Merge pull request #17 from funbox/update-commander

Update commander to v10.0.1
funbox · Jun 27, 2023 · be9a66d · be9a66d
2 parents 3040112 + dda95f3
commit be9a66d
Show file tree

Hide file tree

Showing 5 changed files with 29 additions and 12 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## 6.0.1 (27.06.2023)
+
+Fixed a vulnerability caused by a dependency of the "commander" package.
+Commander updated to a major version, but this does not affect the end user of this package.
+
+
 ## 6.0.0 (29.05.2023)
 
 Dropped support for Node.js 12.

diff --git a/CHANGELOG.ru.md b/CHANGELOG.ru.md
@@ -1,5 +1,11 @@
 # История изменений проекта
 
+## 6.0.1 (27.06.2023)
+
+Исправлена уязвимость, содержащаяся в зависимостях пакета commander.
+Commander обновлен до мажорной версии, но для конечного пользователя этого пакета ничего не изменилось.
+
+
 ## 6.0.0 (29.05.2023)
 
 Node.js 12 больше не поддерживается.

diff --git a/cli.js b/cli.js
@@ -17,12 +17,14 @@ if (program.args.length === 0) {
   program.help();
 }
 
+const options = program.opts();
+
 parseApibFile(
   program.args[0],
-  program.format,
-  program.sourcemap,
-  program.debug,
-  program.langserver,
+  options.format,
+  options.sourcemap,
+  options.debug,
+  options.langserver,
   { logger: new Logger(console.error) },
 ).then(result => {
   console.log(result);

diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@funboxteam/crafter",
-  "version": "6.0.0",
+  "version": "6.0.1",
   "description": "JavaScript replacement of Drafter library for parsing API Blueprint documentation format",
   "repository": {
     "type": "git",
@@ -38,7 +38,7 @@
     "jest-junit": "13.0.0"
   },
   "dependencies": {
-    "commander": "2.15.1",
+    "commander": "10.0.1",
     "commonmark": "0.30.0",
     "fast-deep-equal": "2.0.1",
     "yamljs": "0.3.0"