Skip to content

Commit abadee4

Browse files
[Security - dev] Bump handlebars from 4.1.2 to 4.7.3 (#235)
Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.2 to 4.7.3. **This update includes a security fix.** - [Release notes](https://github.com/wycats/handlebars.js/releases) - [Changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.1.2...v4.7.3) NOTES from @brodybits: This is a workaround solution until this project is ready to use Jest 25 as proposed in PR #240. This seems to be the equivalent to adding Yarn resolutions as follows (then removing after Yarn update): diff --git a/package.json b/package.json index 59ab6c9..5b31113 100644 --- a/package.json +++ b/package.json @@ -63,5 +63,9 @@ "eslint-plugin-standard": "^4.0.1", "jest": "^24.9.0", "recursive-readdir": "^2.2.2" + }, + "resolutions": { + "handlebars": "4.7.3", + "uglify-js": "^3.7.7" } } Signed-off-by: dependabot-preview[bot] <[email protected]> Signed-off-by: @brodybits (Christopher J. Brody) <[email protected]>
1 parent f57bcb5 commit abadee4

File tree

1 file changed

+11
-11
lines changed

1 file changed

+11
-11
lines changed

yarn.lock

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -958,10 +958,10 @@ commander@^3.0.1, commander@~3.0.1:
958958
resolved "https://registry.yarnpkg.com/commander/-/commander-3.0.2.tgz#6837c3fb677ad9933d1cfba42dd14d5117d6b39e"
959959
integrity sha512-Gar0ASD4BDyKC4hl4DwHqDrmvjoxWKZigVnAbn5H1owvm4CxCPdb0HQDehwNYMJpla5+M2tPmPARzhtYuwpHow==
960960

961-
commander@~2.20.0:
962-
version "2.20.0"
963-
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.0.tgz#d58bb2b5c1ee8f87b0d340027e9e94e222c5a422"
964-
integrity sha512-7j2y+40w61zy6YC2iRNpUe/NwhNyoXrYpHMrSunaMG64nRnaf96zO/KMQR4OyN/UnE5KLyEBnKHd4aG3rskjpQ==
961+
commander@~2.20.3:
962+
version "2.20.3"
963+
resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.3.tgz#fd485e84c03eb4881c20722ba48035e8531aeb33"
964+
integrity sha512-GpVkmM8vF2vQUkj2LvZmD35JxeJOLCwJ9cUkugyk2nuhbv3+mJvpLYYt+0+USMxE+oj+ey/lJEnhZw75x/OMcQ==
965965

966966
component-emitter@^1.2.1:
967967
version "1.3.0"
@@ -1859,9 +1859,9 @@ growly@^1.3.0:
18591859
integrity sha1-8QdIy+dq+WS3yWyTxrzCivEgwIE=
18601860

18611861
handlebars@^4.1.2:
1862-
version "4.1.2"
1863-
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.1.2.tgz#b6b37c1ced0306b221e094fc7aca3ec23b131b67"
1864-
integrity sha512-nvfrjqvt9xQ8Z/w0ijewdD/vvWDTOweBUm96NTr66Wfvo1mJenBLwcYmPs3TIBP5ruzYGD7Hx/DaM9RmhroGPw==
1862+
version "4.7.3"
1863+
resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.3.tgz#8ece2797826886cf8082d1726ff21d2a022550ee"
1864+
integrity sha512-SRGwSYuNfx8DwHD/6InAPzD6RgeruWLT+B8e8a7gGs8FWgHzlExpTFMEq2IA6QpAfOClpKHy6+8IqTjeBCu6Kg==
18651865
dependencies:
18661866
neo-async "^2.6.0"
18671867
optimist "^0.6.1"
@@ -4590,11 +4590,11 @@ typed-rest-client@~1.5.0:
45904590
underscore "1.8.3"
45914591

45924592
uglify-js@^3.1.4:
4593-
version "3.6.0"
4594-
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.6.0.tgz#704681345c53a8b2079fb6cec294b05ead242ff5"
4595-
integrity sha512-W+jrUHJr3DXKhrsS7NUVxn3zqMOFn0hL/Ei6v0anCIMoKC93TjcflTagwIHLW7SfMFfiQuktQyFVCFHGUE0+yg==
4593+
version "3.7.7"
4594+
resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.7.7.tgz#21e52c7dccda80a53bf7cde69628a7e511aec9c9"
4595+
integrity sha512-FeSU+hi7ULYy6mn8PKio/tXsdSXN35lm4KgV2asx00kzrLU9Pi3oAslcJT70Jdj7PHX29gGUPOT6+lXGBbemhA==
45964596
dependencies:
4597-
commander "~2.20.0"
4597+
commander "~2.20.3"
45984598
source-map "~0.6.1"
45994599

46004600

0 commit comments

Comments
 (0)