Summary & Key Takeaways ​

• Fixed an issue where optional dependencies could be left without their own required dependencies.
• pnpm setup now appends PNPM_HOME to GitHub Actions environment files for better CI integration.
• Added support for publishConfig.name to publish packages under a different name than their manifest.
• pnpm self-update no longer takes instructions from the project, enhancing security.

Our Commentary ​

It's good to see pnpm continuing to refine its core. The fix for optional dependencies is crucial for reliability, and the publishConfig.name feature is a clever solution for monorepos with naming conflicts. The pnpm self-update hardening is also a smart move for supply chain security.