pnpm update does not skip deprecated versions #15128

Verify latest release

• I verified that the issue exists in the latest pnpm release

pnpm version

No response

Which area(s) of pnpm are affected? (leave empty if unsure)

Dependencies resolver

Link to the code that reproduces this issue or a replay of the bug

No response

Reproduction steps

1. Create this package.json in an empty folder:

{
  "dependencies": {
    "@orpc/client": "^2.0.0-beta.30"
  }
}

2. Then run pnpm update.

Notice that @orpc/client has a deprecated 2.0.0 version (see https://npmx.dev/package/@orpc/client/v/2.0.0).

Describe the Bug

pnpm update updates to a deprecated version.

Expected Behavior

Ignores deprecated versions and updates to the latest semver-compatible version (e.g. ^2.0.0-beta.37), while respecting minimumReleaseAge.

Which Node.js version are you using?

26.9.0

Which operating systems have you used?

• macOS
• Windows
• Linux

If your OS is a Linux based, which one it is? (Include the version if relevant)

No response