Skip to content

build(deps): bump com.github.jknack:handlebars from 4.5.4 to 4.5.5 - #87

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.github.jknack-handlebars-4.5.5
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/com.github.jknack-handlebars-4.5.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 16, 2026 •

Copy link
Copy Markdown
Contributor

Bumps com.github.jknack:handlebars from 4.5.4 to 4.5.5.

Release notes

Sourced from com.github.jknack:handlebars's releases.

handlebars.java 4.5.5

🛠️ Changes

  • [SECURITY] SpringMVC: file read outside the template directory via percent-encoded path traversal GHSA-pvrx-3g7m-fpgv
  • Iteration variables no longer visible in partial called from an each block #1185
  • Jackson 3 module. #1186

🔗 Links & Resources

Commits
  • f6ae397 v4.5.5
  • ed68e35 SpringMVC: file read outside the template directory via percent-encoded path ...
  • ad56ac0 build: version bump
  • c17ae24 Merge pull request #1186 from jolarsen/jackson3
  • 944ad98 Module for Jackson 3, root
  • 8aa7413 Module for Jackson 3
  • ef656ec Iteration variables no longer visible in partial called from an each block fi...
  • See full diff in compare view

@dependabot
dependabot Bot requested a review from boloagegit as a code owner October 16, 2026 06:47
@dependabot dependabot Bot added dependencies Dependency updates java Pull requests that update java code labels Oct 16, 2026
@github-actions github-actions Bot added area:build Build system or GitHub automation and removed dependencies Dependency updates labels Oct 16, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.github.jknack-handlebars-4.5.5 branch 4 times, most recently from 2813617 to 78f7dd5 Compare October 21, 2026 04:52
Bumps [com.github.jknack:handlebars](https://github.com/jknack/handlebars.java) from 4.5.4 to 4.5.5.
- [Release notes](https://github.com/jknack/handlebars.java/releases)
- [Commits](jknack/handlebars.java@v4.5.4...v4.5.5)

---
updated-dependencies:
- dependency-name: com.github.jknack:handlebars
  dependency-version: 4.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.github.jknack-handlebars-4.5.5 branch from 78f7dd5 to 8edd5a8 Compare October 23, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area:build Build system or GitHub automation java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants