Summary & Key Takeaways ​

• pnpm login and adduser now record tokens in the global config.yaml under _auth, with scope routing.
• Verified remote build artifacts are persisted in the shared store with signed origin metadata.
• Later installs reverify artifacts against current trust, policy, platform, and source before reuse.
• Completed recursive tasks are now persisted, allowing --resume-from to skip passed work.
• Workspace install, rebuild, pack, publish, stage, and lifecycle work starts as soon as dependencies finish.
• Per-task concurrency limits can be set in pnpm-workspace.yaml for workspace tasks.
• The sideEffectsCache now declares how a package's build output is reused, saved, and shared remotely.

Our Commentary ​

pnpm keeps pushing the envelope on package management, and this release is no exception. The verified remote build artifacts and per-task concurrency are genuinely exciting for large monorepos. We've all been there, waiting for a massive workspace build to finish, and these features promise some real relief. I'm particularly intrigued by the sideEffectsCache declaration; it feels like a step towards truly intelligent build systems. It's a solid release, making the developer experience smoother and more robust.