[Snyk] Security upgrade handlebars from 4.0.11 to 4.6.0

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

✨What is Merge Advice?

We check thousands of dependency upgrade pull requests and CI tests every day to see which upgrades were successfully merged. After crunching this data, we give a recommendation on how safe we think the change is for you to merge without causing issues. Learn more, and share your feedback to help improve this feature. 🙏

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Issue	Breaking Change	Exploit Maturity
	Prototype Pollution SNYK-JS-HANDLEBARS-173692	No	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-174183	No	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-469063	No	No Known Exploit
	Denial of Service (DoS) SNYK-JS-HANDLEBARS-480388	No	No Known Exploit
	Arbitrary Code Execution SNYK-JS-HANDLEBARS-534478	No	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-534988	No	No Known Exploit
	Prototype Pollution SNYK-JS-HANDLEBARS-567742	No	Proof of Concept

Commit messages

Package name: handlebars

The new version differs by 175 commits.

• 91a1b5d v4.6.0
• 770d746 Update release notes
• d7f0dcf refactor: fix typo in private test method
• 187d611 test: add path to nodeJs when running test:bin
• d337f40 test: show diff when test:bin fails
• d03b6ec feat: access control to prototype properties via whitelist
• 164b7ff chore: ignore .nyc_output
• ac4655e chore: disable "dot-notation" rule
• 14b621c test/style: remove or hide unused code in git.js, add tests
• 1ec1737 test/style: refactor remaining grunt tasks to use promises instead of callbacks
• 1ebce2b test/style: use nyc instead of istanbul, npm audit fix
• 3a5b65e test/style: refactor parser task
• dde108e test/style: refactor test-task to make it more readable
• dc54952 chore: change eslint-rules for tasks/
• d1fb07b Update (C) year in the LICENSE file
• 04b1984 chore: try to fix saucelabs credentials (support nodejs benweet/stackedit#1627)
• c40d9f3 chore: active linting and formatting on commit
• 8901c28 chore: fix task name in build
• e97685e style: reformat all files using prettier
• e913dc5 chore: restructure build commands
• 1f61f21 chore: configure prettier and eslint
• 587e7a3 remove yarn.lock
• edcc84f Update readme.md with updated links (Question: Is there a way to change the tab width? benweet/stackedit#1620)
• 23d58e7 fix(runtime.js): partials compile not caching (npm install and start is broken benweet/stackedit#1600)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:

🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

[pull-assistant]

Best reviewed: commit by commit

---

Optimal code review plan

     fix: package.json & package-lock.json to reduce vulnerabilities

     fix: package.json & package-lock.json to reduce vulnerabilities

     Merge branch 'master' into snyk-fix-f5eddaf58c374c78341fd3cd4af1b3fd

Powered by Pull Assistant. Last update e2c9a70 ... fd7dabe. Read the comment docs.