Repository: vuejs/vue
Pull request: build(deps): bump handlebars from 4.0.12 to 4.4.3

Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.0.12 to 4.4.3.
<details>
<summary>Changelog</summary>

*Sourced from [handlebars's changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md).*

> ## v4.4.3 - October 8th, 2019
> Bugfixes
> 
> Typings:
> - add missing type fields to AST typings and add tests for them - 0440af2
> 
> 
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.4.2...v4.4.3)
> 
> ## v4.4.2 - October 2nd, 2019
> - chore: fix grunt-saucelabs dependency - b7eada0
> 
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.4.1...v4.4.2)
> 
> ## v4.4.1 - October 2nd, 2019
> - [#1562](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1562) - Error message for syntax error missing location in 4.2.1+
> 
> 
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.4.0...v4.4.1)
> 
> ## v4.4.0 - September 29th, 2019
> - Added support for iterable objects in {{#each}} helper ([#1557](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1557)) - cf7545e
> 
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.3.4...v4.4.0)
> 
> ## v4.3.4 - September 28th, 2019
> - fix: harden "propertyIsEnumerable"-check - ff4d827
> 
> Compatibility notes:
> - No incompatibilities are known.
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.3.3...v4.3.4)
> 
> ## v4.3.3 - September 27th, 2019
>  - fix test case for browsers that do not support __defineGetter__ - 8742bde
> 
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.3.2...v4.3.3)
> 
> ## v4.3.2 - September 26th, 2019
> - Use Object.prototype.propertyIsEnumerable to check for constructors - 213c0bb, [#1563](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1563)
> 
> Compatibility notes:
> - There are no breaking changes
> 
> [Commits](https://github.com/wycats/handlebars.js/compare/v4.3.1...v4.3.2)
></tr></table> ... (truncated)
</details>
<details>
<summary>Commits</summary>

- [`2e53fba`](https://github.com/wycats/handlebars.js/commit/2e53fba68f8c51f9aca97615944fdbdeba94ff62) v4.4.3
- [`ba570c4`](https://github.com/wycats/handlebars.js/commit/ba570c42cf505073dfd59b95614e000962b77a89) Update release notes
- [`0440af2`](https://github.com/wycats/handlebars.js/commit/0440af214738a611b51c15abdd84254aca200a85) added missing type fields in typings and tests for them
- [`b793350`](https://github.com/wycats/handlebars.js/commit/b793350fec0bb652c0bb2658089d7002af27a76b) v4.4.2
- [`26d0f7a`](https://github.com/wycats/handlebars.js/commit/26d0f7a80d92c4b6d98197188accf52c7b07152c) Update release notes
- [`b7eada0`](https://github.com/wycats/handlebars.js/commit/b7eada01496da2c507143a83fc7f189d2d70b232) chore: fix grunt-saucelabs dependency
- [`b8e769f`](https://github.com/wycats/handlebars.js/commit/b8e769fcb624664a6bc7114c8739c2438d46dbe9) v4.4.1
- [`9cb3165`](https://github.com/wycats/handlebars.js/commit/9cb31653a464be9cdc759ee2bdc51e745155690d) Update release notes
- [`c53f340`](https://github.com/wycats/handlebars.js/commit/c53f3403746f6a53fad919b27d0ebc9df995e6ee) chore: use @knappi/grunt-saucelabs instead of github-dependency
- [`059b330`](https://github.com/wycats/handlebars.js/commit/059b33057925ebda96536421cfc7c4c75e5c61e3) v4.4.0
- Additional commits viewable in [compare view](https://github.com/wycats/handlebars.js/compare/v4.0.12...v4.4.3)
</details>
<br />

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.0.12&new-version=4.4.3)](https://help.github.com/articles/configuring-automated-security-fixes)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language
- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language
- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language
- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language

You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/vuejs/vue/network/alerts).

</details>

Changed files:
filename: yarn.lock
patch: @@ -1166,7 +1166,7 @@ async@1.x, async@^1.5.2:
   resolved "https://registry.yarnpkg.com/async/-/async-1.5.2.tgz#ec6a61ae56480c0c3cb241c95618e20892f9672a"
   integrity sha1-7GphrlZIDAw8skHJVhjiCJL5Zyo=
 
-async@^2.0.0, async@^2.1.2, async@^2.5.0:
+async@^2.0.0, async@^2.1.2:
   version "2.6.1"
   resolved "https://registry.yarnpkg.com/async/-/async-2.6.1.tgz#b245a23ca71930044ec53fa46aa00a3e87c6a610"
   integrity sha512-fNEiL2+AZt6AlAw/29Cr0UDe4sRAHCpEHh54WMz+Bb7QfNcFw4h3loofyJpLeQs4Yx7yuqu/2dLgM5hKOs6HlQ==
@@ -1941,6 +1941,11 @@ combined-stream@^1.0.6, combined-stream@~1.0.6:
   dependencies:
     delayed-stream "~1.0.0"
 
+commander@2.20.0:
+  version "2.20.0"
+  resolved "https://registry.yarnpkg.com/commander/-/commander-2.20.0.tgz#d58bb2b5c1ee8f87b0d340027e9e94e222c5a422"
+  integrity sha512-7j2y+40w61zy6YC2iRNpUe/NwhNyoXrYpHMrSunaMG64nRnaf96zO/KMQR4OyN/UnE5KLyEBnKHd4aG3rskjpQ==
+
 commander@2.9.0:
   version "2.9.0"
   resolved "https://registry.yarnpkg.com/commander/-/commander-2.9.0.tgz#9c99094176e12240cb22d6c5146098400fe0f7d4"
@@ -3784,11 +3789,11 @@ growl@1.9.2:
   integrity sha1-Dqd0NxXbjY3ixe3hd14bRayFwC8=
 
 handlebars@^4.0.1, handlebars@^4.0.2:
-  version "4.0.12"
-  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.0.12.tgz#2c15c8a96d46da5e266700518ba8cb8d919d5bc5"
-  integrity sha512-RhmTekP+FZL+XNhwS1Wf+bTTZpdLougwt5pcgA1tuz6Jcx0fpH/7z0qd71RKnZHBCxIRBHfBOnio4gViPemNzA==
+  version "4.4.3"
+  resolved "https://registry.yarnpkg.com/handlebars/-/handlebars-4.4.3.tgz#180bae52c1d0e9ec0c15d7e82a4362d662762f6e"
+  integrity sha512-B0W4A2U1ww3q7VVthTKfh+epHx+q4mCt6iK+zEAzbMBpWQAwxCeKxEGpj/1oQTpzPXDNSOG7hmG14TsISH50yw==
   dependencies:
-    async "^2.5.0"
+    neo-async "^2.6.0"
     optimist "^0.6.1"
     source-map "^0.6.1"
   optionalDependencies:
@@ -5680,10 +5685,10 @@ negotiator@0.6.1:
   resolved "https://registry.yarnpkg.com/negotiator/-/negotiator-0.6.1.tgz#2b327184e8992101177b28563fb5e7102acd0ca9"
   integrity sha1-KzJxhOiZIQEXeyhWP7XnECrNDKk=
 
-neo-async@^2.5.0:
-  version "2.6.0"
-  resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.0.tgz#b9d15e4d71c6762908654b5183ed38b753340835"
-  integrity sha512-MFh0d/Wa7vkKO3Y3LlacqAEeHK0mckVqzDieUKTT+KGxi+zIpeVsFxymkIiRpbpDziHc290Xr9A1O4Om7otoRA==
+neo-async@^2.5.0, neo-async@^2.6.0:
+  version "2.6.1"
+  resolved "https://registry.yarnpkg.com/neo-async/-/neo-async-2.6.1.tgz#ac27ada66167fa8849a6addd837f6b189ad2081c"
+  integrity sha512-iyam8fBuCUpWeKPGpaNMetEocMt364qkCsfL9JuhjXX6dRnguRVOfk2GZaDpPjcOKiiXCPINZC1GczQ7iTq3Zw==
 
 netmask@~1.0.4:
   version "1.0.6"
@@ -7928,11 +7933,11 @@ typescript@^3.1.3:
   integrity sha512-VCj5UiSyHBjwfYacmDuc/NOk4QQixbE+Wn7MFJuS0nRuPQbof132Pw4u53dm264O8LPc2MVsc7RJNml5szurkg==
 
 uglify-js@^3.1.4:
-  version "3.4.9"
-  resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.4.9.tgz#af02f180c1207d76432e473ed24a28f4a782bae3"
-  integrity sha512-8CJsbKOtEbnJsTyv6LE6m6ZKniqMiFWmm9sRbopbkGs3gMPPfd3Fh8iIA4Ykv5MgaTbqHr4BaoGLJLZNhsrW1Q==
+  version "3.6.1"
+  resolved "https://registry.yarnpkg.com/uglify-js/-/uglify-js-3.6.1.tgz#ae7688c50e1bdcf2f70a0e162410003cf9798311"
+  integrity sha512-+dSJLJpXBb6oMHP+Yvw8hUgElz4gLTh82XuX68QiJVTXaE5ibl6buzhNkQdYhBlIhozWOC9ge16wyRmjG4TwVQ==
   dependencies:
-    commander "~2.17.1"
+    commander "2.20.0"
     source-map "~0.6.1"
 
 ultron@~1.1.0: