what stackpulse tracks
npm releases from GitHub
StackPulse watches npm release notes and keeps the original source link close to every summary.
#stacks/
loading releases…
releases
breaking
security
deprecated
migrations
The package manager for JavaScript StackPulse turns upstream changelogs into scannable summaries with risky changes, deprecations, migration notes, and source links.
what stackpulse tracks
StackPulse watches npm release notes and keeps the original source link close to every summary.
upgrade risk
Risky changes are separated from normal feature notes so you can scan upgrade impact before changing production dependencies.
migration notes
Migration steps and recommended actions are only shown when the upstream release notes support them.
This release fixes a bug related to provenance file handling, ensuring that manually provided provenance files take precedence over auto-generated OIDC provenance.
Users relying on provenance file handling in libnpmpublish are affected.
Update to version 11.2.1 to ensure correct provenance file precedence.
This release updates the dependency on `@npmcli/arborist` to version 9.9.2.
Users relying on `@npmcli/arborist` will benefit from the updated dependency.
This release introduces granular access token support and staged package status display, alongside several bug fixes and dependency updates.
Users requiring granular access control for tokens or those managing staged packages will benefit from this release.
This patch release fixes a bug where provenance-file takes precedence over OIDC auto-generated provenance in libnpmpublish.
Users relying on provenance file generation in libnpmpublish may be affected by the bug fix.
Update to v12.0.1 if you use provenance file generation in libnpmpublish.
This release introduces granular access token controls and improved package staging visibility. It also includes several bug fixes and dependency updates.
Users requiring granular token access or package staging visibility will benefit from this release.
Update to v12.1.0 to utilize new token access controls and package staging features.
This release fixes a bug related to exempting explicit pack targets from allow-directory restrictions.
Users relying on explicit pack targets with allow-directory restrictions are affected.
Update to version 9.1.13 to ensure proper handling of explicit pack targets.
This release focuses on bug fixes and dependency updates, including improvements to pack target exemptions and updates to several core dependencies.
Users relying on explicit pack targets or specific dependency versions may be affected.
Update to v11.19.1 to benefit from bug fixes and dependency updates.
This release updates the dependency on `@npmcli/arborist` to version 10.0.2.
Users relying on `libnpmpack` with `@npmcli/arborist` may need to ensure compatibility with the updated dependency.
This release includes bug fixes for pack and owner commands, updates documentation regarding a breaking change in npm 12, and updates several dependencies.
Users affected by the unknown-config breaking change in npm 12 may need to review their configurations.
Review configurations if experiencing issues related to unknown-config settings.
This release updates the dependency on @npmcli/arborist to version 9.9.1.
view source on github->This release introduces a new warning log title for install scripts and includes several bug fixes related to pack and owner commands.
Users relying on install scripts or using pack and owner commands may notice changes in behavior.
This patch release updates the `tar` dependency to version 7.5.22 and adds the cli-triage team as a codeowner.
view source on github->Updated dependency to @npmcli/arborist for compatibility.
Users relying on libnpmpack with specific arborist versions may need to update.
Update @npmcli/arborist to version 10.0.1 if not already using it.
This release updates the dependency on `@npmcli/arborist` to version 10.0.1.
Users relying on `libnpmfund` with `@npmcli/arborist` will be affected by this dependency update.
Ensure compatibility with `@npmcli/arborist@10.0.1` if using `libnpmfund`.
This release updates the dependency on @npmcli/arborist to version 10.0.1.
view source on github->This release includes bug fixes for view array results and bundled sigstore dependencies, along with updates to several workspace dependencies.
Users experiencing issues with view array results or bundled sigstore dependencies may be affected.
Update to version 12.0.1 to benefit from the bug fixes and dependency updates.
This release removes npm shrinkwrap and updates Node.js version support. It also includes improvements to the release process.
Users relying on shrinkwrap functionality or running unsupported Node.js versions are affected.
Migrate from shrinkwrap to package-lock.json and verify Node.js version compatibility.
This release introduces breaking changes related to Node.js version support and includes a feature to trigger the release process.
Users running Node.js versions outside the specified range will be affected.
Ensure your Node.js version is compatible with the new requirements.
This release introduces breaking changes by updating the supported Node.js versions. It also includes a feature to trigger the release process.
Users running Node.js versions outside the specified range will be affected.
Ensure your Node.js version is within the supported range (`^22.22.2 || ^24.15.0 || >=26.0.0`).