- Update undici to 7.29.1, clearing the GHSA‑3wwx‑pv8p‑q78v security advisory
- Fix "database disk image is malformed" errors and stale store reads when multiple pnpm processes share a store
- Allow names that match built‑in JavaScript object properties (e.g., constructor, toString, __proto__) to be used for packages, catalogs, projects, and commands without crashes