Summary & Key Takeaways ​

• Adds a --dry-run option to pnpm install for previewing changes without disk writes.
• Improves pnpm run --no-bail exit code consistency for failed scripts.
• Supports generating Node.js package maps at node_modules/.package-map.json.
• Enhances SBOM generation by marking devDependencies as "excluded" scope.
• Introduces per-package SBOM generation with --out and --split flags.

Our Commentary ​

The --dry-run for pnpm install is a long-awaited feature that will save so much time and anxiety. We've all been there, wondering what an install will actually do. The SBOM improvements are also a big win for supply chain security, which is becoming increasingly critical.