Repository navigation
lockfile: false ignored when devEngines.packageManager.onFail: download #14728
Description
Verify latest release
- I verified that the issue exists in the latest pnpm release
pnpm version
12.4.0
Which area(s) of pnpm are affected? (leave empty if unsure)
Lockfile
Link to the code that reproduces this issue or a replay of the bug
No response
Reproduction steps
- Set
devEngines.packageManager.onFail: downloadinpackage.json:
"packageManager": {
"name": "pnpm",
"version": "12.4.0",
"onFail": "download"
}
},
- Set
lockfile: falseinpnpm-workspace.yaml. - Run
pnpm i
Describe the Bug
lockfile (i.e. pnpm-lock.yaml) is created even though we instructed pnpm not to create a lockfile.
I even tried running pnpm i --no-lockfile, it still creates a lockfile.
If you set onFail: ignore, lockfile isn't created, so it seems to be related to onFail: download.
Expected Behavior
No lockfile should be created when lockfile: false is specified or --no-lockfile is used.
Which Node.js version are you using?
v24.14.0
Which operating systems have you used?
- macOS
- Windows
- Linux
If your OS is a Linux based, which one it is? (Include the version if relevant)
No response
Reacted by Andreas Lind
Activity
devtechedge commentedon Sep 9, 2026
Looking into this — will dig into why onFail: download bypasses lockfile: false.
fix(cli): honor lockfile:false with onFail download (pnpm#14753)
paymand commentedon Sep 11, 2026
@devtechedge is this released in 12.4.1? because I can still reproduce this issue in 12.4.1.
devtechedge commentedon Sep 11, 2026
Hi @paymand, you're right, the fix is not in 12.4.1. PR #14753 was merged into
mainon Sep 10, but it landed after thev12.4.1release was cut, so 12.4.1 still has the old behavior. It should be included in the next release (12.4.2 or later).Could you verify once that's out? If it's still reproducible on the next release, I'll dig back in.
fix(cli): honor lockfile:false with onFail download (pnpm#14753)
chore(deps): update pnpm to v12.4.1
chore(deps): update pnpm to v12.4.1
chore(deps): update pnpm to v12.4.1
fix(cli): honor lockfile:false with onFail download (pnpm#14753)
paymand commentedon Sep 28, 2026
@devtechedge I can confirm that the lockfile isn't created anymore when I have
lockfile: falsein mypnpm-workspace.yaml👍