Packages

yargs-parser

22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed

Upgrading yargs-parser From 4.2.0 to 22.0.0

55 releases in betweennotes for 32

Other targets from 4.2.0Newest 4.x4.2.1Clears its advisory5.0.1
16.0.0, 15.0.0, 14.0.0, 13.0.0, 12.0.0, 11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 4.2.0yours
  2. 1 release
  3. 5.0.0major
  4. 5.0.1security
  5. 6.0.0major
  6. 1 release
  7. 7.0.0major
  8. 8.0.0major
  9. 1 release
  10. 9.0.0major
  11. 2 releases
  12. 10.0.0major
  13. 1 release
  14. 11.0.0major
  15. 2 releases
  16. 12.0.0major
  17. 13.0.0major
  18. 3 releases
  19. 14.0.0major
  20. 15.0.0major
  21. 3 releases
  22. 16.0.0major
  23. 1 release
  24. 17.0.0major
  25. 2 releases
  26. 18.0.0major
  27. 1 release
  28. 18.1.1security
  29. 2 releases
  30. 19.0.0major
  31. 2 releases
  32. 20.0.0major
  33. 10 releases
  34. 21.0.0major
  35. 3 releases
  36. 22.0.0target
10+
changes to make
1
advisory fixed
11+
new
35+
fixes

Counted from 32 of 55 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking21.0.0
  • breaking20.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking18.0.0
  • breaking17.0.0
  • breaking17.0.0
  • breaking16.1.0

Security

Fixes 1 advisory affecting 4.2.0

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.

    18.1.1

  • security: address GHSA-p9pc-299p-vxgp

    5.0.1

Release by release

  1. 22.0.0

    Migration needed26 May 2025
    • breaking

      Yargs is now ESM first

  2. 21.1.1

    4 Aug 20221 fix
    • fixed

      typescript: ignore .cts files during publish (#454) (d69f9c3), closes #452

  3. 21.1.0

    3 Aug 20221 new · 3 fixes
    • new

      Allow the browser build to be imported

    • fixed

      halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled

    • fixed

      Node version check now uses process.versions.node

    • fixed

      Parse options ending with 3+ hyphens

  4. 21.0.1

    27 Feb 20221 fix
    • fixed

      Return deno env object

  5. 21.0.0

    Migration needed16 Nov 20212 fixes
    • breaking

      Drops support for 10

    • fixed

      Esm json import

    • fixed

      Parser should preserve inner quotes

  6. 20.2.9

    20 Jun 20211 fix
    • fixed

      build: fixed automated release pipeline

  7. 20.2.7

    10 Mar 20211 fix
    • fixed

      deno: force relese for Deno

  8. 20.2.6

    22 Feb 20211 fix
    • fixed

      populate--: -- should always be array

1 other line we could not sort, mostly version bumps

  • Revert 16.0.0 CHANGELOG entry

    16.1.0

2 internal lines (docs, tests, tooling) left out.