SierraSoftworks / roadmap

Manage your project and team road maps in YAML
https://roadmap.sierrasoftworks.com
MIT License
9 stars 5 forks source link

build(deps): Bump Handlebars.Net from 2.1.4 to 2.1.5 in /tools/docfx #439

Closed dependabot[bot] closed 6 months ago

dependabot[bot] commented 6 months ago

Bumps Handlebars.Net from 2.1.4 to 2.1.5.

Release notes

Sourced from Handlebars.Net's releases.

2.1.5

Changes

Features 🚀

  • Add EmbedUntrackedSources @​lahma (#570)

    I would also suggest changing to use newer GH Actions images for building so that other warnings would go away (old SDK in use). Maybe another modernization step could be removing old unsupported full framework targets and only support oldest supported net462. Adding net6.0 target would allow one target without dependency on Microsoft.Csharp.

  • Use PackageLicenseExpression in NuGet package @​StefH (#564)

Bug Fixes 🐛

  • Introduce PartialRecursionDepthLimit @​RoosterDragon (#552)

    When evaluating templates with partials, it is possible to recurse in the evaluation of those partials. This can be useful for dealing with tree like data, such as rendering a list of friends-of-friends-of-friends-of-etc....

    The ability to recurse can lead to stack overflows. For example if a sufficiently deep tree is provided as input data, or more simply if the partial calls itself in an infinite loop. As a stack overflow terminates the process, this is not desirable behaviour as it is an unavoidable crash.

    To resolve this a configurable PartialRecursionDepthLimit is introduced, defaulting to 100. Now when a template is evaluated a HandlebarsRuntimeException will be thrown if this limit is reached. This allows the caller to catch the exception and recover gracefully, rather than terminating the process.

  • Allow slashes properly within escape blocks @​Hoeksema (#567)

    closes #566

    The path parsing currently doesn't work properly when there are embedded slashes within an ignore block.

    This PR fixes this issue:

    • No more exceptions thrown when using // within an escaped block
    • Allowing multiple / to occur within an escape block without breakage

    Before, the individual segments between slashes in addition to the entire escaped block were returned by PathInfo. Now, it returns just the latter, which is correct. All existing unit tests still pass and new tests were added to exercise the failing cases in #566.

  • Throw properly on open ignore block instead of crashing @​Hoeksema (#569)

    Closes #568

    Resolve the hang on compile when there is an open ignore block

    Reshuffle the logic so that the throw check for end of template is done before trying to process the char

... (truncated)

Commits
  • bed0c0e Merge pull request #570 from lahma/license-expression
  • 0c6a1ad Merge branch 'master' into license-expression
  • 80727a7 Merge pull request #576 from Handlebars-Net/fix/ci
  • 985e854 Update pull_request.yml
  • e849eab Update ci.yml
  • 4f699a2 Delete .github/FUNDING.yml
  • f3fd1ef Merge pull request #552 from RoosterDragon/recursion-limit
  • c727adf Merge branch 'master' into recursion-limit
  • 9fc63f8 Merge pull request #567 from Hoeksema/patch-1
  • d214f53 Merge branch 'master' into recursion-limit
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)