From 91334f52412de6bad217935063634893701cf55e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 4 Nov 2026 01:55:32 +0000 Subject: [PATCH 1/2] chore(deps): bump commander from 11.1.0 to 14.0.3 in /packages/cli Bumps [commander](https://github.com/tj/commander.js) from 11.1.0 to 14.0.3. - [Release notes](https://github.com/tj/commander.js/releases) - [Changelog](https://github.com/tj/commander.js/blob/master/CHANGELOG.md) - [Commits](https://github.com/tj/commander.js/compare/v11.1.0...v14.0.3) --- updated-dependencies: - dependency-name: commander dependency-version: 14.0.3 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- packages/cli/package-lock.json | 15 +++++---------- packages/cli/package.json | 2 +- 2 files changed, 6 insertions(+), 11 deletions(-) diff --git a/packages/cli/package-lock.json b/packages/cli/package-lock.json index 8772f8c..6e5bacf 100644 --- a/packages/cli/package-lock.json +++ b/packages/cli/package-lock.json @@ -12,7 +12,7 @@ "@stellar/stellar-sdk": "^16.3.0", "@x402/express": "^2.28.0", "axios": "^1.20.0", - "commander": "^11.0.0", + "commander": "^14.0.3", "express": "^5.1.0", "nirium": "^0.16.1" }, @@ -215,13 +215,6 @@ "url": "https://paulmillr.com/funding/" } }, - "node_modules/@stellar/stellar-sdk/node_modules/commander": { - "version": "14.0.3", - "license": "MIT", - "engines": { - "node": ">=20" - } - }, "node_modules/@toon-format/toon": { "version": "2.3.1", "license": "MIT" @@ -518,10 +511,12 @@ } }, "node_modules/commander": { - "version": "11.1.0", + "version": "14.0.3", + "resolved": "https://registry.npmjs.org/commander/-/commander-14.0.3.tgz", + "integrity": "sha512-H+y0Jo/T1RZ9qPP4Eh1pkcQcLRglraJaSLoyOtHxu6AapkjWVCy2Sit1QQ4x3Dng8qDlSsZEet7g5Pq06MvTgw==", "license": "MIT", "engines": { - "node": ">=16" + "node": ">=20" } }, "node_modules/content-disposition": { diff --git a/packages/cli/package.json b/packages/cli/package.json index f8c4605..361fc58 100644 --- a/packages/cli/package.json +++ b/packages/cli/package.json @@ -23,7 +23,7 @@ "license": "Apache-2.0", "dependencies": { "axios": "^1.20.0", - "commander": "^11.0.0", + "commander": "^14.0.3", "nirium": "^0.16.1", "express": "^5.1.0", "@stellar/stellar-sdk": "^16.3.0", From d4ef0f78eef3b1c8a32744d9e46cb842a89b85cf Mon Sep 17 00:00:00 2001 From: Eras256 <219895655+Eras256@users.noreply.github.com> Date: Tue, 3 Nov 2026 20:06:49 -0600 Subject: [PATCH 2/2] fix(cli): drop the invalid '-port' short flag, commander 14 rejects it commander 11 silently tolerated '-port' as a short-flag alias (multiple characters after a single dash); commander 14 validates this strictly and throws "option creation failed due to '-port'" at CLI startup, breaking every command - confirmed live: reproduces identically with 14.0.3, gone after this fix, and does NOT reproduce by reverting to 11.1.0 alone (the flag was always invalid, 11 just never checked). Dropped the short alias entirely rather than picking a new letter - every single-letter option already used by this command (-p price, -P pay-to, -n network, -r route, -c config) rules out an obvious free choice, and --port alone is unambiguous. Verified locally against the PR's actual commander@14.0.3: the 2 original test failures in config-secret.test.js (both about this exact crash, ERR_ASSERTION/exit code 1) are gone. 3 other failures in the same file remain, but reproduce identically on unpatched main with commander@11.1.0 too - pre-existing, unrelated to this bump or this fix (looks like a local TTY/stdin environment difference, not a real regression). Co-Authored-By: Claude Sonnet 5 --- packages/cli/bin/nirium.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/packages/cli/bin/nirium.js b/packages/cli/bin/nirium.js index 8de29a8..da04530 100755 --- a/packages/cli/bin/nirium.js +++ b/packages/cli/bin/nirium.js @@ -229,7 +229,7 @@ program .description('🚀 Spin up a local x402-protected demo HTTP server to test payments against') .option('-p, --price ', 'Price for access (e.g. $0.02)', '$0.02') .option('-P, --pay-to
', 'Stellar public key (G...) to receive payments') - .option('-port, --port ', 'Port number to listen on', '3000') + .option('--port ', 'Port number to listen on', '3000') .option('-n, --network ', 'CAIP-2 network ID (stellar:testnet or stellar:pubnet)', 'stellar:testnet') .option('-r, --route ', 'Route path to protect', '/api/v1/data') // Kept only to refuse it with a clear message: commander's own