chore(release): 11.0.9

.changeset-released/release-11.0.txt

@@ -1,13 +1,22 @@
+default-reporter-bin
 exe-node-gyp-executable
 exe-windows-aliases
 fetch-install-no-recreate
 git-tarball-integrity
+gitlab-tarball-archive-url
 global-yaml-user-prefs
+happy-ways-sleep
+honor-npm-config-userconfig
 oidc-precedence-over-static-token
+pack-bundle-dependencies
 pm-on-fail-survives-help-version
+pnpm-bin-version-check-hoisting
+prefix-workspace-resolution
 preserve-non-derivable-tarballs
+publish-strip-build-metadata
 recursive-filter-root-exclusion
 restore-publish-json-stdout
 scoped-registry-config-get-publish
 six-carrots-cross
 tarball-content-encoding
+upgrade-semver-diff

.changeset/default-reporter-bin.md

@@ -1,5 +0,0 @@
----
-"@pnpm/cli.default-reporter": minor
----
-
-Added a `pnpm-render` bin that renders pnpm-shaped NDJSON read from stdin, so the same renderer can be used to format output from external tools that emit `pnpm:*` log records (e.g. `pacquet install --reporter=ndjson 2>&1 >/dev/null | pnpm-render`). An optional first positional argument sets the command name (defaults to `install`).

.changeset/gitlab-tarball-archive-url.md

@@ -1,6 +0,0 @@
----
-"@pnpm/resolving.git-resolver": patch
-"pnpm": patch
----
-
-Fixed installation of GitLab-hosted dependencies. pnpm now downloads the tarball from `https://gitlab.com/<user>/<project>/-/archive/<sha>/<project>-<sha>.tar.gz` instead of the GitLab API endpoint that contained an encoded slash (`%2F`) between user and project. The encoded slash both triggered `406 Not Acceptable` responses from GitLab and produced virtual store directory names that Node refused to import (`ERR_INVALID_MODULE_SPECIFIER`) [#11533](https://github.com/pnpm/pnpm/issues/11533).

.changeset/happy-ways-sleep.md

@@ -1,10 +0,0 @@
----
-"@pnpm/store.index": minor
----
-
-Export `pickStoreIndexKey(resolution, pkgId, { built })` — picks the appropriate store-index key for a resolution:
-git-hosted entries route through `gitHostedStoreIndexKey(pkgId, { built })`, everything else through
-`storeIndexKey(resolution.integrity, pkgId)`. Centralizes the routing for `installing.package-requester`,
-`building.after-install`, `store.pkg-finder`, and `modules-mounter.daemon` so each consumer reads
-`resolution.gitHosted` once via a single typed call.
-

.changeset/honor-npm-config-userconfig.md

@@ -1,6 +0,0 @@
----
-"@pnpm/config.reader": patch
-"pnpm": patch
----
-
-Honor `NPM_CONFIG_USERCONFIG` (and its lowercase `npm_config_userconfig` form) as a low-priority fallback when locating the user-level `.npmrc`. This restores compatibility with environments that point npm at a custom auth file via that env var — most notably `actions/setup-node`, which writes registry credentials to `${runner.temp}/.npmrc` and exports `NPM_CONFIG_USERCONFIG` to reference it. Without this, GitHub Actions workflows using `actions/setup-node` to authenticate to private registries broke after upgrading to pnpm v11. PNPM-prefixed env vars and `npmrcAuthFile` from the global `config.yaml` continue to take precedence [#11539](https://github.com/pnpm/pnpm/issues/11539).

.changeset/pack-bundle-dependencies.md

@@ -1,6 +0,0 @@
----
-"@pnpm/fs.packlist": patch
-"pnpm": patch
----
-
-Fix `pnpm pack` not bundling dependencies listed in `bundleDependencies` (or `bundledDependencies`). The npm-packlist upgrade in pnpm 11 changed its API to require the caller to pre-populate the dependency tree, which the wrapper was not doing — `bundleDependencies` were silently dropped from the tarball [#11519](https://github.com/pnpm/pnpm/issues/11519).

.changeset/pnpm-bin-version-check-hoisting.md

@@ -1,5 +0,0 @@
----
-"pnpm": patch
----
-
-Fixed the pnpm CLI crashing with a confusing `SyntaxError: Invalid regular expression flags` instead of printing a clear "requires Node.js v22.13" error when launched on an unsupported Node.js version. The Node.js version check in `bin/pnpm.mjs` was effectively dead code because the static `import` of the bundled `dist/pnpm.mjs` was hoisted by the ES module loader and parsed before the check could run [#11546](https://github.com/pnpm/pnpm/issues/11546).

.changeset/prefix-workspace-resolution.md

@@ -1,6 +0,0 @@
----
-"@pnpm/cli.parse-cli-args": patch
-"pnpm": patch
----
-
-Fixed `pnpm --prefix=<dir> install` overwriting the existing `pnpm-workspace.yaml` in `<dir>` with `set this to true or false` placeholders. The renamed `--prefix` option (which maps to `dir`) was not honored when locating the workspace root, so the workspace manifest's `allowBuilds` settings were not loaded into config and got clobbered when ignored builds were auto-populated [#11535](https://github.com/pnpm/pnpm/issues/11535).

.changeset/publish-strip-build-metadata.md

@@ -1,6 +0,0 @@
----
-"@pnpm/releasing.commands": patch
-"pnpm": patch
----
-
-Fixed `pnpm publish --provenance` failing with a 422 from the registry when the package version contained semver build metadata (e.g. `1.0.0-canary.0+abc1234`). The `+<build>` segment is now stripped before packing so that the version embedded in the tarball, the metadata sent to the registry, and the sigstore provenance subject all agree [#11518](https://github.com/pnpm/pnpm/issues/11518).

.changeset/upgrade-semver-diff.md

@@ -1,8 +0,0 @@
----
-"@pnpm/deps.inspection.commands": patch
-"@pnpm/installing.commands": patch
-"@pnpm/lockfile.make-dedicated-lockfile": patch
-"@pnpm/resolving.npm-resolver": patch
----
-
-Upgrade `@pnpm/semver-diff`, `@pnpm/colorize-semver-diff`, `@pnpm/exec`, and `parse-npm-tarball-url` to versions that expose their helpers as named exports instead of CommonJS default exports. This eliminates the `.default` property accesses that broke under Node.js ESM interop in tests and could fail at runtime in some module loaders.

__utils__/assert-project/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/assert-project
 
+## 1100.0.6
+
+### Patch Changes
+
+- @pnpm/assert-store@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

__utils__/assert-project/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pnpm/assert-project",
   "description": "Utils for testing projects that use pnpm",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "author": {
     "name": "Zoltan Kochan",
     "email": "z@kochan.io",

__utils__/assert-store/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/assert-store
 
+## 1100.0.6
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+
 ## 1100.0.5
 
 ### Patch Changes

__utils__/assert-store/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@pnpm/assert-store",
   "description": "Utils for testing pnpm store",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "bugs": {
     "url": "https://github.com/pnpm/pnpm/issues"
   },

__utils__/jest-config/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/jest-config
 
+## 1100.0.6
+
+### Patch Changes
+
+- @pnpm/worker@1100.1.3
+
 ## 1100.0.5
 
 ### Patch Changes

__utils__/jest-config/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/jest-config",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "private": true,
   "main": "jest-preset.js",
   "type": "module",

__utils__/prepare/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/prepare
 
+## 1100.0.6
+
+### Patch Changes
+
+- @pnpm/assert-project@1100.0.6
+
 ## 1100.0.5
 
 ### Patch Changes

__utils__/prepare/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/prepare",
-  "version": "1100.0.5",
+  "version": "1100.0.6",
   "main": "lib/index.js",
   "types": "lib/index.d.ts",
   "type": "module",

agent/client/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/agent.client
 
+## 1.0.3
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/worker@1100.1.3
+
 ## 1.0.2
 
 ### Patch Changes

agent/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/agent.client",
-  "version": "1.0.2",
+  "version": "1.0.3",
   "description": "Client for pnpm agent server — sends store state, receives resolved lockfile and missing files",
   "keywords": [
     "pnpm",

agent/server/CHANGELOG.md

@@ -1,5 +1,15 @@
 # pnpm-agent
 
+## 0.0.11
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/installing.client@1100.0.12
+  - @pnpm/installing.deps-installer@1101.0.9
+  - @pnpm/store.controller@1101.0.4
+
 ## 0.0.10
 
 ### Patch Changes

agent/server/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pnpm-agent",
-  "version": "0.0.10",
+  "version": "0.0.11",
   "description": "pnpm agent server for server-side resolution and store-aware downloads",
   "keywords": [
     "pnpm",

auth/commands/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/auth.commands
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+
 ## 1100.0.10
 
 ### Patch Changes

auth/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/auth.commands",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Commands for authentication with npm registries",
   "keywords": [
     "pnpm",

building/after-install/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @pnpm/building.after-install
 
+## 1101.0.9
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+- Updated dependencies [e9e876c]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/store.connection-manager@1100.0.13
+  - @pnpm/worker@1100.1.3
+  - @pnpm/installing.context@1100.0.8
+  - @pnpm/exec.lifecycle@1100.0.7
+
 ## 1101.0.8
 
 ### Patch Changes

building/after-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.after-install",
-  "version": "1101.0.8",
+  "version": "1101.0.9",
   "description": "Rebuild packages that are already installed by running their lifecycle scripts",
   "keywords": [
     "pnpm",

building/commands/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/building.commands
 
+## 1100.0.14
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/installing.commands@1100.1.12
+  - @pnpm/building.after-install@1101.0.9
+  - @pnpm/store.connection-manager@1100.0.13
+
 ## 1100.0.13
 
 ### Patch Changes

building/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.commands",
-  "version": "1100.0.13",
+  "version": "1100.0.14",
   "description": "Commands for rebuilding and managing dependency builds",
   "keywords": [
     "pnpm",

building/during-install/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/building.during-install
 
+## 1101.0.7
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/worker@1100.1.3
+  - @pnpm/exec.lifecycle@1100.0.7
+  - @pnpm/fs.hard-link-dir@1100.0.1
+  - @pnpm/patching.apply-patch@1100.0.0
+
 ## 1101.0.6
 
 ### Patch Changes

building/during-install/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/building.during-install",
-  "version": "1101.0.6",
+  "version": "1101.0.7",
   "description": "Build packages in node_modules",
   "keywords": [
     "pnpm",

cache/api/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/cache.api
 
+## 1100.0.10
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/resolving.npm-resolver@1101.0.3
+
 ## 1100.0.9
 
 ### Patch Changes

cache/api/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cache.api",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "API for controlling the cache",
   "keywords": [
     "pnpm",

cache/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/cache.commands
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/cache.api@1100.0.10
+
 ## 1100.0.10
 
 ### Patch Changes

cache/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cache.commands",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Commands for controlling the cache",
   "keywords": [
     "pnpm",

cli/commands/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/cli.commands
 
+## 1100.0.10
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+- Updated dependencies [43d5456]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/cli.parse-cli-args@1100.1.3
+
 ## 1100.0.9
 
 ### Patch Changes

cli/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.commands",
-  "version": "1100.0.9",
+  "version": "1100.0.10",
   "description": "Commands for pnpm CLI",
   "keywords": [
     "pnpm",

cli/default-reporter/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/default-reporter
 
+## 1100.1.0
+
+### Minor Changes
+
+- 781918f: Added a `pnpm-render` bin that renders pnpm-shaped NDJSON read from stdin, so the same renderer can be used to format output from external tools that emit `pnpm:*` log records (e.g. `pacquet install --reporter=ndjson 2>&1 >/dev/null | pnpm-render`). An optional first positional argument sets the command name (defaults to `install`).
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+
 ## 1100.0.10
 
 ### Patch Changes

cli/default-reporter/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.default-reporter",
-  "version": "1100.0.10",
+  "version": "1100.1.0",
   "description": "The default reporter of pnpm",
   "keywords": [
     "pnpm",

cli/parse-cli-args/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/parse-cli-args
 
+## 1100.1.3
+
+### Patch Changes
+
+- 43d5456: Fixed `pnpm --prefix=<dir> install` overwriting the existing `pnpm-workspace.yaml` in `<dir>` with `set this to true or false` placeholders. The renamed `--prefix` option (which maps to `dir`) was not honored when locating the workspace root, so the workspace manifest's `allowBuilds` settings were not loaded into config and got clobbered when ignored builds were auto-populated [#11535](https://github.com/pnpm/pnpm/issues/11535).
+
 ## 1100.1.2
 
 ### Patch Changes

cli/parse-cli-args/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/cli.parse-cli-args",
-  "version": "1100.1.2",
+  "version": "1100.1.3",
   "description": "Parses the CLI args passed to pnpm",
   "keywords": [
     "pnpm",

config/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/plugin-commands-config
 
+## 1100.0.11
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/workspace.workspace-manifest-writer@1100.0.6
+
 ## 1100.0.10
 
 ### Patch Changes

config/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config.commands",
-  "version": "1100.0.10",
+  "version": "1100.0.11",
   "description": "Commands for reading and writing settings to/from config files",
   "keywords": [
     "pnpm",

config/reader/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/config
 
+## 1101.2.2
+
+### Patch Changes
+
+- e9e876c: Honor `NPM_CONFIG_USERCONFIG` (and its lowercase `npm_config_userconfig` form) as a low-priority fallback when locating the user-level `.npmrc`. This restores compatibility with environments that point npm at a custom auth file via that env var — most notably `actions/setup-node`, which writes registry credentials to `${runner.temp}/.npmrc` and exports `NPM_CONFIG_USERCONFIG` to reference it. Without this, GitHub Actions workflows using `actions/setup-node` to authenticate to private registries broke after upgrading to pnpm v11. PNPM-prefixed env vars and `npmrcAuthFile` from the global `config.yaml` continue to take precedence [#11539](https://github.com/pnpm/pnpm/issues/11539).
+
 ## 1101.2.1
 
 ### Patch Changes

config/reader/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/config.reader",
-  "version": "1101.2.1",
+  "version": "1101.2.2",
   "description": "Gets configuration options for pnpm",
   "keywords": [
     "pnpm",

deps/compliance/commands/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/deps.compliance.commands
 
+## 1101.1.11
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/installing.commands@1100.1.12
+  - @pnpm/deps.compliance.license-scanner@1100.0.9
+  - @pnpm/deps.compliance.sbom@1100.0.9
+
 ## 1101.1.10
 
 ### Patch Changes

deps/compliance/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.commands",
-  "version": "1101.1.10",
+  "version": "1101.1.11",
   "description": "pnpm commands for audit, licenses, and sbom",
   "keywords": [
     "pnpm",

deps/compliance/license-scanner/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/license-scanner
 
+## 1100.0.9
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/store.pkg-finder@1100.0.7
+
 ## 1100.0.8
 
 ### Patch Changes

deps/compliance/license-scanner/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.license-scanner",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "description": "Check for licenses packages",
   "keywords": [
     "pnpm",

deps/compliance/sbom/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/deps.compliance.sbom
 
+## 1100.0.9
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/store.pkg-finder@1100.0.7
+
 ## 1100.0.8
 
 ### Patch Changes

deps/compliance/sbom/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.compliance.sbom",
-  "version": "1100.0.8",
+  "version": "1100.0.9",
   "description": "Generate SBOM from pnpm lockfile",
   "keywords": [
     "pnpm",

deps/inspection/commands/CHANGELOG.md

@@ -1,5 +1,19 @@
 # @pnpm/deps.inspection.commands
 
+## 1100.1.13
+
+### Patch Changes
+
+- 15e9e35: Upgrade `@pnpm/semver-diff`, `@pnpm/colorize-semver-diff`, `@pnpm/exec`, and `parse-npm-tarball-url` to versions that expose their helpers as named exports instead of CommonJS default exports. This eliminates the `.default` property accesses that broke under Node.js ESM interop in tests and could fail at runtime in some module loaders.
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/resolving.default-resolver@1100.0.11
+  - @pnpm/global.commands@1100.0.14
+  - @pnpm/deps.inspection.outdated@1100.0.12
+  - @pnpm/deps.inspection.list@1100.0.8
+
 ## 1100.1.12
 
 ### Patch Changes

deps/inspection/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.commands",
-  "version": "1100.1.12",
+  "version": "1100.1.13",
   "description": "The list, ll, why, and outdated commands of pnpm",
   "keywords": [
     "pnpm",

deps/inspection/list/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/list
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/deps.inspection.tree-builder@1100.0.7
+
 ## 1100.0.7
 
 ### Patch Changes

deps/inspection/list/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.list",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "List installed packages in a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/inspection/outdated/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/outdated
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [15e9e35]
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/installing.client@1100.0.12
+
 ## 1100.0.11
 
 ### Patch Changes

deps/inspection/outdated/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.outdated",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "Check for outdated packages",
   "keywords": [
     "pnpm",

deps/inspection/tree-builder/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/reviewing.dependencies-hierarchy
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+
 ## 1100.0.6
 
 ### Patch Changes

deps/inspection/tree-builder/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.inspection.tree-builder",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Creates a dependencies hierarchy for a symlinked `node_modules`",
   "keywords": [
     "pnpm",

deps/status/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/deps.status
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/workspace.state@1100.0.10
+  - @pnpm/installing.context@1100.0.8
+  - @pnpm/lockfile.verification@1100.0.8
+  - @pnpm/lockfile.settings-checker@1100.0.8
+
 ## 1100.0.11
 
 ### Patch Changes

deps/status/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/deps.status",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "Check dependencies status",
   "keywords": [
     "pnpm",

engine/pm/commands/CHANGELOG.md

@@ -1,5 +1,20 @@
 # @pnpm/engine.pm.commands
 
+## 1101.1.9
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/installing.client@1100.0.12
+  - @pnpm/installing.deps-restorer@1101.0.8
+  - @pnpm/store.connection-manager@1100.0.13
+  - @pnpm/store.controller@1101.0.4
+  - @pnpm/global.commands@1100.0.14
+  - @pnpm/installing.env-installer@1101.0.7
+
 ## 1101.1.8
 
 ### Patch Changes

engine/pm/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.pm.commands",
-  "version": "1101.1.8",
+  "version": "1101.1.9",
   "description": "pnpm commands for self-updating and setting up pnpm",
   "keywords": [
     "pnpm",

engine/runtime/bun-resolver/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/resolving.bun-resolver
 
+## 1101.0.4
+
+### Patch Changes
+
+- Updated dependencies [15e9e35]
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/fetching.binary-fetcher@1101.0.4
+  - @pnpm/worker@1100.1.3
+
 ## 1101.0.3
 
 ### Patch Changes

engine/runtime/bun-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.bun-resolver",
-  "version": "1101.0.3",
+  "version": "1101.0.4",
   "description": "Resolves the Bun runtime",
   "keywords": [
     "pnpm",

engine/runtime/commands/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/engine.runtime.commands
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/engine.runtime.node-resolver@1101.0.6
+
 ## 1100.0.11
 
 ### Patch Changes

engine/runtime/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.commands",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "pnpm commands for managing runtimes",
   "keywords": [
     "pnpm",

engine/runtime/deno-resolver/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @pnpm/resolving.deno-resolver
 
+## 1101.0.4
+
+### Patch Changes
+
+- Updated dependencies [15e9e35]
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/fetching.binary-fetcher@1101.0.4
+  - @pnpm/worker@1100.1.3
+
 ## 1101.0.3
 
 ### Patch Changes

engine/runtime/deno-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.deno-resolver",
-  "version": "1101.0.3",
+  "version": "1101.0.4",
   "description": "Resolves the Deno runtime",
   "keywords": [
     "pnpm",

engine/runtime/node-resolver/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/node.resolver
 
+## 1101.0.6
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+
 ## 1101.0.5
 
 ### Patch Changes

engine/runtime/node-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/engine.runtime.node-resolver",
-  "version": "1101.0.5",
+  "version": "1101.0.6",
   "description": "Resolves a Node.js version specifier to an exact Node.js version",
   "keywords": [
     "pnpm",

exec/commands/CHANGELOG.md

@@ -1,5 +1,21 @@
 # @pnpm/plugin-commands-script-runners
 
+## 1100.1.4
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+- Updated dependencies [15e9e35]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/installing.commands@1100.1.12
+  - @pnpm/building.commands@1100.0.14
+  - @pnpm/installing.client@1100.0.12
+  - @pnpm/deps.status@1100.0.12
+  - @pnpm/engine.runtime.commands@1100.0.12
+  - @pnpm/exec.lifecycle@1100.0.7
+  - @pnpm/workspace.injected-deps-syncer@1100.0.8
+  - @pnpm/crypto.hash@1100.0.1
+
 ## 1100.1.3
 
 ### Patch Changes

exec/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.commands",
-  "version": "1100.1.3",
+  "version": "1100.1.4",
   "description": "Commands for running scripts",
   "keywords": [
     "pnpm",

exec/lifecycle/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/lifecycle
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/fetching.directory-fetcher@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

exec/lifecycle/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.lifecycle",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Package lifecycle hook runner",
   "keywords": [
     "pnpm",

exec/prepare-package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/prepare-package
 
+## 1100.0.7
+
+### Patch Changes
+
+- @pnpm/exec.lifecycle@1100.0.7
+
 ## 1100.0.6
 
 ### Patch Changes

exec/prepare-package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/exec.prepare-package",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "Prepares a Git-hosted package",
   "keywords": [
     "pnpm",

fetching/binary-fetcher/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/fetching.binary-fetcher
 
+## 1101.0.4
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/worker@1100.1.3
+
 ## 1101.0.3
 
 ### Patch Changes

fetching/binary-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.binary-fetcher",
-  "version": "1101.0.3",
+  "version": "1101.0.4",
   "description": "A fetcher for binary archives",
   "keywords": [
     "pnpm",

fetching/directory-fetcher/CHANGELOG.md

@@ -1,5 +1,12 @@
 # @pnpm/directory-fetcher
 
+## 1100.0.7
+
+### Patch Changes
+
+- Updated dependencies [dd8d5d7]
+  - @pnpm/fs.packlist@1100.0.1
+
 ## 1100.0.6
 
 ### Patch Changes

fetching/directory-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.directory-fetcher",
-  "version": "1100.0.6",
+  "version": "1100.0.7",
   "description": "A fetcher for local directory packages",
   "keywords": [
     "pnpm",

fetching/git-fetcher/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/git-fetcher
 
+## 1101.0.3
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+- Updated dependencies [dd8d5d7]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/fs.packlist@1100.0.1
+  - @pnpm/worker@1100.1.3
+  - @pnpm/exec.prepare-package@1100.0.7
+
 ## 1101.0.2
 
 ### Patch Changes

fetching/git-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.git-fetcher",
-  "version": "1101.0.2",
+  "version": "1101.0.3",
   "description": "A fetcher for git-hosted packages",
   "keywords": [
     "pnpm",

fetching/tarball-fetcher/CHANGELOG.md

@@ -1,5 +1,16 @@
 # @pnpm/tarball-fetcher
 
+## 1101.0.4
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+- Updated dependencies [dd8d5d7]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/fs.packlist@1100.0.1
+  - @pnpm/worker@1100.1.3
+  - @pnpm/exec.prepare-package@1100.0.7
+
 ## 1101.0.3
 
 ### Patch Changes

fetching/tarball-fetcher/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fetching.tarball-fetcher",
-  "version": "1101.0.3",
+  "version": "1101.0.4",
   "description": "Fetcher for packages hosted as tarballs",
   "keywords": [
     "pnpm",

fs/packlist/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/fs.packlist
 
+## 1100.0.1
+
+### Patch Changes
+
+- dd8d5d7: Fix `pnpm pack` not bundling dependencies listed in `bundleDependencies` (or `bundledDependencies`). The npm-packlist upgrade in pnpm 11 changed its API to require the caller to pre-populate the dependency tree, which the wrapper was not doing — `bundleDependencies` were silently dropped from the tarball [#11519](https://github.com/pnpm/pnpm/issues/11519).
+
 ## 1001.0.0
 
 ### Major Changes

fs/packlist/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/fs.packlist",
-  "version": "1100.0.0",
+  "version": "1100.0.1",
   "description": "Get a list of the files to add from a directory into an npm package",
   "keywords": [
     "pnpm",

global/commands/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/global.commands
 
+## 1100.0.14
+
+### Patch Changes
+
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/installing.deps-installer@1101.0.9
+  - @pnpm/store.connection-manager@1100.0.13
+  - @pnpm/deps.inspection.list@1100.0.8
+
 ## 1100.0.13
 
 ### Patch Changes

global/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/global.commands",
-  "version": "1100.0.13",
+  "version": "1100.0.14",
   "description": "Global package command handlers for pnpm",
   "keywords": [
     "pnpm",

installing/client/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @pnpm/client
 
+## 1100.0.12
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/resolving.default-resolver@1100.0.11
+  - @pnpm/fetching.binary-fetcher@1101.0.4
+  - @pnpm/fetching.git-fetcher@1101.0.3
+  - @pnpm/fetching.tarball-fetcher@1101.0.4
+  - @pnpm/engine.runtime.node-resolver@1101.0.6
+  - @pnpm/fetching.directory-fetcher@1100.0.7
+
 ## 1100.0.11
 
 ### Patch Changes

installing/client/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.client",
-  "version": "1100.0.11",
+  "version": "1100.0.12",
   "description": "Creates the package resolve and fetch functions",
   "keywords": [
     "pnpm",

installing/commands/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @pnpm/plugin-commands-installation
 
+## 1100.1.12
+
+### Patch Changes
+
+- 15e9e35: Upgrade `@pnpm/semver-diff`, `@pnpm/colorize-semver-diff`, `@pnpm/exec`, and `parse-npm-tarball-url` to versions that expose their helpers as named exports instead of CommonJS default exports. This eliminates the `.default` property accesses that broke under Node.js ESM interop in tests and could fail at runtime in some module loaders.
+- Updated dependencies [e9e876c]
+  - @pnpm/config.reader@1101.2.2
+  - @pnpm/building.after-install@1101.0.9
+  - @pnpm/installing.deps-installer@1101.0.9
+  - @pnpm/store.connection-manager@1100.0.13
+  - @pnpm/store.controller@1101.0.4
+  - @pnpm/deps.status@1100.0.12
+  - @pnpm/global.commands@1100.0.14
+  - @pnpm/workspace.state@1100.0.10
+  - @pnpm/deps.inspection.outdated@1100.0.12
+  - @pnpm/installing.env-installer@1101.0.7
+  - @pnpm/workspace.projects-graph@1100.0.6
+  - @pnpm/installing.context@1100.0.8
+  - @pnpm/workspace.projects-filter@1100.0.9
+  - @pnpm/workspace.workspace-manifest-writer@1100.0.6
+
 ## 1100.1.11
 
 ### Patch Changes

installing/commands/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.commands",
-  "version": "1100.1.11",
+  "version": "1100.1.12",
   "description": "Commands for installation",
   "keywords": [
     "pnpm",

installing/context/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @pnpm/get-context
 
+## 1100.0.8
+
+### Patch Changes
+
+- @pnpm/store.controller@1101.0.4
+
 ## 1100.0.7
 
 ### Patch Changes

installing/context/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.context",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Gets context information about a project",
   "keywords": [
     "pnpm",

installing/deps-installer/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @pnpm/core
 
+## 1101.0.9
+
+### Patch Changes
+
+- Updated dependencies [0c67cb5]
+  - @pnpm/store.index@1100.1.0
+  - @pnpm/agent.client@1.0.3
+  - @pnpm/building.after-install@1101.0.9
+  - @pnpm/installing.deps-restorer@1101.0.8
+  - @pnpm/installing.package-requester@1101.0.4
+  - @pnpm/worker@1100.1.3
+  - @pnpm/building.during-install@1101.0.7
+  - @pnpm/installing.deps-resolver@1100.0.8
+  - @pnpm/installing.context@1100.0.8
+  - @pnpm/exec.lifecycle@1100.0.7
+  - @pnpm/lockfile.verification@1100.0.8
+  - @pnpm/crypto.hash@1100.0.1
+  - @pnpm/fs.symlink-dependency@1100.0.2
+  - @pnpm/lockfile.settings-checker@1100.0.8
+
 ## 1101.0.8
 
 ### Patch Changes

installing/deps-installer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-installer",
-  "version": "1101.0.8",
+  "version": "1101.0.9",
   "description": "Fast, disk space efficient installation engine",
   "keywords": [
     "pnpm",

installing/deps-resolver/CHANGELOG.md

@@ -1,5 +1,13 @@
 # @pnpm/resolve-dependencies
 
+## 1100.0.8
+
+### Patch Changes
+
+- Updated dependencies [15e9e35]
+  - @pnpm/resolving.npm-resolver@1101.0.3
+  - @pnpm/fetching.pick-fetcher@1100.0.5
+
 ## 1100.0.7
 
 ### Patch Changes

installing/deps-resolver/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-resolver",
-  "version": "1100.0.7",
+  "version": "1100.0.8",
   "description": "Resolves dependency graph of a package",
   "keywords": [
     "pnpm",

installing/deps-restorer/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @pnpm/headless
 
+## 1101.0.8
+
+### Patch Changes
+
+- @pnpm/installing.package-requester@1101.0.4
+- @pnpm/worker@1100.1.3
+- @pnpm/building.during-install@1101.0.7
+- @pnpm/exec.lifecycle@1100.0.7
+- @pnpm/fs.symlink-dependency@1100.0.2
+
 ## 1101.0.7
 
 ### Patch Changes

installing/deps-restorer/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@pnpm/installing.deps-restorer",
-  "version": "1101.0.7",
+  "version": "1101.0.8",
   "description": "Fast installation using only pnpm-lock.yaml",
   "keywords": [
     "pnpm",