yargs-parser
22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed
Upgrading yargs-parser From 17.0.0 to 18.1.1
5 releases in betweenevery note read
Before you upgrade
Tick each one off as you go- breaking18.0.0
Security
Fixes 1 advisory affecting 17.0.0
- yargs-parser Vulnerable to Prototype Pollutionmoderate · GHSA-p9pc-299p-vxgp
- 18.1.1
__proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.
Release by release
- new
Introduce single-digit boolean aliases
- new
- breaking
The narg count is now enforced when parsing arrays.
- new
NaN can now be provided as a value for nargs, indicating "at least" one value is expected for array
- breaking
- new
Introduce greedy-arrays config, for specifying whether arrays consume multiple positionals
- new
- fixed
Normalized keys were not enumerable
- fixed