[Snyk] Upgrade commander from 4.0.0 to 4.1.0

[snyk-bot]

Snyk has created this PR to upgrade commander from 4.0.0 to 4.1.0.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 2 versions ahead of your current version.
• The recommended version was released 24 days ago, on 2020-01-06.

Release notes

Package name: commander

• 4.1.0 - 2020-01-06
  

  Added

  • two routines to change how option values are handled, and eliminate name clashes with command properties (#933 #1102)
    • see storeOptionsAsProperties and passCommandToAction in README
  • .parseAsync to use instead of .parse if supply async action handlers (#806 #1118)

  Fixed

  • Remove trailing blanks from wrapped help text (#1096)

  Changed

  • update dependencies
  • extend security coverage for Commander 2.x to 2020-02-03
  • improvements to README
  • improvements to TypeScript definition documentation
  • move old versions out of main CHANGELOG
  • removed explicit use of ts-node in tests
• 4.0.1 - 2019-11-11
  

  Fixed

  • display help when requested, even if there are missing required options (#1091)
• 4.0.0 - 2019-11-01
  

  Added

  • automatically wrap and indent help descriptions for options and commands (#1051)
  • .exitOverride() allows override of calls to process.exit for additional error handling and to keep program running (#1040)
  • support for declaring required options with .requiredOptions() (#1071)
  • GitHub Actions support (#1027)
  • translation links in README

  Changed

  • dev: switch tests from Sinon+Should to Jest with major rewrite of tests (#1035)
  • call default subcommand even when there are unknown options (#1047)
  • Breaking Commander is only officially supported on Node 8 and above, and requires Node 6 (#1053)

  Fixed

  • Breaking keep command object out of program.args when action handler called (#1048)
    • also, action handler now passed array of unknown arguments
  • complain about unknown options when program argument supplied and action handler (#1049)
    • this changes parameters to command:* event to include unknown arguments
  • removed deprecated customFds option from call to child_process.spawn (#1052)
  • rework TypeScript declarations to bring all types into imported namespace (#1081)

  Migration Tips

  Testing for no arguments

  If you were previously using code like:

  if (!program.args.length) ...
  

  a partial replacement is:

  if (program.rawArgs.length < 3) ...
  

from commander GitHub release notes

Commit messages

Package name: commander

• 8e1cdf5 Merge pull request #1142 from tj/develop
• 1c66935 add zh-CN translation for parseAsync
• f16fecf Merge remote-tracking branch 'origin/master' into develop
• 81f5079 Bump version for release
• 6f692cf Updated changelog for 4.1
• 7bcf117 Add parseAsync (#1118)
• 1d9cc72 Merge pull request #1132 from shadowspawn/feature/tidy-js-2
• d47fb0c Rename help check routine
• 4faad59 Improve JSDoc to match code
• 03e77df Update Chinese README for v4.1.0
• 808d4bc Removed explicit use of ts-node (#1125)
• b25cc3a Increase timeout for test using ts-node
• 9de0968 Add feature notes to README
• 29a7f46 4.1.0-0
• 81c6e28 Opt-in behaviour to avoid name pollution (#1102)
• df6284c Add current changes to CHANGELOG
• f119fc7 Remove redundant @param types, and tidy.
• 3baa16f doc: typo (#1113)
• 45d371e Merge pull request #1114 from shadowspawn/feature/support-six-months
• 5e12c44 Merge pull request #1115 from shadowspawn/feature/changelog-split
• 3740834 Separate out changelog for old versions
• bc16bd2 Change to six months support, rather than n-1
• 57e6c5d Merge pull request #1107 from shadowspawn/feature/version-listener
• 7c22701 Merge pull request #1108 from shadowspawn/feature/timeout

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs