- pnpm now computes and stores integrity hashes for tarballs that lack checksums, rejecting missing‑integrity entries during lockfile verification.
- Added an `--exclude-peers` flag to SBOM generation, emitted CycloneDX issue‑tracker references, and moved pnpr resolver endpoints under the reserved `/pnpr` namespace.
- Fixed multiple bugs: deterministic peer resolution, Windows dlx cache path and cleanup, network error handling, audit performance on cyclic graphs, in‑memory package metadata cache, and config handling for minimumReleaseAgeExclude and al...