Skip to content

fix(deps): update dependency com.github.jknack:handlebars to v4.5.3 - #124

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/handlebars
Open

fix(deps): update dependency com.github.jknack:handlebars to v4.5.3#124
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/handlebars

Conversation

@renovate

@renovate renovate Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
com.github.jknack:handlebars 4.5.24.5.3 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

jknack/handlebars.java (com.github.jknack:handlebars)

v4.5.3: handlebars.java 4.5.3

What's Changed

  • Security vulnerability. Arbitrary file read in SpringTemplateLoader via URL-fragment suffix bypass
  • Change in behavior for implicit params in partials in handlebars #​1182

Full Changelog: jknack/handlebars.java@v4.5.2...v4.5.3


Configuration

📅 Schedule: (in timezone Europe/Warsaw)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • Between day 1 and 3 of the month (* * 1-3 * *)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/handlebars branch from b1c83a8 to 70ff7ba Compare July 21, 2026 18:55
@renovate

renovate Bot commented Jul 21, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: apps/api/gradle/libs.versions.toml
Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* What went wrong:
A problem occurred configuring root project 'portfolio-api'.
> Could not resolve all artifacts for configuration 'classpath'.
   > Could not resolve org.jetbrains.kotlin:kotlin-gradle-plugin:2.3.21.
     Required by:
         buildscript of root project 'portfolio-api' > org.jetbrains.kotlin.jvm:org.jetbrains.kotlin.jvm.gradle.plugin:2.3.21
      > Could not resolve org.jetbrains.kotlin:kotlin-gradle-plugin:2.3.21.
         > Could not parse POM https://plugins.gradle.org/m2/org/jetbrains/kotlin/kotlin-gradle-plugin/2.3.21/kotlin-gradle-plugin-2.3.21.pom
            > Could not resolve org.jetbrains.kotlin:kotlin-gradle-plugins-bom:2.3.21.
               > Could not resolve org.jetbrains.kotlin:kotlin-gradle-plugins-bom:2.3.21.
                  > Could not get resource 'https://plugins.gradle.org/m2/org/jetbrains/kotlin/kotlin-gradle-plugins-bom/2.3.21/kotlin-gradle-plugins-bom-2.3.21.pom'.
                     > Could not GET 'https://repo.maven.apache.org/maven2/org/jetbrains/kotlin/kotlin-gradle-plugins-bom/2.3.21/kotlin-gradle-plugins-bom-2.3.21.pom'. Received status code 429 from server: Too Many Requests
> There are 4 more failures with identical causes.

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights from a Build Scan (powered by Develocity).
> Get more help at https://help.gradle.org.

BUILD FAILED in 24s

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants