Zoltan Kochan 53acaaf30a refactor: extract python installation crate (#14821) ...

Give Python installation an independent crate boundary. Keep project
discovery and command adaptation in the CLI, and pass manifest paths plus
install and add options into the installer.

Move manifest handling, resolution, wheel fetching, interpreter operations,
and environment publication and rollback together. Preserve the existing
unit and CLI integration coverage and execution-path behavior.

Move pnpr ecosystem capability caching into the client crate so Cargo and
Python installation share the same process-wide cache without depending
on the CLI. Cover concurrent reuse and cached failures with tests.

Remove Python version/requirement type dependencies from the CLI while
retaining its resolver dependency for command-line specifier parsing.

Reject invalid Python save prefixes before preparing an install, preserving
the accepted values and default. Include regression coverage and a release note.

Follow-up to pnpm/pnpm#14816.

2026-09-11 02:25:48 +02:00

..

changelogs

chore(release): pacquet 12.4.1, pnpr 0.1.0-alpha.11 (#14802)

2026-09-10 18:27:12 +02:00

add-command-fast-path.md

perf: let pnpm add skip resolution for an already-locked version (#13807)

2026-08-11 14:32:55 +02:00

allow-build-negation-support.md

feat: support negation syntax in allow-build and pre-emptive approve-… (#14077)

2026-09-06 23:36:31 +02:00

allow-git-tarball-builds-by-repo-url.md

fix: approve git-hosted tarball builds by repository url (#12985)

2026-07-30 12:07:02 +02:00

allow-symlinked-lockfile-reads.md

fix(lockfile): fix installs when pnpm-lock.yaml is a symlink (#13075)

2026-07-17 11:30:36 +02:00

approve-a-stage-once-across-replicas.md

fix(pnpr): approve a staged publish once across replicas (#14665)

2026-09-07 20:46:29 +02:00

approve-builds-after-remove.md

fix(install): keep pending approvals after remove (#13894)

2026-08-21 01:51:33 +02:00

approve-builds-clears-legacy-settings.md

fix(approve-builds): clear legacy build settings from pnpm-workspace.yaml (#13849)

2026-08-20 20:34:25 +02:00

arch-change-invalidates-up-to-date.md

test(pacquet): port the remaining optionalDependencies and installSome suites (#13144)

2026-07-19 15:55:13 +02:00

artifact-publications-expire.md

fix(pnpr): write off a publication that never unregistered (#14326)

2026-08-31 13:15:22 +02:00

artifact-slots-are-write-once.md

feat(pnpr): a published artifact claims its slot (#14310)

2026-08-29 12:09:18 +02:00

artifact-slots-refuse-overlap.md

fix(pnpr): refuse artifacts whose compatibility overlaps a published one (#14321)

2026-08-29 15:46:31 +02:00

atomic-global-install-activation.md

fix(global): switch global installs over atomically (#13633)

2026-08-11 11:21:00 +02:00

audit-fix-age-excludes-only-when-needed.md

fix(audit): only exclude patched versions actually blocked by minimumReleaseAge (#13678)

2026-08-10 19:54:34 +02:00

audit-fix-age-excludes-unpublished-versions.md

fix(audit): correct patched version ranges against actually published versions (#13832)

2026-08-20 17:28:30 +02:00

audit-fix-bare-flag-and-save-exact.md

fix(audit): accept bare --fix and honor saveExact/savePrefix in overrides (#14150)

2026-08-31 23:23:17 +02:00

audit-summary-net-of-ignored.md

fix(audit): net the summary counts against ignored advisories (#14600)

2026-09-06 14:44:57 +02:00

authenticated-node-mirrors.md

fix: authenticate node.js mirror downloads (#14375)

2026-08-31 21:31:28 +02:00

bright-pandas-approve.md

feat(cli): implement flagged pacquet parity gaps (#14106)

2026-08-23 16:39:23 +02:00

bright-pandas-quote.md

fix(patching): support non-ASCII patch paths (#13802)

2026-08-17 15:29:01 +02:00

cache-path-command.md

feat: add pnpm cache path and keep the lockfile verification log on store prune (#13893)

2026-08-14 16:04:32 +02:00

calm-caches-scale.md

feat(pnpr): scale shared artifact storage horizontally (#14222)

2026-08-27 15:01:52 +02:00

calm-cats-canonicalize.md

refactor(pnpr): canonicalize ecosystem package names (#14617)

2026-09-06 14:24:15 +02:00

calm-pandas-share.md

feat: integrate the remote side-effects cache with install (#14171)

2026-08-26 15:49:39 +02:00

calm-spiders-smile.md

fix(cli): strip Unicode formatting characters (#13427)

2026-07-27 13:56:01 +02:00

cargo-custom-registry.md

feat(pnpm): configure the Cargo sparse registry (#14619)

2026-09-06 20:31:22 +02:00

cargo-resolution-through-pnpr.md

feat(pnpr): resolve Cargo dependencies through the install accelerator (#14607)

2026-09-06 11:27:21 +02:00

cargo-search.md

feat(pnpr): answer cargo search over hosted crates (#14624)

2026-09-06 23:16:04 +02:00

catalog-strict-range-satisfies.md

fix(deps-installer): satisfy semver ranges under strict catalog mode (#13716)

2026-08-12 01:28:40 +02:00

change-check-command.md

feat(versioning): band package versions via the release engine and add pnpm change check (#13190)

2026-09-05 11:59:37 +02:00

chilly-foxes-brush.md

fix: bound minimumReleaseAge fallbacks for custom dist-tags (#13706)

2026-08-07 14:26:47 +02:00

clean-artifact-orphans.md

fix(pnpr): reclaim orphaned shared artifact blobs (#14232)

2026-08-27 16:55:59 +02:00

cleanup-legacy-homedir-shims.md

fix(setup): remove leftover v10-layout shims so self-update stops re-warning (#13140)

2026-07-19 14:45:58 +02:00

complete-runtime-installation-port.md

feat(pacquet): complete runtime installation parity (#13157)

2026-07-19 22:35:28 +02:00

complete-version-publish-times.md

fix: refetch metadata when publish times are incomplete (#13750)

2026-08-19 11:25:27 +02:00

composed-catalog-and-override-rewrites.md

feat: compose the catalogs and overrides rewrites with other drift (#13804)

2026-08-11 13:48:21 +02:00

composed-fast-updates.md

feat: compose fast lockfile updates on one candidate (#13766)

2026-08-10 16:51:06 +02:00

config-dep-tarball-from-packument.md

fix(env-installer): take a migrated config dependency's tarball URL from the packument (#13767)

2026-08-20 20:25:10 +02:00

config-get-resolved-registries.md

feat(config): show the settings pnpm acts on via config get/list (#14043)

2026-08-21 02:31:34 +02:00

confirm-modules-purge-setting.md

fix(config): classify confirmModulesPurge across pnpm versions (#14127)

2026-08-24 14:10:58 +02:00

copy-a-source-out-of-hard-links.md

fix(deps-restorer): copy a source that has run out of hard links (#14778)

2026-09-10 14:23:59 +02:00

copy-does-not-follow-a-symlinked-target.md

fix(deps-restorer): stop the copy tier writing through a symlinked target (#14788)

2026-09-10 15:48:42 +02:00

cross-ecosystem-publish-transaction.md

feat(pnpr): publish across ecosystems in one transaction (#14608)

2026-09-06 11:48:33 +02:00

curly-shells-resolve.md

fix(config): resolve workspace scriptShell paths (#14479)

2026-09-06 09:36:08 +02:00

custom-fetcher-tarball-callbacks.md

[pacquet] fix(hooks): support native custom-fetcher callbacks (#14026)

2026-08-22 22:52:10 +02:00

dedupe-auto-installed-peer-range.md

fix(resolver): keep peer hoisting range-compatible (#14775)

2026-09-10 12:27:58 +02:00

dedupe-injected-deps-unrelated-peer-suffix.md

fix(deps-resolver): dedupe injected deps despite unrelated peer-suffix mismatch (#12800)

2026-07-13 14:24:45 +02:00

deploy-catalog-snapshots.md

fix(cli): support catalogs in deploy (#12931)

2026-07-13 16:21:16 +02:00

deploy-drops-excluded-direct-deps.md

fix(deploy): drop excluded dependency groups from the deployed project (#14069)

2026-08-22 16:37:00 +02:00

deploy-injects-workspace-packages-again.md

fix(deps-resolver): scope the preserve-workspace-link guard to dedupeInjectedDeps (#13755)

2026-08-10 14:46:27 +02:00

deploy-local-tarball-names.md

fix(deploy): preserve local tarball package names (#12864)

2026-07-13 15:13:33 +02:00

deploy-no-optional-symlinks.md

fix(deploy): drop excluded optional edges from the deployed lockfile (#13641)

2026-08-11 14:38:47 +02:00

deploy-singleton-peers.md

fix(deploy): support linked workspace packages with singleton peers (#14384)

2026-09-01 00:48:20 +02:00

drop-modules-yaml-registries.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

drop-removed-dependencies-without-resolving.md

perf(lockfile): drop removed dependencies without resolving (#13698)

2026-08-07 16:12:42 +02:00

early-rings-mix.md

fix(pack): avoid false positives when checking if the package already has a LICENSE file or not (#13842)

2026-08-20 17:29:36 +02:00

empty-proxy-values-are-unset.md

fix(config): treat empty proxy values as unset, matching the TypeScript CLI (#13597)

2026-08-03 13:36:34 +02:00

engine-no-native-binary-host.md

fix(engine.pm.commands): verify only the pnpm engine that is installed (#14583)

2026-09-06 18:46:13 +02:00

engine-pins-follow-the-workspace-root.md

fix(config): read the engine pins from the workspace root (#14641)

2026-09-07 09:31:19 +02:00

env-lockfile-skips-pnpm-exe-from-v12.md

fix(env-installer): stop pinning the exe package from pnpm v12 (#13599)

2026-08-03 10:23:06 +02:00

env-lockfile-write-matches-main-document.md

fix(lockfile): order env document writes like main document writes (#14388)

2026-09-06 22:08:45 +02:00

epics-monorepo-versioning.md

feat(versioning): add versioning.epics for banded monorepo versioning (#12979)

2026-07-13 22:02:04 +02:00

exact-catalog-version-rewrite.md

perf(lockfile): rewrite exact catalog version changes without resolving (#13689)

2026-08-07 11:35:32 +02:00

exclude-list-writer-keeps-comments.md

fix(workspace-manifest-writer): preserve comments in exclude-list edits (#14716)

2026-09-10 11:15:50 +02:00

fail-closed-global-bin-enumeration.md

fix(global): fail closed on incomplete bin ownership (#13985)

2026-09-09 17:44:19 +02:00

fast-catalog-ranges.md

perf: reuse lockfile for compatible dependency ranges (#13477)

2026-07-29 09:25:13 +02:00

fast-exact-overrides.md

perf: reuse lockfile entries for safe override updates (#13464)

2026-07-28 23:51:22 +02:00

fast-update-single-staging.md

refactor: single staging layer for fast lockfile updates (#13762)

2026-08-10 15:24:20 +02:00

fetch-timeout-measures-inactivity.md

fix(network): make fetch-timeout an inactivity timeout (#14642)

2026-09-07 11:27:17 +02:00

first-release-verbatim.md

feat(releasing): publish a new package's first release at its manifest version (#13207)

2026-07-22 08:57:38 +02:00

fix-android-tls.md

fix(network): use bundled roots on android (#14783)

2026-09-10 13:48:21 +02:00

fix-bare-workspace-peer-range.md

fix(peers): resolve workspace: shorthand peer ranges to * (#14774)

2026-09-10 15:29:12 +02:00

fix-cross-device-node-modules-move.md

fix(deps-restorer): copy a nested node_modules the filesystem won't rename (#14768)

2026-09-10 11:18:53 +02:00

fix-cyclic-build-hashes.md

fix(graph-hasher): handle build cycles consistently (#14342)

2026-08-31 16:55:13 +02:00

fix-dedupe-workspace-selection.md

fix(cli): honor dedupe workspace selection (#14736)

2026-09-09 16:25:51 +02:00

fix-dist-tarball-encoded-slashes.md

fix: preserve percent-encoded slashes in registry tarball URLs (#13541)

2026-08-16 11:17:49 +02:00

fix-git-resolver-prompt.md

fix(git-resolver): pass GIT_TERMINAL_PROMPT=0 to prevent interactive prompts in git ls-remote (#13471)

2026-07-30 20:13:51 +02:00

fix-ignored-optional-dependencies.md

fix(package-manager): apply ignoredOptionalDependencies when resolving (#14738)

2026-09-09 16:25:05 +02:00

fix-init-dev-engines-semver.md

fix(init): pin the exact pnpm version in devEngines and packageManager (#13997)

2026-08-18 23:19:18 +02:00

fix-lockfile-peer-dependencies-rewrite.md

fix(deps-resolver): copy a resolved manifest before writing to it (#14014)

2026-09-09 16:52:27 +02:00

fix-parent-workspace-links.md

fix(fs): normalize relative symlink paths (#14767)

2026-09-10 11:10:27 +02:00

fix-rust-filter-globs.md

fix: support micromatch wildcards in Rust directory filters (#14677)

2026-09-10 15:09:54 +02:00

fix-stale-pnpm-ps1.md

fix(bins): clean up stale pnpm.ps1 shim on Windows (#13937)

2026-08-22 17:33:48 +02:00

fix-termux-package-import.md

fix(deps-restorer): fall back to copying on EACCES (#14784)

2026-09-10 14:46:25 +02:00

fix-version-policy-wildcard-evaluation.md

fix(config): resolve version-policy evaluator and normalizer discrepancy (#13738)

2026-08-17 15:31:42 +02:00

fix-workspace-linking-depth.md

fix(resolver): respect workspace linking depth (#14785)

2026-09-10 14:19:19 +02:00

fluffy-snakes-complain.md

chore(release): don't re-lint the pnpm CLI at publish time (#12987)

2026-07-13 23:05:14 +02:00

fresh-gits-agree.md

fix(lockfile): compare equivalent git specifiers (#13056)

2026-07-17 23:34:05 +02:00

friendly-global-groups.md

feat(update): select global groups interactively (#13428)

2026-08-06 13:38:48 +02:00

frozen-lockfile-package-manager-deps.md

fix(install): enforce --frozen-lockfile for packageManagerDependencies (#14013)

2026-08-22 22:48:18 +02:00

frozen-lockfile-package-manager-repair.md

fix(install): stop --frozen-lockfile rejecting a package-manager pin it agrees with (#14129)

2026-08-24 14:16:43 +02:00

fruity-taxes-shake.md

feat(audit): add audit.ignorePrune to remove stale ignored GHSAs (#11384)

2026-08-25 14:39:20 +02:00

fuzzy-geckos-search.md

feat(pnpr): support browser registry discovery (#14544)

2026-09-05 01:44:46 +02:00

general-artifact-subjects.md

feat(artifacts): generalize shared artifact subjects (#14267)

2026-08-28 12:18:26 +02:00

git-fetch-failure-hint.md

fix(git-fetcher): say which dependency a git clone failed for, and how to fix it (#13759)

2026-08-10 15:06:47 +02:00

git-resolution-integrity-parses.md

fix(lockfile,sbom): stop treating a git resolution's integrity as a checksum (#13748)

2026-08-10 15:08:31 +02:00

git-resolve-failure-hint.md

fix(git-resolver): say which git dependency could not be reached, and how (#13794)

2026-08-11 09:25:23 +02:00

git-source-dedup.md

perf(git): deduplicate source fetches per install (#14727)

2026-09-10 08:12:52 +02:00

git-specifier-keeps-committish.md

fix(git-resolver): keep the committish in the recorded git specifier (#14007)

2026-08-22 14:10:33 +02:00

github-actions-safe-updates.md

refactor: share wildcard matching and harden github actions updates (#14807)

2026-09-10 21:51:04 +02:00

github-actions-self-repository-refs.md

ci: reference same-repository actions and workflows with the self-repository syntax (#14452)

2026-09-02 13:58:57 +02:00

github-actions-server-setting.md

feat: configurable GitHub server for GitHub Actions dependencies (#13230)

2026-07-23 13:38:25 +02:00

global-dirs-from-the-global-config-file.md

fix(config): read globalDir and globalBinDir from the global config file (#14337)

2026-08-31 15:42:18 +02:00

global-update-latest-local-specs.md

fix(global): keep local package specs during update --latest (#13024)

2026-08-17 10:42:02 +02:00

green-elephants-relax.md

fix(update): scope pinned recursive updates by version line (#14053)

2026-08-23 00:55:59 +02:00

group-moves-fast-update.md

feat: fast lockfile update for dependency group moves (#13761)

2026-08-10 14:44:34 +02:00

gvs-build-failure-cleanup.md

test(pacquet): port the global virtual store suites (stage 5) (#13156)

2026-07-19 22:48:18 +02:00

gvs-compat-angular-nuxt-phantom-deps.md

fix: make the Ecosystem E2E workflow pass (#13727)

2026-08-08 13:16:35 +02:00

gvs-esm-node-path-loader.md

feat(gvs): restore NODE_PATH resolution for scripts, ESM included (#13931)

2026-08-16 11:20:12 +02:00

gvs-link-deps-in-slots.md

fix: materialize and hash link: dependencies in virtual-store slots (#13658)

2026-08-05 13:54:47 +02:00

gvs-local-directory-deps.md

fix(deps-graph-hasher): give local directory deps their own global-virtual-store slot (#13383)

2026-07-26 09:25:03 +02:00

harden-web-auth-poll-body.md

feat(network/web-auth): bound the token-poll body and make QR failure non-fatal (#13191)

2026-07-23 07:55:55 +02:00

held-back-warning-release-age.md

fix(npm-resolver): apply the publishedBy cutoff to the held-back-update baseline (#13115)

2026-08-06 15:05:31 +02:00

hoisted-collapsed-peer-variant-edges.md

fix(hoisted): resolve edges declared against a collapsed peer variant (#14034)

2026-08-23 01:12:41 +02:00

hoisted-file-dep-peer-variants-stay-apart.md

fix(hoisted): keep injected peer variants as separate copies (#14126)

2026-08-24 14:10:32 +02:00

hoisted-repeat-install-skips-present-packages.md

fix(deps-restorer): leave hoisted packages that are already in place alone (#14772)

2026-09-10 15:27:15 +02:00

import-eperm-falls-back.md

fix(deps-restorer): fall back on EPERM from a hardlink or reflink (#14771)

2026-09-10 13:35:54 +02:00

import-lockfile-directory.md

fix(import): honor lockfileDir when replacing lockfiles (#14564)

2026-09-06 20:51:49 +02:00

inert-lockfile-setting-updates.md

perf(lockfile): record inert setting changes without resolving (#13600)

2026-08-06 15:17:38 +02:00

inert-patched-dependencies-updates.md

perf(lockfile): apply patchedDependencies changes without resolving (#13680)

2026-08-06 22:39:19 +02:00

init-pins-latest-pnpm.md

feat(init): pin the latest pnpm version, not the running one (#14167)

2026-08-25 18:25:07 +02:00

injected-syncer-stale-bins.md

fix(injected-deps-syncer): unlink a bin the script dropped (#13848)

2026-08-12 08:54:42 +02:00

install-tarball-root-level-entry.md

fix(tarball): install a tarball entry that sits at the archive root (#14705)

2026-09-09 17:36:52 +00:00

interactive-update-blank-workspace-name.md

fix(update): treat a whitespace-only project name as no name (#13354)

2026-07-25 16:10:56 +02:00

interactive-update-github-actions-opt-in.md

fix: make GitHub Actions checks opt-in for outdated and update (#13259)

2026-07-24 01:06:35 +02:00

interactive-update-wide-character-columns.md

fix(update-interactive): measure the choice table in terminal columns (#13415)

2026-07-27 11:39:15 +02:00

journaled-publish-for-every-surface.md

feat(pnpr): journal the Cargo and Python publish transactions (#14606)

2026-09-06 11:08:37 +02:00

keep-cas-blobs-on-verify-failure.md

fix(store): keep CAS blobs on verification failure instead of unlinking them (#14526)

2026-09-04 08:53:48 +02:00

known-registries-single-owner.md

refactor(registries): give the known-registry set one owner (#13591)

2026-08-02 19:40:34 +02:00

lazy-store-verification.md

perf(deps-restorer): verify store files only for the snapshots a frozen install materializes (#14769)

2026-09-10 12:01:14 +02:00

lazy-taxis-whisper.md

docs(cli): update description to remove "experimental" label in pnpm command (#14712)

2026-09-09 22:03:28 +02:00

ledger-empty-intents-roundtrip.md

fix(releasing): round-trip ledger entries with no consumed intents (#13125)

2026-07-18 14:16:41 +02:00

ledger.yaml

chore(release): pacquet 12.4.1, pnpr 0.1.0-alpha.11 (#14802)

2026-09-10 18:27:12 +02:00

legacy-deploy-lockfile-preference.md

fix(deploy): prefer source lockfile versions in legacy deploy (#13984)

2026-09-10 09:03:38 +02:00

licenses-skip-runtime-deps.md

fix(licenses): report runtimes downloaded through devEngines (#14179)

2026-09-07 09:32:51 +02:00

locked-version-reuse.md

fix: reuse the version resolution would dedupe onto for a changed range (#13779)

2026-08-10 21:51:40 +02:00

lockfile-false-honors-devengines-download.md

fix(cli): honor lockfile:false with onFail download (#14753)

2026-09-10 13:29:38 +02:00

lockfile-hash-normalization.md

perf(lockfile): normalize hash input in place (#14707)

2026-09-09 21:44:39 +02:00

login-non-interactive-web-auth.md

feat(login): support web login without an interactive terminal (#13479)

2026-07-29 12:12:10 +02:00

long-modules-yaml-keys.md

fix(modules-yaml): read manifests with long dependency paths (#13885)

2026-08-21 14:59:19 +02:00

lowest-direct-under-minimum-release-age.md

fix(resolver): apply resolutionMode under a minimum release age (#13831)

2026-08-11 17:14:24 +02:00

merged-branch-lockfiles-drop-removed-deps.md

fix(lockfile): drop removed dependencies when merging branch lockfiles (#13967)

2026-08-24 15:49:36 +02:00

meta-only-optional-peer-hoist.md

feat(peers): hoist optional peers implied by peerDependenciesMeta (#13120)

2026-07-18 13:22:01 +02:00

minimum-release-age-exclude-prune.md

feat: add minimumReleaseAgeExcludePrune, rename cleanupUnusedCatalogs to catalogPrune (#13653)

2026-08-11 09:45:17 +02:00

minimum-release-age-latest-bound.md

fix(resolver): bound minimumReleaseAge latest fallback (#13044)

2026-07-30 13:26:31 +02:00

named-registries-lockfile-format.md

feat(lockfile): key named-registry packages by their registry (#13528)

2026-08-02 16:52:28 +02:00

new-importer-fast-update.md

perf: absorb a new workspace project into the fast lockfile update (#13803)

2026-08-11 11:12:05 +02:00

no-cataloging-of-local-paths.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

no-proxy-leading-dot.md

fix(network): filter empty segments in no-proxy matcher (#14698)

2026-09-09 15:00:32 +02:00

node-download-mirrors-config-set-global.md

feat(config): allow nodeDownloadMirrors in the global config and env (#13610)

2026-09-09 21:51:05 +02:00

node-download-mirrors-global-and-env.md

feat(config): allow nodeDownloadMirrors in the global config and env (#13610)

2026-09-09 21:51:05 +02:00

normalize-empty-bundled-dependencies.md

fix(lockfile): omit empty bundled dependencies (#13148)

2026-07-30 12:08:31 +02:00

npm-ecosystem-prefix.md

chore(release): pacquet 12.4.1, pnpr 0.1.0-alpha.11 (#14802)

2026-09-10 18:27:12 +02:00

npm-surface-explicit-routes.md

docs(pnpr): record the registry-prefix tilde in the release note (#14615)

2026-09-06 13:07:32 +02:00

npmrc-registry-beats-auth-file.md

fix(config): let an .npmrc registry outrank the global _auth file's routes (#14636)

2026-09-07 02:41:18 +02:00

oci-registry-operations.md

feat(pnpr): add oci registry maintenance (#14644)

2026-09-07 07:22:34 +02:00

offline-lockfile-verification-cache.md

fix(resolver): honor offline mode during lockfile verification (#13671)

2026-08-07 15:32:08 +02:00

optional-peer-hoist-respects-workspace-root.md

fix(resolving-deps-resolver): apply overrides and the workspace root's pin to hoisted peers (#13369)

2026-07-25 20:37:28 +02:00

optional-peer-hoist-skips-a-rejected-root-pin.md

fix(resolver): ignore a workspace root pin an optional peer's range rejects (#13869)

2026-08-31 21:27:31 +02:00

orange-rats-jam.md

perf(resolver): reuse stable cached range metadata (#13980)

2026-08-20 21:24:56 +02:00

override-range-fast-update.md

feat: absorb an override that names a range, not just an exact version (#13792)

2026-08-11 01:28:47 +02:00

overrides-reach-auto-installed-peers.md

fix(resolving-deps-resolver): apply overrides and the workspace root's pin to hoisted peers (#13369)

2026-07-25 20:37:28 +02:00

pacquet-binstub-symlink-resolution.md

fix(pacquet): resolve symlinks in POSIX shell shims before computing … (#13411)

2026-08-07 13:48:51 +02:00

pacquet-clap-help-markdown.md

docs(rust/cli): clean up --help texts (#13008)

2026-07-15 11:36:34 +02:00

pacquet-install-filters.md

fix(pacquet): honor workspace install filters (#13030)

2026-07-18 13:06:37 +02:00

pacquet-windows-atomic-writes.md

feat(pnpr): browse hosted packages and fix concurrent registration (#14696)

2026-09-08 18:46:04 +02:00

parent-scoped-overrides.md

feat: absorb a parent-scoped override into the fast lockfile update (#13797)

2026-08-11 02:25:20 +02:00

patched-install-scripts-need-approval.md

fix(patching): put patch-added build work through build approval (#14654)

2026-09-07 15:58:36 +02:00

path-aware-registry-cache-key.md

fix(resolving): encode full registry path into metadata cache key (#14081)

2026-09-08 09:31:51 +02:00

pattern-run-no-bail-siblings.md

fix(cli): honor --no-bail for pattern script runs (#14754)

2026-09-10 09:16:07 +02:00

peer-hoist-skips-project-relative-root-deps.md

fix(resolving-deps-resolver): hoist a local root dep by its version, not its path (#13387)

2026-07-26 03:06:01 +02:00

peer-scheme-specifiers.md

feat(peers): accept scheme-carrying specifiers in peerDependencies (#13110)

2026-07-17 23:47:34 +02:00

peer-suffix-version-precision.md

fix: check peer suffixes against the version a fast update dropped (#13789)

2026-08-11 00:48:19 +02:00

per-registry-time-field.md

feat(config): declare the time field per registry (#13952)

2026-08-17 11:55:56 +02:00

perf-resolver-caches.md

perf(resolver): avoid repeated packument filtering and semver parsing during version picking (#13504)

2026-08-01 14:09:02 +02:00

pipeline-runs-in-the-hosted-store.md

feat(pnpr): keep pipeline run records with the hosted packages (#14668)

2026-09-08 08:19:11 +02:00

pipeline-symlinked-inputs.md

fix(pipeline): hash symlinked inputs as link targets (#14693)

2026-09-08 17:20:55 +02:00

pkg-property-paths-accept-hyphens.md

fix(pkg): accept hyphens in dot-notation property paths (#14037)

2026-08-23 00:08:05 +02:00

pm-bootstrap-nonderivable-tarball-registries.md

fix(self-update): support registries without canonical tarball URLs or signature metadata (#13728)

2026-08-08 20:42:37 +02:00

pm-signature-fallback-registry.md

fix(self-update): support registries without canonical tarball URLs or signature metadata (#13728)

2026-08-08 20:42:37 +02:00

pnp-loader-virtual-store-only.md

fix(package-manager): don't write the PnP loader for a virtual-store-only install (#13636)

2026-08-04 13:12:48 +02:00

pnpm-doctor-command.md

ci(release): gate releases on a publishable manifest, a real upgrade, and pnpm doctor (#13072)

2026-07-17 09:54:10 +02:00

pnpm-setup-github-actions.md

fix(setup): persist GitHub Actions env files (#12841)

2026-07-24 02:42:40 +02:00

pnpr-abort-invalid-blob-streams.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-browse-hosted-packages.md

feat(pnpr): browse hosted packages and fix concurrent registration (#14696)

2026-09-08 18:46:04 +02:00

pnpr-cargo-and-pypi-registries.md

feat(pnpr): serve Cargo and Python registries beside npm (#14598)

2026-09-06 09:25:23 +02:00

pnpr-catalog-overrides.md

fix: resolve catalog references when installing via a pnpr server (#13233)

2026-07-23 16:04:43 +02:00

pnpr-config-in-env.md

feat(pnpr): allow configuration through environment variables (#14434)

2026-09-05 10:57:38 +02:00

pnpr-document-write-conflict-name.md

refactor(pnpr): name storage after documents and blobs (#14609)

2026-09-06 12:42:44 +02:00

pnpr-hoist-readme.md

fix(publish): send README to the registry as metadata (#12968)

2026-07-13 18:27:50 +02:00

pnpr-hosted-original-digests.md

feat(pnpr): serve hosted originals by digest (#14183)

2026-08-26 15:28:20 +02:00

pnpr-jsr-builtin-route.md

fix(config): route @jsr packages through the built-in JSR registry (#14653)

2026-09-07 15:59:54 +02:00

pnpr-last-modified.md

perf(pacquet): overlap and shrink cold-install verification, linking, and metadata (#13934)

2026-08-16 12:18:17 +02:00

pnpr-libsql-concurrent-registration.md

feat(pnpr): browse hosted packages and fix concurrent registration (#14696)

2026-09-08 18:46:04 +02:00

pnpr-oci-batch-publish.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-blob-deletion.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-protocol-surface.md

feat(pnpr): complete oci protocol surface (#14647)

2026-09-07 09:27:57 +02:00

pnpr-oci-pull-through.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-scoped-tokens.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-size-limits.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oidc.md

feat(pnpr): add oidc and keyless publishing (#14666)

2026-09-07 20:45:28 +02:00

pnpr-pipeline-runs.md

feat: add pipelines, run records, and Cargo build caching (#14233)

2026-09-07 01:02:39 +02:00

pnpr-redaction-keeps-query.md

style: adopt perfectionist's new size and shape rules (#14730)

2026-09-09 13:15:59 +02:00

pnpr-refreshes-revisions.md

feat: refresh registry revisions through pnpr (#14180)

2026-08-26 12:29:51 +02:00

pnpr-registry-declarations.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

pnpr-registry-directory.md

feat(pnpr): scope registry identity by ecosystem and expose directory (#14700)

2026-09-08 23:14:15 +02:00

pnpr-reject-url-delimiters-in-package-names.md

refactor(pnpr): name storage after documents and blobs (#14609)

2026-09-06 12:42:44 +02:00

pnpr-resolution-mode.md

fix(pnpr): resolve in the client's resolutionMode (#13958)

2026-08-17 13:31:24 +02:00

pnpr-resolve-settings.md

fix(pnpr): forward client resolver settings (#13730)

2026-08-17 10:45:33 +02:00

pnpr-workspace-identity.md

fix(pacquet): honor workspace install filters (#13030)

2026-07-18 13:06:37 +02:00

policy-aware-install-summary-latest.md

fix(install-summary): suppress '(X is available)' when latest is held back by minimumReleaseAge (#13214)

2026-07-30 20:00:23 +02:00

preserve-equals-pin-operator.md

fix(resolver): keep the explicit = operator when updating an exact pin (#13184)

2026-07-30 13:37:36 +02:00

preserve-unchanged-package-metadata.md

fix(lockfile): keep a recorded deprecation when an unchanged resolution is rebuilt (#13878)

2026-08-12 21:52:54 +02:00

preserve-workspace-link-on-partial-update.md

fix(deps-resolver): preserve workspace link: on re-resolution (fixes pnpm/pnpm#10433) (#13112)

2026-07-30 12:34:52 +02:00

production-flag-alias.md

fix(cli): accept --production, and reproduce a prod install as --prod (#14148)

2026-08-25 11:27:03 +02:00

promote-peer-suffixed-dependency.md

fix(package-manager): resolve promoted peer-suffixed dependencies (#14743)

2026-09-10 13:19:17 +02:00

protect-workspace-root-modules-purge.md

refactor(package-manager): decompose install modules (#13640)

2026-08-04 16:41:38 +02:00

prune-allow-builds-on-remove.md

fix: prune undecided allowBuilds entries on package removal (#13917)

2026-08-21 15:01:51 +02:00

publish-readme-metadata.md

fix(publish): send README to the registry as metadata (#12968)

2026-07-13 18:27:50 +02:00

publish-reports-what-it-did-not-record.md

feat(pnpr): publish across ecosystems in one transaction (#14608)

2026-09-06 11:48:33 +02:00

python-resolution-through-pnpr.md

feat(pnpr): resolve Python projects through the install accelerator (#14613)

2026-09-06 13:04:53 +02:00

python-save-prefix-validation.md

refactor: extract python installation crate (#14821)

2026-09-11 02:25:48 +02:00

quick-cargo-workspace-discovery.md

perf(cargo): speed up dependency installation (#14699)

2026-09-09 01:25:28 +02:00

quick-oranges-ignore-optionals.md

perf: prune newly ignored optional dependencies without resolution (#13482)

2026-08-06 12:40:27 +02:00

quick-signature-fallback.md

fix(cli): skip fallback signature retries (#14519)

2026-09-04 00:20:59 +02:00

quick-wolves-publish.md

feat(cli): implement flagged pacquet parity gaps (#14106)

2026-08-23 16:39:23 +02:00

quiet-pumas-configure.md

fix(cli): skip project checks for global config (#14468)

2026-09-02 16:36:09 +02:00

quiet-shrimps-prune.md

fix: prune stale minimum release age excludes after install (#14761)

2026-09-10 09:20:53 +02:00

recover-metadata-cache-race.md

fix(resolver): recover after metadata cache loss (#13014)

2026-07-17 22:05:03 +02:00

recursive-run-keeps-failures.md

fix(cli): close the six pnpm-12-on-n8n defects (#13375)

2026-07-25 20:34:26 +02:00

redact-tarball-error-urls.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

refresh-registry-revisions.md

feat: support selecting and refreshing registry revisions (#14175)

2026-08-26 01:58:44 +02:00

refuse-broken-release-on-version-switch.md

fix: refuse a broken pnpm release when switching versions, not only on self-update (#13082)

2026-07-16 21:29:48 +02:00

registries-by-scope-by-prefix.md

chore(release): pacquet 12.0.0-rc.7, pnpr 0.1.0-alpha.7 (#13971)

2026-08-18 11:32:51 +02:00

registry-server-type.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

relink-publish-directories.md

fix(lockfile): track publish link directory behavior (#14517)

2026-09-03 23:15:02 +02:00

remove-command-fast-path.md

perf: let pnpm remove skip resolution (#13712)

2026-08-10 12:34:35 +02:00

remove-modules-dir-error-path.md

fix(package-manager): name the entry that could not be removed from node_modules (#14605)

2026-09-08 19:08:22 +02:00

remove-trust-lockfile-flags.md

feat(cli): accept --trust-lockfile and the --trust-policy flags on remove and update (#14432)

2026-09-02 17:31:21 +02:00

repair-pacquet-lockfiles.md

fix(cli): validate filtered pnpr repairs (#14260)

2026-08-28 01:17:54 +02:00

repair-shared-slot-in-place.md

fix(deps-restorer): repair a shared virtual-store slot in place (#13810)

2026-08-11 21:16:47 +02:00

repeat-install-coarse-mtime.md

fix: honor same-second edits on whole-second-mtime filesystems (#12975)

2026-07-13 18:32:16 +02:00

report-store-integrity-checks.md

feat: report when store verification re-hashes files (#13961)

2026-08-17 15:23:28 +02:00

retry-invalid-304.md

fix(resolver): recover from unsolicited 304 responses (#12888)

2026-07-13 15:56:52 +02:00

root-bin-stderr-clean-path.md

fix(cli): keep root/bin/prefix -g stdout a clean path; support root -g and prefix -g in pnpm 12 (#13688)

2026-08-07 15:52:12 +02:00

run-regex-and-sequential.md

feat(exec): restore --sequential flag and sort regex-matched scripts lexicographically (#13074)

2026-07-17 13:20:26 +02:00

run-the-dev-preinstall-hook.md

fix(package-manager): run the pnpm:devPreinstall hook (#13403)

2026-07-27 00:21:34 +02:00

runtime-matches-the-host-architecture.md

fix(resolver): pick the platform variant matching the host (#13902)

2026-08-20 21:23:13 +02:00

runtime-shasums-cache.md

perf(resolver): cache Node.js release metadata and skip the index for exact runtime pins (#13901)

2026-08-14 11:58:24 +02:00

rust-cli-honors-inert-settings.md

feat(config): honor the settings the Rust CLI only recognized (#14109)

2026-08-23 16:39:49 +02:00

rust-compilation-cache.md

feat(pnpr): share cargo compilation caches (#14620)

2026-09-06 15:35:06 +02:00

safe-artifact-quota.md

fix(pnpr): retain quota after ambiguous artifact writes (#14228)

2026-08-27 15:29:54 +02:00

safe-broken-lockfile-errors.md

fix(lockfile): hide content from parse errors (#13101)

2026-07-17 15:14:43 +02:00

safe-pnpr-project-transforms.md

fix: preserve patches and package extensions with pnpr (#14181)

2026-08-26 12:23:10 +02:00

save-prefix-equals.md

fix(resolver): keep the explicit = operator when updating an exact pin (#13184)

2026-07-30 13:37:36 +02:00

sbom-blank-authors.md

fix(sbom): omit empty package authors (#14708)

2026-09-10 12:09:01 +02:00

sbom-exclude-uninstallable-platform-packages.md

fix(sbom): exclude platform-incompatible optional packages (#13710)

2026-08-11 14:34:42 +02:00

sbom-missing-importers.md

fix(sbom): honor --filter-prod and the universal --fail-if-no-match (#14072)

2026-08-22 17:12:27 +02:00

sbom-spdx-timestamp-seconds.md

fix(sbom): truncate SPDX creationInfo.created to whole seconds (#14688)

2026-09-10 11:14:38 +02:00

secure-catalogs-route.md

fix(pnpr): validate and key forwarded catalogs (#13632)

2026-08-10 22:02:58 +02:00

self-update-bumps-simple-ranges.md

fix(self-update): bump caret/tilde devEngines.packageManager ranges (#13949)

2026-08-21 15:01:01 +02:00

self-update-release-age.md

fix(self-update): stop the project config from steering the pnpm download (#12813)

2026-07-25 01:34:27 +02:00

self-update-tag-no-downgrade.md

fix(self-update): do not downgrade when a dist-tag points at the running version (#13889)

2026-08-20 21:19:54 +02:00

self-update-verify-installed-pnpm.md

fix(self-update): discard an installed pnpm that cannot run (#13076)

2026-07-16 14:38:22 +02:00

serve-container-images.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

setup-writes-module-type.md

fix(setup): declare the module type in the manifest written for a standalone executable (#13732)

2026-08-09 15:43:31 +02:00

seven-pens-smile.md

fix(update): preserve prerelease range operators (#13900)

2026-08-21 02:10:07 +02:00

shell-emulator-literal-arguments.md

fix(executor): preserve emulated script arguments (#14576)

2026-09-06 18:47:24 +02:00

shim-creation-syscalls.md

perf(cmd-shim): skip the shim read in a bin directory this run created (#14779)

2026-09-10 15:22:31 +02:00

short-windows-permission-retries.md

fix(fs): shorten windows permission-error retries (#14776)

2026-09-10 14:15:08 +02:00

side-effects-cache-empty-overlay.md

fix(store-dir): rebuild when the side-effects cache has nothing to restore (#14744)

2026-09-10 09:19:31 +02:00

skip-registry-for-preferred-workspace-packages.md

perf(npm-resolver): skip the registry when a preferred workspace package must win (#13717)

2026-08-17 10:44:26 +02:00

skip-unread-package-map.md

perf(install): speed up warm installs under the global virtual store (#14511)

2026-09-10 14:20:11 +02:00

slow-fetch-warnings.md

feat(pacquet): add slow fetch warnings (#14078)

2026-08-22 21:15:51 +02:00

spicy-hoops-brake.md

fix: absorb an override change under an unchanged catalog: override (#13979)

2026-08-17 23:24:23 +02:00

ssh-git-url-without-user-info.md

fix(git-resolver): resolve ssh git URLs that carry no user info (#13726)

2026-08-12 01:21:02 +02:00

stage-approve-interactive.md

fix(stage): derive approval order from tarballs (#14524)

2026-09-04 08:14:53 +02:00

tidy-deploy-graphs.md

fix(deploy): prune unreachable package graph (#12935)

2026-07-13 15:55:25 +02:00

tidy-pandas-pack.md

fix(setup): preserve bundled node-gyp (#14401)

2026-09-01 12:51:43 +02:00

tidy-pianos-tap.md

fix: stop pointing users at Corepack for pnpm updates (#14115)

2026-08-24 16:45:42 +02:00

tidy-pugs-smile.md

fix(update): reject a version a transitive-only selector cannot record (#14090)

2026-08-23 12:42:26 +02:00

tidy-ravens-revise.md

feat: support integrity-addressed registry revisions (#13475)

2026-08-25 22:13:27 +02:00

tolerate-a-foreign-package-manager-entry.md

fix(install): accept a package-manager entry pnpm does not install from (#14132)

2026-08-24 15:43:28 +02:00

tough-flies-approve.md

fix: enforce git prepare approvals on store reuse (#14160)

2026-08-25 18:15:59 +02:00

trust-check-honors-ignore-missing-time.md

fix: honor minimumReleaseAgeIgnoreMissingTime in the trust check (#14019)

2026-08-22 22:19:18 +02:00

trust-policy-exclude-prune.md

feat: add trustPolicyExcludePrune (#14068)

2026-09-08 10:54:56 +02:00

unpublish-otp-challenge.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

unsafe-perm-flag.md

fix(pacquet): accept the boolean settings as bare flags on every command (#14541)

2026-09-04 15:42:55 +02:00

unused-patch-after-removal.md

fix: decline a fast lockfile update that leaves a patch unused (#13828)

2026-08-12 01:01:31 +02:00

update-changeset-flag.md

feat(update): generate changesets for dependency updates (#13195)

2026-07-21 23:48:46 +02:00

update-config-sees-resolved-config.md

fix(config): hand updateConfig the resolved config, not one file's settings (#14680)

2026-09-09 21:45:52 +02:00

update-github-actions.md

feat(update): update GitHub Actions dependencies (#13198)

2026-07-22 00:41:30 +02:00

update-keeps-range-operator-for-requested-version.md

fix(resolver): preserve range prefix on update to an exact version (#14756)

2026-09-10 12:11:48 +02:00

update-no-save-respects-kept-range.md

fix(deps-installer): skip no-save updates to versions the kept range excludes (#13527)

2026-08-06 11:31:24 +02:00

update-preserve-exact-pins.md

fix(resolver): preserve exact version pins during update (#13027)

2026-07-17 19:32:16 +02:00

update-settings-section.md

feat(config): add update and audit settings sections superseding updateConfig, auditConfig, and auditLevel (#13197)

2026-07-21 22:28:44 +02:00

update-versioned-selector-stays-targeted.md

fix(update): key pacquet's update targets by the resolved package name (#14040)

2026-08-21 11:19:33 +02:00

version-dry-run-writes-nothing.md

fix(version): make --dry-run leave the manifests untouched (#13954)

2026-08-23 00:20:02 +02:00

version-json-empty-output.md

fix: make pnpm version -r --json emit JSON when there are no pending changes (#13222)

2026-08-06 11:48:51 +02:00

violet-teachers-sort.md

perf(deps): sort dependency graphs in linear time (#14152)

2026-08-25 13:51:56 +02:00

virtual-store-type.md

feat: name the virtual store's type, keeping the boolean spelling (#13945)

2026-08-17 15:22:57 +02:00

wait-for-interrupted-scripts.md

fix(executor): wait for an interrupted script before exiting (#14735)

2026-09-09 20:15:24 +02:00

warm-global-virtual-store-installs.md

perf(install): speed up warm installs under the global virtual store (#14511)

2026-09-10 14:20:11 +02:00

warn-about-yarn-workspaces-field.md

fix: warn when package.json declares a workspaces field (#14749)

2026-09-10 13:32:15 +02:00

web-auth-qr-code-fallback.md

feat(network/web-auth): bound the token-poll body and make QR failure non-fatal (#13191)

2026-07-23 07:55:55 +02:00

wild-poems-tickle.md

fix(binary-fetcher): unpack zip archives into a random directory (#14733)

2026-09-09 15:02:57 +02:00

workspace-pack-gitignore.md

fix: respect workspace root ignores when packing (#12878)

2026-07-13 16:32:21 +02:00

workspace-protocol-catalogs.md

feat(catalogs): support workspace protocol catalog entries (#14332)

2026-08-30 01:54:13 +02:00