Skip to content
verdict:

pnpm 11.0.6

digest

Release notes

note: no summary for this digest release

Digest releases are listed without a summary. The original release notes for this version are below.

release-notesgithub.com/pnpm/pnpm · 108 lines
  1. ## Patch Changes
  3. * Fix `pnpm_config_npmrc_auth_file` and `pnpm_config_userconfig` env vars not actually loading the custom `.npmrc`. The env vars were parsed and assigned to the resolved config, but only after `loadNpmrcConfig` had already read the default `~/.npmrc` — so the custom file path was set but never read. The relevant env vars are now consulted before the user-level `.npmrc` is loaded [#11465](https://github.com/pnpm/pnpm/issues/11465).
  4. * Preserve the original key order in `pnpm-workspace.yaml` when updating it. Existing keys keep their position, and new keys are inserted in alphabetical position when the existing keys are already sorted (with a leading `packages` key allowed) or appended at the end otherwise.
  5. * Fixed `pnpm self-update` on installations originally set up by pnpm v10. v10 added `PNPM_HOME` directly to PATH and wrote a `pnpm` bootstrap shim there. v11 setup writes shims under `PNPM_HOME/bin` instead, so when a v10 user upgrades to v11 the legacy shim at `PNPM_HOME` keeps pointing into the old `.tools/<version>` install — `pnpm --version` continues to report the pre-update version even though the new version was installed under `global/v11`. Self-update now detects this layout, refreshes the legacy shims so the upgrade actually takes effect, and prints a hint suggesting `pnpm setup` to migrate PATH to the v11 layout. [#11464](https://github.com/pnpm/pnpm/issues/11464).
  6. * Print a warning when settings that are not allowed in the global config file (e.g. `nodeLinker`, `hoistPattern`) are present in `config.yaml` and silently ignored. Previously these settings were dropped without any feedback, leaving users unsure why their global configuration had no effect. The warning suggests moving those settings to a project-level `pnpm-workspace.yaml`, or sharing them across projects via [config dependencies](https://pnpm.io/11.x/config-dependencies).
  7. * Throw a pnpm error when `overrides` has an invalid shape or contains a non-string value.
  8. * Validate all `readPackage` dependency map fields, including `devDependencies`, and reject falsy non-object invalid values instead of silently accepting them.
  9. * Prevent crashes during `pnpm config`, `pnpm set`, and `pnpm get` by tolerating `configDependencies` install failures. For these commands, a failure to install `configDependencies` (for example because the registry auth token has not been written yet) is now logged at debug level and the command proceeds. All other commands still surface the install error [#10684](https://github.com/pnpm/pnpm/issues/10684).
  10. * Treat `allowBuilds` as an install-state input and clear previously ignored builds when they are explicitly disallowed.
  11. * Fixes #10594, catalogs not being read from the workspace when using the `catalog:` protocol with the `pnpm dlx` / `pnpx` command, resulting in a catalog entry not found error.
  12. * Accept `PNPM_CONFIG_*` (uppercase) environment variables in addition to `pnpm_config_*`. Previously, only the lowercase form was honored, so env vars renamed per the v11 migration guide (e.g. `PNPM_CONFIG_USERCONFIG`) silently had no effect on case-sensitive systems like macOS and Linux [#11465](https://github.com/pnpm/pnpm/issues/11465).
  15. <!-- sponsors -->
  17. ## Platinum Sponsors
  19. <table>
  20. <tbody>
  21. <tr>
  22. <td align="center" valign="middle">
  23. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  24. </td>
  25. </tr>
  26. </tbody>
  27. </table>
  29. ## Gold Sponsors
  31. <table>
  32. <tbody>
  33. <tr>
  34. <td align="center" valign="middle">
  35. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  36. <picture>
  37. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  38. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  39. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  40. </picture>
  41. </a>
  42. </td>
  43. <td align="center" valign="middle">
  44. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  45. <picture>
  46. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  47. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  48. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  49. </picture>
  50. </a>
  51. </td>
  52. <td align="center" valign="middle">
  53. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  54. </td>
  55. </tr>
  56. <tr>
  57. <td align="center" valign="middle">
  58. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  59. <picture>
  60. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  61. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  62. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  63. </picture>
  64. </a>
  65. </td>
  66. <td align="center" valign="middle">
  67. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  68. <picture>
  69. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  70. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  71. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  72. </picture>
  73. </a>
  74. </td>
  75. <td align="center" valign="middle">
  76. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  77. <picture>
  78. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  79. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  80. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  81. </picture>
  82. </a>
  83. </td>
  84. </tr>
  85. <tr>
  86. <td align="center" valign="middle">
  87. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  88. <picture>
  89. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  90. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  91. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  92. </picture>
  93. </a>
  94. </td>
  95. <td align="center" valign="middle">
  96. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  97. <picture>
  98. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  99. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  100. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  101. </picture>
  102. </a>
  103. </td>
  104. </tr>
  105. </tbody>
  106. </table>
  108. <!-- sponsors end -->

view on githubimported 2026-09-28 via npm