Deps update

DEPENDENCIES.json

@@ -58,7 +58,6 @@
     "bin-links",
     "nopt",
     "parse-conflict-json",
-    "read-package-json-fast",
     "@npmcli/mock-globals",
     "read",
     "normalize-package-data"

DEPENDENCIES.md

@@ -38,7 +38,6 @@ graph LR;
   libnpmexec-->npmcli-template-oss["@npmcli/template-oss"];
   libnpmexec-->pacote;
   libnpmexec-->proc-log;
-  libnpmexec-->read-package-json-fast;
   libnpmexec-->read;
   libnpmexec-->semver;
   libnpmfund-->npmcli-arborist["@npmcli/arborist"];
@@ -178,7 +177,6 @@ graph LR;
   npmcli-arborist-->parse-conflict-json;
   npmcli-arborist-->proc-log;
   npmcli-arborist-->proggy;
-  npmcli-arborist-->read-package-json-fast;
   npmcli-arborist-->semver;
   npmcli-arborist-->ssri;
   npmcli-config-->ini;
@@ -248,8 +246,6 @@ graph LR;
   parse-conflict-json-->json-parse-even-better-errors;
   promzard-->read;
   read-->mute-stream;
-  read-package-json-fast-->json-parse-even-better-errors;
-  read-package-json-fast-->npm-normalize-package-bin;
   unique-filename-->unique-slug;
 ```
 
@@ -306,9 +302,8 @@ graph LR;
   init-package-json-->semver;
   init-package-json-->validate-npm-package-license;
   init-package-json-->validate-npm-package-name;
-  ip-address-->jsbn;
-  ip-address-->sprintf-js;
   is-cidr-->cidr-regex;
+  isaacs-brace-expansion-->isaacs-balanced-match["@isaacs/balanced-match"];
   isaacs-cliui-->string-width-cjs;
   isaacs-cliui-->string-width;
   isaacs-cliui-->strip-ansi-cjs;
@@ -317,7 +312,6 @@ graph LR;
   isaacs-cliui-->wrap-ansi;
   isaacs-fs-minipass-->minipass;
   jackspeak-->isaacs-cliui["@isaacs/cliui"];
-  jackspeak-->pkgjs-parseargs["@pkgjs/parseargs"];
   libnpmaccess-->npm-package-arg;
   libnpmaccess-->npm-registry-fetch;
   libnpmaccess-->npmcli-eslint-config["@npmcli/eslint-config"];
@@ -350,7 +344,6 @@ graph LR;
   libnpmexec-->pacote;
   libnpmexec-->proc-log;
   libnpmexec-->promise-retry;
-  libnpmexec-->read-package-json-fast;
   libnpmexec-->read;
   libnpmexec-->semver;
   libnpmexec-->signal-exit;
@@ -421,6 +414,7 @@ graph LR;
   make-fetch-happen-->promise-retry;
   make-fetch-happen-->ssri;
   minimatch-->brace-expansion;
+  minimatch-->isaacs-brace-expansion["@isaacs/brace-expansion"];
   minipass-->yallist;
   minipass-collect-->minipass;
   minipass-fetch-->encoding;
@@ -593,7 +587,6 @@ graph LR;
   npmcli-arborist-->proggy;
   npmcli-arborist-->promise-all-reject-late;
   npmcli-arborist-->promise-call-limit;
-  npmcli-arborist-->read-package-json-fast;
   npmcli-arborist-->semver;
   npmcli-arborist-->ssri;
   npmcli-arborist-->tap;
@@ -710,8 +703,6 @@ graph LR;
   promise-retry-->retry;
   promzard-->read;
   read-->mute-stream;
-  read-package-json-fast-->json-parse-even-better-errors;
-  read-package-json-fast-->npm-normalize-package-bin;
   shebang-command-->shebang-regex;
   sigstore-->sigstore-bundle["@sigstore/bundle"];
   sigstore-->sigstore-core["@sigstore/core"];
@@ -787,5 +778,5 @@ packages higher up the chain.
  - @npmcli/package-json, npm-registry-fetch
  - @npmcli/git, make-fetch-happen
  - @npmcli/smoke-tests, @npmcli/installed-package-contents, npm-pick-manifest, cacache, promzard
- - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, read-package-json-fast, @npmcli/mock-globals, read, normalize-package-data
+ - @npmcli/docs, @npmcli/fs, npm-bundled, @npmcli/promise-spawn, npm-install-checks, npm-package-arg, unique-filename, npm-packlist, bin-links, nopt, parse-conflict-json, @npmcli/mock-globals, read, normalize-package-data
  - @npmcli/eslint-config, @npmcli/template-oss, ignore-walk, semver, npm-normalize-package-bin, @npmcli/name-from-folder, which, ini, hosted-git-info, proc-log, validate-npm-package-name, json-parse-even-better-errors, ssri, unique-slug, @npmcli/node-gyp, @npmcli/redact, @npmcli/agent, minipass-fetch, @npmcli/query, cmd-shim, read-cmd-shim, write-file-atomic, abbrev, proggy, minify-registry-metadata, mute-stream, npm-audit-report, npm-user-validate

docs/package.json

@@ -23,18 +23,18 @@
   "devDependencies": {
     "@isaacs/string-locale-compare": "^1.1.0",
     "@npmcli/eslint-config": "^5.0.1",
-    "@npmcli/template-oss": "4.24.4",
+    "@npmcli/template-oss": "4.25.1",
     "front-matter": "^4.0.2",
-    "ignore-walk": "^7.0.0",
-    "jsdom": "^24.0.0",
-    "rehype-stringify": "^9.0.3",
-    "remark-gfm": "^3.0.1",
-    "remark-man": "^8.0.1",
-    "remark-parse": "^10.0.1",
-    "remark-rehype": "^10.1.0",
+    "ignore-walk": "^8.0.0",
+    "jsdom": "^27.0.0",
+    "rehype-stringify": "^10.0.1",
+    "remark-gfm": "^4.0.1",
+    "remark-man": "^9.0.0",
+    "remark-parse": "^11.0.0",
+    "remark-rehype": "^11.1.2",
     "semver": "^7.3.8",
     "tap": "^16.3.8",
-    "unified": "^10.1.2",
+    "unified": "^11.0.5",
     "yaml": "^2.2.1"
   },
   "author": "GitHub Inc.",
@@ -56,7 +56,7 @@
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
     "ciVersions": "latest",
-    "version": "4.24.4",
+    "version": "4.25.1",
     "content": "../scripts/template-oss/index.js",
     "workspaceRepo": {
       "add": {

mock-globals/package.json

@@ -35,7 +35,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.24.4",
+    "version": "4.25.1",
     "content": "../scripts/template-oss/index.js"
   },
   "tap": {
@@ -50,7 +50,7 @@
   },
   "devDependencies": {
     "@npmcli/eslint-config": "^5.0.1",
-    "@npmcli/template-oss": "4.24.4",
+    "@npmcli/template-oss": "4.25.1",
     "tap": "^16.3.8"
   }
 }

mock-registry/package.json

@@ -35,7 +35,7 @@
   },
   "templateOSS": {
     "//@npmcli/template-oss": "This file is partially managed by @npmcli/template-oss. Edits may be overwritten.",
-    "version": "4.24.4",
+    "version": "4.25.1",
     "content": "../scripts/template-oss/index.js"
   },
   "tap": {
@@ -46,13 +46,13 @@
     ]
   },
   "devDependencies": {
-    "@npmcli/arborist": "^9.0.0",
+    "@npmcli/arborist": "^9.1.2",
     "@npmcli/eslint-config": "^5.0.1",
-    "@npmcli/template-oss": "4.24.4",
+    "@npmcli/template-oss": "4.25.1",
     "json-stringify-safe": "^5.0.1",
     "nock": "^13.3.3",
-    "npm-package-arg": "^12.0.0",
-    "pacote": "^21.0.0",
+    "npm-package-arg": "^13.0.0",
+    "pacote": "^21.0.2",
     "tap": "^16.3.8"
   }
 }

node_modules/.gitignore

@@ -5,6 +5,8 @@
 # Allow all bundled deps
 !/@isaacs/
 /@isaacs/*
+!/@isaacs/balanced-match
+!/@isaacs/brace-expansion
 !/@isaacs/cliui
 !/@isaacs/cliui/node_modules/
 /@isaacs/cliui/node_modules/*
@@ -44,6 +46,9 @@
 /@tufjs/*
 !/@tufjs/canonical-json
 !/@tufjs/models
+!/@tufjs/models/node_modules/
+/@tufjs/models/node_modules/*
+!/@tufjs/models/node_modules/minimatch
 !/abbrev
 !/agent-base
 !/ansi-regex
@@ -55,13 +60,6 @@
 !/binary-extensions
 !/brace-expansion
 !/cacache
-!/cacache/node_modules/
-/cacache/node_modules/*
-!/cacache/node_modules/chownr
-!/cacache/node_modules/minizlib
-!/cacache/node_modules/mkdirp
-!/cacache/node_modules/tar
-!/cacache/node_modules/yallist
 !/chalk
 !/chownr
 !/ci-info
@@ -74,6 +72,7 @@
 !/cross-spawn
 !/cross-spawn/node_modules/
 /cross-spawn/node_modules/*
+!/cross-spawn/node_modules/isexe
 !/cross-spawn/node_modules/which
 !/cssesc
 !/debug
@@ -104,23 +103,16 @@
 !/is-fullwidth-code-point
 !/isexe
 !/jackspeak
-!/jsbn
 !/json-parse-even-better-errors
 !/json-stringify-nice
 !/jsonparse
 !/just-diff-apply
 !/just-diff
 !/lru-cache
 !/make-fetch-happen
-!/make-fetch-happen/node_modules/
-/make-fetch-happen/node_modules/*
-!/make-fetch-happen/node_modules/negotiator
 !/minimatch
 !/minipass-collect
 !/minipass-fetch
-!/minipass-fetch/node_modules/
-/minipass-fetch/node_modules/*
-!/minipass-fetch/node_modules/minizlib
 !/minipass-flush
 !/minipass-flush/node_modules/
 /minipass-flush/node_modules/*
@@ -135,18 +127,24 @@
 !/minipass-sized/node_modules/minipass
 !/minipass
 !/minizlib
-!/minizlib/node_modules/
-/minizlib/node_modules/*
-!/minizlib/node_modules/minipass
 !/mkdirp
 !/ms
 !/mute-stream
+!/negotiator
 !/node-gyp
 !/node-gyp/node_modules/
 /node-gyp/node_modules/*
+!/node-gyp/node_modules/@npmcli/
+/node-gyp/node_modules/@npmcli/*
+!/node-gyp/node_modules/@npmcli/agent
+!/node-gyp/node_modules/cacache
 !/node-gyp/node_modules/chownr
-!/node-gyp/node_modules/minizlib
-!/node-gyp/node_modules/mkdirp
+!/node-gyp/node_modules/glob
+!/node-gyp/node_modules/jackspeak
+!/node-gyp/node_modules/lru-cache
+!/node-gyp/node_modules/make-fetch-happen
+!/node-gyp/node_modules/minimatch
+!/node-gyp/node_modules/path-scurry
 !/node-gyp/node_modules/tar
 !/node-gyp/node_modules/yallist
 !/nopt
@@ -160,13 +158,15 @@
 !/npm-pick-manifest
 !/npm-profile
 !/npm-registry-fetch
-!/npm-registry-fetch/node_modules/
-/npm-registry-fetch/node_modules/*
-!/npm-registry-fetch/node_modules/minizlib
 !/npm-user-validate
 !/p-map
 !/package-json-from-dist
 !/pacote
+!/pacote/node_modules/
+/pacote/node_modules/*
+!/pacote/node_modules/chownr
+!/pacote/node_modules/tar
+!/pacote/node_modules/yallist
 !/parse-conflict-json
 !/path-key
 !/path-scurry
@@ -179,7 +179,6 @@
 !/promzard
 !/qrcode-terminal
 !/read-cmd-shim
-!/read-package-json-fast
 !/read
 !/retry
 !/safer-buffer
@@ -198,7 +197,6 @@
 !/spdx-exceptions
 !/spdx-expression-parse
 !/spdx-license-ids
-!/sprintf-js
 !/ssri
 !/string-width-cjs
 !/string-width
@@ -212,7 +210,14 @@
 !/tar/node_modules/fs-minipass/node_modules/
 /tar/node_modules/fs-minipass/node_modules/*
 !/tar/node_modules/fs-minipass/node_modules/minipass
+!/tar/node_modules/fs-minipass/node_modules/yallist
 !/tar/node_modules/minipass
+!/tar/node_modules/minizlib
+!/tar/node_modules/minizlib/node_modules/
+/tar/node_modules/minizlib/node_modules/*
+!/tar/node_modules/minizlib/node_modules/minipass
+!/tar/node_modules/minizlib/node_modules/yallist
+!/tar/node_modules/mkdirp
 !/text-table
 !/tiny-relative-date
 !/tinyglobby
@@ -232,9 +237,6 @@
 !/validate-npm-package-name
 !/walk-up-path
 !/which
-!/which/node_modules/
-/which/node_modules/*
-!/which/node_modules/isexe
 !/wrap-ansi-cjs
 !/wrap-ansi-cjs/node_modules/
 /wrap-ansi-cjs/node_modules/*

node_modules/@isaacs/balanced-match/LICENSE.md

@@ -0,0 +1,23 @@
+(MIT)
+
+Original code Copyright Julian Gruber <julian@juliangruber.com>
+
+Port to TypeScript Copyright Isaac Z. Schlueter <i@izs.me>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies
+of the Software, and to permit persons to whom the Software is furnished to do
+so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.