Skip to content

build(deps): bump com.github.jknack:handlebars from 4.5.2 to 4.5.4 - #901

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.github.jknack-handlebars-4.5.4
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.github.jknack-handlebars-4.5.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 13, 2026

Copy link
Copy Markdown
Contributor

Bumps com.github.jknack:handlebars from 4.5.2 to 4.5.4.

Release notes

Sourced from com.github.jknack:handlebars's releases.

handlebars.java 4.5.4

🛠️ Changes

  • Certain helpers don't work inside parameterised blocks #1183

🔗 Links & Resources

handlebars.java 4.5.3

What's Changed

  • Security vulnerability. Arbitrary file read in SpringTemplateLoader via URL-fragment suffix bypass
  • Change in behavior for implicit params in partials in handlebars #1182

Full Changelog: jknack/handlebars.java@v4.5.2...v4.5.3

Commits
  • 18d6e71 v4.5.4
  • 7fb56fc build: version bump
  • 7f8a28c build: update maven release workflow with release notes
  • 84cfee4 Merge pull request #1184 from jknack/jknack-patch-1
  • 0ab541c Update FUNDING.yml
  • 9d13e6c Certain helpers don't work inside parameterised blocks
  • a733ae1 build: fix windows OS failing test
  • 0a9e359 v4.5.3
  • 7bc9061 Merge commit from fork
  • 3e27b0b build: fix failing tests on windows OS
  • Additional commits viewable in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 13, 2026
@dependabot
dependabot Bot requested review from a team and sbharatjoshi as code owners September 13, 2026 14:06
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.github.jknack-handlebars-4.5.4 branch from bc30736 to 7a72d22 Compare September 13, 2026 15:43
@dependabot dependabot Bot changed the title build(deps): bump com.github.jknack:handlebars from 4.4.0 to 4.5.4 build(deps): bump com.github.jknack:handlebars from 4.5.2 to 4.5.4 Sep 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.github.jknack-handlebars-4.5.4 branch from 7a72d22 to ad6302d Compare September 13, 2026 16:05
Bumps [com.github.jknack:handlebars](https://github.com/jknack/handlebars.java) from 4.5.2 to 4.5.4.
- [Release notes](https://github.com/jknack/handlebars.java/releases)
- [Commits](jknack/handlebars.java@v4.5.2...v4.5.4)

---
updated-dependencies:
- dependency-name: com.github.jknack:handlebars
  dependency-version: 4.5.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.github.jknack-handlebars-4.5.4 branch from ad6302d to 5cef280 Compare September 13, 2026 16:36

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants