Skip to content
This repository was archived by the owner on Dec 20, 2023. It is now read-only.

Conversation

@dependabot-preview
Copy link
Contributor

Bumps yargs from 15.1.0 to 15.4.0.

Release notes

Sourced from yargs's releases.

yargs v15.4.0

Features

Bug Fixes

  • docs: describe usage of .check() in more detail (932cd11)
  • i18n: Japanese translation phrasing (#1619) (0894175)
  • strict mode: report default command unknown arguments (#1626) (69f29a9)
  • usage: translate 'options' group only when displaying help (#1600) (e60b39b)

Reverts

v15.4.0-beta.1 Pre-release

This is a pre-release for testing purposes of #1635.

Install by running npm install yargs@next

v15.4.0-beta.0 Pre-release

This is a pre-release for testing purposes of #1635.

Install by running npm install yargs@next

yargs v15.3.1

Bug Fixes

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team. (63810ca)

yargs v15.3.0

Features

  • yargs-parser: introduce single-digit boolean aliases (#1576) (3af7f04)
  • add usage for single-digit boolean aliases (#1580) (6014e39)

Bug Fixes

Changelog

Sourced from yargs's changelog.

15.4.0 (2020-06-30)

Features

Bug Fixes

  • docs: describe usage of .check() in more detail (932cd11)
  • i18n: Japanese translation phrasing (#1619) (0894175)
  • strict mode: report default command unknown arguments (#1626) (69f29a9)
  • usage: translate 'options' group only when displaying help (#1600) (e60b39b)

Reverts

15.3.1 (2020-03-16)

Bug Fixes

  • __proto__ will now be replaced with ___proto___ in parse (#258), patching a potential prototype pollution vulnerability. This was reported by the Snyk Security Research Team. (63810ca)

15.3.0 (2020-03-08)

Features

  • yargs-parser: introduce single-digit boolean aliases (#1576) (3af7f04)
  • add usage for single-digit boolean aliases (#1580) (6014e39)

Bug Fixes

  • address ambiguity between nargs of 1 and requiresArg (#1572) (a5edc32)

15.2.0 (2020-03-01)

⚠ BREAKING CHANGES

  • deps: yargs-parser@17.0.0 no longer implicitly creates arrays out of boolean arguments when duplicates are provided
Commits
  • 028b50d chore: release 15.4.0 (#1635)
  • 225ab82 feat: support array of examples (#1682)
  • e68334b refactor(ts): move and tsify most of root yargs.js to lib/yargs (#1670)
  • cb7fbb8 chore: remove old entries from files field in `package.json (#1677)
  • 34949f8 Revert "chore(deps): update dependency eslint to v7 (#1656)" (#1673)
  • 18c2efd docs(api): clarify process.argv handling and the order of API methods (#1644)
  • 791cc59 docs: describe commandDir() parameters (#1540) (#1613)
  • 83a90f0 chore(deps): update typescript-eslint monorepo to v3 (#1662)
  • be9da50 docs(api): explain .parse()’s exiting behavior more clearly (#1647)
  • 77fcc2b docs(api): link to other Yargs documentation (#1642)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
  • @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

  • Update frequency (including time of day and day of week)
  • Pull request limits (per update run and/or open at any time)
  • Out-of-range updates (receive only lockfile updates, if desired)
  • Security updates (receive only security updates, if desired)

Bumps [yargs](https://github.com/yargs/yargs) from 15.1.0 to 15.4.0.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/master/CHANGELOG.md)
- [Commits](yargs/yargs@v15.1.0...v15.4.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
@dependabot-preview dependabot-preview bot added the dependencies Pull requests that update a dependency file label Jul 2, 2020
@dependabot-preview
Copy link
Contributor Author

Superseded by #132.

@dependabot-preview dependabot-preview bot deleted the dependabot/npm_and_yarn/yargs-15.4.0 branch July 12, 2020 22:51
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant