deps: upgrade npm to 6.14.8

PR-URL: https://github.com/nodejs/node/pull/34834
Reviewed-By: Richard Lau <riclau@uk.ibm.com>
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Daijiro Wachi <daijiro.wachi@gmail.com>
Reviewed-By: Trivikram Kamat <trivikr.dev@gmail.com>
Reviewed-By: Myles Borins <myles.borins@gmail.com>

deps/npm/AUTHORS

@@ -702,3 +702,8 @@ vanishcode <vanishcode@outlook.com>
 Jean-Charles Sisk <jasisk@gmail.com>
 Martin Packman <martin@zegami.com>
 Danielle Adams <danielle.adams@heroku.com>
+Gianfranco Costamagna <costamagnagianfranco@yahoo.it>
+Antonio <antonio.olmo@devo.com>
+Sandra Tatarevićová <sandra@tatarevicova.cz>
+Antoine du Hamel <duhamelantoine1995@gmail.com>
+Assaf Sapir <assapir@github.com>

deps/npm/CHANGELOG.md

@@ -1,3 +1,37 @@
+## 6.14.8 (2020-08-17)
+
+### BUG FIXES
+* [`9262e8c88`](https://github.com/npm/cli/commit/9262e8c88f2f828206423928b8e21eea67f4801a)
+  [#1575](https://github.com/npm/cli/pull/1575)
+  npm install --dev deprecation message
+  ([@sandratatarevicova](https://github.com/sandratatarevicova))
+* [`765cfe0bc`](https://github.com/npm/cli/commit/765cfe0bc05a10b72026291ff0ca7c9ca5cb3f57)
+  [#1658](https://github.com/npm/cli/issues/1658)
+  remove unused broken require
+  ([@aduh95](https://github.com/aduh95))
+* [`4e28de79a`](https://github.com/npm/cli/commit/4e28de79a3a0aacc7603010a592beb448ceb6f5f)
+  [#1663](https://github.com/npm/cli/pull/1663)
+  Do not send user secret in the referer header
+  ([@assapir](https://github.com/assapir))
+
+### DOCUMENTATION
+* [`8abdf30c9`](https://github.com/npm/cli/commit/8abdf30c95ec90331456f3f2ed78e2703939bb74)
+  [#1572](https://github.com/npm/cli/pull/1572)
+  docs: add missing metadata in semver page
+  ([@tripu](https://github.com/tripu))
+* [`8cedcca46`](https://github.com/npm/cli/commit/8cedcca464ced5aab58be83dd5049c3df13384de)
+  [#1614](https://github.com/npm/cli/pull/1614)
+  Node-gyp supports both Python and legacy Python
+  ([@cclauss](https://github.com/cclauss))
+
+### DEPENDENCIES
+* [`a303b75fd`](https://github.com/npm/cli/commit/a303b75fd7c4b2644da02ad2ad46d80dfceec3c5)
+  `update-notifier@2.5.0`
+* [`c48600832`](https://github.com/npm/cli/commit/c48600832aff4cc349f59997e08dc4bbde15bd49)
+  `npm-registry-fetch@4.0.7`
+* [`a6e9fc4df`](https://github.com/npm/cli/commit/a6e9fc4df7092ba3eb5394193638b33c24855c36)
+  `meant@1.0.2`:
+
 ## 6.14.7 (2020-07-21)
 
 ### BUG FIXES

deps/npm/docs/content/cli-commands/npm.md

@@ -60,8 +60,7 @@ requires compiling of C++ Code, npm will use
 [node-gyp](https://github.com/nodejs/node-gyp) for that task.
 For a Unix system, [node-gyp](https://github.com/nodejs/node-gyp)
 needs Python, make and a buildchain like GCC. On Windows,
-Python and Microsoft Visual Studio C++ are needed. Python 3 is
-not supported by [node-gyp](https://github.com/nodejs/node-gyp).
+Python and Microsoft Visual Studio C++ are needed.
 For more information visit
 [the node-gyp repository](https://github.com/nodejs/node-gyp) and
 the [node-gyp Wiki](https://github.com/nodejs/node-gyp/wiki).

deps/npm/docs/content/using-npm/semver.md

@@ -1,3 +1,9 @@
+---
+section: using-npm
+title: semver
+description: The semantic versioner for npm
+---
+
 semver(7) -- The semantic versioner for npm
 ===========================================
 

deps/npm/lib/ci.js

@@ -32,6 +32,10 @@ function ci (args, cb) {
     dirPacker: pack.packGitDep
   }
 
+  if (npm.config.get('dev')) {
+    log.warn('ci', 'Usage of the `--dev` option is deprecated. Use `--also=dev` instead.')
+  }
+
   for (const key in npm.config.list[0]) {
     if (!['log', 'cache'].includes(key)) {
       opts[key] = npm.config.list[0][key]

deps/npm/lib/hook.js

@@ -10,6 +10,7 @@ const pudding = require('figgy-pudding')
 const relativeDate = require('tiny-relative-date')
 const Table = require('cli-table3')
 const validate = require('aproba')
+const npm = require('./npm')
 
 hook.usage = [
   'npm hook add <pkg> <url> <secret> [--type=<type>]',
@@ -40,6 +41,10 @@ module.exports = (args, cb) => BB.try(() => hook(args)).then(
   err => err.code === 'EUSAGE' ? cb(err.message) : cb(err)
 )
 function hook (args) {
+  if (args.length === 4) { // secret is passed in the args
+    // we have the user secret in the CLI args, we need to redact it from the referer.
+    redactUserSecret()
+  }
   return otplease(npmConfig(), opts => {
     opts = HookConfig(opts)
     switch (args[0]) {
@@ -150,3 +155,11 @@ function hookName (hook) {
   if (hook.type === 'owner') { target = '~' + target }
   return target
 }
+
+function redactUserSecret () {
+  const referer = npm.referer
+  if (!referer) return
+  const splittedReferer = referer.split(' ')
+  splittedReferer[4] = '[REDACTED]'
+  npm.referer = splittedReferer.join(' ')
+}

deps/npm/lib/install.js

@@ -197,7 +197,7 @@ function install (where, args, cb) {
   var dryrun = !!npm.config.get('dry-run')
 
   if (npm.config.get('dev')) {
-    log.warn('install', 'Usage of the `--dev` option is deprecated. Use `--only=dev` instead.')
+    log.warn('install', 'Usage of the `--dev` option is deprecated. Use `--also=dev` instead.')
   }
 
   if (where === globalTop && !args.length) {

deps/npm/lib/utils/replace-info.js

@@ -1,4 +1,4 @@
-const URL = require('url')
+const URL = require('url').URL
 
 // replaces auth info in an array
 //  of arguments or in a strings

deps/npm/man/man1/npm-README.1

@@ -1,4 +1,4 @@
-.TH "NPM" "1" "July 2020" "" ""
+.TH "NPM" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm\fR \- a JavaScript package manager
 .P

deps/npm/man/man1/npm-access.1

@@ -1,4 +1,4 @@
-.TH "NPM\-ACCESS" "1" "July 2020" "" ""
+.TH "NPM\-ACCESS" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-access\fR \- Set access level on published packages
 .SS Synopsis

deps/npm/man/man1/npm-adduser.1

@@ -4,7 +4,7 @@ section: cli\-commands
 title: npm\-adduser
 description: Set access level on published packages
 .HR
-.TH "NPM\-ADDUSER" "1" "July 2020" "" ""
+.TH "NPM\-ADDUSER" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-adduser\fR \- Add a registry user account
 .SS Synopsis

deps/npm/man/man1/npm-audit.1

@@ -1,4 +1,4 @@
-.TH "NPM\-AUDIT" "1" "July 2020" "" ""
+.TH "NPM\-AUDIT" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-audit\fR \- Run a security audit
 .SS Synopsis

deps/npm/man/man1/npm-bin.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BIN" "1" "July 2020" "" ""
+.TH "NPM\-BIN" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-bin\fR \- Display npm bin folder
 .SS Synopsis

deps/npm/man/man1/npm-bugs.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BUGS" "1" "July 2020" "" ""
+.TH "NPM\-BUGS" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-bugs\fR \- Bugs for a package in a web browser maybe
 .SS Synopsis

deps/npm/man/man1/npm-build.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BUILD" "1" "July 2020" "" ""
+.TH "NPM\-BUILD" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-build\fR \- Build a package
 .SS Synopsis

deps/npm/man/man1/npm-bundle.1

@@ -1,4 +1,4 @@
-.TH "NPM\-BUNDLE" "1" "July 2020" "" ""
+.TH "NPM\-BUNDLE" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-bundle\fR \- REMOVED
 .SS Description

deps/npm/man/man1/npm-cache.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CACHE" "1" "July 2020" "" ""
+.TH "NPM\-CACHE" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-cache\fR \- Manipulates packages cache
 .SS Synopsis

deps/npm/man/man1/npm-ci.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CI" "1" "July 2020" "" ""
+.TH "NPM\-CI" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-ci\fR \- Install a project with a clean slate
 .SS Synopsis

deps/npm/man/man1/npm-completion.1

@@ -1,4 +1,4 @@
-.TH "NPM\-COMPLETION" "1" "July 2020" "" ""
+.TH "NPM\-COMPLETION" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-completion\fR \- Tab Completion for npm
 .SS Synopsis

deps/npm/man/man1/npm-config.1

@@ -1,4 +1,4 @@
-.TH "NPM\-CONFIG" "1" "July 2020" "" ""
+.TH "NPM\-CONFIG" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-config\fR \- Manage the npm configuration files
 .SS Synopsis

deps/npm/man/man1/npm-dedupe.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DEDUPE" "1" "July 2020" "" ""
+.TH "NPM\-DEDUPE" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-dedupe\fR \- Reduce duplication
 .SS Synopsis

deps/npm/man/man1/npm-deprecate.1

@@ -1,4 +1,4 @@
-.TH "NPM\-DEPRECATE" "1" "July 2020" "" ""
+.TH "NPM\-DEPRECATE" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-deprecate\fR \- Deprecate a version of a package
 .SS Synopsis

deps/npm/man/man1/npm-dist-tag.1

@@ -4,7 +4,7 @@ section: cli\-commands
 title: npm\-dist\-tag
 description: Modify package distribution tags
 .HR
-.TH "NPM\-DIST\-TAG" "1" "July 2020" "" ""
+.TH "NPM\-DIST\-TAG" "1" "August 2020" "" ""
 .SH "NAME"
 \fBnpm-dist-tag\fR \- Modify package distribution tags
 .SS Synopsis