Skip to content

[v22.x] deps: upgrade npm to 10.9.8#62463

Open
npm-cli-bot wants to merge 1 commit intonodejs:v22.x-stagingfrom
npm:npm-v10.9.8-22
Open

[v22.x] deps: upgrade npm to 10.9.8#62463
npm-cli-bot wants to merge 1 commit intonodejs:v22.x-stagingfrom
npm:npm-v10.9.8-22

Conversation

@npm-cli-bot
Copy link
Copy Markdown
Contributor

@npm-cli-bot npm-cli-bot commented Mar 27, 2026

Dependencies

@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

nodejs-github-bot commented Mar 27, 2026

Review requested:

  • @nodejs/security-wg

@nodejs-github-bot nodejs-github-bot added needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. v22.x Issues that can be reproduced on v22.x or PRs targeting the v22.x-staging branch. labels Mar 27, 2026
@owlstronaut
Copy link
Copy Markdown

owlstronaut commented Mar 27, 2026

please add a do not release on v20 label

@owlstronaut owlstronaut mentioned this pull request Mar 27, 2026
Open
@Renegade334 Renegade334 linked an issue Mar 27, 2026 that may be closed by this pull request
Possible NodeJS 22.22.2 regression when installing latest NPM #62425
Open
@aduh95 aduh95 changed the title deps: upgrade npm to 10.9.8 [v22.x] deps: upgrade npm to 10.9.8 Mar 27, 2026
@aduh95 aduh95 added author ready PRs that have at least one approval, no pending requests for changes, and a CI started. request-ci Add this label to start a Jenkins CI on a PR. labels Mar 27, 2026
@github-actions github-actions Bot removed the request-ci Add this label to start a Jenkins CI on a PR. label Mar 28, 2026
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

nodejs-github-bot commented Mar 28, 2026

CI: https://ci.nodejs.org/job/node-test-pull-request/72170/

@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

nodejs-github-bot commented Mar 29, 2026

CI: https://ci.nodejs.org/job/node-test-pull-request/72211/

@v-sergei-pyshnoi v-sergei-pyshnoi mentioned this pull request Apr 6, 2026
Open
15 tasks
@Renegade334 Renegade334 removed a link to an issue Apr 7, 2026
Possible NodeJS 22.22.2 regression when installing latest NPM #62425
Open
@Renegade334 Renegade334 linked an issue Apr 7, 2026 that may be closed by this pull request
Possible NodeJS 22.22.2 regression when installing latest NPM #62425
Open
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

nodejs-github-bot commented Apr 7, 2026

CI: https://ci.nodejs.org/job/node-test-pull-request/72542/

@msfstef msfstef mentioned this pull request Apr 8, 2026
Merged
jordanstephens added a commit to DefangLabs/pulumi-defang that referenced this pull request Apr 9, 2026
@jordanstephens @claude
upgrade CI to Node 24 to fix broken npm in Node 22.22.2 tool cache
c1fb3bb 
The ubuntu-24.04 runner image (20260329.72.1) ships with a corrupted
Node 22.22.2 tool cache: npm 10.9.7 is missing `promise-retry` from its
own module tree, causing any `npm install -g` to fail with
MODULE_NOT_FOUND. This broke all nodejs SDK build jobs.

Node 24 ships with npm 11 natively, which supports OIDC Trusted
Publishers without requiring a separate upgrade step, so we can drop the
`npm install -g` workaround entirely.

See: actions/runner-images#13883
     nodejs/node#62463

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@jordanstephens jordanstephens mentioned this pull request Apr 9, 2026
Merged
1 task
@nodejs-github-bot
Copy link
Copy Markdown
Collaborator

nodejs-github-bot commented Apr 27, 2026

CI: https://ci.nodejs.org/job/node-test-pull-request/72960/

@Devin-Marks Devin-Marks mentioned this pull request May 7, 2026
Merged
2 tasks
Devin-Marks added a commit to Devin-Marks/pi-forge that referenced this pull request May 7, 2026
@Devin-Marks
fix(ci): pin Node to 22.22.1 to dodge 22.22.2's broken bundled npm (#58)
d233935 
Node 22.22.2's hostedtoolcache image ships with a corrupted bundled
npm — `promise-retry` is missing from `@npmcli/arborist`'s node_modules,
so any `npm install -g npm@<anything>` crashes with MODULE_NOT_FOUND
before it can do the upgrade. Confirmed regression vs 22.22.1:
  - nodejs/node#62425
  - actions/runner-images#13883

Pinning forces actions/setup-node to download a clean Node + npm pair
from nodejs.org instead of using the broken cached image. Drop the
pin (back to `22`) once 22.22.3 ships the fix from nodejs/node#62463.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ljharb ljharb ljharb approved these changes

@santigimeno santigimeno santigimeno approved these changes

@lpinca lpinca lpinca approved these changes

@richardlau richardlau richardlau approved these changes

@marco-ippolito marco-ippolito marco-ippolito approved these changes

Assignees

No one assigned

Labels

author ready PRs that have at least one approval, no pending requests for changes, and a CI started. needs-ci PRs that need a full CI run. npm Issues and PRs related to the npm client dependency or the npm registry. v22.x Issues that can be reproduced on v22.x or PRs targeting the v22.x-staging branch.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Possible NodeJS 22.22.2 regression when installing latest NPM