The last several times I’ve updated filesystem, .pacnew files were created for /etc/passwd, /etc/shadow, /etc/group, and /etc/gshadow. My default approach for merging .pacnew files is to use vimdiff to edit the original and new files simultaneously. Unfortunately, this doesn’t work very well for /etc/passwd and friends because they are databases, not configuration files.