pnpm 11.9 computes missing tarball integrity for registries that cannot publish checksums, adds pnpm sbom –exclude-peers, improves audit performance on cyclic lockfiles, fixes peer-resolution nondeterminism, and tightens exclusion handling for minimumReleaseAge and trustPolicy.