Update yargs to ^17.2.0

[blown-capacitor]

Updates yargs to address high severity security vulnerability as detailed in #252

Note

there are two failing tests, these already exist on the master branch

[jameshschuler]

Any update on getting this merged?

[raikko01]

Any updates ?

[mapkon]

With the recent vulnerability on ansi-regex, it is critical that we merge this, since yargs has a dependency on strip-ansi which in turn has a dependency on ansi-regex. yargs > cliui > strip-ansi > ansi-regex.

[nono0481]

Hello, the last version of yargs is 17.2.1. Maybe it's work with it ?

[mikkilevon]

Please merge this!

[blown-capacitor]

Hello, the last version of yargs is 17.2.1. Maybe it's work with it ?

Updated to 17.2.1 and appears to be working based on tooling

[eAi]

Please do merge this and release this - it's showing up in npm audit

[cbinput]

Yes, please merge this!

[AlecRust]

Pretty please?

[patelvp]

Can we merge this please? Thanks

[zac1st1k]

Could we merge this to resolve the vulnerability? https://security.snyk.io/vuln/SNYK-JS-ANSIREGEX-1583908

[apetrescul]

Kindly merge PR.

yargs: ^15.3.1 uses y18n: ^4.0.0 that has CVE-2020-7774: https://nvd.nist.gov/vuln/detail/CVE-2020-7774
This is fixed in yargs: ^17.2.1.

[BergerMarcin]

Kind ask to merge PR