Summary
The release ships undici 7.29.1 and addresses failures that occurred when multiple pnpm processes wrote to the same store. It also fixes handling for package, catalog, project and command names that collide with JavaScript built-in object properties.
Why it matters
Package managers sit on the critical path of every JavaScript build, so security and reproducibility fixes have broad CI and developer-workstation consequences.
Related coverage
- GitHub Agentic Workflows expands audit ledgers and threat visibility
- Next.js ships a coordinated security release for supported branches
- LiteLLM makes signed gateway images explicit in its 1.103.2 release