Packages

yargs-parser

22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed

Upgrading yargs-parser From 2.0.0 to 22.0.0

68 releases in betweennotes for 35

Other targets from 2.0.0Newest 2.x2.4.1Clears its advisory5.0.1
16.0.0, 15.0.0, 14.0.0, 13.0.0, 12.0.0, 11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 2.0.0yours
  2. 8 releases
  3. 4.0.0major
  4. 5 releases
  5. 5.0.0major
  6. 5.0.1security
  7. 6.0.0major
  8. 1 release
  9. 7.0.0major
  10. 8.0.0major
  11. 1 release
  12. 9.0.0major
  13. 2 releases
  14. 10.0.0major
  15. 1 release
  16. 11.0.0major
  17. 2 releases
  18. 12.0.0major
  19. 13.0.0major
  20. 3 releases
  21. 14.0.0major
  22. 15.0.0major
  23. 3 releases
  24. 16.0.0major
  25. 1 release
  26. 17.0.0major
  27. 2 releases
  28. 18.0.0major
  29. 1 release
  30. 18.1.1security
  31. 2 releases
  32. 19.0.0major
  33. 2 releases
  34. 20.0.0major
  35. 10 releases
  36. 21.0.0major
  37. 3 releases
  38. 22.0.0target
11+
changes to make
1
advisory fixed
11+
new
38+
fixes

Counted from 35 of 68 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking21.0.0
  • breaking20.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking18.0.0
  • breaking17.0.0
  • breaking17.0.0
  • breaking16.1.0

Security

Fixes 1 advisory affecting 2.0.0

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.

    18.1.1

  • security: address GHSA-p9pc-299p-vxgp

    5.0.1

Release by release

  1. 22.0.0

    Migration needed26 May 2025
    • breaking

      Yargs is now ESM first

  2. 21.1.1

    4 Aug 20221 fix
    • fixed

      typescript: ignore .cts files during publish (#454) (d69f9c3), closes #452

  3. 21.1.0

    3 Aug 20221 new · 3 fixes
    • new

      Allow the browser build to be imported

    • fixed

      halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled

    • fixed

      Node version check now uses process.versions.node

    • fixed

      Parse options ending with 3+ hyphens

  4. 21.0.1

    27 Feb 20221 fix
    • fixed

      Return deno env object

  5. 21.0.0

    Migration needed16 Nov 20212 fixes
    • breaking

      Drops support for 10

    • fixed

      Esm json import

    • fixed

      Parser should preserve inner quotes

  6. 20.2.9

    20 Jun 20211 fix
    • fixed

      build: fixed automated release pipeline

  7. 20.2.7

    10 Mar 20211 fix
    • fixed

      deno: force relese for Deno

  8. 20.2.6

    22 Feb 20211 fix
    • fixed

      populate--: -- should always be array

1 other line we could not sort, mostly version bumps

  • Revert 16.0.0 CHANGELOG entry

    16.1.0

2 internal lines (docs, tests, tooling) left out.