Packages

yargs-parser

22.0.0 · 26 May 2025ISC371M / weekRepositoryHomepagenpmAtom feed

Upgrading yargs-parser From 4.2.1 to 22.0.0

54 releases in betweennotes for 32

Other targets from 4.2.1Clears its advisory5.0.1
16.0.0, 15.0.0, 14.0.0, 13.0.0, 12.0.0, 11.0.0, 10.0.0, 9.0.0, 8.0.0, 7.0.0, 6.0.0, 5.0.0 have no release note on GitHub or in the repository's changelog, so their breaking changes are missing from the counts below.
  1. 4.2.1yours
  2. 5.0.0major
  3. 5.0.1security
  4. 6.0.0major
  5. 1 release
  6. 7.0.0major
  7. 8.0.0major
  8. 1 release
  9. 9.0.0major
  10. 2 releases
  11. 10.0.0major
  12. 1 release
  13. 11.0.0major
  14. 2 releases
  15. 12.0.0major
  16. 13.0.0major
  17. 3 releases
  18. 14.0.0major
  19. 15.0.0major
  20. 3 releases
  21. 16.0.0major
  22. 1 release
  23. 17.0.0major
  24. 2 releases
  25. 18.0.0major
  26. 1 release
  27. 18.1.1security
  28. 2 releases
  29. 19.0.0major
  30. 2 releases
  31. 20.0.0major
  32. 10 releases
  33. 21.0.0major
  34. 3 releases
  35. 22.0.0target
10+
changes to make
1
advisory fixed
11+
new
35+
fixes

Counted from 32 of 54 release notes. Advisories are counted from the advisory database, in full.

Before you upgrade

Tick each one off as you go
  • breaking22.0.0
  • breaking21.0.0
  • breaking20.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking19.0.0
  • breaking18.0.0
  • breaking17.0.0
  • breaking17.0.0
  • breaking16.1.0

Security

Fixes 1 advisory affecting 4.2.1

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team.

    18.1.1

  • security: address GHSA-p9pc-299p-vxgp

    5.0.1

Release by release

  1. 22.0.0

    Migration needed26 May 2025
    • breaking

      Yargs is now ESM first

  2. 21.1.1

    4 Aug 20221 fix
    • fixed

      typescript: ignore .cts files during publish (#454) (d69f9c3), closes #452

  3. 21.1.0

    3 Aug 20221 new · 3 fixes
    • new

      Allow the browser build to be imported

    • fixed

      halt-at-non-option: prevent known args from being parsed when "unknown-options-as-args" is enabled

    • fixed

      Node version check now uses process.versions.node

    • fixed

      Parse options ending with 3+ hyphens

  4. 21.0.1

    27 Feb 20221 fix
    • fixed

      Return deno env object

  5. 21.0.0

    Migration needed16 Nov 20212 fixes
    • breaking

      Drops support for 10

    • fixed

      Esm json import

    • fixed

      Parser should preserve inner quotes

  6. 20.2.9

    20 Jun 20211 fix
    • fixed

      build: fixed automated release pipeline

  7. 20.2.7

    10 Mar 20211 fix
    • fixed

      deno: force relese for Deno

  8. 20.2.6

    22 Feb 20211 fix
    • fixed

      populate--: -- should always be array

1 other line we could not sort, mostly version bumps

  • Revert 16.0.0 CHANGELOG entry

    16.1.0

2 internal lines (docs, tests, tooling) left out.