chore(release): 11.0.8

.changeset-released/release-11.0.txt

@@ -5,6 +5,9 @@ git-tarball-integrity
 global-yaml-user-prefs
 oidc-precedence-over-static-token
 pm-on-fail-survives-help-version
+preserve-non-derivable-tarballs
 recursive-filter-root-exclusion
 restore-publish-json-stdout
 scoped-registry-config-get-publish
+six-carrots-cross
+tarball-content-encoding

.changeset/preserve-non-derivable-tarballs.md

@@ -1,6 +0,0 @@
----
-"@pnpm/lockfile.utils": patch
-"pnpm": patch
----
-
-Restored the heuristic that preserves tarball URLs in `pnpm-lock.yaml` when they cannot be derived from name+version+registry, even with the default `lockfileIncludeTarballUrl: false`. Without this, `pnpm install --frozen-lockfile` from an empty store fails with `ERR_PNPM_FETCH_404` for packages on registries that serve tarballs from a non-standard path — most notably GitHub Packages (`https://npm.pkg.github.com/download/<scope>/<name>/<version>/<hash>`) and JSR. `lockfileIncludeTarballUrl: true` continues to force the URL into the lockfile for every package [#11276](https://github.com/pnpm/pnpm/issues/11276).

.changeset/six-carrots-cross.md

@@ -1,6 +0,0 @@
----
-"@pnpm/releasing.commands": patch
-"pnpm": patch
----
-
-Run `preversion`, `version`, and `postversion` lifecycle scripts for `pnpm version`.

.changeset/tarball-content-encoding.md

@@ -1,6 +0,0 @@
----
-"@pnpm/fetching.tarball-fetcher": patch
-"pnpm": patch
----
-
-Fixed `ERR_PNPM_BAD_TARBALL_SIZE` when a registry serves tarballs with an end-to-end `Content-Encoding` (e.g. `gzip`). Tarballs are already compressed, so the fetcher now requests them with `Accept-Encoding: identity` (matching pnpm v10's effective behavior) and, as defense in depth against misbehaving servers, no longer enforces the strict `Content-Length` check when the response declares a `Content-Encoding` — `Content-Length` in that case refers to the encoded payload, not the decoded bytes the fetch implementation yields [#11506](https://github.com/pnpm/pnpm/issues/11506).

.meta-updater/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm-private/updater
 
+## 1100.0.9
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.8
 
 ### Patch Changes

.meta-updater/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm-private/updater",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "private": true,
   "type": "module",
   "scripts": {

agent/server/CHANGELOG.md

@@ -1,5 +1,14 @@
 # pnpm-agent
 
+## 0.0.10
+
+### Patch Changes
+
+- @pnpm/installing.deps-installer@1101.0.8
+- @pnpm/lockfile.fs@1100.0.6
+- @pnpm/installing.client@1100.0.11
+- @pnpm/store.controller@1101.0.3
+
 ## 0.0.9
 
 ### Patch Changes

agent/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm-agent",
-  "version": "0.0.9",
+  "version": "0.0.10",
   "description": "pnpm agent server for server-side resolution and store-aware downloads",
   "keywords": [
     "pnpm",

building/after-install/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/building.after-install
 
+## 1101.0.8
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/installing.context@1100.0.7
+  - @pnpm/store.connection-manager@1100.0.12
+
 ## 1101.0.7
 
 ### Patch Changes

building/after-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.after-install",
-  "version": "1101.0.7",
+  "version": "1101.0.8",
   "description": "Rebuild packages that are already installed by running their lifecycle scripts",
   "keywords": [
     "pnpm",

building/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/building.commands
 
+## 1100.0.13
+
+### Patch Changes
+
+- @pnpm/building.after-install@1101.0.8
+- @pnpm/installing.commands@1100.1.11
+- @pnpm/store.connection-manager@1100.0.12
+
 ## 1100.0.12
 
 ### Patch Changes

building/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Commands for rebuilding and managing dependency builds",
   "keywords": [
     "pnpm",

building/during-install/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/building.during-install
 
+## 1101.0.6
+
+### Patch Changes
+
+- @pnpm/deps.graph-hasher@1100.1.4
+
 ## 1101.0.5
 
 ### Patch Changes

building/during-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.during-install",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "Build packages in node_modules",
   "keywords": [
     "pnpm",

deps/compliance/audit/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/audit
 
+## 1101.0.5
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1101.0.4
 
 ### Patch Changes

deps/compliance/audit/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.audit",
-  "version": "1101.0.4",
+  "version": "1101.0.5",
   "description": "Audit a lockfile",
   "keywords": [
     "pnpm",

deps/compliance/commands/CHANGELOG.md

@@ -1,5 +1,17 @@
 # @pnpm/deps.compliance.commands
 
+## 1101.1.10
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.compliance.audit@1101.0.5
+  - @pnpm/deps.compliance.license-scanner@1100.0.8
+  - @pnpm/deps.compliance.sbom@1100.0.8
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/installing.commands@1100.1.11
+
 ## 1101.1.9
 
 ### Patch Changes

deps/compliance/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.commands",
-  "version": "1101.1.9",
+  "version": "1101.1.10",
   "description": "pnpm commands for audit, licenses, and sbom",
   "keywords": [
     "pnpm",

deps/compliance/license-scanner/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/license-scanner
 
+## 1100.0.8
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.7
 
 ### Patch Changes

deps/compliance/license-scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.license-scanner",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Check for licenses packages",
   "keywords": [
     "pnpm",

deps/compliance/sbom/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/deps.compliance.sbom
 
+## 1100.0.8
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.0.7
 
 ### Patch Changes

deps/compliance/sbom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.sbom",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Generate SBOM from pnpm lockfile",
   "keywords": [
     "pnpm",

deps/graph-builder/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/deps.graph-builder
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

deps/graph-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.graph-builder",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "A package for building a dependency graph from a lockfile",
   "keywords": [
     "pnpm",

deps/graph-hasher/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/calc-dep-state
 
+## 1100.1.4
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.1.3
 
 ### Patch Changes

deps/graph-hasher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.graph-hasher",
-  "version": "1100.1.3",
+  "version": "1100.1.4",
   "description": "Calculates the state of a dependency",
   "keywords": [
     "pnpm",

deps/inspection/commands/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/deps.inspection.commands
 
+## 1100.1.12
+
+### Patch Changes
+
+- @pnpm/deps.inspection.outdated@1100.0.11
+- @pnpm/lockfile.fs@1100.0.6
+- @pnpm/resolving.default-resolver@1100.0.10
+- @pnpm/deps.inspection.list@1100.0.7
+- @pnpm/global.commands@1100.0.13
+- @pnpm/deps.inspection.peers-checker@1100.0.6
+
 ## 1100.1.11
 
 ### Patch Changes

deps/inspection/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.commands",
-  "version": "1100.1.11",
+  "version": "1100.1.12",
   "description": "The list, ll, why, and outdated commands of pnpm",
   "keywords": [
     "pnpm",

deps/inspection/list/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/list
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/deps.inspection.tree-builder@1100.0.6
+- @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

deps/inspection/list/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.list",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "List installed packages in a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/inspection/outdated/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/outdated
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/installing.client@1100.0.11
+
 ## 1100.0.10
 
 ### Patch Changes

deps/inspection/outdated/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.outdated",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Check for outdated packages",
   "keywords": [
     "pnpm",

deps/inspection/peers-checker/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/deps.inspection.peers-checker
 
+## 1100.0.6
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

deps/inspection/peers-checker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.peers-checker",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Check for unmet and missing peer dependency issues from the lockfile",
   "keywords": [
     "pnpm",

deps/inspection/tree-builder/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/reviewing.dependencies-hierarchy
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

deps/inspection/tree-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.tree-builder",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Creates a dependencies hierarchy for a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/status/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/deps.status
 
+## 1100.0.11
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+- @pnpm/lockfile.verification@1100.0.7
+- @pnpm/installing.context@1100.0.7
+- @pnpm/lockfile.settings-checker@1100.0.7
+
 ## 1100.0.10
 
 ### Patch Changes

deps/status/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.status",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Check dependencies status",
   "keywords": [
     "pnpm",

engine/pm/commands/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @pnpm/engine.pm.commands
 
+## 1101.1.8
+
+### Patch Changes
+
+- @pnpm/deps.graph-hasher@1100.1.4
+- @pnpm/installing.deps-restorer@1101.0.7
+- @pnpm/installing.env-installer@1101.0.6
+- @pnpm/lockfile.fs@1100.0.6
+- @pnpm/installing.client@1100.0.11
+- @pnpm/global.commands@1100.0.13
+- @pnpm/store.connection-manager@1100.0.12
+- @pnpm/store.controller@1101.0.3
+
 ## 1101.1.7
 
 ### Patch Changes

engine/pm/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.pm.commands",
-  "version": "1101.1.7",
+  "version": "1101.1.8",
   "description": "pnpm commands for self-updating and setting up pnpm",
   "keywords": [
     "pnpm",

exec/commands/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/plugin-commands-script-runners
 
+## 1100.1.3
+
+### Patch Changes
+
+- @pnpm/installing.client@1100.0.11
+- @pnpm/building.commands@1100.0.13
+- @pnpm/installing.commands@1100.1.11
+- @pnpm/deps.status@1100.0.11
+
 ## 1100.1.2
 
 ### Patch Changes

exec/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.commands",
-  "version": "1100.1.2",
+  "version": "1100.1.3",
   "description": "Commands for running scripts",
   "keywords": [
     "pnpm",

fetching/tarball-fetcher/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/tarball-fetcher
 
+## 1101.0.3
+
+### Patch Changes
+
+- 36b4c83: Fixed `ERR_PNPM_BAD_TARBALL_SIZE` when a registry serves tarballs with an end-to-end `Content-Encoding` (e.g. `gzip`). Tarballs are already compressed, so the fetcher now requests them with `Accept-Encoding: identity` (matching pnpm v10's effective behavior) and, as defense in depth against misbehaving servers, no longer enforces the strict `Content-Length` check when the response declares a `Content-Encoding` — `Content-Length` in that case refers to the encoded payload, not the decoded bytes the fetch implementation yields [#11506](https://github.com/pnpm/pnpm/issues/11506).
+
 ## 1101.0.2
 
 ### Patch Changes

fetching/tarball-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.tarball-fetcher",
-  "version": "1101.0.2",
+  "version": "1101.0.3",
   "description": "Fetcher for packages hosted as tarballs",
   "keywords": [
     "pnpm",

global/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/global.commands
 
+## 1100.0.13
+
+### Patch Changes
+
+- @pnpm/installing.deps-installer@1101.0.8
+- @pnpm/deps.inspection.list@1100.0.7
+- @pnpm/store.connection-manager@1100.0.12
+
 ## 1100.0.12
 
 ### Patch Changes

global/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/global.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Global package command handlers for pnpm",
   "keywords": [
     "pnpm",

installing/client/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/client
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [36b4c83]
+  - @pnpm/fetching.tarball-fetcher@1101.0.3
+  - @pnpm/resolving.default-resolver@1100.0.10
+
 ## 1100.0.10
 
 ### Patch Changes

installing/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.client",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Creates the package resolve and fetch functions",
   "keywords": [
     "pnpm",

installing/commands/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/plugin-commands-installation
 
+## 1100.1.11
+
+### Patch Changes
+
+- @pnpm/building.after-install@1101.0.8
+- @pnpm/deps.inspection.outdated@1100.0.11
+- @pnpm/installing.deps-installer@1101.0.8
+- @pnpm/installing.env-installer@1101.0.6
+- @pnpm/global.commands@1100.0.13
+- @pnpm/deps.status@1100.0.11
+- @pnpm/installing.context@1100.0.7
+- @pnpm/store.connection-manager@1100.0.12
+- @pnpm/store.controller@1101.0.3
+
 ## 1100.1.10
 
 ### Patch Changes

installing/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.commands",
-  "version": "1100.1.10",
+  "version": "1100.1.11",
   "description": "Commands for installation",
   "keywords": [
     "pnpm",

installing/context/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/get-context
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+- @pnpm/installing.read-projects-context@1100.0.7
+- @pnpm/store.controller@1101.0.3
+
 ## 1100.0.6
 
 ### Patch Changes

installing/context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.context",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Gets context information about a project",
   "keywords": [
     "pnpm",

installing/deps-installer/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @pnpm/core
 
+## 1101.0.8
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/building.after-install@1101.0.8
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/installing.deps-resolver@1100.0.7
+  - @pnpm/installing.deps-restorer@1101.0.7
+  - @pnpm/installing.linking.modules-cleaner@1100.0.7
+  - @pnpm/lockfile.filtering@1100.0.7
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/lockfile.preferred-versions@1100.0.7
+  - @pnpm/lockfile.to-pnp@1100.0.6
+  - @pnpm/lockfile.verification@1100.0.7
+  - @pnpm/building.during-install@1101.0.6
+  - @pnpm/installing.context@1100.0.7
+  - @pnpm/lockfile.settings-checker@1100.0.7
+  - @pnpm/installing.package-requester@1101.0.3
+
 ## 1101.0.7
 
 ### Patch Changes

installing/deps-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-installer",
-  "version": "1101.0.7",
+  "version": "1101.0.8",
   "description": "Fast, disk space efficient installation engine",
   "keywords": [
     "pnpm",

installing/deps-resolver/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/resolve-dependencies
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/lockfile.preferred-versions@1100.0.7
+  - @pnpm/fetching.pick-fetcher@1100.0.5
+
 ## 1100.0.6
 
 ### Patch Changes

installing/deps-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-resolver",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Resolves dependency graph of a package",
   "keywords": [
     "pnpm",

installing/deps-restorer/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @pnpm/headless
 
+## 1101.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.graph-builder@1100.0.7
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/installing.linking.modules-cleaner@1100.0.7
+  - @pnpm/installing.linking.real-hoist@1100.0.6
+  - @pnpm/lockfile.filtering@1100.0.7
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/lockfile.to-pnp@1100.0.6
+  - @pnpm/building.during-install@1101.0.6
+  - @pnpm/installing.package-requester@1101.0.3
+
 ## 1101.0.6
 
 ### Patch Changes

installing/deps-restorer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-restorer",
-  "version": "1101.0.6",
+  "version": "1101.0.7",
   "description": "Fast installation using only pnpm-lock.yaml",
   "keywords": [
     "pnpm",

installing/env-installer/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/config.deps-installer
 
+## 1101.0.6
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/deps.graph-hasher@1100.1.4
+  - @pnpm/installing.deps-resolver@1100.0.7
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/store.controller@1101.0.3
+
 ## 1101.0.5
 
 ### Patch Changes

installing/env-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.env-installer",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "Installer for configurational dependencies",
   "keywords": [
     "pnpm",

installing/linking/modules-cleaner/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/modules-cleaner
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.filtering@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

installing/linking/modules-cleaner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.linking.modules-cleaner",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Exports util functions to clean up node_modules",
   "keywords": [
     "pnpm",

installing/linking/real-hoist/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/real-hoist
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

installing/linking/real-hoist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.linking.real-hoist",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Hoists dependencies in a node_modules created by pnpm",
   "keywords": [
     "pnpm",

installing/read-projects-context/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/read-projects-context
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

installing/read-projects-context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.read-projects-context",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Reads the current state of projects from modules manifest",
   "keywords": [
     "pnpm",

lockfile/filtering/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/filter-lockfile
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

lockfile/filtering/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.filtering",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Filters a lockfile",
   "keywords": [
     "pnpm",

lockfile/fs/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/lockfile-file
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

lockfile/fs/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.fs",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Read/write pnpm-lock.yaml files",
   "keywords": [
     "pnpm",

lockfile/make-dedicated-lockfile/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/make-dedicated-lockfile
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

lockfile/make-dedicated-lockfile/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.make-dedicated-lockfile",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Creates a dedicated lockfile for a subset of workspace projects",
   "keywords": [
     "pnpm",

lockfile/preferred-versions/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/lockfile.preferred-versions
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+
 ## 1100.0.6
 
 ### Patch Changes

lockfile/preferred-versions/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.preferred-versions",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Get preferred version from lockfile",
   "keywords": [
     "pnpm",

lockfile/settings-checker/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/lockfile.settings-checker
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/lockfile.verification@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

lockfile/settings-checker/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.settings-checker",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Utilities to check if lockfile settings are out-of-date",
   "keywords": [
     "pnpm",

lockfile/to-pnp/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/lockfile-to-pnp
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

lockfile/to-pnp/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.to-pnp",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Creates a Plug'n'Play file from a pnpm-lock.yaml",
   "keywords": [
     "pnpm",

lockfile/utils/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/lockfile-utils
 
+## 1100.0.6
+
+### Patch Changes
+
+- cfa271b: Restored the heuristic that preserves tarball URLs in `pnpm-lock.yaml` when they cannot be derived from name+version+registry, even with the default `lockfileIncludeTarballUrl: false`. Without this, `pnpm install --frozen-lockfile` from an empty store fails with `ERR_PNPM_FETCH_404` for packages on registries that serve tarballs from a non-standard path — most notably GitHub Packages (`https://npm.pkg.github.com/download/<scope>/<name>/<version>/<hash>`) and JSR. `lockfileIncludeTarballUrl: true` continues to force the URL into the lockfile for every package [#11276](https://github.com/pnpm/pnpm/issues/11276).
+
 ## 1100.0.5
 
 ### Patch Changes

lockfile/utils/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.utils",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "description": "Utils for dealing with pnpm-lock.yaml",
   "keywords": [
     "pnpm",

lockfile/verification/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/lockfile.verification
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/installing.context@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

lockfile/verification/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/lockfile.verification",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Checks a lockfile",
   "keywords": [
     "pnpm",

modules-mounter/daemon/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/mount-modules
 
+## 1100.0.10
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+
 ## 1100.0.9
 
 ### Patch Changes

modules-mounter/daemon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/modules-mounter.daemon",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "Mounts a node_modules directory with FUSE",
   "keywords": [
     "pnpm",

patching/commands/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/plugin-commands-patching
 
+## 1100.0.13
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/fetching.pick-fetcher@1100.0.5
+  - @pnpm/installing.commands@1100.1.11
+  - @pnpm/store.connection-manager@1100.0.12
+
 ## 1100.0.12
 
 ### Patch Changes

patching/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/patching.commands",
-  "version": "1100.0.12",
+  "version": "1100.0.13",
   "description": "Commands for creating patches",
   "keywords": [
     "pnpm",

pnpm/CHANGELOG.md

@@ -1,5 +1,13 @@
 # pnpm
 
+## 11.0.8
+
+### Patch Changes
+
+- Restored the heuristic that preserves tarball URLs in `pnpm-lock.yaml` when they cannot be derived from name+version+registry, even with the default `lockfileIncludeTarballUrl: false`. Without this, `pnpm install --frozen-lockfile` from an empty store fails with `ERR_PNPM_FETCH_404` for packages on registries that serve tarballs from a non-standard path — most notably GitHub Packages (`https://npm.pkg.github.com/download/<scope>/<name>/<version>/<hash>`) and JSR. `lockfileIncludeTarballUrl: true` continues to force the URL into the lockfile for every package [#11276](https://github.com/pnpm/pnpm/issues/11276).
+- Run `preversion`, `version`, and `postversion` lifecycle scripts for `pnpm version`.
+- Fixed `ERR_PNPM_BAD_TARBALL_SIZE` when a registry serves tarballs with an end-to-end `Content-Encoding` (e.g. `gzip`). Tarballs are already compressed, so the fetcher now requests them with `Accept-Encoding: identity` (matching pnpm v10's effective behavior) and, as defense in depth against misbehaving servers, no longer enforces the strict `Content-Length` check when the response declares a `Content-Encoding` — `Content-Length` in that case refers to the encoded payload, not the decoded bytes the fetch implementation yields [#11506](https://github.com/pnpm/pnpm/issues/11506).
+
 ## 11.0.7
 
 ### Patch Changes

pnpm/artifacts/darwin-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/macos-arm64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/exe/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exe",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "description": "Fast, disk space efficient package manager",
   "keywords": [
     "pnpm",

pnpm/artifacts/linux-arm64-musl/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/linuxstatic-arm64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/linux-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/linux-arm64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/linux-x64-musl/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/linuxstatic-x64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/linux-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/linux-x64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/win32-arm64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/win-arm64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/artifacts/win32-x64/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/win-x64",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "keywords": [
     "pnpm",
     "pnpm11",

pnpm/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm",
-  "version": "11.0.7",
+  "version": "11.0.8",
   "description": "Fast, disk space efficient package manager",
   "keywords": [
     "pnpm",

releasing/commands/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/releasing.commands
 
+## 1100.2.10
+
+### Patch Changes
+
+- ce474cc: Run `preversion`, `version`, and `postversion` lifecycle scripts for `pnpm version`.
+  - @pnpm/lockfile.fs@1100.0.6
+  - @pnpm/installing.client@1100.0.11
+  - @pnpm/installing.commands@1100.1.11
+
 ## 1100.2.9
 
 ### Patch Changes

releasing/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/releasing.commands",
-  "version": "1100.2.9",
+  "version": "1100.2.10",
   "description": "Commands for deploy, pack, and publish",
   "keywords": [
     "pnpm",

store/commands/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/store.commands
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [cfa271b]
+  - @pnpm/lockfile.utils@1100.0.6
+  - @pnpm/installing.client@1100.0.11
+  - @pnpm/installing.context@1100.0.7
+  - @pnpm/store.connection-manager@1100.0.12
+
 ## 1100.0.11
 
 ### Patch Changes

store/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/store.commands",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "Commands for controlling and inspecting the store",
   "keywords": [
     "pnpm",