chore(release): 11.28.7, pacquet 12.15.0, pnpr 0.1.0-alpha.16 (#17187)

* chore(release): 11.28.7, pacquet 12.15.0, pnpr 0.1.0-alpha.16 * docs(release): curate 11.28.7, pacquet 12.15.0, and pnpr 0.1.0-alpha.16 release notes Add lead paragraphs and group the patch entries by what the reader was doing, with security fixes first on each page. - v11: lead with the registry metadata name check, pinned pnpm trustPolicy check, maxTarballUnpackedSize, and the removal of registry revisions; merge overlapping entries for minimumReleaseAge metadata revalidation, frozen-lockfile directory dependency checks, syncInjectedDepsAfterScripts, verifyDepsBeforeRun, pnpm sbom, and unreadable config settings. - v12: order minor highlights from config includes and lockfile.integrityTarget down to interactive update styling; drop the pnpr-only distribution note from the CLI changelog; merge overlapping entries for workspace and pnpr install speedups, minimumReleaseAge and If-Modified-Since revalidation, frozen-lockfile and injected package checks, verifyDepsBeforeRun, pnpm prune, pnpm pack, pnpm licenses list, pnpm self-update, pinned pnpm flag forwarding, and WebContainer fixes. - pnpr: lead the minor section with the breaking ecosystem URL prefix, hosted storage layout, artifacts.orgs, and strict config schema changes; fold dist.pnpr tarball metadata into one entry and drop the redundant /metrics note; lead the patch section with reserved-username and auth security fixes. - Use one issue-link label style across the release pages. --------- Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
2026-10-28 10:38:23 -04:00 · 2026-10-21 12:15:12 +02:00
1 parent 7b956715f0
commit 91774e72a0
@@ -1,6 +0,0 @@
---
-"@pnpm/config.reader": patch
-"pnpm": patch
---
-
-pnpm again accepts `httpProxy` and `httpsProxy` set to `null` or written with no value in `pnpm-workspace.yaml` and the global config file, and treats them as unset. Since 11.28.5 these values failed with `ERR_PNPM_INVALID_SETTING`.
@@ -1,7 +0,0 @@
---
-"@pnpm/installing.deps-resolver": patch
-"pnpm": patch
-"pacquet": patch
---
-
-`pnpm install` no longer fails with `ERR_PNPM_NO_MATCHING_VERSION` after a change to `overrides` when the lockfile resolves an optional peer dependency to an npm alias of another package [#16654](https://github.com/pnpm/pnpm/issues/16654).
@@ -1,7 +0,0 @@
---
-"@pnpm/config.reader": patch
-"pnpm": patch
-"pacquet": patch
---
-
-A key under a registry URL in the `_auth` setting that does not start with `@` is now skipped with a warning, so a field a later pnpm version adds there no longer breaks this one. A key that holds an `authToken` object but lacks its `@`, such as `org` for `@org`, is still an error.
@@ -1,5 +0,0 @@
---
-"pacquet": patch
---
-
-`pnpm install` is faster and uses less memory in large workspaces with `sharedWorkspaceLockfile: false`. Each project's install no longer reads the manifests of every other workspace project again. Installs that wait for their workspace dependencies now count toward `workspaceConcurrency` [#16966](https://github.com/pnpm/pnpm/issues/16966).
@@ -1,5 +0,0 @@
---
-"pacquet": patch
---
-
-In a single-project repository, `pnpm install` and `verifyDepsBeforeRun` now record a successful lockfile check, so later runs skip it until the lockfile changes again. Before, every run repeated the check after the lockfile changed [#16993](https://github.com/pnpm/pnpm/issues/16993).
@@ -1,8 +0,0 @@
---
-"@pnpm/installing.commands": patch
-"@pnpm/installing.deps-installer": patch
-"@pnpm/workspace.workspace-manifest-writer": patch
-"pnpm": patch
---
-
-`catalogPrune` no longer removes catalog entries that `pnpm-lock.yaml` still records for workspace projects missing from disk. This affected `pnpm remove` and installs that leave the lockfile unchanged, such as frozen installs. Before, a following frozen install failed with `ERR_PNPM_LOCKFILE_CONFIG_MISMATCH` [#16679](https://github.com/pnpm/pnpm/issues/16679).
@@ -1,6 +0,0 @@
-## 1100.0.37
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/assert-store@1100.0.37
@@ -0,0 +1,10 @@
+## 1100.0.38
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/assert-store@1100.0.38
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/testing.registry-mock@1100.0.16
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,8 @@
+## 1100.0.38
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/store.cafs@1100.3.8
+  - @pnpm/store.index@1101.0.3
+  - @pnpm/testing.registry-mock@1100.0.16
@@ -1,6 +0,0 @@
-## 1100.3.15
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
@@ -0,0 +1,9 @@
+## 1100.3.16
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/network.fetch@1100.1.23
+  - @pnpm/registry-access.client@1100.1.25
@@ -0,0 +1,12 @@
+## 1100.0.38
+
+### Patch Changes
+
+- Fixed the README usage examples to match these packages' current APIs.
+
+- Updated dependencies:
+  - @pnpm/bins.resolver@1100.0.18
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -0,0 +1,9 @@
+## 1100.0.29
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/bins.resolver@1100.0.18
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,8 @@
+## 1100.0.18
+
+### Patch Changes
+
+- Fixed the README usage examples to match these packages' current APIs.
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.2
@@ -1,13 +0,0 @@
-## 1103.0.11
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/building.policy@1100.1.7
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/exec.lifecycle@1100.1.24
-  - @pnpm/installing.context@1101.0.11
-  - @pnpm/installing.deps-restorer@1103.2.5
-  - @pnpm/lockfile.settings-checker@1100.2.13
-  - @pnpm/store.connection-manager@1101.3.4
-  - @pnpm/store.index@1101.0.2
@@ -0,0 +1,32 @@
+## 1103.0.12
+
+### Patch Changes
+
+- An injected workspace package now keeps only the files its manifest lists after a lifecycle script or a script named in `syncInjectedDepsAfterScripts` rebuilds it. Before, these refreshes copied every file of the package directory into the injected copy, including files that `files` or `.npmignore` leave out. With `deployAllFiles: true` the copy still gets every file.
+
+- Updated dependencies:
+  - @pnpm/bins.linker@1100.0.38
+  - @pnpm/building.pkg-requires-build@1100.0.21
+  - @pnpm/building.policy@1100.1.8
+  - @pnpm/config.normalize-registries@1101.0.4
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/deps.graph-hasher@1100.3.8
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/exec.lifecycle@1100.1.25
+  - @pnpm/fs.symlink-dependency@1100.0.25
+  - @pnpm/installing.context@1101.0.12
+  - @pnpm/installing.deps-restorer@1103.2.6
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.settings-checker@1100.2.14
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/patching.config@1100.1.10
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/store.cafs@1100.3.8
+  - @pnpm/store.connection-manager@1101.3.5
+  - @pnpm/store.controller-types@1101.3.4
+  - @pnpm/store.index@1101.0.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.task-scheduler@1100.0.5
@@ -1,11 +0,0 @@
-## 1101.2.10
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/building.after-install@1103.0.11
-  - @pnpm/building.policy@1100.1.7
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/config.writer@1100.0.33
-  - @pnpm/installing.commands@1101.4.6
-  - @pnpm/store.connection-manager@1101.3.4
@@ -0,0 +1,19 @@
+## 1101.2.11
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/building.after-install@1103.0.12
+  - @pnpm/building.policy@1100.1.8
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/config.writer@1100.0.34
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/global.packages@1101.1.8
+  - @pnpm/installing.commands@1101.4.7
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/store.connection-manager@1101.3.5
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.projects-sorter@1101.0.2
+  - @pnpm/workspace.task-scheduler@1100.0.5
+  - @pnpm/workspace.workspace-manifest-reader@1100.3.0
@@ -1,7 +0,0 @@
-## 1102.2.8
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/exec.lifecycle@1100.1.24
@@ -0,0 +1,19 @@
+## 1102.2.9
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/bins.linker@1100.0.38
+  - @pnpm/building.pkg-requires-build@1100.0.21
+  - @pnpm/config.package-is-installable@1100.2.4
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/deps.graph-hasher@1100.3.8
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/exec.lifecycle@1100.1.25
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/pnpr.client@3.1.4
+  - @pnpm/store.controller-types@1101.3.4
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.task-scheduler@1100.0.5
@@ -0,0 +1,7 @@
+## 1100.0.21
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/types@1102.1.2
@@ -1,6 +0,0 @@
-## 1100.1.7
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.version-policy@1100.2.8
@@ -0,0 +1,8 @@
+## 1100.1.8
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/types@1102.1.2
@@ -1,8 +0,0 @@
-## 1100.0.50
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/resolving.npm-resolver@1104.2.6
-  - @pnpm/store.index@1101.0.2
@@ -0,0 +1,9 @@
+## 1100.0.51
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/store.cafs@1100.3.8
+  - @pnpm/store.index@1101.0.3
@@ -1,7 +0,0 @@
-## 1100.1.12
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/cache.api@1100.0.50
-  - @pnpm/config.reader@1102.3.5
@@ -0,0 +1,9 @@
+## 1100.1.13
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cache.api@1100.0.51
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/store.path@1100.1.3
@@ -1,6 +0,0 @@
-## 1100.0.49
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
@@ -3,4 +3,4 @@
 ### Patch Changes

 - Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
+  - @pnpm/config.reader@1102.3.6
@@ -1,5 +0,0 @@
-## 1100.3.25
-
-### Patch Changes
-
- Escape codes in script output that moved the cursor or cleared the screen garbled pnpm's output. pnpm now drops them and keeps only color codes. Color codes are dropped too when pnpm's own output is not in color.
@@ -0,0 +1,9 @@
+## 1100.3.26
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/deps.inspection.peers-issues-renderer@1100.0.16
+  - @pnpm/types@1102.1.2
@@ -3,4 +3,4 @@
 ### Patch Changes

 - Updated dependencies:
-  - @pnpm/workspace.package-patterns@1100.0.2
+  - @pnpm/types@1102.1.2
@@ -1,6 +0,0 @@
-## 1100.1.16
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/workspace.root-finder@1100.1.3
@@ -0,0 +1,6 @@
+## 1100.1.17
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/workspace.root-finder@1100.1.4
@@ -0,0 +1,10 @@
+## 1101.0.33
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/config.package-is-installable@1100.2.4
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -1,7 +0,0 @@
-## 1101.0.11
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/workspace.workspace-manifest-writer@1100.2.7
@@ -0,0 +1,11 @@
+## 1101.0.12
+
+### Patch Changes
+
+- pnpm now recognizes `externalDependencies` and `autoInstallPeersFromHighestMatch` in `pnpm-workspace.yaml` without warning and forwards both settings to `pnpm install`. Previously, setting `externalDependencies` in `pnpm-workspace.yaml` with `nodeLinker: hoisted` crashed `pnpm install` with `externalDependencies.has is not a function` [pnpm/tasks#166](https://github.com/pnpm/tasks/issues/166).
+
+- Updated dependencies:
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.normalize-registries@1101.0.4
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/workspace.workspace-manifest-writer@1100.2.8
@@ -0,0 +1,8 @@
+## 1101.0.4
+
+### Patch Changes
+
+- Fixed the README usage examples to match these packages' current APIs.
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,9 @@
+## 1100.2.4
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/engine.runtime.system-version@1100.0.14
+  - @pnpm/types@1102.1.2
@@ -1,6 +1,6 @@
-## 1101.0.11
+## 1101.0.3

 ### Patch Changes

 - Updated dependencies:
-  - @pnpm/store.index@1101.0.2
+  - @pnpm/types@1102.1.2
@@ -1,9 +0,0 @@
-## 1102.3.5
-
-### Patch Changes
-
- pnpm again accepts `httpProxy` and `httpsProxy` set to `null` or written with no value in `pnpm-workspace.yaml` and the global config file, and treats them as unset. Since 11.28.5 these values failed with `ERR_PNPM_INVALID_SETTING`.
-
- A key under a registry URL in the `_auth` setting that does not start with `@` is now skipped with a warning, so a field a later pnpm version adds there no longer breaks this one. A key that holds an `authToken` object but lacks its `@`, such as `org` for `@org`, is still an error.
-
- pnpm now switches to the pnpm version a project pins even when it cannot read its configuration. Previously, a setting it rejected in the global config file, an `.npmrc` file, `_auth`, or `pnpm-workspace.yaml` stopped every command, `pnpm --version` included.
@@ -0,0 +1,23 @@
+## 1102.3.6
+
+### Patch Changes
+
+- The warning about unrecognized settings in `pnpm-workspace.yaml` and the global `config.yaml` now names `addMissingPeerTypes`, `autoDedupe`, `bootConfig`, `macosBackup`, `nodePackageMap`, `permissions`, `pipelineBase`, `publishWaitTimeout`, `python`, `remoteCache`, `saveTypes`, `skills`, `storeIndexFormat`, and `tools` as pnpm v12 settings [pnpm/tasks#167](https://github.com/pnpm/tasks/issues/167).
+
+- pnpm now records the pinned pnpm version in the `pnpm-lock.yaml` under the `lockfileDir` set in `pnpm-workspace.yaml`, and resolves a relative `lockfileDir` from the workspace root. pnpm used to write a second `pnpm-lock.yaml` at the workspace root.
+
+- pnpm now recognizes `externalDependencies` and `autoInstallPeersFromHighestMatch` in `pnpm-workspace.yaml` without warning and forwards both settings to `pnpm install`. Previously, setting `externalDependencies` in `pnpm-workspace.yaml` with `nodeLinker: hoisted` crashed `pnpm install` with `externalDependencies.has is not a function` [pnpm/tasks#166](https://github.com/pnpm/tasks/issues/166).
+
+- Added the `maxTarballUnpackedSize` setting. `pnpm install` fails with `ERR_PNPM_TARBALL_TOO_LARGE` when the files of one package unpack to more than this many bytes, 4 GiB by default [pnpm/tasks#81](https://github.com/pnpm/tasks/issues/81).
+
+- `pmOnFail` and `lockfileDir` in `pnpm-workspace.yaml` now stay in force when another setting in that file cannot be read. pnpm used to switch to the pinned version despite `pmOnFail: ignore` in that case.
+
+- pnpm now ignores a `PNPM_CONFIG_*` environment variable for a URL setting, such as `PNPM_CONFIG_REGISTRY`, when its value is not a URL. Such a value used to make every command fail with `Invalid URL`.
+
+- Updated dependencies:
+  - @pnpm/exec.esm-node-path-loader@1100.0.2
+  - @pnpm/hooks.pnpmfile@1100.0.37
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
+  - @pnpm/workspace.workspace-manifest-reader@1100.3.0
@@ -1,5 +0,0 @@
-## 1100.2.8
-
-### Patch Changes
-
- `pnpm install` and `pnpm add --config` now apply `minimumReleaseAge` when they resolve a config dependency. A config dependency range resolves to the newest version that is old enough, so a later clean `pnpm install --frozen-lockfile` accepts the lockfile [#16660](https://github.com/pnpm/pnpm/issues/16660).
@@ -1,6 +1,6 @@
-## 1100.0.37
+## 1100.2.9

 ### Patch Changes

 - Updated dependencies:
-  - @pnpm/store.index@1101.0.2
+  - @pnpm/types@1102.1.2
@@ -1,6 +0,0 @@
-## 1100.0.33
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/workspace.workspace-manifest-writer@1100.2.7
@@ -0,0 +1,7 @@
+## 1100.0.34
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.workspace-manifest-writer@1100.2.8
@@ -1,6 +1,6 @@
-## 1102.0.20
+## 1101.0.3

 ### Patch Changes

 - Updated dependencies:
-  - @pnpm/store.index@1101.0.2
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,14 @@
+## 1101.0.43
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/lockfile.detect-dep-types@1100.0.28
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.peer-edges@1100.0.3
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/network.fetch@1100.1.23
+  - @pnpm/types@1102.1.2
@@ -1,11 +0,0 @@
-## 1102.1.10
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/config.version-policy@1100.2.8
-  - @pnpm/config.writer@1100.0.33
-  - @pnpm/deps.compliance.license-scanner@1101.0.11
-  - @pnpm/deps.compliance.sbom@1101.0.10
-  - @pnpm/installing.commands@1101.4.6
@@ -0,0 +1,30 @@
+## 1102.1.11
+
+### Patch Changes
+
+- `pnpm sbom` now reads project lockfiles in workspaces with `sharedWorkspaceLockfile: false`, including filtered and split output.
+
+- `pnpm licenses list` reports no licenses for workspace projects not recorded in the lockfile. It errors when `pnpm-lock.yaml` is missing. Empty results now use the requested text or JSON format [pnpm/tasks#174](https://github.com/pnpm/tasks/issues/174).
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.pick-registry-for-package@1101.0.3
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/config.writer@1100.0.34
+  - @pnpm/deps.compliance.audit@1101.0.43
+  - @pnpm/deps.compliance.license-scanner@1101.0.12
+  - @pnpm/deps.compliance.sbom@1101.0.11
+  - @pnpm/deps.security.signatures@1102.0.10
+  - @pnpm/installing.commands@1101.4.7
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/network.auth-header@1101.1.17
+  - @pnpm/network.fetch@1100.1.23
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/store.path@1100.1.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -1,7 +0,0 @@
-## 1101.0.11
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/store.index@1101.0.2
-  - @pnpm/store.pkg-finder@1100.0.40
@@ -0,0 +1,17 @@
+## 1101.0.12
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.package-is-installable@1100.2.4
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.detect-dep-types@1100.0.28
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/store.index@1101.0.3
+  - @pnpm/store.pkg-finder@1100.0.41
+  - @pnpm/types@1102.1.2
@@ -1,7 +0,0 @@
-## 1101.0.10
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/store.index@1101.0.2
-  - @pnpm/store.pkg-finder@1100.0.40
@@ -0,0 +1,20 @@
+## 1101.0.11
+
+### Patch Changes
+
+- `pnpm sbom` now reads project lockfiles in workspaces with `sharedWorkspaceLockfile: false`, including filtered and split output.
+
+- `pnpm sbom` now reports the repository of a package whose `repository` field is a `gist:` shorthand.
+
+- Updated dependencies:
+  - @pnpm/config.normalize-registries@1101.0.4
+  - @pnpm/config.package-is-installable@1100.2.4
+  - @pnpm/lockfile.detect-dep-types@1100.0.28
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/store.index@1101.0.3
+  - @pnpm/store.pkg-finder@1100.0.41
+  - @pnpm/types@1102.1.2
@@ -1,6 +0,0 @@
-## 1100.1.16
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.version-policy@1100.2.8
@@ -0,0 +1,8 @@
+## 1100.1.17
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/resolving.git-resolver@1100.1.28
+  - @pnpm/types@1102.1.2
@@ -1,5 +0,0 @@
-## 1101.1.5
-
-### Patch Changes
-
- With `enableGlobalVirtualStore`, an install that updates `node_modules` now restores the dependency links of a package in the global virtual store that an interrupted install left without them. Before, such an install kept the incomplete package if the project's `node_modules` already recorded it [#16642](https://github.com/pnpm/pnpm/issues/16642).
@@ -0,0 +1,18 @@
+## 1101.1.6
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.normalize-registries@1101.0.4
+  - @pnpm/config.package-is-installable@1100.2.4
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/deps.graph-hasher@1100.3.8
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/fs.symlink-dependency@1100.0.25
+  - @pnpm/hooks.types@1101.0.6
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/patching.config@1100.1.10
+  - @pnpm/store.controller-types@1101.3.4
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,11 @@
+## 1100.3.8
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/engine.runtime.system-version@1100.0.14
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
@@ -1,12 +0,0 @@
-## 1101.0.11
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/deps.github-actions@1100.1.16
-  - @pnpm/deps.inspection.list@1101.0.11
-  - @pnpm/deps.inspection.outdated@1100.1.37
-  - @pnpm/global.commands@1102.0.8
-  - @pnpm/resolving.default-resolver@1101.0.11
-  - @pnpm/resolving.npm-resolver@1104.2.6
@@ -0,0 +1,27 @@
+## 1101.0.12
+
+### Patch Changes
+
+- `pnpm why` now reads each selected workspace project's lockfile and modules directory when `sharedWorkspaceLockfile` is `false` [pnpm/tasks#169](https://github.com/pnpm/tasks/issues/169).
+
+- Updated dependencies:
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.pick-registry-for-package@1101.0.3
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/deps.github-actions@1100.1.17
+  - @pnpm/deps.inspection.list@1101.1.0
+  - @pnpm/deps.inspection.outdated@1100.1.38
+  - @pnpm/deps.inspection.peers-checker@1100.0.40
+  - @pnpm/deps.inspection.peers-issues-renderer@1100.0.16
+  - @pnpm/global.commands@1102.0.9
+  - @pnpm/global.packages@1101.1.8
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/network.auth-header@1101.1.17
+  - @pnpm/network.fetch@1100.1.23
+  - @pnpm/resolving.default-resolver@1101.0.12
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/resolving.registry.types@1100.2.4
+  - @pnpm/store.path@1100.1.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -1,6 +0,0 @@
-## 1101.0.11
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/deps.inspection.tree-builder@1101.0.11
@@ -0,0 +1,14 @@
+## 1101.1.0
+
+### Minor Changes
+
+- `pnpm why` now reads each selected workspace project's lockfile and modules directory when `sharedWorkspaceLockfile` is `false` [pnpm/tasks#169](https://github.com/pnpm/tasks/issues/169).
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/deps.inspection.tree-builder@1101.1.0
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -1,9 +0,0 @@
-## 1100.1.37
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.version-policy@1100.2.8
-  - @pnpm/hooks.read-package-hook@1100.3.8
-  - @pnpm/installing.client@1100.3.16
-  - @pnpm/resolving.npm-resolver@1104.2.6
@@ -0,0 +1,14 @@
+## 1100.1.38
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/hooks.read-package-hook@1100.3.9
+  - @pnpm/installing.client@1100.3.17
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,9 @@
+## 1100.0.40
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.walker@1100.0.28
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,6 @@
+## 1100.0.16
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,20 @@
+## 1101.1.0
+
+### Minor Changes
+
+- `pnpm why` now reads each selected workspace project's lockfile and modules directory when `sharedWorkspaceLockfile` is `false` [pnpm/tasks#169](https://github.com/pnpm/tasks/issues/169).
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.normalize-registries@1101.0.4
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/installing.modules-yaml@1101.0.7
+  - @pnpm/lockfile.detect-dep-types@1100.0.28
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.peer-edges@1100.0.3
+  - @pnpm/lockfile.utils@1102.1.7
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/store.cafs@1100.3.8
+  - @pnpm/store.index@1101.0.3
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,8 @@
+## 1101.0.7
+
+### Patch Changes
+
+- An optional peer that pnpm adds to a project now keeps the version the lockfile recorded for that project only while the dependency graph still holds it. Otherwise it follows its provider to a version the graph holds. Before, pnpm kept a higher version that only the lockfile held, which left two copies of the peer [#16443](https://github.com/pnpm/pnpm/issues/16443).
+
+- Updated dependencies:
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,6 @@
+## 1102.0.10
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/network.fetch@1100.1.23
@@ -1,12 +0,0 @@
-## 1100.1.30
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/hooks.read-package-hook@1100.3.8
-  - @pnpm/installing.context@1101.0.11
-  - @pnpm/lockfile.settings-checker@1100.2.13
-  - @pnpm/lockfile.verification@1100.1.12
-  - @pnpm/workspace.projects-reader@1101.1.4
-  - @pnpm/workspace.state@1100.0.50
@@ -0,0 +1,39 @@
+## 1100.1.31
+
+### Patch Changes
+
+- `verifyDepsBeforeRun` and repeat `pnpm install` runs now apply `overrides` before comparing a modified `package.json` with `pnpm-lock.yaml` [#17127](https://github.com/pnpm/pnpm/issues/17127).
+
+- `verifyDepsBeforeRun` no longer treats the workspace root as up to date after a filtered install with `pruneDirectDependencies: true` skipped it [pnpm/tasks#181](https://github.com/pnpm/tasks/issues/181).
+
+- `pnpm run`, `pnpm exec`, and `pnpm restart` now pass the install flags they were given, such as `--lockfile-dir`, `--modules-dir`, `--store-dir`, `--offline`, and `--ignore-scripts`, to the `pnpm install` that `verifyDepsBeforeRun: install` starts. The check that runs before a script now holds the workspace projects the script's project depends on. It agrees with the repeat-install check on which projects a filtered install left uninstalled, including with per-project lockfiles. Workspace dependencies declared with `link:` are now included in the workspace project graph, so `--filter=<project>...` selects them and, with `sharedWorkspaceLockfile: false` and `injectWorkspacePackages: true`, the check before a script still requires them to be installed. A filtered install no longer forgets the ignored build scripts of the projects it did not select.
+
+- `verifyDepsBeforeRun` now compares a patch file that changed on disk with the patch hash in the lockfile. A patch that was copied or touched without changing its content no longer marks dependencies as outdated [#16988](https://github.com/pnpm/pnpm/issues/16988).
+
+- `verifyDepsBeforeRun` now checks whether each importer's resolved catalog versions match the catalog snapshot in `pnpm-lock.yaml`.
+
+  `verifyDepsBeforeRun` now respects `lockfileDir` in single-project repositories.
+
+  When the install that runs before a script leaves `node_modules` out of date, pnpm now prints a warning.
+
+- The `verifyDepsBeforeRun` check now notices an edited manifest, lockfile, or patch file even when the edit kept the file's modification time, as `cp -p`, `rsync -a`, or an archive extraction leave it.
+
+  After `pnpm install --filter`, `pnpm run` and `pnpm exec` now notice a changed manifest in a project that install left out. A filtered command for a project that install did not reinstall after a lockfile change now installs first.
+
+  `pnpm dedupe --check` and `pnpm install --dry-run` no longer record the dependencies as installed, so the `verifyDepsBeforeRun` check that follows them still notices outdated dependencies.
+
+- `verifyDepsBeforeRun` now reports the dependencies as outdated when `sharedWorkspaceLockfile` is `false` and the `pnpm-lock.yaml` of a project the command runs is missing. Previously the check reported them as up to date, so `pnpm run` skipped the install [pnpm/tasks#138](https://github.com/pnpm/tasks/issues/138).
+
+- Updated dependencies:
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/deps.path@1101.0.7
+  - @pnpm/hooks.read-package-hook@1100.3.9
+  - @pnpm/installing.context@1101.0.12
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.settings-checker@1100.2.14
+  - @pnpm/lockfile.verification@1100.1.13
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.projects-reader@1101.1.5
+  - @pnpm/workspace.state@1100.0.51
+  - @pnpm/workspace.workspace-manifest-reader@1100.3.0
@@ -0,0 +1,36 @@
+## 1102.1.10
+
+### Patch Changes
+
+- `pnpm self-update` now updates the project's pnpm pin when Homebrew installed pnpm or Corepack runs it. The global pnpm is left alone [#17001](https://github.com/pnpm/pnpm/issues/17001).
+
+- `pnpm setup` now completes when Windows registry environment values cannot be read or written. It prints PowerShell commands to configure `PNPM_HOME` and `PATH` without registry access [pnpm/pnpm#17167](https://github.com/pnpm/pnpm/issues/17167).
+
+- `pnpm setup` now succeeds when it cannot tell which shell configuration file to update, for example in a container where `SHELL` is not set. It installs pnpm and prints the `PNPM_HOME` and `PATH` lines to add yourself. Previously it failed with `ERR_PNPM_UNKNOWN_SHELL`, and so did the installer script at get.pnpm.io [#16973](https://github.com/pnpm/pnpm/issues/16973).
+
+- Updated dependencies:
+  - @pnpm/bins.linker@1100.0.38
+  - @pnpm/building.during-install@1102.2.9
+  - @pnpm/building.policy@1100.1.8
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.pick-registry-for-package@1101.0.3
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/deps.graph-hasher@1100.3.8
+  - @pnpm/deps.security.signatures@1102.0.10
+  - @pnpm/exec.npm-lifecycle@1100.0.6
+  - @pnpm/global.commands@1102.0.9
+  - @pnpm/global.packages@1101.1.8
+  - @pnpm/installing.client@1100.3.17
+  - @pnpm/installing.deps-restorer@1103.2.6
+  - @pnpm/installing.env-installer@1103.0.12
+  - @pnpm/lockfile.fs@1100.2.14
+  - @pnpm/lockfile.types@1100.1.5
+  - @pnpm/network.auth-header@1101.1.17
+  - @pnpm/pkg-manifest.utils@1100.4.10
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/store.connection-manager@1101.3.5
+  - @pnpm/store.controller@1102.2.6
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -1,20 +0,0 @@
-## 1102.1.9
-
-### Patch Changes
-
- pnpm now relinks the bins of a pnpm version it installed earlier for `packageManager` or `pnpm with`. A pnpm 12 version installed by a pnpm release older than 11.28.4 could keep a launcher that ran `node` on the native binary, so every command failed with `SyntaxError: Invalid or unexpected token` [#16646](https://github.com/pnpm/pnpm/issues/16646).
-
- `pnpm setup` no longer tries to install pnpm globally from npm's `bin` directory when pnpm was installed with npm. It failed with `Failed to create bin at <PNPM_HOME>/bin/pnpm` [#16855](https://github.com/pnpm/pnpm/issues/16855).
-
- Updated dependencies:
-  - @pnpm/building.during-install@1102.2.8
-  - @pnpm/building.policy@1100.1.7
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/config.version-policy@1100.2.8
-  - @pnpm/global.commands@1102.0.8
-  - @pnpm/installing.client@1100.3.16
-  - @pnpm/installing.deps-restorer@1103.2.5
-  - @pnpm/installing.env-installer@1103.0.11
-  - @pnpm/resolving.npm-resolver@1104.2.6
-  - @pnpm/store.connection-manager@1101.3.4
-  - @pnpm/store.controller@1102.2.5
@@ -1,7 +0,0 @@
-## 1102.0.27
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/fetching.binary-fetcher@1102.0.20
-  - @pnpm/resolving.npm-resolver@1104.2.6
@@ -0,0 +1,10 @@
+## 1102.0.28
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/fetching.binary-fetcher@1102.0.21
+  - @pnpm/fetching.fetcher-base@1100.2.13
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,14 @@
+## 1101.1.10
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/engine.runtime.node-resolver@1101.3.9
+  - @pnpm/exec.pnpm-cli-runner@1100.0.6
+  - @pnpm/global.commands@1102.0.9
+  - @pnpm/global.packages@1101.1.8
+  - @pnpm/network.auth-header@1101.1.17
+  - @pnpm/network.fetch@1100.1.23
+  - @pnpm/types@1102.1.2
@@ -1,8 +0,0 @@
-## 1101.1.9
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/engine.runtime.node-resolver@1101.3.8
-  - @pnpm/global.commands@1102.0.8
@@ -1,7 +0,0 @@
-## 1102.0.27
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/fetching.binary-fetcher@1102.0.20
-  - @pnpm/resolving.npm-resolver@1104.2.6
@@ -0,0 +1,10 @@
+## 1102.0.28
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/fetching.binary-fetcher@1102.0.21
+  - @pnpm/fetching.fetcher-base@1100.2.13
+  - @pnpm/resolving.npm-resolver@1104.2.7
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
@@ -1,6 +0,0 @@
-## 1101.3.8
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/config.reader@1102.3.5
@@ -0,0 +1,8 @@
+## 1101.3.9
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,7 @@
+## 1100.0.14
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
+  - @pnpm/types@1102.1.2
@@ -1,7 +0,0 @@
-## 0.1.1
-
-### Patch Changes
-
- With `nodeLinker.type: loaded`, packages that ship their own `node_modules` directory, such as `npm` with its bundled dependencies, now load from the store. One such package in the install stopped every Node.js process from starting.
-
- With `nodeLinker.type` set to `loaded`, Node.js now stops with `ERR_PNPM_LOADER_UNSUPPORTED_NODE` when it preloads the store loader on a version the loader cannot serve. The supported versions are `^24.18.0 || >=26.2.0`. On other versions, CommonJS packages imported from ESM failed with `Cannot find module` on their first relative `require()`.
@@ -1,11 +0,0 @@
-## 11.28.6
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/linux-arm64@11.28.6
-  - @pnpm/linux-x64@11.28.6
-  - @pnpm/linuxstatic-x64@11.28.6
-  - @pnpm/macos-arm64@11.28.6
-  - @pnpm/win-arm64@11.28.6
-  - @pnpm/win-x64@11.28.6
@@ -0,0 +1,11 @@
+## 11.28.7
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/linux-arm64@11.28.7
+  - @pnpm/linux-x64@11.28.7
+  - @pnpm/linuxstatic-x64@11.28.7
+  - @pnpm/macos-arm64@11.28.7
+  - @pnpm/win-arm64@11.28.7
+  - @pnpm/win-x64@11.28.7
@@ -1,16 +0,0 @@
-## 1101.1.10
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/building.commands@1101.2.10
-  - @pnpm/config.reader@1102.3.5
-  - @pnpm/config.version-policy@1100.2.8
-  - @pnpm/deps.status@1100.1.30
-  - @pnpm/engine.runtime.commands@1101.1.9
-  - @pnpm/exec.lifecycle@1100.1.24
-  - @pnpm/installing.client@1100.3.16
-  - @pnpm/installing.commands@1101.4.6
-  - @pnpm/workspace.injected-deps-syncer@1100.0.44
-  - @pnpm/workspace.projects-filter@1100.0.49
-  - @pnpm/workspace.projects-reader@1101.1.4
@@ -0,0 +1,43 @@
+## 1101.1.11
+
+### Patch Changes
+
+- An injected workspace package now keeps only the files its manifest lists after a lifecycle script or a script named in `syncInjectedDepsAfterScripts` rebuilds it. Before, these refreshes copied every file of the package directory into the injected copy, including files that `files` or `.npmignore` leave out. With `deployAllFiles: true` the copy still gets every file.
+
+- `pnpm run`, `pnpm exec`, and `pnpm restart` now pass the install flags they were given, such as `--lockfile-dir`, `--modules-dir`, `--store-dir`, `--offline`, and `--ignore-scripts`, to the `pnpm install` that `verifyDepsBeforeRun: install` starts. The check that runs before a script now holds the workspace projects the script's project depends on. It agrees with the repeat-install check on which projects a filtered install left uninstalled, including with per-project lockfiles. Workspace dependencies declared with `link:` are now included in the workspace project graph, so `--filter=<project>...` selects them and, with `sharedWorkspaceLockfile: false` and `injectWorkspacePackages: true`, the check before a script still requires them to be installed. A filtered install no longer forgets the ignored build scripts of the projects it did not select.
+
+- With `sharedWorkspaceLockfile: false`, a script listed in `syncInjectedDepsAfterScripts` now updates the injected copies of the package it ran in. Before, those copies kept the files from the last install.
+
+- A script listed in `syncInjectedDepsAfterScripts` now updates the injected copies of a package that publishes from `publishConfig.directory`. Before, those copies kept the files from the last install.
+
+- `verifyDepsBeforeRun` now checks whether each importer's resolved catalog versions match the catalog snapshot in `pnpm-lock.yaml`.
+
+  `verifyDepsBeforeRun` now respects `lockfileDir` in single-project repositories.
+
+  When the install that runs before a script leaves `node_modules` out of date, pnpm now prints a warning.
+
+- Updated dependencies:
+  - @pnpm/bins.resolver@1100.0.18
+  - @pnpm/building.commands@1101.2.11
+  - @pnpm/cli.utils@1101.0.33
+  - @pnpm/config.reader@1102.3.6
+  - @pnpm/config.version-policy@1100.2.9
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/deps.status@1100.1.31
+  - @pnpm/engine.runtime.commands@1101.1.10
+  - @pnpm/engine.runtime.system-version@1100.0.14
+  - @pnpm/exec.esm-node-path-loader@1100.0.2
+  - @pnpm/exec.lifecycle@1100.1.25
+  - @pnpm/exec.npm-lifecycle@1100.0.6
+  - @pnpm/exec.pnpm-cli-runner@1100.0.6
+  - @pnpm/installing.client@1100.3.17
+  - @pnpm/installing.commands@1101.4.7
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/store.path@1100.1.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.injected-deps-syncer@1100.0.45
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
+  - @pnpm/workspace.projects-filter@1100.0.50
+  - @pnpm/workspace.projects-reader@1101.1.5
+  - @pnpm/workspace.projects-sorter@1101.0.2
+  - @pnpm/workspace.task-scheduler@1100.0.5
@@ -0,0 +1,5 @@
+## 1100.0.2
+
+### Patch Changes
+
+- With `enableGlobalVirtualStore`, a Node.js resolve hook that a script registers now sees the importer as `context.parentURL` after pnpm's `NODE_PATH` fallback fails to find a bare specifier. Hooks that resolve tsconfig `paths` aliases from the importer failed with `ERR_MODULE_NOT_FOUND` [#16979](https://github.com/pnpm/pnpm/issues/16979).
@@ -1,6 +0,0 @@
-## 1100.1.24
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/fetching.directory-fetcher@1100.0.39
@@ -0,0 +1,17 @@
+## 1100.1.25
+
+### Patch Changes
+
+- Fixed the README usage examples to match these packages' current APIs.
+
+- An injected workspace package now keeps only the files its manifest lists after a lifecycle script or a script named in `syncInjectedDepsAfterScripts` rebuilds it. Before, these refreshes copied every file of the package directory into the injected copy, including files that `files` or `.npmignore` leave out. With `deployAllFiles: true` the copy still gets every file.
+
+- Updated dependencies:
+  - @pnpm/bins.linker@1100.0.38
+  - @pnpm/core-loggers@1101.0.3
+  - @pnpm/exec.npm-lifecycle@1100.0.6
+  - @pnpm/fetching.directory-fetcher@1100.0.40
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/store.controller-types@1101.3.4
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.task-scheduler@1100.0.5
@@ -0,0 +1,6 @@
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
@@ -0,0 +1,6 @@
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/cli.meta@1100.1.3
@@ -1,6 +0,0 @@
-## 1100.0.43
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/exec.lifecycle@1100.1.24
@@ -0,0 +1,8 @@
+## 1100.0.44
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/exec.lifecycle@1100.1.25
+  - @pnpm/pkg-manifest.reader@1100.0.23
+  - @pnpm/types@1102.1.2
@@ -0,0 +1,10 @@
+## 1102.0.21
+
+### Patch Changes
+
+- Added the `maxTarballUnpackedSize` setting. `pnpm install` fails with `ERR_PNPM_TARBALL_TOO_LARGE` when the files of one package unpack to more than this many bytes, 4 GiB by default [pnpm/tasks#81](https://github.com/pnpm/tasks/issues/81).
+
+- Updated dependencies:
+  - @pnpm/fetching.fetcher-base@1100.2.13
+  - @pnpm/store.cafs@1100.3.8
+  - @pnpm/store.index@1101.0.3
@@ -1,5 +0,0 @@
-## 1100.0.39
-
-### Patch Changes
-
- A script listed in `syncInjectedDepsAfterScripts` no longer fails when it rewrites `package.json` while pnpm is copying its edits into the injected copies. The sync after the script now replaces a half-copied manifest.
@@ -0,0 +1,15 @@
+## 1100.0.40
+
+### Patch Changes
+
+- A script listed in `syncInjectedDepsAfterScripts` now keeps a package's links to its own files as links in the injected copies, the way `pnpm install` writes them. It no longer fails when the package links to one directory twice or links back to a directory above the link. `pnpm install` with `deployAllFiles` no longer fails on such a link back either.
+
+- An injected workspace package now keeps only the files its manifest lists after a lifecycle script or a script named in `syncInjectedDepsAfterScripts` rebuilds it. Before, these refreshes copied every file of the package directory into the injected copy, including files that `files` or `.npmignore` leave out. With `deployAllFiles: true` the copy still gets every file.
+
+- Updated dependencies:
+  - @pnpm/building.pkg-requires-build@1100.0.21
+  - @pnpm/fetching.fetcher-base@1100.2.13
+  - @pnpm/fs.packlist@1100.0.9
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
+  - @pnpm/workspace.project-manifest-reader@1100.1.4
@@ -0,0 +1,7 @@
+## 1100.2.13
+
+### Patch Changes
+
+- Updated dependencies:
+  - @pnpm/resolving.resolver-base@1101.3.3
+  - @pnpm/types@1102.1.2
@@ -1,7 +0,0 @@
-## 1102.0.25
-
-### Patch Changes
-
- Updated dependencies:
-  - @pnpm/exec.prepare-package@1100.0.43
-  - @pnpm/store.index@1101.0.2