9.6.0 (2026-05-20)
Features
8df10f5#9339 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut)
Bug Fixes
d7e195a#9362 arborist: skip lockfile entries for optional deps with incomplete manifests (#9362) (@github-actions[bot], @ecanturk, @owlstronaut)9c78f2a#9361 arborist: only forward Link overrides when a rule names a target dep (@manzoorwanijk)468550f#9339 refactor #failureNode, adjust tests and safety (@owlstronaut)cabe249#9339 allow-remote=none does not block registry tarballs (@owlstronaut)2169018#9340 arborist: skip extraneous fsChildren in linked-strategy reify (@manzoorwanijk)1d0395e#9338 arborist: prune removed-workspace entries from package-lock.json (@manzoorwanijk)
Chores
6a2bdbc#9350 change test wording to not collide with tap (#9350) (@github-actions[bot], @owlstronaut)