PNpM CLI

Minor Changes

• New command added: pnpm audit --fix. This command adds overrides to package.json that force versions of packages that do not have the vulnerabilities #3598.

• Own implementation of pnpm pack is added. It is not passed through to npm pack anymore #3608.

• When pnpm add pkg is executed in a workspace and pkg is already in the dependencies of one of the workspace projects, pnpm uses that already present version range to add the new dependency #3614.

• New package.json setting added: publishConfig.executableFiles. By default, for portability reasons, no files except those listed in the bin field will be marked as executable in the resulting package archive. The executableFiles field lets you declare additional fields that must have the executable flag (+x) set even if they aren't directly accessible through the bin field.

  {
    "publishConfig": {
      "executableFiles": [
        "./dist/shim.js",
      ]
    }
  }
  

Patch Changes

• Don't collapse warnings when --reporter append-only is used.
• Print a warning when a lifecycle script is skipped #3619.