yargs-parser
22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed
Upgrading yargs-parser From 15.0.3 to 18.1.1
8 releases in betweennotes for 7
- 4+
- changes to make
- 0
- advisories fixed
- 6+
- new
- 5+
- fixes
Counted from 7 of 8 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking18.0.0
- breaking17.0.0
- breaking17.0.0
- breaking16.1.0
Security
- 18.1.1
__proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.
Release by release
- new
Introduce single-digit boolean aliases
- new
- breaking
The narg count is now enforced when parsing arrays.
- new
NaN can now be provided as a value for nargs, indicating "at least" one value is expected for array
- breaking
- new
Introduce greedy-arrays config, for specifying whether arrays consume multiple positionals
- new
- fixed
Normalized keys were not enumerable
- fixed
- breaking
This reverts parsing behavior of booleans to that of yargs@14
- breaking
Objects used during parsing are now created with a null prototype. There may be some scenarios where this change in behavior leaks externally.
- new
Boolean arguments will not be collected into an implicit array
- new
Introduce nargs-eats-options config option
- breaking
- breaking
Populate error if incompatible narg/count or array/count options are used
- new
Options that have had their default value used are now tracked
- breaking
16.0.0no release note
1 other line we could not sort, mostly version bumps
- 16.1.0
Revert 16.0.0 CHANGELOG entry