- Support plain http/https .git URLs and prioritize the git resolver before the tarball resolver.
- Patch multiple path‑traversal vulnerabilities in binary fetcher ZIP extraction, tarball extraction on Windows, and bin linking.
- Various bug fixes: config dependencies from private registries, correct exit codes for pnpm run when scripts are missing, pnpm exec cwd handling, peer‑dependency semver saving, and workspace filter selection.