{"action":"opened","number":1,"pull_request":{"url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1","id":357839391,"node_id":"MDExOlB1bGxSZXF1ZXN0MzU3ODM5Mzkx","html_url":"https://github.com/vgrigoryevich/homeJS/pull/1","diff_url":"https://github.com/vgrigoryevich/homeJS/pull/1.diff","patch_url":"https://github.com/vgrigoryevich/homeJS/pull/1.patch","issue_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/1","number":1,"state":"open","locked":false,"title":"Bump handlebars from 4.1.0 to 4.3.0 in /Webpack-VR","user":{"login":"dependabot[bot]","id":49699333,"node_id":"MDM6Qm90NDk2OTkzMzM=","avatar_url":"https://avatars0.githubusercontent.com/in/29110?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.0 to 4.3.0.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [handlebars's changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md).*\n\n> ## v4.3.0 - September 24th, 2019\n> Fixes:\n> \n> - Security: Disallow calling \"helperMissing\" and \"blockHelperMissing\" directly - 2078c72\n> - Disallow calling \"helperMissing\" and \"blockHelperMissing\" directly - 2078c72\n> \n> Features:\n> \n> - Add new runtime option `allowCallsToHelperMissing` to allow calling `blockHelperMissing` and `helperMissing`.\n> \n> Breaking changes:\n> \n> Compatibility notes:\n> - Compiler revision increased - 06b7224\n>   - This means that template compiled with versions prior to 4.3.0 will not work with runtimes >= 4.3.0\n>     The increase was done because the \"helperMissing\" and \"blockHelperMissing\" are now moved from the helpers\n>     to the internal \"container.hooks\" object, so old templates will not be able to call them anymore. We suggest\n>     that you always recompile your templates with the latest compiler in your build pipelines.\n> \n> - Disallow calling \"helperMissing\" and \"blockHelperMissing\" directly - 2078c72\n>   - Calling \"helperMissing\" and \"blockHelperMissing\" directly from a template (like in `{{blockHelperMissing}}` was \n>     never intended and was part of the exploits that have been revealed early in 2019 \n>     (see https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1495). *It is also part of a new exploit that \n>     is not captured by the earlier fix.* In order to harden Handlebars against such exploits, calling thos helpers \n>     is now not possible anymore. *Overriding* those helpers is still possible.\n>   - If you really need this behavior, you can set the runtime option `allowCallsToHelperMissing` to `true` and the\n>     calls will again be possible\n> \n> Both bullet points imly that Handlebars is not 100% percent compatible to 4.2.0, despite the minor version bump.\n> \n> We consider it more important to resolve a major security issue than to maintain 100% compatibility.\n> \n>     \n> \n> [Commits](https://github.com/wycats/handlebars.js/compare/v4.2.1...v4.3.0)\n> \n> ## v4.2.1 - September 20th, 2019\n> Bugfixes: \n> \n> - The \"browser\" property in the package.json has been updated to use the common-js builds instead of the minified UMD - c55a7be, [#1553](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1553)\n> \n> Compatibility notes:\n> - No compatibility issues should arise\n> \n> [Commits](https://github.com/wycats/handlebars.js/compare/v4.2.0...v4.2.1)\n> \n> ## v4.2.0 - September 3rd, 2019\n> Chore/Test:\n> - Use custom `grunt-saucelab` with current sauce-connect proxy - f119497\n> - Add framework for various integration tests - f9cce4d\n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`a89081d`](https://github.com/wycats/handlebars.js/commit/a89081d440a9da9f3f25835f47de837907b0094a) v4.3.0\n- [`bba6560`](https://github.com/wycats/handlebars.js/commit/bba65605b111965bc1e1643a489a3b3c56f190b3) Update release notes\n- [`06b7224`](https://github.com/wycats/handlebars.js/commit/06b7224ed94ad00d342be416250305a8cb92112b) adjust compiler revision\n- [`2078c72`](https://github.com/wycats/handlebars.js/commit/2078c727c627f25d4a149962f05c1e069beb18bc) Disallow calling \"helperMissing\" and \"blockHelperMissing\" directly\n- [`fff3e40`](https://github.com/wycats/handlebars.js/commit/fff3e40402c9f9cd790984560658646a26e1c930) v4.2.1\n- [`35bcd44`](https://github.com/wycats/handlebars.js/commit/35bcd4405fad758520308754f05b88c97c7b380c) Update release notes\n- [`00b4f2f`](https://github.com/wycats/handlebars.js/commit/00b4f2ff98bf6285cc551f090166a92a70196124) Fix some small typos.\n- [`e47b5ec`](https://github.com/wycats/handlebars.js/commit/e47b5ec192392cee548c5c01dc85b72b0fc8419b) integration-tests for various webpack-scenarios\n- [`c55a7be`](https://github.com/wycats/handlebars.js/commit/c55a7bed781b4cff132d18d778bf16268ce34f01) fix: use cjs for browser fields\n- [`164c7ce`](https://github.com/wycats/handlebars.js/commit/164c7ceea4ce074f70f2fefeba81e2e551757ea6) v4.2.0\n- Additional commits viewable in [compare view](https://github.com/wycats/handlebars.js/compare/v4.1.0...v4.3.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.3.0)](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vgrigoryevich/homeJS/network/alerts).\n\n</details>","created_at":"2019-12-29T21:14:07Z","updated_at":"2019-12-29T21:14:08Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1759326887,"node_id":"MDU6TGFiZWwxNzU5MzI2ODg3","url":"https://api.github.com/repos/vgrigoryevich/homeJS/labels/dependencies","name":"dependencies","color":"0366d6","default":false,"description":"Pull requests that update a dependency file"}],"milestone":null,"commits_url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1/commits","review_comments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1/comments","review_comment_url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/comments{/number}","comments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/1/comments","statuses_url":"https://api.github.com/repos/vgrigoryevich/homeJS/statuses/c6dfab24eccf43ea6ab19bff2113e9c9c0248cf4","head":{"label":"vgrigoryevich:dependabot/npm_and_yarn/Webpack-VR/handlebars-4.3.0","ref":"dependabot/npm_and_yarn/Webpack-VR/handlebars-4.3.0","sha":"c6dfab24eccf43ea6ab19bff2113e9c9c0248cf4","user":{"login":"vgrigoryevich","id":46827558,"node_id":"MDQ6VXNlcjQ2ODI3NTU4","avatar_url":"https://avatars2.githubusercontent.com/u/46827558?v=4","gravatar_id":"","url":"https://api.github.com/users/vgrigoryevich","html_url":"https://github.com/vgrigoryevich","followers_url":"https://api.github.com/users/vgrigoryevich/followers","following_url":"https://api.github.com/users/vgrigoryevich/following{/other_user}","gists_url":"https://api.github.com/users/vgrigoryevich/gists{/gist_id}","starred_url":"https://api.github.com/users/vgrigoryevich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vgrigoryevich/subscriptions","organizations_url":"https://api.github.com/users/vgrigoryevich/orgs","repos_url":"https://api.github.com/users/vgrigoryevich/repos","events_url":"https://api.github.com/users/vgrigoryevich/events{/privacy}","received_events_url":"https://api.github.com/users/vgrigoryevich/received_events","type":"User","site_admin":false},"repo":{"id":201232064,"node_id":"MDEwOlJlcG9zaXRvcnkyMDEyMzIwNjQ=","name":"homeJS","full_name":"vgrigoryevich/homeJS","private":false,"owner":{"login":"vgrigoryevich","id":46827558,"node_id":"MDQ6VXNlcjQ2ODI3NTU4","avatar_url":"https://avatars2.githubusercontent.com/u/46827558?v=4","gravatar_id":"","url":"https://api.github.com/users/vgrigoryevich","html_url":"https://github.com/vgrigoryevich","followers_url":"https://api.github.com/users/vgrigoryevich/followers","following_url":"https://api.github.com/users/vgrigoryevich/following{/other_user}","gists_url":"https://api.github.com/users/vgrigoryevich/gists{/gist_id}","starred_url":"https://api.github.com/users/vgrigoryevich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vgrigoryevich/subscriptions","organizations_url":"https://api.github.com/users/vgrigoryevich/orgs","repos_url":"https://api.github.com/users/vgrigoryevich/repos","events_url":"https://api.github.com/users/vgrigoryevich/events{/privacy}","received_events_url":"https://api.github.com/users/vgrigoryevich/received_events","type":"User","site_admin":false},"html_url":"https://github.com/vgrigoryevich/homeJS","description":null,"fork":false,"url":"https://api.github.com/repos/vgrigoryevich/homeJS","forks_url":"https://api.github.com/repos/vgrigoryevich/homeJS/forks","keys_url":"https://api.github.com/repos/vgrigoryevich/homeJS/keys{/key_id}","collaborators_url":"https://api.github.com/repos/vgrigoryevich/homeJS/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/vgrigoryevich/homeJS/teams","hooks_url":"https://api.github.com/repos/vgrigoryevich/homeJS/hooks","issue_events_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/events{/number}","events_url":"https://api.github.com/repos/vgrigoryevich/homeJS/events","assignees_url":"https://api.github.com/repos/vgrigoryevich/homeJS/assignees{/user}","branches_url":"https://api.github.com/repos/vgrigoryevich/homeJS/branches{/branch}","tags_url":"https://api.github.com/repos/vgrigoryevich/homeJS/tags","blobs_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/refs{/sha}","trees_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/trees{/sha}","statuses_url":"https://api.github.com/repos/vgrigoryevich/homeJS/statuses/{sha}","languages_url":"https://api.github.com/repos/vgrigoryevich/homeJS/languages","stargazers_url":"https://api.github.com/repos/vgrigoryevich/homeJS/stargazers","contributors_url":"https://api.github.com/repos/vgrigoryevich/homeJS/contributors","subscribers_url":"https://api.github.com/repos/vgrigoryevich/homeJS/subscribers","subscription_url":"https://api.github.com/repos/vgrigoryevich/homeJS/subscription","commits_url":"https://api.github.com/repos/vgrigoryevich/homeJS/commits{/sha}","git_commits_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/commits{/sha}","comments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/comments{/number}","issue_comment_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/comments{/number}","contents_url":"https://api.github.com/repos/vgrigoryevich/homeJS/contents/{+path}","compare_url":"https://api.github.com/repos/vgrigoryevich/homeJS/compare/{base}...{head}","merges_url":"https://api.github.com/repos/vgrigoryevich/homeJS/merges","archive_url":"https://api.github.com/repos/vgrigoryevich/homeJS/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/vgrigoryevich/homeJS/downloads","issues_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues{/number}","pulls_url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls{/number}","milestones_url":"https://api.github.com/repos/vgrigoryevich/homeJS/milestones{/number}","notifications_url":"https://api.github.com/repos/vgrigoryevich/homeJS/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/vgrigoryevich/homeJS/labels{/name}","releases_url":"https://api.github.com/repos/vgrigoryevich/homeJS/releases{/id}","deployments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/deployments","created_at":"2019-08-08T10:08:25Z","updated_at":"2019-08-26T21:07:36Z","pushed_at":"2019-12-29T21:14:07Z","git_url":"git://github.com/vgrigoryevich/homeJS.git","ssh_url":"git@github.com:vgrigoryevich/homeJS.git","clone_url":"https://github.com/vgrigoryevich/homeJS.git","svn_url":"https://github.com/vgrigoryevich/homeJS","homepage":null,"size":21576,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"base":{"label":"vgrigoryevich:master","ref":"master","sha":"7d2b40cb58d5be45acbf963fd06e2a71f2323d35","user":{"login":"vgrigoryevich","id":46827558,"node_id":"MDQ6VXNlcjQ2ODI3NTU4","avatar_url":"https://avatars2.githubusercontent.com/u/46827558?v=4","gravatar_id":"","url":"https://api.github.com/users/vgrigoryevich","html_url":"https://github.com/vgrigoryevich","followers_url":"https://api.github.com/users/vgrigoryevich/followers","following_url":"https://api.github.com/users/vgrigoryevich/following{/other_user}","gists_url":"https://api.github.com/users/vgrigoryevich/gists{/gist_id}","starred_url":"https://api.github.com/users/vgrigoryevich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vgrigoryevich/subscriptions","organizations_url":"https://api.github.com/users/vgrigoryevich/orgs","repos_url":"https://api.github.com/users/vgrigoryevich/repos","events_url":"https://api.github.com/users/vgrigoryevich/events{/privacy}","received_events_url":"https://api.github.com/users/vgrigoryevich/received_events","type":"User","site_admin":false},"repo":{"id":201232064,"node_id":"MDEwOlJlcG9zaXRvcnkyMDEyMzIwNjQ=","name":"homeJS","full_name":"vgrigoryevich/homeJS","private":false,"owner":{"login":"vgrigoryevich","id":46827558,"node_id":"MDQ6VXNlcjQ2ODI3NTU4","avatar_url":"https://avatars2.githubusercontent.com/u/46827558?v=4","gravatar_id":"","url":"https://api.github.com/users/vgrigoryevich","html_url":"https://github.com/vgrigoryevich","followers_url":"https://api.github.com/users/vgrigoryevich/followers","following_url":"https://api.github.com/users/vgrigoryevich/following{/other_user}","gists_url":"https://api.github.com/users/vgrigoryevich/gists{/gist_id}","starred_url":"https://api.github.com/users/vgrigoryevich/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/vgrigoryevich/subscriptions","organizations_url":"https://api.github.com/users/vgrigoryevich/orgs","repos_url":"https://api.github.com/users/vgrigoryevich/repos","events_url":"https://api.github.com/users/vgrigoryevich/events{/privacy}","received_events_url":"https://api.github.com/users/vgrigoryevich/received_events","type":"User","site_admin":false},"html_url":"https://github.com/vgrigoryevich/homeJS","description":null,"fork":false,"url":"https://api.github.com/repos/vgrigoryevich/homeJS","forks_url":"https://api.github.com/repos/vgrigoryevich/homeJS/forks","keys_url":"https://api.github.com/repos/vgrigoryevich/homeJS/keys{/key_id}","collaborators_url":"https://api.github.com/repos/vgrigoryevich/homeJS/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/vgrigoryevich/homeJS/teams","hooks_url":"https://api.github.com/repos/vgrigoryevich/homeJS/hooks","issue_events_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/events{/number}","events_url":"https://api.github.com/repos/vgrigoryevich/homeJS/events","assignees_url":"https://api.github.com/repos/vgrigoryevich/homeJS/assignees{/user}","branches_url":"https://api.github.com/repos/vgrigoryevich/homeJS/branches{/branch}","tags_url":"https://api.github.com/repos/vgrigoryevich/homeJS/tags","blobs_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/refs{/sha}","trees_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/trees{/sha}","statuses_url":"https://api.github.com/repos/vgrigoryevich/homeJS/statuses/{sha}","languages_url":"https://api.github.com/repos/vgrigoryevich/homeJS/languages","stargazers_url":"https://api.github.com/repos/vgrigoryevich/homeJS/stargazers","contributors_url":"https://api.github.com/repos/vgrigoryevich/homeJS/contributors","subscribers_url":"https://api.github.com/repos/vgrigoryevich/homeJS/subscribers","subscription_url":"https://api.github.com/repos/vgrigoryevich/homeJS/subscription","commits_url":"https://api.github.com/repos/vgrigoryevich/homeJS/commits{/sha}","git_commits_url":"https://api.github.com/repos/vgrigoryevich/homeJS/git/commits{/sha}","comments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/comments{/number}","issue_comment_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/comments{/number}","contents_url":"https://api.github.com/repos/vgrigoryevich/homeJS/contents/{+path}","compare_url":"https://api.github.com/repos/vgrigoryevich/homeJS/compare/{base}...{head}","merges_url":"https://api.github.com/repos/vgrigoryevich/homeJS/merges","archive_url":"https://api.github.com/repos/vgrigoryevich/homeJS/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/vgrigoryevich/homeJS/downloads","issues_url":"https://api.github.com/repos/vgrigoryevich/homeJS/issues{/number}","pulls_url":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls{/number}","milestones_url":"https://api.github.com/repos/vgrigoryevich/homeJS/milestones{/number}","notifications_url":"https://api.github.com/repos/vgrigoryevich/homeJS/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/vgrigoryevich/homeJS/labels{/name}","releases_url":"https://api.github.com/repos/vgrigoryevich/homeJS/releases{/id}","deployments_url":"https://api.github.com/repos/vgrigoryevich/homeJS/deployments","created_at":"2019-08-08T10:08:25Z","updated_at":"2019-08-26T21:07:36Z","pushed_at":"2019-12-29T21:14:07Z","git_url":"git://github.com/vgrigoryevich/homeJS.git","ssh_url":"git@github.com:vgrigoryevich/homeJS.git","clone_url":"https://github.com/vgrigoryevich/homeJS.git","svn_url":"https://github.com/vgrigoryevich/homeJS","homepage":null,"size":21576,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1"},"html":{"href":"https://github.com/vgrigoryevich/homeJS/pull/1"},"issue":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/1"},"comments":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/issues/1/comments"},"review_comments":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1/comments"},"review_comment":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/pulls/1/commits"},"statuses":{"href":"https://api.github.com/repos/vgrigoryevich/homeJS/statuses/c6dfab24eccf43ea6ab19bff2113e9c9c0248cf4"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":36,"deletions":26,"changed_files":2}}
{"actor":{"display_login":"dependabot"}}