Don't use ^ for --pin'd overrides

SocketDev · Jan 21, 2025 · ae99d38 · ae99d38
1 parent 987bfcf
commit ae99d38
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/src/commands/optimize.ts b/src/commands/optimize.ts
@@ -717,7 +717,7 @@ async function addOverrides(
           const oldSpec = overrideExists ? overrides[origPkgName] : undefined
           const depAlias = depAliasMap.get(origPkgName)
           const regSpecStartsLike = `${NPM}:${regPkgName}@`
-          let newSpec = `${regSpecStartsLike}^${pin ? version : major}`
+          let newSpec = `${regSpecStartsLike}${pin ? version : `^${major}`}`
           let thisVersion = version
           if (depAlias && type === NPM) {
             // With npm one may not set an override for a package that one directly
@@ -742,7 +742,7 @@ async function addOverrides(
                     : ((await fetchPackageManifest(thisSpec))?.version ??
                       version)
               }
-              newSpec = `${regSpecStartsLike}^${pin ? thisVersion : semver.major(thisVersion)}`
+              newSpec = `${regSpecStartsLike}${pin ? thisVersion : `^${semver.major(thisVersion)}`}`
             } else {
               newSpec = oldSpec
             }