Update dependency npm to v12.2.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
npm (source)	12.1.0 → 12.2.0

---

Release Notes

npm/cli (npm)

v12.2.0

Compare Source

Features

• 9741b64 #​10038 dist-tag: support OIDC authentication (#​10038) (@​reggi, @​Copilot)

Documentation

• 0c3b82a #​10017 update npm stage docs to reflect that it can create new packages (#​10017) (@​shmam, @​Copilot)

Dependencies

• workspace: @npmcli/config@11.2.0

v12.1.0

Compare Source

Features

• 6400533 #​9948 token: support read-write-stage-only granular access tokens (#​9948) (@​Tayvon, @​Copilot)
• 8723f53 #​9898 stage: display staged package status (#​9898) (@​joelverhagen)

Bug Fixes

• c9876d7 #​9882 provenance-file takes precedence over OIDC auto-generated provenance (#​9882) (@​yunseo-kim)
• b016aa2 #​9913 config: avoid exporting persistent allow-scripts (#​9913) (@​Fnine59)
• d6c6122 #​9914 arborist: match allowScripts keys for local paths (#​9914) (@​martinrrm, @​Copilot)
• a8c9b2f #​9823 keep dry-run output valid json (#​9823) (@​martinrrm)
• da50c34 #​9881 arborist: reject uninstall args that carry a version (#​9881) (@​lazerg)
• 71915e8 #​9756 exempt explicit pack targets from allow-directory (#​9756) (@​ychampion, @​ychampion)
• 51c2bf8 #​9864 don't print the funding message for global installs (#​9864) (@​lazerg)

Documentation

• bea9066 #​9838 document npm 12 install script blocking (#​9838) (@​reggi)

Dependencies

• 6e40f73 #​9871 undici@6.28.0 (@​martinrrm, @​Copilot)
• 05bd2a4 #​9871 ip-address@10.5.0 (@​martinrrm, @​Copilot)
• b7c490d #​9871 brace-expansion@5.0.9 (@​martinrrm, @​Copilot)
• 75a943d #​9843 tar@7.5.22 (#​9843) (@​martinrrm, @​Copilot)

Chores

• 7b50811 #​9961 pack: select workspace through config (#​9961) (@​reggi)
• 81a901c #​9915 recognize prefixed Node.js PR titles (#​9915) (@​reggi)
• 4cdccea #​9836 update node-integration workflow template to latest actions (#​9836) (@​MikeMcC399)
• 278df04 #​9822 pass nodedir to node-gyp via npm_package_config env in node integration (#​9822) (@​reggi, @​Copilot)
• workspace: @npmcli/arborist@10.0.3
• workspace: @npmcli/config@11.1.0
• workspace: libnpmdiff@9.0.3
• workspace: libnpmexec@11.0.3
• workspace: libnpmfund@8.0.3
• workspace: libnpmpack@10.0.3
• workspace: libnpmpublish@12.0.1

v12.0.2

Compare Source

Bug Fixes

• 834408e #​9760 pack: honor min-release-age-exclude (#​9760) (@​martinrrm, @​Copilot)
• ef6cfea #​9786 owner: use scoped registry for user lookup (#​9786) (@​martinrrm, @​Copilot)

Documentation

• 9e17dc0 #​9805 clarify npm 12 unknown-config breaking change in changelogs (#​9805) (@​Hashim1999164)

Chores

• 7b1f6c1 #​9747 parse pack --json object output in node integration (#​9747) (@​reggi, @​Copilot)

Dependencies

• workspace: @npmcli/arborist@10.0.2
• workspace: @npmcli/config@11.0.1
• workspace: libnpmdiff@9.0.2
• workspace: libnpmexec@11.0.2
• workspace: libnpmfund@8.0.2
• workspace: libnpmpack@10.0.2

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: zold@0.0.0
npm warn Found: eslint@9.39.5
npm warn node_modules/eslint
npm warn   dev eslint@"^10.0.0" from the root project
npm warn   12 more (@eslint-community/eslint-utils, eslint-compat-utils, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer eslint@"^2 || ^3 || ^4 || ^5 || ^6 || ^7.2.0 || ^8 || ^9" from eslint-plugin-import@2.32.0
npm warn node_modules/eslint-plugin-import
npm warn   dev eslint-plugin-import@"^2.16.0" from the root project
npm warn   1 more (eslint-config-standard)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: zold@0.0.0
npm warn Found: eslint@9.39.5
npm warn node_modules/eslint
npm warn   dev eslint@"^10.0.0" from the root project
npm warn   12 more (@eslint-community/eslint-utils, eslint-compat-utils, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer eslint@"^2 || ^3 || ^4 || ^5 || ^6 || ^7.2.0 || ^8 || ^9" from eslint-plugin-import@2.32.0
npm warn node_modules/eslint-plugin-import
npm warn   dev eslint-plugin-import@"^2.16.0" from the root project
npm warn   1 more (eslint-config-standard)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: zold@0.0.0
npm warn Found: eslint@9.39.5
npm warn node_modules/eslint
npm warn   dev eslint@"^10.0.0" from the root project
npm warn   12 more (@eslint-community/eslint-utils, eslint-compat-utils, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer eslint@"^7.0.0 || ^8.0.0 || ^9.0.0" from eslint-plugin-promise@7.2.1
npm warn node_modules/eslint-plugin-promise
npm warn   dev eslint-plugin-promise@"^7.0.0" from the root project
npm warn   1 more (eslint-config-standard)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: zold@0.0.0
npm warn Found: eslint@9.39.5
npm warn node_modules/eslint
npm warn   dev eslint@"^10.0.0" from the root project
npm warn   12 more (@eslint-community/eslint-utils, eslint-compat-utils, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer eslint@"^7.0.0 || ^8.0.0 || ^9.0.0" from eslint-plugin-promise@7.2.1
npm warn node_modules/eslint-plugin-promise
npm warn   dev eslint-plugin-promise@"^7.0.0" from the root project
npm warn   1 more (eslint-config-standard)
npm warn ERESOLVE overriding peer dependency
npm warn While resolving: zold@0.0.0
npm warn Found: eslint@9.39.5
npm warn node_modules/eslint
npm warn   dev eslint@"^10.0.0" from the root project
npm warn   12 more (@eslint-community/eslint-utils, eslint-compat-utils, ...)
npm warn
npm warn Could not resolve dependency:
npm warn peer eslint@"^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9.7" from eslint-plugin-react@7.37.5
npm warn node_modules/eslint-plugin-react
npm warn   dev eslint-plugin-react@"^7.12.4" from the root project
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/npm/-/npm-12.2.0.tgz"
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-10-01T08_46_27_850Z-debug-0.log

[yegor256]

@rultor please, try to merge, since 11 checks have passed

[rultor]

@rultor please, try to merge, since 11 checks have passed

@yegor256 OK, I'll try to merge now. You can check the progress of the merge here.

[rultor]

@rultor please, try to merge, since 11 checks have passed

@yegor256 Done! FYI, the full log is here (took me 2min).