chore(deps): bump commander from 14.0.3 to 15.0.0

[dependabot]

Bumps commander from 14.0.3 to 15.0.0.

Release notes

Sourced from commander's releases.

v15.0.0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

Changed

• Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
• Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
• dev: switch tests from Jest to node:test test runner (#2463)

Deleted

• Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

v15.0.0-0

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 in May 2026 will move Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

... (truncated)

Changelog

Sourced from commander's changelog.

[15.0.0] (2026-05-29)

Commander 15 is ESM only. This is expected to be seamless for ESM consumers, but some CommonJS consumers may hit issues with tooling requiring configuration for ESM-only dependencies. See Migration Tips below.

The release of Commander 15 moves Commander 14 into maintenance. Commander 14 will get security updates for 12 months (to May 2027). For more info see Release Policy.

Added

• show excess command-arguments in error message (#2384)

Fixed

• Breaking: only lone --no-* option sets default option value to true, default not implicitly set when define both positive and negative option in either order (#2405)
• update example to use compatible character for MINGW64 (#2475)

Changed

• Breaking: migrated Commander implementation from CommonJS to ESM (#2464)
• Breaking: Commander 15 requires Node.js v22.12.0 or higher (for require(esm)).
• dev: switch tests from Jest to node:test test runner (#2463)

Deleted

• Breaking: removed deprecated export of commander/esm.mjs (#2464)

Migration Tips

Commander 15 is ESM only, but this does not mean you need to migrate to ESM to use it. Importing ESM from CommonJS is supported by Node.js, and Bun, and Deno. Hopefully it Just Works for you! However, you may be using a different runtime or some other part of your setup that may not yet natively support importing ESM from CommonJS, such as your testing framework or bundler.

If you have problems using Commander 15 in your environment, one option is stay on Commander 14 for now. Commander 14 will get security updates until May 2027 and things will hopefully improve for your setup in the meantime.

[15.0.0-0] (2026-02-22)

(Released as 15.0.0)

Commits

• ba6d13d Fix release dates in changelog (#2523)
• a752ed9 Pin GitHub actions with hash (#2521)
• 74d5dfe Drop EOL node 20 from test matrix, and add node 26 (#2520)
• 6df9b68 Update details for 15.0.0 release (#2519)
• 01ce5d0 Remove jest esm examples (#2517)
• d785d8b Update dependencies (#2518)
• 9098b48 Update dependencies (#2506)
• 373f660 Use node:util stripVTControlCharacters instead of own code (#2486)
• 987f289 Use simple match in test (to avoid warning about expensive regex) (#2485)
• 0ea3bb3 Update dependecies and lint (#2489)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[carlos-alm]

@greptileai

[greptile-apps]

Greptile Summary

This PR bumps commander from 14.0.3 to 15.0.0 and adjusts the engines.node lower bound accordingly. Commander 15 is ESM-only and requires Node.js ≥22.12.0 (for stabilized require(esm) support).

• package.json: commander dependency updated to ^15.0.0; engines.node tightened from >=22.6 to >=22.12.0 to match the new runtime requirement.
• package-lock.json: lock entry updated to pin commander to 15.0.0 with the new integrity hash and engines.node >=22.12.0.
• The CLI's --no-* options (--no-tests, --no-incremental, --no-ast, etc.) are all lone negations with no positive counterpart, so they are unaffected by commander 15's breaking change around default values when both positive and negative forms are defined.

Confidence Score: 5/5

Safe to merge — the version bump is handled correctly end-to-end.

The project already uses "type": "module", making it a native ESM consumer of commander 15 with no interop concerns. The engines.node field was updated in the same commit, so the declared runtime constraint now matches what commander 15 actually requires. All CLI --no-* options are lone negations with no positive counterpart defined on the same command, so the commander 15 breaking change around dual positive/negative option defaults does not apply here.

No files require special attention.

Important Files Changed

Filename	Overview
package.json	Commander bumped to ^15.0.0 and engines.node tightened to >=22.12.0 to match commander 15's minimum Node.js requirement; project is already ESM so the ESM-only commander 15 is compatible.
package-lock.json	Lock file updated to pin commander to 15.0.0 with integrity hash; engine constraint in the resolved entry is correctly set to >=22.12.0.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A[package.json\ncommander ^15.0.0\nengines.node >=22.12.0] --> B{Node.js >=22.12.0?}
    B -- Yes --> C[require ESM supported\ncommander 15 loads OK]
    B -- No --> D[Blocked by engines constraint\nbefore install]
    C --> E[CLI ESM entry\ndist/cli.js]
    E --> F[commander 15 ESM-only\nparse args]
    F --> G[--no-* options\nlone negations only\nno breaking change]

Loading

_{Reviews (2): Last reviewed commit: "Merge branch 'main' into dependabot/npm_..." | Re-trigger Greptile}

[carlos-alm]

Fixed — updated engines.node from >=22.6 to >=22.12.0 in commit 8ca3a07. Commander 15 is ESM-only and requires Node.js >=22.12.0 for stabilized require(esm) support; the old lower bound advertised compatibility with 22.6–22.11 which commander 15 cannot run on.

[carlos-alm]

@greptileai