●Change8

Migrating to pnpm v11.20.0

Version v11.20.0 introduces 2 breaking changes. This guide details how to update your code.

Released: 8/3/2026

2
Breaking Changes
4
Migration Steps
12
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

`namedRegistries``pnpm-workspace.yaml``pnpm licenses``pnpm sbom``@pnpm/util.lex-comparator``@pnpm/config.nerf-dart``@pnpm/text.ordinal-comparator``@pnpm/config.registry-auth-key``pnpm rebuild``ERR_PNPM_INVALID_PROXY``ERR_PNPM_MISSING_NAMED_REGISTRY``ERR_PNPM_RESERVED_NAMED_REGISTRY_NAME`

Breaking Changes

●Issue #1

Projects using `namedRegistries` with pnpm versions 11.1.0–11.19.x are semi-breaking. The lockfile no longer records tarball URLs for named-registry packages; these are now recomputed from the `namedRegistries` setting on demand. To fix, commit the lockfile diff generated by a non-frozen install on the new pnpm version. Ensure all collaborators are on this version or newer before updating the lockfile to prevent lockfile format flipping.

●Issue #2

Named registry aliases that shadow reserved dependency specifier prefixes (e.g., `file`, `link`, `workspace`, `runtime`, `npm`, `jsr`) are now rejected with `ERR_PNPM_RESERVED_NAMED_REGISTRY_NAME` instead of being silently shadowed.

Migration Steps

  1. 1
    If you use named registries, perform a non-frozen install on the new pnpm version to re-key entries. Commit the resulting lockfile diff. Ensure all collaborators are on this version or newer before updating the lockfile.
  2. 2
    If you mirror or proxy npmjs, point the `npmjs` alias at your mirror in `pnpm-workspace.yaml` (e.g., `namedRegistries: { npmjs: https://npm.internal.example.com/ }`).
  3. 3
    Replace usages of `@pnpm/util.lex-comparator` with `@pnpm/text.ordinal-comparator`.
  4. 4
    Replace usages of `@pnpm/config.nerf-dart` with `@pnpm/config.registry-auth-key`.

Release Summary

This release addresses a security vulnerability related to named registries by improving lockfile integrity and introducing registry-qualified keys. It also includes performance enhancements and fixes for proxy settings and dependency resolution.

Need More Details?

View the full release notes and all changes for pnpm v11.20.0.

View Full Changelog