Skip to content

Bump yargs from 17.7.2 to 18.0.0#222

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/yargs-18.0.0
Open

Bump yargs from 17.7.2 to 18.0.0#222
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/npm_and_yarn/yargs-18.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 17, 2026

Copy link
Copy Markdown
Contributor

Bumps yargs from 17.7.2 to 18.0.0.

Changelog

Sourced from yargs's changelog.

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

  • command names are not derived from modules passed to command.
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed.
  • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.
  • yargs is now ESM first

Features

Bug Fixes

  • addDirectory do not support absolute command dir (#2465) (3a40a78)
  • allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)
  • browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)
  • build: address problems with typescript compilation (#2445) (8d72fb3)
  • coerce should play well with parser configuration (#2308) (8343c66)
  • deps: update dependency yargs-parser to v22 (#2470) (639130d)
  • exit after async handler done (#2313) (e326cde)
  • handle spaces in bash completion (#2452) (83b7788)
  • parser-configuration should work well with generated completion script (#2332) (888db19)
  • propagate Dictionary including undefined in value type (#2393) (2b2f7f5)
  • zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

  • command names are not derived from modules passed to command. (d90af45)
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

Build System

  • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23. (d90af45)
Commits
  • 0bc7255 chore(main): release 18.0.0 (#2325)
  • 639130d fix(deps): update dependency yargs-parser to v22 (#2470)
  • 200e1aa fix: allows ESM modules commands to be extensible using visit option (#2468)
  • 888db19 fix: parser-configuration should work well with generated completion script (...
  • 3a40a78 fix: addDirectory do not support absolute command dir (#2465)
  • 90e9eca docs: remove to old slack channel (#2466)
  • 0dd8fe4 fix(zsh): completion no longer requires double tab when using autoloaded
  • 27eec18 feat: commandDir now works with ESM files (#2461)
  • f9c72a7 docs: update examples to run from examples folder (#2463)
  • e02c91b feat(zsh): Add default completion as fallback (#2331)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [yargs](https://github.com/yargs/yargs) from 17.7.2 to 18.0.0.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v18.0.0)

---
updated-dependencies:
- dependency-name: yargs
  dependency-version: 18.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm ecosystem dependency updates labels Jun 17, 2026
@dependabot dependabot Bot requested a review from eviltester as a code owner June 17, 2026 03:58
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file npm npm ecosystem dependency updates labels Jun 17, 2026
@greptile-apps

greptile-apps Bot commented Jun 17, 2026

Copy link
Copy Markdown

Greptile Summary

Bumps yargs from 17.7.2 to 18.0.0 in the CLI workspace package. yargs 18 is a major release that is ESM-first, removes the singleton API, and raises the minimum Node.js version to ^20.19.0 || ^22.12.0 || >=23.

  • The project's root engines field already requires >=24.9.0, so the new Node constraint is satisfied.
  • cli-options.js uses the factory form yargs(hideBin(argvInput)) with .parseSync() and string-named commands — none of the removed singleton APIs or module-derived command names are in use.
  • The CLI package is already "type": "module", aligning with yargs 18's ESM-first design.

Confidence Score: 5/5

Safe to merge — all three breaking changes in yargs 18 are inapplicable to this codebase.

The CLI uses the factory-function API and string-named commands, so neither the removed singleton surface nor the module-derived command names affect it. The project already mandates Node >=24.9.0, well above yargs 18's floor, and the CLI package is already ESM. The transitive dependency updates (cliui, yargs-parser, string-width, wrap-ansi) are normal minor-version bumps accompanying the major release.

No files require special attention.

Important Files Changed

Filename Overview
apps/cli/package.json Bumps the yargs dependency from 17.7.2 to 18.0.0; no other changes.
pnpm-lock.yaml Lockfile updated to reflect yargs 18.0.0 and its updated transitive deps (cliui 9, yargs-parser 22, string-width 7, wrap-ansi 9, emoji-regex 10, get-east-asian-width 1).

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["node-entry.js\nrunCli(process.argv, ...)"] --> B["cli-options.js\nparseCliOptions(argv)"]
    B --> C["yargs(hideBin(argv))\nfactory form — not singleton"]
    C --> D[".command('generate', ...)\n.command('amend', ...)\nstring names — no module derivation"]
    D --> E[".parseSync()"]
    E --> F["Normalized options object"]
    F --> G["run-cli.js\nrunCliCommand({ options, platform })"]

    style C fill:#d4edda,stroke:#28a745
    style D fill:#d4edda,stroke:#28a745
    style E fill:#d4edda,stroke:#28a745
Loading
%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
flowchart TD
    A["node-entry.js\nrunCli(process.argv, ...)"] --> B["cli-options.js\nparseCliOptions(argv)"]
    B --> C["yargs(hideBin(argv))\nfactory form — not singleton"]
    C --> D[".command('generate', ...)\n.command('amend', ...)\nstring names — no module derivation"]
    D --> E[".parseSync()"]
    E --> F["Normalized options object"]
    F --> G["run-cli.js\nrunCliCommand({ options, platform })"]

    style C fill:#d4edda,stroke:#28a745
    style D fill:#d4edda,stroke:#28a745
    style E fill:#d4edda,stroke:#28a745
Loading

Reviews (1): Last reviewed commit: "Bump yargs from 17.7.2 to 18.0.0" | Re-trigger Greptile

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file npm npm ecosystem dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants