pnpm Blog

RSS: https://pnpm.io/blog/rss.xml
Fast, disk space efficient package manager

pnpm 12.0 正式发布：Rust 重写，多项重大变更

pnpm 12 正式发布，基于 Rust 重写，命令和 lockfile 格式与 v11 兼容。主要变更：Git 依赖统一走 HTTPS 解析、workspace 中拼写错误的配置项会报错、循环依赖的 lockfile 现在字节级稳定、Linux 上 auto 模式优先尝试硬链接。新功能包括：全局安装的 Node/Deno/Bun 自动跟随项目版本、pnpm 可以安装 npm/Yarn/Bun 等其他包管理器、registry revisions 支持漏洞修复后不升版本号重新发布、pnpm init 默认锁定最新版 pnpm。
评论点赞收藏4 小时前

pnpm 11.24 发布：恢复全局构建审批，批量发布按注册表分组

pnpm 11.24 恢复全局构建审批，批量发布按注册表分组，frozen-lockfile 版本检查不再误报。approve-builds --global 在 v11.0 因全局安装隔离被移除，现在聚合所有安装组的待审批包，写入一次 allowBuilds 策略。批量发布时同注册表的包归为一组，凭证不匹配在发布前拦截。frozen-lockfile 遇到锁文件记录的 pnpm 版本过时，不再直接报错，而是用锁文件指定的版本重新解析。
评论点赞收藏3 天前

pnpm 11.23

pnpm 11.23 gives the registries setting a shape that describes each registry once — its tarball layout, the scopes routed to it, the prefix it answers to — so an Artifactory or GitLab registry can fin...
评论点赞收藏4 天前

pnpm 11.21-11.22 发布说明

pnpm 11.21-11.22 发布，原地更新 lockfile，禁止项目配置机器级路径。pnpm install 对大多数日常变更原地更新 lockfile，不再重新解析整个依赖图。全局安装改为原子切换，全局交互式更新以安装组为单位选择。项目级 pnpm-workspace.yaml 中的 bin、configDir、globalBinDir 等配置项被忽略，防止克隆的仓库决定 pnpm 凭据和安装位置。通过 sudo 运行 pnpm setup 等命令会打印警告，v12 将直接报错。
评论点赞收藏9 天前

pnpm 12 有什么变化

pnpm 12 用 Rust 重写，从 v12.0.0 起稳定，命令、标志、配置和 lockfile 格式与 pnpm 11 保持兼容，升级不算迁移。主要变化包括：全局安装的 node/deno/bun 现在会跟随项目锁定的运行时版本；Git 依赖解析改为以 HTTPS 为统一身份，不再记录 SSH URL，避免无密钥机器安装失败。
评论点赞收藏17 天前

pnpm 11.20

pnpm 11.20 fixes a package-substitution risk in projects that install from more than one registry: packages resolved from a named registry are now recorded in the lockfile under registry-qualified key...
评论点赞收藏24 天前

pnpm 11.15-11.19

pnpm 11.15 through 11.19 teach pnpm update and pnpm outdated to update GitHub Actions, let pnpm update write changesets for the bumps it makes, introduce cleaner update and audit settings sections, ad...
评论点赞收藏27 天前

pnpm 11.11-11.14

pnpm 11.11 through 11.14 add native workspace release management ( pnpm change, pnpm lane, and a bare pnpm version -r ), a pnpm doctor command that diagnoses your installation end to end, the pnpm acc...
评论点赞收藏40 天前

pnpm 11.10

pnpm 11.10 adds the _auth setting for CI-friendly registry authentication, new pnpm prefix and pnpm issues commands, and the ability for pnpm self-update to install pnpm v12 (the Rust port). It also i...
评论点赞收藏53 天前

pnpm 11.9

pnpm 11.9 computes missing tarball integrity for registries that cannot publish checksums, adds pnpm sbom --exclude-peers, improves audit performance on cyclic lockfiles, fixes peer-resolution nondete...
评论点赞收藏65 天前

pnpm 11.8

pnpm 11.8 adds install dry-run previews, Node.js package map generation, richer SBOM output, pnpm view defaulting to the current package, and correct pnpm run --no-bail exit codes. It also includes a ...
评论点赞收藏70 天前

pnpm 11.7

pnpm 11.7 adds a frozenStore setting for installing against a read-only package store, a --batch flag for publishing a whole workspace in one request, scope-specific auth tokens, and full resolving in...
评论点赞收藏73 天前

pnpm 11.6

pnpm 11.6 adds a file-free way to supply registry authentication through npm_config_//… and pnpm_config_//… environment variables, raises the default network concurrency, and skips full re-resolution ...
评论点赞收藏77 天前

pnpm 11.5

pnpm 11.5 adds a hoistingLimits setting for controlling how far dependencies hoist in nodeLinker: hoisted installs, replaces the interactive prompt library to fix scrolling in long choice lists, recog...
评论点赞收藏90 天前

pnpm 11.4

pnpm 11.4 closes a cluster of supply-chain holes around lockfile integrity, credential scoping, git resolutions, patch files, and dependency aliases, makes tarball-integrity mismatches a hard install ...
评论点赞收藏92 天前

pnpm 11.3

pnpm 11.3 adds support for npm's staged publishing ( pnpm stage ), the new trustLockfile setting for skipping the supply-chain verification pass on already-trusted lockfiles, and native implementation...
评论点赞收藏95 天前

pnpm 11.2

pnpm 11.2 ships an experimental opt-in into pacquet (the Rust port of pnpm) as the install backend, expands config dependencies to install one level of optionalDependencies (so the esbuild/swc platfor...
评论点赞收藏99 天前

pnpm 11.1

pnpm 11.1 adds a few new commands — pnpm audit signatures, pnpm bugs, and pnpm owner — alongside support for installing from arbitrary named registries (including a built-in alias for the GitHub Packa...
评论点赞收藏108 天前

Pnpm v11 Released

pnpm 11 is here! This release tightens the security defaults introduced throughout the v10 cycle, drops the npm CLI fallback for publishing in favor of a native implementation, replaces the JSON-per-p...
评论点赞收藏120 天前

登录芦苇

登录后关注作者、收藏内容和参与讨论。

热门话题

人工智能12,865 人关注AI 会怎样改变日常工作？产品思考8,243 人关注怎样判断一个产品值得长期做？独立开发5,917 人关注一个人如何持续完成作品？
关于芦苇 · 联系我们 · © 2026 芦苇