pin command (winget)

The winget pin command allows you to limit the Windows Package Manager from upgrading a package to specific ranges of versions, or it can prevent it from upgrading a package altogether. A pinned package may still upgrade on its own and be upgraded from outside the Windows Package Manager.

Pin Types

WinGet supports three types of package pins:

  • Pinning: The package is excluded from winget upgrade --all but allows winget upgrade <package>. You can use the --include-pinned argument to let winget upgrade --all include pinned packages.

  • Blocking: The package is blocked from winget upgrade --all or winget upgrade <package>, you will have to unpin the package to let WinGet perform an upgrade. The --force option can be used to override the pin's behavior.

  • Gating: The package is pinned to a specific version or version range. You can specify an exact version you want a package to be pinned to or you can utilize the wildcard character * as the last version part to specify a version range. For example, if a package is pinned to version 1.2.*, any version between 1.2.0 to 1.2.x is considered valid. The --force option can be used to override the pin's behavior.

Usage

winget pin <subcommand> <options>

Options

The following options are available.

Option Description
-?, --help Gets additional help on this command.
--wait Prompts the user to press any key before exiting.
--logs,--open-logs Open the default logs location.
--verbose, --verbose-logs Used to override the logging setting and create a verbose log.
--nowarn,--ignore-warnings Suppresses warning outputs.
--disable-interactivity Disable interactive prompts.
--proxy Set a proxy to use for this execution.
--no-proxy Disable the use of proxy for this execution.

Subcommands

The pin command supports the following subcommands.

Subcommand Description
add Add a new pin.
remove Remove a package pin.
list List current pins.
reset Reset pins

add

The add subcommand adds a new pin. This subcommand requires that you specify the exact package to pin. If there is any ambiguity, you will be prompted to further filter the add subcommand to an exact application.

Usage:

winget pin add [[-q] <query>] [<options>]

Arguments

Argument Description
-q,--query The query used to search for an app.

Options

The options allow you to customize adding pins to meet your needs.

Option Description
--id Limits the search to the ID of the application.
--name Limits the search to the name of the application.
--moniker Limits the search to the moniker listed for the application.
--tag Limits the search to the tag listed for the application.
--cmd, --command Limits the search to the command of the application.
-e, --exact Uses the exact string in the query, including checking for case-sensitivity. It will not use the default behavior of a substring.
-v, --version Enables you to specify an exact version to pin. The wildcard * can be used as the last version part. Changes pin behavior to be gating.
-s, --source Restricts the search to the source name provided. Must be followed by the source name.
--header Optional Windows-Package-Manager REST source HTTP header.
--authentication-mode Specify authentication window preference (silent, silentPreferred or interactive).
--authentication-account Specify the account to be used for authentication.
--accept-source-agreements Used to accept the source license agreement, and avoid the prompt.
--force Direct run the command and continue with non security related issues.
--blocking Block from upgrading until the pin is removed, preventing override arguments. Changes pin behavior to be blocking.
--installed Pin a specific installed version
-?, --help Get additional help on this command.
--wait Prompts the user to press any key before exiting.
--logs, --open-logs Open the default logs location.
--verbose, --verbose-logs Used to override the logging setting and create a verbose log.
--nowarn,--ignore-warnings Suppresses warning outputs.
--disable-interactivity Disable interactive prompts.
--proxy Set a proxy to use for this execution.
--no-proxy Disable the use of proxy for this execution.

Examples

The following example adds a pin for an application. Adding this pin will prevent this package from being upgraded when calling winget upgrade --all. Use the --include-pinned argument with winget upgrade --all to include any pinned packages.

winget pin add powertoys

The following example adds a blocking pin for an application using its ID. Adding a blocking pin will prevent this package from being upgraded when calling winget upgrade --all or winget upgrade <package>. You will need to unblock the package to let WinGet perform an upgrade.

winget pin add --id Microsoft.PowerToys --blocking

The following example adds a gating pin for an application using its ID. Adding a gating pin will prevent upgrades that upgrade the package version outside of a specific version or the gated wildcard range.

winget pin add --id Microsoft.PowerToys --version 0.70.*

remove

The remove subcommand removes a pin. This subcommand requires that you specify the exact package pin to remove. If there is any ambiguity, you will be prompted to further filter the remove subcommand to an exact application.

Usage:

winget pin remove [[-q] <query>] [<options>]

Arguments

Argument Description
-q,--query The query used to search for an app.

Options

The options allow you to customize removing pins to meet your needs.

Option Description
--id Limits the search to the ID of the application.
--name Limits the search to the name of the application.
--moniker Limits the search to the moniker listed for the application.
-s, --source Restricts the search to the source name provided. Must be followed by the source name.
--tag Limits the search to the tag listed for the application.
--cmd, --command Limits the search to the command of the application.
-e, --exact Uses the exact string in the query, including checking for case-sensitivity. It will not use the default behavior of a substring.
--header Optional Windows-Package-Manager REST source HTTP header.
--authentication-mode Specify authentication window preference (silent, silentPreferred or interactive).
--authentication-account Specify the account to be used for authentication.
--accept-source-agreements Used to accept the source license agreement, and avoid the prompt.
--installed Pin a specific installed version.
-?, --help Get additional help on this command.
--wait Prompts the user to press any key before exiting.
--logs, --open-logs Open the default logs location.
--verbose, --verbose-logs Used to override the logging setting and create a verbose log.
--nowarn,--ignore-warnings Suppresses warning outputs.
--disable-interactivity Disable interactive prompts.
--proxy Set a proxy to use for this execution.
--no-proxy Disable the use of proxy for this execution.

Examples

The following example removes a pin for an application.

winget pin remove powertoys

The following example removes a pin for an application using its ID.

winget pin remove --id Microsoft.PowerToys

list

The list subcommand lists all current pins.

Usage:

winget pin list [[-q] <query>] [<options>]

Arguments

Argument Description
-q,--query The query used to search for an app.

Options

The options allow you to customize listing pins to meet your needs.

Option Description
--id Limits the search to the ID of the application.
--name Limits the search to the name of the application.
--moniker Limits the search to the moniker listed for the application.
-s, --source Restricts the search to the source name provided. Must be followed by the source name.
--tag Limits the search to the tag listed for the application.
--cmd, --command Limits the search to the command of the application.
-e, --exact Uses the exact string in the query, including checking for case-sensitivity. It will not use the default behavior of a substring.
--header Optional Windows-Package-Manager REST source HTTP header.
--authentication-mode Specify authentication window preference (silent, silentPreferred or interactive).
--authentication-account Specify the account to be used for authentication.
--accept-source-agreements Used to accept the source license agreement, and avoid the prompt.
-?, --help Get additional help on this command.
--wait Prompts the user to press any key before exiting.
--logs, --open-logs Open the default logs location.
--verbose, --verbose-logs Used to override the logging setting and create a verbose log.
--nowarn,--ignore-warnings Suppresses warning outputs.
--disable-interactivity Disable interactive prompts.
--proxy Set a proxy to use for this execution.
--no-proxy Disable the use of proxy for this execution.

Examples

The following example lists all current pins.

winget pin list

The following example lists a specific package pin.

winget pin list --id Microsoft.PowerToys

reset

The reset subcommand resets all pins.

Using this subcommand without the --force argument will show the pins that would be removed.

To reset all pins, include the --force argument.

Usage:

winget pin reset [<options>]

Options

The options allow you to customize reseting pins to meet your needs.

Option Description
--force Direct run the command and continue with non security related issues.
-s, --source Restricts the search to the source name provided. Must be followed by the source name.
-?, --help Get additional help on this command.
--wait Prompts the user to press any key before exiting.
--logs, --open-logs Open the default logs location.
--verbose, --verbose-logs Used to override the logging setting and create a verbose log.
--nowarn,--ignore-warnings Suppresses warning outputs.
--disable-interactivity Disable interactive prompts.
--proxy Set a proxy to use for this execution.
--no-proxy Disable the use of proxy for this execution.

Examples

The following example shows all pins that would be reset.

winget pin reset

The following example resets all existing pins.

winget pin reset --force