Jason Paulos 15549a9445 feat(audit): add fix update mode (#10341) ...

* feat(audit): add fix update mode

Add the ability to fix vulnerabilities by updating packages in the
lockfile instead of adding overrides.

* revert: remove audit-registry parameter

* fix: properly invoke audit command recursively on workspace

* fix: negative weight version priority & top-level pinned dep updating

* refactor: apply packageVulnerabilityAudit version preferences earlier

* chore: update changeset

* fix: vulnerability penalties are greater than direct dep weight

* test: use nock on mock registry directly

* fix: exit with 1 if it can't resolve all vulnerabilities to match npm

* fix: properly update workspace top-level pinned vulnerable dependencies

* fix: update lockfile

* fix: update vulnerabilities in catalogs

* chore: sync pnpm-lock.yaml with main

2026-03-12 21:42:49 +01:00

..

bun-resolver

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00

default-resolver

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00

deno-resolver

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00

git-resolver

chore: update zkochan packages to latest versions (#10930)

2026-03-11 13:47:46 +01:00

jsr-specifier-parser

feat!: drop Node.js 22.12 support

2026-02-18 14:54:09 +01:00

local-resolver

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00

npm-resolver

feat(audit): add fix update mode (#10341)

2026-03-12 21:42:49 +01:00

resolver-base

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00

tarball-resolver

build: enable @typescript-eslint/no-import-type-side-effects (#10630)

2026-03-08 00:02:48 +01:00