refactor: Bump handlebars from 4.7.7 to 4.7.9 by dependabot[bot] · Pull Request #206 · parse-community/node-apn

dependabot · 2026-03-27T04:24:08Z

Bumps handlebars from 4.7.7 to 4.7.9.

Release notes

v4.7.9

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

GHSA-2w6w-674q-4c4q

GHSA-3mfm-83xf-c92r

GHSA-xhpv-hc6g-r9c6

GHSA-xjpj-3mr7-gcpf

GHSA-9cx6-37pm-9jff

GHSA-2qvq-rjwj-gvw9

GHSA-7rx3-28cr-v5wh

GHSA-442j-39wm-28r2

Commits

v4.7.8

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

Commits

v4.7.8 - July 27th, 2023

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Commits

dce542c v4.7.9
8a41389 Update release notes
68d8df5 Fix security issues
b2a0831 Fix browser tests
9f98c16 Fix release script
45443b4 Revert "Improve partial indenting performance"
8841a5f Fix CI errors with linting
e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
e914d60 Improve rendering performance
7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.

Summary by CodeRabbit

Chores
- Upgraded Handlebars dependency from version 4.7.7 to 4.7.9
- Updated neo-async dependency constraint within Handlebars package

parseplatformorg · 2026-03-27T04:24:20Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.7 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.7...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

parse-github-assistant · 2026-03-30T00:10:34Z

I will reformat the title to use the proper commit message syntax.

parse-github-assistant · 2026-03-30T00:10:37Z

🚀 Thanks for opening this pull request! We appreciate your effort in improving the project. Please let us know once your pull request is ready for review.

Tip

Keep pull requests small. Large PRs will be rejected. Break complex features into smaller, incremental PRs.
Use Test Driven Development. Write failing tests before implementing functionality. Ensure tests pass.
Group code into logical blocks. Add a short comment before each block to explain its purpose.
We offer conceptual guidance. Coding is up to you. PRs must be merge-ready for human review.
Our review focuses on concept, not quality. PRs with code issues will be rejected. Use an AI agent.
Human review time is precious. Avoid review ping-pong. Inspect and test your AI-generated code.

Note

Please respond to review comments from AI agents just like you would to comments from a human reviewer. Let the reviewer resolve their own comments, unless they have reviewed and accepted your commit, or agreed with your explanation for why the feedback was incorrect.

Caution

Pull requests must be written using an AI agent with human supervision. Pull requests written entirely by a human will likely be rejected, because of lower code quality, higher review effort and the higher risk of introducing bugs. Please note that AI review comments on this pull request alone do not satisfy this requirement.

mtrezza · 2026-03-30T00:11:03Z

@coderabbitai review

coderabbitai · 2026-03-30T00:11:08Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2026-03-30T00:11:18Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: ea77ded2-4740-4544-8ae5-4e9e546b2b38

📥 Commits

Reviewing files that changed from the base of the PR and between 0e0b7d6 and 1a405fa.

📒 Files selected for processing (1)

package-lock.json

📝 Walkthrough

Walkthrough

The package-lock.json file was updated to reflect a minor version bump of the handlebars package from 4.7.7 to 4.7.9, along with a tightened constraint on its neo-async dependency and the addition of a license field metadata.

Changes

Cohort / File(s)	Summary
Dependency Version Updates `package-lock.json`	Upgraded `handlebars` from 4.7.7 to 4.7.9, tightened `neo-async` dependency constraint from `^2.6.0` to `^2.6.2`, and added `license: "MIT"` field to handlebars metadata.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: bumping the handlebars dependency version from 4.7.7 to 4.7.9, which is precisely what the package-lock.json modification accomplishes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/npm_and_yarn/handlebars-4.7.9

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

parseplatformorg · 2026-03-31T01:35:27Z

🎉 This change has been released in version 8.0.0

dependabot bot added dependencies Bot label; pull requests that updates a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch from cf2b9a4 to be76c59 Compare March 29, 2026 16:16

dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch from be76c59 to 1a405fa Compare March 29, 2026 17:05

mtrezza changed the title ~~build(deps-dev): bump handlebars from 4.7.7 to 4.7.9~~ refactor: bump handlebars from 4.7.7 to 4.7.9 Mar 30, 2026

parse-github-assistant bot changed the title ~~refactor: bump handlebars from 4.7.7 to 4.7.9~~ refactor: Bump handlebars from 4.7.7 to 4.7.9 Mar 30, 2026

coderabbitai bot approved these changes Mar 30, 2026

View reviewed changes

mtrezza merged commit 960121c into master Mar 30, 2026
10 of 11 checks passed

dependabot bot deleted the dependabot/npm_and_yarn/handlebars-4.7.9 branch March 30, 2026 00:14

parseplatformorg added the state:released label Mar 31, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

refactor: Bump handlebars from 4.7.7 to 4.7.9#206

refactor: Bump handlebars from 4.7.7 to 4.7.9#206
mtrezza merged 1 commit intomasterfrom
dependabot/npm_and_yarn/handlebars-4.7.9

dependabot bot commented on behalf of github Mar 27, 2026 •

edited by coderabbitai bot

Loading

Uh oh!

parseplatformorg commented Mar 27, 2026 •

edited

Loading

Uh oh!

parse-github-assistant bot commented Mar 30, 2026

Uh oh!

parse-github-assistant bot commented Mar 30, 2026

Uh oh!

mtrezza commented Mar 30, 2026

Uh oh!

coderabbitai bot commented Mar 30, 2026

Uh oh!

coderabbitai bot commented Mar 30, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Uh oh!

Uh oh!

parseplatformorg commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 27, 2026 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.7.9

v4.7.8

v4.7.9 - March 26th, 2026

v4.7.8 - July 27th, 2023

Summary by CodeRabbit

Uh oh!

parseplatformorg commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

parse-github-assistant bot commented Mar 30, 2026

Uh oh!

parse-github-assistant bot commented Mar 30, 2026

Uh oh!

mtrezza commented Mar 30, 2026

Uh oh!

coderabbitai bot commented Mar 30, 2026

Uh oh!

coderabbitai bot commented Mar 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Uh oh!

Uh oh!

parseplatformorg commented Mar 31, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Mar 27, 2026 •

edited by coderabbitai bot

Loading

parseplatformorg commented Mar 27, 2026 •

edited

Loading

coderabbitai bot commented Mar 30, 2026 •

edited

Loading