Bump Handlebars.Net from 2.1.4 to 2.1.5

[dependabot]

Bumps Handlebars.Net from 2.1.4 to 2.1.5.

Release notes

Sourced from Handlebars.Net's releases.

2.1.5

Changes

• #574 Repo readme is mirrored into nuget package @​thompson-tomo (#575)

  Closes #574

Features 🚀

• Add EmbedUntrackedSources @​lahma (#570)

  • added EmbedUntrackedSources to remove one warning, see https://nuget.info/packages/Handlebars.Net/2.1.4

  I would also suggest changing to use newer GH Actions images for building so that other warnings would go away (old SDK in use). Maybe another modernization step could be removing old unsupported full framework targets and only support oldest supported net462. Adding net6.0 target would allow one target without dependency on Microsoft.Csharp.

• Use PackageLicenseExpression in NuGet package @​StefH (#564)

Bug Fixes 🐛

• Introduce PartialRecursionDepthLimit @​RoosterDragon (#552)

  When evaluating templates with partials, it is possible to recurse in the evaluation of those partials. This can be useful for dealing with tree like data, such as rendering a list of friends-of-friends-of-friends-of-etc....

  The ability to recurse can lead to stack overflows. For example if a sufficiently deep tree is provided as input data, or more simply if the partial calls itself in an infinite loop. As a stack overflow terminates the process, this is not desirable behaviour as it is an unavoidable crash.

  To resolve this a configurable PartialRecursionDepthLimit is introduced, defaulting to 100. Now when a template is evaluated a HandlebarsRuntimeException will be thrown if this limit is reached. This allows the caller to catch the exception and recover gracefully, rather than terminating the process.

• Allow slashes properly within escape blocks @​Hoeksema (#567)

  closes #566

  The path parsing currently doesn't work properly when there are embedded slashes within an ignore block.

  This PR fixes this issue:

  • No more exceptions thrown when using // within an escaped block
  • Allowing multiple / to occur within an escape block without breakage

  Before, the individual segments between slashes in addition to the entire escaped block were returned by PathInfo. Now, it returns just the latter, which is correct. All existing unit tests still pass and new tests were added to exercise the failing cases in #566.

• Throw properly on open ignore block instead of crashing @​Hoeksema (#569)

  Closes #568

  Resolve the hang on compile when there is an open ignore block

  Reshuffle the logic so that the throw check for end of template is done before trying to process the char

... (truncated)

Commits

• bed0c0e Merge pull request #570 from lahma/license-expression
• 0c6a1ad Merge branch 'master' into license-expression
• 80727a7 Merge pull request #576 from Handlebars-Net/fix/ci
• 985e854 Update pull_request.yml
• e849eab Update ci.yml
• 4f699a2 Delete .github/FUNDING.yml
• f3fd1ef Merge pull request #552 from RoosterDragon/recursion-limit
• c727adf Merge branch 'master' into recursion-limit
• 9fc63f8 Merge pull request #567 from Hoeksema/patch-1
• d214f53 Merge branch 'master' into recursion-limit
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)