pnpm / update detail

pnpm 11.10

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·4 weeks ago · Jul 4, 2026, 07:58 PMFixSecurity-relevantAI-assisted summary

pnpm 11.10

Summary

Added new CLI commands (issues alias, prefix) and introduced a structured auth config with strict validation and OTP error URLs exposure
Self‑update now supports pnpm v12 (Rust exe) and pnpr no longer forwards client auth tokens; added security hardenings like rejecting invalid jsr/registry specifiers, prototype‑pollution protection, global package cleanup, and pack‑app p...
Implemented many bug fixes and performance improvements such as shell‑completion fixes, update‑bump fix, pack/publish prepack handling, node‑gyp exec bits, offline resolution speedups, and restored diff rendering

featurebugfixsecurityminorsource healthy

Official source Last checked 10 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 10 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·2 days agoFix

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.

Official source

pnpm·4 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoFixSecurity-relevant

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.

security

Official source

pnpm / update detail

pnpm 11.10

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·4 weeks ago · Jul 4, 2026, 07:58 PMFixSecurity-relevantAI-assisted summary

pnpm 11.10

Summary

Added new CLI commands (issues alias, prefix) and introduced a structured auth config with strict validation and OTP error URLs exposure
Self‑update now supports pnpm v12 (Rust exe) and pnpr no longer forwards client auth tokens; added security hardenings like rejecting invalid jsr/registry specifiers, prototype‑pollution protection, global package cleanup, and pack‑app p...
Implemented many bug fixes and performance improvements such as shell‑completion fixes, update‑bump fix, pack/publish prepack handling, node‑gyp exec bits, offline resolution speedups, and restored diff rendering

featurebugfixsecurityminorsource healthy

Official source Last checked 10 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 10 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·2 days agoFix

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.

Official source

pnpm·4 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoFixSecurity-relevant

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.

security

Official source