- Added a new `pnpm access` command to manage package access, visibility, collaborators, MFA requirements, and team permissions.
- Patched several security issues: prevented path‑traversal attacks via crafted lockfiles, rejected symlinked lockfiles, redacted credentials in publish logs, and ensured self‑update respects `trustPolicy`.
- Reduced peak memory usage during cold‑cache resolution and improved git `allowBuilds` matching, plus support for global registry configuration and other minor enhancements.