pnpm / update detail

pnpm 11.17

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·1 week ago · Jul 23, 2026, 05:03 PMFixSecurity-relevantAI-assisted summary

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.
Secure web‑based authentication by capping token poll response bodies at 64 KiB and avoiding reads of non‑OK responses, mitigating memory‑exhaustion attacks.
Fix catalog resolution through pnpr servers, Windows nested workspace install crash, republish packages missing compiled files, revert script ordering for `pnpm run`, add `--from git` support to `pnpm version`, and display plain URL with...

minorfeaturebugfixsecuritysource healthy

Official source Last checked 3 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 3 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·14 hours agoFix

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.

Official source

pnpm·3 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoDeprecationMay break your integration

pnpm 11.16

Summary

Publishing now uses the exact version from the package manifest and a new `pnpm update` changeset flag automatically creates changeset files for dependency bumps.

Official source

pnpm / update detail

pnpm 11.17

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·1 week ago · Jul 23, 2026, 05:03 PMFixSecurity-relevantAI-assisted summary

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.
Secure web‑based authentication by capping token poll response bodies at 64 KiB and avoiding reads of non‑OK responses, mitigating memory‑exhaustion attacks.
Fix catalog resolution through pnpr servers, Windows nested workspace install crash, republish packages missing compiled files, revert script ordering for `pnpm run`, add `--from git` support to `pnpm version`, and display plain URL with...

minorfeaturebugfixsecuritysource healthy

Official source Last checked 3 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 3 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·14 hours agoFix

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.

Official source

pnpm·3 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoDeprecationMay break your integration

pnpm 11.16

Summary

Publishing now uses the exact version from the package manifest and a new `pnpm update` changeset flag automatically creates changeset files for dependency bumps.

Official source