11.0.0-pre.0.0 (2026-05-20)
⚠️ BREAKING CHANGES
npm shrinkwrapis removed, theshrinkwrapconfig alias is removed, andnpm-shrinkwrap.jsonis no longer loaded or honored at the project root or from inside dependency tarballs. Rename project-rootnpm-shrinkwrap.jsontopackage-lock.json; usebundleDependenciesif you need to ship a locked dependency tree.
Features
916cb4b#9287 add allow-directory, allow-file, and allow-remote (#9287) (@wraithgar)2e5dcad#9262 drop npm-shrinkwrap.json support (@owlstronaut)
Bug Fixes
18ebb0f#9368 min-release-age=0 doesn't filter, honor cross-source precedence (@owlstronaut)ca585c8#9368 allow min-release-age in npmrc to coexist with --before (@raazkhnl)6628d05#9285 config: preserve min-release-age after flattening (@lawrence3699)