refactor: Bump handlebars from 4.7.8 to 4.7.9 by dependabot[bot] · Pull Request #190 · parse-community/parse-server-api-mail-adapter

dependabot · 2026-03-27T00:29:33Z

Bumps handlebars from 4.7.8 to 4.7.9.

Release notes

v4.7.9

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

GHSA-2w6w-674q-4c4q

GHSA-3mfm-83xf-c92r

GHSA-xhpv-hc6g-r9c6

GHSA-xjpj-3mr7-gcpf

GHSA-9cx6-37pm-9jff

GHSA-2qvq-rjwj-gvw9

GHSA-7rx3-28cr-v5wh

GHSA-442j-39wm-28r2

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

Commits

Commits

dce542c v4.7.9
8a41389 Update release notes
68d8df5 Fix security issues
b2a0831 Fix browser tests
9f98c16 Fix release script
45443b4 Revert "Improve partial indenting performance"
8841a5f Fix CI errors with linting
e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
e914d60 Improve rendering performance
7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

Chores
- Updated a dependency to the latest patch version for maintenance and stability improvements.

Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.8 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.8...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

parse-github-assistant · 2026-03-27T00:29:36Z

I will reformat the title to use the proper commit message syntax.

mtrezza · 2026-03-28T17:10:19Z

@coderabbitai review

coderabbitai · 2026-03-28T17:10:26Z

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

coderabbitai · 2026-03-28T17:10:33Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 521f0351-1ae2-4bfb-bc31-6b05628159b8

📥 Commits

Reviewing files that changed from the base of the PR and between 597d20c and 329527c.

📒 Files selected for processing (1)

package-lock.json

📝 Walkthrough

Walkthrough

Updated the handlebars dependency in package-lock.json from version 4.7.8 to 4.7.9, adding the corresponding resolved tarball URL and integrity checksum for the new version.

Changes

Cohort / File(s)	Summary
Dependency Version Update `package-lock.json`	Updated handlebars from 4.7.8 to 4.7.9 with resolved URL and integrity checksum fields.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 2 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description does not follow the repository's template structure, missing required sections like Issue, Approach, and Tasks.	Restructure the description to match the template with Issue, Approach, and Tasks sections. The auto-generated Dependabot content should be included within the Approach section.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and accurately describes the main change: bumping the handlebars dependency from version 4.7.8 to 4.7.9.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch dependabot/npm_and_yarn/handlebars-4.7.9

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026

parse-github-assistant Bot changed the title ~~refactor: bump handlebars from 4.7.8 to 4.7.9~~ refactor: Bump handlebars from 4.7.8 to 4.7.9 Mar 27, 2026

coderabbitai Bot approved these changes Mar 28, 2026

View reviewed changes

mtrezza merged commit 631144c into main Mar 28, 2026
6 checks passed

mtrezza deleted the dependabot/npm_and_yarn/handlebars-4.7.9 branch March 28, 2026 17:17

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

refactor: Bump handlebars from 4.7.8 to 4.7.9#190

refactor: Bump handlebars from 4.7.8 to 4.7.9#190
mtrezza merged 1 commit intomainfrom
dependabot/npm_and_yarn/handlebars-4.7.9

dependabot Bot commented on behalf of github Mar 27, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

parse-github-assistant Bot commented Mar 27, 2026

Uh oh!

mtrezza commented Mar 28, 2026

Uh oh!

coderabbitai Bot commented Mar 28, 2026

Uh oh!

coderabbitai Bot commented Mar 28, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

❌ Failed checks (1 warning)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Mar 27, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.7.9

v4.7.9 - March 26th, 2026

Summary by CodeRabbit

Uh oh!

parse-github-assistant Bot commented Mar 27, 2026

Uh oh!

mtrezza commented Mar 28, 2026

Uh oh!

coderabbitai Bot commented Mar 28, 2026

Uh oh!

coderabbitai Bot commented Mar 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

❌ Failed checks (1 warning)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Mar 27, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Mar 28, 2026 •

edited

Loading