v10.9.0
Breaking Changes📦 pnpmView on GitHub →
⚠ 1 breaking✨ 2 features🐛 1 fixes🔧 3 symbols
Summary
This release adds JSR package installation support and a new `dangerouslyAllowAllBuilds` setting, fixes a verifyDepsBeforeRun false negative, and drops verifyDepsBeforeRun support for nodeLinker "pnp".
⚠️ Breaking Changes
- verifyDepsBeforeRun no longer works with nodeLinker set to "pnp"; using both now prints a warning and the check is disabled.
Migration Steps
- If your project uses nodeLinker "pnp" together with verifyDepsBeforeRun, remove the verifyDepsBeforeRun setting or switch to a supported nodeLinker (e.g., "hoisted" or "node-modules").
- Add JSR packages using the `jsr:` prefix in pnpm add commands; publishing will automatically convert them to npm-compatible entries.
✨ New Features
- Support installing JSR packages via the syntax `pnpm add jsr:<pkg_name>` and version ranges, with automatic transformation to npm-compatible entries on publish.
- New configuration option `dangerouslyAllowAllBuilds` that globally allows running any dependency scripts without manual approval, configurable via pnpm config, command flag, or pnpm-workspace.yaml.
🐛 Bug Fixes
- Fixed false negative in verifyDepsBeforeRun when nodeLinker is "hoisted" and a workspace package has no dependencies but a node_modules directory exists.
🔧 Affected Symbols
verifyDepsBeforeRunnodeLinkerdangerouslyAllowAllBuilds