Sourced from pnpm's releases.

pnpm 10.15

Minor Changes

• Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
• Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
• pnpm config get now prints an INI string for an object value #9797.
• pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
• pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

• Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
• When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
• When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
• The standalone exe version of pnpm works with glibc 2.26 again #9734.
• Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

Platinum Sponsors

Gold Sponsors

... (truncated)

Sourced from pnpm's changelog.

10.15.0

Minor Changes

• Added the cleanupUnusedCatalogs configuration. When set to true, pnpm will remove unused catalog entries during installation #9793.
• Automatically load pnpmfiles from config dependencies that are named @*/pnpm-plugin-* #9780.
• pnpm config get now prints an INI string for an object value #9797.
• pnpm config get now accepts property paths (e.g. pnpm config get catalog.react, pnpm config get .catalog.react, pnpm config get 'packageExtensions["@babel/parser"].peerDependencies["@babel/types"]'), and pnpm config set now accepts dot-leading or subscripted keys (e.g. pnpm config set .ignoreScripts true).
• pnpm config get --json now prints a JSON serialization of config value, and pnpm config set --json now parses the input value as JSON.

Patch Changes

• Semi-breaking. When automatically installing missing peer dependencies, prefer versions that are already present in the direct dependencies of the root workspace package #9835.
• When executing the pnpm create command, must verify whether the node version is supported even if a cache already exists #9775.
• When making requests for the non-abbreviated packument, add */* to the Accept header to avoid getting a 406 error on AWS CodeArtifact #9862.
• The standalone exe version of pnpm works with glibc 2.26 again #9734.
• Fix a regression in which pnpm dlx pkg --help doesn't pass --help to pkg #9823.

• 979ce80 chore(release): 10.15.0
• facd765 refactor: always use extensions in relative imports (#9878)
• c89c93d test: use @​jest/globals (#9877)
• 14c78e8 test: use jest.mocked (#9874)
• ba5f447 chore: update registry-mock to v5
• dfea901 chore: use catalogs only in dependencies (#9868)
• dcfb186 chore(release): libs
• af2b391 fix: vulnerabilities
• See full diff in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)