v12.0.0-alpha.20
📦 pnpmView on GitHub →
✨ 4 features🐛 1 fixes🔧 4 symbols
Summary
This patch release brings the pnpm CLI closer to parity with the TypeScript version by introducing several new command-line options and improving the robustness of `pnpm publish --provenance`. It also fixes a bug in `pnpm update --latest` related to npm aliases.
✨ New Features
- `--registry <url>` is now accepted on every command as a universal rc-option, not only through `--config.registry=<url>`.
- `pnpm add` (and `pnpm add -g`) now accept `--allow-build=<pkg>`, appending the named packages to `allowBuilds` so they can run their lifecycle scripts during the install.
- `--dir` / `-C` is now position-independent: it is accepted anywhere on the command line, before or after the subcommand.
- `pnpm publish --provenance` now applies the `fetch-timeout` setting to the sigstore signing exchange and retries it up to two more times with exponential backoff when it fails or times out.
🐛 Bug Fixes
- `pnpm update --latest` now correctly resolves dependencies declared through an `npm:` alias to the latest version of the aliased package, preventing 404 errors when the alias name itself doesn't exist as a package.