Skip to content

minimumReleaseAgeExclude not respected with pnpm dlx #10338

@james-camilleri

Description

@james-camilleri

Verify latest release

  • I verified that the issue exists in the latest pnpm release

Which area(s) of pnpm are affected? (leave empty if unsure)

Dependencies resolver

Reproduction steps

  1. Add a pnpm-workspace.yaml file with a minimumReleaseAge configuration to a repository.
  2. Run pnpm dlx with a dependency version that has been released under the minimum release age. Dependency should fail to install.
  3. Add a minimumReleaseAgeExclude to the workspace config. Attempt to re-install. Dependency will fail to install again, even though the minimum age should be ignored.

Describe the Bug

This has already been described in #10014. The issue was not resolved, and the workarounds listed there either no longer work or are not applicable in some scenarios.

Directly adding the version to the pnpx command results in the same error, and executing the download outside of the pnpm scripts isn't applicable in my use case as I need to execute some auth before installation.

Expected Behavior

If pnpx is respecting the minimumReleaseAge config in the workspace yaml, it should also respect the minimumReleaseAgeExclude.

Which Node.js version are you using?

24.12.0

Which operating systems have you used?

  • macOS
  • Windows
  • Linux

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions