Zum Inhalt springen
verdict:

pnpm 10.33.4

digest

Release Notes

note: die Zusammenfassung und die Release Notes sind auf Englisch

note: keine Zusammenfassung für dieses digest-Release

digest-Releases werden ohne Zusammenfassung gelistet. Die originalen Release Notes dieser Version stehen hier unten.

release-notesgithub.com/pnpm/pnpm · 103 Zeilen
  1. ## Patch Changes
  3. * Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.
  5. A new `gitHosted: true` field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
  7. * Fix a regression where `pnpm --recursive --filter '!<pkg>' run/exec/test/add` would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative `--filter` arguments are provided, matching the [documented behavior](https://pnpm.io/cli/recursive). To include the root, pass `--include-workspace-root` [#11341](https://github.com/pnpm/pnpm/issues/11341).
  10. <!-- sponsors -->
  12. ## Platinum Sponsors
  14. <table>
  15. <tbody>
  16. <tr>
  17. <td align="center" valign="middle">
  18. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  19. </td>
  20. </tr>
  21. </tbody>
  22. </table>
  24. ## Gold Sponsors
  26. <table>
  27. <tbody>
  28. <tr>
  29. <td align="center" valign="middle">
  30. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  31. <picture>
  32. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  33. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  34. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  35. </picture>
  36. </a>
  37. </td>
  38. <td align="center" valign="middle">
  39. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  40. <picture>
  41. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  42. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  43. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  44. </picture>
  45. </a>
  46. </td>
  47. <td align="center" valign="middle">
  48. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  49. </td>
  50. </tr>
  51. <tr>
  52. <td align="center" valign="middle">
  53. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  54. <picture>
  55. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  56. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  57. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  58. </picture>
  59. </a>
  60. </td>
  61. <td align="center" valign="middle">
  62. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  63. <picture>
  64. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  65. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  66. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  67. </picture>
  68. </a>
  69. </td>
  70. <td align="center" valign="middle">
  71. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  72. <picture>
  73. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  74. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  75. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  76. </picture>
  77. </a>
  78. </td>
  79. </tr>
  80. <tr>
  81. <td align="center" valign="middle">
  82. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  83. <picture>
  84. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  85. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  86. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  87. </picture>
  88. </a>
  89. </td>
  90. <td align="center" valign="middle">
  91. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  92. <picture>
  93. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  94. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  95. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  96. </picture>
  97. </a>
  98. </td>
  99. </tr>
  100. </tbody>
  101. </table>
  103. <!-- sponsors end -->

auf github ansehenimported 2026-09-28 über npm