mozilla / fxa-auth-server

DEPRECATED - Migrated to https://github.com/mozilla/fxa
Mozilla Public License 2.0
399 stars 121 forks source link

chore(deps): Update handlebars dependency. #2920

Closed rfk closed 5 years ago

rfk commented 5 years ago

This updates handlebards in response to https://www.npmjs.com/advisories/755; we use a fixed set of templates so I don't believe it's any risk to us, but the upgrade seems simple enough (apart from the usual npm-shrinkwrap churn...)

rfk commented 5 years ago

For completeness, these are the steps I did:

rfk commented 5 years ago

(turns out there was a recent nsp for nunjucks as well, so updated that to get lint:deps passing cleanly.