From 2a5da2a3eef46f6fffb598eed6a66fec716404f1 Mon Sep 17 00:00:00 2001
From: "snyk-io[bot]" <141718529+snyk-io[bot]@users.noreply.github.com>
Date: Sun, 29 Mar 2026 09:16:37 +0000
Subject: [PATCH] fix: package.json & yarn.lock to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-15803084
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-15803082
- https://snyk.io/vuln/SNYK-JS-HANDLEBARS-15803086
---
 package.json | 2 +-
 yarn.lock    | 8 ++++----
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/package.json b/package.json
index 435fc2f..e8b5980 100644
--- a/package.json
+++ b/package.json
@@ -14,7 +14,7 @@
     "test": "eslint index.js && mocha test/test.js"
   },
   "dependencies": {
-    "handlebars": ">=2.0.0 <5.0.0",
+    "handlebars": ">=4.7.9",
     "umd-wrapper": "~0.1.0"
   },
   "devDependencies": {
diff --git a/yarn.lock b/yarn.lock
index 95b02d1..4db1f17 100644
--- a/yarn.lock
+++ b/yarn.lock
@@ -530,10 +530,10 @@ graphemer@^1.4.0:
   resolved "https://registry.yarnpkg.com/graphemer/-/graphemer-1.4.0.tgz#fb2f1d55e0e3a1849aeffc90c4fa0dd53a0e66c6"
   integrity sha512-EtKwoO6kxCL9WO5xipiHTZlSzBm7WLT627TqC/uVRd0HKmq8NXyebnNYxDoBi7wt8eTWrUrKXCOVaFq9x1kgag==
 
-"handlebars@>=2.0.0 <5.0.0":
-  version "4.7.8"
-  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.8.tgz#41c42c18b1be2365439188c77c6afae71c0cd9e9"
-  integrity sha512-vafaFqs8MZkRrSX7sFVUdo3ap/eNiLnb4IakshzvP56X5Nr1iGKAIqdX6tMlm6HcNRIkr6AxO5jFEoJzzpT8aQ==
+handlebars@^4.7.9:
+  version "4.7.9"
+  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.7.9.tgz#6f139082ab58dc4e5a0e51efe7db5ae890d56a0f"
+  integrity sha512-4E71E0rpOaQuJR2A3xDZ+GM1HyWYv1clR58tC8emQNeQe3RH7MAzSbat+V0wG78LQBo6m6bzSG/L4pBuCsgnUQ==
   dependencies:
     minimist "^1.2.5"
     neo-async "^2.6.2"