chore(deps): update npm to v11.16.0 (master)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	OpenSSF
npm (source)	packageManager	minor	11.12.1+sha512.cdca14b85d647b3192028d02aadbe82d75f79a446aceea9874be98e6d768f20ebd3555770a48d0e9906106007877bbc690f715e9372f2e2dc644a3c3157fb14c → 11.16.0

---

Release Notes

npm/cli (npm)

v11.16.0

Compare Source

Features

• 4b67f6e #​9416 publish --access=private alias for restricted (#​9416) (@​github-actions[bot], @​reggi, @​Copilot)
• a10c7ca #​9415 Phase 1 of allowScripts opt-in install-script policy (#​9360) (#​9415) (@​owlstronaut, @​JamieMagee)

Bug Fixes

• 1f7869b #​9411 fix typo of fullMetadata (@​owlstronaut)
• cde03ba #​9390 config: pause progress spinner during interactive editor spawn (#​9388) (@​github-actions[bot], @​Zelys-DFKH, @​claude)

Documentation

• c5e9d73 #​9390 Document npm_old_version and npm_new_version environment variables (#​9389) (@​github-actions[bot], @​36degrees)

Dependencies

• cdd7bbc #​9421 undici@6.26.0
• fde87c9 #​9421 sigstore@4.1.1
• 2779793 #​9421 lru-cache@11.5.1
• dea702d #​9421 @sigstore/verify@3.1.1
• 4eab03f #​9421 @sigstore/core@3.2.1
• 74c7323 #​9421 @npmcli/agent@4.0.2
• edc4ab3 #​9421 semver@7.8.1
• 5f6ce33 #​9421 make-fetch-happen@15.0.6

Chores

• bd04976 #​9421 dev dependency updates (@​owlstronaut)
• aeceb23 #​9407 sanitize newlines in flags table default and type values (#​9407) (@​reggi, @​Copilot)
• workspace: @npmcli/arborist@9.7.0
• workspace: @npmcli/config@10.10.0
• workspace: libnpmdiff@8.1.9
• workspace: libnpmexec@10.2.9
• workspace: libnpmfund@7.0.23
• workspace: libnpmpack@9.1.9
• workspace: libnpmversion@8.0.4

v11.15.0

Compare Source

Features

• 0d5d899 #​9379 npm stage (@​reggi, @​Copilot)
• 1433740 #​9376 add permissions support to trust commands (#​9376) (@​github-actions[bot], @​reggi, @​Copilot)
• 8df10f5 #​9339 add allow-git/allow-file/allow-directory/allow-remote configs (@​owlstronaut)

Bug Fixes

• 39b625e #​9381 key stage download --json output by package name (#​9381) (@​reggi, @​Copilot)
• 6aa332d #​9339 allow min-release-age in npmrc to coexist with --before (@​raazkhnl)
• 468550f #​9339 refactor #failureNode, adjust tests and safety (@​owlstronaut)
• cabe249 #​9339 allow-remote=none does not block registry tarballs (@​owlstronaut)

Dependencies

• 8416a60 #​9383 socks@2.8.9
• 5e5a25b #​9383 lru-cache@11.5.0
• a6f9ad2 #​9383 ip-address@10.2.0
• 63f8114 #​9383 brace-expansion@5.0.6
• 6918b4c #​9383 bin-links@6.0.2
• bf84079 #​9383 tar@7.5.15
• bdef82c #​9383 semver@7.8.0
• 3f38a67 #​9383 hosted-git-info@9.0.3

Chores

• 816f3bf #​9383 dev dependency updates (@​owlstronaut)
• workspace: @npmcli/arborist@9.6.0
• workspace: @npmcli/config@10.9.1
• workspace: libnpmdiff@8.1.8
• workspace: libnpmexec@10.2.8
• workspace: libnpmfund@7.0.22
• workspace: libnpmpack@9.1.8
• workspace: libnpmpublish@11.2.0

v11.14.1

Compare Source

Bug Fixes

• dca12cb #​9328 remove settings (#​9328) (@​github-actions[bot], @​owlstronaut)

v11.14.0

Compare Source

Features

• 45fc5e0 #​9288 add allow-directory, allow-file, and allow-remote (#​9288) (@​github-actions[bot], @​wraithgar)

Bug Fixes

• 6c17544 #​9318 sbom: dedupe per-node dependsOn / relationships (#​9318) (@​github-actions[bot], @​mikaelkristiansson)

Dependencies

• 840fe18 #​9322 socks@10.1.1
• b771289 #​9322 ip-address@10.1.1
• addffcb #​9322 cidr-regex@5.0.5

Chores

• 041fd58 #​9322 dev dependency updates (@​owlstronaut)
• 89c505a #​9320 add cli-triage team as codeowner (#​9320) (@​github-actions[bot], @​owlstronaut)
• workspace: @npmcli/arborist@9.5.0
• workspace: @npmcli/config@10.9.0
• workspace: libnpmdiff@8.1.7
• workspace: libnpmexec@10.2.7
• workspace: libnpmfund@7.0.21
• workspace: libnpmpack@9.1.7

v11.13.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (7e248d1) to head (e8fc5ff).

Additional details and impacted files

@@            Coverage Diff            @@
##            master      #358   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           11        11           
  Lines           23        23           
=========================================
  Hits            23        23           

Flag	Coverage Δ
unit	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.