[Snyk] Upgrade handlebars from 4.3.0 to 4.7.3

[snyk-bot]

Snyk has created this PR to upgrade handlebars from 4.3.0 to 4.7.3.

:information_source: Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 20 versions ahead of your current version.
• The recommended version was released a month ago, on 2020-02-05.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	No Known Exploit
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	No Known Exploit

Release notes

Package name: handlebars

• 4.7.3 - 2020-02-05
  

  v4.7.3

• 4.7.2 - 2020-01-13
  

  v4.7.2

• 4.7.1 - 2020-01-12
  

  v4.7.1

• 4.7.0 - 2020-01-10
  

  v4.7.0

• 4.6.0 - 2020-01-08
  

  v4.6.0

• 4.5.3 - 2019-11-18
  

  v4.5.3

• 4.5.2 - 2019-11-13
  

  v4.5.2

• 4.5.1 - 2019-10-29
  

  v4.5.1

• 4.5.0 - 2019-10-28
  

  v4.5.0

• 4.4.5 - 2019-10-20
  

  v4.4.5

• 4.4.4 - 2019-10-20
• 4.4.3 - 2019-10-08
• 4.4.2 - 2019-10-02
• 4.4.1 - 2019-10-02
• 4.4.0 - 2019-09-29
• 4.3.5 - 2019-10-02
• 4.3.4 - 2019-09-28
• 4.3.3 - 2019-09-27
• 4.3.2 - 2019-09-26
• 4.3.1 - 2019-09-24
• 4.3.0 - 2019-09-24

from handlebars GitHub release notes

Commit messages

Package name: handlebars

• c978969 v4.7.3
• 9278f21 Update release notes
• d78cc73 Fixes spelling and punctuation
• 4de51fe Add Type Definition for Handlebars.VERSION, Fixes #1647
• a32d05f Include Type Definition for runtime.js in Package
• ad63f51 chore: add missing "await" in aws-s3 publishing code
• 586e672 v4.7.2
• f0c6c4c Update release notes
• a4fd391 chore: execute saucelabs-task only if access-key exists
• 9d5aa36 fix: don't wrap helpers that are not functions
• 14ba3d0 v4.7.1
• 4cddfe7 Update release notes
• f152dfc fix: fix log output in case of illegal property access
• 3c1e252 fix: log error for illegal property access only once per property
• 0d5c807 v4.7.0
• 1f0834b Update release notes
• 575d877 fix: use "logger" instead of console.error
• 7af1c12 feat: default options for controlling proto access
• 91a1b5d v4.6.0
• 770d746 Update release notes
• d7f0dcf refactor: fix typo in private test method
• 187d611 test: add path to nodeJs when running test:bin
• d337f40 test: show diff when test:bin fails
• d03b6ec feat: access control to prototype properties via whitelist

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs