From 2194a1fa3275de218db4fca18b86f091b3262508 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 6 Jul 2026 22:30:33 +0000
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20Update=20dependency=20npm-?=
=?UTF-8?q?packlist=20to=20v11=20(#7001)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [npm-packlist](https://redirect.github.com/npm/npm-packlist) |
[`^10.0.0` →
`^11.0.0`](https://renovatebot.com/diffs/npm/npm-packlist/10.0.4/11.3.0)
|

|

|
---
### Release Notes
npm/npm-packlist (npm-packlist)
###
[`v11.3.0`](https://redirect.github.com/npm/npm-packlist/blob/HEAD/CHANGELOG.md#1130-2026-06-22)
[Compare
Source](https://redirect.github.com/npm/npm-packlist/compare/v11.2.0...v11.3.0)
##### Features
-
[`ec0f6c4`](https://redirect.github.com/npm/npm-packlist/commit/ec0f6c476144e1b774aa5198936321878e51f9dd)
[#294](https://redirect.github.com/npm/npm-packlist/pull/294)
exclude root `.npm-extension.mjs`/`.cjs` from package tarballs
([#294](https://redirect.github.com/npm/npm-packlist/issues/294))
([@manzoorwanijk](https://redirect.github.com/manzoorwanijk))
##### Chores
-
[`d5ab08c`](https://redirect.github.com/npm/npm-packlist/commit/d5ab08cfaf3ff87be26c2def239c55e6207825cd)
[#293](https://redirect.github.com/npm/npm-packlist/pull/293)
bump
[@npmcli/template-oss](https://redirect.github.com/npmcli/template-oss)
from 5.1.0 to 5.1.1
([#293](https://redirect.github.com/npm/npm-packlist/issues/293))
([@dependabot](https://redirect.github.com/dependabot)\[bot],
[@npm-cli-bot](https://redirect.github.com/npm-cli-bot))
###
[`v11.2.0`](https://redirect.github.com/npm/npm-packlist/blob/HEAD/CHANGELOG.md#1120-2026-06-05)
[Compare
Source](https://redirect.github.com/npm/npm-packlist/compare/v11.1.0...v11.2.0)
##### Features
-
[`7e2513d`](https://redirect.github.com/npm/npm-packlist/commit/7e2513d077519476e282ed1b0f9203e5f08a7554)
[#291](https://redirect.github.com/npm/npm-packlist/pull/291)
exclude patchedDependencies patch files from the package tarball
([#291](https://redirect.github.com/npm/npm-packlist/issues/291))
([@manzoorwanijk](https://redirect.github.com/manzoorwanijk))
###
[`v11.1.0`](https://redirect.github.com/npm/npm-packlist/blob/HEAD/CHANGELOG.md#1110-2026-05-22)
[Compare
Source](https://redirect.github.com/npm/npm-packlist/compare/v11.0.0...v11.1.0)
##### Features
-
[`1369ec3`](https://redirect.github.com/npm/npm-packlist/commit/1369ec372bdef50e88ba055516fbd5c4cfb7ab83)
[#287](https://redirect.github.com/npm/npm-packlist/pull/287)
support a user level ignore file via globalIgnoreFile
([#287](https://redirect.github.com/npm/npm-packlist/issues/287))
([@ljharb](https://redirect.github.com/ljharb))
##### Chores
-
[`e1f3d11`](https://redirect.github.com/npm/npm-packlist/commit/e1f3d11c35cdf1948fe2f60205041b4f34f6ca32)
[#289](https://redirect.github.com/npm/npm-packlist/pull/289)
bump
[@npmcli/eslint-config](https://redirect.github.com/npmcli/eslint-config)
from 6.0.1 to 7.0.0
([#289](https://redirect.github.com/npm/npm-packlist/issues/289))
([@dependabot](https://redirect.github.com/dependabot)\[bot])
###
[`v11.0.0`](https://redirect.github.com/npm/npm-packlist/blob/HEAD/CHANGELOG.md#1100-2026-05-15)
[Compare
Source](https://redirect.github.com/npm/npm-packlist/compare/v10.0.4...v11.0.0)
##### ⚠️ BREAKING CHANGES
- `npm-packlist` now supports node `^22.22.2 || ^24.15.0 || >=26.0.0`
- template-oss-apply
- Entries in `files[]` are now interpreted as glob patterns anchored to
the package root, with no special-case overrides. Slashless negations
like `!readme.md` only match at the root — use `!**/readme.md` to remove
at every depth. An exact file path in `files[]` no longer overrides a
nested `.npmignore` rule that excludes it; remove the rule from
`.npmignore` if you need such a file to ship. Listing a default-ignored
file (e.g. `.npmignore`, `.npmrc`) in `files[]` no longer forces it to
be packed.
- `npm-shrinkwrap.json` is no longer included in published tarballs by
default. Publishers who need to ship a locked dependency tree should use
`bundleDependencies`; publishers with a legitimate reason to include a
file literally named `npm-shrinkwrap.json` can still opt back in with a
negated `files` entry.
- bun.lock is now excluded from package contents by default. If you need
to include it, add "bun.lock" to the "files" array in your package.json.
##### Features
-
[`da9502e`](https://redirect.github.com/npm/npm-packlist/commit/da9502e78bfeec87a561ae2cef97791932d5f45b)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
bump to new node engine range
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`943b8ec`](https://redirect.github.com/npm/npm-packlist/commit/943b8ec16c635531211b2a5a8c96fb3054db83c7)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
template-oss-apply
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`2ec1c00`](https://redirect.github.com/npm/npm-packlist/commit/2ec1c00ea3556669dc90cf1e202a14d6dd3d1c3b)
[#281](https://redirect.github.com/npm/npm-packlist/pull/281)
exclude npm-shrinkwrap.json from package contents
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`59a8d0f`](https://redirect.github.com/npm/npm-packlist/commit/59a8d0f9375fc5a5ed0f81c54e059c5212fa91d2)
[#279](https://redirect.github.com/npm/npm-packlist/pull/279)
exclude bun.lock from package contents
([@owlstronaut](https://redirect.github.com/owlstronaut))
##### Bug Fixes
-
[`8e8d6ee`](https://redirect.github.com/npm/npm-packlist/commit/8e8d6eea4faa0171a6f08e1feb838dcd905cb049)
[#282](https://redirect.github.com/npm/npm-packlist/pull/282) use
real glob semantics for `package.json` files array
([@owlstronaut](https://redirect.github.com/owlstronaut))
##### Dependencies
-
[`cda441f`](https://redirect.github.com/npm/npm-packlist/commit/cda441f28d1823b328ef287b0c7303908acad8dd)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
`proc-log@7.0.0`
-
[`356d0b6`](https://redirect.github.com/npm/npm-packlist/commit/356d0b61d21c28c2011f26a9af7b0e4207ec9212)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
`ignore-walk@9.0.0`
##### Chores
-
[`e768b3a`](https://redirect.github.com/npm/npm-packlist/commit/e768b3aa73de00c53ffbea8a857595eaeed0f366)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
template-oss-apply
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`b1c2c16`](https://redirect.github.com/npm/npm-packlist/commit/b1c2c16b54d27978743591c55be01e1d1b041ea1)
[#286](https://redirect.github.com/npm/npm-packlist/pull/286)
bumping
[@npmcli/template-oss](https://redirect.github.com/npmcli/template-oss)
from 4.30.0 to 5.1.0
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`13f4e2b`](https://redirect.github.com/npm/npm-packlist/commit/13f4e2b2ef524545d2dee17ac5960c3c45f66a27)
[#279](https://redirect.github.com/npm/npm-packlist/pull/279)
template-oss-apply
([@owlstronaut](https://redirect.github.com/owlstronaut))
-
[`261224f`](https://redirect.github.com/npm/npm-packlist/commit/261224fe7b4eaa4bfb2350247ccd265ed2bce57a)
[#278](https://redirect.github.com/npm/npm-packlist/pull/278)
bump
[@npmcli/template-oss](https://redirect.github.com/npmcli/template-oss)
from 4.29.0 to 4.30.0
([#278](https://redirect.github.com/npm/npm-packlist/issues/278))
([@dependabot](https://redirect.github.com/dependabot)\[bot],
[@npm-cli-bot](https://redirect.github.com/npm-cli-bot))
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/dubzzz/fast-check).
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Nicolas DUBIEN
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
---
.changeset/wicked-shirts-shop.md | 5 +++++
packages/packaged/package.json | 2 +-
pnpm-lock.yaml | 28 ++++++++++++++++++++++++++--
3 files changed, 32 insertions(+), 3 deletions(-)
create mode 100644 .changeset/wicked-shirts-shop.md
diff --git a/.changeset/wicked-shirts-shop.md b/.changeset/wicked-shirts-shop.md
new file mode 100644
index 00000000..abb3feb1
--- /dev/null
+++ b/.changeset/wicked-shirts-shop.md
@@ -0,0 +1,5 @@
+---
+"@fast-check/packaged": patch
+---
+
+⬆️ Update dependency npm-packlist to v11
diff --git a/packages/packaged/package.json b/packages/packaged/package.json
index e2c3453b..851915f6 100644
--- a/packages/packaged/package.json
+++ b/packages/packaged/package.json
@@ -34,7 +34,7 @@
},
"dependencies": {
"@npmcli/arborist": "^9.0.0",
- "npm-packlist": "^10.0.0"
+ "npm-packlist": "^10.0.0 || ^11.0.0"
},
"devDependencies": {
"@types/npm-packlist": "^7.0.3",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 6577524b..3953f05e 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -422,8 +422,8 @@ importers:
specifier: ^9.0.0
version: 9.8.0
npm-packlist:
- specifier: ^10.0.0
- version: 10.0.4
+ specifier: ^10.0.0 || ^11.0.0
+ version: 11.3.0
devDependencies:
'@types/npm-packlist':
specifier: ^7.0.3
@@ -6005,6 +6005,10 @@ packages:
resolution: {integrity: sha512-FCeMZT4NiRQGh+YkeKMtWrOmBgWjHjMJ26WQWrRQyoyzqevdaGSakUaJW5xQYmjLlUVk2qUnCjYVBax9EKKg8A==}
engines: {node: ^20.17.0 || >=22.9.0}
+ ignore-walk@9.0.0:
+ resolution: {integrity: sha512-tCBEZV2z2FNpIDl2vrhiWzIHzs4qOAuIDEO85eS02vZ3L1U3P56qpPL8GuGGAijDktAEaq2swMkO/Fmbo7YmfQ==}
+ engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
+
ignore@5.3.2:
resolution: {integrity: sha512-hsBTNUqQTDwkWtcdYI2i06Y/nUBEsNEDJKjWdigLvegy8kDuJAS8uRlpkkcQpyEXL0Z/pjDy5HBmMjRCJ2gq+g==}
engines: {node: '>= 4'}
@@ -7331,6 +7335,10 @@ packages:
resolution: {integrity: sha512-uMW73iajD8hiH4ZBxEV3HC+eTnppIqwakjOYuvgddnalIw2lJguKviK1pcUJDlIWm1wSJkchpDZDSVVsZEYRng==}
engines: {node: ^20.17.0 || >=22.9.0}
+ npm-packlist@11.3.0:
+ resolution: {integrity: sha512-cS1yVkyriZgQAbiK8PtwhZHEtsFOsKHsCg5Ww2ONckAvXIspgqd6o4WirOzvkupU24iMRZ4xtO4kb2iK2rbnag==}
+ engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
+
npm-pick-manifest@11.0.3:
resolution: {integrity: sha512-buzyCfeoGY/PxKqmBqn1IUJrZnUi1VVJTdSSRPGI60tJdUhUoSQFhs0zycJokDdOznQentgrpf8LayEHyyYlqQ==}
engines: {node: ^20.17.0 || >=22.9.0}
@@ -8126,6 +8134,10 @@ packages:
resolution: {integrity: sha512-iG+GYldRf2BQ0UDUAd6JQ/RwzaQy6mXmsk/IzlYyal4A4SNFw54MeH4/tLkF4I5WoWG9SQwuqWzS99jaFQHBuQ==}
engines: {node: ^20.17.0 || >=22.9.0}
+ proc-log@7.0.0:
+ resolution: {integrity: sha512-FYgfaA69XZ93zaXLoMNQ+ViDXGGBgR8aLh03txzcFhV+9xOXx7+8DLCULrKKpR9+GsH9ZfHm82aSUPpozX0Ztg==}
+ engines: {node: ^22.22.2 || ^24.15.0 || >=26.0.0}
+
process-nextick-args@2.0.1:
resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
@@ -16863,6 +16875,10 @@ snapshots:
dependencies:
minimatch: 10.2.5
+ ignore-walk@9.0.0:
+ dependencies:
+ minimatch: 10.2.5
+
ignore@5.3.2: {}
ignore@7.0.5: {}
@@ -18630,6 +18646,12 @@ snapshots:
ignore-walk: 8.0.0
proc-log: 6.1.0
+ npm-packlist@11.3.0:
+ dependencies:
+ glob: 13.0.6
+ ignore-walk: 9.0.0
+ proc-log: 7.0.0
+
npm-pick-manifest@11.0.3:
dependencies:
npm-install-checks: 8.0.0
@@ -19493,6 +19515,8 @@ snapshots:
proc-log@6.1.0: {}
+ proc-log@7.0.0: {}
+
process-nextick-args@2.0.1: {}
proggy@4.0.0: {}
--
2.51.2