[Snyk] Security upgrade @npmcli/arborist from 1.0.14 to 2.8.2

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • deps/npm/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	711/1000 Why? Recently disclosed, Has a fix available, CVSS 8.5	Arbitrary File Write SNYK-JS-NPMCLIARBORIST-1579165	Yes	No Known Exploit
	666/1000 Why? Recently disclosed, Has a fix available, CVSS 7.6	Arbitrary File Write SNYK-JS-NPMCLIARBORIST-1579181	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: @npmcli/arborist

The new version differs by 250 commits.

• 80f5029 2.8.2
• 5eb639e chore: update deps
• 2a4525a fix: treat top-level global packages as "top" nodes
• b46cca1 fix: load global symlinks implicitly as file: deps
• 3f4d0ab reify: debug crash when extracting into symlink
• f2b0cee fix: node_modules must be a directory
• cddfe03 fix: make Node.children() a case-insensitive Map
• ec98d96 add CaseInsensitiveMap class
• 041a3c7 fix(reify): verify existing deps in nm are dirs
• d71023d 2.8.1
• 32cdebb fix(shrinkwrap): always set name on the root node, closes package-lock file changing based on local repository name npm/cli#2264
• 77e279a fix: move pathological nest fixing link to PlaceDep
• c5e1618 chore: debug less aggressively in CanPlaceDep
• ddf8f28 chore(package-lock): rebuild package-lock
• b7e3d35 2.8.0
• b119d9b buildIdealTree: add PlaceDep/CanPlaceDep classes
• e921277 test: add comments where we enforce debug checks
• 5a3e946 reify: add comment to transplant package._id check
• 9c53bb3 test: add comments to PlaceDep/CanPlaceDep helper functions
• 1761443 test: PlaceDep add test for force and legacyPeerDeps
• a3a2874 chore: fix lint errors when generating snapshots
• 1f5a213 ci: disable ARBORIST_DEBUG on most builds
• 76cfc87 test: normalize paths and improve tests on Windows
• c70b65c update dependencies

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic