#1109
Pull Requests/aerospike/aerospike-client-nodejs/#1109

[Snyk] Upgrade yargs from 18.0.0 to 18.2.0

OpenVivekASHubwants to merge intofrom
2 commits1 file changed+1-1

Snyk has created this PR to upgrade yargs from 18.0.0 to 18.2.0.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

  • The recommended version is 2 versions ahead of your current version.

  • The recommended version was released 23 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

Release notes
Package name: yargs
  • 18.2.0 - 2026-09-20

    18.2.0 (2026-09-20)

    Features

    • support creating completions for fish shell (#2568) (34d833a)

    Bug Fixes

    • completion: remove spurious single-quote in zsh loadautofunc detection (#2548) (224e285)
  • 18.1.0 - 2026-07-26

    18.1.0 (2026-07-26)

    Features

    • ignore bun when getting bin name (b77831c)

    Bug Fixes

    • lang: 'count' for de locale (#2476) (971e351)
    • local prototype pollution vulnerability in apply-extends (437f3a4)
    • locale: add Georgian translation (#2474) (086aeaa)
  • 18.0.0 - 2025-05-27

    18.0.0 (2025-05-26)

    ⚠ BREAKING CHANGES

    • command names are not derived from modules passed to command.
    • singleton usage of yargs yargs.foo, yargs().argv, has been removed.
    • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.
    • yargs is now ESM first

    Features

    Bug Fixes

    • addDirectory do not support absolute command dir (#2465) (3a40a78)
    • allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)
    • browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)
    • build: address problems with typescript compilation (#2445) (8d72fb3)
    • coerce should play well with parser configuration (#2308) (8343c66)
    • deps: update dependency yargs-parser to v22 (#2470) (639130d)
    • exit after async handler done (#2313) (e326cde)
    • handle spaces in bash completion (#2452) (83b7788)
    • parser-configuration should work well with generated completion script (#2332) (888db19)
    • propagate Dictionary including undefined in value type (#2393) (2b2f7f5)
    • zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

    Code Refactoring

    • command names are not derived from modules passed to command. (d90af45)
    • singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

    Build System

    • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23. (d90af45)
from yargs GitHub release notes

IMPORTANT

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Activity

4
S
fix: upgrade yargs from 18.0.0 to 18.2.0
52f13c8
VivekASHub16d ago

This is a minor version upgrade for yargs from 18.0.0 to 18.2.0. The updates primarily introduce new features and bug fixes without any documented breaking changes.

Key Changes:

  • v18.2.0: Adds support for generating shell completions for the fish shell.
  • v18.1.0: Includes a security fix for a local prototype pollution vulnerability and adds support for ESM files in commandDir.

No mandatory code modifications are required for this upgrade.

Source: GitHub Releases

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

github-actions[bot]16d ago

Example Run (8.1.2.3)

29 tests  ±0   27 ✅ ±0   1s ⏱️ ±0s  1 suites ±0    2 💤 ±0   1 files   ±0    0 ❌ ±0 

Results for commit 42add0de. ± Comparison against base commit 79241ba5.

:recycle: This comment has been updated with latest results.

S
fix: upgrade yargs from 18.0.0 to 18.2.0
42add0d