- Introduced `pnpm stage` subcommands for staged publishing and a new `trustLockfile` setting to skip supply‑chain verification, with reduced verification memory usage
- Added native `pnpm pkg`, `pnpm repo`, and `pnpm set` script commands plus an option to skip manifest obfuscation during `pnpm pack`/`publish`
- Fixed bugs: dlx manifest handling errors, non‑deterministic dedupe/install, GitHub shorthand add regression, and orphan entries in lock.env.yaml