@cryptotaxi247 / documentation-1 / commits / b8f02f7

CLI documentation update from CI

npm CLI robot committed May 4, 2026 at 17:44 UTC b8f02f7553c4df14cf8ac13ff66b7167fd75be0a
17 files changed +132 -31
cli-cache.json
+2 -2
@@ -1,6 +1,6 @@
1 {
2 "v8": "aa8fff11cdab94fff1a2160ee5241f5f4632e96b",
3 "v9": "64763a341e7aa5b456e696f956759bf9b3440dc1",
4 - "v10": "49a764e354ab321da88b499fc4233eee3fa98406",
5 - "v11": "21ea382a60b3693ff6c44c81447caa5d0294169c"
4 + "v10": "dd3c80e9965d240957684e9951603cf22eaae74c",
5 + "v11": "0629fbf736eafcb555428d96bd86a69f8e791d70"
6 }
\ No newline at end of file
content/cli/v10/commands/npm-ls.mdx
+1 -1
@@ -36,7 +36,7 @@ Note: to get a "bottoms up" view of why a given package is included in the tree
36 Positional arguments are `name@version-range` identifiers, which will limit the results to only the paths to the packages named. Note that nested packages will _also_ show the paths to the specified packages. For example, running `npm ls promzard` in npm's source tree will show:
37
38 ```bash
39 -npm@10.9.6 /path/to/npm
39 +npm@10.9.8 /path/to/npm
40 └─┬ init-package-json@0.0.4
41 └── promzard@0.1.5
42 ```
content/cli/v10/commands/npm.mdx
+1 -1
@@ -23,7 +23,7 @@ Note: This command is unaware of workspaces.
23
24 ### Version
25
26 -10.9.6
26 +10.9.8
27
28 ### Description
29
content/cli/v10/using-npm/changelog.mdx
+27
@@ -9,6 +9,33 @@ redirect_from:
9 - /cli/v10/misc/changelog
10 ---
11
12 +### Dependencies
13 +
14 +- [workspace](https://github.com/npm/cli/releases/tag/arborist-v8.0.5): `@npmcli/arborist@8.0.5`
15 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v7.0.5): `libnpmdiff@7.0.5`
16 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v9.0.5): `libnpmexec@9.0.5`
17 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v6.0.5): `libnpmfund@6.0.5`
18 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v8.0.5): `libnpmpack@8.0.5`
19 +
20 +## [10.9.7](https://github.com/npm/cli/compare/v10.9.6...v10.9.7) (2026-03-18)
21 +
22 +### Bug Fixes
23 +
24 +- [`bbcd455`](https://github.com/npm/cli/commit/bbcd45502315365286ce8b35a9585c5e4c516e6b) [#9120](https://github.com/npm/cli/pull/9120) arborist: v10 - backport store, lock-only, and override sibling fixes (#9120) (@manzoorwanijk)
25 +
26 +### Dependencies
27 +
28 +- [`cc9a4de`](https://github.com/npm/cli/commit/cc9a4de0a9552f7942dcaa3d72e7a2c7163e3b31) [#9130](https://github.com/npm/cli/pull/9130) hoist production @sigstore dependencies
29 +
30 +### Chores
31 +
32 +- [`e5c1309`](https://github.com/npm/cli/commit/e5c1309693f9a94044be87d7642b0327a8f27569) [#9130](https://github.com/npm/cli/pull/9130) dev dependency updates (@wraithgar)
33 +- [workspace](https://github.com/npm/cli/releases/tag/arborist-v8.0.4): `@npmcli/arborist@8.0.4`
34 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v7.0.4): `libnpmdiff@7.0.4`
35 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v9.0.4): `libnpmexec@9.0.4`
36 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v6.0.4): `libnpmfund@6.0.4`
37 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v8.0.4): `libnpmpack@8.0.4`
38 +
39 ## [10.9.6](https://github.com/npm/cli/compare/v10.9.5...v10.9.6) (2026-03-10)
40
41 ### Bug Fixes
content/cli/v11/commands/npm-audit.mdx
+15
@@ -67,6 +67,14 @@ $ npm audit signatures
67
68 The `audit signatures` command will also verify the provenance attestations of downloaded packages. Because provenance attestations are such a new feature, security features may be added to (or changed in) the attestation format over time. To ensure that you're always able to verify attestation signatures check that you're running the latest version of the npm CLI. Please note this often means updating npm beyond the version that ships with Node.js.
69
70 +To include the full sigstore attestation bundles in JSON output, use:
71 +
72 +```bash
73 +$ npm audit signatures --json --include-attestations
74 +```
75 +
76 +This adds a `verified` array to the JSON output containing the attestation bundles (DSSE envelopes, verification material, and transparency log entries) for each verified package.
77 +
78 The npm CLI supports registry signatures and signing keys provided by any registry if the following conventions are followed:
79
80 1. Signatures are provided in the package's `packument` in each published version within the `dist` object:
@@ -325,6 +333,13 @@ If true, npm does not run scripts specified in package.json files.
333
334 Note that commands explicitly intended to run a particular script, such as `npm start`, `npm stop`, `npm restart`, `npm test`, and `npm run` will still run their intended script if `ignore-scripts` is set, but they will _not_ run any pre- or post-scripts.
335
336 +#### `include-attestations`
337 +
338 +- Default: false
339 +- Type: Boolean
340 +
341 +When used with `npm audit signatures --json`, includes the full sigstore attestation bundles in the JSON output for each verified package. The bundles contain DSSE envelopes, verification material, and transparency log entries.
342 +
343 #### `workspace`
344
345 - Default:
content/cli/v11/commands/npm-install-test.mdx
+2
@@ -217,6 +217,8 @@ This flag is a complement to `before`, which accepts an exact date instead of a
217
218 This config cannot be used with: `before`
219
220 +This value is not exported to the environment for child processes.
221 +
222 #### `bin-links`
223
224 - Default: true
content/cli/v11/commands/npm-install.mdx
+2
@@ -521,6 +521,8 @@ This flag is a complement to `before`, which accepts an exact date instead of a
521
522 This config cannot be used with: `before`
523
524 +This value is not exported to the environment for child processes.
525 +
526 #### `bin-links`
527
528 - Default: true
content/cli/v11/commands/npm-ls.mdx
+1 -1
@@ -52,7 +52,7 @@ Note: to get a "bottoms up" view of why a given package is included in the tree
52 Positional arguments are `name@version-range` identifiers, which will limit the results to only the paths to the packages named. Note that nested packages will _also_ show the paths to the specified packages. For example, running `npm ls promzard` in npm's source tree will show:
53
54 ```bash
55 -npm@11.11.1 /path/to/npm
55 +npm@11.13.0 /path/to/npm
56 └─┬ init-package-json@0.0.4
57 └── promzard@0.1.5
58 ```
content/cli/v11/commands/npm-outdated.mdx
+2
@@ -173,6 +173,8 @@ This flag is a complement to `before`, which accepts an exact date instead of a
173
174 This config cannot be used with: `before`
175
176 +This value is not exported to the environment for child processes.
177 +
178 ### See Also
179
180 - [package spec](/cli/v11/using-npm/package-spec)
content/cli/v11/commands/npm-publish.mdx
+2
@@ -83,6 +83,8 @@ A `package` is interpreted the same way as other commands (like `npm install`) a
83 - f) a `<name>` that has a "latest" tag satisfying (e)
84 - g) a `<git remote url>` that resolves to (a)
85
86 +If either (a) or (b) is specified as a relative path, it should begin with an explicit `./` prefix.
87 +
88 The publish will fail if the package name and version combination already exists in the specified registry.
89
90 Once a package is published with a given name and version, that specific name and version combination can never be used again, even if it is removed with [`npm unpublish`](/cli/v11/commands/npm-unpublish).
content/cli/v11/commands/npm-trust.mdx
-4
@@ -37,10 +37,6 @@ redirect_from:
37
38 ### Synopsis
39
40 -```bash
41 -
42 -```
43 -
40 Note: This command is unaware of workspaces.
41
42 ### Prerequisites
content/cli/v11/commands/npm-update.mdx
+3 -1
@@ -40,7 +40,7 @@ redirect_from:
40 ```bash
41 npm update [<pkg>...]
42
43 -aliases: up, upgrade, udpate
43 +aliases: u, up, upgrade, udpate
44 ```
45
46 ### Description
@@ -293,6 +293,8 @@ This flag is a complement to `before`, which accepts an exact date instead of a
293
294 This config cannot be used with: `before`
295
296 +This value is not exported to the environment for child processes.
297 +
298 #### `bin-links`
299
300 - Default: true
content/cli/v11/commands/npm.mdx
+1 -1
@@ -31,7 +31,7 @@ Note: This command is unaware of workspaces.
31
32 ### Version
33
34 -11.11.1
34 +11.13.0
35
36 ### Description
37
content/cli/v11/using-npm/changelog.mdx
+47
@@ -15,6 +15,53 @@ redirect_from:
15 - /using-npm/changelog
16 ---
17
18 +## [11.12.1](https://github.com/npm/cli/compare/v11.12.0...v11.12.1) (2026-03-24)
19 +
20 +### Bug Fixes
21 +
22 +- [`596706a`](https://github.com/npm/cli/commit/596706a3d10100587e3751d860b4cfcc59342d2f) [#9148](https://github.com/npm/cli/pull/9148) revert prefer-offline/prefer-online exclusivity (#9129) (@owlstronaut)
23 +
24 +### Documentation
25 +
26 +- [`d1ee8a5`](https://github.com/npm/cli/commit/d1ee8a524783e6ce33209fc48c83c89af5a5ccdf) [#9140](https://github.com/npm/cli/pull/9140) Add note on relative path prefix for npm publish (#9140) (@pydsigner)
27 +
28 +### Dependencies
29 +
30 +- [workspace](https://github.com/npm/cli/releases/tag/config-v10.8.1): `@npmcli/config@10.8.1`
31 +
32 +## [11.12.0](https://github.com/npm/cli/compare/v11.11.1...v11.12.0) (2026-03-18)
33 +
34 +### Features
35 +
36 +- [`8eff5fb`](https://github.com/npm/cli/commit/8eff5fb31afc996c71c8f159defa324cb86dfc5a) [#9049](https://github.com/npm/cli/pull/9049) audit: add --include-attestations flag to output sigstore bundles (#9049) (@mitchdenny)
37 +
38 +### Bug Fixes
39 +
40 +- [`03af94d`](https://github.com/npm/cli/commit/03af94d9020b35d09c838b9bd4f26697e49bf08b) [#9123](https://github.com/npm/cli/pull/9123) skip synopsis code block when command has no usage (@owlstronaut)
41 +- [`21ea382`](https://github.com/npm/cli/commit/21ea382a60b3693ff6c44c81447caa5d0294169c) [#9110](https://github.com/npm/cli/pull/9110) arborist: resolve sibling override sets via common ancestor (#9110) (@manzoorwanijk)
42 +
43 +### Dependencies
44 +
45 +- [`03f4c3a`](https://github.com/npm/cli/commit/03f4c3a443bbd2a93e318bc5657ddb07e7a84fa7) [#9131](https://github.com/npm/cli/pull/9131) `@sigstore/tuf@4.0.2`
46 +- [`4d5f7d9`](https://github.com/npm/cli/commit/4d5f7d9d33a41d124c2f7fedb4f267e3ce2ca5d8) [#9131](https://github.com/npm/cli/pull/9131) `@gar/promise-retry@1.0.3`
47 +- [`8dcfe69`](https://github.com/npm/cli/commit/8dcfe693deda7e756b6b98ce8de8f28f8ecc584d) [#9131](https://github.com/npm/cli/pull/9131) `@sigstore/sign@4.1.1`
48 +- [`e5a7e22`](https://github.com/npm/cli/commit/e5a7e222c7dc76fd1eed1efa31ca2d416ff20074) [#9127](https://github.com/npm/cli/pull/9127) `lru-cache@11.2.7`
49 +- [`82deab6`](https://github.com/npm/cli/commit/82deab60ef2649c64830e734c48977090294dc7b) [#9127](https://github.com/npm/cli/pull/9127) `make-fetch-happen@15.0.5`
50 +- [`ce195dc`](https://github.com/npm/cli/commit/ce195dc698e917d2169c3c0e632e5691f1fbbcdf) [#9127](https://github.com/npm/cli/pull/9127) `cacache@20.0.4`
51 +
52 +### Chores
53 +
54 +- [`95fa7f4`](https://github.com/npm/cli/commit/95fa7f4d8f560bb9993141f2d2e55c8b8add02c8) [#9132](https://github.com/npm/cli/pull/9132) fix docs test snapshot (#9132) (@wraithgar)
55 +- [`7e9d538`](https://github.com/npm/cli/commit/7e9d53841be2a944739b7e226647b68f68b5742e) [#9127](https://github.com/npm/cli/pull/9127) dev dependency updates (@wraithgar)
56 +- [`920e5ed`](https://github.com/npm/cli/commit/920e5ed32d859041978e8b63e7af228ab12a4346) [#9127](https://github.com/npm/cli/pull/9127) test snapshots (@wraithgar)
57 +- [`98ccf92`](https://github.com/npm/cli/commit/98ccf9246ea07b33c6813f34fc98e88889177297) [#9125](https://github.com/npm/cli/pull/9125) fix snap tests (@owlstronaut)
58 +- [workspace](https://github.com/npm/cli/releases/tag/arborist-v9.4.2): `@npmcli/arborist@9.4.2`
59 +- [workspace](https://github.com/npm/cli/releases/tag/config-v10.8.0): `@npmcli/config@10.8.0`
60 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmdiff-v8.1.5): `libnpmdiff@8.1.5`
61 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmexec-v10.2.5): `libnpmexec@10.2.5`
62 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmfund-v7.0.19): `libnpmfund@7.0.19`
63 +- [workspace](https://github.com/npm/cli/releases/tag/libnpmpack-v9.1.5): `libnpmpack@9.1.5`
64 +
65 ## [11.11.1](https://github.com/npm/cli/compare/v11.11.0...v11.11.1) (2026-03-10)
66
67 ### Bug Fixes
content/cli/v11/using-npm/config.mdx
+9
@@ -580,6 +580,13 @@ This is the inverse of `--omit=<type>`.
580
581 Dependency types specified in `--include` will not be omitted, regardless of the order in which omit/include are specified on the command-line.
582
583 +#### `include-attestations`
584 +
585 +- Default: false
586 +- Type: Boolean
587 +
588 +When used with `npm audit signatures --json`, includes the full sigstore attestation bundles in the JSON output for each verified package. The bundles contain DSSE envelopes, verification material, and transparency log entries.
589 +
590 #### `include-staged`
591
592 - Default: false
@@ -802,6 +809,8 @@ This flag is a complement to `before`, which accepts an exact date instead of a
809
810 This config cannot be used with: `before`
811
812 +This value is not exported to the environment for child processes.
813 +
814 #### `name`
815
816 - Default: null
content/nav.yml
+2 -20
@@ -1326,7 +1326,7 @@
1326 - title: Changelog
1327 url: /cli/v9/using-npm/changelog
1328 description: Changelog notes for each version
1329 - - title: Version 10.9.6
1329 + - title: Version 10.9.8
1330 shortName: v10
1331 url: /cli/v10
1332 default: false
@@ -1596,7 +1596,7 @@
1596 - title: Changelog
1597 url: /cli/v10/using-npm/changelog
1598 description: Changelog notes for each version
1599 - - title: Version 11.11.1
1599 + - title: Version 11.13.0
1600 shortName: v11
1601 url: /cli/v11
1602 default: true
@@ -1612,9 +1612,6 @@
1612 - title: npm access
1613 url: /cli/v11/commands/npm-access
1614 description: Set access level on published packages
1615 - - title: npm adduser
1616 - url: /cli/v11/commands/npm-adduser
1617 - description: Add a registry user account
1615 - title: npm audit
1616 url: /cli/v11/commands/npm-audit
1617 description: Run a security audit
@@ -1762,15 +1759,6 @@
1759 - title: npm set
1760 url: /cli/v11/commands/npm-set
1761 description: Set a value in the npm configuration
1765 - - title: npm shrinkwrap
1766 - url: /cli/v11/commands/npm-shrinkwrap
1767 - description: Lock down dependency versions for publication
1768 - - title: npm star
1769 - url: /cli/v11/commands/npm-star
1770 - description: Mark your favorite packages
1771 - - title: npm stars
1772 - url: /cli/v11/commands/npm-stars
1773 - description: View packages marked as favorites
1762 - title: npm start
1763 url: /cli/v11/commands/npm-start
1764 description: Start a package
@@ -1798,9 +1786,6 @@
1786 - title: npm unpublish
1787 url: /cli/v11/commands/npm-unpublish
1788 description: Remove a package from the registry
1801 - - title: npm unstar
1802 - url: /cli/v11/commands/npm-unstar
1803 - description: Remove an item from your favorite packages
1789 - title: npm update
1790 url: /cli/v11/commands/npm-update
1791 description: Update packages
@@ -1829,9 +1814,6 @@
1814 - title: .npmrc
1815 url: /cli/v11/configuring-npm/npmrc
1816 description: The npm config files
1832 - - title: npm-shrinkwrap.json
1833 - url: /cli/v11/configuring-npm/npm-shrinkwrap-json
1834 - description: A publishable lockfile
1817 - title: package.json
1818 url: /cli/v11/configuring-npm/package-json
1819 description: Specifics of npm's package.json handling
package-lock.json
+15
@@ -19204,6 +19204,21 @@
19204 "npm": "1.2.8000 || >= 1.4.16"
19205 }
19206 },
19207 + "node_modules/express/node_modules/body-parser/node_modules/qs": {
19208 + "version": "6.13.0",
19209 + "resolved": "https://registry.npmjs.org/qs/-/qs-6.13.0.tgz",
19210 + "integrity": "sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==",
19211 + "license": "BSD-3-Clause",
19212 + "dependencies": {
19213 + "side-channel": "^1.0.6"
19214 + },
19215 + "engines": {
19216 + "node": ">=0.6"
19217 + },
19218 + "funding": {
19219 + "url": "https://github.com/sponsors/ljharb"
19220 + }
19221 + },
19222 "node_modules/express/node_modules/cookie": {
19223 "version": "0.7.1",
19224 "resolved": "https://registry.npmjs.org/cookie/-/cookie-0.7.1.tgz",