#1093

[Snyk] Upgrade yargs from 18.0.0 to 18.1.0

Openmcoberly2wants to merge intofrom

Snyk has created this PR to upgrade yargs from 18.0.0 to 18.1.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 24 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes
Package name: yargs
  • 18.1.0 - 2026-07-26

    18.1.0 (2026-07-26)

    Features

    • ignore bun when getting bin name (b77831c)

    Bug Fixes

    • lang: 'count' for de locale (#2476) (971e351)
    • local prototype pollution vulnerability in apply-extends (437f3a4)
    • locale: add Georgian translation (#2474) (086aeaa)
  • 18.0.0 - 2025-05-27

    18.0.0 (2025-05-26)

    ⚠ BREAKING CHANGES

    • command names are not derived from modules passed to command.
    • singleton usage of yargs yargs.foo, yargs().argv, has been removed.
    • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.
    • yargs is now ESM first

    Features

    Bug Fixes

    • addDirectory do not support absolute command dir (#2465) (3a40a78)
    • allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)
    • browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)
    • build: address problems with typescript compilation (#2445) (8d72fb3)
    • coerce should play well with parser configuration (#2308) (8343c66)
    • deps: update dependency yargs-parser to v22 (#2470) (639130d)
    • exit after async handler done (#2313) (e326cde)
    • handle spaces in bash completion (#2452) (83b7788)
    • parser-configuration should work well with generated completion script (#2332) (888db19)
    • propagate Dictionary including undefined in value type (#2393) (2b2f7f5)
    • zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

    Code Refactoring

    • command names are not derived from modules passed to command. (d90af45)
    • singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

    Build System

    • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23. (d90af45)
from yargs GitHub release notes

IMPORTANT

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Activity

7
mcoberly22mo ago

This is a minor version upgrade for yargs from 18.0.0 to 18.1.0. The release contains bug fixes and minor feature additions with no documented breaking changes.

Changes in v18.1.0:

  • Security Fix: Addresses a local prototype pollution vulnerability in apply-extends. [2]
  • Features: Adds a feature to ignore the bun runtime when determining the binary name. [2]
  • Bug Fixes: Includes fixes for German and Georgian locales. [2]

This upgrade is considered safe and does not require developer action.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.