- Introduced a dry‑run flag for `pnpm install`, per‑package SBOM output, package‑map generation, and view command can infer the project name when omitted.
- Added security validation for config dependency names/versions from lockfiles and stripped macOS quarantine attributes from native binaries.
- Fixed numerous bugs across install, update, workspace handling, CLI help, progress display, and documentation of cpu/os/libc flags.