DepsGuard

v0.1.35 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 1mo Secrets & Credentials

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

cli cooldown dependencies security npm package-manager

+6 more

pnpm rust software-supply-chain-security supply-chain-attacks supply-chain-security uv

Summary

AI summary

Fixed manager to honor all pnpm‑11 config.yaml keys and removed npmrc recommendation for pnpm >= 11.

Type	Severity	Summary	CVE
Bugfix	Medium	Fix manager to honor all pnpm-11 config.yaml keys and stop recommending .npmrc for pnpm >= 11 Fix manager to honor all pnpm-11 config.yaml keys and stop recommending .npmrc for pnpm >= 11 Source: llm_adapter@2026-06-09 Confidence: high	—

Full changelog

fix(manager): honor all pnpm-11 config.yaml keys; stop recommending .npmrc on pnpm >= 11 by @eran-medan in https://github.com/arnica/depsguard/pull/57

Full Changelog: https://github.com/arnica/depsguard/compare/v0.1.34...v0.1.35

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track DepsGuard

Get notified when new releases ship.

About DepsGuard