Update npm to v6.13.0 and pacote to v9.5.9.

History.md

@@ -27,9 +27,9 @@
 * Node has been updated to version
   [8.16.2](https://nodejs.org/en/blog/release/v8.16.2/).
 
-* The `npm` npm package has been updated to version 6.11.3, and our
-  [fork](https://github.com/meteor/pacote/tree/v9.5.8-meteor) of its
-  `pacote` dependency has been updated to version 9.5.8.
+* The `npm` npm package has been updated to version 6.13.0, and our
+  [fork](https://github.com/meteor/pacote/tree/v9.5.9-meteor) of its
+  `pacote` dependency has been updated to version 9.5.9.
 
 * New Meteor applications now include an official `typescript` package,
   supporting TypeScript compilation of `.ts` and `.tsx` modules, which can

scripts/build-dev-bundle-common.sh

@@ -8,7 +8,7 @@ ARCH=$(uname -m)
 NODE_VERSION=8.16.2
 MONGO_VERSION_64BIT=4.0.6
 MONGO_VERSION_32BIT=3.2.22
-NPM_VERSION=6.11.3
+NPM_VERSION=6.13.0
 
 # If we built Node from source on Jenkins, this is the build number.
 NODE_BUILD_NUMBER=

scripts/dev-bundle-tool-package.js

@@ -10,8 +10,8 @@ var packageJson = {
   dependencies: {
     // Explicit dependency because we are replacing it with a bundled version
     // and we want to make sure there are no dependencies on a higher version
-    npm: "6.11.3",
-    pacote: "https://github.com/meteor/pacote/tarball/00b3b094e6074e45fc221d5bd96419d07ea34c6a",
+    npm: "6.13.0",
+    pacote: "https://github.com/meteor/pacote/tarball/a1853763676463c458aa8ce7b91c20205c44ae6a",
     "node-gyp": "5.0.1",
     "node-pre-gyp": "0.13.0",
     typescript: "3.7.2",