Skip to content
verdict:

pnpm 11.16.0

notable

Release notes

ok: safe to upgrade

0 breaking changes5 key points

pnpm 11.16.0 adds update and audit settings sections, a changeset option for pnpm update, and GitHub Actions updates.

summary · from the release notes only · claude-haiku-5-5 · prompt v7

key points

release-notesgithub.com/pnpm/pnpm · 136 lines
  1. ## Minor Changes
  3. * The first release of a package now publishes the version written in its manifest verbatim, instead of bumping off it. `pnpm version -r` and `pnpm change status` check the registry for each release's current version; when that version is not yet published, the package debuts at it and its pending changesets apply only from the next release. A newly added package seeded at `1100.0.0` with a `minor` changeset is therefore published as `1100.0.0` rather than skipping straight to `1100.1.0`.
  5. * Added a `--changeset` flag to `pnpm update`. Set `update.changeset` to `true` in `pnpm-workspace.yaml` to enable this behavior by default, and use `--no-changeset` to override the setting for one update. After the update completes, pnpm writes a `.changeset/pnpm-update-<suffix>.md` file declaring a patch bump for every workspace package whose `dependencies` or `optionalDependencies` were changed by the update and a major bump when `peerDependencies` changed, including packages that consume an updated catalog entry via the `catalog:` protocol. Private packages, packages without a name, and packages listed in the `ignore` array of `.changeset/config.json` are skipped. If `.changeset/config.json` does not exist, a warning is printed and no changeset is generated.
  7. * Added GitHub Actions dependencies to `pnpm outdated` and interactive `pnpm update`. Non-interactive updates can include them with `--include-github-actions` or by setting `update.githubActions` to `true` in `pnpm-workspace.yaml`. Updated actions are pinned to exact commit hashes with their release tags preserved in comments.
  9. * Added `update` and `audit` settings sections to `pnpm-workspace.yaml`, superseding the awkwardly named `updateConfig`, `auditConfig`, and top-level `auditLevel` settings:
  11. ```yaml
  12. update:
  13. ignoreDeps: # was updateConfig.ignoreDependencies
  14. - webpack
  15. - "@babel/*"
  17. audit:
  18. level: high # was auditLevel
  19. ignore: # was auditConfig.ignoreGhsas
  20. - GHSA-xxxx-yyyy-zzzz
  21. ```
  23. `update.ignoreDeps` lists dependency name patterns that `pnpm update` and `pnpm outdated` should skip. `audit.level` and `audit.ignore` tune `pnpm audit`.
  25. The deprecated `updateConfig`, `auditConfig`, and `auditLevel` settings keep working until the next major version. When both a new section value and its deprecated counterpart are set, the new section takes precedence and a warning is printed. Both the TypeScript CLI and the Rust config surface (pacquet) recognize the new sections.
  27. ## Patch Changes
  29. * Fixed `pnpm add --save-exact`/`--save-prefix` and `pnpm update` writing a package's version with the `peerDependencies` range's prefix (e.g. `^19.2.7` instead of the requested `19.2.7`) whenever the same package also appeared in `peerDependencies`. A real `dependencies`/`devDependencies`/`optionalDependencies` entry now takes precedence over a same-named `peerDependencies` entry when computing the current specifiers [#13108](https://github.com/pnpm/pnpm/issues/13108).
  32. <!-- sponsors -->
  34. ## Platinum Sponsors
  36. <table>
  37. <tbody>
  38. <tr>
  39. <td align="center" valign="middle">
  40. <a href="https://bit.cloud/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer"><img src="https://pnpm.io/img/users/bit.svg" width="80" alt="Bit"></a>
  41. </td>
  42. </tr>
  43. <tr>
  44. <td align="center" valign="middle">
  45. <a href="https://openai.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  46. <picture>
  47. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/openai_dark.svg" />
  48. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/openai_light.svg" />
  49. <img src="https://pnpm.io/img/users/openai_dark.svg" width="160" alt="OpenAI" />
  50. </picture>
  51. </a>
  52. </td>
  53. </tr>
  54. </tbody>
  55. </table>
  57. ## Gold Sponsors
  59. <table>
  60. <tbody>
  61. <tr>
  62. <td align="center" valign="middle">
  63. <a href="https://sanity.io/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  64. <picture>
  65. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/sanity.svg" />
  66. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/sanity_light.svg" />
  67. <img src="https://pnpm.io/img/users/sanity.svg" width="120" alt="Sanity" />
  68. </picture>
  69. </a>
  70. </td>
  71. <td align="center" valign="middle">
  72. <a href="https://discord.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  73. <picture>
  74. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/discord.svg" />
  75. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/discord_light.svg" />
  76. <img src="https://pnpm.io/img/users/discord.svg" width="220" alt="Discord" />
  77. </picture>
  78. </a>
  79. </td>
  80. <td align="center" valign="middle">
  81. <a href="https://vite.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer"><img src="https://pnpm.io/img/users/vitejs.svg" width="42" alt="Vite"></a>
  82. </td>
  83. </tr>
  84. <tr>
  85. <td align="center" valign="middle">
  86. <a href="https://serpapi.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  87. <picture>
  88. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/serpapi_dark.svg" />
  89. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/serpapi_light.svg" />
  90. <img src="https://pnpm.io/img/users/serpapi_dark.svg" width="160" alt="SerpApi" />
  91. </picture>
  92. </a>
  93. </td>
  94. <td align="center" valign="middle">
  95. <a href="https://coderabbit.ai/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  96. <picture>
  97. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/coderabbit.svg" />
  98. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/coderabbit_light.svg" />
  99. <img src="https://pnpm.io/img/users/coderabbit.svg" width="220" alt="CodeRabbit" />
  100. </picture>
  101. </a>
  102. </td>
  103. <td align="center" valign="middle">
  104. <a href="https://stackblitz.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  105. <picture>
  106. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/stackblitz.svg" />
  107. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/stackblitz_light.svg" />
  108. <img src="https://pnpm.io/img/users/stackblitz.svg" width="190" alt="Stackblitz" />
  109. </picture>
  110. </a>
  111. </td>
  112. </tr>
  113. <tr>
  114. <td align="center" valign="middle">
  115. <a href="https://workleap.com/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  116. <picture>
  117. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/workleap.svg" />
  118. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/workleap_light.svg" />
  119. <img src="https://pnpm.io/img/users/workleap.svg" width="190" alt="Workleap" />
  120. </picture>
  121. </a>
  122. </td>
  123. <td align="center" valign="middle">
  124. <a href="https://nx.dev/?utm_source=pnpm&utm_medium=release_notes" target="_blank" rel="noopener noreferrer">
  125. <picture>
  126. <source media="(prefers-color-scheme: light)" srcset="https://pnpm.io/img/users/nx.svg" />
  127. <source media="(prefers-color-scheme: dark)" srcset="https://pnpm.io/img/users/nx_light.svg" />
  128. <img src="https://pnpm.io/img/users/nx.svg" width="50" alt="Nx" />
  129. </picture>
  130. </a>
  131. </td>
  132. </tr>
  133. </tbody>
  134. </table>
  136. <!-- sponsors end -->

view on githubimported 2026-09-28 via npm