Summary & Key Takeaways ​

• A new update.githubActionsServer setting allows specifying a custom GitHub server URL for actions.
• pnpm outdated and pnpm update now gracefully skip unreadable GitHub Action repositories with a warning.
• A security fix prevents memory exhaustion during web-based authentication token polling.
• Critical bug fixes address issues with catalog: references and a packing bug that affected previous releases.
• Web-based login now displays the URL with a warning if a QR code cannot be rendered.

Our Commentary ​

This pnpm 11.17 release feels like a solid maintenance update. The GitHub Actions integration improvements are a nice touch for enterprise users or those with complex CI setups. But honestly, the most important thing here is that packing bug fix. Missing compiled files in tarballs? That's a nightmare scenario. We're glad they caught and fixed it. It's a good reminder that even mature tools can have these kinds of issues, and vigilance is key.