Home » Oreps » npm » All Releases » config-v10.12.0 Release
npm/cli
the package manager for JavaScript
Watch
2
Commit Activity
Directory Browser
Velocity History
Releasesconfig-v10.12.0
Basic Details Issues Addressed Top Contributors Directory Browser Release Notes
npm config-v10.12.0

npm: config-v10.12.0 Release

Release date:
June 29, 2026
Previous version:
config-v10.11.0 (released June 11, 2026)
Magnitude:
1,460 Diff Delta
Contributors:
4 total committers
Data confidence:
Commits:
39 impacting commits

38 Features Released with config-v10.12.0

fix(arborist): record the linked .store layout in the hidden lockfile
#9630
fix(arborist): forward transitive overrides through linked store links
#9658
fix(allowScripts): close three enforcement gaps
#9652
[BUG] `install-strategy=linked`: workspace-only / undeclared workspaces are invisible to `npm ls` and `npm query`
#9618
feat(install-scripts): prune unused allowScripts entries
#9662
fix(arborist): validate peerOptional conflicts in no-save mutations
#9641
[BUG] overrides for a transitive dependency are dropped when it is reached through a `file:`/workspace link
#9659
feat: namespace install-script approval commands under npm install-scripts
#9635
fix(query): report logical dep location under linked strategy
#9664
fix(arborist): clean up stale .store and hoisted dirs on strategy switch
#9649
fix(arborist): apply overrides across a file: link (backport release/v11)
#9673
fix(arborist): keep bin links for allowScripts-denied packages
#9686
fix(approve-scripts): approve deps with no resolved URL by name
#9607
fix: correct dev/prod dep flags for workspaces under the linked strategy
#9666
[BUG] `replace-registry-host` doesn't support when two different registries have paths
#6110
fix(arborist): audit the non-isolated tree under the linked strategy
#9631
fix(arborist): invalid filterNode crash under the linked strategy
#9645
fix(arborist): load transitive optional deps into linked actual tree
#9665
fix(arborist): don't load store packages' devDependencies as required edges
#9633
[BUG] denying a package's install scripts via `allowScripts` also drops its `.bin` links
#9681
fix: expose store node_modules via NODE_PATH for linked-strategy install scripts
#9578
fix(arborist): symlink workspace file: deps on non-workspace local packages
#9593
fix(exec): prevent shared binPaths pollution across workspace runs
#9692
fix(exec): resolve workspace-local bin under the linked install strategy
#9648
fix(arborist): fix audit-report determinism due to dropped via links
#9638
fix(arborist): don't flag inert optional deps in strict-allow-scripts
#9602
fix(reify): report added count for fresh linked installs
#9667
fix: output all the required parameters for npm token list
#9691
fix(arborist): repair wrong-but-existing symlink target in linked strategy
#9644
feat: graduate the linked install strategy from experimental to stable
#9677

Browse Other Releases

config-v11.0.0-pre.3 Released July 8, 2026
20 Ξ”
config-v11.0.0-pre.2 Released June 29, 2026
2,192 Ξ”
config-v11.0.0-pre.1 Released June 19, 2026
7,010 Ξ”
config-v11.0.0-pre.0.0 Released May 20, 2026
0 Ξ”
config-v11.0.0-pre.0 Released May 20, 2026
1,421 Ξ”
config-v10.12.0 Released June 29, 2026
1,460 Ξ”
config-v10.11.0 Released June 11, 2026
1,626 Ξ”
config-v10.10.0 Released May 27, 2026
81 Ξ”
config-v10.9.1 Released May 20, 2026
751 Ξ”
config-v10.9.0 Released May 6, 2026
592 Ξ”

Top Contributors in config-v10.12.0

github-actions[bot]
manzoorwanijk
owlstronaut
JamieMagee

Directory Browser for config-v10.12.0

All files are compared to previous version, config-v10.11.0. Click here to browse diffs between other versions.

Loading File Browser...

Release Notes Published

10.12.0 (2026-06-29)

Features

  • 3021ad6 #9694 arborist: extend replace-registry-host with URL prefix matching (#6110) (#9694) (@github-actions[bot], @u2mejc)
  • abd8c6b #9677 graduate the linked install strategy from experimental to stable (#9677) (@github-actions[bot], @manzoorwanijk)
  • 073253f #9564 warn when min-release-age blocks an audit fix (#9564) (@github-actions[bot], @JamieMagee) ### Bug Fixes
  • b2e6338 #9602 arborist: don't flag inert optional deps in strict-allow-scripts (#9602) (@github-actions[bot], @JamieMagee) ### Documentation
  • 3658bb5 #9690 recommend install-strategy=linked to catch phantom dependencies (#9690) (@github-actions[bot], @manzoorwanijk)
GitClear uses cookies to ensure you get the best experience on our website. Learn more about our cookie policy