30 posts tagged with "release"

pnpm 11.10 为 CI 友好的注册表认证增加了 _auth 设置，新增了 pnpm prefix 和 pnpm issues 命令，并且 pnpm self-update 现在可以安装 pnpm v12（Rust 版本）。它还提高了 pnpm up 的准确性，加快了对忽略简化元数据的注册表的解析速度，并加强了全局包管理、pnpm deploy 和 pnpm pack-app。

🌐 pnpm 11.10 adds the _auth setting for CI-friendly registry authentication, new pnpm prefix and pnpm issues commands, and the ability for pnpm self-update to install pnpm v12 (the Rust port). It also improves pnpm up accuracy, speeds up resolution against registries that ignore abbreviated metadata, and hardens global package management, pnpm deploy, and pnpm pack-app.

pnpm 11.9 为无法发布校验和的注册表计算缺失的 tarball 完整性，添加了 pnpm sbom --exclude-peers，提高了循环锁文件的审计性能，修复了 peer 解析的不确定性，并加强了对 minimumReleaseAge 和 trustPolicy 的排除处理。

🌐 pnpm 11.9 computes missing tarball integrity for registries that cannot publish checksums, adds pnpm sbom --exclude-peers, improves audit performance on cyclic lockfiles, fixes peer-resolution nondeterminism, and tightens exclusion handling for minimumReleaseAge and trustPolicy.

pnpm 11.8 增加了安装的干运行预览、Node.js 包映射生成、更丰富的 SBOM 输出，pnpm view 默认为当前包，并且修复了 pnpm run --no-bail 的退出代码。它还包括一个配置依赖锁文件遍历修复以及许多安装/更新确定性修复。

🌐 pnpm 11.8 adds install dry-run previews, Node.js package map generation, richer SBOM output, pnpm view defaulting to the current package, and correct pnpm run --no-bail exit codes. It also includes a config-dependency lockfile traversal fix and many install/update determinism fixes.

pnpm 11.7 增加了一个用于针对只读包存储安装的 frozenStore 设置，一个用于一次请求发布整个工作区的 --batch 标志，范围特定的认证令牌，以及委托给 pacquet 的完整解析安装。它还强化了锁文件别名的处理，使若干安装路径具有确定性，并包含一些发布和 Windows 修复。

🌐 pnpm 11.7 adds a frozenStore setting for installing against a read-only package store, a --batch flag for publishing a whole workspace in one request, scope-specific auth tokens, and full resolving installs delegated to pacquet. It also hardens lockfile alias handling, makes several install paths deterministic, and ships a number of publish and Windows fixes.

pnpm 11.6 添加了一种无需文件的方式，通过 npm_config_//… 和 pnpm_config_//… 环境变量提供注册表身份验证，提高了默认的网络并发，并且当只缺少 pnpm-lock.yaml 时会跳过完整的重新解析。它还会为可选依赖推断平台字段，因此不会下载非本平台的二进制文件。

🌐 pnpm 11.6 adds a file-free way to supply registry authentication through npm_config_//… and pnpm_config_//… environment variables, raises the default network concurrency, and skips full re-resolution when only pnpm-lock.yaml is missing. It also infers platform fields for optional dependencies so foreign-platform binaries are never downloaded.

pnpm 11.5 添加了一个 hoistingLimits 设置，用于控制在 nodeLinker: hoisted 安装中依赖提升的程度，替换了交互提示库以修复长列表选择中的滚动问题，能够识别信任等级中的阶段发布，并发布了多个安装和 dist-tag 修复。

🌐 pnpm 11.5 adds a hoistingLimits setting for controlling how far dependencies hoist in nodeLinker: hoisted installs, replaces the interactive prompt library to fix scrolling in long choice lists, recognizes staged publishes in the trust scale, and ships several install and dist-tag fixes.

pnpm 11.4 修补了围绕锁文件完整性、凭证范围、git 解析、补丁文件和依赖别名的一系列供应链漏洞，默认将 tar 包完整性不匹配视为严重安装失败（带有范围有限的 --update-checksums 选项可启用），并将 pnpm runtime set 的默认写入位置改为 devEngines.runtime，而不是 engines.runtime。

🌐 pnpm 11.4 closes a cluster of supply-chain holes around lockfile integrity, credential scoping, git resolutions, patch files, and dependency aliases, makes tarball-integrity mismatches a hard install failure by default (with a narrowly-scoped --update-checksums opt-in), and changes pnpm runtime set to write to devEngines.runtime instead of engines.runtime by default.

pnpm 11.3 增加了对 npm 的分阶段发布 (pnpm stage) 的支持、新的 trustLockfile 设置，用于跳过已信任锁文件的供应链验证流程，以及 pnpm pkg、pnpm repo 和 pnpm set-script 的原生实现。它还为 pack / publish 添加了 --skip-manifest-obfuscation 标志，并在大型工作区中减少了 minimumReleaseAge / trustPolicy 验证的内存占用。

🌐 pnpm 11.3 adds support for npm's staged publishing (pnpm stage), the new trustLockfile setting for skipping the supply-chain verification pass on already-trusted lockfiles, and native implementations of pnpm pkg, pnpm repo, and pnpm set-script. It also adds a --skip-manifest-obfuscation flag for pack / publish and cuts the memory footprint of minimumReleaseAge / trustPolicy verification on large workspaces.

pnpm 11.2 提供了一个实验性的可选择加入 pacquet（pnpm 的 Rust 移植版）作为安装后端，扩展了 config dependencies 以安装一层 optionalDependencies（因此 esbuild/swc 平台二进制模式也适用于配置依赖），连接了长期文档化的 pnpm login --scope 标志，并在 pnpm outdated 和 pnpm update --interactive 中显示运行时条目（Node.js、Deno、Bun）。

🌐 pnpm 11.2 ships an experimental opt-in into pacquet (the Rust port of pnpm) as the install backend, expands config dependencies to install one level of optionalDependencies (so the esbuild/swc platform-binary pattern works for config deps too), wires up the long-documented pnpm login --scope flag, and surfaces runtime entries (Node.js, Deno, Bun) in pnpm outdated and pnpm update --interactive.

pnpm 11.1 添加了一些新命令 — pnpm audit signatures、pnpm bugs 和 pnpm owner — 同时支持从任意命名的注册表安装（包括 GitHub Packages npm 注册表的内置别名）、在 CI 中跳过运行时安装的能力以及若干修复。

🌐 pnpm 11.1 adds a few new commands — pnpm audit signatures, pnpm bugs, and pnpm owner — alongside support for installing from arbitrary named registries (including a built-in alias for the GitHub Packages npm registry), the ability to skip runtime installation in CI, and several fixes.