pnpm 12.10.0

Official pnpm changelog summary with source attribution, release tags, and community reactions.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·Oct 6, 2026, 05:24 AMFixSecurity-relevantAI-assisted summary

Summary

Added experimental `nodeLinker: { type: "loaded" }` with direct loading from the content‑addressable store and new `nodeLinker.excluded` option.
Lockfile now records resolution settings via `lockfile.includeResolutionSettings` and verifies config dependencies against registries, enhancing reproducibility and security.
Implemented several security fixes: blocked path‑traversal writes, enforced integrity and signature checks, rejected oversized metadata, and tightened lockfile validation.