HISTORY.md

4.4.0

• deps: handlebars@4.7.10 (#283)
  • addresses CVE-2026-106445 (GHSA-p8wg-vrv2-v86f), GHSA-8r5x-fm3f-whwj, and GHSA-xw65-4hp5-5hc7
• Add compileOptions instance option forwarded to handlebars.compile() (#268)
• Add runtimeOptions instance option forwarded to the compiled template at render time. This can restore handlebars' safer prototype-access defaults by setting allowProtoMethodsByDefault and allowProtoPropertiesByDefault to false (#284)
• Fix: throw a descriptive error when a settings render local shadows Express settings instead of a cryptic path error (#291)
• Document the layout option, template inheritance via handlebars partial blocks, and the reserved render data keys (#291, #294)

4.3.1

• Fix CVE-2026-87123 (GHSA-3c55-w9jx-p5jr)
• fix treat async substitution throws as render errors

4.3.0

• Fix CVE-2026-16231 (GHSA-rg36-rxv9-2m9q)

4.2.1

• deps: handlebars@4.7.9

4.2.0

• Add rename option to registerPartials
• Ensure all partials are registered before rendering
• Fix function context in async helpers
• deps: walk@2.3.15

4.1.2

• deps: handlebars@4.7.7

4.1.1

• deps: handlebars@4.7.6

4.1.0

• deps: handlebars@4.5.3
  • Add handlebars.parseWithoutProcessing
  • Add support for iterable objects in #each helper
  • Block access to non-enumerable special properties on objects
  • Fix error when helper defined with array properties
  • Fix parsing of empty raw blocks
  • Fix work-around for constructor blocking
  • Validate arguments to #if, #unless and #with helpers

4.0.6

• deps: handlebars@4.3.5
  • Fix error object inheritance
  • Fix work-around for constructor blocking

4.0.5

• Fix async helpers not working when cache enabled
• Fix handling of exceptions from layout
• Fix handling of exceptions when cache enabled
• deps: handlebars@4.3.3
  • Block calling helperMissing and blockHelperMissing from templates
  • Fix work-around for constructor blocking
• deps: walk@2.3.14

4.0.4

• deps: handlebars@4.0.14
  • Block constructor property using lookup

4.0.3

• Fix path for partials multiple dirs deep on Windows

4.0.2

• deps: handlebars@4.0.13

4.0.1

• Support params for async helper
• deps: handlebars@4.0.5
• deps: walk@2.3.9

4.0.0

• Fix caching of non default filename layouts
• deps: handlebars@4.0.3

3.1.1

• Fix localsAsTemplateData when cache is enabled

3.1.0

• Make @data available to layouts

3.0.1

• Fix using custom extensions when using view engine layouts

3.0.0

• deps: handlebars@3.0.0

2.9.0

• Scope internal async tracker to per middleware
• Support multiple view folders from Express

2.8.0

• Scope internal async tracker to per hbs instance
• deps: handlebars@2.0.0

2.7.0

• Fix registering directories of partials on Windows
• Add API to expose locals as template data

2.6.0

• Fix support for custom handlebars instance

2.5.0

• deps: handlebars@1.3.0

2.4.0

• Add support for multi-level partial paths

2.3.1

• deps: after@0.8.1
• deps: handlebars@1.0.12

2.3.0

• Add registerPartials

2.1.0

• Add create for multiple instances

2.0.2

• deps: handlebars@1.0.9

2.0.1

• Ignore layout error when not using layout

2.0.0

• deps: handlebars@1.0.7