[Snyk] Upgrade yargs from 3.4.0 to 3.32.0

[trabab]

Snyk has created this PR to upgrade yargs from 3.4.0 to 3.32.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 42 versions ahead of your current version.
• The recommended version was released 5 years ago, on 2016-01-15.

The recommended version fixes:

Severity	Issue	PriorityScore (*)	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:string:20170907	479/1000 Why? Mature exploit, CVSS 5.3	Mature

(*) Note that the real score may have changed since the PR was raised.

Release notes

Package name: yargs

• 3.32.0 - 2016-01-15
• 3.31.0 - 2015-12-03
• 3.30.0 - 2015-11-14
• 3.29.0 - 2015-10-21
• 3.28.0 - 2015-10-16
• 3.27.0 - 2015-10-08
• 3.26.0 - 2015-09-25
• 3.25.0 - 2015-09-14
• 3.24.0 - 2015-09-04
• 3.23.0 - 2015-08-31
• 3.22.2 - 2015-08-28
• 3.22.1 - 2015-08-28
• 3.22.0 - 2015-08-28
• 3.21.1 - 2015-08-28
• 3.21.0 - 2015-08-21
• 3.20.0 - 2015-08-20
• 3.19.0 - 2015-08-14
• 3.18.1 - 2015-08-12
• 3.18.0 - 2015-08-06
• 3.17.1 - 2015-08-02
• 3.16.1 - 2015-07-30
• 3.16.0 - 2015-07-30
• 3.15.0 - 2015-07-06
• 3.14.0 - 2015-06-28
• 3.13.0 - 2015-06-24
• 3.12.0 - 2015-06-19
• 3.11.0 - 2015-06-15
• 3.10.0 - 2015-05-29
• 3.9.1 - 2015-05-20
• 3.9.0 - 2015-05-10
• 3.8.0 - 2015-04-24
• 3.7.2 - 2015-04-14
• 3.7.1 - 2015-04-10
• 3.7.0 - 2015-04-04
• 3.6.0 - 2015-03-21
• 3.5.4 - 2015-03-12
• 3.5.3 - 2015-03-09
• 3.5.2 - 2015-03-09
• 3.5.1 - 2015-03-09
• 3.5.0 - 2015-03-09
• 3.4.5 - 2015-03-01
• 3.4.4 - 2015-02-28
• 3.4.0 - 2015-02-27

from yargs GitHub release notes

Commit messages

Package name: yargs

• e6eaddf custom parsing function support. raw argument strings can now be parsed. various other bug fixes
• 18e2bb5 Merge pull request #348 from bcoe/update-changelog
• f883f26 update changelog
• 0ee9548 add changelog update
• 785228b Merge pull request #344 from bcoe/contributing
• 0be9ff1 made some edits based on @ lrlna's code review
• 51c0063 Merge pull request #346 from bcoe/fix-341
• 48ca657 alias should be applied to camel-case form of argument
• 590239e typo in email
• 83235b0 add contributing.md
• afed474 Merge pull request #339 from bcoe/cleanup-tests
• 555b2f8 Merge pull request #340 from bcoe/reset-groups
• 97e1beb clear groups in reset and enforce option uniqueness per group
• de5818a add tests for group reset and option uniqueness per group
• 33b9482 split(' ') is no longer needed in tests
• 6b9890d Merge pull request #331 from bcoe/parse-string
• b43c8d1 update readme/changelog
• d9ebd55 parse() and yargs().argv can now parse a raw argument string
• ceeb863 yargs can now directly parse an argument string
• d387a3d changelog update
• 3add015 Merge pull request #326 from bcoe/upgrade-nyc
• ac237cc upgrade to newest version of nyc
• c3ba776 test: Windows files have \r chars in them
• 8c75e91 Specify test script as simply 'mocha', not _mocha

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs