From c724ebff692cf272d6527bba9813c076142f97c6 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 20 Dec 2024 07:25:37 +0000 Subject: [PATCH] fix: upgrade handlebars from 4.7.7 to 4.7.8 Snyk has created this PR to upgrade handlebars from 4.7.7 to 4.7.8. See this package in yarn: handlebars See this project in Snyk: https://app.snyk.io/org/gableroux/project/093e9366-5632-4113-a1ed-029b2cc1bfad?utm_source=github&utm_medium=referral&page=upgrade-pr --- package.json | 2 +- yarn.lock | 14 +++++++------- 2 files changed, 8 insertions(+), 8 deletions(-) diff --git a/package.json b/package.json index ec6f5ab5..cbf0720d 100644 --- a/package.json +++ b/package.json @@ -19,7 +19,7 @@ "@actions/exec": "^1.1.0", "@actions/github": "^5.0.0", "@octokit/openapi-types": "^11.2.0", - "handlebars": "^4.7.7", + "handlebars": "^4.7.8", "xml-js": "^1.6.11" }, "devDependencies": { diff --git a/yarn.lock b/yarn.lock index 1adccdb8..190a23f1 100644 --- a/yarn.lock +++ b/yarn.lock @@ -2902,13 +2902,13 @@ growly@^1.3.0: resolved "https://registry.npmjs.org/growly/-/growly-1.3.0.tgz" integrity sha1-8QdIy+dq+WS3yWyTxrzCivEgwIE= -handlebars@^4.7.7: - version "4.7.7" - resolved "https://registry.npmjs.org/handlebars/-/handlebars-4.7.7.tgz" - integrity sha512-aAcXm5OAfE/8IXkcZvCepKU3VzW1/39Fb5ZuqMtgI/hT8X2YgoMvBY5dLhq/cpOvw7Lk1nK/UF71aLG/ZnVYRA== +handlebars@^4.7.8: + version "4.7.8" + resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.8.tgz#41c42c18b1be2365439188c77c6afae71c0cd9e9" + integrity sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ== dependencies: minimist "^1.2.5" - neo-async "^2.6.0" + neo-async "^2.6.2" source-map "^0.6.1" wordwrap "^1.0.0" optionalDependencies: @@ -4352,9 +4352,9 @@ natural-compare@^1.4.0: resolved "https://registry.npmjs.org/natural-compare/-/natural-compare-1.4.0.tgz" integrity sha1-Sr6/7tdUHywnrPspvbvRXI1bpPc= -neo-async@^2.6.0: +neo-async@^2.6.2: version "2.6.2" - resolved "https://registry.npmjs.org/neo-async/-/neo-async-2.6.2.tgz" + resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.2.tgz#b4aafb93e3aeb2d8174ca53cf163ab7d7308305f" integrity sha512-Yd3UES5mWCSqR+qNT93S3UoYUkqAZ9lLg8a7g9rimsWmYGK8cVToA4/sF3RrshdyV3sAGMXVUmpMYOw+dLpOuw== nice-try@^1.0.4: