11.12.0 (2026-03-18)

Features

• 8eff5fb #9049 audit: add --include-attestations flag to output sigstore bundles (#9049) (@mitchdenny)

Bug Fixes

• 03af94d #9123 skip synopsis code block when command has no usage (@owlstronaut)
• 21ea382 #9110 arborist: resolve sibling override sets via common ancestor (#9110) (@manzoorwanijk)

Dependencies

• 03f4c3a #9131 @sigstore/tuf@4.0.2
• 4d5f7d9 #9131 @gar/promise-retry@1.0.3
• 8dcfe69 #9131 @sigstore/sign@4.1.1
• e5a7e22 #9127 lru-cache@11.2.7
• 82deab6 #9127 make-fetch-happen@15.0.5
• ce195dc #9127 cacache@20.0.4

Chores

• 95fa7f4 #9132 fix docs test snapshot (#9132) (@wraithgar)
• 7e9d538 #9127 dev dependency updates (@wraithgar)
• 920e5ed #9127 test snapshots (@wraithgar)
• 98ccf92 #9125 fix snap tests (@owlstronaut)
• workspace: @npmcli/arborist@9.4.2
• workspace: @npmcli/config@10.8.0
• workspace: libnpmdiff@8.1.5
• workspace: libnpmexec@10.2.5
• workspace: libnpmfund@7.0.19
• workspace: libnpmpack@9.1.5