Zum Inhalt springen
verdict:

pnpm 11.1.0

notable

Release Notes

note: die Zusammenfassung und die Release Notes sind auf Englisch

note: keine Zusammenfassung für dieses ältere Release

Wir fassen die neueren Releases zusammen. Die originalen Release Notes dieser Version stehen hier unten.

release-notesgithub.com/pnpm/pnpm · 147 Zeilen
  1. > See full [v11.0.0 changelog](https://github.com/pnpm/pnpm/releases/tag/v11.0.0)
  2. > Migration guide: [Migrating from v10 to v11](https://pnpm.io/11.x/migration)
  4. ## Minor Changes
  6. * Added `pnpm audit signatures` to verify ECDSA registry signatures for installed packages against keys from `/-/npm/v1/keys` [#7909](https://github.com/pnpm/pnpm/issues/7909). Scoped registries are respected, and registries without signing keys are skipped.
  8. * Added support for installing packages from the [GitHub Packages npm registry](https://docs.github.com/en/packages/working-with-a-github-packages-registry/working-with-the-npm-registry) via a built-in `gh:` prefix (e.g. `pnpm add gh:@acme/private`), and, more broadly, for arbitrary named registries in the style of [vlt's named-registry aliases](https://docs.vlt.sh/cli/registries). Authentication is picked up from the existing per-URL `.npmrc` entries (e.g. `//npm.pkg.github.com/:_authToken=...`), so no separate auth mechanism is required.
  10. Additional aliases — or an override for the built-in `gh` alias, for GitHub Enterprise Server — can be configured under `namedRegistries` in `pnpm-workspace.yaml`:
  12. ```yaml
  13. namedRegistries:
  14. gh: https://npm.pkg.github.example.com/
  15. work: https://npm.work.example.com/
  16. ```
  18. With this, `work:@corp/lib@^2.0.0` resolves against `https://npm.work.example.com/`. [#11324](https://github.com/pnpm/pnpm/issues/11324).
  20. * Allow setting sbom spec version using `--sbom-spec-version` [#11389](https://github.com/pnpm/pnpm/pull/11389).
  22. * Add `--no-runtime` flag (config: `runtime=false`) to skip installing runtime entries (e.g. Node.js downloaded via `devEngines.runtime`) without modifying the lockfile. The lockfile keeps the runtime entry so frozen-lockfile validation still passes; only the runtime fetch and `.bin` linking are skipped. Useful in CI matrices where the runtime is provisioned externally (e.g. via `pnpm runtime -g set node <version>`) before `pnpm install` runs.
  24. * Added the `pnpm bugs` command that opens a package's bug tracker URL in the browser. With no arguments, it reads the current project's `package.json`; with one or more package names, it fetches each package's metadata from the registry and opens its bug tracker. Falls back to `<repository>/issues` when the `bugs` field is missing [#11279](https://github.com/pnpm/pnpm/pull/11279).
  26. * Added `pnpm owner` command to manage package owners on the registry.
  28. ## Patch Changes
  30. * Added "published X ago by Y" information to the `pnpm view` command output, similar to `npm view`. This is useful when comparing against `minimumReleaseAge`.
  32. For example, `pnpm view pnpm` now shows:
  34. ```
  35. published 17 hours ago by GitHub Actions
  36. ```
  38. * `pnpm publish` now honors the configured HTTP/HTTPS proxy (including `https_proxy`/`http_proxy`/`no_proxy` environment variables) when polling the registry's `doneUrl` during the web-based authentication flow. Previously the poll bypassed the proxy, causing the registry to respond `403` from a different source IP and the login to never complete [#11561](https://github.com/pnpm/pnpm/issues/11561).
  40. * `pnpm add -g` now installs each space-separated package into its own isolated directory by default. To bundle multiple packages into the same isolated install (so that they share dependencies and are removed together), pass them as a comma-separated list. For example:
  42. * `pnpm add -g foo bar` installs `foo` and `bar` as two independent globals — removing one does not affect the other.
  43. * `pnpm add -g foo,bar qar` bundles `foo` and `bar` into a single isolated install while `qar` is installed on its own.
  45. Related: [#11587](https://github.com/pnpm/pnpm/issues/11587).
  47. * `pnpm runtime set <name> <version>` no longer fails in the root of a multi-package workspace with the `ADDING_TO_ROOT` error. Installing the workspace root is a valid target for a runtime, so the command now bypasses that safety check.
  49. * Fix `pnpm --version` hanging for the lifetime of the worker pool after the version was printed. `main.ts`'s `--version` short-circuit returned before reaching the command-handler `finally` that calls `finishWorkers()`, so the worker pool that `switchCliVersion` had spawned during integrity resolution stayed alive and held the Node event loop open. The CLI entry now runs `finishWorkers()` from its own `finally`, so every exit path tears the pool down.
  51. Repro: `pnpm --version` in a workspace whose `devEngines.packageManager` version already matches the running pnpm + `onFail: "download"`. `switchCliVersion` resolves the integrity (spawning workers), finds nothing to swap, returns. The version prints, then the process hangs.
  54. <!-- sponsors -->
  56. ## Platinum Sponsors
  58. <table>
  59. <tbody>
  60. <tr>
  61. <td align="center" valign="middle">
  62. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  63. </td>
  64. </tr>
  65. </tbody>
  66. </table>
  68. ## Gold Sponsors
  70. <table>
  71. <tbody>
  72. <tr>
  73. <td align="center" valign="middle">
  74. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  75. <picture>
  76. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  77. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  78. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  79. </picture>
  80. </a>
  81. </td>
  82. <td align="center" valign="middle">
  83. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  84. <picture>
  85. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  86. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  87. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  88. </picture>
  89. </a>
  90. </td>
  91. <td align="center" valign="middle">
  92. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  93. </td>
  94. </tr>
  95. <tr>
  96. <td align="center" valign="middle">
  97. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  98. <picture>
  99. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  100. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  101. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  102. </picture>
  103. </a>
  104. </td>
  105. <td align="center" valign="middle">
  106. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  107. <picture>
  108. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  109. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  110. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  111. </picture>
  112. </a>
  113. </td>
  114. <td align="center" valign="middle">
  115. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  116. <picture>
  117. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  118. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  119. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  120. </picture>
  121. </a>
  122. </td>
  123. </tr>
  124. <tr>
  125. <td align="center" valign="middle">
  126. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  127. <picture>
  128. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  129. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  130. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  131. </picture>
  132. </a>
  133. </td>
  134. <td align="center" valign="middle">
  135. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  136. <picture>
  137. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  138. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  139. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  140. </picture>
  141. </a>
  142. </td>
  143. </tr>
  144. </tbody>
  145. </table>
  147. <!-- sponsors end -->

auf github ansehenimported 2026-09-28 über npm