Aller au contenu
verdict:

pnpm 10.33.4

digest

Notes de version

note: la synthèse et les notes de version sont en anglais

note: pas de synthèse pour cette release digest

Les releases digest sont listées sans synthèse. Les notes de version originales de cette version sont ci-dessous.

release-notesgithub.com/pnpm/pnpm · 103 lignes
  1. ## Patch Changes
  3. * Pin the integrity of git-hosted tarballs (codeload.github.com, gitlab.com, bitbucket.org) in the lockfile so that subsequent installs detect a tampered or substituted tarball and refuse to install it. Previously the lockfile only stored the tarball URL for git dependencies, so a compromised git host or a man-in-the-middle could serve arbitrary code on later installs without lockfile changes.
  5. A new `gitHosted: true` field is recorded on git-hosted tarball resolutions in the lockfile, letting every reader/writer route them by a single typed check instead of pattern-matching the tarball URL in each call site. Lockfiles written by older pnpm versions are enriched on load (URL fallback) so the field can be relied on uniformly across the codebase.
  7. * Fix a regression where `pnpm --recursive --filter '!<pkg>' run/exec/test/add` would include the workspace root in the matched projects. The workspace root is now correctly excluded by default when only negative `--filter` arguments are provided, matching the [documented behavior](https://pnpm.io/cli/recursive). To include the root, pass `--include-workspace-root` [#11341](https://github.com/pnpm/pnpm/issues/11341).
  10. <!-- sponsors -->
  12. ## Platinum Sponsors
  14. <table>
  15. <tbody>
  16. <tr>
  17. <td align="center" valign="middle">
  18. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  19. </td>
  20. </tr>
  21. </tbody>
  22. </table>
  24. ## Gold Sponsors
  26. <table>
  27. <tbody>
  28. <tr>
  29. <td align="center" valign="middle">
  30. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  31. <picture>
  32. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  33. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  34. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  35. </picture>
  36. </a>
  37. </td>
  38. <td align="center" valign="middle">
  39. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  40. <picture>
  41. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  42. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  43. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  44. </picture>
  45. </a>
  46. </td>
  47. <td align="center" valign="middle">
  48. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  49. </td>
  50. </tr>
  51. <tr>
  52. <td align="center" valign="middle">
  53. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  54. <picture>
  55. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  56. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  57. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  58. </picture>
  59. </a>
  60. </td>
  61. <td align="center" valign="middle">
  62. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  63. <picture>
  64. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  65. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  66. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  67. </picture>
  68. </a>
  69. </td>
  70. <td align="center" valign="middle">
  71. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  72. <picture>
  73. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  74. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  75. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  76. </picture>
  77. </a>
  78. </td>
  79. </tr>
  80. <tr>
  81. <td align="center" valign="middle">
  82. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  83. <picture>
  84. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  85. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  86. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  87. </picture>
  88. </a>
  89. </td>
  90. <td align="center" valign="middle">
  91. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  92. <picture>
  93. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  94. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  95. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  96. </picture>
  97. </a>
  98. </td>
  99. </tr>
  100. </tbody>
  101. </table>
  103. <!-- sponsors end -->

voir sur githubimported 2026-09-28 via npm