Skip to content

Conversation

@Blankll
Copy link
Member

@Blankll Blankll commented Oct 6, 2025

snyk-top-banner

Snyk has created this PR to upgrade commander from 14.0.0 to 14.0.1.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 1 version ahead of your current version.

  • The recommended version was released 24 days ago.

Release notes
Package name: commander
  • 14.0.1 - 2025-09-12

    Fixed

    • broken markdown link in README (#2369)

    Changed

    • improve code readability by using optional chaining (#2394)
    • use more idiomatic code with object spread instead of Object.assign() (#2395)
    • improve code readability using string.endsWith() instead of string.slice() (#2396)
    • refactor .parseOptions() to process args array in-place (#2409)
    • change private variadic support routines from ._concatValue() to ._collectValue() (change code from array.concat() to array.push()) (#2410)
    • update (dev) dependencies
  • 14.0.0 - 2025-05-18

    Added

    • support for groups of options and commands in the help using low-level .helpGroup() on Option and Command, and higher
      -level .optionsGroup() and .commandsGroup() which can be used in chaining way to specify group title for following option
      s/commands (#2328)
    • support for unescaped negative numbers as option-arguments and command-arguments (#2339)
    • TypeScript: add parseArg property to Argument class (#2359)

    Fixed

    • remove bogus leading space in help when option has default value but not a description (#2348)
    • .configureOutput() now makes copy of settings instead of modifying in-place, fixing side-effects (#2350)

    Changed

    • Breaking: Commander 14 requires Node.js v20 or higher
    • internal refactor of Help class adding .formatItemList() and .groupItems() methods (#2328)
from commander GitHub release notes

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade commander from 14.0.0 to 14.0.1.

See this package in npm:
commander

See this project in Snyk:
https://app.snyk.io/org/blankll/project/9c72c875-e7a2-4e68-85a9-7b26a5bc5b32?utm_source=github&utm_medium=referral&page=upgrade-pr
@codecov
Copy link

codecov bot commented Oct 6, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (master@4fd733b). Learn more about missing BASE report.
⚠️ Report is 2 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff            @@
##             master      #76   +/-   ##
=========================================
  Coverage          ?   85.71%           
=========================================
  Files             ?       65           
  Lines             ?      784           
  Branches          ?      121           
=========================================
  Hits              ?      672           
  Misses            ?       78           
  Partials          ?       34           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@Blankll Blankll merged commit 8dbd056 into master Oct 9, 2025
4 checks passed
@Blankll Blankll deleted the snyk-upgrade-dda6cdc2e32b60113d88b6fc63419786 branch October 9, 2025 06:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants