Summary & Key Takeaways ​

• Git dependencies on known hosts now resolve through canonical HTTPS URLs, removing SSH from lockfiles.
• This change eliminates network probing during resolution, preventing transport mismatches across environments.
• pnpm-workspace.yaml no longer silently ignores unrecognized settings; it now reports them as errors or warnings.
• Unrecognized settings suggest closest real names for typos, improving configuration reliability.
• Users can configure Git's URL rewriting globally for private hosted repositories over SSH.

Our Commentary ​

This pnpm 12 release tackles a real pain point with Git dependencies. We've all been there, where a lockfile generated on one machine breaks CI because of an SSH URL. Forcing canonical HTTPS and allowing global Git config for SSH is a smart, pragmatic solution. The stricter workspace config validation is also a welcome change; silent failures are the worst.