-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 29 Mar 2026 12:55:47 +0200 Source: node-handlebars Architecture: source Version: 3:4.7.9-1 Distribution: unstable Urgency: medium Maintainer: Debian Javascript Maintainers <pkg-javascript-devel@lists.alioth.debian.org> Changed-By: Xavier Guimard <yadd@debian.org> Closes: 1132141 Changes: node-handlebars (3:4.7.9-1) unstable; urgency=medium . * New upstream version 4.7.9 (Closes: #1132141) Fixes: CVE-2026-33916 CVE-2026-33937 CVE-2026-33938 CVE-2026-33939 CVE-2026-33940 CVE-2026-33941 * Drop embedded @types/handlebars (included upstream now) * Refresh patches, drop disable-bg-shell-plugin.patch (applied upstream) * Remove amd task from build (requirejs not available) * Fix debian/watch: use handlebars-lang org, add STABLE_VERSION filter * debian/watch version 5 * Declare compliance with policy 4.7.3 Checksums-Sha1: c818c79741adc3f66b03e49b769c6bd0286f712a 2691 node-handlebars_4.7.9-1.dsc 8b30a6d8c1705219950628faeb5291ee5c604d74 228243 node-handlebars_4.7.9.orig.tar.gz 79d9b937e1bcb76768f87653ce6c1bccea103fae 60716 node-handlebars_4.7.9-1.debian.tar.xz Checksums-Sha256: ef62408fd4c0feadca067344cc0ef5ef1f21afdb3c494e4ddcd5994a15c93239 2691 node-handlebars_4.7.9-1.dsc ea6293f29ca65b587f539bbf9d0d6028327c24ea2cfd6b5748f581cd0f3a26f0 228243 node-handlebars_4.7.9.orig.tar.gz ff56794c8267bbc60438cf540bfd84a8e61fc2c9f1ea56d68a2c6a7db8ca5be1 60716 node-handlebars_4.7.9-1.debian.tar.xz Files: 451e5817a4a5d39fff37faa0e4ad86ee 2691 javascript optional node-handlebars_4.7.9-1.dsc 5d12c0e0508b306a545eb51f87d7026a 228243 javascript optional node-handlebars_4.7.9.orig.tar.gz b667bca47d2cf63ace73ee682fc9be3c 60716 javascript optional node-handlebars_4.7.9-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEAN/li4tVV3nRAF7J9tdMp8mZ7ukFAmnJBmEACgkQ9tdMp8mZ 7umg2hAAlTARsnhRjaYhxhBI70V4TFC4kvYBtvZU1uvsDvO95hv+N7ZqwVQyzaCv pFdolnRpO0JEMj3PianzBi8sNz7ub+212ezbGqv8IP0AdlH/LS3PkXvgbF//YbNo WAjMlO7KoteWvMihfTWU2vbZBUrQqX8u1nkzYs0GOe7fkrhuyoWUQH9yywjL1M5W Yj+bjALrIBYiP+J8zkI/6KtMBjnX3kiGkt1TymOn6bZthjj9/XfxumYk5DHhEqgd LZuJisu9kd6lhP1Bq0JLSfdnOQGobGJfpQcf7wCL5OPodaHFt0Oxv5C3rxwzlzFK Ha10vHmvgdYHgiV2apclmW3PuZp9RpJXyDNt4W7YcaSCP8eI3e6e33frc/fMwOSP 6MEaBn+bJcSS8zRzKcNCisMjbQzm0W1xeKXweQ3/bfPxuJO8i37PCjsPYvUOqgt3 SRnV9ax7mmTOntnfgvWLsUdOClPcLGGxm7HItm7KaIoD4axKtGwCS2lpJcuJBb8j 7CskbYeLq1N2HzZvJQnVyTgRApquhZKUWuwIJ1b5SNEdSRMe5osVMdW9IlqoOYUr yGaf9omfizwX2psp9IC6HsfhN9qB3R9RofQIWUOARzJ45TZQwcAqBDVB6rjfrSBP YGC3lIwwv3wiEsRzSNd2jXxBTo7yJjiNrDIjBegYpe0abGV36js= =OICZ -----END PGP SIGNATURE-----
