pnpm 10.22

Added support for excluding packages from trust policy and overriding the engines field on publish.

Minor Changes

Trust policy exclusions

Added support for trustPolicyExclude.

You can now list one or more specific packages or versions that pnpm should allow to install, even if those packages don't satisfy the trust policy requirement. For example:

trustPolicy: no-downgrade
trustPolicyExclude:
  - [email protected]
  - [email protected] || 5.102.1

Related issue: #10164

Override engines field on publish

Allow to override the engines field on publish by the publishConfig.engines field.

This allows you to specify different engine requirements for your published package than what you use during development.

Patch Changes

• Don't crash when two processes of pnpm are hardlinking the contents of a directory to the same destination simultaneously #10179.