search

lirantal / lockfile-lint

Lint an npm or yarn lockfile to analyze and detect security issues
Apache License 2.0
782 stars 35 forks source link

[Snyk] Upgrade yargs from 16.2.0 to 17.3.1 #117

Closed snyk-bot closed 2 years ago

snyk-bot commented 2 years ago

Snyk has created this PR to upgrade yargs from 16.2.0 to 17.3.1.

merge advice :information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Warning: This is a major version upgrade, and may be a breaking change.

Release notes
Package name: yargs
  • 17.3.1 - 2021-12-23

    17.3.1 (2021-12-23)

    Bug Fixes

    • translations: correct Korean translation (#2095) (c7c2b9e)
  • 17.3.0 - 2021-11-30

    17.3.0 (2021-11-30)

    Features

    • fallback to default bash completion (74c0ba5)

    Bug Fixes

    • avoid legacy accessors (#2013) (adb0d11)
    • deps: update dependency yargs-parser to v21 (#2063) (76c1951)
    • don't fail if "fileURLToPath(import.meta.url)" throws (3a44796)
    • re-add options to check callback (#2079) (e75319d)
  • 17.2.1 - 2021-09-25

    Bug Fixes

  • 17.2.0 - 2021-09-23

    Features

    Bug Fixes

    • boolean option should work with strict (#1996) (e9379e2)
    • cast error types as TypeScript 4.4 infers them as unknown instead of any (#2016) (01b2c6a)
    • conflicts and strip-dashed (#1998) (59a86fb)
    • emit warning on version name collision (#1986) (d0e8292)
    • help command spacing when scriptName is empty (#1994) (d33e997)
  • 17.1.1 - 2021-08-13

    Bug Fixes

    • positional array defaults should not be combined with provided values (#2006) (832222d)
  • 17.1.1-candidate.0 - 2021-08-13
  • 17.1.0 - 2021-08-04
  • 17.1.0-candidate.0 - 2021-07-15
  • 17.0.2-candidate.1 - 2021-07-15
  • 17.0.2-candidate - 2021-07-10
  • 17.0.1 - 2021-05-03
  • 17.0.0 - 2021-05-02
  • 17.0.0-candidate.13 - 2021-04-26
  • 17.0.0-candidate.12 - 2021-04-12
  • 17.0.0-candidate.11 - 2021-04-11
  • 17.0.0-candidate.10 - 2021-04-04
  • 17.0.0-candidate.9 - 2021-04-04
  • 17.0.0-candidate.8 - 2021-03-26
  • 17.0.0-candidate.7 - 2021-03-14
  • 17.0.0-candidate.6 - 2021-03-11
  • 17.0.0-candidate.5 - 2021-03-10
  • 17.0.0-candidate.4 - 2021-03-08
  • 17.0.0-candidate.3 - 2021-02-22
  • 17.0.0-candidate.2 - 2021-02-16
  • 17.0.0-candidate.1 - 2021-02-15
  • 17.0.0-candidate.0 - 2021-01-09
  • 16.2.0 - 2020-12-05
from yargs GitHub release notes
Commit messages
Package name: yargs
  • 1ba8ef1 chore: v17.3.1 release
  • 4ea28fb chore(main): release 17.3.1 (#2103)
  • 9866422 build: test release-please release candidate
  • 10954f9 chore(docs): remove unused type and inline the inference (#2086)
  • 0d65c6c docs: correct @ types/yargs URL in readme (#2099)
  • c7c2b9e fix(translations): correct Korean translation (#2095)
  • 58fcd16 build: release-please with fixed outputs
  • 8bcd040 force build
  • 8046bc2 build: test latest version of release-please
  • a4b7246 chore(main): release 17.3.0 (#2081)
  • e75319d fix: re-add options to check callback (#2079)
  • c4d25b8 build: test release-please@v3
  • 3ec7cff build: switch back to v2 of release-please
  • 3a44796 fix: don't fail if "fileURLToPath(import.meta.url)" throws
  • 375b00b build: test release-please-action@v3
  • 6a464b3 docs: add esbuild bundling guide (#2075)
  • 95a387e build: revert to non-testing version of release-please
  • 1579f58 build: revert to non-testing version of release-please
  • 02d111b build: test candidate release of release-please
  • 4e9cb78 build: test candidate release of release-please
  • 4965ede build: fix ts build errors (#2071)
  • 76c1951 fix(deps): update dependency yargs-parser to v21 (#2063)
  • 74c0ba5 feat: fallback to default bash completion
  • 774dc53 Improve bash completion (#2056)
Compare

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs

lirantal commented 2 years ago

Can't land this one as it adds breaking changes (see test logs for CLI tests)