- Added workspace: protocol support for catalog resolution and new trust‑lockfile options for pnpm remove/update, plus CI validation of package versions against workspace.yaml bands.
- Improved security by redacting URL credentials in logs, handling 2FA in unpublish, and ensuring node downloads use scoped npm credentials; also enhanced audit to exclude ignored advisories.
- Fixed numerous bugs: race conditions, ENOENT errors, symlinked lockfile handling, hoisted installer skips, ambiguous peer errors in deploy, and Windows argument forwarding issues.
