pnpm Update: Delayed Dependency Updates and Advanced Dependency Finding
2025-09-18
The latest pnpm release introduces two significant features: First, a new `minimumReleaseAge` setting delays the installation of newly released dependencies to mitigate security risks. Second, it adds support for finder functions in `.pnpmfile.cjs` allowing for custom search rules via `pnpm list` or `pnpm why` with the `--find-by` flag, enabling more granular dependency searching; for example, finding packages with a specific React version in their peerDependencies. Bug fixes include resolving deprecation warnings in Node.js 24 and ensuring a non-zero exit code when a process is cancelled with Ctrl-C.
Read more
(pnpm.io)
Development