Bug Fixes nvm_alias, nvm_version_path: reject .. path components nvm_get_make_jobs: count cores on platforms the case does not name nvm-exec: improve the no-version failure message nvm use: do not clobber man's default search path (#3890) nvm_err, nvm_err_with_colors: do not fail when stderr is closed (#3907) nvm_hash_reset: only run hash -r where the shell supports it nvm_alias: unset zsh's exten…
New Stuff nvm install: serialize concurrent installs of the same version nvm install: add NVM_NO_SOURCE_FALLBACK to disable the source fallback Robustness nvm install: reject a structurally broken installed version nvm_install_binary_extract: replace a broken version dir atomically install.sh: nvm_download: avoid eval so arguments aren't re-parsed by the shell Docs [readme] link every referenced p…
New Stuff install: add support for loongarch64 architecture (#3693) Bug Fixes support arm64-musl on Alpine Linux (#3845) nvm_ls_cached: include source-cached and io.js artifacts auth header: Add all valid base64 chars to sanitize function (#3846) Parse commented nvmrc content in nvm_ls bypass aliased curl (#2932) nvm_download, nvm_get_latest, install: only select a downloader that exists as an exe…
Security fix Note this release addresses CVE-2026-10796. New Stuff nvm install --offline: install from cache without network access Bug Fixes nvm_download_artifact: reject version strings with disallowed characters nvm_get_checksum: pass the tarball name to awk as data, not program text nvm_download: avoid eval so mirror-supplied version strings can't inject commands nvm_download: send a well-form…
Bug Fixes sanitize NVM_AUTH_HEADER in wget path nvm_has_colors: also check if stdout is a terminal nvm_strip_path: avoid gawk-specific RT variable for mawk compatibility nvm_get_default_packages: use portable awk patterns nvm_install_source: explicitly set SHELL=/bin/sh for make install.sh: do not log when user has requested no profile modifications (#2131) nvm exec: Do a version check on nvm-exec…
Fixes nvm_install_latest_npm: fix node version detection (#3564)
New Stuff install.sh: add $ZDOTDIR to zsh search (#3458) Fixes reinstall-packages: do not reinstall corepack (#3544) avoid bash-specific syntax (#3499) install-latest-npm: npm v11 is out nvm_install_latest_npm: avoid unbound variable (#3447) give a more helpful message when lts alias is mistakenly used (#3441) nvm ls, nvm alias, nvm install: error when an LTS name is invalid nvm_normalize_lts: err…
Fixes nvm_download: ensure all args are quoted --save: avoid a conflict with set -e nvm_has_colors: avoid an aliased tput declare an unbound variable nvm install -b: do not attempt to download source on a failed binary download with -b nvm install -b: when no binary is available, fail and output a clear message Refactors --save: clean up some usage install.sh: fix node capitalization Tests set pro…
New Stuff nvm use/nvm install: add --save option (#2869) Add support for NVM_AUTH_HEADER env var (#3380) allow .nvmrc files to support comments Fixes nvm_get_default_packages: use awk for more reliable file processing Fix issue where zsh global aliases would break nvm help (#3394) install-latest-npm: npm ^8.7 breaks npm ls with file: deps Refactors nvm_has_colors: also check the env var Docs [read…
Fixes use \hash instead of command hash for zsh (#3239, #3247, #3246)
New Stuff nvm_resolve_alias: only resolve one line of a multiline alias file aliases: skip leading blank lines in alias file Fixes nvm_get_mirror: ensure only a valid URL is allowed avoid overridden hash install.sh: when NVM_INSTALL_GITHUB_REPO is set, issue a warning (#2868) nvm_get_mirror: disallow some non-URL characters nvm_get_arch: proper value for alpine linux (#3212) nvm_normalize_lts: swi…
Fixes nvm_strip_path: Preserve leading/trailing colons (#3145) allow checksums to pass with a leading backslash nvm install-latest-npm: ensure npm 10 does not install on unsupported nodes Docs [readme] add examples of setting specific versions as default (#3151) Tests add some nvm_do_install tests a cleaner name for the windows tests
Fixes fix node download link for armv8l (#3102) nvm exec: no longer error with '-q: invalid option' for zsh users (#2800) nvm_print_npm_version: if npm exists but its node crashes, do not print the npm version nvm_ls_current: when node is present but crashes immediately, echo "none" fix directory traversal when workdir path is not readable (#3080) recognize 32Bit docker container and use x86 arch…