Uh oh!
There was an error while loading. Please reload this page.
Merge latest upstream from May 5 2026 [WIP] - #59
Draft
ricardomota-iterable wants to merge 94 commits into
Draft
Conversation
- migrate tests to use junit 5 platform
- servlet api 5.x
- rename jackson module
Bumps com.google.javascript:closure-compiler from v20211006 to v20231112. --- updated-dependencies: - dependency-name: com.google.javascript:closure-compiler dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.junit.platform:junit-platform-suite](https://github.com/junit-team/junit5) from 1.10.1 to 1.10.2. - [Release notes](https://github.com/junit-team/junit5/releases) - [Commits](https://github.com/junit-team/junit5/commits) --- updated-dependencies: - dependency-name: org.junit.platform:junit-platform-suite dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps commons-io:commons-io from 2.11.0 to 2.15.1. --- updated-dependencies: - dependency-name: commons-io:commons-io dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.2 to 1.5.3. - [Commits](https://github.com/qos-ch/logback/commits/v_1.5.3) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps `spring.version` from 6.0.14 to 6.1.4. Updates `org.springframework:spring-webmvc` from 6.0.14 to 6.1.4 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.0.14...v6.1.4) Updates `org.springframework:spring-test` from 6.0.14 to 6.1.4 - [Release notes](https://github.com/spring-projects/spring-framework/releases) - [Commits](spring-projects/spring-framework@v6.0.14...v6.1.4) --- updated-dependencies: - dependency-name: org.springframework:spring-webmvc dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: org.springframework:spring-test dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.codehaus.mojo:build-helper-maven-plugin](https://github.com/mojohaus/build-helper-maven-plugin) from 3.2.0 to 3.5.0. - [Release notes](https://github.com/mojohaus/build-helper-maven-plugin/releases) - [Commits](mojohaus/build-helper-maven-plugin@build-helper-maven-plugin-3.2.0...3.5.0) --- updated-dependencies: - dependency-name: org.codehaus.mojo:build-helper-maven-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps org.apache.felix:maven-bundle-plugin from 5.1.2 to 5.1.9. --- updated-dependencies: - dependency-name: org.apache.felix:maven-bundle-plugin dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) from 3.2.0 to 3.3.0. - [Release notes](https://github.com/apache/maven-jar-plugin/releases) - [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.2.0...maven-jar-plugin-3.3.0) --- updated-dependencies: - dependency-name: org.apache.maven.plugins:maven-jar-plugin dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
[ISSUE-820] Support helpers used without arguments in a block
Update README to clarify default value resolvers
[ISSUE-567] Fix the test of issue 567
- fix#1168 - keep text as it is
Fix path traversal vulnerability
- Remove dynamic protocol resolution in SpringTemplateLoader. - Enforce logical boundaries to prevent path traversal in template resolution. - Validate resolved URLs to block fragment (#) and query (?) injection bypasses. - Reject unsafe view names containing `..`, `:`, or `#` in HandlebarsViewResolver.
Fix path traversal and suffix bypass in Spring MVC integration
Update FUNDING.yml
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for freeto join this conversation on GitHub.
Already have an account?
Sign in to comment
14 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Own branch attempt.
Split this into separate PRs, where we incrementally sync to more recent versions instead of everything at once.
Check current merged upstream code version.
Check existing releases: https://github.com/jknack/handlebars.java/releases
Investigate added files that don't make sense to update.
Documentation and ci files.
Confirm existing tests and rendering behavior.