pnpm 11.28.4

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·Oct 3, 2026, 08:48 PMFixSecurity-relevantAI-assisted summary

Summary

Fixed credential leaks: pnpm login no longer forwards credentials on redirects and error messages no longer expose credentials or URL parts.
Improved frozen lockfile handling and optional dependency processing, adding warnings for fetch failures, proper cleanup of skipped deps, and better support for hoisted installs.
Enhanced performance and reliability: conditional revalidation of registry metadata, host‑specific concurrency throttling, streamlined script process handling, and self‑update fixes for Homebrew and Windows.