Skip to content

chore(deps): update dependency yargs to v7#67

Open
dev-mend-for-github-com[bot] wants to merge 1 commit intoelectron-upgradefrom
whitesource-remediate/yargs-7.x
Open

chore(deps): update dependency yargs to v7#67
dev-mend-for-github-com[bot] wants to merge 1 commit intoelectron-upgradefrom
whitesource-remediate/yargs-7.x

Conversation

@dev-mend-for-github-com
Copy link

@dev-mend-for-github-com dev-mend-for-github-com bot commented Jan 12, 2025

This PR contains the following updates:

Package Type Update Change
yargs (source) dependencies major 4.8.17.0.0

By merging this PR, the issue #31 will be automatically resolved and closed:

Severity CVSS Score Vulnerability Reachability
High High 7.3 CVE-2020-7774
Medium Medium 5.3 CVE-2020-7608

Release Notes

yargs/yargs (yargs)

v7.0.0

Compare Source

Bug Fixes
  • fix demandOption no longer treats 'false' as truthy (#​829) (c748dd2)
  • get terminalWidth in non interactive mode no longer causes a validation exception (#​837) (360e301)
  • we shouldn't output help if we've printed a prior help-like message (#​847) (17e89bd)
Features

7.0.2 (2017-03-10)

Bug Fixes
  • populating placeholder arguments broke validation (b3eb2fe)

7.0.1 (2017-03-03)

Bug Fixes
  • --help with default command should print top-level help (#​810) (9c03fa4)

v6.6.0

Compare Source

Bug Fixes
  • [object Object] was accidentally being populated on options object (#​736) (f755e27)
  • do not use cwd when resolving package.json for yargs parsing config (#​726) (9bdaab7)
Features

v6.5.0

Compare Source

Bug Fixes
  • still freeze/unfreeze if parse() is called in isolation (#​717) (30a9492)
Features

v6.4.0

Compare Source

Bug Fixes
Features
Performance Improvements
  • normalizing package data is an expensive operation (#​705) (49cf533)

v6.3.0

Compare Source

Bug Fixes
  • command: subcommands via commandDir() now supported for parse(msg, cb) (#​678) (6b85cc6)
Features

v6.2.0

Compare Source

Bug Fixes
Features

6.1.1 (2016-10-15)

Bug Fixes
  • freeze was not resetting configObjects to initial state; addressed performance issue raised by @​nexdrew. (#​670) (ae4bcd4)

v6.1.1

Compare Source

Bug Fixes
Features

6.1.1 (2016-10-15)

Bug Fixes
  • freeze was not resetting configObjects to initial state; addressed performance issue raised by @​nexdrew. (#​670) (ae4bcd4)

v6.0.0

Compare Source

Bug Fixes
  • changed parsing of the command string to ignore extra spaces (#​600) (e8e5a72)
  • drop lodash.assign (#​641) (ad3146f)
  • for args that have skipValidation set to true, check if the parsed arg is true (#​619) (658a34c)
  • upgrade standard, and fix appveyor config so that it works with newest standard (#​607) (c301f42)
Chores
Features
Performance Improvements
  • defer windowWidth() to improve perf for non-help usage (#​610) (cbc3636)
BREAKING CHANGES
  • coerce is now applied as a final step after other parsing is complete

v5.0.0

Compare Source

Bug Fixes
Features
Performance Improvements
BREAKING CHANGES
  • fail is now applied globally.
  • we now default to an empty builder function when command is executed with no builder.
  • yargs-parser now better handles negative integer values, at the cost of handling numeric option names, e.g., -1 hello
  • default: removed undocumented defaults alias for default.
  • introduces a default help command which outputs help, as an alternative to a help flag.
  • interpret demand() numbers as relative to executing command (#​582) (927810c)

4.8.1 (2016-07-16)

Bug Fixes

  • If you want to rebase/retry this PR, check this box

@dev-mend-for-github-com dev-mend-for-github-com bot added the security fix Security fix generated by Mend label Jan 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

security fix Security fix generated by Mend

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants