[9.0] Update Mustache to v4 (main) (#206184) (#220571)

# Backport

This will backport the following commits from `main` to `9.0`:
- [Update Mustache to v4 (main)
(#206184)](#206184)

<!--- Backport version: 9.6.6 -->

### Questions ?
Please refer to the [Backport tool
documentation](https://github.com/sorenlouv/backport)

<!--BACKPORT
[{"author":{"name":"elastic-renovate-prod[bot]","email":"174716857+elastic-renovate-prod[bot]@users.noreply.github.com"},"sourceCommit":{"committedDate":"2025-05-08T15:43:36Z","message":"Update
Mustache to v4 (main) (#206184)\n\nupdates the `mustache` package from
`^2.3.2` to `^4.2.0`, as well as the associated types
package","sha":"4dd8e6ee5143a1db8e2edbc1387a48f5874f914b","branchLabelMapping":{"^v9.1.0$":"main","^v(\\d+).(\\d+).\\d+$":"$1.$2"}},"sourcePullRequest":{"labels":["release_note:skip","backport:all-open","Team:obs-ux-infra_services","v9.1.0"],"title":"Update
Mustache to v4
(main)","number":206184,"url":"https://github.com/elastic/kibana/pull/206184","mergeCommit":{"message":"Update
Mustache to v4 (main) (#206184)\n\nupdates the `mustache` package from
`^2.3.2` to `^4.2.0`, as well as the associated types
package","sha":"4dd8e6ee5143a1db8e2edbc1387a48f5874f914b"}},"sourceBranch":"main","suggestedTargetBranches":[],"targetPullRequestStates":[{"branch":"main","label":"v9.1.0","branchLabelMappingKey":"^v9.1.0$","isSourceBranch":true,"state":"MERGED","url":"https://github.com/elastic/kibana/pull/206184","number":206184,"mergeCommit":{"message":"Update
Mustache to v4 (main) (#206184)\n\nupdates the `mustache` package from
`^2.3.2` to `^4.2.0`, as well as the associated types
package","sha":"4dd8e6ee5143a1db8e2edbc1387a48f5874f914b"}}]}]
BACKPORT-->

---------

Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

Author: pmuellr

package.json

@@ -1192,7 +1192,7 @@
     "monaco-editor": "^0.44.0",
     "monaco-yaml": "^5.1.0",
     "murmurhash": "^2.0.1",
-    "mustache": "^2.3.2",
+    "mustache": "^4.2.0",
     "node-diff3": "^3.1.2",
     "node-fetch": "^2.6.7",
     "node-forge": "^1.3.1",
@@ -1631,7 +1631,7 @@
     "@types/minimist": "^1.2.5",
     "@types/mock-fs": "^4.13.1",
     "@types/moment-duration-format": "^2.2.3",
-    "@types/mustache": "^0.8.31",
+    "@types/mustache": "^4.2.5",
     "@types/nock": "^10.0.3",
     "@types/node": "20.10.5",
     "@types/node-fetch": "2.6.4",

src/platform/packages/shared/response-ops/rule_form/src/validation/validate_params_for_warnings.ts

@@ -37,7 +37,7 @@ export const validateParamsForWarnings = ({
 
     try {
       const variables = new Set(
-        (Mustache.parse(value) as Array<[string, string]>)
+        Mustache.parse(value)
           .filter(([type]) => type === 'name')
           .map(([, v]) => v)
       );

src/platform/plugins/shared/home/public/application/components/tutorial/replace_template_strings.js

@@ -7,21 +7,12 @@
  * License v3.0 only", or the "Server Side Public License, v 1".
  */
 
-import { Writer } from 'mustache';
+import Mustache from 'mustache';
 import { getServices } from '../../kibana_services';
 
 const TEMPLATE_TAGS = ['{', '}'];
 
-// Can not use 'Mustache' since its a global object
-const mustacheWriter = new Writer();
-// do not html escape output
-mustacheWriter.escapedValue = function escapedValue(token, context) {
-  const value = context.lookup(token[1]);
-  if (value != null) {
-    return value;
-  }
-};
-
+// replace template strings without the default mustache escaping
 export function replaceTemplateStrings(text, params = {}) {
   const { tutorialService, kibanaVersion, docLinks } = getServices();
 
@@ -50,6 +41,9 @@ export function replaceTemplateStrings(text, params = {}) {
     },
     params: params,
   };
-  mustacheWriter.parse(text, TEMPLATE_TAGS);
-  return mustacheWriter.render(text, variables);
+  const config = {
+    tags: TEMPLATE_TAGS,
+    escape: (s) => s,
+  };
+  return Mustache.render(text, variables, undefined, config);
 }

x-pack/platform/plugins/shared/triggers_actions_ui/public/application/lib/validate_params_for_warnings.ts

@@ -34,7 +34,7 @@ export function validateParamsForWarnings(
 
     try {
       const variables = new Set(
-        (Mustache.parse(value) as Array<[string, string]>)
+        Mustache.parse(value)
           .filter(([type]) => type === 'name')
           .map(([, v]) => v)
       );

x-pack/solutions/observability/plugins/apm/public/components/app/settings/custom_link/create_edit_custom_link_flyout/helper.ts

@@ -48,7 +48,7 @@ export const getSelectOptions = (filters: Filter[], selectedKey: Filter['key'])
 };
 
 const getInvalidTemplateVariables = (template: string, transaction: Transaction) => {
-  return (Mustache.parse(template) as Array<[string, string]>)
+  return Mustache.parse(template)
     .filter(([type]) => type === 'name')
     .map(([, value]) => value)
     .filter((templateVar) => get(transaction, templateVar) == null);

x-pack/solutions/observability/plugins/apm/public/components/fleet_integration/apm_agents/render_mustache.ts

@@ -8,7 +8,7 @@
 import type { DocLinksStart } from '@kbn/core/public';
 import Mustache from 'mustache';
 
-const TEMPLATE_TAGS = ['{', '}'];
+const TEMPLATE_TAGS: [string, string] = ['{', '}'];
 
 export function renderMustache({
   text,

yarn.lock

@@ -11443,10 +11443,10 @@
   dependencies:
     moment ">=2.14.0"
 
-"@types/mustache@^0.8.31":
-  version "0.8.31"
-  resolved "https://registry.yarnpkg.com/@types/mustache/-/mustache-0.8.31.tgz#7c86cbf74f7733f9e3bdc28817623927eb386616"
-  integrity sha512-72flCZJkEJHPwhmpHgg4a0ZBLssMhg5NB0yltRblRlZMo4py3B/u/d7icevc4EeN9MPQUo/dPtuVOoVy9ih6cQ==
+"@types/mustache@^4.2.5":
+  version "4.2.5"
+  resolved "https://registry.yarnpkg.com/@types/mustache/-/mustache-4.2.5.tgz#9129f0d6857f976e00e171bbb3460e4b702f84ef"
+  integrity sha512-PLwiVvTBg59tGFL/8VpcGvqOu3L4OuveNvPi0EYbWchRdEVP++yRUXJPFl+CApKEq13017/4Nf7aQ5lTtHUNsA==
 
 "@types/nock@^10.0.3":
   version "10.0.3"
@@ -23570,11 +23570,6 @@ murmurhash@^2.0.1:
   resolved "https://registry.yarnpkg.com/murmurhash/-/murmurhash-2.0.1.tgz#4097720e08cf978872194ad84ea5be2dec9b610f"
   integrity sha512-5vQEh3y+DG/lMPM0mCGPDnyV8chYg/g7rl6v3Gd8WMF9S429ox3Xk8qrk174kWhG767KQMqqxLD1WnGd77hiew==
 
-mustache@^2.3.2:
-  version "2.3.2"
-  resolved "https://registry.yarnpkg.com/mustache/-/mustache-2.3.2.tgz#a6d4d9c3f91d13359ab889a812954f9230a3d0c5"
-  integrity sha512-KpMNwdQsYz3O/SBS1qJ/o3sqUJ5wSb8gb0pul8CO0S56b9Y2ALm8zCfsjPXsqGFfoNBkDwZuZIAjhsZI03gYVQ==
-
 mustache@^4.2.0:
   version "4.2.0"
   resolved "https://registry.npmjs.org/mustache/-/mustache-4.2.0.tgz"