npm: arborist-v9.6.0 Release

Release date:
May 20, 2026
Previous version:
arborist-v9.5.0 (released May 6, 2026)
Magnitude:
752 Diff Delta
Contributors:
4 total committers
Data confidence:
Commits:

Top Contributors in arborist-v9.6.0

github-actions[bot]
owlstronaut
reggi
manzoorwanijk

Directory Browser for arborist-v9.6.0

All files are compared to previous version, arborist-v9.5.0. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

9.6.0 (2026-05-20)

Features

  • 8df10f5 #9339 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut) ### Bug Fixes
  • d7e195a #9362 arborist: skip lockfile entries for optional deps with incomplete manifests (#9362) (@github-actions[bot], @ecanturk, @owlstronaut)
  • 9c78f2a #9361 arborist: only forward Link overrides when a rule names a target dep (@manzoorwanijk)
  • 468550f #9339 refactor #failureNode, adjust tests and safety (@owlstronaut)
  • cabe249 #9339 allow-remote=none does not block registry tarballs (@owlstronaut)
  • 2169018 #9340 arborist: skip extraneous fsChildren in linked-strategy reify (@manzoorwanijk)
  • 1d0395e #9338 arborist: prune removed-workspace entries from package-lock.json (@manzoorwanijk) ### Chores
  • 6a2bdbc #9350 change test wording to not collide with tap (#9350) (@github-actions[bot], @owlstronaut)