Skip to content

Latest commit

 

History

History
916 lines (494 loc) · 37.3 KB

File metadata and controls

916 lines (494 loc) · 37.3 KB

npm-pkg-lint changelog

5.2.5 (2026-09-04)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.13 (bd6180f)

5.2.4 (2026-08-23)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.12 (50a2647)

5.2.3 (2026-08-18)

Bug Fixes

  • fix *.tsbuildinfo regexp for disallowed files (00a7ded)

5.2.2 (2026-07-25)

Bug Fixes

  • deps: update dependency tar to v7.5.22 (1f78777)

5.2.1 (2026-07-23)

Bug Fixes

  • deps: update dependency tar to v7.5.21 (cea4f48)

5.2.0 (2026-07-17)

Features

  • deps: replace argparse dependency with native parseArgs (d83d110)

5.1.12 (2026-07-15)

Bug Fixes

  • deps: update dependency tar to v7.5.20 (8afbd36)

5.1.11 (2026-07-11)

Bug Fixes

  • fix tsconfig-base-matching-engine rule not being run (f737677)
  • handle aliased npm: packages with scopes (7ca06b6)
  • handle when obsolete packages are aliased (c16681f)

5.1.10 (2026-06-29)

Bug Fixes

  • deps: update dependency tar to v7.5.19 (cec13e5)

5.1.9 (2026-06-26)

Bug Fixes

  • deps: update dependency tar to v7.5.17 (390f90e)

5.1.8 (2026-06-21)

Bug Fixes

  • deps: update dependency semver to v7.8.5 (8c8f031)

5.1.7 (2026-06-11)

Bug Fixes

  • deps: update dependency semver to v7.8.4 (90c2a42)

5.1.6 (2026-06-10)

Bug Fixes

  • deps: update dependency semver to v7.8.3 (e9ab2e9)

5.1.5 (2026-06-05)

Bug Fixes

  • deps: update dependency semver to v7.8.2 (aef3eb0)

5.1.4 (2026-06-02)

Bug Fixes

  • deps: update dependency tar to v7.5.16 (b29e498)

5.1.3 (2026-05-29)

Bug Fixes

  • deps: update dependency tmp to v0.2.7 (3ce12d7)

5.1.2 (2026-05-27)

Bug Fixes

  • deps: update dependency tmp to v0.2.6 [security] (187372a)

5.1.1 (2026-05-22)

Bug Fixes

  • deps: update dependency semver to v7.8.1 (ac7a909)

5.1.0 (2026-05-13)

Features

  • deps: update dependency @html-validate/stylish to v6 (3238727)

5.0.0 (2026-05-11)

⚠ BREAKING CHANGES

  • deps: NodeJS v22 or later is now required.

Features

  • deps: require nodejs v22 or later (e18c6e8)
  • rules: node v20 is eol and flagged by the outdated-engines rule (f8cc236)

4.6.9 (2026-05-10)

Bug Fixes

  • deps: update dependency semver to v7.8.0 (7195117)

4.6.8 (2026-05-09)

Bug Fixes

  • add array-includes as an obsolete dependency (ce90dce)

4.6.7 (2026-05-09)

Bug Fixes

  • deps: update dependency tar to v7.5.15 (22027ab)

4.6.6 (2026-05-07)

Bug Fixes

  • deps: update dependency tar to v7.5.14 (50cfc3a)

4.6.5 (2026-04-12)

Bug Fixes

  • deps: update dependency @html-validate/stylish to v5.2.0 (bdd92f2)

4.6.4 (2026-04-05)

Bug Fixes

  • deps: update dependency @html-validate/stylish to v5.1.0 (4dcefe3)

4.6.3 (2026-04-02)

Bug Fixes

  • deps: update dependency nano-spawn to v2.1.0 (786bfaf)

4.6.2 (2026-03-25)

Bug Fixes

  • deps: update dependency tar to v7.5.13 (2d0603e)

4.6.1 (2026-03-21)

Bug Fixes

  • ignore resolved for linked packages (typical monorepo setup) (eada3a4)

4.6.0 (2026-03-21)

Features

  • new rule package-lock-registry (1c32ce8)
  • new rule package-lock-version (889bc31)

4.5.3 (2026-03-21)

Bug Fixes

  • allow file: in devDependencies (5c868e2)

4.5.2 (2026-03-21)

Bug Fixes

  • allow link: in devDependencies (d812f44)

4.5.1 (2026-03-21)

Bug Fixes

  • deps: update dependency tar to v7.5.12 (ef57c75)

4.5.0 (2026-03-18)

Features

  • new rule exports-default-order (aaa00ec)
  • new rule exports-import-require-order (490e0e6)
  • new rule exports-path (e76acc3)
  • new rule no-protocol-dependencies (0b31cd2)
  • require the files field in package.json (5585a35)

4.4.2 (2026-03-13)

Bug Fixes

  • deps: update dependency tar to v7.5.11 (3f8609e)

4.4.1 (2026-03-06)

Bug Fixes

  • deps: update dependency tar to v7.5.10 [security] (77b794d)

4.4.0 (2026-02-27)

Features

  • deps: update dependency @html-validate/stylish to v5 (7af6302)

4.3.6 (2026-02-20)

Bug Fixes

  • deps: update dependency tar to v7.5.9 (3c72ec0)

4.3.5 (2026-02-13)

Bug Fixes

  • deps: update dependency semver to v7.7.4 (ff648ca)

4.3.4 (2026-01-30)

Bug Fixes

  • deps: update dependency tar to v7.5.7 (b11c776)

4.3.3 (2026-01-23)

Bug Fixes

  • deps: update dependency tar to v7.5.4 (c3a3ab8)
  • deps: update dependency tar to v7.5.6 (af6b745)

4.3.2 (2026-01-16)

Bug Fixes

  • deps: update dependency tar to v7.5.3 [security] (7d981f5)

4.3.1 (2025-11-15)

Bug Fixes

  • shadowed-types now handles nested conditions (6fa1db7)

4.3.0 (2025-11-07)

Features

  • new rule conflicting-types-typings (becb6d2)
  • new rule prefer-types (bc86483)
  • new rule shadowed-types (b9d828d)

Bug Fixes

  • deps: update dependency tar to v7.5.2 [security] (c6dbc9b)
  • validate pkg.types in addition to pkg.typings (7f0d4d7)

4.2.0 (2025-10-24)

Features

  • deps: update dependency nano-spawn to v2 (3e7c339)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.10 (1abf3d5)
  • disallow __fixtures__ (9bedf7e)
  • disallow yarn.lock (7595cef)

4.1.2 (2025-10-10)

Bug Fixes

  • deps: update dependency semver to v7.7.3 (2ac4576)

4.1.1 (2025-09-26)

Bug Fixes

  • deps: update dependency tar to v7.4.4 (9593490)
  • deps: update dependency tar to v7.5.1 (e4ee291)

4.1.0 (2025-09-19)

Features

  • deps: update dependency find-up to v8 (ef00c41)

4.0.5 (2025-09-12)

Bug Fixes

  • deps: update dependency nano-spawn to v1.0.3 (90da224)

4.0.4 (2025-08-30)

Bug Fixes

  • allow typescript-eslint i keywords contain eslint (745b0ad)

4.0.3 (2025-08-15)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.9 (7c1c120)
  • deps: update dependency tmp to v0.2.5 (04c5538)

4.0.2 (2025-08-08)

Bug Fixes

  • deps: update dependency tmp to v0.2.4 [security] (d10a199)

4.0.1 (2025-06-27)

Bug Fixes

  • deps: update dependency @html-validate/stylish to v4.3.0 (db4c0bc)

4.0.0 (2025-05-25)

⚠ BREAKING CHANGES

  • NodeJS v20 or later is required

Features

  • add github action (de14fce)
  • deps: update dependency nano-spawn to v1 (ee1e960)
  • require nodejs v20 or later (ce8786c)
  • rules: require node v20 as node v18 is eol (515e8c4)

3.10.12 (2025-05-16)

Bug Fixes

  • deps: update dependency nano-spawn to v0.2.1 (b7cd2c6)
  • deps: update dependency semver to v7.7.2 (0240088)

3.10.11 (2025-03-03)

Bug Fixes

  • handle file: prefix for npm dependencies (a8b5381)

3.10.10 (2025-02-28)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.7 (29f1d6f)
  • deps: update dependency @humanwhocodes/momoa to v3.3.8 (d873c26)

3.10.9 (2025-02-07)

Bug Fixes

  • deps: update dependency semver to v7.7.1 (3c12ec9)

3.10.8 (2025-01-31)

Bug Fixes

  • deps: update dependency semver to v7.7.0 (3e31f12)

3.10.7 (2025-01-10)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.6 (67c00d3)

3.10.6 (2024-12-13)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.5 (6a40429)

3.10.5 (2024-12-06)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.4 (83ca8ad)

3.10.4 (2024-11-29)

Bug Fixes

  • remove extra quotes from aliased disallowed dependency (553711c)

3.10.3 (2024-11-24)

Bug Fixes

  • better handling of recursive dependencies (cb020d0)

3.10.2 (2024-11-15)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.3 (54f1735)

3.10.1 (2024-11-08)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.2 (27d9acd)

3.10.0 (2024-11-04)

Features

  • deps: replace execa with nano-spawn (a118361)

3.9.3 (2024-11-01)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.1 (049bf42)

3.9.2 (2024-10-18)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.3.0 (494dd14)

3.9.1 (2024-10-11)

Bug Fixes

  • deps: update dependency @humanwhocodes/momoa to v3.2.2 (82e19de)

3.9.0 (2024-09-21)

Features

  • disallow @tsconfig/ packages as non-devdependency (3334ab1)
  • match @tsconfig/node* and engines.node versions (cf5d931)

3.8.0 (2024-09-12)

Features

  • show proper line and column in package.json (b094ac2)

Bug Fixes

  • sort messages by line/column (dca57bb)

3.7.2 (2024-09-12)

Bug Fixes

  • use full absolute path to files in output (9b3990a)

3.7.1 (2024-09-07)

Bug Fixes

  • fix regression error with unpublished packages (3477283)

3.7.0 (2024-09-07)

Features

  • allow --allow-dependency to suppress errors about deprecated packages (1c666a7)

Bug Fixes

  • dont yield warnings about unpublished devdependencies (713aa32)

3.6.8 (2024-08-23)

Bug Fixes

  • deps: update dependency execa to v9.3.1 (740e2bc)

3.6.7 (2024-08-02)

Bug Fixes

  • deps: update dependency tar to v7.4.2 (64a62d7)
  • deps: update dependency tar to v7.4.3 (f8f6e09)

3.6.6 (2024-07-26)

Bug Fixes

  • deps: update dependency tar to v7.4.1 (c645cb5)

3.6.5 (2024-07-19)

Bug Fixes

  • deps: update dependency semver to v7.6.3 (86d4cc0)

3.6.4 (2024-06-28)

Bug Fixes

  • deps: update dependency execa to v9.2.0 (49067c7)
  • deps: update dependency execa to v9.3.0 (5f34c36)

3.6.3 (2024-06-21)

Bug Fixes

  • deps: update dependency tar to v7.4.0 (c88b6df)

3.6.2 (2024-06-07)

Bug Fixes

  • deps: update dependency tar to v7.2.0 (00641e1)

3.6.1 (2024-05-24)

Bug Fixes

  • querystring marked as obsolete (b9e048e)

3.6.0 (2024-05-19)

Features

  • add --ignore-node-version to disable outdated-engines node version error (4f12e8a)
  • deps: update dependency execa to v9 (dbd310b)

3.5.3 (2024-05-17)

Bug Fixes

  • deps: update dependency semver to v7.6.2 (0aa25fd)

3.5.2 (2024-05-10)

Bug Fixes

  • deps: update dependency semver to v7.6.1 (85110d2)
  • deps: update dependency tar to v7.1.0 (6fcf3d5)

3.5.1 (2024-04-19)

Bug Fixes

  • deps: update dependency tar to v7.0.1 (a8ef125)

3.5.0 (2024-04-14)

Features

  • deps: update dependency tar to v7 (5560094)

3.4.1 (2024-04-12)

Bug Fixes

  • handle when direct dependency is unpublished (1cace31)

3.4.0 (2024-04-07)

Features

  • add --allow-dependency to ignore disallowed dependency (0603db9)

3.3.1 (2024-04-06)

Bug Fixes

  • handle npm: prefix in dependencies (c828d32)

3.3.0 (2024-04-05)

Features

  • support --cache to set custom cache directory (15c1cdd)

3.2.3 (2024-03-29)

Bug Fixes

  • deps: update dependency tar to v6.2.1 (d57d4f1)

3.2.2 (2024-03-08)

Bug Fixes

  • deps: update dependency tmp to v0.2.3 (6d0a9ee)

3.2.1 (2024-03-01)

Bug Fixes

  • deps: update dependency tmp to v0.2.2 (93391d8)

3.2.0 (2024-02-28)

Features

  • allow jest dependencies when using jest keyword (f9b7c9d)

3.1.0 (2024-02-10)

Features

  • deps: update dependency find-up to v7 (4c8826e)

Bug Fixes

  • handle unpublished packages/versions (52a5bc4)

3.0.1 (2024-02-09)

Bug Fixes

  • deps: update dependency semver to v7.6.0 (6c308ec)

3.0.0 (2023-12-28)

⚠ BREAKING CHANGES

  • deps: require nodejs 18 or later

Features

  • add a few more disallowed dependencies (d386a79)
  • deps: require nodejs 18 or later (e24fbb1)
  • new rule deprecated-dependencies (423072e)
  • new rule obsolete-dependencies (e17e283)
  • stricter validation of repository field (7df0e54)
  • update active nodejs versions (a57b4c7)

Bug Fixes

  • detect eslint flat config as disallowed files (811acaf)
  • disallow ava, c8, hereby and playwright configuration in tarball (e942a67)
  • engine constraints verify the lowest version allowed by range (1a6fed5)
  • handle when @types/node is declared as latest (1214065)
  • look for .cjs and .mjs when looking for "rc files" (42a237f)

2.1.0 (2023-11-23)

Features

  • persistent cache for npm package data (ddc2083)

2.0.3 (2023-09-15)

Dependency upgrades

  • deps: update dependency tar to v6.2.0 (0151497)

2.0.2 (2023-08-23)

Dependency upgrades

  • deps: update dependency execa to v8 (0ce6c1f)

2.0.1 (2023-08-15)

Dependency upgrades

  • deps: update dependency @html-validate/stylish to v4.2.0 (96fee79)

2.0.0 (2023-07-28)

⚠ BREAKING CHANGES

  • require nodejs 16 or later

Features

  • require nodejs 16 or later (b038f51)

Bug Fixes

  • warn about node versions < 16 (db74b48)

Dependency upgrades

  • deps: update dependency @html-validate/stylish to v4.0.1 (2227039)
  • deps: update dependency @html-validate/stylish to v4.1.0 (baa7473)
  • deps: update dependency execa to v7.2.0 (4fb750d)
  • deps: update dependency semver to v7.5.1 (535ac47)
  • deps: update dependency semver to v7.5.2 (4cf73e5)
  • deps: update dependency semver to v7.5.3 (e91f05c)
  • deps: update dependency semver to v7.5.4 (d123287)
  • deps: update dependency tar to v6.1.14 (4e26a31)
  • deps: update dependency tar to v6.1.15 (f87b2c6)

1.14.1 (2023-05-04)

Bug Fixes

1.14.0 (2023-05-02)

Features

  • ensure typescript types comes first in exports (1e76b9b)

1.13.0 (2023-04-30)

Features

Dependency upgrades

  • deps: update dependency @html-validate/stylish to v4 (23c0be0)
  • deps: update dependency execa to v7 (f63c699)
  • deps: update dependency find-up to v6 (a2b6d5c)
  • deps: update dependency semver to v7.5.0 (36c11eb)

1.12.0 (2023-04-13)

Features

  • verify exports field in package.json (6a7408f), closes #159

Dependency upgrades

  • deps: update dependency semver to v7.4.0 (0e53246)

1.11.2 (2023-01-15)

Bug Fixes

  • dont minify and add sourcemap instead (bebaafd)
  • ignore @types/node when verifying transitive engine constraints (d9fed79)

Dependency upgrades

  • deps: update dependency semver to v7.3.8 (420b1d6)
  • deps: update dependency tar to v6.1.13 (f1f0394)

1.11.1 (2022-05-25)

Bug Fixes

  • disallow (spec|test).d.ts.map (8fce5dd)

Dependency upgrades

  • deps: update dependency @html-validate/stylish to v3 (5754f8d)

1.11.0 (2022-05-02)

Features

Dependency upgrades

  • deps: update dependency semver to v7.3.6 (a6374dc)
  • deps: update dependency semver to v7.3.7 (2f32363)

1.10.0 (2022-03-24)

Features

  • allow prettier packages as dependency if keywords include "prettier" (19ad790)

1.9.1 (2022-03-10)

Bug Fixes

1.9.0 (2022-03-01)

Features

  • allow eslint packages as dependency if keywords include "eslint" (7f582d1)
  • disallow scoped eslint packages and formatters (780bef1)

1.8.0 (2022-03-01)

Features

  • disallow windows reserved filenames (c5dd47e)

1.7.0 (2022-02-20)

Features

  • disallow *.spec.js.map files (f5773d3)

Dependency upgrades

  • deps: pin dependencies (664ea7b)
  • deps: update dependency @html-validate/stylish to v2.0.1 (ebae0ce)
  • deps: update dependency tar to v6.1.11 (d52d912)

1.6.0 (2022-02-16)

Features

  • bundle all dependencies (d6026eb)

1.5.0 (2021-09-21)

Features

  • new rule types-node-matching-engine (c9fda99)

Dependency upgrades

  • deps: update dependency @html-validate/stylish to v2 (1c68c80)

1.4.0 (2021-06-05)

Features

  • bump node release table (node 10 now returns an error) (6c38aad)
  • verify engine constrains (535906f)

1.3.0 (2020-11-21)

Features

  • check for unsupported node versions (c788c00)

1.2.0 (2020-11-17)

Features

  • add --allow-types-dependencies to allow @types/* (087facc)
  • disallow packages as dependencies (9088173)
  • support ignoring missing fields (fb688e5)
  • support reading package.json directly from tarball (bfbf3fc)
  • support reading tarball from stdin (85981c4)

Bug Fixes

  • browser field may contain false (9957100)
  • disallow *.(spec|test).d.ts (e6c2b88)
  • handle large package.json files (e1bb35e)
  • handle leading ./ in filenames (371114c)
  • handle packages not using package/ as root (b376852)
  • handle packages with index.js but trailing slash (8cb0fb4)
  • handle resolving files without .js extension (0555d38)
  • handle when main points to directory with index.js (368f2a6)
  • regenerate package name when using stdin (15487e4)
  • tweak allowed files and dependencies (f50be59)

1.1.0 (2020-11-14)

Features

  • --pkgfile and --tarball are now optional (8b501eb)
  • validate package fields (db27fe5)
  • validates presence of files referenced in package.json (f30798e)
  • verify presence of shebang (d4e835f)

Bug Fixes

  • handle scoped packages (dbcc1b6)
  • skip outputting result when there are no errors (f64d172)

1.0.3 (2020-11-11)

Bug Fixes

1.0.2 (2020-11-11)

Bug Fixes

1.0.1 (2020-11-11)

Bug Fixes

  • compile package before release (a33e5ce)

1.0.0 (2020-11-11)

Features

Bug Fixes

  • exit with error code on any error (77c0f6a)