pnpm audit --fix: Preserving Reference Overrides

Scritto da Alessio il 06/02/2026

Problem

Running pnpm audit --fix would overwrite reference overrides in package.json, losing manually configured security patches.

Solution

Preserved reference override entries when writing the fixed audit configuration. The fix ensures existing overrides are merged with any new audit fixes rather than replaced.

Result

pnpm audit --fix now respects and preserves manually configured reference overrides.

Commit: pnpm/pnpm@121f64a
PR: #10478