Skip to content

Switch cmd parser to latest minimist#1672

Merged
ErisDS merged 2 commits intohandlebars-lang:4.xfrom
dougwilson:minimist
Apr 3, 2020
Merged

Switch cmd parser to latest minimist#1672
ErisDS merged 2 commits intohandlebars-lang:4.xfrom
dougwilson:minimist

Conversation

@dougwilson
Copy link
Copy Markdown
Contributor

This pull request just swaps the command line parser to the latest version of minimist, which removes a couple of "regressions" (like the changed description of version and the changed position of the help option), but mainly both (1) removes the minimist security notice and (2) keeps the 4.x on the same Node.js version support plan.

I hope this pull request can be considered.

@dougwilson
Copy link
Copy Markdown
Contributor Author

Travis CI status did not update on the pull request, but here is a link to the passing Travis CI build: https://travis-ci.org/github/wycats/handlebars.js/builds/670392714

@ErisDS
Copy link
Copy Markdown
Collaborator

ErisDS commented Apr 3, 2020

Will take a look ASAP

@aorinevo
Copy link
Copy Markdown
Contributor

aorinevo commented Apr 3, 2020

Happy to take this out for a spin :)

@dougwilson
Copy link
Copy Markdown
Contributor Author

This also fixes #1673

@ErisDS
Copy link
Copy Markdown
Collaborator

ErisDS commented Apr 3, 2020

Just to let you know, I am looking to merge and release this. I would prefer to do the node changes separately as a revert though.

I then plan to revert this change on the master branch because (as you said on twitter) the yargs changes are slightly more maintainable long term.

This would leave us with #1673 on master, but I've found a fix for that.

@ErisDS
Copy link
Copy Markdown
Collaborator

ErisDS commented Apr 3, 2020

I've pushed the change to split out the node changes to the PR which also has the side effect of getting the travis build to show here properly.

@ErisDS ErisDS merged commit c2f1e62 into handlebars-lang:4.x Apr 3, 2020
@ErisDS
Copy link
Copy Markdown
Collaborator

ErisDS commented Apr 3, 2020

4.7.6 is out and will hopefully solve all the issues. Thanks for taking the time to provide a solution to this tricky situation ❤️.

Here's to hoping that the overbearing package security system that is the root cause gets under control soon 🤞

This was referenced Mar 18, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants