[Snyk] Upgrade npm from 6.10.3 to 6.11.1

[snyk-bot]

Snyk have raised this PR to upgrade npm from 6.10.3 to 6.11.1.

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 9 days ago, on 2019-08-21.

Release notes

• 6.11.1 - 2019-08-21

  6.11.1 (2019-08-20):

  Fix a regression for windows command shim syntax.

  • 37db29647 cmd-shim@3.0.2 (@isaacs)
• 6.11.0 - 2019-08-20

  v6.11.0 (2019-08-20):

  A few meaty bugfixes, and introducing peerDependenciesMeta.

  FEATURES

  • a12341088 #224 Implements peerDependenciesMeta (@arcanis)
  • 2f3b79bba #234 add new forbidden 403 error code (@claudiahdz)

  BUGFIXES

  • 24acc9fc8 and 45772af0d #217 npm.community#8863 npm.community#9327 do not descend into directory deps' child modules, fix shrinkwrap files that inappropriately list child nodes of symlink packages (@isaacs and @salomvary)
  • 50cfe113d #229 fixed typo in semver doc (@gall0ws)
  • e8fb2a1bd #231 Fix spelling mistakes in CHANGELOG-3.md (@XhmikosR)
  • 769d2e057 npm/uid-number#7 Better error on invalid --user/--group configs. This addresses the issue when people fail to install binary packages on Docker and other environments where there is no 'nobody' user. (@isaacs)
  • 8b43c9624 nodejs/node#28987 npm.community#6032 npm.community#6658 npm.community#6069 npm.community#9323 Fix the regression where random config values in a .npmrc file are not passed to lifecycle scripts, breaking build processes which rely on them. (@isaacs)
  • 8b85eaa47 save files with inferred ownership rather than relying on SUDO_UID and SUDO_GID. (@isaacs)
  • b7f6e5f02 Infer ownership of shrinkwrap files (@isaacs)
  • 54b095d77 #235 Add spec to dist-tag remove function (@theberbie)

  DEPENDENCIES

  • dc8f9e52f pacote@9.5.7: Infer the ownership of all unpacked files in node_modules, so that we never have user-owned files in root-owned folders, or root-owned files in user-owned folders. (@isaacs)
  • bb33940c3 cmd-shim@3.0.0:
    • 9c93ac3 #2 npm#3380 Handle environment variables properly (@basbossink)
    • 2d277f8 #25 #36 #35 Fix 'no shebang' case by always providing $basedir in shell script (@igorklopov)
    • adaf20b #26 Fix $* causing an error when arguments contain parentheses (@satazor)
    • 49f0c13 #30 Fix paths for MSYS/MINGW bash (@dscho)
    • 51a8af3 #34 Add proper support for PowerShell (@ExE-Boss)
    • 4c37e04 #10 Work around quoted batch file names (@isaacs)
  • a4e279544 npm-lifecycle@3.1.3 (@isaacs):
    • fail properly if uid-number raises an error
  • 7086a1809 libcipm@4.0.3 (@isaacs)
  • 8845141f9 read-package-json@2.1.0 (@isaacs)
  • 51c028215 bin-links@1.1.3 (@isaacs)
  • 534a5548c read-cmd-shim@1.0.3 (@isaacs)
  • 3038f2fd5 gentle-fs@2.2.1 (@isaacs)
  • a609a1648 graceful-fs@4.2.2 (@isaacs)
  • f0346f754 cacache@12.0.3 (@isaacs)
  • ca9c615c8 npm-pick-manifest@3.0.0 (@isaacs)
  • b417affbf pacote@9.5.8 (@isaacs)

  TESTS

  • b6df0913c #228 Proper handing of /usr/bin/node lifecycle-path test (@olivr70)
  • aaf98e88c npm-registry-mock@1.3.0 (@isaacs)
• 6.10.3 - 2019-08-06

  v6.10.3 (2019-08-06):

  BUGFIXES

  • 27cccfbda #223 vulns → vulnerabilities in npm audit output (@sapegin)
  • d5e865eb7 #222 #226 install, doctor: don't crash if registry unset (@dmitrydvorkin, @isaacs)
  • 5b3890226 #227 npm.community#9167 Handle unhandledRejections, tell user what to do when encountering an EACCES error in the cache. (@isaacs)

  DEPENDENCIES

  • 77516df6e licensee@7.0.3 (@isaacs)
  • ceb993590 query-string@6.8.2 (@isaacs)
  • 4050b9189 hosted-git-info@2.8.2
    • #46 #43 #47 #44 Add support for GitLab subgroups (@mterrel, @isaacs, @ybiquitous)
    • 3b1d629 #48 fix http protocol using sshurl by default (@fengmk2)
    • 5d4a8d7 ignore noCommittish on tarball url generation (@isaacs)
    • 1692435 use gist tarball url that works for anonymous gists (@isaacs)
    • d5cf830 Do not allow invalid gist urls (@isaacs)
    • e518222 Use LRU cache to prevent unbounded memory consumption (@iarna)

from npm GitHub Release Notes

---

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[tyhal]

@snyk-bot rebase