arborist: v9.6.0

9.6.0 (2026-05-20)

Features

• 8df10f5 #9339 add allow-git/allow-file/allow-directory/allow-remote configs (@owlstronaut)

Bug Fixes

• d7e195a #9362 arborist: skip lockfile entries for optional deps with incomplete manifests (#9362) (@github-actions[bot], @ecanturk, @owlstronaut)
• 9c78f2a #9361 arborist: only forward Link overrides when a rule names a target dep (@manzoorwanijk)
• 468550f #9339 refactor #failureNode, adjust tests and safety (@owlstronaut)
• cabe249 #9339 allow-remote=none does not block registry tarballs (@owlstronaut)
• 2169018 #9340 arborist: skip extraneous fsChildren in linked-strategy reify (@manzoorwanijk)
• 1d0395e #9338 arborist: prune removed-workspace entries from package-lock.json (@manzoorwanijk)

Chores

• 6a2bdbc #9350 change test wording to not collide with tap (#9350) (@github-actions[bot], @owlstronaut)