# What changed in @simple-git/argv-parser

> 23 changes in @simple-git/argv-parser 1 to 2 from its official release notes, upgrade guides and advisories: 7 breaking, 12 security, 2 new APIs and options. Each one cited. Sources checked 2026-10-27. HTML: https://unstale.sh/npm/@simple-git/argv-parser/

To see which of these apply to a repository, run `npx @unstale/cli init` in it.

## @simple-git/argv-parser 2

### Breaking changes

- Now blocks --git-dir, --work-tree, and -C when supplied before the git sub-command and with a value; --exec-path and GIT_EXEC_PATH are no longer grouped here. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds a category for blocking unsafe executable paths and rebase execution options. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- This path-taking global option is blocked under allowUnsafeConfigPaths when supplied before the git sub-command and with a value. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- This path-taking global option is blocked under the new allowUnsafeExec category when supplied before the git sub-command and with a value. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- This path-taking global option is blocked under allowUnsafeConfigPaths when supplied before the git sub-command and with a value. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- This environment variable is blocked under the new allowUnsafeExec category. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- This path-taking global option is blocked under allowUnsafeConfigPaths when supplied before the git sub-command and with a value. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)

### Security

- simple-git: `VISUAL` editor environment variable is omitted from unsafe editor detection (2.0.1) — [security advisory](https://github.com/advisories/GHSA-V5RQ-49VH-5V5C), [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.1)
- Expands vulnerability detection to cover this configuration pattern. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds vulnerability detection for this configuration path. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Expands vulnerability detection to cover configuration supplied through this environment variable. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds vulnerability detection for this configuration path. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Expands vulnerability detection to cover this configuration pattern. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds allowUnsafeExec detection to this rebase option. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds allowUnsafeExec detection to this rebase option. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds allowUnsafeCommandBinaries detection when configuring this trailer command. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds allowUnsafeCommandBinaries detection when configuring this trailer command. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Expands vulnerability detection to cover this configuration key. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Adds vulnerability detection for this configuration path. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)

### New APIs and options

- Adds detection for this configuration path. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)
- Exports a helper to detect whether an environment variable can be used to configure a git operation. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)

### Fixes and other changes

- Adds detection under this category for configuring trailer.<token>.cmd and trailer.<token>.command. (2.0.0) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%402.0.0)

## @simple-git/argv-parser 1

### Fixes and other changes

- Adds a backward compatible API to resolve an issue when using simple-git@3.35.2 with @simple-git/argv-parser@1.1.0. (1.1.1) — [release notes](https://github.com/steveukx/git-js/releases/tag/%40simple-git/argv-parser%401.1.1)