pnpm - Browse /v11.17.0 at SourceForge.net

The interactive file manager requires Javascript. Please enable it or use sftp or scp.
You may still browse the files here.

Name	Modified	Size	InfoDownloads / Week
Parent folder
pnpm-linux-arm64-musl.tar.gz	2026-07-23	53.5 MB	0
pnpm-linux-arm64.tar.gz	2026-07-23	51.2 MB	0
pnpm-linux-x64.tar.gz	2026-07-23	51.0 MB	3
pnpm-win32-arm64.zip	2026-07-23	36.8 MB	6
source-maps.tgz	2026-07-23	5.8 MB	0
pnpm-darwin-arm64.tar.gz	2026-07-23	48.0 MB	0
pnpm-linux-x64-musl.tar.gz	2026-07-23	52.9 MB	0
pnpm-win32-x64.zip	2026-07-23	40.8 MB	0
pnpm 11.17 source code.tar.gz	2026-07-23	7.3 MB	0
pnpm 11.17 source code.zip	2026-07-23	10.1 MB	1
README.md	2026-07-23	7.5 kB	0
Totals: 11 Items		357.5 MB	10

Minor Changes

Added a new setting, update.githubActionsServer, for specifying the base URL of the GitHub server that hosts the repositories of the GitHub Actions referenced by the workflow files (for example, a GitHub Enterprise Server). When the setting is not defined, the URL is read from the GITHUB_SERVER_URL environment variable, falling back to https://github.com. The URL must use the https:// or http:// protocol #13220.

pnpm outdated and pnpm update no longer fail when the refs of a GitHub Action's repository cannot be read (for example, when the action's repository is private or hosted on a different GitHub server). Such actions are now skipped with a warning.

Setting update.githubActions to false now makes pnpm outdated and the interactive pnpm update skip GitHub Actions dependencies.

Patch Changes

The token poll for web-based authentication no longer reads the body of non-OK or still-pending (HTTP 202) responses, and caps the token response body it does read at 64 KiB, so a malicious or compromised registry cannot exhaust memory through the poll [#12721].
Fixed catalog: references in dependencies and overrides failing to resolve when installing through a pnpr server, which errored with "No catalog entry '<name>' was found for catalog 'default'." even though the catalog entry existed. Also fixed a crash on Windows when installing a nested workspace member (e.g. packages/foo) through a pnpr server #13232.
Republished every package: the tarballs published by the v11.13.1 through v11.16.0 releases were missing most of their compiled files due to a packing bug #13164.
Revert script ordering change for pnpm run --sequential /regex/
Support the from-git argument in the pnpm version command.
When the authentication URL cannot be rendered as a QR code (for example when it exceeds the maximum QR data capacity), web-based login now displays the URL alone with a warning instead of aborting authentication [#12721].