fix(core): pin yargs to v17 for CJS CLI compatibility

oetr · oetr · commit d422132ada33 · 2026-03-27T09:08:35.000+01:00
yargs v18 is ESM-only and requires require()-of-ESM support, which
only shipped unflagged in Node 20.19 / 22.12.  Since the jazzer CLI
entry point must remain loadable via require() on Node &gt;= 20.6, pin
yargs to the v17 line.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -73,7 +73,7 @@
 		"**/!(compile_commands.json)*": "prettier --write --ignore-unknown --allow-empty --log-level debug"
 	},
 	"engines": {
-		"node": ">= 20.0.0",
+		"node": ">= 20.*",
 		"npm": ">= 7.0.0"
 	}
 }
diff --git a/packages/core/package.json b/packages/core/package.json
@@ -23,14 +23,14 @@
 		"@jazzer.js/fuzzer": "3.1.0",
 		"@jazzer.js/hooking": "3.1.0",
 		"@jazzer.js/instrumentor": "3.1.0",
-		"tmp": "^0.2.3",
 		"istanbul-lib-coverage": "^3.2.2",
 		"istanbul-lib-report": "^3.0.1",
 		"istanbul-reports": "^3.1.7",
-		"yargs": "^18.0.0"
+		"tmp": "^0.2.5",
+		"yargs": "^17.7.2"
 	},
 	"devDependencies": {
-		"@types/yargs": "^17.0.33"
+		"@types/yargs": "^17.0.35"
 	},
 	"engines": {
 		"node": ">= 14.0.0",

Original file line number	Diff line number	Diff line change
`@@ -73,7 +73,7 @@`
`73`	`73`	`"*/!(compile_commands.json)": "prettier --write --ignore-unknown --allow-empty --log-level debug"`
`74`	`74`	`},`
`75`	`75`	`"engines": {`
`76`		`- "node": ">= 20.0.0",`
	`76`	`+ "node": ">= 20.*",`
`77`	`77`	`"npm": ">= 7.0.0"`
`78`	`78`	`}`
`79`	`79`	`}`