Skip to content

chore(deps): Bump handlebars from 4.7.8 to 4.7.9#410

Merged
crazy-max merged 2 commits intomasterfrom
dependabot/npm_and_yarn/handlebars-4.7.9
Apr 1, 2026
Merged

chore(deps): Bump handlebars from 4.7.8 to 4.7.9#410
crazy-max merged 2 commits intomasterfrom
dependabot/npm_and_yarn/handlebars-4.7.9

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 26, 2026

Bumps handlebars from 4.7.8 to 4.7.9.

Release notes

Sourced from handlebars's releases.

v4.7.9

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

  • fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2
  • fix type "RuntimeOptions" also accepting string partials - eab1d14
  • feat(types): set hash to be a Record<string, any> - de4414d
  • fix non-contiguous program indices - 4512766
  • refactor: rename i to startPartIndex - e497a35
  • security: fix security issues - 68d8df5

Commits

Commits
  • dce542c v4.7.9
  • 8a41389 Update release notes
  • 68d8df5 Fix security issues
  • b2a0831 Fix browser tests
  • 9f98c16 Fix release script
  • 45443b4 Revert "Improve partial indenting performance"
  • 8841a5f Fix CI errors with linting
  • e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
  • e914d60 Improve rendering performance
  • 7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
  • Additional commits viewable in compare view

@crazy-max
Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch from 7d885a1 to 10aef7b Compare March 31, 2026 15:01
@crazy-max
Copy link
Copy Markdown
Member

https://github.com/docker/bake-action/actions/runs/23804332570/job/69373319851?pr=410

GitHub auth token from GitHub App
[@octokit/auth-app] appId option is required

Hum seems changes in #413:

if: github.event.pull_request.user.login == 'dependabot[bot]' && github.repository == github.event.pull_request.head.repo.full_name

Broke this workflow a bit. It still updates dist but when pushed it triggers this workflow again. It should skip as before in this case: https://github.com/docker/bake-action/actions/runs/23655956057/job/68913184226?pr=411

Changes were based on remediation suggested by zizmor: https://docs.zizmor.sh/audits/#remediation_3

@crazy-max
Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9.
- [Release notes](https://github.com/handlebars-lang/handlebars.js/releases)
- [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md)
- [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9)

---
updated-dependencies:
- dependency-name: handlebars
  dependency-version: 4.7.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch from f9551d2 to 0b1d05e Compare April 1, 2026 10:18
@crazy-max crazy-max merged commit 573e934 into master Apr 1, 2026
51 checks passed
@dependabot dependabot bot deleted the dependabot/npm_and_yarn/handlebars-4.7.9 branch April 1, 2026 10:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant