Bump mustache from 2.3.2 to 3.0.0

[dependabot-preview]

Bumps mustache from 2.3.2 to 3.0.0.

Release notes

Sourced from mustache's releases.

v3.0.0

[3.0.0] / 16 September 2018

We are very happy to announce a new major version of mustache.js. We want to be very careful not to break projects out in the wild, and adhering to Semantic Versioning we have therefore cut this new major version.

The changes introduced will likely not require any actions for most using projects. The things to look out
for that might cause unexpected rendering results are described in the migration guide below.

A big shout out and thanks to [raymond-lam] for this release! Without his contributions with code and
issue triaging, this release would never have happened.

Major

• [#618]: Allow rendering properties of primitive types that are not objects, by [raymond-lam].
• [#643]: Writer.prototype.parse to cache by tags in addition to template string, by [raymond-lam].
• [#664]: Fix Writer.prototype.parse cache, by [seminaoki].

Minor

• [#673]: Add tags parameter to Mustache.render(), by [raymond-lam].

Migrating from mustache.js v2.x to v3.x

Rendering properties of primitive types

We have ensured properties of primitive types can be rendered at all times. That means Array.length, String.length and similar. A corner case where this could cause unexpected output follows:

View:

{
  stooges: [
    { name: "Moe" },
    { name: "Larry" },
    { name: "Curly" }
  ]
}

Template:

{{#stooges}}
  {{name}}: {{name.length}} characters
{{/stooges}}

Output with v3.0:

  Moe: 3 characters
  Larry: 5 characters
  Curly: 5 characters
</table> ... (truncated)

Changelog

Sourced from mustache's changelog.

[3.0.0] / 16 September 2018

We are very happy to announce a new major version of mustache.js. We want to be very careful not to break projects
out in the wild, and adhering to Semantic Versioning we have therefore cut this new major version.

The changes introduced will likely not require any actions for most using projects. The things to look out for that
might cause unexpected rendering results are described in the migration guide below.

A big shout out and thanks to [raymond-lam] for this release! Without his contributions with code and issue triaging,
this release would never have happened.

Major

• [#618]: Allow rendering properties of primitive types that are not objects, by [raymond-lam].
• [#643]: Writer.prototype.parse to cache by tags in addition to template string, by [raymond-lam].
• [#664]: Fix Writer.prototype.parse cache, by [seminaoki].

Minor

• [#673]: Add tags parameter to Mustache.render(), by [raymond-lam].

Migrating from mustache.js v2.x to v3.x

Rendering properties of primitive types

We have ensured properties of primitive types can be rendered at all times. That means Array.length, String.length
and similar. A corner case where this could cause unexpected output follows:

View:

{
  stooges: [
    { name: "Moe" },
    { name: "Larry" },
    { name: "Curly" }
  ]
}

Template:

{{#stooges}}
  {{name}}: {{name.length}} characters
{{/stooges}}

Output with v3.0:

  Moe: 3 characters
  Larry: 5 characters
</table> ... (truncated)

Commits

• 17510f0 🚢 bump to version 3.0.0
• f452acb Update v3.0.0 release date in changelog
• 8ee916a Changelog for v3.0.0 (#674)
• a2699e4 Allow rendering properties of primitive types that are not objects (#618)
• efdeb55 Add tags parameter to .render()
• 8e45409 Update README.md to reflect correct caching behavior
• 7845848 Reintroduce pull requests #643 and #664, and update description for
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot will not automatically merge this PR because it includes a major update to a production dependency.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge
• @dependabot reopen will reopen this PR if it is closed
• @dependabot ignore this [patch|minor|major] version will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
• @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
• @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
• @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
• @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language
• @dependabot badge me will comment on this PR with code to add a "Dependabot enabled" badge to your readme

Additionally, you can set the following in your Dependabot dashboard:

• Update frequency (including time of day and day of week)
• Automerge options (never/patch/minor, and dev/runtime dependencies)
• Pull request limits (per update run and/or open at any time)
• Out-of-range updates (receive only lockfile updates, if desired)
• Security updates (receive only security updates, if desired)

Finally, you can contact us by mentioning @dependabot.

[dependabot-preview]

Superseded by #35.