Skip to content

chore(deps): bump yargs from 17.7.3 to 18.1.0 - #72

Closed
dependabot[bot] wants to merge 1 commit into
dependabot/bun/website/typescript-7.0.2from
dependabot/bun/yargs-18.1.0
Closed

dependabot[bot] wants to merge 1 commit into
dependabot/bun/website/typescript-7.0.2from
dependabot/bun/yargs-18.1.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 17, 2026 •

Copy link
Copy Markdown
Contributor

Bumps yargs from 17.7.3 to 18.1.0.

Changelog

Sourced from yargs's changelog.

18.1.0 (2026-07-26)

Features

  • ignore bun when getting bin name (b77831c)

Bug Fixes

  • lang: 'count' for de locale (#2476) (971e351)
  • local prototype pollution vulnerability in apply-extends (437f3a4)
  • locale: add Georgian translation (#2474) (086aeaa)
Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by cubic

Upgrades the CLI to yargs 18.1.0. This picks up a prototype‑pollution fix and corrects bin-name detection under Bun—help/usage now shows the actual CLI name instead of “bun”. Transitive updates (yargs-parser 22, cliui 9, string-width 8) may adjust argument parsing and help formatting.

  • Verify help/usage headers show the correct command under Bun; update help/output snapshots if needed.
  • Smoke-test common commands and flag combinations; watch for stricter parsing, unknown args, and wrap/width changes.
  • No code changes; only packages/cli/package.json and the lockfile were updated.

Written for commit 72274df. Summary will update on new commits.

Review in cubic

@dependabot @github

dependabot Bot commented on behalf of github Aug 17, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: bun, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@codeant-ai

codeant-ai Bot commented Aug 17, 2026

Copy link
Copy Markdown

Skipping PR review because a bot author is detected.

If you want to trigger CodeAnt AI, comment @codeant-ai review to trigger a manual review.

@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@devin-ai-integration
devin-ai-integration Bot changed the base branch from main to dependabot/bun/website/typescript-7.0.2 August 18, 2026 10:34
Bumps [yargs](https://github.com/yargs/yargs) from 17.7.3 to 18.1.0.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.3...v18.1.0)

---
updated-dependencies:
- dependency-name: yargs
  dependency-version: 18.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@devin-ai-integration
devin-ai-integration Bot force-pushed the dependabot/bun/yargs-18.1.0 branch from 037fbc0 to 72274df Compare August 18, 2026 10:59
@devin-ai-integration
devin-ai-integration Bot force-pushed the dependabot/bun/website/typescript-7.0.2 branch from d594808 to 03e78a0 Compare August 18, 2026 10:59
@sonarqubecloud

Copy link
Copy Markdown

@dependabot
dependabot Bot deleted the branch dependabot/bun/website/typescript-7.0.2 August 18, 2026 12:06
@dependabot dependabot Bot closed this Aug 18, 2026
ThePlenkov added a commit that referenced this pull request Aug 18, 2026
Rebased onto the rebuilt #72 (dropped incompatible root TS 7.0.2 from #70).

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
ThePlenkov added a commit that referenced this pull request Aug 18, 2026
Rebased onto the rebuilt #72 (dropped incompatible root TS 7.0.2 from #70).

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
ThePlenkov added a commit that referenced this pull request Aug 18, 2026
Rebased onto the rebuilt #72 (dropped incompatible root TS 7.0.2 from #70).

Generated with [Devin](https://devin.ai)

Co-authored-by: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants