untagged-e518c274b13ed6243f61
📦 pnpmView on GitHub →
✨ 4 features🐛 6 fixes🔧 9 symbols
Summary
This release introduces the `pnpm unpublish` command and enhances handling of GitHub Actions dependencies with a new server URL setting. It also includes several bug fixes for installation, updating, and packaging processes.
Migration Steps
- If you were relying on `pnpm outdated` or `pnpm update` to fail for unreadable GitHub Actions repositories, you will now see warnings and the actions will be skipped. Consider setting `update.githubActionsServer` if you need to specify a custom GitHub server URL.
- If you were using `pnpm update --latest` with local dependencies specified by `workspace:*` or `workspace:^1.0.0`, these will now be preserved verbatim instead of attempting to resolve from the registry.
✨ New Features
- Added a new setting, `update.githubActionsServer`, for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files.
- Added the `pnpm unpublish` command to remove a package from the registry entirely or remove specific versions.
- `pnpm install --no-runtime` now works without `--frozen-lockfile`: on a fresh install, runtime dependencies are resolved and recorded in the lockfile, but their archives are not downloaded and their bins are not linked.
- `pnpm view` now accepts the `--registry` option, matching the TypeScript CLI.
🐛 Bug Fixes
- `pnpm outdated` and `pnpm update` no longer fail when the refs of a GitHub Action's repository cannot be read; such actions are now skipped with a warning.
- The token poll for web-based authentication no longer reads the body of non-OK or still-pending (HTTP 202) responses, and caps the token response body it does read at 64 KiB.
- `pnpm outdated` now aligns its table borders when the output is colorized.
- `pnpm pack` and `pnpm publish` no longer let workspace-root `.gitignore` / `.npmignore` rules exclude files matched by the package manifest's `files` allowlist.
- Fixed `pnpm update --latest` failing with `ERR_PNPM_PACKAGE_MANAGER_UPDATE_RESOLVE_LATEST` when a dependency uses the `workspace:` (or `link:` / `file:`) protocol.
- When the authentication URL cannot be rendered as a QR code, web-based login now displays the URL alone with a warning instead of aborting authentication.