that is also honored.</p>
+<p>Alternatively, <code>"bundledDependencies"</code> can be defined as a boolean value. A
+value of <code>true</code> will bundle all dependencies, a value of <code>false</code> will bundle
+none.</p>
 <h3 id="optionaldependencies">optionalDependencies</h3>
 <p>If a dependency can be used, but you would like npm to proceed if it cannot
 be found or fails to install, then you may put it in the

deps/npm/docs/output/using-npm/config.html

@@ -1100,6 +1100,7 @@ will also prevent <em>writing</em> <code>package-lock.json</code> if <code>save<
 <p>When package package-locks are disabled, automatic pruning of extraneous
 modules will also be disabled. To remove extraneous modules with
 package-locks disabled use <code>npm prune</code>.</p>
+<p>This configuration does not affect <code>npm ci</code>.</p>
 <!-- raw HTML omitted -->
 <!-- raw HTML omitted -->
 <h4 id="package-lock-only"><code>package-lock-only</code></h4>

deps/npm/lib/commands/access.js

@@ -3,6 +3,7 @@ const path = require('path')
 const libaccess = require('libnpmaccess')
 const readPackageJson = require('read-package-json-fast')
 
+const log = require('../utils/log-shim.js')
 const otplease = require('../utils/otplease.js')
 const getIdentity = require('../utils/get-identity.js')
 const BaseCommand = require('../base-command.js')
@@ -76,7 +77,10 @@ class Access extends BaseCommand {
       throw this.usageError(`${cmd} is not a recognized subcommand.`)
     }
 
-    return this[cmd](args, this.npm.flatOptions)
+    return this[cmd](args, {
+      ...this.npm.flatOptions,
+      log,
+    })
   }
 
   public ([pkg], opts) {

deps/npm/lib/commands/ci.js

@@ -6,6 +6,7 @@ const runScript = require('@npmcli/run-script')
 const fs = require('fs')
 const readdir = util.promisify(fs.readdir)
 const log = require('../utils/log-shim.js')
+const validateLockfile = require('../utils/validate-lockfile.js')
 
 const removeNodeModules = async where => {
   const rimrafOpts = { glob: false }
@@ -37,6 +38,7 @@ class CI extends ArboristWorkspaceCmd {
     const where = this.npm.prefix
     const opts = {
       ...this.npm.flatOptions,
+      packageLock: true, // npm ci should never skip lock files
       path: where,
       log,
       save: false, // npm ci should never modify the lockfile or package.json
@@ -55,6 +57,28 @@ class CI extends ArboristWorkspaceCmd {
       }),
       removeNodeModules(where),
     ])
+
+    // retrieves inventory of packages from loaded virtual tree (lock file)
+    const virtualInventory = new Map(arb.virtualTree.inventory)
+
+    // build ideal tree step needs to come right after retrieving the virtual
+    // inventory since it's going to erase the previous ref to virtualTree
+    await arb.buildIdealTree()
+
+    // verifies that the packages from the ideal tree will match
+    // the same versions that are present in the virtual tree (lock file)
+    // throws a validation error in case of mismatches
+    const errors = validateLockfile(virtualInventory, arb.idealTree.inventory)
+    if (errors.length) {
+      throw new Error(
+        '`npm ci` can only install packages when your package.json and ' +
+        'package-lock.json or npm-shrinkwrap.json are in sync. Please ' +
+        'update your lock file with `npm install` ' +
+        'before continuing.\n\n' +
+        errors.join('\n') + '\n'
+      )
+    }
+
     await arb.reify(opts)
 
     const ignoreScripts = this.npm.config.get('ignore-scripts')

deps/npm/lib/commands/deprecate.js

@@ -1,4 +1,5 @@
 const fetch = require('npm-registry-fetch')
+const log = require('../utils/log-shim.js')
 const otplease = require('../utils/otplease.js')
 const npa = require('npm-package-arg')
 const semver = require('semver')
@@ -50,6 +51,7 @@ class Deprecate extends BaseCommand {
       ...this.npm.flatOptions,
       spec: p,
       query: { write: true },
+      log,
     })
 
     Object.keys(packument.versions)
@@ -64,6 +66,7 @@ class Deprecate extends BaseCommand {
       method: 'PUT',
       body: packument,
       ignoreBody: true,
+      log,
     }))
   }
 }

deps/npm/lib/commands/diff.js

@@ -61,6 +61,7 @@ class Diff extends BaseCommand {
       ...this.npm.flatOptions,
       diffFiles: args,
       where: this.top,
+      log,
     })
     return this.npm.output(res)
   }
@@ -193,6 +194,7 @@ class Diff extends BaseCommand {
         const packument = await pacote.packument(spec, {
           ...this.npm.flatOptions,
           preferOnline: true,
+          log,
         })
         bSpec = pickManifest(
           packument,

deps/npm/lib/commands/dist-tag.js

@@ -29,7 +29,10 @@ class DistTag extends BaseCommand {
   }
 
   async exec ([cmdName, pkg, tag]) {
-    const opts = this.npm.flatOptions
+    const opts = {
+      ...this.npm.flatOptions,
+      log,
+    }
 
     if (['add', 'a', 'set', 's'].includes(cmdName)) {
       return this.add(pkg, tag, opts)

deps/npm/lib/commands/hook.js

@@ -2,6 +2,7 @@ const hookApi = require('libnpmhook')
 const otplease = require('../utils/otplease.js')
 const relativeDate = require('tiny-relative-date')
 const Table = require('cli-table3')
+const log = require('../utils/log-shim.js')
 
 const BaseCommand = require('../base-command.js')
 class Hook extends BaseCommand {
@@ -20,7 +21,10 @@ class Hook extends BaseCommand {
   ]
 
   async exec (args) {
-    return otplease(this.npm.flatOptions, (opts) => {
+    return otplease({
+      ...this.npm.flatOptions,
+      log,
+    }, (opts) => {
       switch (args[0]) {
         case 'add':
           return this.add(args[1], args[2], args[3], opts)

deps/npm/lib/commands/logout.js

@@ -1,4 +1,4 @@
-const getAuth = require('npm-registry-fetch/auth.js')
+const getAuth = require('npm-registry-fetch/lib/auth.js')
 const npmFetch = require('npm-registry-fetch')
 const log = require('../utils/log-shim')
 const BaseCommand = require('../base-command.js')
@@ -25,6 +25,7 @@ class Logout extends BaseCommand {
         ...this.npm.flatOptions,
         method: 'DELETE',
         ignoreBody: true,
+        log,
       })
     } else if (auth.isBasicAuth) {
       log.verbose('logout', `clearing user credentials for ${reg}`)

deps/npm/lib/commands/outdated.js

@@ -193,7 +193,12 @@ class Outdated extends ArboristWorkspaceCmd {
   }
 
   async getOutdatedInfo (edge) {
-    const spec = npa(edge.name)
+    let alias = false
+    try {
+      alias = npa(edge.spec).subSpec
+    } catch (err) {
+    }
+    const spec = npa(alias ? alias.name : edge.name)
     const node = edge.to || edge
     const { path, location } = node
     const { version: current } = node.package || {}
@@ -217,7 +222,7 @@ class Outdated extends ArboristWorkspaceCmd {
 
     try {
       const packument = await this.getPackument(spec)
-      const expected = edge.spec
+      const expected = alias ? alias.fetchSpec : edge.spec
       // if it's not a range, version, or tag, skip it
       try {
         if (!npa(`${edge.name}@${edge.spec}`).registry) {
@@ -239,7 +244,7 @@ class Outdated extends ArboristWorkspaceCmd {
           : 'global'
 
         this.list.push({
-          name: edge.name,
+          name: alias ? edge.spec.replace('npm', edge.name) : edge.name,
           path,
           type,
           current,

deps/npm/lib/commands/owner.js

@@ -57,7 +57,10 @@ class Owner extends BaseCommand {
   }
 
   async exec ([action, ...args]) {
-    const opts = this.npm.flatOptions
+    const opts = {
+      ...this.npm.flatOptions,
+      log,
+    }
     switch (action) {
       case 'ls':
       case 'list':
@@ -195,6 +198,7 @@ class Owner extends BaseCommand {
         method: 'PUT',
         body,
         spec,
+        log,
       })
     })
 

deps/npm/lib/commands/ping.js

@@ -10,7 +10,7 @@ class Ping extends BaseCommand {
   async exec (args) {
     log.notice('PING', this.npm.config.get('registry'))
     const start = Date.now()
-    const details = await pingUtil(this.npm.flatOptions)
+    const details = await pingUtil({ ...this.npm.flatOptions, log })
     const time = Date.now() - start
     log.notice('PONG', `${time}ms`)
     if (this.npm.config.get('json')) {

deps/npm/lib/commands/profile.js

@@ -108,7 +108,7 @@ class Profile extends BaseCommand {
   async get (args) {
     const tfa = 'two-factor auth'
     const info = await pulseTillDone.withPromise(
-      npmProfile.get(this.npm.flatOptions)
+      npmProfile.get({ ...this.npm.flatOptions, log })
     )
 
     if (!info.cidr_whitelist) {
@@ -170,7 +170,7 @@ class Profile extends BaseCommand {
   }
 
   async set (args) {
-    const conf = this.npm.flatOptions
+    const conf = { ...this.npm.flatOptions, log }
     const prop = (args[0] || '').toLowerCase().trim()
 
     let value = args.length > 1 ? args.slice(1).join(' ') : null
@@ -285,7 +285,7 @@ class Profile extends BaseCommand {
     if (auth.basic) {
       log.info('profile', 'Updating authentication to bearer token')
       const result = await npmProfile.createToken(
-        auth.basic.password, false, [], this.npm.flatOptions
+        auth.basic.password, false, [], { ...this.npm.flatOptions, log }
       )
 
       if (!result.token) {
@@ -309,7 +309,7 @@ class Profile extends BaseCommand {
 
     log.info('profile', 'Determine if tfa is pending')
     const userInfo = await pulseTillDone.withPromise(
-      npmProfile.get(this.npm.flatOptions)
+      npmProfile.get({ ...this.npm.flatOptions, log })
     )
 
     const conf = { ...this.npm.flatOptions }

deps/npm/lib/commands/publish.js

@@ -61,7 +61,7 @@ class Publish extends BaseCommand {
       throw new Error('Tag name must not be a valid SemVer range: ' + defaultTag.trim())
     }
 
-    const opts = { ...this.npm.flatOptions }
+    const opts = { ...this.npm.flatOptions, log }
 
     // you can publish name@version, ./foo.tgz, etc.
     // even though the default is the 'file:.' cwd.

deps/npm/lib/commands/star.js

@@ -29,12 +29,13 @@ class Star extends BaseCommand {
     const pkgs = args.map(npa)
     for (const pkg of pkgs) {
       const [username, fullData] = await Promise.all([
-        getIdentity(this.npm, this.npm.flatOptions),
+        getIdentity(this.npm, { ...this.npm.flatOptions, log }),
         fetch.json(pkg.escapedName, {
           ...this.npm.flatOptions,
           spec: pkg,
           query: { write: true },
           preferOnline: true,
+          log,
         }),
       ])
 
@@ -63,6 +64,7 @@ class Star extends BaseCommand {
         spec: pkg,
         method: 'PUT',
         body,
+        log,
       })
 
       this.npm.output(show + ' ' + pkg.name)

deps/npm/lib/commands/team.js

@@ -1,6 +1,7 @@
 const columns = require('cli-columns')
 const libteam = require('libnpmteam')
 
+const log = require('../utils/log-shim.js')
 const otplease = require('../utils/otplease.js')
 
 const BaseCommand = require('../base-command.js')
@@ -42,7 +43,7 @@ class Team extends BaseCommand {
     // XXX: "description" option to libnpmteam is used as a description of the
     // team, but in npm's options, this is a boolean meaning "show the
     // description in npm search output".  Hence its being set to null here.
-    await otplease(this.npm.flatOptions, opts => {
+    await otplease({ ...this.npm.flatOptions, log }, opts => {
       entity = entity.replace(/^@/, '')
       switch (cmd) {
         case 'create': return this.create(entity, opts)

deps/npm/lib/commands/token.js

@@ -168,7 +168,7 @@ class Token extends BaseCommand {
   }
 
   config () {
-    const conf = { ...this.npm.flatOptions }
+    const conf = { ...this.npm.flatOptions, log }
     const creds = this.npm.config.getCredentialsByURI(conf.registry)
     if (creds.token) {
       conf.auth = { token: creds.token }

deps/npm/lib/commands/unpublish.js

@@ -32,7 +32,7 @@ class Unpublish extends BaseCommand {
       return []
     }
 
-    const opts = this.npm.flatOptions
+    const opts = { ...this.npm.flatOptions, log }
     const username = await getIdentity(this.npm, { ...opts }).catch(() => null)
     if (!username) {
       return []

deps/npm/lib/commands/whoami.js

@@ -1,4 +1,5 @@
 const getIdentity = require('../utils/get-identity.js')
+const log = require('../utils/log-shim.js')
 
 const BaseCommand = require('../base-command.js')
 class Whoami extends BaseCommand {
@@ -7,7 +8,7 @@ class Whoami extends BaseCommand {
   static params = ['registry']
 
   async exec (args) {
-    const username = await getIdentity(this.npm, this.npm.flatOptions)
+    const username = await getIdentity(this.npm, { ...this.npm.flatOptions, log })
     this.npm.output(
       this.npm.config.get('json') ? JSON.stringify(username) : username
     )

deps/npm/lib/utils/config/definitions.js

@@ -1417,6 +1417,8 @@ define('package-lock', {
     When package package-locks are disabled, automatic pruning of extraneous
     modules will also be disabled.  To remove extraneous modules with
     package-locks disabled use \`npm prune\`.
+
+    This configuration does not affect \`npm ci\`.
   `,
   flatten: (key, obj, flatOptions) => {
     flatten(key, obj, flatOptions)

deps/npm/lib/utils/validate-lockfile.js

@@ -0,0 +1,29 @@
+// compares the inventory of package items in the tree
+// that is about to be installed (idealTree) with the inventory
+// of items stored in the package-lock file (virtualTree)
+//
+// Returns empty array if no errors found or an array populated
+// with an entry for each validation error found.
+function validateLockfile (virtualTree, idealTree) {
+  const errors = []
+
+  // loops through the inventory of packages resulted by ideal tree,
+  // for each package compares the versions with the version stored in the
+  // package-lock and adds an error to the list in case of mismatches
+  for (const [key, entry] of idealTree.entries()) {
+    const lock = virtualTree.get(key)
+
+    if (!lock) {
+      errors.push(`Missing: ${entry.name}@${entry.version} from lock file`)
+      continue
+    }
+
+    if (entry.version !== lock.version) {
+      errors.push(`Invalid: lock file's ${lock.name}@${lock.version} does ` +
+      `not satisfy ${entry.name}@${entry.version}`)
+    }
+  }
+  return errors
+}
+
+module.exports = validateLockfile

deps/npm/man/man1/npm-access.1

@@ -1,4 +1,4 @@
-.TH "NPM\-ACCESS" "1" "January 2022" "" ""
+.TH "NPM\-ACCESS" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-access\fR \- Set access level on published packages
 .SS Synopsis

deps/npm/man/man1/npm-adduser.1

@@ -1,4 +1,4 @@
-.TH "NPM\-ADDUSER" "1" "January 2022" "" ""
+.TH "NPM\-ADDUSER" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-adduser\fR \- Add a registry user account
 .SS Synopsis

deps/npm/man/man1/npm-audit.1

@@ -1,4 +1,4 @@
-.TH "NPM\-AUDIT" "1" "January 2022" "" ""
+.TH "NPM\-AUDIT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-audit\fR \- Run a security audit
 .SS Synopsis

deps/npm/man/man1/npm-bin.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BIN" "1" "January 2022" "" ""
+.TH "NPM\-BIN" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-bin\fR \- Display npm bin folder
 .SS Synopsis

deps/npm/man/man1/npm-bugs.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BUGS" "1" "January 2022" "" ""
+.TH "NPM\-BUGS" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-bugs\fR \- Report bugs for a package in a web browser
 .SS Synopsis

deps/npm/man/man1/npm-cache.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CACHE" "1" "January 2022" "" ""
+.TH "NPM\-CACHE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-cache\fR \- Manipulates packages cache
 .SS Synopsis

deps/npm/man/man1/npm-ci.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CI" "1" "January 2022" "" ""
+.TH "NPM\-CI" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-ci\fR \- Install a project with a clean slate
 .SS Synopsis

deps/npm/man/man1/npm-completion.1

@@ -1,4 +1,4 @@
-.TH "NPM\-COMPLETION" "1" "January 2022" "" ""
+.TH "NPM\-COMPLETION" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-completion\fR \- Tab Completion for npm
 .SS Synopsis

deps/npm/man/man1/npm-config.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CONFIG" "1" "January 2022" "" ""
+.TH "NPM\-CONFIG" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-config\fR \- Manage the npm configuration files
 .SS Synopsis

deps/npm/man/man1/npm-dedupe.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DEDUPE" "1" "January 2022" "" ""
+.TH "NPM\-DEDUPE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-dedupe\fR \- Reduce duplication in the package tree
 .SS Synopsis

deps/npm/man/man1/npm-deprecate.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DEPRECATE" "1" "January 2022" "" ""
+.TH "NPM\-DEPRECATE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-deprecate\fR \- Deprecate a version of a package
 .SS Synopsis

deps/npm/man/man1/npm-diff.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DIFF" "1" "January 2022" "" ""
+.TH "NPM\-DIFF" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-diff\fR \- The registry diff command
 .SS Synopsis

deps/npm/man/man1/npm-dist-tag.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DIST\-TAG" "1" "January 2022" "" ""
+.TH "NPM\-DIST\-TAG" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-dist-tag\fR \- Modify package distribution tags
 .SS Synopsis

deps/npm/man/man1/npm-docs.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DOCS" "1" "January 2022" "" ""
+.TH "NPM\-DOCS" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-docs\fR \- Open documentation for a package in a web browser
 .SS Synopsis

deps/npm/man/man1/npm-doctor.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DOCTOR" "1" "January 2022" "" ""
+.TH "NPM\-DOCTOR" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-doctor\fR \- Check your npm environment
 .SS Synopsis

deps/npm/man/man1/npm-edit.1

@@ -1,4 +1,4 @@
-.TH "NPM\-EDIT" "1" "January 2022" "" ""
+.TH "NPM\-EDIT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-edit\fR \- Edit an installed package
 .SS Synopsis

deps/npm/man/man1/npm-exec.1

@@ -1,4 +1,4 @@
-.TH "NPM\-EXEC" "1" "January 2022" "" ""
+.TH "NPM\-EXEC" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-exec\fR \- Run a command from a local or remote npm package
 .SS Synopsis

deps/npm/man/man1/npm-explain.1

@@ -1,4 +1,4 @@
-.TH "NPM\-EXPLAIN" "1" "January 2022" "" ""
+.TH "NPM\-EXPLAIN" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-explain\fR \- Explain installed packages
 .SS Synopsis

deps/npm/man/man1/npm-explore.1

@@ -1,4 +1,4 @@
-.TH "NPM\-EXPLORE" "1" "January 2022" "" ""
+.TH "NPM\-EXPLORE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-explore\fR \- Browse an installed package
 .SS Synopsis

deps/npm/man/man1/npm-find-dupes.1

@@ -1,4 +1,4 @@
-.TH "NPM\-FIND\-DUPES" "1" "January 2022" "" ""
+.TH "NPM\-FIND\-DUPES" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-find-dupes\fR \- Find duplication in the package tree
 .SS Synopsis

deps/npm/man/man1/npm-fund.1

@@ -1,4 +1,4 @@
-.TH "NPM\-FUND" "1" "January 2022" "" ""
+.TH "NPM\-FUND" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-fund\fR \- Retrieve funding information
 .SS Synopsis

deps/npm/man/man1/npm-help-search.1

@@ -1,4 +1,4 @@
-.TH "NPM\-HELP\-SEARCH" "1" "January 2022" "" ""
+.TH "NPM\-HELP\-SEARCH" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-help-search\fR \- Search npm help documentation
 .SS Synopsis

deps/npm/man/man1/npm-help.1

@@ -1,4 +1,4 @@
-.TH "NPM\-HELP" "1" "January 2022" "" ""
+.TH "NPM\-HELP" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-help\fR \- Get help on npm
 .SS Synopsis

deps/npm/man/man1/npm-hook.1

@@ -1,4 +1,4 @@
-.TH "NPM\-HOOK" "1" "January 2022" "" ""
+.TH "NPM\-HOOK" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-hook\fR \- Manage registry hooks
 .SS Synopsis

deps/npm/man/man1/npm-init.1

@@ -1,4 +1,4 @@
-.TH "NPM\-INIT" "1" "January 2022" "" ""
+.TH "NPM\-INIT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-init\fR \- Create a package\.json file
 .SS Synopsis

deps/npm/man/man1/npm-install-ci-test.1

@@ -1,4 +1,4 @@
-.TH "NPM\-INSTALL\-CI\-TEST" "1" "January 2022" "" ""
+.TH "NPM\-INSTALL\-CI\-TEST" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-install-ci-test\fR \- Install a project with a clean slate and run tests
 .SS Synopsis

deps/npm/man/man1/npm-install-test.1

@@ -1,4 +1,4 @@
-.TH "NPM\-INSTALL\-TEST" "1" "January 2022" "" ""
+.TH "NPM\-INSTALL\-TEST" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-install-test\fR \- Install package(s) and run tests
 .SS Synopsis

deps/npm/man/man1/npm-install.1

@@ -1,4 +1,4 @@
-.TH "NPM\-INSTALL" "1" "January 2022" "" ""
+.TH "NPM\-INSTALL" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-install\fR \- Install a package
 .SS Synopsis

deps/npm/man/man1/npm-link.1

@@ -1,4 +1,4 @@
-.TH "NPM\-LINK" "1" "January 2022" "" ""
+.TH "NPM\-LINK" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-link\fR \- Symlink a package folder
 .SS Synopsis

deps/npm/man/man1/npm-logout.1

@@ -1,4 +1,4 @@
-.TH "NPM\-LOGOUT" "1" "January 2022" "" ""
+.TH "NPM\-LOGOUT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-logout\fR \- Log out of the registry
 .SS Synopsis

deps/npm/man/man1/npm-ls.1

@@ -1,4 +1,4 @@
-.TH "NPM\-LS" "1" "January 2022" "" ""
+.TH "NPM\-LS" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-ls\fR \- List installed packages
 .SS Synopsis
@@ -26,7 +26,7 @@ example, running \fBnpm ls promzard\fP in npm's source tree will show:
 .P
 .RS 2
 .nf
-npm@8\.3\.2 /path/to/npm
+npm@8\.4\.1 /path/to/npm
 └─┬ init\-package\-json@0\.0\.4
   └── promzard@0\.1\.5
 .fi

deps/npm/man/man1/npm-org.1

@@ -1,4 +1,4 @@
-.TH "NPM\-ORG" "1" "January 2022" "" ""
+.TH "NPM\-ORG" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-org\fR \- Manage orgs
 .SS Synopsis

deps/npm/man/man1/npm-outdated.1

@@ -1,4 +1,4 @@
-.TH "NPM\-OUTDATED" "1" "January 2022" "" ""
+.TH "NPM\-OUTDATED" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-outdated\fR \- Check for outdated packages
 .SS Synopsis

deps/npm/man/man1/npm-owner.1

@@ -1,4 +1,4 @@
-.TH "NPM\-OWNER" "1" "January 2022" "" ""
+.TH "NPM\-OWNER" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-owner\fR \- Manage package owners
 .SS Synopsis

deps/npm/man/man1/npm-pack.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PACK" "1" "January 2022" "" ""
+.TH "NPM\-PACK" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-pack\fR \- Create a tarball from a package
 .SS Synopsis

deps/npm/man/man1/npm-ping.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PING" "1" "January 2022" "" ""
+.TH "NPM\-PING" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-ping\fR \- Ping npm registry
 .SS Synopsis

deps/npm/man/man1/npm-pkg.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PKG" "1" "January 2022" "" ""
+.TH "NPM\-PKG" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-pkg\fR \- Manages your package\.json
 .SS Synopsis

deps/npm/man/man1/npm-prefix.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PREFIX" "1" "January 2022" "" ""
+.TH "NPM\-PREFIX" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-prefix\fR \- Display prefix
 .SS Synopsis

deps/npm/man/man1/npm-profile.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PROFILE" "1" "January 2022" "" ""
+.TH "NPM\-PROFILE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-profile\fR \- Change settings on your registry profile
 .SS Synopsis

deps/npm/man/man1/npm-prune.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PRUNE" "1" "January 2022" "" ""
+.TH "NPM\-PRUNE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-prune\fR \- Remove extraneous packages
 .SS Synopsis

deps/npm/man/man1/npm-publish.1

@@ -1,4 +1,4 @@
-.TH "NPM\-PUBLISH" "1" "January 2022" "" ""
+.TH "NPM\-PUBLISH" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-publish\fR \- Publish a package
 .SS Synopsis

deps/npm/man/man1/npm-rebuild.1

@@ -1,4 +1,4 @@
-.TH "NPM\-REBUILD" "1" "January 2022" "" ""
+.TH "NPM\-REBUILD" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-rebuild\fR \- Rebuild a package
 .SS Synopsis

deps/npm/man/man1/npm-repo.1

@@ -1,4 +1,4 @@
-.TH "NPM\-REPO" "1" "January 2022" "" ""
+.TH "NPM\-REPO" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-repo\fR \- Open package repository page in the browser
 .SS Synopsis

deps/npm/man/man1/npm-restart.1

@@ -1,4 +1,4 @@
-.TH "NPM\-RESTART" "1" "January 2022" "" ""
+.TH "NPM\-RESTART" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-restart\fR \- Restart a package
 .SS Synopsis

deps/npm/man/man1/npm-root.1

@@ -1,4 +1,4 @@
-.TH "NPM\-ROOT" "1" "January 2022" "" ""
+.TH "NPM\-ROOT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-root\fR \- Display npm root
 .SS Synopsis

deps/npm/man/man1/npm-run-script.1

@@ -1,4 +1,4 @@
-.TH "NPM\-RUN\-SCRIPT" "1" "January 2022" "" ""
+.TH "NPM\-RUN\-SCRIPT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-run-script\fR \- Run arbitrary package scripts
 .SS Synopsis

deps/npm/man/man1/npm-search.1

@@ -1,4 +1,4 @@
-.TH "NPM\-SEARCH" "1" "January 2022" "" ""
+.TH "NPM\-SEARCH" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-search\fR \- Search for packages
 .SS Synopsis

deps/npm/man/man1/npm-set-script.1

@@ -1,4 +1,4 @@
-.TH "NPM\-SET\-SCRIPT" "1" "January 2022" "" ""
+.TH "NPM\-SET\-SCRIPT" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-set-script\fR \- Set tasks in the scripts section of package\.json
 .SS Synopsis

deps/npm/man/man1/npm-shrinkwrap.1

@@ -1,4 +1,4 @@
-.TH "NPM\-SHRINKWRAP" "1" "January 2022" "" ""
+.TH "NPM\-SHRINKWRAP" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-shrinkwrap\fR \- Lock down dependency versions for publication
 .SS Synopsis

deps/npm/man/man1/npm-star.1

@@ -1,4 +1,4 @@
-.TH "NPM\-STAR" "1" "January 2022" "" ""
+.TH "NPM\-STAR" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-star\fR \- Mark your favorite packages
 .SS Synopsis

deps/npm/man/man1/npm-stars.1

@@ -1,4 +1,4 @@
-.TH "NPM\-STARS" "1" "January 2022" "" ""
+.TH "NPM\-STARS" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-stars\fR \- View packages marked as favorites
 .SS Synopsis

deps/npm/man/man1/npm-start.1

@@ -1,4 +1,4 @@
-.TH "NPM\-START" "1" "January 2022" "" ""
+.TH "NPM\-START" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-start\fR \- Start a package
 .SS Synopsis

deps/npm/man/man1/npm-stop.1

@@ -1,4 +1,4 @@
-.TH "NPM\-STOP" "1" "January 2022" "" ""
+.TH "NPM\-STOP" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-stop\fR \- Stop a package
 .SS Synopsis

deps/npm/man/man1/npm-team.1

@@ -1,4 +1,4 @@
-.TH "NPM\-TEAM" "1" "January 2022" "" ""
+.TH "NPM\-TEAM" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-team\fR \- Manage organization teams and team memberships
 .SS Synopsis

deps/npm/man/man1/npm-test.1

@@ -1,4 +1,4 @@
-.TH "NPM\-TEST" "1" "January 2022" "" ""
+.TH "NPM\-TEST" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-test\fR \- Test a package
 .SS Synopsis

deps/npm/man/man1/npm-token.1

@@ -1,4 +1,4 @@
-.TH "NPM\-TOKEN" "1" "January 2022" "" ""
+.TH "NPM\-TOKEN" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-token\fR \- Manage your authentication tokens
 .SS Synopsis

deps/npm/man/man1/npm-uninstall.1

@@ -1,4 +1,4 @@
-.TH "NPM\-UNINSTALL" "1" "January 2022" "" ""
+.TH "NPM\-UNINSTALL" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-uninstall\fR \- Remove a package
 .SS Synopsis

deps/npm/man/man1/npm-unpublish.1

@@ -1,4 +1,4 @@
-.TH "NPM\-UNPUBLISH" "1" "January 2022" "" ""
+.TH "NPM\-UNPUBLISH" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-unpublish\fR \- Remove a package from the registry
 .SS Synopsis

deps/npm/man/man1/npm-unstar.1

@@ -1,4 +1,4 @@
-.TH "NPM\-UNSTAR" "1" "January 2022" "" ""
+.TH "NPM\-UNSTAR" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-unstar\fR \- Remove an item from your favorite packages
 .SS Synopsis

deps/npm/man/man1/npm-update.1

@@ -1,4 +1,4 @@
-.TH "NPM\-UPDATE" "1" "January 2022" "" ""
+.TH "NPM\-UPDATE" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-update\fR \- Update packages
 .SS Synopsis

deps/npm/man/man1/npm-version.1

@@ -1,4 +1,4 @@
-.TH "NPM\-VERSION" "1" "January 2022" "" ""
+.TH "NPM\-VERSION" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-version\fR \- Bump a package version
 .SS Synopsis

deps/npm/man/man1/npm-view.1

@@ -1,4 +1,4 @@
-.TH "NPM\-VIEW" "1" "January 2022" "" ""
+.TH "NPM\-VIEW" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-view\fR \- View registry info
 .SS Synopsis

deps/npm/man/man1/npm-whoami.1

@@ -1,4 +1,4 @@
-.TH "NPM\-WHOAMI" "1" "January 2022" "" ""
+.TH "NPM\-WHOAMI" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-whoami\fR \- Display npm username
 .SS Synopsis

deps/npm/man/man1/npm.1

@@ -1,4 +1,4 @@
-.TH "NPM" "1" "January 2022" "" ""
+.TH "NPM" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpm\fR \- javascript package manager
 .SS Synopsis
@@ -10,7 +10,7 @@ npm <command> [args]
 .RE
 .SS Version
 .P
-8\.3\.2
+8\.4\.1
 .SS Description
 .P
 npm is the package manager for the Node JavaScript platform\.  It puts

deps/npm/man/man1/npx.1

@@ -1,4 +1,4 @@
-.TH "NPX" "1" "January 2022" "" ""
+.TH "NPX" "1" "February 2022" "" ""
 .SH "NAME"
 \fBnpx\fR \- Run a command from a local or remote npm package
 .SS Synopsis

deps/npm/man/man5/folders.5

@@ -1,4 +1,4 @@
-.TH "FOLDERS" "5" "January 2022" "" ""
+.TH "FOLDERS" "5" "February 2022" "" ""
 .SH "NAME"
 \fBfolders\fR \- Folder Structures Used by npm
 .SS Description

deps/npm/man/man5/install.5

@@ -1,4 +1,4 @@
-.TH "INSTALL" "5" "January 2022" "" ""
+.TH "INSTALL" "5" "February 2022" "" ""
 .SH "NAME"
 \fBinstall\fR \- Download and install node and npm
 .SS Description

deps/npm/man/man5/npm-shrinkwrap-json.5

@@ -1,4 +1,4 @@
-.TH "NPM\-SHRINKWRAP\.JSON" "5" "January 2022" "" ""
+.TH "NPM\-SHRINKWRAP\.JSON" "5" "February 2022" "" ""
 .SH "NAME"
 \fBnpm-shrinkwrap.json\fR \- A publishable lockfile
 .SS Description

deps/npm/man/man5/npmrc.5

@@ -1,4 +1,4 @@
-.TH "NPMRC" "5" "January 2022" "" ""
+.TH "NPMRC" "5" "February 2022" "" ""
 .SH "NAME"
 \fBnpmrc\fR \- The npm config files
 .SS Description

deps/npm/man/man5/package-json.5

@@ -1,4 +1,4 @@
-.TH "PACKAGE\.JSON" "5" "January 2022" "" ""
+.TH "PACKAGE\.JSON" "5" "February 2022" "" ""
 .SH "NAME"
 \fBpackage.json\fR \- Specifics of npm's package\.json handling
 .SS Description
@@ -926,6 +926,10 @@ awesome\-web\-framework\-1\.0\.0\.tgz\fP\|\.  Note that the package names do not
 include any versions, as that information is specified in \fBdependencies\fP\|\.
 .P
 If this is spelled \fB"bundleDependencies"\fP, then that is also honored\.
+.P
+Alternatively, \fB"bundledDependencies"\fP can be defined as a boolean value\. A
+value of \fBtrue\fP will bundle all dependencies, a value of \fBfalse\fP will bundle
+none\.
 .SS optionalDependencies
 .P
 If a dependency can be used, but you would like npm to proceed if it cannot

deps/npm/man/man5/package-lock-json.5

@@ -1,4 +1,4 @@
-.TH "PACKAGE\-LOCK\.JSON" "5" "January 2022" "" ""
+.TH "PACKAGE\-LOCK\.JSON" "5" "February 2022" "" ""
 .SH "NAME"
 \fBpackage-lock.json\fR \- A manifestation of the manifest
 .SS Description

deps/npm/man/man7/config.7

@@ -1,4 +1,4 @@
-.TH "CONFIG" "7" "January 2022" "" ""
+.TH "CONFIG" "7" "February 2022" "" ""
 .SH "NAME"
 \fBconfig\fR \- More than you probably want to know about npm configuration
 .SS Description
@@ -1503,6 +1503,8 @@ will also prevent \fIwriting\fR \fBpackage\-lock\.json\fP if \fBsave\fP is true\
 When package package\-locks are disabled, automatic pruning of extraneous
 modules will also be disabled\. To remove extraneous modules with
 package\-locks disabled use \fBnpm prune\fP\|\.
+.P
+This configuration does not affect \fBnpm ci\fP\|\.
 <!\-\- automatically generated, do not edit manually \-\->
 <!\-\- see lib/utils/config/definitions\.js \-\->
 

deps/npm/man/man7/developers.7

@@ -1,4 +1,4 @@
-.TH "DEVELOPERS" "7" "January 2022" "" ""
+.TH "DEVELOPERS" "7" "February 2022" "" ""
 .SH "NAME"
 \fBdevelopers\fR \- Developer Guide
 .SS Description

deps/npm/man/man7/logging.7

@@ -1,4 +1,4 @@
-.TH "LOGGING" "7" "January 2022" "" ""
+.TH "LOGGING" "7" "February 2022" "" ""
 .SH "NAME"
 \fBLogging\fR \- Why, What & How we Log
 .SS Description

deps/npm/man/man7/orgs.7

@@ -1,4 +1,4 @@
-.TH "ORGS" "7" "January 2022" "" ""
+.TH "ORGS" "7" "February 2022" "" ""
 .SH "NAME"
 \fBorgs\fR \- Working with Teams & Orgs
 .SS Description