Zoltan Kochan 6ab3c27774 fix(config): honor the runtime setting (#17261) ...

pnpm v12 had Config::skip_runtimes but no source set it, so
`runtime: false` was dropped and only `--no-runtime` skipped the
runtimes from devEngines.runtime and engines.runtime. pnpm v11 passes
`skipRuntimes: opts.runtime === false` (installSingleProject.ts,
recursive/context.ts) and reads the setting from pnpm-workspace.yaml,
`pnpm_config_runtime`, and `--config.runtime`, not from the global
config.yaml, where `runtime` is an excluded key.

WorkspaceSettings now has a `runtime` field, read from
pnpm-workspace.yaml and PNPM_CONFIG_RUNTIME (and through it from
`--config.runtime`), cleared from the global config.yaml, and applied
as `skip_runtimes = !runtime`. `pnpm dedupe` and `pnpm prune` no longer
force runtimes on, as in v11, where both go through installDeps.
`pnpm dedupe` accepts `--no-runtime`, since v11 dedupe takes install's
options. v11 prune does not, so v12 prune stays without it.

updateConfig hooks see `runtime` as v11 shows it: absent until a source
sets it, and `false` under `--no-runtime`. The install pipelines record
`--no-runtime` as a CLI-set `runtime: false` before the hooks run, so a
hook cannot turn runtimes back on (v11 restoreCliSettings).

Intended difference from v11: with engineStrict, a skipped runtime
makes the root engine check use the active Node.js, which is v12's
existing `--no-runtime` behavior (pnpm/pnpm#15135). v11 checks against
the manifest runtime version even when it does not install it. dedupe
and prune now pass the configured runtime policy, like add, update, and
remove, and RuntimePolicy::Always is removed.

Tests: config-crate tests for the yaml, env override, and global
config.yaml exclusion; e2e tests in install_runtimes::no_runtime for
the yaml and `--config.runtime` skip, the CLI override, dedupe and
prune under the setting and `dedupe --no-runtime`, the hook view, a
hook unable to undo `--no-runtime`, and a hook setting `runtime: false`;
install_root_engine covers the engine check of dedupe and prune with a
skipped runtime. Each fix fails its test when reverted.

The install docs now spell the setting `runtime: false`, and the dedupe
docs list `--no-runtime`.

2026-10-23 11:10:27 +02:00

..

changelogs

chore(release): 11.28.8 (#17256)

2026-10-22 23:45:10 +02:00

add-command-fast-path.md

perf: let pnpm add skip resolution for an already-locked version (#13807)

2026-08-11 14:32:55 +02:00

add-lowercase-save-aliases.md

fix(add): accept the lowercase save aliases (#17270)

2026-10-23 11:07:13 +02:00

add-reads-tag-setting.md

fix(add): resolve a version-less dependency to the tag setting (#17260)

2026-10-23 09:46:18 +02:00

add-tag-locks-tagged-version.md

fix(add): lock the version an explicit tag or range picked (#17240)

2026-10-22 22:43:26 +02:00

alias-bins-resolve-sibling-pnpm.md

fix(bins): resolve pnpm next to the pn/pnpx/pnx aliases, not on PATH (#14797)

2026-09-14 12:18:21 +02:00

allow-build-negation-support.md

feat: support negation syntax in allow-build and pre-emptive approve-… (#14077)

2026-09-06 23:36:31 +02:00

allow-git-tarball-builds-by-repo-url.md

fix: approve git-hosted tarball builds by repository url (#12985)

2026-07-30 12:07:02 +02:00

allow-symlinked-lockfile-reads.md

fix(lockfile): fix installs when pnpm-lock.yaml is a symlink (#13075)

2026-07-17 11:30:36 +02:00

approve-a-stage-once-across-replicas.md

fix(pnpr): approve a staged publish once across replicas (#14665)

2026-09-07 20:46:29 +02:00

approve-builds-after-remove.md

fix(install): keep pending approvals after remove (#13894)

2026-08-21 01:51:33 +02:00

approve-builds-clears-legacy-settings.md

fix(approve-builds): clear legacy build settings from pnpm-workspace.yaml (#13849)

2026-08-20 20:34:25 +02:00

arch-change-invalidates-up-to-date.md

test(pacquet): port the remaining optionalDependencies and installSome suites (#13144)

2026-07-19 15:55:13 +02:00

artifact-publications-expire.md

fix(pnpr): write off a publication that never unregistered (#14326)

2026-08-31 13:15:22 +02:00

artifact-slots-are-write-once.md

feat(pnpr): a published artifact claims its slot (#14310)

2026-08-29 12:09:18 +02:00

artifact-slots-refuse-overlap.md

fix(pnpr): refuse artifacts whose compatibility overlaps a published one (#14321)

2026-08-29 15:46:31 +02:00

atomic-global-install-activation.md

fix(global): switch global installs over atomically (#13633)

2026-08-11 11:21:00 +02:00

audit-fix-age-excludes-only-when-needed.md

fix(audit): only exclude patched versions actually blocked by minimumReleaseAge (#13678)

2026-08-10 19:54:34 +02:00

audit-fix-age-excludes-unpublished-versions.md

fix(audit): correct patched version ranges against actually published versions (#13832)

2026-08-20 17:28:30 +02:00

audit-fix-bare-flag-and-save-exact.md

fix(audit): accept bare --fix and honor saveExact/savePrefix in overrides (#14150)

2026-08-31 23:23:17 +02:00

audit-summary-net-of-ignored.md

fix(audit): net the summary counts against ignored advisories (#14600)

2026-09-06 14:44:57 +02:00

authenticated-node-mirrors.md

fix: authenticate node.js mirror downloads (#14375)

2026-08-31 21:31:28 +02:00

bright-pandas-approve.md

feat(cli): implement flagged pacquet parity gaps (#14106)

2026-08-23 16:39:23 +02:00

bright-pandas-quote.md

fix(patching): support non-ASCII patch paths (#13802)

2026-08-17 15:29:01 +02:00

bright-pandas-refresh.md

fix(resolver): refresh metadata during dedupe (#17215)

2026-10-22 01:35:04 +02:00

cache-path-command.md

feat: add pnpm cache path and keep the lockfile verification log on store prune (#13893)

2026-08-14 16:04:32 +02:00

calm-caches-scale.md

feat(pnpr): scale shared artifact storage horizontally (#14222)

2026-08-27 15:01:52 +02:00

calm-cats-canonicalize.md

refactor(pnpr): canonicalize ecosystem package names (#14617)

2026-09-06 14:24:15 +02:00

calm-pandas-share.md

feat: integrate the remote side-effects cache with install (#14171)

2026-08-26 15:49:39 +02:00

calm-spiders-smile.md

fix(cli): strip Unicode formatting characters (#13427)

2026-07-27 13:56:01 +02:00

calm-tarballs-compute.md

feat(pnpr): compute missing upstream tarball integrity (#16358)

2026-09-30 12:08:54 +02:00

cargo-custom-registry.md

feat(config): name the ecosystem a registry serves (#15054)

2026-09-18 13:21:54 +02:00

cargo-index-incremental-discovery.md

perf(pnpr): keep the parsed Cargo sparse-index registry between discoveries (#15721)

2026-09-26 01:28:11 +02:00

cargo-lock-weak-dependencies.md

fix(cargo): lock weak feature dependencies (#15004)

2026-09-17 10:59:20 +02:00

cargo-resolution-through-pnpr.md

feat(pnpr): resolve Cargo dependencies through the install accelerator (#14607)

2026-09-06 11:27:21 +02:00

cargo-search.md

feat(pnpr): answer cargo search over hosted crates (#14624)

2026-09-06 23:16:04 +02:00

catalog-strict-range-satisfies.md

fix(deps-installer): satisfy semver ranges under strict catalog mode (#13716)

2026-08-12 01:28:40 +02:00

change-check-command.md

feat(versioning): band package versions via the release engine and add pnpm change check (#13190)

2026-09-05 11:59:37 +02:00

chilly-foxes-brush.md

fix: bound minimumReleaseAge fallbacks for custom dist-tags (#13706)

2026-08-07 14:26:47 +02:00

clean-artifact-orphans.md

fix(pnpr): reclaim orphaned shared artifact blobs (#14232)

2026-08-27 16:55:59 +02:00

cleanup-legacy-homedir-shims.md

docs: add the documentation and comment principles and apply them (#16516)

2026-10-02 20:28:21 +02:00

cli-surface-grammar.md

feat(pnpr): settle Section A production readiness requirements (#17112)

2026-10-19 09:20:12 +02:00

complete-runtime-installation-port.md

feat(pacquet): complete runtime installation parity (#13157)

2026-07-19 22:35:28 +02:00

complete-version-publish-times.md

fix: refetch metadata when publish times are incomplete (#13750)

2026-08-19 11:25:27 +02:00

composed-catalog-and-override-rewrites.md

feat: compose the catalogs and overrides rewrites with other drift (#13804)

2026-08-11 13:48:21 +02:00

composed-fast-updates.md

feat: compose fast lockfile updates on one candidate (#13766)

2026-08-10 16:51:06 +02:00

config-dep-tarball-from-packument.md

fix(env-installer): take a migrated config dependency's tarball URL from the packument (#13767)

2026-08-20 20:25:10 +02:00

config-get-resolved-registries.md

feat(config): show the settings pnpm acts on via config get/list (#14043)

2026-08-21 02:31:34 +02:00

config-schema-naming.md

feat(pnpr): settle Section A production readiness requirements (#17112)

2026-10-19 09:20:12 +02:00

confirm-modules-purge-setting.md

fix(config): classify confirmModulesPurge across pnpm versions (#14127)

2026-08-24 14:10:58 +02:00

cross-ecosystem-publish-transaction.md

feat(pnpr): publish across ecosystems in one transaction (#14608)

2026-09-06 11:48:33 +02:00

curly-shells-resolve.md

fix(config): resolve workspace scriptShell paths (#14479)

2026-09-06 09:36:08 +02:00

custom-fetcher-tarball-callbacks.md

[pacquet] fix(hooks): support native custom-fetcher callbacks (#14026)

2026-08-22 22:52:10 +02:00

decode-registries-in-cache-list.md

feat: add pnpm cache prune and decode cache list-registries output (#15048)

2026-09-19 10:25:58 +02:00

dedupe-check-ignores-deprecations.md

fix(dedupe): ignore deprecation notices in dedupe --check (#17199)

2026-10-21 17:02:59 +02:00

dedupe-injected-deps-unrelated-peer-suffix.md

fix(deps-resolver): dedupe injected deps despite unrelated peer-suffix mismatch (#12800)

2026-07-13 14:24:45 +02:00

deploy-catalog-snapshots.md

fix(cli): support catalogs in deploy (#12931)

2026-07-13 16:21:16 +02:00

deploy-drops-excluded-direct-deps.md

fix(deploy): drop excluded dependency groups from the deployed project (#14069)

2026-08-22 16:37:00 +02:00

deploy-injects-workspace-packages-again.md

fix(deps-resolver): scope the preserve-workspace-link guard to dedupeInjectedDeps (#13755)

2026-08-10 14:46:27 +02:00

deploy-local-tarball-names.md

fix(deploy): preserve local tarball package names (#12864)

2026-07-13 15:13:33 +02:00

deploy-no-optional-symlinks.md

fix(deploy): drop excluded optional edges from the deployed lockfile (#13641)

2026-08-11 14:38:47 +02:00

deploy-singleton-peers.md

fix(deploy): support linked workspace packages with singleton peers (#14384)

2026-09-01 00:48:20 +02:00

deprecation-notices-stay-out-of-the-output.md

fix: stop printing deprecation notices (#15099)

2026-09-19 13:53:05 +02:00

distribution-improvements.md

feat(pnpr): settle Section A production readiness requirements (#17112)

2026-10-19 09:20:12 +02:00

drop-modules-yaml-registries.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

drop-removed-dependencies-without-resolving.md

perf(lockfile): drop removed dependencies without resolving (#13698)

2026-08-07 16:12:42 +02:00

early-rings-mix.md

fix(pack): avoid false positives when checking if the package already has a LICENSE file or not (#13842)

2026-08-20 17:29:36 +02:00

empty-proxy-values-are-unset.md

fix(config): treat empty proxy values as unset, matching the TypeScript CLI (#13597)

2026-08-03 13:36:34 +02:00

engine-no-native-binary-host.md

fix(engine.pm.commands): verify only the pnpm engine that is installed (#14583)

2026-09-06 18:46:13 +02:00

env-lockfile-skips-pnpm-exe-from-v12.md

fix(env-installer): stop pinning the exe package from pnpm v12 (#13599)

2026-08-03 10:23:06 +02:00

env-lockfile-write-matches-main-document.md

fix(lockfile): order env document writes like main document writes (#14388)

2026-09-06 22:08:45 +02:00

epics-monorepo-versioning.md

feat(versioning): add versioning.epics for banded monorepo versioning (#12979)

2026-07-13 22:02:04 +02:00

every-ecosystem-is-prefixed.md

feat(pnpr)!: serve every ecosystem under its own prefix (#17087)

2026-10-18 16:55:55 +02:00

exact-catalog-version-rewrite.md

perf(lockfile): rewrite exact catalog version changes without resolving (#13689)

2026-08-07 11:35:32 +02:00

exe-embed-node-26-12-1.md

fix(exe): embed Node.js 26.12.1 in the standalone builds (#17228)

2026-10-22 18:32:26 +02:00

fail-closed-global-bin-enumeration.md

fix(global): fail closed on incomplete bin ownership (#13985)

2026-09-09 17:44:19 +02:00

fail-fast-on-untrusted-certificate-v12.md

fix(network): fail at once on an untrusted TLS certificate (#15633)

2026-09-25 11:05:08 +02:00

fast-catalog-ranges.md

perf: reuse lockfile for compatible dependency ranges (#13477)

2026-07-29 09:25:13 +02:00

fast-exact-overrides.md

perf: reuse lockfile entries for safe override updates (#13464)

2026-07-28 23:51:22 +02:00

fast-update-single-staging.md

refactor: single staging layer for fast lockfile updates (#13762)

2026-08-10 15:24:20 +02:00

fetch-timeout-measures-inactivity.md

fix(network): make fetch-timeout an inactivity timeout (#14642)

2026-09-07 11:27:17 +02:00

first-release-verbatim.md

feat(releasing): publish a new package's first release at its manifest version (#13207)

2026-07-22 08:57:38 +02:00

fix-bare-workspace-peer-range.md

fix(peers): resolve workspace: shorthand peer ranges to * (#14774)

2026-09-10 15:29:12 +02:00

fix-cyclic-build-hashes.md

fix(graph-hasher): handle build cycles consistently (#14342)

2026-08-31 16:55:13 +02:00

fix-deploy-peer-specifiers.md

fix(deploy): normalize registry dependency specifiers (#14907)

2026-09-15 09:30:23 +02:00

fix-detached-head-publish.md

fix(publish): allow detached head in ci (#15109)

2026-09-19 12:25:28 +02:00

fix-dist-tarball-encoded-slashes.md

fix: preserve percent-encoded slashes in registry tarball URLs (#13541)

2026-08-16 11:17:49 +02:00

fix-dlx-build-approval.md

fix(dlx): prompt to approve ignored dependency builds (#14977)

2026-09-16 21:48:07 +02:00

fix-forced-child-links.md

fix(install): prune obsolete children during forced installs (#15096)

2026-09-19 10:30:33 +02:00

fix-git-resolver-prompt.md

fix(git-resolver): pass GIT_TERMINAL_PROMPT=0 to prevent interactive prompts in git ls-remote (#13471)

2026-07-30 20:13:51 +02:00

fix-global-retained-bin-scan.md

fix(global): skip irrelevant ownership scans (#14980)

2026-09-16 21:58:26 +02:00

fix-init-dev-engines-semver.md

fix(init): pin the exact pnpm version in devEngines and packageManager (#13997)

2026-08-18 23:19:18 +02:00

fix-node-runtime-unofficial-builds-error-handling.md

fix(node-resolver): propagate network errors when reading musl assets (#14854)

2026-09-14 16:24:08 +02:00

fix-peer-dependent-child-dedupe.md

fix(resolving-deps-resolver): deduplicate packages whose child dependencies carry peer suffixes (#14810)

2026-09-14 11:49:24 +02:00

fix-run-script-completion.md

docs: add the documentation and comment principles and apply them (#16516)

2026-10-02 20:28:21 +02:00

fix-sbom-repository-url.md

fix(sbom): normalize the repository URL published in SBOMs (#14795)

2026-09-14 11:35:27 +02:00

fix-setup-output-grammar.md

fix(changeset): name the package that carries the setup output change (#15177)

2026-09-20 21:49:49 +02:00

fix-stale-pnpm-ps1.md

fix(bins): clean up stale pnpm.ps1 shim on Windows (#13937)

2026-08-22 17:33:48 +02:00

fix-version-policy-wildcard-evaluation.md

fix(config): resolve version-policy evaluator and normalizer discrepancy (#13738)

2026-08-17 15:31:42 +02:00

fix-version-read-only-fs.md

fix(cli): report why pnpm --version cannot use the pinned pnpm (#14838)

2026-09-14 13:26:51 +02:00

fluffy-snakes-complain.md

chore(release): don't re-lint the pnpm CLI at publish time (#12987)

2026-07-13 23:05:14 +02:00

fresh-gits-agree.md

fix(lockfile): compare equivalent git specifiers (#13056)

2026-07-17 23:34:05 +02:00

friendly-global-groups.md

feat(update): select global groups interactively (#13428)

2026-08-06 13:38:48 +02:00

frozen-lockfile-package-manager-deps.md

fix(install): enforce --frozen-lockfile for packageManagerDependencies (#14013)

2026-08-22 22:48:18 +02:00

frozen-lockfile-package-manager-repair.md

fix(install): stop --frozen-lockfile rejecting a package-manager pin it agrees with (#14129)

2026-08-24 14:16:43 +02:00

fruity-taxes-shake.md

feat(audit): add audit.ignorePrune to remove stale ignored GHSAs (#11384)

2026-08-25 14:39:20 +02:00

fuzzy-geckos-search.md

feat(pnpr): support browser registry discovery (#14544)

2026-09-05 01:44:46 +02:00

general-artifact-subjects.md

feat(artifacts): generalize shared artifact subjects (#14267)

2026-08-28 12:18:26 +02:00

git-dependency-build-in-every-slot.md

fix(git-fetcher): build a git dependency in every slot it is linked into (#17231)

2026-10-22 22:13:13 +02:00

git-dependency-denied-preparation.md

fix(install): skip explicitly denied git preparation (#15149)

2026-09-20 11:25:24 +02:00

git-fetch-failure-hint.md

fix(git-fetcher): say which dependency a git clone failed for, and how to fix it (#13759)

2026-08-10 15:06:47 +02:00

git-resolution-integrity-parses.md

fix(lockfile,sbom): stop treating a git resolution's integrity as a checksum (#13748)

2026-08-10 15:08:31 +02:00

git-resolve-failure-hint.md

fix(git-resolver): say which git dependency could not be reached, and how (#13794)

2026-08-11 09:25:23 +02:00

git-specifier-keeps-committish.md

fix(git-resolver): keep the committish in the recorded git specifier (#14007)

2026-08-22 14:10:33 +02:00

github-actions-safe-updates.md

refactor: share wildcard matching and harden github actions updates (#14807)

2026-09-10 21:51:04 +02:00

github-actions-self-repository-refs.md

ci: reference same-repository actions and workflows with the self-repository syntax (#14452)

2026-09-02 13:58:57 +02:00

github-actions-server-setting.md

feat: configurable GitHub server for GitHub Actions dependencies (#13230)

2026-07-23 13:38:25 +02:00

global-dirs-from-the-global-config-file.md

fix(config): read globalDir and globalBinDir from the global config file (#14337)

2026-08-31 15:42:18 +02:00

global-update-latest-local-specs.md

fix(global): keep local package specs during update --latest (#13024)

2026-08-17 10:42:02 +02:00

green-elephants-relax.md

fix(update): scope pinned recursive updates by version line (#14053)

2026-08-23 00:55:59 +02:00

group-moves-fast-update.md

feat: fast lockfile update for dependency group moves (#13761)

2026-08-10 14:44:34 +02:00

gvs-build-failure-cleanup.md

test(pacquet): port the global virtual store suites (stage 5) (#13156)

2026-07-19 22:48:18 +02:00

gvs-compat-angular-nuxt-phantom-deps.md

fix: make the Ecosystem E2E workflow pass (#13727)

2026-08-08 13:16:35 +02:00

gvs-esm-node-path-loader.md

feat(gvs): restore NODE_PATH resolution for scripts, ESM included (#13931)

2026-08-16 11:20:12 +02:00

gvs-link-deps-in-slots.md

fix: materialize and hash link: dependencies in virtual-store slots (#13658)

2026-08-05 13:54:47 +02:00

gvs-local-directory-deps.md

fix(deps-graph-hasher): give local directory deps their own global-virtual-store slot (#13383)

2026-07-26 09:25:03 +02:00

harden-web-auth-poll-body.md

feat(network/web-auth): bound the token-poll body and make QR failure non-fatal (#13191)

2026-07-23 07:55:55 +02:00

held-back-warning-release-age.md

fix(npm-resolver): apply the publishedBy cutoff to the held-back-update baseline (#13115)

2026-08-06 15:05:31 +02:00

help-all-flag.md

fix(help): accept --all and -a (#17262)

2026-10-23 02:36:40 +02:00

hoisted-collapsed-peer-variant-edges.md

fix(hoisted): resolve edges declared against a collapsed peer variant (#14034)

2026-08-23 01:12:41 +02:00

hoisted-file-dep-peer-variants-stay-apart.md

fix(hoisted): keep injected peer variants as separate copies (#14126)

2026-08-24 14:10:32 +02:00

hoisted-linker-summary-versions.md

fix(install): report a dependency the hoisted linker stops supporting (#15189)

2026-09-21 12:35:25 +02:00

hoisted-repeat-install-skips-present-patched-packages.md

fix(deps-restorer): leave present patched hoisted packages alone (#17189)

2026-10-21 15:30:26 +02:00

hosted-store-layout.md

feat(pnpr)!: give the hosted store a layout with one place per thing (#17100)

2026-10-18 21:48:58 +02:00

import-lockfile-directory.md

fix(import): honor lockfileDir when replacing lockfiles (#14564)

2026-09-06 20:51:49 +02:00

inert-lockfile-setting-updates.md

perf(lockfile): record inert setting changes without resolving (#13600)

2026-08-06 15:17:38 +02:00

inert-patched-dependencies-updates.md

perf(lockfile): apply patchedDependencies changes without resolving (#13680)

2026-08-06 22:39:19 +02:00

init-pins-latest-pnpm.md

feat(init): pin the latest pnpm version, not the running one (#14167)

2026-08-25 18:25:07 +02:00

injected-syncer-stale-bins.md

fix(injected-deps-syncer): unlink a bin the script dropped (#13848)

2026-08-12 08:54:42 +02:00

install-add-option-before-command.md

fix(add): accept the lowercase save aliases (#17270)

2026-10-23 11:07:13 +02:00

interactive-update-blank-workspace-name.md

fix(update): treat a whitespace-only project name as no name (#13354)

2026-07-25 16:10:56 +02:00

interactive-update-github-actions-opt-in.md

fix: make GitHub Actions checks opt-in for outdated and update (#13259)

2026-07-24 01:06:35 +02:00

interactive-update-wide-character-columns.md

fix(update-interactive): measure the choice table in terminal columns (#13415)

2026-07-27 11:39:15 +02:00

journaled-publish-for-every-surface.md

feat(pnpr): journal the Cargo and Python publish transactions (#14606)

2026-09-06 11:08:37 +02:00

keep-cas-blobs-on-verify-failure.md

fix(store): keep CAS blobs on verification failure instead of unlinking them (#14526)

2026-09-04 08:53:48 +02:00

keep-copy-import-for-built-packages.md

fix(deps-restorer): keep an explicit copy import for built packages (#17196)

2026-10-21 15:34:22 +02:00

keep-pnpm-config-on-pack.md

fix(exportable-manifest): keep pnpm.config in packed and published manifests (#17213)

2026-10-22 01:34:12 +02:00

known-registries-single-owner.md

refactor(registries): give the known-registry set one owner (#13591)

2026-08-02 19:40:34 +02:00

ledger-empty-intents-roundtrip.md

fix(releasing): round-trip ledger entries with no consumed intents (#13125)

2026-07-18 14:16:41 +02:00

ledger.yaml

chore(release): 11.28.8 (#17256)

2026-10-22 23:45:10 +02:00

legacy-deploy-verifies-source-lockfile.md

fix(deploy): verify the source lockfile on legacy deploy (#17211)

2026-10-22 19:09:59 +02:00

libsql-connection-pool.md

fix(pnpr): run libsql auth operations on a pool of connections (#17237)

2026-10-22 22:42:11 +02:00

libsql-remote-unique-violation.md

fix(pnpr): recognise a unique violation reported by Turso (#17223)

2026-10-22 17:36:24 +02:00

locked-version-reuse.md

fix: reuse the version resolution would dedupe onto for a changed range (#13779)

2026-08-10 21:51:40 +02:00

lockfile-false-honors-devengines-download.md

fix(cli): honor lockfile:false with onFail download (#14753)

2026-09-10 13:29:38 +02:00

login-non-interactive-web-auth.md

feat(login): support web login without an interactive terminal (#13479)

2026-07-29 12:12:10 +02:00

long-modules-yaml-keys.md

fix(modules-yaml): read manifests with long dependency paths (#13885)

2026-08-21 14:59:19 +02:00

lowest-direct-under-minimum-release-age.md

fix(resolver): apply resolutionMode under a minimum release age (#13831)

2026-08-11 17:14:24 +02:00

macos-ssl-policy-crash.md

fix(network): treat a refused SSL policy as an unavailable platform verifier (#15592)

2026-09-25 01:39:33 +02:00

merged-branch-lockfiles-drop-removed-deps.md

fix(lockfile): drop removed dependencies when merging branch lockfiles (#13967)

2026-08-24 15:49:36 +02:00

meta-only-optional-peer-hoist.md

feat(peers): hoist optional peers implied by peerDependenciesMeta (#13120)

2026-07-18 13:22:01 +02:00

minimum-release-age-exclude-prune.md

feat: add minimumReleaseAgeExcludePrune, rename cleanupUnusedCatalogs to catalogPrune (#13653)

2026-08-11 09:45:17 +02:00

minimum-release-age-latest-bound.md

fix(resolver): bound minimumReleaseAge latest fallback (#13044)

2026-07-30 13:26:31 +02:00

named-registries-lockfile-format.md

feat(lockfile): key named-registry packages by their registry (#13528)

2026-08-02 16:52:28 +02:00

new-importer-fast-update.md

perf: absorb a new workspace project into the fast lockfile update (#13803)

2026-08-11 11:12:05 +02:00

no-cataloging-of-local-paths.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

no-core-dump-on-reraised-signal.md

fix(exec): do not dump core for pnpm when re-raising a child signal (#17214)

2026-10-22 00:23:36 +02:00

normalize-empty-bundled-dependencies.md

fix(lockfile): omit empty bundled dependencies (#13148)

2026-07-30 12:08:31 +02:00

npm-ecosystem-prefix.md

chore(release): pacquet 12.4.1, pnpr 0.1.0-alpha.11 (#14802)

2026-09-10 18:27:12 +02:00

npm-surface-explicit-routes.md

docs(pnpr): record the registry-prefix tilde in the release note (#14615)

2026-09-06 13:07:32 +02:00

npmrc-registry-beats-auth-file.md

fix(config): let an .npmrc registry outrank the global _auth file's routes (#14636)

2026-09-07 02:41:18 +02:00

oci-registry-operations.md

feat(pnpr): add oci registry maintenance (#14644)

2026-09-07 07:22:34 +02:00

offline-lockfile-verification-cache.md

fix(resolver): honor offline mode during lockfile verification (#13671)

2026-08-07 15:32:08 +02:00

optional-peer-hoist-respects-workspace-root.md

fix(resolving-deps-resolver): apply overrides and the workspace root's pin to hoisted peers (#13369)

2026-07-25 20:37:28 +02:00

optional-peer-hoist-skips-a-rejected-root-pin.md

fix(resolver): ignore a workspace root pin an optional peer's range rejects (#13869)

2026-08-31 21:27:31 +02:00

orange-rats-jam.md

perf(resolver): reuse stable cached range metadata (#13980)

2026-08-20 21:24:56 +02:00

override-range-fast-update.md

feat: absorb an override that names a range, not just an exact version (#13792)

2026-08-11 01:28:47 +02:00

overrides-bare-local-paths.md

fix(overrides): measure a bare path in an override from the workspace (#15134)

2026-09-20 00:07:16 +02:00

overrides-reach-auto-installed-peers.md

fix(resolving-deps-resolver): apply overrides and the workspace root's pin to hoisted peers (#13369)

2026-07-25 20:37:28 +02:00

pacquet-binstub-symlink-resolution.md

fix(pacquet): resolve symlinks in POSIX shell shims before computing … (#13411)

2026-08-07 13:48:51 +02:00

pacquet-clap-help-markdown.md

docs(rust/cli): clean up --help texts (#13008)

2026-07-15 11:36:34 +02:00

pacquet-install-filters.md

fix(pacquet): honor workspace install filters (#13030)

2026-07-18 13:06:37 +02:00

parent-scoped-overrides.md

feat: absorb a parent-scoped override into the fast lockfile update (#13797)

2026-08-11 02:25:20 +02:00

pass-a-replaced-signal-handler-its-details.md

fix(fs): pass a replaced signal handler the details it expects (#17220)

2026-10-22 22:10:20 +02:00

patched-install-scripts-need-approval.md

fix(patching): put patch-added build work through build approval (#14654)

2026-09-07 15:58:36 +02:00

path-aware-registry-cache-key.md

feat: add pnpm cache prune and decode cache list-registries output (#15048)

2026-09-19 10:25:58 +02:00

peer-hoist-skips-project-relative-root-deps.md

fix(resolving-deps-resolver): hoist a local root dep by its version, not its path (#13387)

2026-07-26 03:06:01 +02:00

peer-scheme-specifiers.md

feat(peers): accept scheme-carrying specifiers in peerDependencies (#13110)

2026-07-17 23:47:34 +02:00

peer-suffix-version-precision.md

fix: check peer suffixes against the version a fast update dropped (#13789)

2026-08-11 00:48:19 +02:00

per-registry-time-field.md

feat(config): declare the time field per registry (#13952)

2026-08-17 11:55:56 +02:00

perf-resolver-caches.md

perf(resolver): avoid repeated packument filtering and semver parsing during version picking (#13504)

2026-08-01 14:09:02 +02:00

persisted-document-format-versions.md

feat(pnpr): settle Section A production readiness requirements (#17112)

2026-10-19 09:20:12 +02:00

pipeline-runs-in-the-hosted-store.md

feat(pnpr): keep pipeline run records with the hosted packages (#14668)

2026-09-08 08:19:11 +02:00

pkg-property-paths-accept-hyphens.md

fix(pkg): accept hyphens in dot-notation property paths (#14037)

2026-08-23 00:08:05 +02:00

pm-bootstrap-nonderivable-tarball-registries.md

fix(self-update): support registries without canonical tarball URLs or signature metadata (#13728)

2026-08-08 20:42:37 +02:00

pm-signature-fallback-registry.md

fix(self-update): support registries without canonical tarball URLs or signature metadata (#13728)

2026-08-08 20:42:37 +02:00

pnp-loader-virtual-store-only.md

fix(package-manager): don't write the PnP loader for a virtual-store-only install (#13636)

2026-08-04 13:12:48 +02:00

pnpm-doctor-command.md

ci(release): gate releases on a publishable manifest, a real upgrade, and pnpm doctor (#13072)

2026-07-17 09:54:10 +02:00

pnpm-setup-github-actions.md

fix(setup): persist GitHub Actions env files (#12841)

2026-07-24 02:42:40 +02:00

pnpr-abort-invalid-blob-streams.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-access-log-fields-once.md

fix(pnpr): emit the access record outside the request span (#17267)

2026-10-23 09:45:34 +02:00

pnpr-add-missing-peer-types.md

feat: add the addMissingPeerTypes setting (#16810)

2026-10-10 12:56:27 +02:00

pnpr-admin-audit-log.md

feat(pnpr): admin audit log for user, rule, team, scim, and unpublish operations (#16960)

2026-10-16 00:03:58 +02:00

pnpr-admin-rule-management.md

feat(pnpr): let admins change package rules through an admin API (#16732)

2026-10-08 14:20:58 +02:00

pnpr-admin-team-management.md

feat(pnpr): let admins manage teams through the npm team API (#16725)

2026-10-08 11:59:11 +02:00

pnpr-admin-user-management.md

feat(pnpr): let admins manage accounts through an admin API (#16729)

2026-10-08 13:30:41 +02:00

pnpr-artifact-blob-upload.md

feat: share build output between machines through pnpr or a Turborepo remote cache (#16812)

2026-10-10 13:51:38 +02:00

pnpr-artifact-orgs.md

feat: share build output between machines through pnpr or a Turborepo remote cache (#16812)

2026-10-10 13:51:38 +02:00

pnpr-audit-fixes.md

fix(pnpr): address audit security, immutability, and storage bugs (#16927)

2026-10-14 15:20:27 +02:00

pnpr-auth-schema.md

feat(pnpr-auth): add database schema migrations, token scopes and kind, and mysql case sensitivity (#17039)

2026-10-17 13:36:45 +00:00

pnpr-browse-hosted-packages.md

feat(pnpr): browse hosted packages and fix concurrent registration (#14696)

2026-09-08 18:46:04 +02:00

pnpr-cache-eviction.md

feat(pnpr): cache eviction, lru size cap, and orphan namespace pruning (#16946)

2026-10-15 12:13:18 +02:00

pnpr-cargo-and-pypi-registries.md

feat(pnpr): serve Cargo and Python registries beside npm (#14598)

2026-09-06 09:25:23 +02:00

pnpr-catalog-overrides.md

fix: resolve catalog references when installing via a pnpr server (#13233)

2026-07-23 16:04:43 +02:00

pnpr-config-in-env.md

feat(pnpr): allow configuration through environment variables (#14434)

2026-09-05 10:57:38 +02:00

pnpr-container-shutdown-readiness.md

feat(pnpr): support SIGTERM container shutdown and readiness probes (#16934)

2026-10-14 19:35:46 +02:00

pnpr-default-config.md

feat(pnpr): provide minimal production default configuration and separate test fixtures (#17027)

2026-10-17 13:23:18 +02:00

pnpr-document-write-conflict-name.md

refactor(pnpr): name storage after documents and blobs (#14609)

2026-09-06 12:42:44 +02:00

pnpr-forwards-peer-dependencies.md

fix(pnpr): install the peer dependencies of a peer-only project (#15577)

2026-09-25 01:05:11 +02:00

pnpr-hoist-readme.md

fix(publish): send README to the registry as metadata (#12968)

2026-07-13 18:27:50 +02:00

pnpr-hosted-original-digests.md

feat(pnpr): serve hosted originals by digest (#14183)

2026-08-26 15:28:20 +02:00

pnpr-index-rebuild-plain-fsync.md

perf(pnpr): flush index markers with a plain fsync on Apple platforms (#15367)

2026-09-23 18:32:09 +02:00

pnpr-jsr-builtin-route.md

fix(config): route @jsr packages through the built-in JSR registry (#14653)

2026-09-07 15:59:54 +02:00

pnpr-last-modified.md

perf(pacquet): overlap and shrink cold-install verification, linking, and metadata (#13934)

2026-08-16 12:18:17 +02:00

pnpr-libsql-backend-connects.md

fix(pnpr): connect the libsql backend over TLS (#16835)

2026-10-10 22:02:25 +02:00

pnpr-libsql-concurrent-registration.md

feat(pnpr): browse hosted packages and fix concurrent registration (#14696)

2026-09-08 18:46:04 +02:00

pnpr-metrics-and-request-ids.md

feat(pnpr): metrics, request IDs, and enriched access logging (#16944)

2026-10-15 02:00:55 +00:00

pnpr-npm-access-grant.md

feat(pnpr): map npm access grant and revoke onto rules (#16740)

2026-10-08 17:52:48 +02:00

pnpr-npm-audit-endpoints.md

feat(pnpr): support npm audit endpoints and osv bulk advisories (#16950)

2026-10-15 11:42:23 +00:00

pnpr-oci-batch-publish.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-blob-deletion.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-protocol-surface.md

feat(pnpr): complete oci protocol surface (#14647)

2026-09-07 09:27:57 +02:00

pnpr-oci-pull-through.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-scoped-tokens.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oci-size-limits.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

pnpr-oidc-group-teams.md

feat(pnpr): grant registry teams from OIDC groups (#16735)

2026-10-08 15:13:05 +02:00

pnpr-oidc.md

feat(pnpr): add oidc and keyless publishing (#14666)

2026-09-07 20:45:28 +02:00

pnpr-optional-env-var.md

fix(config): support npm's optional ${VAR?} placeholder in .npmrc (#15565)

2026-09-25 03:15:17 +02:00

pnpr-package-ownership.md

feat(pnpr): implement package ownership, maintainer model, and tombstones (#17060)

2026-10-18 11:17:26 +02:00

pnpr-packument-caching-headers.md

feat(pnpr): add packument caching headers and conditional request support (#16962)

2026-10-16 11:38:36 +02:00

pnpr-pipeline-runs.md

feat: add pipelines, run records, and Cargo build caching (#14233)

2026-09-07 01:02:39 +02:00

pnpr-provenance.md

feat(pnpr): support npm publish --provenance and attestation endpoints (#16956)

2026-10-15 20:00:20 +02:00

pnpr-quay-layer-cdn.md

fix(pnpr): allow Quay's CDN hosts for OCI layer redirects (#16550)

2026-10-03 19:21:42 +02:00

pnpr-rate-limits-and-coalescing.md

feat(pnpr): rate limits, request timeouts, and coalescing (#16943)

2026-10-15 02:29:21 +02:00

pnpr-redaction-keeps-query.md

style: adopt perfectionist's new size and shape rules (#14730)

2026-09-09 13:15:59 +02:00

pnpr-refreshes-revisions.md

feat: refresh registry revisions through pnpr (#14180)

2026-08-26 12:29:51 +02:00

pnpr-registry-declarations.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

pnpr-registry-directory.md

feat(pnpr): scope registry identity by ecosystem and expose directory (#14700)

2026-09-08 23:14:15 +02:00

pnpr-reject-url-delimiters-in-package-names.md

refactor(pnpr): name storage after documents and blobs (#14609)

2026-09-06 12:42:44 +02:00

pnpr-requires-build-metadata.md

feat: surface tarball-verified requiresBuild from pnpr and use it during install (#17164)

2026-10-20 21:42:54 +02:00

pnpr-reserved-usernames.md

fix(pnpr): reserve SCIM-provisioned usernames (#17080)

2026-10-18 13:09:12 +02:00

pnpr-resolution-mode.md

fix(pnpr): resolve in the client's resolutionMode (#13958)

2026-08-17 13:31:24 +02:00

pnpr-resolve-settings.md

fix(pnpr): forward client resolver settings (#13730)

2026-08-17 10:45:33 +02:00

pnpr-resolver-connect-guard.md

fix(pnpr): guard resolver connections against internal addresses (#15708)

2026-09-25 22:58:04 +02:00

pnpr-rules-if-match.md

feat(pnpr): make rule changes conditional on the version they read (#16739)

2026-10-08 16:45:22 +02:00

pnpr-scim-deprovisioning.md

feat(pnpr): deprovision accounts through SCIM (#16742)

2026-10-08 19:08:16 +02:00

pnpr-tar-registries.md

feat: install from tar registries with zstd content coding (#17054)

2026-10-18 01:25:41 +02:00

pnpr-token-creation-and-expiry.md

feat(pnpr): support token creation, expiry, and read-only audit access (#16954)

2026-10-15 17:26:18 +02:00

pnpr-tokens-need-an-account.md

fix(pnpr): honor a token only while its account exists (#16738)

2026-10-08 17:37:35 +02:00

pnpr-tooling.md

feat(pnpr): add maintenance tooling and verdaccio htpasswd support (#17002)

2026-10-17 01:24:35 +02:00

pnpr-trusted-proxies.md

feat(pnpr): support trusted proxies for client IP resolution (#16939)

2026-10-15 00:46:10 +02:00

pnpr-turso-embedded-replica.md

fix(pnpr): follow a Turso Cloud primary from the embedded replica (#17225)

2026-10-22 19:19:52 +02:00

pnpr-ui-sign-in.md

feat(pnpr): let the web UI sign in with OIDC (#16774)

2026-10-09 11:48:10 +02:00

pnpr-upstream-search-budget.md

fix(pnpr): truncate upstream search at the fetch budget instead of failing with 400 (#14874)

2026-09-14 02:19:05 +02:00

pnpr-web-login.md

feat(pnpr): support login web flow for SSO (#16969)

2026-10-16 21:17:18 +02:00

pnpr-web-ui.md

feat(pnpr): serve the web UI at /-/ui/ (#16769)

2026-10-09 00:56:04 +02:00

pnpr-workspace-identity.md

fix(pacquet): honor workspace install filters (#13030)

2026-07-18 13:06:37 +02:00

pnpr-workspace-publish-directory.md

fix(pnpr): link workspace projects at their publish directory (#15841)

2026-09-27 01:58:25 +02:00

pnpr-zstd-upstream-responses.md

feat: accept zstd-compressed responses and serve them from pnpr (#16585)

2026-10-15 21:35:31 +02:00

policy-aware-install-summary-latest.md

fix(install-summary): suppress '(X is available)' when latest is held back by minimumReleaseAge (#13214)

2026-07-30 20:00:23 +02:00

precalculated-bins-pnpr.md

perf(install): precalculate package bins and shebang runtimes (#17186)

2026-10-21 11:42:03 +02:00

preserve-catalog-yaml-anchors.md

fix(config): preserve scalar YAML anchors when editing workspace manifests (#15124)

2026-09-19 13:57:58 +00:00

preserve-equals-pin-operator.md

fix(resolver): keep the explicit = operator when updating an exact pin (#13184)

2026-07-30 13:37:36 +02:00

preserve-unchanged-package-metadata.md

fix(lockfile): keep a recorded deprecation when an unchanged resolution is rebuilt (#13878)

2026-08-12 21:52:54 +02:00

preserve-workspace-link-on-partial-update.md

fix(deps-resolver): preserve workspace link: on re-resolution (fixes pnpm/pnpm#10433) (#13112)

2026-07-30 12:34:52 +02:00

prod-install-skips-dev-downloads.md

fix(install): skip excluded registry dependency downloads (#15150)

2026-09-20 14:52:10 +02:00

production-flag-alias.md

fix(cli): accept --production, and reproduce a prod install as --prod (#14148)

2026-08-25 11:27:03 +02:00

protect-workspace-root-modules-purge.md

refactor(package-manager): decompose install modules (#13640)

2026-08-04 16:41:38 +02:00

protocol-versioning-pnpm-client.md

feat(pnpr): settle Section A production readiness requirements (#17112)

2026-10-19 09:20:12 +02:00

prune-allow-builds-on-remove.md

fix: prune undecided allowBuilds entries on package removal (#13917)

2026-08-21 15:01:51 +02:00

publish-readme-metadata.md

fix(publish): send README to the registry as metadata (#12968)

2026-07-13 18:27:50 +02:00

publish-reports-what-it-did-not-record.md

feat(pnpr): publish across ecosystems in one transaction (#14608)

2026-09-06 11:48:33 +02:00

python-resolution-through-pnpr.md

feat(pnpr): resolve Python projects through the install accelerator (#14613)

2026-09-06 13:04:53 +02:00

quick-oranges-ignore-optionals.md

perf: prune newly ignored optional dependencies without resolution (#13482)

2026-08-06 12:40:27 +02:00

quick-signature-fallback.md

fix(cli): skip fallback signature retries (#14519)

2026-09-04 00:20:59 +02:00

quick-wolves-publish.md

feat(cli): implement flagged pacquet parity gaps (#14106)

2026-08-23 16:39:23 +02:00

quiet-global-update.md

perf: avoid reinstalling unchanged global packages (#15029)

2026-09-19 01:30:30 +02:00

quiet-mature-versions.md

fix(install): deduplicate minimum release age approval output (#15090)

2026-09-19 12:10:03 +02:00

quiet-pigs-backfill.md

perf: optimize pnpm install metadata through pnpr (#17169)

2026-10-21 07:13:27 +02:00

quiet-pumas-configure.md

fix(cli): skip project checks for global config (#14468)

2026-09-02 16:36:09 +02:00

read-the-umask-without-writing-it.md

fix(fs/linux): read the umask without writing it (#17219)

2026-10-22 16:05:05 +02:00

recover-metadata-cache-race.md

fix(resolver): recover after metadata cache loss (#13014)

2026-07-17 22:05:03 +02:00

recursive-list-json.md

fix(list): combine recursive JSON results (#15012)

2026-09-19 01:19:39 +02:00

recursive-run-keeps-failures.md

fix(cli): close the six pnpm-12-on-n8n defects (#13375)

2026-07-25 20:34:26 +02:00

redact-tarball-error-urls.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

refresh-registry-revisions.md

chore: drop v11 targets from the registry revisions changeset (#17101)

2026-10-18 19:51:30 +02:00

refuse-broken-release-on-version-switch.md

fix: refuse a broken pnpm release when switching versions, not only on self-update (#13082)

2026-07-16 21:29:48 +02:00

registries-by-scope-by-prefix.md

docs(changeset): tell updateConfig hook authors about the registry field rename (#15641)

2026-09-27 10:22:56 +02:00

registries-default-scope-warning.md

fix(cli): accept a registries entry routed through the default scope (#17226)

2026-10-22 19:16:49 +02:00

registry-server-type.md

feat(config): declare each registry once in the registries setting (#13942)

2026-08-17 01:28:21 +02:00

relay-to-script-group.md

fix: signal the script's process group when pnpm has no terminal (#15119)

2026-09-19 14:48:10 +00:00

release-age-etag-upgrade.md

fix(resolving): omit abbreviated etag when upgrading release age metadata (#14931)

2026-09-19 09:54:07 +02:00

relink-publish-directories.md

fix(lockfile): track publish link directory behavior (#14517)

2026-09-03 23:15:02 +02:00

remove-command-fast-path.md

perf: let pnpm remove skip resolution (#13712)

2026-08-10 12:34:35 +02:00

remove-trust-lockfile-flags.md

feat(cli): accept --trust-lockfile and the --trust-policy flags on remove and update (#14432)

2026-09-02 17:31:21 +02:00

repair-pacquet-lockfiles.md

fix(cli): validate filtered pnpr repairs (#14260)

2026-08-28 01:17:54 +02:00

repair-shared-slot-in-place.md

fix(deps-restorer): repair a shared virtual-store slot in place (#13810)

2026-08-11 21:16:47 +02:00

repeat-install-coarse-mtime.md

fix: honor same-second edits on whole-second-mtime filesystems (#12975)

2026-07-13 18:32:16 +02:00

repeat-install-deduped-siblings.md

fix(install): keep the repeat-install fast path for deduped siblings and large lockfiles (#15073)

2026-09-18 21:27:37 +02:00

report-store-integrity-checks.md

feat: report when store verification re-hashes files (#13961)

2026-08-17 15:23:28 +02:00

required-scripts-recursive-run.md

fix(run): honor requiredScripts in recursive runs (#17257)

2026-10-23 02:18:06 +02:00

retry-delete-pending-inspection.md

fix(install): accept a slot another installer finished repairing (#15174)

2026-09-20 21:10:55 +02:00

retry-invalid-304.md

fix(resolver): recover from unsolicited 304 responses (#12888)

2026-07-13 15:56:52 +02:00

revisions-name-their-tar.md

feat: pin tar hashes with lockfile.integrityTarget and address revisions by tar digest (#17092)

2026-10-18 17:36:30 +02:00

root-bin-stderr-clean-path.md

fix(cli): keep root/bin/prefix -g stdout a clean path; support root -g and prefix -g in pnpm 12 (#13688)

2026-08-07 15:52:12 +02:00

run-regex-and-sequential.md

feat(exec): restore --sequential flag and sort regex-matched scripts lexicographically (#13074)

2026-07-17 13:20:26 +02:00

run-the-dev-preinstall-hook.md

fix(package-manager): run the pnpm:devPreinstall hook (#13403)

2026-07-27 00:21:34 +02:00

runtime-false-setting.md

fix(config): honor the runtime setting (#17261)

2026-10-23 11:10:27 +02:00

runtime-matches-the-host-architecture.md

fix(resolver): pick the platform variant matching the host (#13902)

2026-08-20 21:23:13 +02:00

runtime-shasums-cache.md

perf(resolver): cache Node.js release metadata and skip the index for exact runtime pins (#13901)

2026-08-14 11:58:24 +02:00

rust-cli-honors-inert-settings.md

feat(config): honor the settings the Rust CLI only recognized (#14109)

2026-08-23 16:39:49 +02:00

rust-compilation-cache.md

feat(pnpr): share cargo compilation caches (#14620)

2026-09-06 15:35:06 +02:00

safe-artifact-quota.md

fix(pnpr): retain quota after ambiguous artifact writes (#14228)

2026-08-27 15:29:54 +02:00

safe-broken-lockfile-errors.md

fix(lockfile): hide content from parse errors (#13101)

2026-07-17 15:14:43 +02:00

safe-pnpr-project-transforms.md

fix: preserve patches and package extensions with pnpr (#14181)

2026-08-26 12:23:10 +02:00

save-prefix-equals.md

fix(resolver): keep the explicit = operator when updating an exact pin (#13184)

2026-07-30 13:37:36 +02:00

sbom-blank-authors.md

fix(sbom): omit empty package authors (#14708)

2026-09-10 12:09:01 +02:00

sbom-exclude-uninstallable-platform-packages.md

fix(sbom): exclude platform-incompatible optional packages (#13710)

2026-08-11 14:34:42 +02:00

sbom-license-expressions.md

fix(sbom): classify CycloneDX licenses (#14892)

2026-09-20 19:45:12 +02:00

sbom-missing-importers.md

fix(sbom): honor --filter-prod and the universal --fail-if-no-match (#14072)

2026-08-22 17:12:27 +02:00

sbom-spdx-timestamp-seconds.md

fix(sbom): truncate SPDX creationInfo.created to whole seconds (#14688)

2026-09-10 11:14:38 +02:00

secret-hardening-and-ecosystem-validation.md

feat(pnpr): harden secrets, derive subkeys, and validate ecosystems (#17126)

2026-10-19 15:19:33 +02:00

secure-catalogs-route.md

fix(pnpr): validate and key forwarded catalogs (#13632)

2026-08-10 22:02:58 +02:00

self-update-bumps-simple-ranges.md

fix(self-update): bump caret/tilde devEngines.packageManager ranges (#13949)

2026-08-21 15:01:01 +02:00

self-update-release-age.md

fix(self-update): stop the project config from steering the pnpm download (#12813)

2026-07-25 01:34:27 +02:00

self-update-tag-no-downgrade.md

fix(self-update): do not downgrade when a dist-tag points at the running version (#13889)

2026-08-20 21:19:54 +02:00

self-update-verify-installed-pnpm.md

fix(self-update): discard an installed pnpm that cannot run (#13076)

2026-07-16 14:38:22 +02:00

serve-container-images.md

feat(pnpr): finish oci registry follow-ups (#14652)

2026-09-07 11:51:31 +02:00

setup-writes-module-type.md

fix(setup): declare the module type in the manifest written for a standalone executable (#13732)

2026-08-09 15:43:31 +02:00

seven-pens-smile.md

fix(update): preserve prerelease range operators (#13900)

2026-08-21 02:10:07 +02:00

shell-emulator-literal-arguments.md

fix(executor): preserve emulated script arguments (#14576)

2026-09-06 18:47:24 +02:00

shim-helpers-bypass-caller-path.md

fix(cmd-shim): take the shim header's helpers off the caller's PATH (#14845)

2026-09-14 00:51:20 +02:00

shim-printf-path-normalization.md

fix(cmd-shim): use printf instead of echo for POSIX path normalization (#14878)

2026-09-16 01:52:59 +02:00

short-windows-permission-retries.md

fix(fs): shorten windows permission-error retries (#14776)

2026-09-10 14:15:08 +02:00

skip-registry-for-preferred-workspace-packages.md

perf(npm-resolver): skip the registry when a preferred workspace package must win (#13717)

2026-08-17 10:44:26 +02:00

skip-unread-package-map.md

perf(install): speed up warm installs under the global virtual store (#14511)

2026-09-10 14:20:11 +02:00

skip-unreadable-python-requirements.md

fix(python): let a release with unreadable requirements give way (#14948)

2026-09-16 11:36:40 +02:00

skip-unusable-python-index-files.md

fix(python): leave out an index file pnpm cannot read (#14946)

2026-09-16 10:32:39 +02:00

slow-fetch-warnings.md

feat(pacquet): add slow fetch warnings (#14078)

2026-08-22 21:15:51 +02:00

sort-packed-tar-entries.md

fix(pack): write packed tarball entries in npm-packlist compression order (#14832)

2026-09-16 09:25:32 +02:00

spicy-hoops-brake.md

fix: absorb an override change under an unchanged catalog: override (#13979)

2026-08-17 23:24:23 +02:00

ssh-git-url-without-user-info.md

docs: add the documentation and comment principles and apply them (#16516)

2026-10-02 20:28:21 +02:00

stage-approve-interactive.md

fix(stage): derive approval order from tarballs (#14524)

2026-09-04 08:14:53 +02:00

standalone-projects-outside-the-workspace.md

fix(workspace): run a project the workspace leaves out on its own (#15125)

2026-09-19 20:56:57 +02:00

stop-retrying-rejected-archive-entry-paths.md

fix(tarball): do not retry rejected archive entry paths (#17212)

2026-10-22 00:02:40 +02:00

store-prune-removes-metadata-cache.md

fix(store): remove the metadata cache on store prune (#17253)

2026-10-23 02:38:38 +02:00

support-env-file-option.md

feat(pacquet): load dotenv files named by --env-file (#16570)

2026-10-22 16:02:29 +02:00

system-cygpath-wslpath-shims.md

fix(cmd-shim): try system cygpath and wslpath before caller path (#14963)

2026-09-19 02:03:25 +02:00

tidy-deploy-graphs.md

fix(deploy): prune unreachable package graph (#12935)

2026-07-13 15:55:25 +02:00

tidy-pandas-pack.md

fix(setup): preserve bundled node-gyp (#14401)

2026-09-01 12:51:43 +02:00

tidy-pianos-tap.md

fix: stop pointing users at Corepack for pnpm updates (#14115)

2026-08-24 16:45:42 +02:00

tidy-pugs-smile.md

fix(update): reject a version a transitive-only selector cannot record (#14090)

2026-08-23 12:42:26 +02:00

tidy-ravens-revise.md

feat: support integrity-addressed registry revisions (#13475)

2026-08-25 22:13:27 +02:00

token-last-used-off-request-path.md

fix(pnpr): record a token's last use off the request path, at most once a minute (#17266)

2026-10-23 09:45:07 +02:00

tolerate-a-foreign-package-manager-entry.md

fix(install): accept a package-manager entry pnpm does not install from (#14132)

2026-08-24 15:43:28 +02:00

tolerate-unreadable-requires-python.md

fix(python): read an unparsable Requires-Python as none at all (#14920)

2026-09-15 11:42:32 +02:00

tough-flies-approve.md

fix: enforce git prepare approvals on store reuse (#14160)

2026-08-25 18:15:59 +02:00

trust-check-honors-ignore-missing-time.md

fix: honor minimumReleaseAgeIgnoreMissingTime in the trust check (#14019)

2026-08-22 22:19:18 +02:00

trust-policy-exclude-prune.md

feat: add trustPolicyExcludePrune (#14068)

2026-09-08 10:54:56 +02:00

unpublish-otp-challenge.md

chore(release): pacquet 12.3.0 (#14475)

2026-09-02 18:00:57 +02:00

unsafe-perm-flag.md

fix(pacquet): accept the boolean settings as bare flags on every command (#14541)

2026-09-04 15:42:55 +02:00

unused-patch-after-removal.md

fix: decline a fast lockfile update that leaves a patch unused (#13828)

2026-08-12 01:01:31 +02:00

update-changeset-flag.md

feat(update): generate changesets for dependency updates (#13195)

2026-07-21 23:48:46 +02:00

update-github-actions.md

feat(update): update GitHub Actions dependencies (#13198)

2026-07-22 00:41:30 +02:00

update-no-save-respects-kept-range.md

fix(deps-installer): skip no-save updates to versions the kept range excludes (#13527)

2026-08-06 11:31:24 +02:00

update-preserve-exact-pins.md

fix(resolver): preserve exact version pins during update (#13027)

2026-07-17 19:32:16 +02:00

update-settings-section.md

docs: add the documentation and comment principles and apply them (#16516)

2026-10-02 20:28:21 +02:00

update-versioned-selector-stays-targeted.md

fix(update): key pacquet's update targets by the resolved package name (#14040)

2026-08-21 11:19:33 +02:00

version-dry-run-writes-nothing.md

fix(version): make --dry-run leave the manifests untouched (#13954)

2026-08-23 00:20:02 +02:00

version-json-empty-output.md

fix: make pnpm version -r --json emit JSON when there are no pending changes (#13222)

2026-08-06 11:48:51 +02:00

violet-teachers-sort.md

perf(deps): sort dependency graphs in linear time (#14152)

2026-08-25 13:51:56 +02:00

virtual-store-type.md

feat: name the virtual store's type, keeping the boolean spelling (#13945)

2026-08-17 15:22:57 +02:00

warn-ignored-import-package-hook.md

fix(hooks): warn when a pnpmfile defines importPackage (#17263)

2026-10-23 02:37:49 +02:00

web-auth-qr-code-fallback.md

feat(network/web-auth): bound the token-poll body and make QR failure non-fatal (#13191)

2026-07-23 07:55:55 +02:00

workspace-pack-gitignore.md

fix: respect workspace root ignores when packing (#12878)

2026-07-13 16:32:21 +02:00

workspace-protocol-catalogs.md

feat(catalogs): support workspace protocol catalog entries (#14332)

2026-08-30 01:54:13 +02:00