pnpm 12.7

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·Sep 25, 2026, 10:39 AMFixSecurity-relevantAI-assisted summary

Summary

Added .nvmrc/.node version support in the global node shim, new allowBuild option, publishWaitTimeout, and auto‑creation of pnpm workspace.yaml from the workspaces field.
Introduced forceIgnoresPlatform setting to restore previous optional‑dependency behavior and improved lock handling, private copy fallback, and proxy connection limits.
Fixed security issues (userAgent placeholder expansion, Nix bin shim hijacking, lifecycle scripts in storeDir) and numerous bugs (out‑of‑memory during peer checks, lockfile hangs, TLS failures, macOS CA fallback, etc.).