Skip to content

chore(deps): bump commander from 13.1.0 to 15.0.0#5

Open
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/commander-15.0.0
Open

chore(deps): bump commander from 13.1.0 to 15.0.0#5
dependabot[bot] wants to merge 4 commits into
mainfrom
dependabot/npm_and_yarn/commander-15.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps commander from 13.1.0 to 15.0.0.

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

@aedneth
Merge pull request #1 from aedneth/feat/scaffold-magnus-cli
97e0c84 
feat: scaffold agent-native magnus-cli (download + capture, v0.1.0)
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Jun 2, 2026
aedneth and others added 3 commits June 2, 2026 12:16
@aedneth @claude
docs: apply GitHub repo growth standard polish
45745e8 
- Fix CI badge URL: eduardoborjas → aedneth (was pointing at wrong username)
- Add npm version badge to README header
- Add "Why magnus?" section: positions vs raw yt-dlp, browser extensions, and
  manual Apify runs with outcome-first reasoning
- Add Roadmap section (v0.1.0 checked, v0.2.0–v1.0.0 milestones)
- Promote CHANGELOG [Unreleased] → [0.1.0] 2026-06-02 with Fixed entries for
  the two CI bugs resolved on the branch
- Fix wrong GitHub username in CONTRIBUTING.md clone URL and
  .github/ISSUE_TEMPLATE/config.yml security policy link

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@aedneth @claude
fix: apply Opus architecture audit findings (security, observability,…
db3f65a 
… cost)

C1 — queue.ts: narrow table params to QueueTable union type; use bound
  LIMIT parameter instead of string-interpolated Number(limit) to close
  the SQL concatenation pattern in an agent-callable tool.

M1 — capture runners: coerce --budget-cap/--limit from string (Commander
  returns option values as strings; runners were casting string as number,
  making assertCanaryAcceptable compare number > string via JS coercion).

M2 — capture runners: wire --limit across all three runners (instagram,
  tiktok, youtube); the flag existed in the manifest but was never read.

M3 — capture runners: pass projected next-batch cost to assertWithinBudget
  before each runActor call so the hard cap fires pre-charge, not post-
  charge. Track per-URL canary rate and multiply by batch size.

M4 — youtube.ts: rethrow non-ENOENT yt-dlp startup errors as
  MagnusError(Network) instead of silently continuing into a render loop
  that finds no info.json and exits 0 with 0 notes processed.

M5 — db.ts: key openDb cache by resolved file path (was module-global
  singleton, so --config dir isolation did not affect the DB handle).

m1 — redact.ts: add Bearer token and generic key=VALUE patterns alongside
  the existing Apify token regex.

m2 — apify.ts: warn to stderr when Apify cost fields are absent (schema
  drift) instead of silently recording $0; budget guard would not fire.

m3 — instagram.ts: add shortCode-based fallback lookup for dataset items
  (URL normalization mismatch on query-string variants like ?igshid=).

m4 — config.ts: remove duplicate ctx.log.info in config list that wrote
  the config JSON to both stderr and stdout.

m5 — cli.ts: guard injectDefaultCommand against argv.length < 2; replace
  non-null assertions with typed casts.

s1 — remove dead ink, react, @types/react dependencies (zero imports).

s5 — cli.ts: use process.exitCode in main().catch for consistency with
  the execute() drain pattern; avoids premature stream teardown.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@dependabot
chore(deps): bump commander from 13.1.0 to 15.0.0
4ebd5bf 
Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v13.1.0...v15.0.0)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/npm_and_yarn/commander-15.0.0 branch from 3bef344 to 4ebd5bf Compare June 2, 2026 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@aedneth