Sourced from [handlebars's changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md).
v4.7.7 - February 15th, 2021
fix weird error in integration tests - eb860c0
fix: check prototype property access in strict-mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736)) - b6d3de7
fix: escape property names in compat mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736)) - f058970
refactor: In spec tests, use expectTemplate over equals and shouldThrow ([#1683](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683)) - 77825f8
chore: start testing on Node.js 12 and 13 - 3789a30
(POSSIBLY) BREAKING CHANGES:
the changes from version [4.6.0](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md#v460---january-8th-2020) now also apply
in when using the compile-option "strict: true". Access to prototype properties is forbidden completely by default, specific properties or methods
can be allowed via runtime-options. See [#1633](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1633) for details. If you are using Handlebars as documented, you should not be accessing prototype properties
from your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.
That is why we only bump the patch version despite mentioning breaking changes.
b6d3de7 fix: check prototype property access in strict-mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736))
f058970 fix: escape property names in compat mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736))
77825f8 refator: In spec tests, use expectTemplate over equals and shouldThrow ([#1683](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683))
Additional commits viewable in [compare view](https://github.com/wycats/handlebars.js/compare/v4.1.2...v4.7.7)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
* `@dependabot rebase` will rebase this PR
* `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
* `@dependabot merge` will merge this PR after your CI passes on it
* `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
* `@dependabot cancel merge` will cancel a previously requested merge and block automerging
* `@dependabot reopen` will reopen this PR if it is closed
* `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
* `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
* `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
* `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
* `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
* `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
* `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
* `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Moliholy/QuantumFS/network/alerts).
Bumps handlebars from 4.1.2 to 4.7.7.
Changelog
Sourced from [handlebars's changelog](https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md).
... (truncated)
Commits
a9a8e40v4.7.7e66aed5Update release notes7d4d170disable IE in Saucelabs testseb860c0fix weird error in integration testsb6d3de7fix: check prototype property access in strict-mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736))f058970fix: escape property names in compat mode ([#1736](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736))77825f8refator: In spec tests, use expectTemplate over equals and shouldThrow ([#1683](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683))3789a30chore: start testing on Node.js 12 and 13e6ad93ev4.7.62bf4fc6Update release notesDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: * `@dependabot rebase` will rebase this PR * `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it * `@dependabot merge` will merge this PR after your CI passes on it * `@dependabot squash and merge` will squash and merge this PR after your CI passes on it * `@dependabot cancel merge` will cancel a previously requested merge and block automerging * `@dependabot reopen` will reopen this PR if it is closed * `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually * `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) * `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) * `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) * `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language * `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language * `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language * `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Moliholy/QuantumFS/network/alerts).
┆Issue is synchronized with this Trello card by Unito