[Snyk] Upgrade: dustjs-helpers, humanize-ms

[dawit-snyk]

Snyk has created this PR to upgrade multiple dependencies.

👯 The following dependencies are linked and will therefore be updated together.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

Name	Versions	Released on

dustjs-helpers
from 1.5.0 to 1.7.4 | 9 versions ahead of your current version | 7 years ago
on 2017-12-09
humanize-ms
from 1.0.1 to 1.2.1 | 3 versions ahead of your current version | 7 years ago
on 2017-05-19

Issues fixed by the recommended upgrade:

	Issue	Score	Exploit Maturity
	Regular Expression Denial of Service (ReDoS) npm:ms:20151024	479	No Known Exploit

Release notes

Package name: dustjs-helpers

• 1.7.4 - 2017-12-09
  

  Version 1.7.4

• 1.7.3 - 2015-07-28
  

  Version 1.7.3

• 1.7.2 - 2015-07-08
  

  Version 1.7.2

• 1.7.1 - 2015-04-29
  

  Version 1.7.1

• 1.7.0 - 2015-04-18
  

  Notable Changes

  {@ select}

  New behavior:

  • key is no longer required. If it is not provided, key must be present on individual truth tests inside the select block.
  • type can be attached to the select to apply it to all truth tests inside (and a truth test can override the type)
  • If a provided key is undefined and a type is provided, the undefined value will be cast to type.

  {@ default}

  {@ default} has been removed after being deprecated in 1.6.

  You can replace {@ default} with {@ none} in your templates without any change in functionality (but you can have more than one {@ none} block, and only one {@ default} was allowed.)

  {@ size}

  {@ size} will evaluate Dust template strings and provide the size of the result.

  Your name has {@ size key="{name}" /} letters.
  

  {@ math}

  {@ any} and {@ none} now work inside {@ math} blocks.

• 1.6.3 - 2015-04-13
  

  Notable Changes

  • Fixes truth tests that were used with a context created from dust.makeBase in Dust <= 2.6.2 (most commonly seen if you use Adaro)
• 1.6.2 - 2015-03-27
  

  Notable Changes

  • Bugfixes around {@ select} state handling.
    • Fixes #124
  • dust.helpers.tap has been deprecated in favor of Context#resolve in Dust >= 2.6.2.
    • More info: https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features#tap
• 1.6.1 - 2015-03-11
  

  Version 1.6.1

• 1.6.0 - 2015-03-05
  

  The helpers can now be included as an AMD module alongside Dust 2.6.0 or newer.

  New helpers:

  • {@ any}, which executes if any truth test in a {@ select} block passes.
  • {@ none}, the opposite
  • {@ first}, executes on the first iteration of a loop
  • {@ last}... you get the idea

  Removed helpers: https://github.com/linkedin/dustjs-helpers/wiki/Deprecated-Features

  • {@ if} (use other truth test helpers or context helpers instead)
  • {@ idx} (use {$idx}, a Dust core built-in, instead
• 1.5.0 - 2014-11-20
  
  • #102 Deprecate {@ if} and {@ idx} helpers (@ sethkinast)
  • #105 Comparison helpers should still execute when their key parameter is set, but it resolves to undefined. (@ sethkinast)
  • #104 Coerce falsy values when a type is specified by a comparison helper. (@ sethkinast)
  • #101 Update README and add CHANGELOG (@ sethkinast)

from dustjs-helpers GitHub release notes

Package name: humanize-ms

• 1.2.1 - 2017-05-19
  

  Release 1.2.1

• 1.2.0 - 2016-05-20
  

  Release 1.2.0

• 1.0.2 - 2016-04-04
• 1.0.1 - 2015-01-02
  

  Release 1.0.1

from humanize-ms GitHub release notes

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.
• Max score is 1000. Note that the real score may have changed since the PR was raised.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs