- Implemented deterministic unpacking for tarballs with duplicate files – the last occurrence is used when extracting.
- Added support for the `publishConfig.registry` field in package.json to specify the publish registry.
- Fixed a bug where pnpm used the wrong scheme with `git ls-remote`, preventing fallback to git+ssh and host key verification errors.
