Skip to content

chore(deps): bump commander from 13.1.0 to 15.0.0 - #371

Merged
AKogut merged 1 commit into
mainfrom
dependabot/npm_and_yarn/commander-15.0.0
Oct 20, 2026
Merged

chore(deps): bump commander from 13.1.0 to 15.0.0#371
AKogut merged 1 commit into
mainfrom
dependabot/npm_and_yarn/commander-15.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps commander from 13.1.0 to 15.0.0.

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

  • show excess command-arguments in error message (#2384)

Fixed

  • Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
  • update example to use compatible character for MINGW64 (#2475)

Changed

  • Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
  • Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
  • dev: switch tests from Jest to node:test test runner (#2463)

Deleted

  • Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

[14.0.3] (2026-01-31)

Added

  • Release Policy document (#2462)

Changes

  • old major versions now supported for 12 months instead of just previous major version, to give predictable end-of-life date (#2462)
  • clarify typing for deprecated callback parameter to .outputHelp() (#2427)

... (truncated)

Commits

@dependabot
dependabot Bot requested a review from AKogut as a code owner October 5, 2026 17:22
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 5, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/commander-15.0.0 branch from f5a9dd9 to ae2ffc1 Compare October 20, 2026 08:36
This was referenced Oct 20, 2026
Closed
Merged
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/commander-15.0.0 branch from ae2ffc1 to fe50d7b Compare October 20, 2026 09:48
@AKogut

AKogut commented Oct 20, 2026

Copy link
Copy Markdown
Owner

@dependabot rebase

@dependabot
chore(deps): bump commander from 13.1.0 to 15.0.0
11a8ad3 
Bumps [commander](https://github.com/tj/commander.js) from 13.1.0 to 15.0.0.
- [Release notes](https://github.com/tj/commander.js/releases)
- [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md)
- [Commits](tj/commander.js@v13.1.0...v15.0.0)

---
updated-dependencies:
- dependency-name: commander
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/commander-15.0.0 branch from fe50d7b to 11a8ad3 Compare October 20, 2026 09:53
@AKogut
AKogut merged commit d249d64 into main Oct 20, 2026
7 checks passed
@AKogut
AKogut deleted the dependabot/npm_and_yarn/commander-15.0.0 branch October 20, 2026 10:01
AKogut added a commit that referenced this pull request Oct 20, 2026
@AKogut
chore: require Node 22.12, now that Node 20 has reached end-of-life (#…
4667bbd 
…381)

Closes #380

Node 20 reached end-of-life on 2026-04-30. Commander 15 (#371) and
Vitest 5 (#370) already require Node 22.12.

## Changes

| | Before | After |
| --- | --- | --- |
| Published packages | no `engines`, documented as Node 20+ | `engines:
{ node: ">=22.12" }` on all seven, minor changeset |
| CI matrix | 20, 22, 24 (Node 20 tests after building on 22) | 22, 24,
26, built and tested on the same runtime |
| Reporter smoke job | runs on Node 20 | runs on exactly **22.12.0**,
the declared floor |
| Docs | "the published packages still run on Node 20" | Node 22.12 or
later |
| Dependabot | proposes `@types/node` majors | ignores them: types
follow the oldest supported Node |

Also removes an unused loop variable `actionlint` flagged in
`reporters.yml`.

## Before merging

Branch protection on `main` still requires **`ci (node 20)`**, a check
this matrix no longer produces. Under **Settings → Branches → main →
Required status checks**, replace `ci (node 20)` with `ci (node 24)`,
keeping `ci (node 22)`. Every open pull request already reports both.

## After merging

#371 (commander 15) and #370 (Vitest 5) can merge; #372 (@types/node 26)
is closed because the types now track the floor.

## Verified

- Packages build with publint and attw; lint and typecheck pass.
- `changeset status` bumps all seven packages a minor.
- `actionlint` is clean on both workflows.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@AKogut AKogut Awaiting requested review from AKogut AKogut is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@AKogut