Vai al contenuto
verdict:

pnpm 11.0.9

digest

Note di rilascio

note: la sintesi e le note di rilascio sono in inglese

note: nessuna sintesi per questa release digest

Le release digest sono elencate senza una sintesi. Le note di rilascio originali di questa versione sono qui sotto.

release-notesgithub.com/pnpm/pnpm · 107 righe
  1. > See full [v11.0.0 changelog](https://github.com/pnpm/pnpm/releases/tag/v11.0.0)
  2. > Migration guide: [Migrating from v10 to v11](https://pnpm.io/11.x/migration)
  4. ## Patch Changes
  6. * Fixed installation of GitLab-hosted dependencies. pnpm now downloads the tarball from `https://gitlab.com/<user>/<project>/-/archive/<sha>/<project>-<sha>.tar.gz` instead of the GitLab API endpoint that contained an encoded slash (`%2F`) between user and project. The encoded slash both triggered `406 Not Acceptable` responses from GitLab and produced virtual store directory names that Node refused to import (`ERR_INVALID_MODULE_SPECIFIER`) [#11533](https://github.com/pnpm/pnpm/issues/11533).
  7. * Honor `NPM_CONFIG_USERCONFIG` (and its lowercase `npm_config_userconfig` form) as a low-priority fallback when locating the user-level `.npmrc`. This restores compatibility with environments that point npm at a custom auth file via that env var — most notably `actions/setup-node`, which writes registry credentials to `${runner.temp}/.npmrc` and exports `NPM_CONFIG_USERCONFIG` to reference it. Without this, GitHub Actions workflows using `actions/setup-node` to authenticate to private registries broke after upgrading to pnpm v11. PNPM-prefixed env vars and `npmrcAuthFile` from the global `config.yaml` continue to take precedence [#11539](https://github.com/pnpm/pnpm/issues/11539).
  8. * Fix `pnpm pack` not bundling dependencies listed in `bundleDependencies` (or `bundledDependencies`). The npm-packlist upgrade in pnpm 11 changed its API to require the caller to pre-populate the dependency tree, which the wrapper was not doing — `bundleDependencies` were silently dropped from the tarball [#11519](https://github.com/pnpm/pnpm/issues/11519).
  9. * Fixed the pnpm CLI crashing with a confusing `SyntaxError: Invalid regular expression flags` instead of printing a clear "requires Node.js v22.13" error when launched on an unsupported Node.js version. The Node.js version check in `bin/pnpm.mjs` was effectively dead code because the static `import` of the bundled `dist/pnpm.mjs` was hoisted by the ES module loader and parsed before the check could run [#11546](https://github.com/pnpm/pnpm/issues/11546).
  10. * Fixed `pnpm --prefix=<dir> install` overwriting the existing `pnpm-workspace.yaml` in `<dir>` with `set this to true or false` placeholders. The renamed `--prefix` option (which maps to `dir`) was not honored when locating the workspace root, so the workspace manifest's `allowBuilds` settings were not loaded into config and got clobbered when ignored builds were auto-populated [#11535](https://github.com/pnpm/pnpm/issues/11535).
  11. * Fixed `pnpm publish --provenance` failing with a 422 from the registry when the package version contained semver build metadata (e.g. `1.0.0-canary.0+abc1234`). The `+<build>` segment is now stripped before packing so that the version embedded in the tarball, the metadata sent to the registry, and the sigstore provenance subject all agree [#11518](https://github.com/pnpm/pnpm/issues/11518).
  14. <!-- sponsors -->
  16. ## Platinum Sponsors
  18. <table>
  19. <tbody>
  20. <tr>
  21. <td align="center" valign="middle">
  22. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  23. </td>
  24. </tr>
  25. </tbody>
  26. </table>
  28. ## Gold Sponsors
  30. <table>
  31. <tbody>
  32. <tr>
  33. <td align="center" valign="middle">
  34. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  35. <picture>
  36. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  37. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  38. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  39. </picture>
  40. </a>
  41. </td>
  42. <td align="center" valign="middle">
  43. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  44. <picture>
  45. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  46. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  47. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  48. </picture>
  49. </a>
  50. </td>
  51. <td align="center" valign="middle">
  52. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  53. </td>
  54. </tr>
  55. <tr>
  56. <td align="center" valign="middle">
  57. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  58. <picture>
  59. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  60. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  61. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  62. </picture>
  63. </a>
  64. </td>
  65. <td align="center" valign="middle">
  66. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  67. <picture>
  68. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  69. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  70. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  71. </picture>
  72. </a>
  73. </td>
  74. <td align="center" valign="middle">
  75. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  76. <picture>
  77. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  78. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  79. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  80. </picture>
  81. </a>
  82. </td>
  83. </tr>
  84. <tr>
  85. <td align="center" valign="middle">
  86. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  87. <picture>
  88. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  89. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  90. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  91. </picture>
  92. </a>
  93. </td>
  94. <td align="center" valign="middle">
  95. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  96. <picture>
  97. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  98. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  99. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  100. </picture>
  101. </a>
  102. </td>
  103. </tr>
  104. </tbody>
  105. </table>
  107. <!-- sponsors end -->

vedi su githubimported 2026-09-28 via npm