Packages

yargs-parser

22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed

Upgrading yargs-parser From 16.1.0 to 22.0.0

27 releases in betweenevery note read

Other targets from 16.1.0Clears its advisory18.1.1
  1. 16.1.0yours
  2. 17.0.0major
  3. 2 releases
  4. 18.0.0major
  5. 1 release
  6. 18.1.1security
  7. 2 releases
  8. 19.0.0major
  9. 2 releases
  10. 20.0.0major
  11. 10 releases
  12. 21.0.0major
  13. 3 releases
  14. 22.0.0target
9
changes to make
1
advisory fixed
10
new
30
fixes

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking21.0.0
  • breaking20.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking18.0.0
  • breaking17.0.0
  • breaking17.0.0

Security

Fixes 1 advisory affecting 16.1.0

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.

    18.1.1

Release by release

  1. 22.0.0

    Migration needed26 May 2025
    • breaking

      Yargs is now ESM first

  2. 21.1.1

    4 Aug 20221 fix
    • fixed

      typescript: ignore .cts files during publish (#454) (d69f9c3), closes #452

  3. 21.1.0

    3 Aug 20221 new · 3 fixes
    • new

      Allow the browser build to be imported

    • fixed

      halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled

    • fixed

      Node version check now uses process.versions.node

    • fixed

      Parse options ending with 3+ hyphens

  4. 21.0.1

    27 Feb 20221 fix
    • fixed

      Return deno env object

  5. 21.0.0

    Migration needed16 Nov 20212 fixes
    • breaking

      Drops support for 10

    • fixed

      Esm json import

    • fixed

      Parser should preserve inner quotes

  6. 20.2.9

    20 Jun 20211 fix
    • fixed

      build: fixed automated release pipeline

  7. 20.2.7

    10 Mar 20211 fix
    • fixed

      deno: force relese for Deno

  8. 20.2.6

    22 Feb 20211 fix
    • fixed

      populate--: -- should always be array

2 internal lines (docs, tests, tooling) left out.