pnpm·Oct 21, 2026, 11:17 AMFeatureMay break your integrationAI-assisted summary

Summary

Added security checks: reject mismatched registry metadata (ERR PNPM REGISTRY NAME MISMATCH), enforce trustPolicy on pinned pnpm versions, and introduce maxTarballUnpackedSize (default 4 GiB) to block oversized tarballs.
Removed support for registry revisions and pnpm update patches, causing commands to fail with ERR PNPM REGISTRY REVISIONS UNSUPPORTED, which may break existing workflows.
Enhanced workspace and install handling: concurrent installs no longer collide, filtered installs correctly hoist/prune, overrides are measured from the workspace root, and commands now exit with their own code when a pipe reader exits e...

securitybreakingfeaturesource healthy

Official source Last checked Oct 22, 2026, 5:00 AM

pnpm / update detail

pnpm 11.28.7

Official pnpm changelog summary with source attribution, release tags and upgrade verdicts.

Track this pnpm release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.

pnpm·Oct 21, 2026, 11:17 AMFeatureMay break your integrationAI-assisted summary

Summary

Added security checks: reject mismatched registry metadata (ERR PNPM REGISTRY NAME MISMATCH), enforce trustPolicy on pinned pnpm versions, and introduce maxTarballUnpackedSize (default 4 GiB) to block oversized tarballs.
Removed support for registry revisions and pnpm update patches, causing commands to fail with ERR PNPM REGISTRY REVISIONS UNSUPPORTED, which may break existing workflows.
Enhanced workspace and install handling: concurrent installs no longer collide, filtered installs correctly hoist/prune, overrides are measured from the workspace root, and commands now exit with their own code when a pipe reader exits e...

securitybreakingfeaturesource healthy

Official source Last checked Oct 22, 2026, 5:00 AM

DiscussionUsing this release? Share breakages, migration notes or workarounds.

Loading follow options…

keep exploring

Continue with pnpm

Compare this release with the product timeline and keep the tools you use in one place.

official source

Every summary should remain traceable to the original changelog or release source.

AI-assisted summarysource healthyLast checked Oct 22, 2026, 5:00 AM

digest settings

Already following pnpm? Add related tools without starting a new digest.