Home » Oreps » npm » All Releases » libnpmpublish-v11.2.1 Release
npm/cli
the package manager for JavaScript
Watch
2
Commit Activity
Directory Browser
Velocity History
Releaseslibnpmpublish-v11.2.1
Basic Details Issues Addressed Top Contributors Directory Browser Release Notes
npm libnpmpublish-v11.2.1

npm: libnpmpublish-v11.2.1 Release

Release date:
September 22, 2026
Previous version:
libnpmpublish-v11.2.0 (released May 20, 2026)
Magnitude:
3,650 Diff Delta
Contributors:
5 total committers
Data confidence:
Commits:
100 impacting commits

75 Features Released with libnpmpublish-v11.2.1

feat: Phase 1 of `allowScripts` opt-in install-script policy
#9360
feat: allowScripts tooling and inBundle hardening
#9483
feat: add min-release-age-exclude config
#9534
fix(arborist): record the linked .store layout in the hidden lockfile
#9630
fix(arborist): forward transitive overrides through linked store links
#9658
fix(allowScripts): close three enforcement gaps
#9652
[BUG] `install-strategy=linked`: workspace-only / undeclared workspaces are invisible to `npm ls` and `npm query`
#9618
feat: differentiate GitHub Actions environments in user-agent
#9517
fix: match dotted and versioned args in approve-scripts/deny-scripts
#9540
feat(install-scripts): prune unused allowScripts entries
#9662
fix(arborist): validate peerOptional conflicts in no-save mutations
#9641
[BUG] overrides for a transitive dependency are dropped when it is reached through a `file:`/workspace link
#9659
fix: recognize allowScripts for local link targets
#9497
feat: namespace install-script approval commands under npm install-scripts
#9635
fix(query): report logical dep location under linked strategy
#9664
fix: suggest --allow-scripts for global installs in unreviewed-scripts warnings
#9481
fix(arborist): clean up orphaned scoped store entries in linked strategy
#9484
fix: emit valid JSON from approve-scripts/deny-scripts --json
#9535
fix(arborist): clean up stale .store and hoisted dirs on strategy switch
#9649
fix(arborist): show real install script names on lockfile installs
#9428
fix(approve-scripts): approve deps with no resolved URL by name
#9607
fix: correct dev/prod dep flags for workspaces under the linked strategy
#9666
[BUG] `replace-registry-host` doesn't support when two different registries have paths
#6110
fix: keep nested file: deps and re-resolve changed git refs
#9530
fix(arborist): audit the non-isolated tree under the linked strategy
#9631
fix(arborist): drop self-link materialization for undeclared workspaces
#9418
fix: exempt local project introspection from allow-directory
#9408
fix(arborist): invalid filterNode crash under the linked strategy
#9645
fix(arborist): load transitive optional deps into linked actual tree
#9665
fix(arborist): don't load store packages' devDependencies as required edges
#9633

Browse Other Releases

libnpmsearch@4.0.1 Released January 27, 2022
36 Ξ”
libnpmpublish-v12.0.1 Released September 22, 2026
26 Ξ”
libnpmpublish-v12.0.0 Released July 8, 2026
2,218 Ξ”
libnpmpublish-v12.0.0-pre.0 Released June 19, 2026
3,033 Ξ”
libnpmpublish-v11.2.1 Released September 22, 2026
3,650 Ξ”
libnpmpublish-v11.2.0 Released May 20, 2026
4,363 Ξ”
libnpmpublish-v11.2.0-pre.0.0 Released May 20, 2026
0 Ξ”
libnpmpublish-v11.2.0-pre.0 Released May 20, 2026
10,865 Ξ”
libnpmpublish-v11.1.3 Released November 19, 2025
188 Ξ”
libnpmpublish-v11.1.2 Released October 8, 2025
224 Ξ”

Top Contributors in libnpmpublish-v11.2.1

github-actions[bot]
owlstronaut
manzoorwanijk
JamieMagee
reggi

Directory Browser for libnpmpublish-v11.2.1

All files are compared to previous version, libnpmpublish-v11.2.0. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

11.2.1 (2026-09-21)

Bug Fixes

  • ddbadfc #9947 provenance-file takes precedence over OIDC auto-generated provenance (#9947) (@github-actions[bot], @yunseo-kim)