fix(bugs): allow mailto urls through the opener validation

[ManoharPaturi]

Problem

npm bugs supports packages that only document an email address by building a mailto: url from bugs.email and passing it to openUrl (lib/commands/bugs.js). The protocol guard in openUrl only accepts http and https, so the command fails before opening anything:

$ npm bugs <pkg>    # package.json: { "bugs": { "email": "hello@example.com" } }
npm error Invalid URL: mailto:hello@example.com

The existing bugs tests mock openUrl itself, so the rejection never surfaced in the suite, and the mailto cases in those tests only assert the url is requested, never that it survives validation.

Solution

Accept mailto alongside http(s) in assertValidUrl. The scheme is inert in browsers and mail clients, unlike the scriptable schemes (javascript, data, file) the guard exists to keep away from the opener, and the explicit isFile carve out for local files is untouched.

Test Evidence

• A unit test in test/lib/utils/open-url.js asserts a mailto: url is passed through to the opener, next to the existing tests that still reject ftp:, file: and unparseable urls.
• An end to end regression test in test/lib/commands/bugs.js runs the real openUrl (only the process opener is mocked) for a package with bugs.email and asserts the mailto url reaches the opener.

The regression test fails on the previous code with Invalid URL: mailto:hello@example.com and passes with this change. Both files green: npx tap test/lib/utils/open-url.js test/lib/commands/bugs.js.

References

• Documented email support in the bugs command: lib/commands/bugs.js getUrl

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.