Summary & Key Takeaways ​

• pnpm-workspace.yaml can now delegate settings to other YAML files or config dependencies via a new include field.
• lockfile.integrityTarget: tar pins the hash of uncompressed tarballs, preventing lockfile changes from registry recompression.
• pnpm now supports installing from registries serving zstd or gzip compressed uncompressed tars.
• The maxTarballUnpackedSize setting caps the unpacked size of a single package.
• Workspace installs and macOS file linking have received speed improvements.

Our Commentary ​

We appreciate the continued focus on robustness and performance in pnpm. The integrityTarget: tar feature is a smart move for stability, especially with registries changing compression. Splitting workspace settings also feels like a win for larger projects. I'm always a fan of anything that makes package management more predictable.