profile
viewpoint
Chris Chen chrischenyc Melbourne, Australia capturedlabs.com Javascript Fullstack · Native Apps · AWS

chrischenyc/CHYProgressImageView 75

A drop-in UIImageView subclass that displays the image content proportionally to the progress property set.

chrischenyc/CHYSlider 34

A custom UISliderView subclass

chrischenyc/fuutr-rider-app-ios 1

iOS client for fuutr.co (dead 😵) - a Lime-like e-scooter sharing startup

chrischenyc/fuutr-server 1

node.js backend for fuutr.co (dead 😵) - a Lime-like e-scooter sharing startup

chrischenyc/clickstyle-admin 0

Meteor.js/React partner-facing full-stack web app for clickctyle.com.au (😵 dead), a two-sided marketplace for freelance stylists and beauticians

chrischenyc/clickstyle-app 0

incomplete React Native client for clickctyle.com.au (😵 dead), a two-sided marketplace for freelance stylists and beauticians

chrischenyc/clickstyle-web 0

Meteor.js/React consumer-facing full-stack web app for clickctyle.com.au (😵 dead), a two-sided marketplace for freelance stylists and beauticians

chrischenyc/fuutr-admin-web 0

React web portal for fuutr.co (dead 😵) - a Lime-like e-scooter sharing startup

chrischenyc/IGColorPicker 0

A customizable color picker for iOS in Swift

startedchrischenyc/fuutr-server

started time in 18 days

created repositoryjoshchen101112/Digtastic

Welcome to Digtastic! I am creating a 2d game called Digtastic. It is mainly about digging and fighting monsters. I am planning to release this game in 2022. Available on Appstore, Playstore and maybe Steam.

created time in a month

startedjoshchen101112/Digtastic

started time in a month

created repositoryjoshchen101112/Digtastic

Welcome to Digtastic! I am creating a 2d game called Digtastic. It is mainly about digging and fighting monsters. I am planning to release this game in 2022. Available on Appstore, Playstore and maybe Steam.

created time in a month

startedjoshchen101112/digtatsic

started time in a month

created repositoryjoshchen101112/digtatsic

created time in a month

delete branch chrischenyc/clickstyle-admin

delete branch : dependabot/npm_and_yarn/handlebars-4.3.0

delete time in 3 months

PR closed chrischenyc/clickstyle-admin

Bump handlebars from 4.1.0 to 4.3.0 dependencies

Bumps handlebars from 4.1.0 to 4.3.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.3.0 - September 24th, 2019</h2> <p>Fixes:</p> <ul> <li>Security: Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</li> <li>Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</li> </ul> <p>Features:</p> <ul> <li>Add new runtime option <code>allowCallsToHelperMissing</code> to allow calling <code>blockHelperMissing</code> and <code>helperMissing</code>.</li> </ul> <p>Breaking changes:</p> <p>Compatibility notes:</p> <ul> <li> <p>Compiler revision increased - 06b7224</p> <ul> <li>This means that template compiled with versions prior to 4.3.0 will not work with runtimes >= 4.3.0 The increase was done because the "helperMissing" and "blockHelperMissing" are now moved from the helpers to the internal "container.hooks" object, so old templates will not be able to call them anymore. We suggest that you always recompile your templates with the latest compiler in your build pipelines.</li> </ul> </li> <li> <p>Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</p> <ul> <li>Calling "helperMissing" and "blockHelperMissing" directly from a template (like in <code>{{blockHelperMissing}}</code> was never intended and was part of the exploits that have been revealed early in 2019 (see <a href="https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1495">wycats/handlebars.js#1495</a>). <em>It is also part of a new exploit that is not captured by the earlier fix.</em> In order to harden Handlebars against such exploits, calling thos helpers is now not possible anymore. <em>Overriding</em> those helpers is still possible.</li> <li>If you really need this behavior, you can set the runtime option <code>allowCallsToHelperMissing</code> to <code>true</code> and the calls will again be possible</li> </ul> </li> </ul> <p>Both bullet points imly that Handlebars is not 100% percent compatible to 4.2.0, despite the minor version bump.</p> <p>We consider it more important to resolve a major security issue than to maintain 100% compatibility.</p> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.2.1...v4.3.0">Commits</a></p> <h2>v4.2.1 - September 20th, 2019</h2> <p>Bugfixes:</p> <ul> <li>The "browser" property in the package.json has been updated to use the common-js builds instead of the minified UMD - c55a7be, <a href="https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1553">#1553</a></li> </ul> <p>Compatibility notes:</p> <ul> <li>No compatibility issues should arise</li> </ul> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.2.0...v4.2.1">Commits</a></p> <h2>v4.2.0 - September 3rd, 2019</h2> </tr></table> ... (truncated) </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/a89081d440a9da9f3f25835f47de837907b0094a"><code>a89081d</code></a> v4.3.0</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/bba65605b111965bc1e1643a489a3b3c56f190b3"><code>bba6560</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/06b7224ed94ad00d342be416250305a8cb92112b"><code>06b7224</code></a> adjust compiler revision</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/2078c727c627f25d4a149962f05c1e069beb18bc"><code>2078c72</code></a> Disallow calling "helperMissing" and "blockHelperMissing" directly</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/fff3e40402c9f9cd790984560658646a26e1c930"><code>fff3e40</code></a> v4.2.1</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/35bcd4405fad758520308754f05b88c97c7b380c"><code>35bcd44</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/00b4f2ff98bf6285cc551f090166a92a70196124"><code>00b4f2f</code></a> Fix some small typos.</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/e47b5ec192392cee548c5c01dc85b72b0fc8419b"><code>e47b5ec</code></a> integration-tests for various webpack-scenarios</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c55a7bed781b4cff132d18d778bf16268ce34f01"><code>c55a7be</code></a> fix: use cjs for browser fields</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/164c7ceea4ce074f70f2fefeba81e2e551757ea6"><code>164c7ce</code></a> v4.2.0</li> <li>Additional commits viewable in <a href="https://github.com/wycats/handlebars.js/compare/v4.1.0...v4.3.0">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+39 -27

1 comment

4 changed files

dependabot[bot]

pr closed time in 3 months

pull request commentchrischenyc/clickstyle-admin

Bump handlebars from 4.1.0 to 4.3.0

Superseded by #9.

dependabot[bot]

comment created time in 3 months

PR opened chrischenyc/clickstyle-admin

Bump handlebars from 4.1.0 to 4.5.3

Bumps handlebars from 4.1.0 to 4.5.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.5.3 - November 18th, 2019</h2> <p>Bugfixes:</p> <ul> <li>fix: add "no-prototype-builtins" eslint-rule and fix all occurences - f7f05d7</li> <li>fix: add more properties required to be enumerable - 1988878</li> </ul> <p>Chores / Build:</p> <ul> <li>fix: use !== 0 instead of != 0 - c02b05f</li> <li>add chai and dirty-chai and sinon, for cleaner test-assertions and spies, deprecate old assertion-methods - 93e284e, 886ba86, 0817dad, 93516a0</li> </ul> <p>Security:</p> <ul> <li>The properties <code>proto</code>, <code>defineGetter</code>, <code>defineSetter</code> and <code>lookupGetter</code> have been added to the list of "properties that must be enumerable". If a property by that name is found and not enumerable on its parent, it will silently evaluate to <code>undefined</code>. This is done in both the compiled template and the "lookup"-helper. This will prevent new Remote-Code-Execution exploits that have been published recently.</li> </ul> <p>Compatibility notes:</p> <ul> <li>Due to the security-fixes. The semantics of the templates using <code>proto</code>, <code>defineGetter</code>, <code>defineSetter</code> and <code>lookupGetter</code> in the respect that those expression now return <code>undefined</code> rather than their actual value from the proto.</li> <li>The semantics have not changed in cases where the properties are enumerable, as in:</li> </ul> <pre lang="js"><code>{ proto: 'some string'; } </code></pre> <ul> <li>The change may be breaking in that respect, but we still only increase the patch-version, because the incompatible use-cases are not intended, undocumented and far less important than fixing Remote-Code-Execution exploits on existing systems.</li> </ul> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.5.2...v4.5.3">Commits</a></p> <h2>v4.5.2 - November 13th, 2019</h2> <h1>Bugfixes</h1> <ul> <li>fix: use String(field) in lookup when checking for "constructor" - d541378</li> <li>test: add fluent API for testing Handlebars - c2ac79c</li> </ul> <p>Compatibility notes:</p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c819c8b533934d2ac18001d7eb27a3205b00c2f3"><code>c819c8b</code></a> v4.5.3</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/827c9d0747bef7d7f89829779523b6b2dcf3051d"><code>827c9d0</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/f7f05d7558e674856686b62a00cde5758f3b7a08"><code>f7f05d7</code></a> fix: add "no-prototype-builtins" eslint-rule and fix all occurences</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/198887808780bbef9dba67a8af68ece091d5baa7"><code>1988878</code></a> fix: add more properties required to be enumerable</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/886ba86c2f9cc71b7d99b9018fbe2d72a57085cc"><code>886ba86</code></a> test/chore: add chai/expect and sinon to "runtime"-environment</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/0817dad7e72c51d07f7700547d0c69aa79a4976b"><code>0817dad</code></a> test: add sinon as global variable to eslint in the specs</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/93516a0b07026ebd23c84fddf270a0c8b570bc59"><code>93516a0</code></a> test: add sinon.js for spies, deprecate current assertions</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/93e284ed9be1e38c5e6945f15af1ccd689f2ada6"><code>93e284e</code></a> chore: add chai and dirty-chai for better test assertions</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c02b05fa819f46bb66c878bebc6e8006408ebd5c"><code>c02b05f</code></a> fix: use !== 0 instead of != 0</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/8de121d21c88a6ab877e3a0eec9daaac483f3bf0"><code>8de121d</code></a> v4.5.2</li> <li>Additional commits viewable in <a href="https://github.com/wycats/handlebars.js/compare/v4.1.0...v4.5.3">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+14 -13

0 comment

2 changed files

pr created time in 3 months

delete branch chrischenyc/clickstyle-web

delete branch : dependabot/npm_and_yarn/handlebars-4.3.0

delete time in 3 months

PR closed chrischenyc/clickstyle-web

Bump handlebars from 4.0.11 to 4.3.0 dependencies

Bumps handlebars from 4.0.11 to 4.3.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.3.0 - September 24th, 2019</h2> <p>Fixes:</p> <ul> <li>Security: Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</li> <li>Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</li> </ul> <p>Features:</p> <ul> <li>Add new runtime option <code>allowCallsToHelperMissing</code> to allow calling <code>blockHelperMissing</code> and <code>helperMissing</code>.</li> </ul> <p>Breaking changes:</p> <p>Compatibility notes:</p> <ul> <li> <p>Compiler revision increased - 06b7224</p> <ul> <li>This means that template compiled with versions prior to 4.3.0 will not work with runtimes >= 4.3.0 The increase was done because the "helperMissing" and "blockHelperMissing" are now moved from the helpers to the internal "container.hooks" object, so old templates will not be able to call them anymore. We suggest that you always recompile your templates with the latest compiler in your build pipelines.</li> </ul> </li> <li> <p>Disallow calling "helperMissing" and "blockHelperMissing" directly - 2078c72</p> <ul> <li>Calling "helperMissing" and "blockHelperMissing" directly from a template (like in <code>{{blockHelperMissing}}</code> was never intended and was part of the exploits that have been revealed early in 2019 (see <a href="https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1495">wycats/handlebars.js#1495</a>). <em>It is also part of a new exploit that is not captured by the earlier fix.</em> In order to harden Handlebars against such exploits, calling thos helpers is now not possible anymore. <em>Overriding</em> those helpers is still possible.</li> <li>If you really need this behavior, you can set the runtime option <code>allowCallsToHelperMissing</code> to <code>true</code> and the calls will again be possible</li> </ul> </li> </ul> <p>Both bullet points imly that Handlebars is not 100% percent compatible to 4.2.0, despite the minor version bump.</p> <p>We consider it more important to resolve a major security issue than to maintain 100% compatibility.</p> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.2.1...v4.3.0">Commits</a></p> <h2>v4.2.1 - September 20th, 2019</h2> <p>Bugfixes:</p> <ul> <li>The "browser" property in the package.json has been updated to use the common-js builds instead of the minified UMD - c55a7be, <a href="https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1553">#1553</a></li> </ul> <p>Compatibility notes:</p> <ul> <li>No compatibility issues should arise</li> </ul> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.2.0...v4.2.1">Commits</a></p> <h2>v4.2.0 - September 3rd, 2019</h2> </tr></table> ... (truncated) </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/a89081d440a9da9f3f25835f47de837907b0094a"><code>a89081d</code></a> v4.3.0</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/bba65605b111965bc1e1643a489a3b3c56f190b3"><code>bba6560</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/06b7224ed94ad00d342be416250305a8cb92112b"><code>06b7224</code></a> adjust compiler revision</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/2078c727c627f25d4a149962f05c1e069beb18bc"><code>2078c72</code></a> Disallow calling "helperMissing" and "blockHelperMissing" directly</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/fff3e40402c9f9cd790984560658646a26e1c930"><code>fff3e40</code></a> v4.2.1</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/35bcd4405fad758520308754f05b88c97c7b380c"><code>35bcd44</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/00b4f2ff98bf6285cc551f090166a92a70196124"><code>00b4f2f</code></a> Fix some small typos.</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/e47b5ec192392cee548c5c01dc85b72b0fc8419b"><code>e47b5ec</code></a> integration-tests for various webpack-scenarios</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c55a7bed781b4cff132d18d778bf16268ce34f01"><code>c55a7be</code></a> fix: use cjs for browser fields</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/164c7ceea4ce074f70f2fefeba81e2e551757ea6"><code>164c7ce</code></a> v4.2.0</li> <li>Additional commits viewable in <a href="https://github.com/wycats/handlebars.js/compare/v4.0.11...v4.3.0">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+53 -303

1 comment

6 changed files

dependabot[bot]

pr closed time in 3 months

pull request commentchrischenyc/clickstyle-web

Bump handlebars from 4.0.11 to 4.3.0

Superseded by #10.

dependabot[bot]

comment created time in 3 months

PR opened chrischenyc/clickstyle-web

Bump handlebars from 4.0.11 to 4.5.3

Bumps handlebars from 4.0.11 to 4.5.3. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md">handlebars's changelog</a>.</em></p> <blockquote> <h2>v4.5.3 - November 18th, 2019</h2> <p>Bugfixes:</p> <ul> <li>fix: add "no-prototype-builtins" eslint-rule and fix all occurences - f7f05d7</li> <li>fix: add more properties required to be enumerable - 1988878</li> </ul> <p>Chores / Build:</p> <ul> <li>fix: use !== 0 instead of != 0 - c02b05f</li> <li>add chai and dirty-chai and sinon, for cleaner test-assertions and spies, deprecate old assertion-methods - 93e284e, 886ba86, 0817dad, 93516a0</li> </ul> <p>Security:</p> <ul> <li>The properties <code>proto</code>, <code>defineGetter</code>, <code>defineSetter</code> and <code>lookupGetter</code> have been added to the list of "properties that must be enumerable". If a property by that name is found and not enumerable on its parent, it will silently evaluate to <code>undefined</code>. This is done in both the compiled template and the "lookup"-helper. This will prevent new Remote-Code-Execution exploits that have been published recently.</li> </ul> <p>Compatibility notes:</p> <ul> <li>Due to the security-fixes. The semantics of the templates using <code>proto</code>, <code>defineGetter</code>, <code>defineSetter</code> and <code>lookupGetter</code> in the respect that those expression now return <code>undefined</code> rather than their actual value from the proto.</li> <li>The semantics have not changed in cases where the properties are enumerable, as in:</li> </ul> <pre lang="js"><code>{ proto: 'some string'; } </code></pre> <ul> <li>The change may be breaking in that respect, but we still only increase the patch-version, because the incompatible use-cases are not intended, undocumented and far less important than fixing Remote-Code-Execution exploits on existing systems.</li> </ul> <p><a href="https://github.com/wycats/handlebars.js/compare/v4.5.2...v4.5.3">Commits</a></p> <h2>v4.5.2 - November 13th, 2019</h2> <h1>Bugfixes</h1> <ul> <li>fix: use String(field) in lookup when checking for "constructor" - d541378</li> <li>test: add fluent API for testing Handlebars - c2ac79c</li> </ul> <p>Compatibility notes:</p> <!-- raw HTML omitted --> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c819c8b533934d2ac18001d7eb27a3205b00c2f3"><code>c819c8b</code></a> v4.5.3</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/827c9d0747bef7d7f89829779523b6b2dcf3051d"><code>827c9d0</code></a> Update release notes</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/f7f05d7558e674856686b62a00cde5758f3b7a08"><code>f7f05d7</code></a> fix: add "no-prototype-builtins" eslint-rule and fix all occurences</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/198887808780bbef9dba67a8af68ece091d5baa7"><code>1988878</code></a> fix: add more properties required to be enumerable</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/886ba86c2f9cc71b7d99b9018fbe2d72a57085cc"><code>886ba86</code></a> test/chore: add chai/expect and sinon to "runtime"-environment</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/0817dad7e72c51d07f7700547d0c69aa79a4976b"><code>0817dad</code></a> test: add sinon as global variable to eslint in the specs</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/93516a0b07026ebd23c84fddf270a0c8b570bc59"><code>93516a0</code></a> test: add sinon.js for spies, deprecate current assertions</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/93e284ed9be1e38c5e6945f15af1ccd689f2ada6"><code>93e284e</code></a> chore: add chai and dirty-chai for better test assertions</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/c02b05fa819f46bb66c878bebc6e8006408ebd5c"><code>c02b05f</code></a> fix: use !== 0 instead of != 0</li> <li><a href="https://github.com/handlebars-lang/handlebars.js/commit/8de121d21c88a6ab877e3a0eec9daaac483f3bf0"><code>8de121d</code></a> v4.5.2</li> <li>Additional commits viewable in <a href="https://github.com/wycats/handlebars.js/compare/v4.0.11...v4.5.3">compare view</a></li> </ul> </details> <br />

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


<details> <summary>Dependabot commands and options</summary> <br />

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  • @dependabot use these labels will set the current labels as the default for future PRs for this repo and language
  • @dependabot use these reviewers will set the current reviewers as the default for future PRs for this repo and language
  • @dependabot use these assignees will set the current assignees as the default for future PRs for this repo and language
  • @dependabot use this milestone will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the Security Alerts page.

</details>

+25 -132

0 comment

2 changed files

pr created time in 3 months

more