- pnpm publish now validates CI token audience, skipping mismatched tokens with a warning (security)
- Fixed optional peer dependency handling so they are no longer dropped and install/dedupe correctly link them, plus related overrides fixes
- Restored empty http/httpsProxy handling, improved config reading, preserved lockfile fields, fixed Windows EPERM on hoisted links, and removed stray escape codes from output
