fix: only devDependencies are installed regardless of the node env (#4805)

close #4745

.changeset/green-geckos-scream.md

@@ -0,0 +1,6 @@
+---
+"@pnpm/config": patch
+"pnpm": patch
+---
+
+`NODE_ENV=production pnpm install --dev` should only install dev deps [#4745](https://github.com/pnpm/pnpm/pull/4745).

packages/config/src/index.ts

@@ -338,6 +338,15 @@ export default async (
 
   pnpmConfig.packageManager = packageManager
 
+  if (env.NODE_ENV) {
+    if (cliOptions.production) {
+      pnpmConfig.only = 'production'
+    }
+    if (cliOptions.dev) {
+      pnpmConfig.only = 'dev'
+    }
+  }
+
   if (pnpmConfig.only === 'prod' || pnpmConfig.only === 'production' || !pnpmConfig.only && pnpmConfig.production) {
     pnpmConfig.production = true
     pnpmConfig.dev = false

packages/pnpm/test/install/only.ts

@@ -26,6 +26,15 @@ test('production install (with production NODE_ENV)', async () => {
   await project.has('is-positive')
 })
 
+test('dev dependencies install (with production NODE_ENV)', async () => {
+  const project = prepare(basicPackageManifest)
+
+  await execPnpm(['install', '--dev'], { env: { NODE_ENV: 'production' } })
+
+  await project.hasNot(Object.keys(basicPackageManifest.dependencies!)[0])
+  await project.has('@rstacruz/tap-spec')
+})
+
 test('install dev dependencies only', async () => {
   const project = prepare({
     dependencies: {