Skip to content

Bump yargs-parser from 5.0.0-security.0 to 20.2.4 in /extensions/ql-vscode#1435

Merged
aeisenberg merged 1 commit intomainfrom
dependabot/npm_and_yarn/extensions/ql-vscode/yargs-parser-20.2.4
Jul 20, 2022
Merged

Bump yargs-parser from 5.0.0-security.0 to 20.2.4 in /extensions/ql-vscode#1435
aeisenberg merged 1 commit intomainfrom
dependabot/npm_and_yarn/extensions/ql-vscode/yargs-parser-20.2.4

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Jul 19, 2022

Bumps yargs-parser from 5.0.0-security.0 to 20.2.4.

Release notes

Sourced from yargs-parser's releases.

yargs-parser yargs-parser-v15.0.3

Bug Fixes

  • build: should use releases_created when using manifest (49ea4ef)

yargs-parser yargs-parser-v15.0.2

Bug Fixes

  • perf: address slow parse when using unknown-options-as-args (#400) (bc387ec)
Changelog

Sourced from yargs-parser's changelog.

20.2.4 (2020-11-09)

Bug Fixes

20.2.3 (2020-10-16)

Bug Fixes

  • exports: node 13.0 and 13.1 require the dotted object form with a string fallback (#336) (3ae7242)

20.2.2 (2020-10-14)

Bug Fixes

  • exports: node 13.0-13.6 require a string fallback (#333) (291aeda)

20.2.1 (2020-10-01)

Bug Fixes

20.2.0 (2020-09-21)

Features

  • string-utils: export looksLikeNumber helper (#324) (c8580a2)

Bug Fixes

  • unknown-options-as-args: convert positionals that look like numbers (#326) (f85ebb4)

20.1.0 (2020-09-20)

Features

  • adds parse-positional-numbers configuration (#321) (9cec00a)

Bug Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [yargs-parser](https://github.com/yargs/yargs-parser) from 5.0.0-security.0 to 20.2.4.
- [Release notes](https://github.com/yargs/yargs-parser/releases)
- [Changelog](https://github.com/yargs/yargs-parser/blob/main/CHANGELOG.md)
- [Commits](https://github.com/yargs/yargs-parser/commits/v20.2.4)

---
updated-dependencies:
- dependency-name: yargs-parser
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner July 19, 2022 12:51
@dependabot dependabot bot added the Update dependencies Dependabot update PRs label Jul 19, 2022
Copy link
Copy Markdown
Contributor

@aeisenberg aeisenberg left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Safe to merge. This is a dev-only dependency.

@aeisenberg aeisenberg merged commit 747049e into main Jul 20, 2022
@aeisenberg aeisenberg deleted the dependabot/npm_and_yarn/extensions/ql-vscode/yargs-parser-20.2.4 branch July 20, 2022 15:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Update dependencies Dependabot update PRs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant