[Snyk] Upgrade hbs from 4.0.1 to 4.0.6

[snyk-bot]

Snyk has created this PR to upgrade hbs from 4.0.1 to 4.0.6.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 5 versions ahead of your current version.
• The recommended version was released 4 months ago, on 2019-10-09.

The recommended version fixes:

Severity	Issue	Exploit Maturity
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-174183	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-173692	No Known Exploit

Release notes

Package name: hbs

• 4.0.6 - 2019-10-09
  

  v4.0.6

• 4.0.5 - 2019-09-27
  

  v4.0.5

• 4.0.4 - 2019-04-15
  

  v4.0.4

• 4.0.3 - 2019-03-01
  

  v4.0.3

• 4.0.2 - 2019-02-19
  

  v4.0.2

• 4.0.1 - 2016-09-18
  

  v4.0.1

from hbs GitHub release notes

Commit messages

Package name: hbs

• 558861c v4.0.6
• d2c5b63 deps: handlebars@4.3.5
• 8ae35b8 deps: handlebars@4.3.4
• 251d95d build: mocha@6.2.1
• a992f58 v4.0.5
• aed9d51 deps: handlebars@4.3.3
• 2f12c5e tests: add tests for handling helper errors
• c3826ee tests: run express 4.x tests on Node.js 0.10
• 19b90c4 Fix handling of exceptions from layout
• 39434ad Fix handling of exceptions when cache enabled
• e00c762 build: Node.js@12.11
• 891014a Fix async helpers not working when cache enabled
• 80fe665 build: supertest@4.0.2
• c933e32 build: mocha@6.2.0
• 9e75303 lint: remove multiple empty lines
• 9d7ebbd lint: add basic eslint configuration
• 512d1e2 tests: express@~4.17.1
• 617aa06 tests: run express tests on appropriate Node.js versions
• 7980b82 tests: fix mocha suite marker locations
• dc367f3 build: support Node.js 12.x
• c3f140f build: use nyc for test coverage
• 4197b80 tests: use spec reporter
• badaf7b tests: ensure mocha suite separation
• 1fe9061 build: skip shrinkwrap generation

Compare

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

🧐 View latest project report

🛠 Adjust upgrade PR settings

🔕 Ignore this dependency or unsubscribe from future upgrade PRs