博客 | pnpm

pnpm 10.15

2025年8月19日 · 一分钟阅读

pnpm 的首席维护者

Minor Changes

New setting for catalogs

Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.

Config dependency improvement

pnpm will now automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.

Changes to the config get/set commands

pnpm config get now prints an INI string for an object value #9797.

pnpm config get now accepts property paths.

示例：

pnpm config get catalog.react
pnpm config get .catalog.react
pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'

pnpm config set now accepts dot-leading or subscripted keys.

示例：

pnpm config set .ignoreScripts true

pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
The standalone exe version of pnpm works with glibc 2.26 again #9734.
Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

pnpm 10.14

2025年7月31日 · 一分钟阅读

Zoltan Kochan

pnpm 的首席维护者

增加了对 JavaScript 运行时安装的支持

在devEngines.runtime (在 package.json中) 中声明Node.js, Deno 或 Bun ，并让pnpm 自动下载并固定它。

用法示例：

{
  "devEngines": {
    "runtime": {
      "name": "node",
      "version": "^24.4.0",
      "onFail": "download" // we only support the "download" value for now
    }
  }
}

工作原理：

pnpm install 将您指定的范围解析为最新的匹配运行时版本。
精确的版本（和校验和）保存在锁文件（lockfile）中。
脚本使用本地运行时，确保跨环境的一致性。

为什么这样更好：

此新设置也支持 Deno 和 Bun（vs 仅支持 Node 的设置“useNodeVersion”和“executionEnv.nodeVersion”）
支持版本范围（不仅仅是固定版本）。
解析后的版本与完整性校验和一起存储在 pnpm 锁文件中，以便将来验证 Node.js 内容的有效性。
它可以在任何工作区项目上使用 (就像 executionEnv.nodeVersion)。因此，工作区中的不同项目可以使用不同的运行时。
目前，“devEngines.runtime”设置将在本地安装运行时，我们将在 pnpm 的未来版本中通过在计算机上使用共享位置来改进它。

其他新功能

Added --cpu, --libc, and --os to pnpm install, pnpm add, and pnpm dlx to customize supportedArchitectures via the CLI #7510.

Bug 修复

Fix a bug in which pnpm add downloads packages whose libc differ from pnpm.supportedArchitectures.libc.
The integrities of the downloaded Node.js artifacts are verified #9750.
Allow dlx to parse CLI flags and options between the dlx command and the command to run or between the dlx command and -- #9719.
pnpm install --prod should removing hoisted dev dependencies #9782.
Fix an edge case bug causing local tarballs to not re-link into the virtual store. This bug would happen when changing the contents of the tarball without renaming the file and running a filtered install.
Fix a bug causing pnpm install to incorrectly assume the lockfile is up to date after changing a local tarball that has peers dependencies.