yargs-parser
22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed
Upgrading yargs-parser From 2.4.0 to 5.0.1
11 releases in betweennotes for 4
5.0.0 has no release note on GitHub or in the repository's changelog, so its breaking changes are missing from the counts below.
Counted from 4 of 11 release notes. Advisories are counted from the advisory database, in full.
Before you upgrade
Tick each one off as you go- breaking4.0.0
Security
Fixes 1 advisory affecting 2.4.0
- yargs-parser Vulnerable to Prototype Pollutionmoderate · GHSA-p9pc-299p-vxgp
- 5.0.1
security: address GHSA-p9pc-299p-vxgp
Release by release
- security
security: address GHSA-p9pc-299p-vxgp
- security
4.1.0 – 5.0.04 releases, no release note
- fixed
Whoops, let's make the assign not change the Object key order
- fixed
- fixed
Lodash.assign was deprecated
- fixed
- breaking
Coerce is no longer applied to individual arguments in an implicit array.
- fixed
Coerce should be applied to the final objects and arrays created
- breaking
2.4.1 – 3.2.03 releases, no release note