- pnpm now rejects lockfile entries whose remote tarball block is missing the integrity field, closing a security bypass.
- Installation aborts with ERR_PNPM_MISSING_TARBALL_INTEGRITY; git‑hosted and file:// tarballs are exempt.
Official pnpm changelog summary with source attribution, release tags, and community reactions.
Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Every summary should remain traceable to the original changelog or release source.
Turn this pnpm release note into a weekly digest for the tools you actually use.
Create digest