chore: @npmcli/template-oss@3.3.1 (#4692)

25 files changed, 374 insertions, 26 deletions

diff --git a/.github/workflows/ci-docs.yml b/.github/workflows/ci-docs.yml
index 68c3b649e..43fa240ec 100644
--- a/.github/workflows/ci-docs.yml
+++ b/.github/workflows/ci-docs.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w docs
 
   test:
@@ -81,5 +81,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w docs
diff --git a/.github/workflows/ci-libnpmaccess.yml b/.github/workflows/ci-libnpmaccess.yml
index 43f0765ff..ca1eb19ae 100644
--- a/.github/workflows/ci-libnpmaccess.yml
+++ b/.github/workflows/ci-libnpmaccess.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmaccess
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmaccess
diff --git a/.github/workflows/ci-libnpmdiff.yml b/.github/workflows/ci-libnpmdiff.yml
index f8c01d5d5..856b8d957 100644
--- a/.github/workflows/ci-libnpmdiff.yml
+++ b/.github/workflows/ci-libnpmdiff.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmdiff
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmdiff
diff --git a/.github/workflows/ci-libnpmexec.yml b/.github/workflows/ci-libnpmexec.yml
index 5674b4d7d..8c30d0534 100644
--- a/.github/workflows/ci-libnpmexec.yml
+++ b/.github/workflows/ci-libnpmexec.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmexec
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmexec
diff --git a/.github/workflows/ci-libnpmfund.yml b/.github/workflows/ci-libnpmfund.yml
index 7a4fdd921..337db5b8b 100644
--- a/.github/workflows/ci-libnpmfund.yml
+++ b/.github/workflows/ci-libnpmfund.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmfund
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmfund
diff --git a/.github/workflows/ci-libnpmhook.yml b/.github/workflows/ci-libnpmhook.yml
index e6281e7fd..3ccceb99f 100644
--- a/.github/workflows/ci-libnpmhook.yml
+++ b/.github/workflows/ci-libnpmhook.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmhook
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmhook
diff --git a/.github/workflows/ci-libnpmorg.yml b/.github/workflows/ci-libnpmorg.yml
index 5737035bc..2f9ba90a3 100644
--- a/.github/workflows/ci-libnpmorg.yml
+++ b/.github/workflows/ci-libnpmorg.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmorg
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmorg
diff --git a/.github/workflows/ci-libnpmpack.yml b/.github/workflows/ci-libnpmpack.yml
index b6cb5ea4a..146950c4f 100644
--- a/.github/workflows/ci-libnpmpack.yml
+++ b/.github/workflows/ci-libnpmpack.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmpack
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmpack
diff --git a/.github/workflows/ci-libnpmpublish.yml b/.github/workflows/ci-libnpmpublish.yml
index b9c150d49..16d693c96 100644
--- a/.github/workflows/ci-libnpmpublish.yml
+++ b/.github/workflows/ci-libnpmpublish.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmpublish
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmpublish
diff --git a/.github/workflows/ci-libnpmsearch.yml b/.github/workflows/ci-libnpmsearch.yml
index d9ddc0e17..93f2a0caa 100644
--- a/.github/workflows/ci-libnpmsearch.yml
+++ b/.github/workflows/ci-libnpmsearch.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmsearch
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmsearch
diff --git a/.github/workflows/ci-libnpmteam.yml b/.github/workflows/ci-libnpmteam.yml
index 24519315f..baaf78ce8 100644
--- a/.github/workflows/ci-libnpmteam.yml
+++ b/.github/workflows/ci-libnpmteam.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmteam
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmteam
diff --git a/.github/workflows/ci-libnpmversion.yml b/.github/workflows/ci-libnpmversion.yml
index 193b8d5ce..3b24bf420 100644
--- a/.github/workflows/ci-libnpmversion.yml
+++ b/.github/workflows/ci-libnpmversion.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w libnpmversion
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w libnpmversion
diff --git a/.github/workflows/ci-npmcli-arborist.yml b/.github/workflows/ci-npmcli-arborist.yml
index 32978d92f..999845096 100644
--- a/.github/workflows/ci-npmcli-arborist.yml
+++ b/.github/workflows/ci-npmcli-arborist.yml
@@ -34,7 +34,7 @@ jobs:
       - name: Update npm to latest
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm run lint -w @npmcli/arborist
 
   test:
@@ -86,5 +86,5 @@ jobs:
         if: ${{ !startsWith(matrix.node-version, '10.') }}
         run: npm i --prefer-online --no-fund --no-audit -g npm@latest
       - run: npm -v
-      - run: npm i --ignore-scripts
+      - run: npm i --ignore-scripts --no-audit --no-fund
       - run: npm test --ignore-scripts -w @npmcli/arborist
diff --git a/.github/workflows/release-please-libnpmaccess.yml b/.github/workflows/release-please-libnpmaccess.yml
index ae798bcb8..1908fa7c4 100644
--- a/.github/workflows/release-please-libnpmaccess.yml
+++ b/.github/workflows/release-please-libnpmaccess.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmaccess
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmaccess"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmaccess@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmdiff.yml b/.github/workflows/release-please-libnpmdiff.yml
index 4f9a0673a..f7010ec74 100644
--- a/.github/workflows/release-please-libnpmdiff.yml
+++ b/.github/workflows/release-please-libnpmdiff.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmdiff
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmdiff"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmdiff@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmexec.yml b/.github/workflows/release-please-libnpmexec.yml
index 7beb1148a..8a2bed73d 100644
--- a/.github/workflows/release-please-libnpmexec.yml
+++ b/.github/workflows/release-please-libnpmexec.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmexec
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmexec"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmexec@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmfund.yml b/.github/workflows/release-please-libnpmfund.yml
index c89a94ecf..f95b412f3 100644
--- a/.github/workflows/release-please-libnpmfund.yml
+++ b/.github/workflows/release-please-libnpmfund.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmfund
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmfund"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmfund@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmhook.yml b/.github/workflows/release-please-libnpmhook.yml
index a5863b1cf..784dd09da 100644
--- a/.github/workflows/release-please-libnpmhook.yml
+++ b/.github/workflows/release-please-libnpmhook.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmhook
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmhook"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmhook@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmorg.yml b/.github/workflows/release-please-libnpmorg.yml
index 9352c64e2..fdb720767 100644
--- a/.github/workflows/release-please-libnpmorg.yml
+++ b/.github/workflows/release-please-libnpmorg.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmorg
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmorg"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmorg@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmpack.yml b/.github/workflows/release-please-libnpmpack.yml
index 669bc7162..01391d5d5 100644
--- a/.github/workflows/release-please-libnpmpack.yml
+++ b/.github/workflows/release-please-libnpmpack.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmpack
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmpack"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmpack@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmpublish.yml b/.github/workflows/release-please-libnpmpublish.yml
index 82b4ad0e2..bda57ecab 100644
--- a/.github/workflows/release-please-libnpmpublish.yml
+++ b/.github/workflows/release-please-libnpmpublish.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmpublish
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmpublish"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmpublish@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmsearch.yml b/.github/workflows/release-please-libnpmsearch.yml
index 9c22260a9..ede82a359 100644
--- a/.github/workflows/release-please-libnpmsearch.yml
+++ b/.github/workflows/release-please-libnpmsearch.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmsearch
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmsearch"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmsearch@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmteam.yml b/.github/workflows/release-please-libnpmteam.yml
index 5437a9e2c..fb2122af6 100644
--- a/.github/workflows/release-please-libnpmteam.yml
+++ b/.github/workflows/release-please-libnpmteam.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmteam
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmteam"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmteam@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-libnpmversion.yml b/.github/workflows/release-please-libnpmversion.yml
index 322568707..c69dbf787 100644
--- a/.github/workflows/release-please-libnpmversion.yml
+++ b/.github/workflows/release-please-libnpmversion.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/libnpmversion
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "libnpmversion"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: libnpmversion@${title##* }"
+          git push
diff --git a/.github/workflows/release-please-npmcli-arborist.yml b/.github/workflows/release-please-npmcli-arborist.yml
index 651ea71b2..10c91c9e5 100644
--- a/.github/workflows/release-please-npmcli-arborist.yml
+++ b/.github/workflows/release-please-npmcli-arborist.yml
@@ -10,6 +10,9 @@ on:
       - main
       - latest
 
+permissions:
+  contents: write
+
 jobs:
   release-please:
     runs-on: ubuntu-latest
@@ -20,6 +23,9 @@ jobs:
           release-type: node
           monorepo-tags: true
           path: workspaces/arborist
+          # name can be removed after this is merged
+          # https://github.com/google-github-actions/release-please-action/pull/459
+          package-name: "@npmcli/arborist"
           changelog-types: >
             [
               {"type":"feat","section":"Features","hidden":false},
@@ -28,3 +34,26 @@ jobs:
               {"type":"deps","section":"Dependencies","hidden":false},
               {"type":"chore","hidden":true}
             ]
+      - uses: actions/checkout@v3
+      - name: Setup git user
+        run: |
+          git config --global user.email "ops+npm-cli@npmjs.com"
+          git config --global user.name "npm cli ops bot"
+      - uses: actions/setup-node@v3
+        with:
+          node-version: 16.x
+      - name: Update npm to latest
+        run: npm i --prefer-online --no-fund --no-audit -g npm@latest
+      - run: npm -v
+      - name: Update package-lock.json and commit
+        if: steps.release.outputs.pr
+        env:
+          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        run: |
+          gh pr checkout ${{ fromJSON(steps.release.outputs.pr).number }}
+          npm run resetdeps
+          title="${{ fromJSON(steps.release.outputs.pr).title }}"
+          # get the version from the pr title
+          # get everything after the last space
+          git commit -am "deps: @npmcli/arborist@${title##* }"
+          git push