[Snyk] Security upgrade handlebars from 2.0.0 to 3.0.8

[snyk-bot]

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • test/fixtures/hbs-demo/package.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	704/1000 Why? Has a fix available, CVSS 9.8	Prototype Pollution SNYK-JS-HANDLEBARS-534988	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: handlebars

The new version differs by 196 commits.

• 16bd606 v3.0.8
• 90ad8d9 Update release notes
• 156061e backport fixes from 4.x
• 8ba9159 update package-lock.json
• 55e4d9d v3.0.7
• bae88eb Update release notes
• c131bab chore: remove TODO comment from Gruntfile to enable clean build
• 95f33b1 chore: disable saucelabs-tests since the tunnel is not working
• 09aaa56 chore: update grunt-saucelabs and aws dependency
• 0d6d8c3 Merge pull request [Snyk] Fix for 8 vulnerabilities #1532 from mattolson/backport-security-fixes
• 7c39440 Fix Travis by updating git tag retrieval
• 7820b20 Use istanbul/lib/cli.js instead of node_modules/.bin/istanbul
• 420ac17 test: run appveyor tests in Node 10
• 47adcda Fix build on Windows
• de6ded4 Backport security fixes to 3.x branch
• 7cf753b chore: fix package.json of components/handlebars.js repo
• 5a427d2 v3.0.6
• 26de7bd Update release notes
• 6e9dbac Revert "Escape = in HTML content"
• af919d2 chore: ignore idea config
• df403ed chore: add publishConfig to prevent publishing 3.x as "latest"
• 9679fe6 chore: update components/handlebars package.json on release
• 9283205 chore: fix travis build
• 725986d fix: gracefully handle read-only "column"-property of the Error class

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic