pnpm 12.11.0 → 12.11.2

package/CHANGELOG.md

@@ -1,5 +1,39 @@
 # pnpm
 
+## 12.11.2
+
+This release fixes `--workspace-concurrency=Infinity`, filters set by an `updateConfig` hook, and store fetches with `enable-modules-dir=false`.
+
+### Patch Changes
+
+- `--workspace-concurrency=Infinity` now runs workspace projects with no concurrency limit. It used to fail with `invalid digit found in string` [#16793](https://github.com/pnpm/pnpm/issues/16793).
+
+- `pnpm install` and other recursive commands now apply the `filter` and `filterProd` that an `updateConfig` hook sets. They used to run on every workspace project [#16792](https://github.com/pnpm/pnpm/issues/16792).
+
+- `enable-modules-dir=false` now also fetches the packages an install reuses from an existing lockfile, so the store holds every package the lockfile lists.
+
+## 12.11.1
+
+This release fixes two ways `pnpm install` could fail, runs tools of any Rust release through `pnx`, and treats `registry.npmjs.com` as an alias of the npm registry.
+
+### Patch Changes
+
+- `pnpm install` no longer fails when `packageManager` pins the pnpm version that is already running and the registry does not publish that version. pnpm warns and continues. A registry mirror that has not synced a release no longer blocks the commands of a project pinned to it.
+
+- `pnpm install` no longer fails with `ERR_PNPM_CMD_SHIM_CHMOD` when `node_modules/.bin` holds a shim that another user created, if everyone can already execute it and it is not world-writable. This happens when several users share one checkout.
+
+- `enable-modules-dir=false` (`enableModulesDir: false` through the Node.js addon) fetches the registry packages the host can install into the store again, as pnpm v10 did, while still writing nothing under `node_modules`. The setting exists for a `node_modules` that something else mounts from the store, such as a FUSE daemon, and that consumer no longer has to download each package on first access. A plain `--lockfile-only` run still fetches nothing.
+
+- `pnpm pack` and `pnpm publish` no longer put `.npmignore` and `.gitignore` files in the tarball. A `files` entry that names one still ships it.
+
+- pnpm now treats `https://registry.npmjs.com/` as an alias of `https://registry.npmjs.org/`. Registry requests, credentials, and trusted publishing use the canonical hostname.
+
+- `pnx --package=rust@<channel> <tool>` runs a tool of that Rust release, for example `pnx --package=rust@nightly-2026-01-01 cargo build`. pnpm installs the release with the components and targets from `rust-toolchain.toml` and the target of each `--target` argument.
+
+- `pnpm install` now links agent skills for more coding agents. It detects the agent from `ANTIGRAVITY_AGENT`, `COPILOT_AGENT`, `COPILOT_CLI`, `CODEX_THREAD_ID`, `CODEX_SANDBOX`, `AI_AGENT`, and `CLAUDE_CODE` [pnpm/tasks#116](https://github.com/pnpm/tasks/issues/116).
+
+- When the registry rejects `pnpm stage publish`, the error message now starts with "Failed to stage package".
+
 ## 12.11.0
 
 This release adds Rust toolchain management, links the agent skills that dependencies ship, adds the `permissions` setting, and keeps the colors of streamed script output.

package/dist/node_modules/.pnpm-workspace-state-v1.json

@@ -1,9 +1,9 @@
 {
-  "lastValidatedTimestamp": 1791526268951,
+  "lastValidatedTimestamp": 1791563620568,
   "projects": {
     "/home/runner/_work/pnpm/pnpm/pnpm/npm/pnpm/temp-deploy": {
       "name": "pacquet",
-      "version": "12.11.0",
+      "version": "12.11.2",
       "hasModulesDir": true
     }
   },
@@ -207,7 +207,7 @@
         "path-name": "^1.0.0",
         "path-temp": "^3.0.0",
         "pidtree": "^1.0.0",
-        "playwright-core": "^1.63.0",
+        "playwright-core": "^1.64.0",
         "preferred-pm": "^5.0.1",
         "pretty-bytes": "^7.2.0",
         "pretty-ms": "^9.3.1",
@@ -284,6 +284,7 @@
     "dedupeInjectedDeps": false,
     "dedupePeerDependents": false,
     "dedupePeers": false,
+    "autoDedupe": true,
     "dev": false,
     "excludeLinksFromLockfile": false,
     "hoistPattern": [
@@ -292,6 +293,7 @@
     "hoistWorkspacePackages": true,
     "injectWorkspacePackages": false,
     "linkWorkspacePackages": false,
+    "lockfileIncludeResolutionSettings": true,
     "minimumReleaseAge": 1440,
     "minimumReleaseAgeExclude": [
       "@pnpm/*",

package/package.json

@@ -9,7 +9,7 @@
       "./dist/node_modules/node-gyp/gyp/gyp"
     ]
   },
-  "version": "12.11.0",
+  "version": "12.11.2",
   "description": "Fast, disk space efficient package manager",
   "keywords": [
     "pnpm",
@@ -46,20 +46,20 @@
     "THIRD-PARTY-NOTICES.md"
   ],
   "optionalDependencies": {
-    "@pnpm/exe.win32-x64": "12.11.0",
-    "@pnpm/exe.win32-arm64": "12.11.0",
-    "@pnpm/exe.darwin-x64": "12.11.0",
-    "@pnpm/exe.darwin-arm64": "12.11.0",
-    "@pnpm/exe.linux-x64": "12.11.0",
-    "@pnpm/exe.linux-arm64": "12.11.0",
-    "@pnpm/exe.linux-riscv64": "12.11.0",
-    "@pnpm/exe.linux-ppc64": "12.11.0",
-    "@pnpm/exe.linux-s390x": "12.11.0",
-    "@pnpm/exe.linux-x64-musl": "12.11.0",
-    "@pnpm/exe.linux-arm64-musl": "12.11.0",
-    "@pnpm/exe.freebsd-x64": "12.11.0",
-    "@pnpm/exe.android-arm64": "12.11.0",
-    "@pnpm/exe.android-x64": "12.11.0"
+    "@pnpm/exe.win32-x64": "12.11.2",
+    "@pnpm/exe.win32-arm64": "12.11.2",
+    "@pnpm/exe.darwin-x64": "12.11.2",
+    "@pnpm/exe.darwin-arm64": "12.11.2",
+    "@pnpm/exe.linux-x64": "12.11.2",
+    "@pnpm/exe.linux-arm64": "12.11.2",
+    "@pnpm/exe.linux-riscv64": "12.11.2",
+    "@pnpm/exe.linux-ppc64": "12.11.2",
+    "@pnpm/exe.linux-s390x": "12.11.2",
+    "@pnpm/exe.linux-x64-musl": "12.11.2",
+    "@pnpm/exe.linux-arm64-musl": "12.11.2",
+    "@pnpm/exe.freebsd-x64": "12.11.2",
+    "@pnpm/exe.android-arm64": "12.11.2",
+    "@pnpm/exe.android-x64": "12.11.2"
   },
   "scripts": {
     "preinstall": "node install.js",