npm: v11.15.0 Release

11.15.0 (2026-05-20)

Features

• 0d5d899 #9379 npm stage (@reggi, @Copilot)
• 1433740 #9376 add permissions support to trust commands (#9376) (@github-actions[bot], @reggi, @Copilot)
• 8df10f5 #9339 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut) ### Bug Fixes
• 39b625e #9381 key stage download --json output by package name (#9381) (@reggi, @Copilot)
• 6aa332d #9339 allow min-release-age in npmrc to coexist with --before (@raazkhnl)
• 468550f #9339 refactor #failureNode, adjust tests and safety (@owlstronaut)
• cabe249 #9339 allow-remote=none does not block registry tarballs (@owlstronaut) ### Dependencies
• 8416a60 #9383 socks@2.8.9
• 5e5a25b #9383 lru-cache@11.5.0
• a6f9ad2 #9383 ip-address@10.2.0
• 63f8114 #9383 brace-expansion@5.0.6
• 6918b4c #9383 bin-links@6.0.2
• bf84079 #9383 tar@7.5.15
• bdef82c #9383 semver@7.8.0
• 3f38a67 #9383 hosted-git-info@9.0.3 ### Chores
• 816f3bf #9383 dev dependency updates (@owlstronaut)
• workspace: @npmcli/arborist@9.6.0
• workspace: @npmcli/config@10.9.1
• workspace: libnpmdiff@8.1.8
• workspace: libnpmexec@10.2.8
• workspace: libnpmfund@7.0.22
• workspace: libnpmpack@9.1.8
• workspace: libnpmpublish@11.2.0