pnpm 11.11-11.14
v11.11-11.14
pnpm 11.11 through 11.14 add native workspace release management (pnpm change, pnpm lane, and a bare pnpm version -r), a pnpm doctor command t...
JavaScript Runtimes & Tooling
Runtimes, package managers, bundlers, and test runners powering JS and TS projects.
This week: pnpm adds workspace release management while Turborepo embeds sccache for Cargo →FriJul 17, 20261 release
Daily summary
pnpm adds workspace release management and vulnerability fix
pnpm shipped four releases adding native workspace release management, a diagnostic doctor command, registry access and team commands, and a path-traversal vulnerability fix, while cutting cold-cache memory by 30%.
- pnpm now provides native workspace release management through pnpm change, pnpm lane, and pnpm version -r commands
- pnpm doctor diagnoses installation health end to end, while pnpm access and pnpm team manage registry packages and organizations
- A path-traversal vulnerability was fixed and cold-cache resolution memory usage dropped by roughly 30%
pnpm1WedJul 15, 20261 release
Daily summary
Deno adds granular dependency flags and fixes data-loss bug
Deno 2.9.3 ships with `deno add --no-save` and `--save-optional` flags, broader compile target support, and a critical data-loss fix for active stream reads in node compatibility.
- Deno add now supports --no-save (preview without modifying config) and --save-optional flags, plus a --min-dep-age alias for dependency freshness thresholds
- Compile targets aarch64-pc-windows-msvc, and Deno.createHttpClient gains an http2MaxHeaderListSize option to control HTTP/2 header limits
- Fixes a data-loss bug in active stream reads on node, sqlite deserialization guard, napi threadsafe function lifecycle, and node_http2 header validation
Deno1MonJul 13, 20261 release
Daily summary
Turborepo embeds sccache for Cargo and blocks output path traversal
Turborepo's Remote Cache can now serve as an sccache backend for Cargo tasks without any additional installation, while a canary release fixes Cargo artifact caching and Yarn pruning.
- Turborepo embeds sccache so that Cargo tasks automatically use the Remote Cache for compile caching, with no separate sccache install needed
- Output path traversal is now rejected, and a canary patch fixes unresolved Cargo artifact caching along with Yarn package extension range preservation when pruning
WedJul 8, 20261 release
Daily summary
Deno 2.9.2 brings desktop HMR and npm memory leak fix
Deno's desktop mode now autodetects React Router and enables HMR for Vite and Nuxt, while a long-standing npm `--watch` memory leak has been patched.
- Deno now supports hot module replacement in desktop mode for Vite and Nuxt, with automatic React Router detection
- An npm-related memory leak in `--watch` mode has been fixed, alongside dozens of performance improvements across the inspector, Node compatibility, and web streams
Deno1MonJul 6, 20263 releases
Daily summary
Turborepo ships Cargo workspace support, Vitest clears mocks by default
Turborepo 2.10.4 added native Cargo workspace discovery and task execution alongside major performance improvements, while Vitest's v5 beta makes mock clearing the default and removes the webdriverio package.
- Turborepo now natively discovers Cargo crates as packages and executes them via cargo, with hardware-accelerated SHA-1, single-pass lockfile parsing, and concurrent dependency hashing
- Turborepo's remote cache can serve as an sccache backend for Cargo tasks with sccache embedded, while a security fix prevents output path traversal
- Vitest v5 beta clears mocks before each test by default, adds the vi.when() helper, and removes the webdriverio package
- Vitest backported browser file-system access checks to v3 and v4, fixing a URI-encoded dependency optimizer query error in v4
SatJul 4, 20261 release
Daily summary
Turborepo TUI gets interactive log toggling and copy support
Turborepo shipped a canary release with several user-facing TUI improvements, including the ability to switch between the TUI and streamed log views, click-to-select tasks, and automatic clipboard copy on mouse release.
- Turborepo added TUI log toggling, clickable task selection, and clipboard copy on mouse release, alongside hardware-accelerated SHA-1 hashing and mimalloc as the global allocator for faster builds
pnpm1_auth setting for CI; pnpm prefix and issues commands ship
v11.10
A new _auth setting configures registry authentication as a single structured value that survives CI environment variable naming restrictions (fixing a long-standing GitHub Actions and shell limitation with /, :, or . characters). New pnpm prefix and pnpm issues commands are available, and pnpm self-update can now install pnpm v12 (the Rust port). Improved pnpm up accuracy to avoid unrelated package bumps, sped up resolution against non-compliant registries, and hardened global package management, pnpm deploy, and pnpm pack-app.
FriJul 3, 20261 release
Daily summary
Turborepo adds interactive TUI, production prune, and Bun v2 support
Turborepo 2.10.3 shipped interactive TUI features for task selection and log toggling, a <code>--production</code> flag for <code>turbo prune</code>, and Bun lockfile v2 resolution alongside dozens of bug fixes including watch-mode hash recovery and improved error reporting.
- Turborepo's TUI gained row-click task selection, clipboard copy, and toggle between TUI and streamed log views
- <code>turbo prune</code> now accepts a <code>--production</code> flag to strip dev dependencies
- Bun lockfile v2 and scoped-package dependency resolution are now supported
- Bug fixes include recovery from slow initial hash in watch mode, malformed JSON parse error reporting (no more panics), and corrected gitignore precedence
WedJul 1, 20261 release
Daily summary
Deno 2.9.1 lands desktop flag and fixes 40+ bugs
Deno’s most substantial release since 2.9 added a <code>--desktop</code> flag for type-checking Deno Desktop code and deep-link URL scheme registration at bundle time, while Turborepo’s canary channel shipped three releases adding Bun lockfile v2 support, a <code>--production</code> flag for prune, and an internal error handling fix for task executors.
- Deno 2.9.1 adds a <code>--desktop</code> flag for type-checking Deno Desktop code and registers deep-link URL schemes at bundle time
- Deno fixed over 40 bugs spanning caching, bundling, Node.js compatibility, and a shared-buffer timer expiry race that could lose timers
- Turborepo now accepts Bun lockfile version 2 and added a <code>--production</code> flag to the prune command
- Turborepo fixed task executor join errors being handled as internal errors and honors semver ranges in <code>devEngines.packageManager.version</code>
Deno1TueJun 30, 20261 release
Daily summary
Turborepo adds native nub package manager support
Turborepo shipped several canary releases culminating in stable v2.10.2, which introduces recognition and lockfile-handling for the new nub package manager, alongside fixes for Bun lockfile pruning and cache output symlinks.
- Turborepo now supports nub as a native package manager, with lockfile parsing in v2.10.2 and an explicit nub flag in create-turbo for new project setup
- Bun lockfile pruning no longer loses 3-level nested entries, and symlinked cache outputs are no longer followed during prune
- Workspaces can declare the preferred package manager via devEngines, and package manager version comparisons are now normalized across the toolchain
MonJun 29, 20262 releases
Daily summary
Turborepo adopts devEngines and Vitest fixes stack traces
Turborepo’s stable channel now supports the devEngines.packageManager field for declaring workspace package managers, a new add package manager codemod, and Corepack hash fixes, while the Vitest VS Code extension improved Windows test failure stack trace matching.
- Turborepo v2.10.1 supports devEngines.packageManager for workspace package manager declarations, a new add package manager codemod, and fixes Corepack integrity hash support
- Vitest VS Code extension now normalizes Windows drive letter matching in test failure stack traces
ThuJun 25, 20262 releases
Daily summary
Deno 2.9 ships desktop builds and halves startup time
Deno 2.9 launched with the `deno desktop` subcommand for building native desktop apps from web projects as single binaries, along with a 50% cold-start speedup, CSS module imports, and direct lockfile reading from npm, pnpm, yarn, and Bun.
- Deno 2.9 introduces `deno desktop`, a new subcommand that compiles web framework projects into native desktop application binaries without Electron or extra tooling
- Cold startup cuts to 17ms (2x faster), RSS memory drops up to 3x, and realworld Deno.serve throughput improves 27%
- Deno.serve automatic compression is now opt-in (`--compress` flag); `deno install` reads npm, pnpm, yarn, and Bun lockfiles directly
- Turborepo 2.10.1-canary.1 migrates its TUI terminal engine from vt100 to Ghostty and avoids normalizing git index path joins for faster performance
Deno2Deno desktop ships; startup 2x faster, memory 3x less
v2.9
Deno 2.9 introduces deno desktop, a new command that builds native desktop applications from web framework projects with no extra toolchain, producing a single distributable binary with built-in Deno.* desktop APIs. Performance gains include 2x faster cold startup (17ms), up to 3x less RSS memory, and 27% higher realworld Deno.serve throughput. Also adds direct npm, pnpm, yarn, and Bun lockfile reading in deno install, CSS module imports, and a stronger test runner.
WedJun 24, 20261 release
Daily summary
Turborepo 2.10.0 ships incremental caching and graceful shutdown
Turborepo v2.10.0 introduced incremental task caching and graceful shutdown with preserved exit codes, along with a migration to OAuth device flow for Vercel authentication, while a canary release added deferred hashing and fixed transitive dependency pruning.
- Turborepo v2.10.0 adds incremental task caching to speed up builds, plus graceful shutdown that preserves process exit codes
- Vercel authentication now uses OAuth device flow, replacing the previous token-based approach
- The 2.9.19 canary introduces deferred hashing for task inputs and fixes stranded transitive dependencies when pruning npm workspace-nested packages
MonJun 22, 20261 release
WedJun 17, 20261 release
TueJun 16, 20261 release
SunJun 14, 20261 release