pnpm 11.9 computes missing tarball integrity for registries that cannot publish checksums, adds pnpm sbom --exclude-peers, improves audit performanc...
pnpm
pnpm 11.8 adds install dry-run previews, Node.js package map generation, richer SBOM output, pnpm view defaulting to the current package, and correc...
pnpm 11.7 adds a frozenStore setting for installing against a read-only package store, a --batch flag for publishing a whole workspace in one requ...
pnpm 11.6 adds a file-free way to supply registry authentication through npm_config_//… and pnpm_config_//… environment variables, raises the defa...
pnpm used to expand ${ENV_VAR} placeholders everywhere it found them — including in the .npmrc and pnpm-workspace.yaml files that live inside th...
pnpm 11.5 adds a hoistingLimits setting for controlling how far dependencies hoist in nodeLinker: hoisted installs, replaces the interactive promp...
pnpm 11.4 closes a cluster of supply-chain holes around lockfile integrity, credential scoping, git resolutions, patch files, and dependency aliases, ...
pnpm 11.3 adds support for npm's staged publishing (pnpm stage), the new trustLockfile setting for skipp...
pnpm 11.2 ships an experimental opt-in into pacquet (the Rust port of pnpm) as the install backend, expands ...
pnpm 11.1 adds a few new commands — pnpm audit signatures, pnpm bugs, and [`pn...
pnpm 11 is here! This release tightens the security defaults introduced throughout the v10 cycle, drops the npm CLI fallback for publishing in favor o...
pnpm 10.32 adds an --all flag to pnpm approve-builds for approving all pending builds without interactive prompts.
Minor Changes[](https://p...
pnpm 10.31 preserves comments and formatting when updating pnpm-workspace.yaml, and includes numerous bug fixes.
Minor Changes[](https://pnpm....
pnpm 10.30 redesigns pnpm why to show a reverse dependency tree, making it much easier to understand why a package is installed.
Minor Changes[...
pnpm 10.29 adds catalog: protocol support to pnpm dlx, allows configuring auditLevel in pnpm-workspace.yaml, supports a bare workspace: spec...
pnpm 10.28 introduces a new beforePacking hook to customize package.json at publish time, improves filtered install performance, and includes severa...
pnpm 10.27 adds a new setting to ignore trust policy checks for older package versions, introduces a project registry for global virtual store pruning...
2025 has been a transformative year for pnpm. While our primary focus was redefining the security model of package management, we also delivered signi...
pnpm 10.26 introduces stricter security defaults for git-hosted dependencies, adds allowBuilds for granular script permissions, and includes a new s...
pnpm 10.25 improves certificate handling, adds a bare pnpm init, and ships several quality-of-life fixes.