• Apps with a pnpm-lock.yaml that don't declare a pnpm version now install pnpm 12.x instead of latest. (#1820)
• Disabled npm audit and funding notices during builds using npm's global config. These can still be overridden via a project .npmrc or by setting the npm_config_audit/npm_config_fund config vars. (#1819)