Zoltan Kochan 06a1ac32b9 fix(package-manager): validate pnpmfile checksum (#13418) ...

Compare the pnpmfile loaded for an install with the checksum recorded in the lockfile before using frozen resolution. Evaluate the module only when no checksum is recorded, which distinguishes a pnpmfile that exports hooks from one that does not without adding Node startup to the common matching-checksum case.

Keep optimistic repeat installs worker-free because workspace-state validation has already established that the pnpmfile is unchanged. Skip the comparison in pnpr because the resolver service has no access to the client-local pnpmfile.

Fixes pnpm/pnpm#13385.

2026-07-27 12:45:19 +02:00

..

pnpr

fix(package-manager): validate pnpmfile checksum (#13418)

2026-07-27 12:45:19 +02:00

pnpr-fixtures

feat(pacquet): complete git dependency parity (#13169)

2026-07-20 14:27:17 +02:00