chore(deps): bump handlebars from 4.7.7 to 4.7.9 by dependabot[bot] · Pull Request #4597 · module-federation/core

dependabot · 2026-03-27T02:56:00Z

Bumps handlebars from 4.7.7 to 4.7.9.

Release notes

v4.7.9

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

GHSA-2w6w-674q-4c4q

GHSA-3mfm-83xf-c92r

GHSA-xhpv-hc6g-r9c6

GHSA-xjpj-3mr7-gcpf

GHSA-9cx6-37pm-9jff

GHSA-2qvq-rjwj-gvw9

GHSA-7rx3-28cr-v5wh

GHSA-442j-39wm-28r2

Commits

v4.7.8

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Changelog

Sourced from handlebars's changelog.

v4.7.9 - March 26th, 2026

fix: enable shell mode for spawn to resolve Windows EINVAL issue - e0137c2

fix type "RuntimeOptions" also accepting string partials - eab1d14

feat(types): set hash to be a Record<string, any> - de4414d

fix non-contiguous program indices - 4512766

refactor: rename i to startPartIndex - e497a35

security: fix security issues - 68d8df5

Commits

v4.7.8 - July 27th, 2023

Make library compatible with workers (#1894) - 3d3796c

Don't rely on Node.js global object (#1776) - 2954e7e

Fix compiling of each block params in strict mode (#1855) - 30dbf04

Fix rollup warning when importing Handlebars as ESM - 03d387b

Fix bundler issue with webpack 5 (#1862) - c6c6bbb

Use https instead of git for mustache submodule - 88ac068

Commits

Commits

dce542c v4.7.9
8a41389 Update release notes
68d8df5 Fix security issues
b2a0831 Fix browser tests
9f98c16 Fix release script
45443b4 Revert "Improve partial indenting performance"
8841a5f Fix CI errors with linting
e0137c2 fix: enable shell mode for spawn to resolve Windows EINVAL issue
e914d60 Improve rendering performance
7de4b41 Upgrade GitHub Actions checkout and setup-node on 4.x branch
Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by jaylinski, a new releaser for handlebars since your current version.

changeset-bot · 2026-03-27T02:56:07Z

⚠️ No Changeset found

Latest commit: ba46aaf

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

This PR includes no changesets

When changesets are added to this PR, you'll see the packages that this PR includes changesets for and the associated semver types

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

netlify · 2026-03-27T02:56:12Z

✅ Deploy Preview for module-federation-docs ready!

Name	Link
🔨 Latest commit	`ba46aaf`
🔍 Latest deploy log	https://app.netlify.com/projects/module-federation-docs/deploys/69cdd8ba2031c200081e2446
😎 Deploy Preview	https://deploy-preview-4597--module-federation-docs.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

pkg-pr-new · 2026-03-27T02:59:59Z

Open in StackBlitz

@module-federation/devtools

pnpm add https://pkg.pr.new/@module-federation/devtools@ba46aaf

@module-federation/cli

pnpm add https://pkg.pr.new/@module-federation/cli@ba46aaf

create-module-federation

pnpm add https://pkg.pr.new/create-module-federation@ba46aaf

@module-federation/data-prefetch

pnpm add https://pkg.pr.new/@module-federation/data-prefetch@ba46aaf

@module-federation/dts-plugin

pnpm add https://pkg.pr.new/@module-federation/dts-plugin@ba46aaf

@module-federation/enhanced

pnpm add https://pkg.pr.new/@module-federation/enhanced@ba46aaf

@module-federation/error-codes

pnpm add https://pkg.pr.new/@module-federation/error-codes@ba46aaf

@module-federation/esbuild

pnpm add https://pkg.pr.new/@module-federation/esbuild@ba46aaf

@module-federation/managers

pnpm add https://pkg.pr.new/@module-federation/managers@ba46aaf

@module-federation/manifest

pnpm add https://pkg.pr.new/@module-federation/manifest@ba46aaf

@module-federation/metro

pnpm add https://pkg.pr.new/@module-federation/metro@ba46aaf

@module-federation/metro-plugin-rnc-cli

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnc-cli@ba46aaf

@module-federation/metro-plugin-rnef

pnpm add https://pkg.pr.new/@module-federation/metro-plugin-rnef@ba46aaf

@module-federation/modern-js

pnpm add https://pkg.pr.new/@module-federation/modern-js@ba46aaf

@module-federation/modern-js-v3

pnpm add https://pkg.pr.new/@module-federation/modern-js-v3@ba46aaf

@module-federation/native-federation-tests

pnpm add https://pkg.pr.new/@module-federation/native-federation-tests@ba46aaf

@module-federation/native-federation-typescript

pnpm add https://pkg.pr.new/@module-federation/native-federation-typescript@ba46aaf

@module-federation/nextjs-mf

pnpm add https://pkg.pr.new/@module-federation/nextjs-mf@ba46aaf

@module-federation/node

pnpm add https://pkg.pr.new/@module-federation/node@ba46aaf

@module-federation/retry-plugin

pnpm add https://pkg.pr.new/@module-federation/retry-plugin@ba46aaf

@module-federation/rsbuild-plugin

pnpm add https://pkg.pr.new/@module-federation/rsbuild-plugin@ba46aaf

@module-federation/rspack

pnpm add https://pkg.pr.new/@module-federation/rspack@ba46aaf

@module-federation/rspress-plugin

pnpm add https://pkg.pr.new/@module-federation/rspress-plugin@ba46aaf

@module-federation/runtime

pnpm add https://pkg.pr.new/@module-federation/runtime@ba46aaf

@module-federation/runtime-core

pnpm add https://pkg.pr.new/@module-federation/runtime-core@ba46aaf

@module-federation/runtime-tools

pnpm add https://pkg.pr.new/@module-federation/runtime-tools@ba46aaf

@module-federation/sdk

pnpm add https://pkg.pr.new/@module-federation/sdk@ba46aaf

@module-federation/storybook-addon

pnpm add https://pkg.pr.new/@module-federation/storybook-addon@ba46aaf

@module-federation/third-party-dts-extractor

pnpm add https://pkg.pr.new/@module-federation/third-party-dts-extractor@ba46aaf

@module-federation/treeshake-frontend

pnpm add https://pkg.pr.new/@module-federation/treeshake-frontend@ba46aaf

@module-federation/treeshake-server

pnpm add https://pkg.pr.new/@module-federation/treeshake-server@ba46aaf

@module-federation/typescript

pnpm add https://pkg.pr.new/@module-federation/typescript@ba46aaf

@module-federation/utilities

pnpm add https://pkg.pr.new/@module-federation/utilities@ba46aaf

@module-federation/webpack-bundler-runtime

pnpm add https://pkg.pr.new/@module-federation/webpack-bundler-runtime@ba46aaf

@module-federation/bridge-react

pnpm add https://pkg.pr.new/@module-federation/bridge-react@ba46aaf

@module-federation/bridge-react-webpack-plugin

pnpm add https://pkg.pr.new/@module-federation/bridge-react-webpack-plugin@ba46aaf

@module-federation/bridge-shared

pnpm add https://pkg.pr.new/@module-federation/bridge-shared@ba46aaf

@module-federation/bridge-vue3

pnpm add https://pkg.pr.new/@module-federation/bridge-vue3@ba46aaf

@module-federation/inject-external-runtime-core-plugin

pnpm add https://pkg.pr.new/@module-federation/inject-external-runtime-core-plugin@ba46aaf

commit: ba46aaf

github-actions · 2026-03-27T03:02:05Z

Bundle Size Report

12 package(s) changed, 28 unchanged.

Package dist + ESM entry

Package	Total dist (raw)	Delta	ESM gzip	Delta
`@module-federation/cli`	26.3 kB	no change	786 B	no change
`@module-federation/core`	39.1 kB	no change	173 B	no change
`@module-federation/devtools`	481.4 kB	no change	3.9 kB	no change
`@module-federation/enhanced`	813.1 kB	no change	672 B	no change
`@module-federation/managers`	69.9 kB	no change	334 B	no change
`@module-federation/manifest`	138.0 kB	no change	182 B	no change
`@module-federation/metro-plugin-rnc-cli`	0 B	no change	314 B	no change
`@module-federation/node`	189.1 kB	no change	217 B	no change
`@module-federation/runtime`	19.5 kB	+13 B (+0.1%)	616 B	no change
`@module-federation/runtime-core`	251.8 kB	+8 B (+0.0%)	477 B	no change
`@module-federation/storybook-addon`	77.3 kB	no change	100 B	no change
`@module-federation/utilities`	110.6 kB	no change	328 B	no change

Bundle targets

Package	Web bundle (gzip)	Delta	Node bundle (gzip)	Delta
`@module-federation/cli`	2.3 kB	-31 B (-1.3%)	2.3 kB	-31 B (-1.3%)
`@module-federation/core`	1.1 kB	-31 B (-2.8%)	1.0 kB	-30 B (-2.8%)
`@module-federation/devtools`	21.3 kB	-30 B (-0.1%)	21.3 kB	-30 B (-0.1%)
`@module-federation/enhanced`	2.6 kB	-43 B (-1.6%)	2.6 kB	-43 B (-1.6%)
`@module-federation/managers`	2.4 kB	-26 B (-1.0%)	2.4 kB	-26 B (-1.0%)
`@module-federation/manifest`	6.2 kB	-36 B (-0.6%)	6.2 kB	-36 B (-0.6%)
`@module-federation/metro-plugin-rnc-cli`	411 B	-25 B (-5.7%)	411 B	-25 B (-5.7%)
`@module-federation/node`	9.2 kB	-27 B (-0.3%)	9.2 kB	-27 B (-0.3%)
`@module-federation/runtime`	625 B	no change	625 B	no change
`@module-federation/runtime-core`	13.7 kB	no change	13.4 kB	no change
`@module-federation/storybook-addon`	1.9 kB	-23 B (-1.2%)	1.7 kB	-23 B (-1.3%)
`@module-federation/utilities`	2.6 kB	-31 B (-1.2%)	2.6 kB	-31 B (-1.2%)

Consumer scenarios

Scenario	Web output (gzip)	Delta	Node output (gzip)	Delta	Gap (node-web)	Delta
Enhanced remoteEntry	19.8 kB	-11 B (-0.1%)	20.8 kB	-18 B (-0.1%)	+1.0 kB	-7 B

Total dist (raw): 6.33 MB (+21 B (+0.0%))
Total ESM gzip: 73.7 kB (no change)
Total web bundle (gzip): 179.1 kB (-303 B (-0.2%))
Total node bundle (gzip): 179.6 kB (-302 B (-0.2%))
Tracked ./bundler entry gzip: 556 B (no change)
Tracked ./bundler web bundle (gzip): 4.8 kB (no change)
Tracked ./bundler node bundle (gzip): 4.8 kB (no change)

Bundle sizes are generated with rslib (Rspack). Package-root metrics preserve the historical report. Tracked subpath exports such as ./bundler are measured separately so ENV_TARGET-driven tree-shaking is visible. Bare imports are externalized to keep package-level sizes consistent, and assets are emitted as resources.

Bumps [handlebars](https://github.com/handlebars-lang/handlebars.js) from 4.7.7 to 4.7.9. - [Release notes](https://github.com/handlebars-lang/handlebars.js/releases) - [Changelog](https://github.com/handlebars-lang/handlebars.js/blob/v4.7.9/release-notes.md) - [Commits](handlebars-lang/handlebars.js@v4.7.7...v4.7.9) --- updated-dependencies: - dependency-name: handlebars dependency-version: 4.7.9 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Mar 27, 2026

dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch 2 times, most recently from 22cf7a4 to 8f4a310 Compare March 31, 2026 09:39

dependabot bot force-pushed the dependabot/npm_and_yarn/handlebars-4.7.9 branch from 8f4a310 to ba46aaf Compare April 2, 2026 02:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump handlebars from 4.7.7 to 4.7.9#4597

chore(deps): bump handlebars from 4.7.7 to 4.7.9#4597
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/handlebars-4.7.9

dependabot bot commented on behalf of github Mar 27, 2026 •

edited

Loading

Uh oh!

changeset-bot bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

netlify bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

pkg-pr-new bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

github-actions bot commented Mar 27, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.7.9

v4.7.8

v4.7.9 - March 26th, 2026

v4.7.8 - July 27th, 2023

Uh oh!

changeset-bot bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ No Changeset found

Uh oh!

netlify bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for module-federation-docs ready!

Uh oh!

pkg-pr-new bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

github-actions bot commented Mar 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Bundle Size Report

Package dist + ESM entry

Bundle targets

Consumer scenarios

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Mar 27, 2026 •

edited

Loading

changeset-bot bot commented Mar 27, 2026 •

edited

Loading

netlify bot commented Mar 27, 2026 •

edited

Loading

pkg-pr-new bot commented Mar 27, 2026 •

edited

Loading

github-actions bot commented Mar 27, 2026 •

edited

Loading