- pnpm add no longer fails when blockExoticSubdeps=true
- Git dependencies now resolve to full commit hashes and HEAD points to the checked‑out commit
Official pnpm changelog summary with source attribution, release tags, and community reactions.
Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Every summary should remain traceable to the original changelog or release source.
Turn this pnpm release note into a weekly digest for the tools you actually use.
Create digestAdded a pnpm cache‑path command, new setting minimumReleaseAgeExcludePrune, and renamed cleanupUnusedCatalogs to catalogPrune; workspace.yaml can no longer configure various directories and now warns about ignored settings.
Added interactive group selection for `pnpm update --global` and introduced sudo warnings for global commands to prevent accidental root installations.
Introduce registry‑qualified keys for packages from named registries to prevent substitution attacks, requiring a lockfile diff and coordinated upgrade