- Added OIDC authentication for pnpm publish and dist tag commands, validating token audience and providing CI support
- Introduced the tool: protocol for self‑downloaded runtimes (Node, Bun, Deno, Yarn) with lockfile compatibility to runtime: aliases
- Disallowed using "tool" as a named registry, introducing a breaking change
