yargs-parser
22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed
Upgrading yargs-parser From 2.1.0 to 22.0.0
67 releases in betweennotes for 35
Counted from 35 of 67 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking22.0.0
- breaking21.0.0
- breaking20.0.0
- breaking19.0.0
- breaking19.0.0
- breaking19.0.0
- breaking18.0.0
- breaking17.0.0
- breaking17.0.0
- breaking16.1.0
Security
Fixes 1 advisory affecting 2.1.0
- yargs-parser Vulnerable to Prototype Pollutionmoderate · GHSA-p9pc-299p-vxgp
- 18.1.1
__proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.
- 5.0.1
security: address GHSA-p9pc-299p-vxgp
Release by release
- breaking
Yargs is now ESM first
- breaking
- new
Allow the browser build to be imported
- fixed
halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled
- fixed
Node version check now uses process.versions.node
- fixed
Parse options ending with 3+ hyphens
- new
- fixed
Return deno env object
- fixed
- breaking
Drops support for 10
- fixed
Esm json import
- fixed
Parser should preserve inner quotes
- breaking
- fixed
build: fixed automated release pipeline
- fixed
- fixed
deno: force relese for Deno
- fixed
- fixed
populate--: -- should always be array
- fixed
1 other line we could not sort, mostly version bumps
- 16.1.0
Revert 16.0.0 CHANGELOG entry
2 internal lines (docs, tests, tooling) left out.