Skip to content

chore(deps): bump yargs from 17.7.2 to 17.7.3 - #4326

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/yargs-17.7.3
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/yargs-17.7.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor

Bumps yargs from 17.7.2 to 17.7.3.

Changelog

Sourced from yargs's changelog.

17.7.3 (2026-06-19)

Bug Fixes

  • fix: use entry point with file extension for anything that supports exports (#2514) (c7597e3)

16.2.2 (2026-06-19)

Bug Fixes

  • fix: use entry point with .cjs file extension for yargs export (#2546) (6feb819)

18.0.0 (2025-05-26)

⚠ BREAKING CHANGES

  • command names are not derived from modules passed to command.
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed.
  • minimum node.js versions now ^20.19.0 || ^22.12.0 || >=23.
  • yargs is now ESM first

Features

Bug Fixes

  • addDirectory do not support absolute command dir (#2465) (3a40a78)
  • allows ESM modules commands to be extensible using visit option (#2468) (200e1aa)
  • browser: fix shims so that yargs continues working in browser context (#2457) (4ae5f57)
  • build: address problems with typescript compilation (#2445) (8d72fb3)
  • coerce should play well with parser configuration (#2308) (8343c66)
  • deps: update dependency yargs-parser to v22 (#2470) (639130d)
  • exit after async handler done (#2313) (e326cde)
  • handle spaces in bash completion (#2452) (83b7788)
  • parser-configuration should work well with generated completion script (#2332) (888db19)
  • propagate Dictionary including undefined in value type (#2393) (2b2f7f5)
  • zsh: completion no longer requires double tab when using autoloaded (0dd8fe4)

Code Refactoring

  • command names are not derived from modules passed to command. (d90af45)
  • singleton usage of yargs yargs.foo, yargs().argv, has been removed. (d90af45)

... (truncated)

Commits
  • 2f7df4d chore: bump version for release
  • caf8440 chore: bump version for prerelease
  • c7597e3 fix: use entry point with file extension for anything that supports exports (...
  • See full diff in compare view
Maintainer changes

This version was pushed to npm by shadowspawn, a new releaser for yargs since your current version.


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [yargs](https://github.com/yargs/yargs) from 17.7.2 to 17.7.3.
- [Release notes](https://github.com/yargs/yargs/releases)
- [Changelog](https://github.com/yargs/yargs/blob/main/CHANGELOG.md)
- [Commits](yargs/yargs@v17.7.2...v17.7.3)

---
updated-dependencies:
- dependency-name: yargs
  dependency-version: 17.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the Type: Dependencies Pull requests that update a dependency file label Sep 23, 2026
@microsoft-github-policy-service microsoft-github-policy-service Bot added the AutoMerge 🔁 Automatically merge when PR requirements met label Sep 23, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Bundle size report

Tree-shaken production Metro bundles. Component costs are relative to their platform shell; shell costs are absolute.

Platform Scenario Baseline cost Current cost Cost delta Change Gzip delta Module delta
macos shell 801.3 KiB 801.3 KiB 0.0 KiB 0.00% 0.0 KiB +0
macos components-button 50.1 KiB 57.9 KiB +7.8 KiB +15.54% +2.5 KiB +17
macos components-catalog 267.3 KiB 282.9 KiB +15.5 KiB +5.82% +5.7 KiB +24
macos design-theme-state 33.3 KiB 33.7 KiB +0.4 KiB +1.34% +0.1 KiB +6
macos design-themed-root New 36.1 KiB New New New New
macos design-color-lib 7.1 KiB 7.1 KiB 0.0 KiB 0.00% 0.0 KiB +0
macos design-theme-state-legacy-source 35.3 KiB 35.8 KiB +0.4 KiB +1.26% +0.1 KiB +6
macos design-legacy-theme-from-flex 100.2 KiB 100.7 KiB +0.4 KiB +0.45% +0.1 KiB +6
windows shell 810.2 KiB 810.2 KiB 0.0 KiB 0.00% 0.0 KiB +0
windows components-button 50.0 KiB 57.7 KiB +7.7 KiB +15.39% +2.6 KiB +17
windows components-catalog 267.0 KiB 282.4 KiB +15.4 KiB +5.76% +5.7 KiB +24
windows design-theme-state 33.2 KiB 33.7 KiB +0.5 KiB +1.36% +0.1 KiB +6
windows design-themed-root New 36.0 KiB New New New New
windows design-color-lib 7.1 KiB 7.1 KiB 0.0 KiB 0.00% 0.0 KiB +0
windows design-theme-state-legacy-source 35.3 KiB 35.7 KiB +0.4 KiB +1.27% +0.1 KiB +6
windows design-legacy-theme-from-flex 100.0 KiB 100.4 KiB +0.4 KiB +0.44% +0.1 KiB +6

The job is advisory: size changes are reported but do not fail the pull request. Bundle or analysis errors still fail.


View bundle-size workflow run

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

AutoMerge 🔁 Automatically merge when PR requirements met Type: Dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants