Packages

yargs-parser

22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed

Upgrading yargs-parser From 3.2.0 to 22.0.0

60 releases in betweennotes for 35

Other targets from 3.2.0Clears its advisory5.0.1
16.0.0, 15.0.0, 14.0.0, 13.0.0, 12.0.0, 11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 3.2.0yours
  2. 4.0.0major
  3. 5 releases
  4. 5.0.0major
  5. 5.0.1security
  6. 6.0.0major
  7. 1 release
  8. 7.0.0major
  9. 8.0.0major
  10. 1 release
  11. 9.0.0major
  12. 2 releases
  13. 10.0.0major
  14. 1 release
  15. 11.0.0major
  16. 2 releases
  17. 12.0.0major
  18. 13.0.0major
  19. 3 releases
  20. 14.0.0major
  21. 15.0.0major
  22. 3 releases
  23. 16.0.0major
  24. 1 release
  25. 17.0.0major
  26. 2 releases
  27. 18.0.0major
  28. 1 release
  29. 18.1.1security
  30. 2 releases
  31. 19.0.0major
  32. 2 releases
  33. 20.0.0major
  34. 10 releases
  35. 21.0.0major
  36. 3 releases
  37. 22.0.0target
11+
changes to make
1
advisory fixed
11+
new
38+
fixes

Counted from 35 of 60 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking21.0.0
  • breaking20.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking18.0.0
  • breaking17.0.0
  • breaking17.0.0
  • breaking16.1.0

Security

Fixes 1 advisory affecting 3.2.0

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.

    18.1.1

  • security: address GHSA-p9pc-299p-vxgp

    5.0.1

Release by release

  1. 22.0.0

    Migration needed26 May 2025
    • breaking

      Yargs is now ESM first

  2. 21.1.1

    4 Aug 20221 fix
    • fixed

      typescript: ignore .cts files during publish (#454) (d69f9c3), closes #452

  3. 21.1.0

    3 Aug 20221 new · 3 fixes
    • new

      Allow the browser build to be imported

    • fixed

      halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled

    • fixed

      Node version check now uses process.versions.node

    • fixed

      Parse options ending with 3+ hyphens

  4. 21.0.1

    27 Feb 20221 fix
    • fixed

      Return deno env object

  5. 21.0.0

    Migration needed16 Nov 20212 fixes
    • breaking

      Drops support for 10

    • fixed

      Esm json import

    • fixed

      Parser should preserve inner quotes

  6. 20.2.9

    20 Jun 20211 fix
    • fixed

      build: fixed automated release pipeline

  7. 20.2.7

    10 Mar 20211 fix
    • fixed

      deno: force relese for Deno

  8. 20.2.6

    22 Feb 20211 fix
    • fixed

      populate--: -- should always be array

1 other line we could not sort, mostly version bumps

  • Revert 16.0.0 CHANGELOG entry

    16.1.0

2 internal lines (docs, tests, tooling) left out.