# pnpm 11.28.5

DevFeed: [pnpm 11.28.5](<https://devfeed.tech/articles/pnpm-11-28-5-65320.md>)

Original publisher: [Read original article](<https://pnpm.io/blog/releases/11.28.5>)

Author: Zoltan Kochan

Published: 2026-10-06T00:00:00Z

Content type: release

Language: en

Sources: [pnpm](<https://devfeed.tech/sources/pnpm-blog.md>)

Topics: [pnpm](<https://devfeed.tech/topics/pnpm.md>), [code security](<https://devfeed.tech/topics/code-security.md>), [npm](<https://devfeed.tech/topics/npm.md>)

Tags: [dependencies](<https://devfeed.tech/tags/dependencies.md>), [git](<https://devfeed.tech/tags/git.md>), [pnpm](<https://devfeed.tech/tags/pnpm.md>), [security](<https://devfeed.tech/tags/security.md>)

## AI overview

pnpm 11.28.5 speeds up reads of cached registry metadata and makes global configuration queries ignore project settings. The release also adds security checks for config and git dependencies, package archives, and files included through symlinks, alongside fixes to dependency resolution, commands, and publishing.

## Source excerpt

This release reads cached registry metadata faster and makes pnpm config get --global ignore project settings. It also carries several security fixes for package archives, git dependencies, and config dependencies.