[BUG] npm won't update to higher version of package allowed by constraints, preventing security patching about cli

[wraithgar]

npm has been my primary job for YEARS and it still took me 10 minutes to figure out. Don't feel bad. We all miss easy things every day.

[wraithgar]

netlify-cli ships with an npm-shrinkwrap.json file. You won't be able to change any of its subdependencies, they will have to publish a new version with an updated shrinkwrap.

More info on shrinkwraps can be found at: https://docs.npmjs.com/cli/v10/configuring-npm/npm-shrinkwrap-json

[G-Rath]

@wraithgar sorry about that - I knew as I reported this it'd be because of shrinkwrap because that was the only thing I hadn't checked, but was a bit burnt out and didn't think shrinkwarps were in use that much these days (this is actually I think the first time I've seen one in the wild) 😓