chore: use packlist to write node_module ignores (#5363)

The gitignore file inside `node_modules/` is now an allow list built
from the output of `npm-packlist`. This means that the only dependencies
that get checked in to source control are those that will end up in the
packed tarball, with the exception of some files that we always ignore.

This also moves the dependencies required to build the docs workspace
from devDependencies to dependencies so they are available for making
the docs after pruning. Ignoring these from source control was the
reason that the change to how we build the gitignore file was necessary.

1 files changed, 323 insertions, 1 deletions

diff --git a/DEPENDENCIES.md b/DEPENDENCIES.md
index bdee9cd46..52525aa03 100644
--- a/DEPENDENCIES.md
+++ b/DEPENDENCIES.md
@@ -111,6 +111,7 @@ graph LR;
   npm-->npm-audit-report;
   npm-->npm-install-checks;
   npm-->npm-package-arg;
+  npm-->npm-packlist;
   npm-->npm-pick-manifest;
   npm-->npm-profile;
   npm-->npm-registry-fetch;
@@ -120,6 +121,7 @@ graph LR;
   npm-->npmcli-config["@npmcli/config"];
   npm-->npmcli-eslint-config["@npmcli/eslint-config"];
   npm-->npmcli-fs["@npmcli/fs"];
+  npm-->npmcli-git["@npmcli/git"];
   npm-->npmcli-map-workspaces["@npmcli/map-workspaces"];
   npm-->npmcli-package-json["@npmcli/package-json"];
   npm-->npmcli-promise-spawn["@npmcli/promise-spawn"];
@@ -242,6 +244,8 @@ graph LR;
 ## all dependencies
 ```mermaid
 graph LR;
+  acorn-globals-->acorn-walk;
+  acorn-globals-->acorn;
   agent-base-->debug;
   agentkeepalive-->debug;
   agentkeepalive-->depd;
@@ -251,14 +255,92 @@ graph LR;
   ansi-styles-->color-convert;
   are-we-there-yet-->delegates;
   are-we-there-yet-->readable-stream;
+  babel-code-frame-->babel-highlight["@babel/highlight"];
+  babel-core-->babel-code-frame["@babel/code-frame"];
+  babel-core-->babel-generator["@babel/generator"];
+  babel-core-->babel-helper-module-transforms["@babel/helper-module-transforms"];
+  babel-core-->babel-helpers["@babel/helpers"];
+  babel-core-->babel-parser["@babel/parser"];
+  babel-core-->babel-template["@babel/template"];
+  babel-core-->babel-traverse["@babel/traverse"];
+  babel-core-->babel-types["@babel/types"];
+  babel-core-->convert-source-map;
+  babel-core-->debug;
+  babel-core-->gensync;
+  babel-core-->json5;
+  babel-core-->lodash;
+  babel-core-->resolve;
+  babel-core-->semver;
+  babel-core-->source-map;
+  babel-generator-->babel-types["@babel/types"];
+  babel-generator-->jsesc;
+  babel-generator-->source-map;
+  babel-helper-environment-visitor-->babel-types["@babel/types"];
+  babel-helper-function-name-->babel-helper-get-function-arity["@babel/helper-get-function-arity"];
+  babel-helper-function-name-->babel-template["@babel/template"];
+  babel-helper-function-name-->babel-types["@babel/types"];
+  babel-helper-get-function-arity-->babel-types["@babel/types"];
+  babel-helper-hoist-variables-->babel-types["@babel/types"];
+  babel-helper-module-imports-->babel-types["@babel/types"];
+  babel-helper-module-transforms-->babel-helper-environment-visitor["@babel/helper-environment-visitor"];
+  babel-helper-module-transforms-->babel-helper-module-imports["@babel/helper-module-imports"];
+  babel-helper-module-transforms-->babel-helper-simple-access["@babel/helper-simple-access"];
+  babel-helper-module-transforms-->babel-helper-split-export-declaration["@babel/helper-split-export-declaration"];
+  babel-helper-module-transforms-->babel-helper-validator-identifier["@babel/helper-validator-identifier"];
+  babel-helper-module-transforms-->babel-template["@babel/template"];
+  babel-helper-module-transforms-->babel-traverse["@babel/traverse"];
+  babel-helper-module-transforms-->babel-types["@babel/types"];
+  babel-helper-simple-access-->babel-types["@babel/types"];
+  babel-helper-split-export-declaration-->babel-types["@babel/types"];
+  babel-helpers-->babel-template["@babel/template"];
+  babel-helpers-->babel-traverse["@babel/traverse"];
+  babel-helpers-->babel-types["@babel/types"];
+  babel-highlight-->babel-helper-validator-identifier["@babel/helper-validator-identifier"];
+  babel-highlight-->chalk;
+  babel-highlight-->js-tokens;
+  babel-plugin-apply-mdx-type-prop-->babel-core["@babel/core"];
+  babel-plugin-apply-mdx-type-prop-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-plugin-apply-mdx-type-prop-->mdx-js-util["@mdx-js/util"];
+  babel-plugin-extract-import-names-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-plugin-proposal-object-rest-spread-->babel-core["@babel/core"];
+  babel-plugin-proposal-object-rest-spread-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-plugin-proposal-object-rest-spread-->babel-plugin-syntax-object-rest-spread["@babel/plugin-syntax-object-rest-spread"];
+  babel-plugin-proposal-object-rest-spread-->babel-plugin-transform-parameters["@babel/plugin-transform-parameters"];
+  babel-plugin-syntax-jsx-->babel-core["@babel/core"];
+  babel-plugin-syntax-jsx-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-plugin-syntax-object-rest-spread-->babel-core["@babel/core"];
+  babel-plugin-syntax-object-rest-spread-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-plugin-transform-parameters-->babel-core["@babel/core"];
+  babel-plugin-transform-parameters-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  babel-template-->babel-code-frame["@babel/code-frame"];
+  babel-template-->babel-parser["@babel/parser"];
+  babel-template-->babel-types["@babel/types"];
+  babel-traverse-->babel-code-frame["@babel/code-frame"];
+  babel-traverse-->babel-generator["@babel/generator"];
+  babel-traverse-->babel-helper-environment-visitor["@babel/helper-environment-visitor"];
+  babel-traverse-->babel-helper-function-name["@babel/helper-function-name"];
+  babel-traverse-->babel-helper-hoist-variables["@babel/helper-hoist-variables"];
+  babel-traverse-->babel-helper-split-export-declaration["@babel/helper-split-export-declaration"];
+  babel-traverse-->babel-parser["@babel/parser"];
+  babel-traverse-->babel-types["@babel/types"];
+  babel-traverse-->debug;
+  babel-traverse-->globals;
+  babel-types-->babel-helper-validator-identifier["@babel/helper-validator-identifier"];
+  babel-types-->to-fast-properties;
   bin-links-->cmd-shim;
   bin-links-->mkdirp-infer-owner;
   bin-links-->npm-normalize-package-bin;
   bin-links-->read-cmd-shim;
   bin-links-->rimraf;
   bin-links-->write-file-atomic;
+  bindings-->file-uri-to-path;
+  bl-->buffer;
+  bl-->inherits;
+  bl-->readable-stream;
   brace-expansion-->balanced-match;
   brace-expansion-->concat-map;
+  buffer-->base64-js;
+  buffer-->ieee754;
   builtins-->semver;
   cacache-->chownr;
   cacache-->fs-minipass;
@@ -279,24 +361,37 @@ graph LR;
   cacache-->tar;
   cacache-->unique-filename;
   chalk-->ansi-styles;
+  chalk-->escape-string-regexp;
   chalk-->supports-color;
   cidr-regex-->ip-regex;
   cli-columns-->string-width;
   cli-columns-->strip-ansi;
   cli-table3-->colors-colors["@colors/colors"];
   cli-table3-->string-width;
+  cmark-gfm-->bindings;
+  cmark-gfm-->node-addon-api;
+  cmark-gfm-->prebuild-install;
   cmd-shim-->mkdirp-infer-owner;
   color-convert-->color-name;
   columnify-->strip-ansi;
   columnify-->wcwidth;
+  combined-stream-->delayed-stream;
+  convert-source-map-->safe-buffer;
+  cssstyle-->cssom;
+  data-urls-->abab;
+  data-urls-->whatwg-mimetype;
+  data-urls-->whatwg-url;
   debug-->ms;
+  decompress-response-->mimic-response;
   defaults-->clone;
+  detab-->repeat-string;
   dezalgo-->asap;
   dezalgo-->wrappy;
   docs-->cmark-gfm;
   docs-->jsdom;
   docs-->marked-man;
   docs-->mdx-js-mdx["@mdx-js/mdx"];
+  docs-->mkdirp;
   docs-->npmcli-eslint-config["@npmcli/eslint-config"];
   docs-->npmcli-fs["@npmcli/fs"];
   docs-->npmcli-promise-spawn["@npmcli/promise-spawn"];
@@ -304,12 +399,22 @@ graph LR;
   docs-->tap;
   docs-->which;
   docs-->yaml;
+  domexception-->webidl-conversions;
   encoding-->iconv-lite;
+  end-of-stream-->once;
+  escodegen-->esprima;
+  escodegen-->estraverse;
+  escodegen-->esutils;
+  escodegen-->optionator;
+  escodegen-->source-map;
+  form-data-->asynckit;
+  form-data-->combined-stream;
+  form-data-->mime-types;
   fs-minipass-->minipass;
   gauge-->aproba;
-  gauge-->color-support;
   gauge-->console-control-strings;
   gauge-->has-unicode;
+  gauge-->object-assign;
   gauge-->signal-exit;
   gauge-->string-width;
   gauge-->strip-ansi;
@@ -321,7 +426,41 @@ graph LR;
   glob-->once;
   glob-->path-is-absolute;
   has-->function-bind;
+  hast-to-hyperscript-->comma-separated-tokens;
+  hast-to-hyperscript-->property-information;
+  hast-to-hyperscript-->space-separated-tokens;
+  hast-to-hyperscript-->style-to-object;
+  hast-to-hyperscript-->types-unist["@types/unist"];
+  hast-to-hyperscript-->unist-util-is;
+  hast-to-hyperscript-->web-namespaces;
+  hast-util-from-parse5-->hastscript;
+  hast-util-from-parse5-->property-information;
+  hast-util-from-parse5-->types-parse5["@types/parse5"];
+  hast-util-from-parse5-->vfile-location;
+  hast-util-from-parse5-->vfile;
+  hast-util-from-parse5-->web-namespaces;
+  hast-util-raw-->hast-util-from-parse5;
+  hast-util-raw-->hast-util-to-parse5;
+  hast-util-raw-->html-void-elements;
+  hast-util-raw-->parse5;
+  hast-util-raw-->types-hast["@types/hast"];
+  hast-util-raw-->unist-util-position;
+  hast-util-raw-->vfile;
+  hast-util-raw-->web-namespaces;
+  hast-util-raw-->xtend;
+  hast-util-raw-->zwitch;
+  hast-util-to-parse5-->hast-to-hyperscript;
+  hast-util-to-parse5-->property-information;
+  hast-util-to-parse5-->web-namespaces;
+  hast-util-to-parse5-->xtend;
+  hast-util-to-parse5-->zwitch;
+  hastscript-->comma-separated-tokens;
+  hastscript-->hast-util-parse-selector;
+  hastscript-->property-information;
+  hastscript-->space-separated-tokens;
+  hastscript-->types-hast["@types/hast"];
   hosted-git-info-->lru-cache;
+  html-encoding-sniffer-->whatwg-encoding;
   http-proxy-agent-->agent-base;
   http-proxy-agent-->debug;
   http-proxy-agent-->tootallnate-once["@tootallnate/once"];
@@ -339,8 +478,41 @@ graph LR;
   init-package-json-->semver;
   init-package-json-->validate-npm-package-license;
   init-package-json-->validate-npm-package-name;
+  is-alphanumerical-->is-alphabetical;
+  is-alphanumerical-->is-decimal;
   is-cidr-->cidr-regex;
   is-core-module-->has;
+  is-fullwidth-code-point-->number-is-nan;
+  jsdom-->abab;
+  jsdom-->acorn-globals;
+  jsdom-->acorn;
+  jsdom-->canvas;
+  jsdom-->cssom;
+  jsdom-->cssstyle;
+  jsdom-->data-urls;
+  jsdom-->decimal.js;
+  jsdom-->domexception;
+  jsdom-->escodegen;
+  jsdom-->form-data;
+  jsdom-->html-encoding-sniffer;
+  jsdom-->http-proxy-agent;
+  jsdom-->https-proxy-agent;
+  jsdom-->is-potential-custom-element-name;
+  jsdom-->nwsapi;
+  jsdom-->parse5;
+  jsdom-->saxes;
+  jsdom-->symbol-tree;
+  jsdom-->tough-cookie;
+  jsdom-->w3c-hr-time;
+  jsdom-->w3c-xmlserializer;
+  jsdom-->webidl-conversions;
+  jsdom-->whatwg-encoding;
+  jsdom-->whatwg-mimetype;
+  jsdom-->whatwg-url;
+  jsdom-->ws;
+  jsdom-->xml-name-validator;
+  levn-->prelude-ls;
+  levn-->type-check;
   libnpmaccess-->nock;
   libnpmaccess-->npm-package-arg;
   libnpmaccess-->npm-registry-fetch;
@@ -452,6 +624,37 @@ graph LR;
   make-fetch-happen-->promise-retry;
   make-fetch-happen-->socks-proxy-agent;
   make-fetch-happen-->ssri;
+  marked-man-->marked;
+  mdast-squeeze-paragraphs-->unist-util-remove;
+  mdast-util-definitions-->unist-util-visit;
+  mdast-util-to-hast-->mdast-util-definitions;
+  mdast-util-to-hast-->mdurl;
+  mdast-util-to-hast-->types-mdast["@types/mdast"];
+  mdast-util-to-hast-->types-unist["@types/unist"];
+  mdast-util-to-hast-->unist-builder;
+  mdast-util-to-hast-->unist-util-generated;
+  mdast-util-to-hast-->unist-util-position;
+  mdast-util-to-hast-->unist-util-visit;
+  mdx-js-mdx-->babel-core["@babel/core"];
+  mdx-js-mdx-->babel-plugin-apply-mdx-type-prop;
+  mdx-js-mdx-->babel-plugin-extract-import-names;
+  mdx-js-mdx-->babel-plugin-syntax-jsx["@babel/plugin-syntax-jsx"];
+  mdx-js-mdx-->babel-plugin-syntax-object-rest-spread["@babel/plugin-syntax-object-rest-spread"];
+  mdx-js-mdx-->camelcase-css;
+  mdx-js-mdx-->detab;
+  mdx-js-mdx-->hast-util-raw;
+  mdx-js-mdx-->lodash.uniq;
+  mdx-js-mdx-->mdast-util-to-hast;
+  mdx-js-mdx-->mdx-js-util["@mdx-js/util"];
+  mdx-js-mdx-->remark-footnotes;
+  mdx-js-mdx-->remark-mdx;
+  mdx-js-mdx-->remark-parse;
+  mdx-js-mdx-->remark-squeeze-paragraphs;
+  mdx-js-mdx-->style-to-object;
+  mdx-js-mdx-->unified;
+  mdx-js-mdx-->unist-builder;
+  mdx-js-mdx-->unist-util-visit;
+  mime-types-->mime-db;
   minimatch-->brace-expansion;
   minipass-->yallist;
   minipass-collect-->minipass;
@@ -469,6 +672,7 @@ graph LR;
   mkdirp-infer-owner-->chownr;
   mkdirp-infer-owner-->infer-owner;
   mkdirp-infer-owner-->mkdirp;
+  node-abi-->semver;
   node-gyp-->env-paths;
   node-gyp-->glob;
   node-gyp-->graceful-fs;
@@ -528,6 +732,7 @@ graph LR;
   npm-->npm-audit-report;
   npm-->npm-install-checks;
   npm-->npm-package-arg;
+  npm-->npm-packlist;
   npm-->npm-pick-manifest;
   npm-->npm-profile;
   npm-->npm-registry-fetch;
@@ -537,6 +742,7 @@ graph LR;
   npm-->npmcli-config["@npmcli/config"];
   npm-->npmcli-eslint-config["@npmcli/eslint-config"];
   npm-->npmcli-fs["@npmcli/fs"];
+  npm-->npmcli-git["@npmcli/git"];
   npm-->npmcli-map-workspaces["@npmcli/map-workspaces"];
   npm-->npmcli-package-json["@npmcli/package-json"];
   npm-->npmcli-promise-spawn["@npmcli/promise-spawn"];
@@ -678,6 +884,12 @@ graph LR;
   npmlog-->gauge;
   npmlog-->set-blocking;
   once-->wrappy;
+  optionator-->deep-is;
+  optionator-->fast-levenshtein;
+  optionator-->levn;
+  optionator-->prelude-ls;
+  optionator-->type-check;
+  optionator-->word-wrap;
   p-map-->aggregate-error;
   pacote-->cacache;
   pacote-->chownr;
@@ -703,11 +915,37 @@ graph LR;
   parse-conflict-json-->json-parse-even-better-errors;
   parse-conflict-json-->just-diff-apply;
   parse-conflict-json-->just-diff;
+  parse-entities-->character-entities-legacy;
+  parse-entities-->character-entities;
+  parse-entities-->character-reference-invalid;
+  parse-entities-->is-alphanumerical;
+  parse-entities-->is-decimal;
+  parse-entities-->is-hexadecimal;
   postcss-selector-parser-->cssesc;
   postcss-selector-parser-->util-deprecate;
+  prebuild-install-->detect-libc;
+  prebuild-install-->expand-template;
+  prebuild-install-->github-from-package;
+  prebuild-install-->minimist;
+  prebuild-install-->mkdirp-classic;
+  prebuild-install-->napi-build-utils;
+  prebuild-install-->node-abi;
+  prebuild-install-->npmlog;
+  prebuild-install-->pump;
+  prebuild-install-->rc;
+  prebuild-install-->simple-get;
+  prebuild-install-->tar-fs;
+  prebuild-install-->tunnel-agent;
   promise-retry-->err-code;
   promise-retry-->retry;
   promzard-->read;
+  property-information-->xtend;
+  pump-->end-of-stream;
+  pump-->once;
+  rc-->deep-extend;
+  rc-->ini;
+  rc-->minimist;
+  rc-->strip-json-comments;
   read-->mute-stream;
   read-package-json-->glob;
   read-package-json-->json-parse-even-better-errors;
@@ -715,15 +953,51 @@ graph LR;
   read-package-json-->npm-normalize-package-bin;
   read-package-json-fast-->json-parse-even-better-errors;
   read-package-json-fast-->npm-normalize-package-bin;
+  readable-stream-->core-util-is;
   readable-stream-->inherits;
+  readable-stream-->isarray;
+  readable-stream-->process-nextick-args;
+  readable-stream-->safe-buffer;
   readable-stream-->string_decoder;
   readable-stream-->util-deprecate;
   readdir-scoped-modules-->debuglog;
   readdir-scoped-modules-->dezalgo;
   readdir-scoped-modules-->graceful-fs;
   readdir-scoped-modules-->once;
+  remark-mdx-->babel-core["@babel/core"];
+  remark-mdx-->babel-helper-plugin-utils["@babel/helper-plugin-utils"];
+  remark-mdx-->babel-plugin-proposal-object-rest-spread["@babel/plugin-proposal-object-rest-spread"];
+  remark-mdx-->babel-plugin-syntax-jsx["@babel/plugin-syntax-jsx"];
+  remark-mdx-->is-alphabetical;
+  remark-mdx-->mdx-js-util["@mdx-js/util"];
+  remark-mdx-->remark-parse;
+  remark-mdx-->unified;
+  remark-parse-->ccount;
+  remark-parse-->collapse-white-space;
+  remark-parse-->is-alphabetical;
+  remark-parse-->is-decimal;
+  remark-parse-->is-whitespace-character;
+  remark-parse-->is-word-character;
+  remark-parse-->markdown-escapes;
+  remark-parse-->parse-entities;
+  remark-parse-->repeat-string;
+  remark-parse-->state-toggle;
+  remark-parse-->trim-trailing-lines;
+  remark-parse-->trim;
+  remark-parse-->unherit;
+  remark-parse-->unist-util-remove-position;
+  remark-parse-->vfile-location;
+  remark-parse-->xtend;
+  remark-squeeze-paragraphs-->mdast-squeeze-paragraphs;
+  resolve-->is-core-module;
+  resolve-->path-parse;
+  resolve-->supports-preserve-symlinks-flag;
   rimraf-->glob;
+  saxes-->xmlchars;
   semver-->lru-cache;
+  simple-get-->decompress-response;
+  simple-get-->once;
+  simple-get-->simple-concat;
   smoke-tests-->minify-registry-metadata;
   smoke-tests-->npmcli-eslint-config["@npmcli/eslint-config"];
   smoke-tests-->npmcli-promise-spawn["@npmcli/promise-spawn"];
@@ -741,11 +1015,13 @@ graph LR;
   spdx-expression-parse-->spdx-exceptions;
   spdx-expression-parse-->spdx-license-ids;
   ssri-->minipass;
+  string-width-->code-point-at;
   string-width-->emoji-regex;
   string-width-->is-fullwidth-code-point;
   string-width-->strip-ansi;
   string_decoder-->safe-buffer;
   strip-ansi-->ansi-regex;
+  style-to-object-->inline-style-parser;
   supports-color-->has-flag;
   tar-->chownr;
   tar-->fs-minipass;
@@ -753,16 +1029,62 @@ graph LR;
   tar-->minizlib;
   tar-->mkdirp;
   tar-->yallist;
+  tar-fs-->chownr;
+  tar-fs-->mkdirp-classic;
+  tar-fs-->pump;
+  tar-fs-->tar-stream;
+  tar-stream-->bl;
+  tar-stream-->end-of-stream;
+  tar-stream-->fs-constants;
+  tar-stream-->inherits;
+  tar-stream-->readable-stream;
+  tough-cookie-->psl;
+  tough-cookie-->punycode;
+  tough-cookie-->universalify;
+  tr46-->punycode;
+  tunnel-agent-->safe-buffer;
+  type-check-->prelude-ls;
+  types-hast-->types-unist["@types/unist"];
+  types-mdast-->types-unist["@types/unist"];
+  unherit-->inherits;
+  unherit-->xtend;
+  unified-->bail;
+  unified-->extend;
+  unified-->is-buffer;
+  unified-->is-plain-obj;
+  unified-->trough;
+  unified-->vfile;
   unique-filename-->unique-slug;
   unique-slug-->imurmurhash;
+  unist-util-remove-->unist-util-is;
+  unist-util-remove-position-->unist-util-visit;
+  unist-util-stringify-position-->types-unist["@types/unist"];
+  unist-util-visit-->types-unist["@types/unist"];
+  unist-util-visit-->unist-util-is;
+  unist-util-visit-->unist-util-visit-parents;
+  unist-util-visit-parents-->types-unist["@types/unist"];
+  unist-util-visit-parents-->unist-util-is;
   validate-npm-package-license-->spdx-correct;
   validate-npm-package-license-->spdx-expression-parse;
   validate-npm-package-name-->builtins;
+  vfile-->is-buffer;
+  vfile-->types-unist["@types/unist"];
+  vfile-->unist-util-stringify-position;
+  vfile-->vfile-message;
+  vfile-message-->types-unist["@types/unist"];
+  vfile-message-->unist-util-stringify-position;
+  w3c-hr-time-->browser-process-hrtime;
+  w3c-xmlserializer-->xml-name-validator;
   wcwidth-->defaults;
+  whatwg-encoding-->iconv-lite;
+  whatwg-url-->tr46;
+  whatwg-url-->webidl-conversions;
   which-->isexe;
   wide-align-->string-width;
   write-file-atomic-->imurmurhash;
   write-file-atomic-->signal-exit;
+  ws-->bufferutil;
+  ws-->utf-8-validate;
 ```
 
 ## npm dependency heirarchy