pnpm install

This release introduces global build approvals and fixes several issues related to frozen lockfiles, dependency resolution, and configuration settings. The Rust CLI now correctly handles various settings and improves the behavior of workspace publishing and installation commands.

This release introduces stricter error handling for global installations with sudo and resolves several issues related to file handling, dependency management, and store locations.

This release introduces significant enhancements to the Rust engine, including expanded configuration options for workspace settings and improved handling of workspace protocols. It also refines `pnpm self-update` behavior by removing project-specific overrides for fetching and trust policies, and includes numerous bug fixes for lockfile generation, dependency resolution, and command execution.

This release introduces significant improvements to recursive workspace operations, enhanced versioning capabilities with `pnpm version`, and a new changeset generation feature for `pnpm update`. It also addresses several bugs related to dependency resolution and lockfile management.

This release enhances pnpm's runtime installation parity across Node.js, Deno, and Bun, introduces native commands like `install-test` and `recursive`, and improves the robustness of installations and dependency management, including better handling of patched dependencies and optional packages.

This patch release improves pnpm's handling of optional dependencies and runtime installations across different platforms. It also addresses memory usage during dependency resolution and fixes issues with registry URL normalization for login commands.

This patch release focuses heavily on security, validating configuration dependency names and versions, rejecting malicious lockfile aliases, and hardening warnings related to environment variables in configuration.

This release introduces significant features for read-only store installations via `--frozen-store` and optional end-to-end dependency resolution delegation to `pacquet`. Numerous bug fixes address security issues related to lockfile aliases, publishing SSL, and deterministic resolution ordering.

This patch release introduces significant security enhancements by verifying signatures for package manager binaries and downloaded Node.js runtimes, alongside fixes for configuration expansion, lockfile generation, and CLI flag parsing.

This patch release improves lockfile regeneration stability by reusing peer contexts and enhances security by verifying tarball URLs against registry metadata. It also fixes several critical bugs related to concurrent installs, global virtual store builds, and version cataloging.

This release introduces configuration for hoisting limits in hoisted mode and replaces the interactive prompt library, fixing scrolling issues across several commands. Several critical bugs related to peer resolution deadlocks, 2FA handling for dist-tags, and lockfile integrity for remote dependencies have also been resolved.

This release introduces several new native commands like `pnpm stage`, `pnpm pkg`, and `pnpm repo`, alongside a new `trustLockfile` setting to optimize supply-chain verification performance. Several critical bugs related to dependency resolution non-determinism and dependency addition regressions have also been fixed.

This patch significantly enhances lockfile verification against age and trust policies during installation, introduces strict/loose modes for handling immature dependency versions, and corrects cache hashing to align with the actual script execution environment.

This patch release fixes critical issues related to execute permissions on Windows binaries, restores expected JSON output for `pnpm publish`, and enhances configuration flexibility by allowing global user preferences. It also improves lockfile security by pinning git dependency integrity.

This patch release fixes several bugs related to configuration handling, publishing, bin linking, and workspace behavior, improving the stability of pnpm commands.

This patch release silences an unnecessary warning for `--lockfile-only`, adds a Windows shim for `pnpm setup` to support self‑updates, and corrects catalog warning behavior.

This release adds new CLI flags for architecture selection, introduces devEngines‑based Node.js runtime resolution, improves dlx flag parsing, and fixes several bugs around package downloading and production installs.