Summary & Key Takeaways ​

• pnpm 12.11.0 now supports installing and running Rust toolchains.
• It links AI agent skills from direct dependencies into project skill directories.
• A new permissions setting allows recording what each dependency may do.
• pnpm approve now reviews both build scripts and agent skills.
• Script output colors are preserved when streamed with --stream.
• Global Rust toolchain management is also supported.

Our Commentary ​

Okay, this is wild. Rust toolchain management in a JavaScript package manager? And then "agent skills" and "permissions"? We're seeing package managers evolve beyond just dependency resolution. The idea of approving what a dependency "may do" feels like a necessary step in a world of increasingly complex, and potentially autonomous, tools. I'm genuinely curious how this "agent skills" concept will play out. It feels like a glimpse into a future where our dev tools are more integrated with AI agents.