pnpm / update detail

pnpm 11.19

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·14 hours ago · Jul 31, 2026, 09:10 AMFixAI-assisted summary

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.
The save‑prefix setting now accepts "=" and preserves the exact‑version operator when adding or updating dependencies.
allowBuilds entries can now approve git‑hosted tarball packages (e.g., GitHub, GitLab, Bitbucket) without a commit hash, and several bugs were fixed (empty bundledDependencies arrays, install‑summary hints, workspace dependency handling).

minorbugfixfeaturesource healthy

Official source Last checked 3 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 3 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·3 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoFixSecurity-relevant

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.

security

Official source

pnpm·1 week agoDeprecationMay break your integration

pnpm 11.16

Summary

Publishing now uses the exact version from the package manifest and a new `pnpm update` changeset flag automatically creates changeset files for dependency bumps.

Official source

pnpm / update detail

pnpm 11.19

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·14 hours ago · Jul 31, 2026, 09:10 AMFixAI-assisted summary

pnpm 11.19

Summary

pnpm login now works without a TTY for web‑based registry logins, printing the auth URL and polling for approval; classic username/password still requires interactivity.
The save‑prefix setting now accepts "=" and preserves the exact‑version operator when adding or updating dependencies.
allowBuilds entries can now approve git‑hosted tarball packages (e.g., GitHub, GitLab, Bitbucket) without a commit hash, and several bugs were fixed (empty bundledDependencies arrays, install‑summary hints, workspace dependency handling).

minorbugfixfeaturesource healthy

Official source Last checked 3 hours ago

official source

Verify the original release note

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked 3 hours ago

Official changelog

related channels

Follow this in context

Turn this pnpm release note into a weekly digest for the tools you actually use.

Create digest

related updates

More pnpm changelog updates

Product page

pnpm·3 days agoFixSecurity-relevant

pnpm 11.18

Summary

Fixed optional dependency installation where the parent was installed without its required sub‑dependency, adding an install‑check warning for incompatibilities.

security

Official source

pnpm·1 week agoFixSecurity-relevant

pnpm 11.17

Summary

Add `update.githubActionsServer` setting to configure GitHub server URL for actions and enable skipping GitHub Action dependencies via `update.githubActions=false`.

security

Official source

pnpm·1 week agoDeprecationMay break your integration

pnpm 11.16

Summary

Publishing now uses the exact version from the package manifest and a new `pnpm update` changeset flag automatically creates changeset files for dependency bumps.

Official source