unstale

npm / npm-packlist

npm-packlist

What changed in npm-packlist 4 to 11, from its official release notes, upgrade guides and advisories. Sources checked 2026-10-25.

12 breaking1 new APIs and options3 behavior and defaults2 fixes and other

See which of these apply to your code, ranked, in your agent:

npx @unstale/cli init

@unstale/cli 0.2.6 on npm

npm-packlist 118 changes

Breaking changes 5

  • Patch files referenced by patchedDependencies are excluded from the package tarball.

    11.2.0release notes

  • bun.lock is now excluded from package contents by default; add it to the package.json files array to include it.

    11.0.0release notes

  • npm-packlist now supports Node.js ^22.22.2 || ^24.15.0 || >=26.0.0.

    11.0.0release notes

  • npm-shrinkwrap.json is no longer included in published tarballs by default; use bundleDependencies to ship a locked dependency tree.

    11.0.0release notes

  • Entries are now root-anchored glob patterns with no special-case overrides; slashless negations match only at the root, and nested .npmignore exclusions and default-ignored files are no longer overridden.

    11.0.0release notes

New APIs and options 1

  • Supports a user-level ignore file via globalIgnoreFile, allowing users to specify ignore rules at the user level.

    11.1.0release notes

Behavior and default changes 2

  • Root .npm-extension.mjs and .cjs files are excluded from package tarballs.

    11.3.0release notes

  • Root .npm-extension.mjs and .cjs files are excluded from package tarballs.

    11.3.0release notes

npm-packlist 103 changes

Breaking changes 2

  • bun.lockb is now included in the strict ignorelist, affecting which files npm-packlist includes.

    10.0.0release notes

  • The supported Node.js versions are now ^20.17.0 || >=22.9.0.

    10.0.0release notes

Fixes and other changes 1

  • Warnings about gitignore fallback are now emitted only at the package root, not in subdirectories.

    10.0.4release notes

npm-packlist 91 changes

Breaking changes 1

  • The supported Node.js range is now ^18.17.0 || >=20.5.0, so developers must use a compatible Node.js version.

    9.0.0release notes

npm-packlist 81 changes

Behavior and default changes 1

  • The files array can now exclude non-root readme, license, licence, and copying files.

    8.0.0release notes

npm-packlist 62 changes

Breaking changes 2

  • The supported Node.js semver range is ^14.17.0 || ^16.13.0 || >=18.0.0.

    6.0.0release notes

  • When a files array is present, root .gitignore and .npmignore rules are ignored under the strict order of operations for applying ignore rules.

    6.0.0release notes

npm-packlist 51 changes

Breaking changes 1

  • Synchronous usage is no longer supported; developers must use the asynchronous interface.

    5.0.0release notes

npm-packlist 42 changes

Breaking changes 1

  • Support for node10 and non-LTS versions of node12 and node14 was dropped.

    4.0.0release notes

Fixes and other changes 1