pnpm 10.29.1

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·7 months ago · Feb 7, 2026, 06:03 PMFixSecurity-relevantAI-assisted summary

Summary

Added catalog: and bare workspace: protocol support to pnpm dlx/pnpx and enabled auditLevel configuration in workspace.yaml.
Fixed multiple bugs including incorrect list JSON paths, store path resolution, empty workspace.yaml filters, catalogMode string writing, completion URL, Docker fetch failures, audit JSON level handling, and hoist pattern conversion.
Updated tar to 7.5.7 to resolve CVE‑2026‑24842, added a warning for directories containing the PATH delimiter, and improved CLI reporting for bundled Node versions.