Skip to content
verdict:

pnpm 11.0.8

digest

Release notes

note: no summary for this digest release

Digest releases are listed without a summary. The original release notes for this version are below.

release-notesgithub.com/pnpm/pnpm · 104 lines
  1. > See full [v11.0.0 changelog](https://github.com/pnpm/pnpm/releases/tag/v11.0.0)
  2. > Migration guide: [Migrating from v10 to v11](https://pnpm.io/11.x/migration)
  4. ## Patch Changes
  6. * Restored the heuristic that preserves tarball URLs in `pnpm-lock.yaml` when they cannot be derived from name+version+registry, even with the default `lockfileIncludeTarballUrl: false`. Without this, `pnpm install --frozen-lockfile` from an empty store fails with `ERR_PNPM_FETCH_404` for packages on registries that serve tarballs from a non-standard path — most notably GitHub Packages (`https://npm.pkg.github.com/download/<scope>/<name>/<version>/<hash>`) and JSR. `lockfileIncludeTarballUrl: true` continues to force the URL into the lockfile for every package [#11276](https://github.com/pnpm/pnpm/issues/11276).
  7. * Run `preversion`, `version`, and `postversion` lifecycle scripts for `pnpm version`.
  8. * Fixed `ERR_PNPM_BAD_TARBALL_SIZE` when a registry serves tarballs with an end-to-end `Content-Encoding` (e.g. `gzip`). Tarballs are already compressed, so the fetcher now requests them with `Accept-Encoding: identity` (matching pnpm v10's effective behavior) and, as defense in depth against misbehaving servers, no longer enforces the strict `Content-Length` check when the response declares a `Content-Encoding` — `Content-Length` in that case refers to the encoded payload, not the decoded bytes the fetch implementation yields [#11506](https://github.com/pnpm/pnpm/issues/11506).
  11. <!-- sponsors -->
  13. ## Platinum Sponsors
  15. <table>
  16. <tbody>
  17. <tr>
  18. <td align="center" valign="middle">
  19. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  20. </td>
  21. </tr>
  22. </tbody>
  23. </table>
  25. ## Gold Sponsors
  27. <table>
  28. <tbody>
  29. <tr>
  30. <td align="center" valign="middle">
  31. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  32. <picture>
  33. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  34. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  35. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  36. </picture>
  37. </a>
  38. </td>
  39. <td align="center" valign="middle">
  40. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  41. <picture>
  42. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  43. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  44. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  45. </picture>
  46. </a>
  47. </td>
  48. <td align="center" valign="middle">
  49. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  50. </td>
  51. </tr>
  52. <tr>
  53. <td align="center" valign="middle">
  54. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  55. <picture>
  56. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  57. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  58. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  59. </picture>
  60. </a>
  61. </td>
  62. <td align="center" valign="middle">
  63. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  64. <picture>
  65. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  66. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  67. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  68. </picture>
  69. </a>
  70. </td>
  71. <td align="center" valign="middle">
  72. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  73. <picture>
  74. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  75. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  76. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  77. </picture>
  78. </a>
  79. </td>
  80. </tr>
  81. <tr>
  82. <td align="center" valign="middle">
  83. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  84. <picture>
  85. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  86. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  87. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  88. </picture>
  89. </a>
  90. </td>
  91. <td align="center" valign="middle">
  92. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank">
  93. <picture>
  94. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  95. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  96. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  97. </picture>
  98. </a>
  99. </td>
  100. </tr>
  101. </tbody>
  102. </table>
  104. <!-- sponsors end -->

view on githubimported 2026-09-28 via npm