[Snyk] Security upgrade yargs-parser from 10.1.0 to 13.1.2

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • packages/babel-minify/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-YARGSPARSER-560381	Yes	Proof of Concept

Commit messages

Package name: yargs-parser

The new version differs by 40 commits.

• 034e7c0 chore: update package version
• 6e36df1 fix: backport __proto__ fixes
• 7e01a2c chore: release 13.1.1 (Mangler - rename keepFnames to keepFnName babel/minify#183)
• 47ccb0b fix: nargs should allow duplicates when duplicate-arguments-array=false (optimize (as well as minify) JS? babel/minify#164)
• 57b7883 fix: convert values to strings when tokenizing (var hoisting babel/minify#167)
• 6055974 fix: should populate "_" when given config with "short-option-groups" false (Fix guarded expressions babel/minify#179)
• 7f33140 docs: add description of "opts.configObjects" (Add support for annotations improving minification and rewriting babel/minify#178)
• 981e151 refactor: remove duplicate check for `args[i]` in tokenize-arg-string.js (Unneeded mangle on destructed function parameters used as shorthands in the function body babel/minify#175)
• 69ddfed chore(release): 13.1.0
• 89aa3cd chore: update dev deps
• b1012f8 docs: fix example halt-at-non-option (benchmark npm packages directly babel/minify#165)
• a3936aa feat: add `strip-aliased` and `strip-dashed` configuration options. (Does not work at all babel/minify#172)
• 0ae7fcb feat: support boolean which do not consume next argument. (minify-simplify + minify-guarded-expressions incorrectly transform a switch statement babel/minify#171)
• f184308 refactor: remove usage of `arguments` ([DCE] Fix var hoisting babel/minify#169)
• c0cd851 refactor: Use Object.as#stead of custom function. (improve benchmark description babel/minify#168)
• 1404f79 doc: fix typo in CHANGELOG
• 710eeba chore(release): 13.0.0
• 18d0fd5 feat: don't coerce number from string with leading '0' or '+' (JSX in function results in Unexpected JSXIdentifier babel/minify#158)
• ea6ce05 chore(release): 12.0.0
• 5a7c46a feat: default value is now used if no right-hand value provided for numbers/strings (Smart constant rewriting babel/minify#156)
• a02b1d5 doc: remove incorrect documenntation regarding opts.--
• 2fb71b2 fix: better handling of quoted strings (Improper let scoping babel/minify#153)
• ee122f8 chore(release): 11.1.1
• 79cda98 fix: ensure empty string is added into argv._ (Mangle - Fix for classes and program scope babel/minify#140)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic