pnpm 10.22
Added support for excluding packages from trust policy and overriding the engines field on publish.
Added support for trustPolicyExclude.
You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:
trustPolicy: no-downgrade
trustPolicyExclude:
- chokidar@4.0.3
- webpack@4.47.0 || 5.102.1
Related issue: #10164
Allow to override the engines field on publish by the publishConfig.engines field.
This allows you to specify different engine requirements for your published package than what you use during development.
"undefined"!=typeof _bsa&&_bsa&&_bsa.init("custom","CWYI4K7E","placement:pnpmio",{target:"#bsa-custom-01",template:`
##description##
##callToAction##
`})
Fetched May 2, 2026
pnpm 11 is here! This release tightens the security defaults introduced throughout the v10 cycle, drops the npm CLI fallback for publishing…
introduces a new hook to customize package.json at publish time, improves filtered install performance, and includes several bug fixes. Min…