chore: release 22.0.0

Author: github-actions[bot]

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "21.5.0"
+  ".": "22.0.0"
 }

CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [22.0.0](https://github.com/npm/pacote/compare/v21.5.0...v22.0.0) (2026-05-26)
+### ⚠️ BREAKING CHANGES
+* git specs using the `https` or `git+https` protocol now resolve to `git+https` URLs instead of being switched to `git+ssh`. Shortcut specs (e.g. `github:user/repo`, `user/repo`) and `git+ssh`/`git://` specs are unchanged.
+### Features
+* [`66e7ea7`](https://github.com/npm/pacote/commit/66e7ea79a325bccc3fedc07ab5b690b96a263f2c) [#487](https://github.com/npm/pacote/pull/487) forward globalIgnoreFile option to npm-packlist (@ljharb)
+### Bug Fixes
+* [`1f5f131`](https://github.com/npm/pacote/commit/1f5f131a4a6dc7cc915b99ea37ee41e2e49eb7c8) [#494](https://github.com/npm/pacote/pull/494) pass --global=false when preparing git dependencies (@owlstronaut)
+* [`e0af7f6`](https://github.com/npm/pacote/commit/e0af7f6a49880895817aa863f99747b102495f93) [#486](https://github.com/npm/pacote/pull/486) respect ignoreScripts option for git dependencies (@owlstronaut)
+* [`12c8c8f`](https://github.com/npm/pacote/commit/12c8c8fdd95d7a8507e6f3d66f4319456dc79920) [#481](https://github.com/npm/pacote/pull/481) fall back to git clone when tarball response is not a valid archive (@babyhuey)
+* [`61f065a`](https://github.com/npm/pacote/commit/61f065a2c313a2fc4e631fb3c12c2011ac4547d4) [#481](https://github.com/npm/pacote/pull/481) use statusCode instead of constructor name for tarball fallback in git fetcher (@j1mb0-1)
+* [`6d160c1`](https://github.com/npm/pacote/commit/6d160c11e7b1e48a705b5a912bbf1531a379554f) [#434](https://github.com/npm/pacote/pull/434) do not switch to git+ssh for https repository links (#434) (@oldium)
+### Chores
+* [`644ebb6`](https://github.com/npm/pacote/commit/644ebb6affa9d5ea9f1e4120ce309fb4d4820bbd) [#479](https://github.com/npm/pacote/pull/479) template-oss-apply (@owlstronaut)
+* [`ee64bea`](https://github.com/npm/pacote/commit/ee64bea0710394273490cd5bf3ee7dbb79f7def9) [#479](https://github.com/npm/pacote/pull/479) `@npmcli/template-oss@4.30.0` (@owlstronaut)
+
 ## [21.5.0](https://github.com/npm/pacote/compare/v21.4.0...v21.5.0) (2026-03-09)
 ### Features
 * [`d912f17`](https://github.com/npm/pacote/commit/d912f17785cd547879c59342b1c2104f71a5a0e6) [#457](https://github.com/npm/pacote/pull/457) expose fetched attestation bundles on manifest (#457) (@mitchdenny)

package.json

@@ -1,6 +1,6 @@
 {
   "name": "pacote",
-  "version": "21.5.0",
+  "version": "22.0.0",
   "description": "JavaScript package downloader",
   "author": "GitHub Inc.",
   "bin": {