Summary & Key Takeaways ​

• pnpm 11.10 introduces a new _auth setting for configuring registry authentication.
• This setting uses a structured, URL-keyed value, improving security and clarity.
• It addresses limitations with environment variables in CI/CD, especially for GitHub Actions.
• The _auth value is honored only from global config or environment variables, not project files.
• New issues command opens the package's bug tracker URL in the browser.
• New prefix command prints the current package prefix directory.

Our Commentary ​

This _auth change is a quiet but significant win for anyone wrestling with CI/CD secrets. I've definitely hit those silent environment variable drops before, and it's infuriating. The explicit URL-keyed structure feels much more robust. It's a good example of a build tool focusing on developer experience beyond just speed. The new commands are nice quality-of-life additions, but the auth fix is where the real value is. We appreciate the attention to detail here.