pnpm / update detail

pnpm 11.1.3

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·3 months ago · May 18, 2026, 02:14 PMFixAI-assisted summary

pnpm 11.1.3

Summary

pnpm install now validates lockfile entries against minimumReleaseAge and trustPolicy 'no downgrade' before downloading, aborting with new errors and supporting cached fast‑path, interactive prompts, and CI strict mode handling of immatu...
Global virtual store (GVS) now correctly respects global build policies (e.g., dangerouslyAllowAllBuilds) and workspace allowBuilds settings; self‑update also respects minimumReleaseAge, and the silent flag now prevents install output du...
Multiple bug fixes: accept redundant base64 padding in .npmrc auth, parse lockfiles with CRLF/multiple YAML docs, anchor side‑effects cache keys to the project's pinned Node runtime, handle OIDC auth placeholders safely, and correct devE...

featurebugfixsource healthy

Official source Last checked 17 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 17 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·1 week agoFix

Added a pnpm cache‑path command, new setting minimumReleaseAgeExcludePrune, and renamed cleanupUnusedCatalogs to catalogPrune; workspace.yaml can no longer configure various directories and now warns about ignored settings.

Official source

pnpm·2 weeks agoFix

pnpm 11.21

Summary

Added interactive group selection for `pnpm update --global` and introduced sudo warnings for global commands to prevent accidental root installations.

Official source

pnpm·3 weeks agoFixMay break your integration

pnpm 11.20

Summary

Introduce registry‑qualified keys for packages from named registries to prevent substitution attacks, requiring a lockfile diff and coordinated upgrade

securitybreaking

Official source

pnpm / update detail

pnpm 11.1.3

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·3 months ago · May 18, 2026, 02:14 PMFixAI-assisted summary

pnpm 11.1.3

Summary

pnpm install now validates lockfile entries against minimumReleaseAge and trustPolicy 'no downgrade' before downloading, aborting with new errors and supporting cached fast‑path, interactive prompts, and CI strict mode handling of immatu...
Global virtual store (GVS) now correctly respects global build policies (e.g., dangerouslyAllowAllBuilds) and workspace allowBuilds settings; self‑update also respects minimumReleaseAge, and the silent flag now prevents install output du...
Multiple bug fixes: accept redundant base64 padding in .npmrc auth, parse lockfiles with CRLF/multiple YAML docs, anchor side‑effects cache keys to the project's pinned Node runtime, handle OIDC auth placeholders safely, and correct devE...

featurebugfixsource healthy

Official source Last checked 17 hours ago

Loading follow options…

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 17 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·1 week agoFix

pnpm 11.22

Summary

Official source

pnpm·2 weeks agoFix

pnpm 11.21

Summary

Added interactive group selection for `pnpm update --global` and introduced sudo warnings for global commands to prevent accidental root installations.

Official source

pnpm·3 weeks agoFixMay break your integration

pnpm 11.20

Summary

Introduce registry‑qualified keys for packages from named registries to prevent substitution attacks, requiring a lockfile diff and coordinated upgrade

securitybreaking

Official source