fix(deps): update dependency handlebars to v4.7.10 #326

Merged

davide merged 1 commit from renovate-handlebars-4.x into main

2026-10-09 09:41:00 +00:00

renovate-bot commented

2026-10-09 09:08:01 +00:00

Member

This PR contains the following updates:

Package	Change	Age	Confidence
handlebars (source)	`4.7.9` → `4.7.10`

Release Notes

handlebars-lang/handlebars.js (handlebars)

`v4.7.10`

Compare Source

security: Sanitize the source map URL when minifying - f37c599
security: Iterate lazily in #each and strip whitespace in linear time - 812c226
security: Escape <!-- and <script in precompiled output - 609d1b1 GHSA-xw65-4hp5-5hc7
security: Don't trust special properties on context data - ceec388 GHSA-p8wg-vrv2-v86f
security: Only compile partials that are template strings - c28ee7a
security: Only dispatch known node types in the Compiler and Visitor - 7d501a5
security: Validate AST values in the compiler instead of the parser - 703fdcc GHSA-8r5x-fm3f-whwj
Clarify that --root does not restrict filesystem access - 0fcf25c
Bump minimist to ^1.2.8 - ea8ed82
Fix Ruby component publishing documentation - d069c1c
Fix Composer component definition - 6714e07

Compatibility notes:

{{#each}} iterates iterables such as Map, Set and generators lazily, like for...of, instead of
copying them into an array first. Values added to the iterable while the block renders are now visited too.

Commits

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [handlebars](https://handlebarsjs.com/) ([source](https://github.com/handlebars-lang/handlebars.js)) | [`4.7.9` → `4.7.10`](https://renovatebot.com/diffs/npm/handlebars/4.7.9/4.7.10) | ![age](https://developer.mend.io/api/mc/badges/age/npm/handlebars/4.7.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/npm/handlebars/4.7.9/4.7.10?slim=true) | --- ### Release Notes <details> <summary>handlebars-lang/handlebars.js (handlebars)</summary> ### [`v4.7.10`](https://github.com/handlebars-lang/handlebars.js/releases/tag/v4.7.10) [Compare Source](https://github.com/handlebars-lang/handlebars.js/compare/v4.7.9...v4.7.10) - security: Sanitize the source map URL when minifying - [`f37c599`](https://github.com/handlebars-lang/handlebars.js/commit/f37c599) - security: Iterate lazily in #each and strip whitespace in linear time - [`812c226`](https://github.com/handlebars-lang/handlebars.js/commit/812c226) - security: Escape `If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

renovate-bot added 1 commit

2026-10-09 09:08:01 +00:00

fix(deps): update dependency handlebars to v4.7.10

renovate/stability-days Updates have met minimum release age requirement

Details

check-commitizen.yaml / Check the PR title (pull_request) Successful in 2s

Details

check-formatter.yaml / Checks with formatters (pull_request) Successful in 14s

Details

check-linter.yaml / Checks with linters (pull_request) Successful in 17s

Details

check-syntax.yaml / Checks with static tools (pull_request) Successful in 1m12s