diff --git a/lib/config/definitions.js b/lib/config/definitions.js
index f26e0bca18ee6ce4d14ac4f3faf74bee4c920918..67e7a90c039bd098a37aa3fe9345aad14a9cf273 100644
--- a/lib/config/definitions.js
+++ b/lib/config/definitions.js
@@ -444,7 +444,7 @@ const options = [
     type: 'json',
     default: {
       branchName:
-        '{{branchPrefix}}{{depNameSanitized}}-{{newVersionMajor}}.{{newVersionMinor}}.x',
+        '{{{branchPrefix}}}{{{depNameSanitized}}}-{{{newVersionMajor}}}.{{{newVersionMinor}}}.x',
     },
     cli: false,
     mergeable: true,
@@ -461,7 +461,7 @@ const options = [
       groupName: 'Pin Dependencies',
       group: {
         commitMessage: 'Pin Dependencies',
-        prTitle: '{{groupName}}',
+        prTitle: '{{{groupName}}}',
       },
     },
     cli: false,
diff --git a/lib/config/templates/default/branch-name.hbs b/lib/config/templates/default/branch-name.hbs
index 1ac2acbe251850dad5fdecf822448038f3fa346c..438c0092208c1170bce39b2fcdd5d2215b65838e 100644
--- a/lib/config/templates/default/branch-name.hbs
+++ b/lib/config/templates/default/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}{{depNameSanitized}}-{{newVersionMajor}}.x
+{{{branchPrefix}}}{{{depNameSanitized}}}-{{{newVersionMajor}}}.x
diff --git a/lib/config/templates/default/commit-message.hbs b/lib/config/templates/default/commit-message.hbs
index 13a4864be4e808046e181ccea263208501eee843..54cf257ffed966a63cd809e1dc30a4234a84b489 100644
--- a/lib/config/templates/default/commit-message.hbs
+++ b/lib/config/templates/default/commit-message.hbs
@@ -1 +1 @@
-Update dependency {{depName}} to {{#unless isRange}}v{{/unless}}{{newVersion}}
+Update dependency {{{depName}}} to {{#unless isRange}}v{{/unless}}{{{newVersion}}}
diff --git a/lib/config/templates/default/pr-body.hbs b/lib/config/templates/default/pr-body.hbs
index ea4ad06ccbb91eb02144f9864c5fe6ffa11d4762..dc10c1846f65ee56dd2a90b9033417eb9ce80f84 100644
--- a/lib/config/templates/default/pr-body.hbs
+++ b/lib/config/templates/default/pr-body.hbs
@@ -1,12 +1,12 @@
-This Pull Request {{#if isRollback}}rolls back{{else}}updates{{/if}} dependency {{#if repositoryUrl}}[{{depName}}]({{repositoryUrl}}){{else}}{{depName}}{{/if}} from `{{#unless isRange}}{{#unless isPin}}v{{/unless}}{{/unless}}{{currentVersion}}` to `{{#unless isRange}}v{{/unless}}{{newVersion}}`{{#if isRollback}}. This is necessary and important because `v{{currentVersion}}` cannot be found in the npm registry - probably because of it being unpublished.{{/if}}
+This Pull Request {{#if isRollback}}rolls back{{else}}updates{{/if}} dependency {{#if repositoryUrl}}[{{{depName}}}]({{{repositoryUrl}}}){{else}}{{{depName}}}{{/if}} from `{{#unless isRange}}{{#unless isPin}}v{{/unless}}{{/unless}}{{{currentVersion}}}` to `{{#unless isRange}}v{{/unless}}{{{newVersion}}}`{{#if isRollback}}. This is necessary and important because `v{{{currentVersion}}}` cannot be found in the npm registry - probably because of it being unpublished.{{/if}}
 {{#if hasTypes}}
 
-This PR also includes an upgrade to the corresponding [@types/{{depName}}](https://npmjs.com/package/@types/{{depName}}) package.
+This PR also includes an upgrade to the corresponding [@types/{{{depName}}}](https://npmjs.com/package/@types/{{{depName}}}) package.
 {{/if}}
 {{#if releases.length}}
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if isPin}}
diff --git a/lib/config/templates/default/pr-title.hbs b/lib/config/templates/default/pr-title.hbs
index e2cc17494de8b8b828b2b192894d642191abc37a..540afe2a3e4f65687d50a1ed386416a58c618a4e 100644
--- a/lib/config/templates/default/pr-title.hbs
+++ b/lib/config/templates/default/pr-title.hbs
@@ -1 +1 @@
-{{#if isPin}}Pin{{else}}{{#if isRollback}}Roll back{{else}}Update{{/if}}{{/if}} dependency {{depName}} to {{#if isRange}}{{newVersion}}{{else}}{{#if isMajor}}v{{newVersionMajor}}{{else}}v{{newVersion}}{{/if}}{{/if}}
+{{#if isPin}}Pin{{else}}{{#if isRollback}}Roll back{{else}}Update{{/if}}{{/if}} dependency {{{depName}}} to {{#if isRange}}{{{newVersion}}}{{else}}{{#if isMajor}}v{{{newVersionMajor}}}{{else}}v{{{newVersion}}}{{/if}}{{/if}}
diff --git a/lib/config/templates/docker-digest/branch-name.hbs b/lib/config/templates/docker-digest/branch-name.hbs
index 5a353edf92f4bb504e8bf38d03177a975adacf7f..06de4198bc0df91a9c4cf3d0089a42cab443930c 100644
--- a/lib/config/templates/docker-digest/branch-name.hbs
+++ b/lib/config/templates/docker-digest/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}docker-{{depNameSanitized}}-{{currentTag}}
+{{{branchPrefix}}}docker-{{{depNameSanitized}}}-{{{currentTag}}}
diff --git a/lib/config/templates/docker-digest/commit-message.hbs b/lib/config/templates/docker-digest/commit-message.hbs
index 0f3d052939d594e72a93170cf42fdb1bb5adf112..27a48b56432afd3061b16871453e2c321291c057 100644
--- a/lib/config/templates/docker-digest/commit-message.hbs
+++ b/lib/config/templates/docker-digest/commit-message.hbs
@@ -1 +1 @@
-Update {{depName}}:{{currentTag}} digest
+Update {{{depName}}}:{{{currentTag}}} digest
diff --git a/lib/config/templates/docker-digest/pr-body.hbs b/lib/config/templates/docker-digest/pr-body.hbs
index e43694fd0df39d8b8bfe0716aed4411dc9446865..ffbb2f6c70a06ec02c1f3dfe7e1be6b8670ca4e4 100644
--- a/lib/config/templates/docker-digest/pr-body.hbs
+++ b/lib/config/templates/docker-digest/pr-body.hbs
@@ -1,7 +1,7 @@
-This Pull Request updates Docker base image `{{depName}}:{{currentTag}}` to the latest digest (`{{newDigest}}`). For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
+This Pull Request updates Docker base image `{{{depName}}}:{{{currentTag}}}` to the latest digest (`{{{newDigest}}}`). For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
diff --git a/lib/config/templates/docker-digest/pr-title.hbs b/lib/config/templates/docker-digest/pr-title.hbs
index 93a61546df5f75b2e2f504c8ae551600cde7065a..ada29e30cfd996f93981d704f7802ed8aa7fbba8 100644
--- a/lib/config/templates/docker-digest/pr-title.hbs
+++ b/lib/config/templates/docker-digest/pr-title.hbs
@@ -1 +1 @@
-Update Dockerfile {{depName}} image {{currentTag}} digest ({{newDigestShort}})
+Update Dockerfile {{{depName}}} image {{{currentTag}}} digest ({{{newDigestShort}}})
diff --git a/lib/config/templates/docker-group/pr-body.hbs b/lib/config/templates/docker-group/pr-body.hbs
index b63149a7af55438a4d2ff55594c2dfc22b0c90d8..d5f30152050fc88d9e132a6c1f69b95bc424345a 100644
--- a/lib/config/templates/docker-group/pr-body.hbs
+++ b/lib/config/templates/docker-group/pr-body.hbs
@@ -1,11 +1,11 @@
 This Pull Request updates Dockerfiles to use image digests.
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#each upgrades as |upgrade|}}
--   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{depName}}{{/if}}: `{{upgrade.newDigest}}`
+-   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{{depName}}}{{/if}}: `{{upgrade.newDigest}}`
 {{/each}}
 
 {{#if hasErrors}}
diff --git a/lib/config/templates/docker-group/pr-title.hbs b/lib/config/templates/docker-group/pr-title.hbs
index b4feb91a674539c8db31b7748ea490f07af17c7e..aaebe61c28ddafd97aafa8933423ccaacbbd80bb 100644
--- a/lib/config/templates/docker-group/pr-title.hbs
+++ b/lib/config/templates/docker-group/pr-title.hbs
@@ -1 +1 @@
-Update Docker {{groupName}} digests
+Update Docker {{{groupName}}} digests
diff --git a/lib/config/templates/docker-pin-group/pr-body.hbs b/lib/config/templates/docker-pin-group/pr-body.hbs
index c6f1ef0a181802b6129a2c1a79f5cfb298f91be4..8dc68510126d8419cd8590223fb76700e55885db 100644
--- a/lib/config/templates/docker-pin-group/pr-body.hbs
+++ b/lib/config/templates/docker-pin-group/pr-body.hbs
@@ -1,11 +1,11 @@
 This Pull Request pins Dockerfiles to use image digests. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#each upgrades as |upgrade|}}
--   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{depName}}{{/if}}: `{{upgrade.newDigest}}`
+-   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{{depName}}}{{/if}}: `{{upgrade.newDigest}}`
 {{/each}}
 
 **Important**: Renovate will wait until you have merged this Pin request before creating PRs for any *upgrades*. If you do not wish to pin anything, please update your config accordingly instead of leaving this PR open.
diff --git a/lib/config/templates/docker-pin/branch-name.hbs b/lib/config/templates/docker-pin/branch-name.hbs
index 1e2d8ecf700aa7814daec60800f0682b5d344803..48b92818bb5cf52b5ed6eca1d0d68755b45c29f1 100644
--- a/lib/config/templates/docker-pin/branch-name.hbs
+++ b/lib/config/templates/docker-pin/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}docker-pin-{{depNameSanitized}}-{{currentTag}}
+{{{branchPrefix}}}docker-pin-{{{depNameSanitized}}}-{{{currentTag}}}
diff --git a/lib/config/templates/docker-pin/pr-body.hbs b/lib/config/templates/docker-pin/pr-body.hbs
index f09ffdc21d9459bd8b0e164118eb591370f83bf5..29a7c9337ce8c1c1af2e6933d2a4e9736aaa4c94 100644
--- a/lib/config/templates/docker-pin/pr-body.hbs
+++ b/lib/config/templates/docker-pin/pr-body.hbs
@@ -1,8 +1,8 @@
-This Pull Request pins Docker base image `{{depName}}:{{currentTag}}` to use a digest (`{{newDigest}}`).
+This Pull Request pins Docker base image `{{{depName}}}:{{{currentTag}}}` to use a digest (`{{{newDigest}}}`).
 This digest will then be kept updated via Pull Requests whenever the image is updated on the Docker registry. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 **Important**: Renovate will wait until you have merged this Pin request before creating PRs for any *upgrades*. If you do not wish to pin anything, please update your config accordingly instead of leaving this PR open.
diff --git a/lib/config/templates/docker-pin/pr-title.hbs b/lib/config/templates/docker-pin/pr-title.hbs
index b39098a47805d2a2a640b0e72b5ed4c45285ffae..5a1dffe908277f651b47a01eee90fe945ab7aeed 100644
--- a/lib/config/templates/docker-pin/pr-title.hbs
+++ b/lib/config/templates/docker-pin/pr-title.hbs
@@ -1 +1 @@
-Pin Dockerfile {{depName}}:{{currentTag}} image digest
+Pin Dockerfile {{{depName}}}:{{{currentTag}}} image digest
diff --git a/lib/config/templates/docker/branch-name.hbs b/lib/config/templates/docker/branch-name.hbs
index 817fd2300e0d65e97f5d2b0567a69adc81098cf7..a0e81a09ba4586f0fb83c3917613394653e7c3dc 100644
--- a/lib/config/templates/docker/branch-name.hbs
+++ b/lib/config/templates/docker/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}docker-{{depNameSanitized}}-{{newVersionMajor}}.x
+{{{branchPrefix}}}docker-{{{depNameSanitized}}}-{{{newVersionMajor}}}.x
diff --git a/lib/config/templates/docker/commit-message.hbs b/lib/config/templates/docker/commit-message.hbs
index dd1848844bf99525e59401cf34928c032f48c0ab..01b064eaa1b44f16e6df32cf02c0af8dcf782a1d 100644
--- a/lib/config/templates/docker/commit-message.hbs
+++ b/lib/config/templates/docker/commit-message.hbs
@@ -1 +1 @@
-Update {{depName}} to tag {{newTag}}
+Update {{{depName}}} to tag {{{newTag}}}
diff --git a/lib/config/templates/docker/pr-body.hbs b/lib/config/templates/docker/pr-body.hbs
index a2eb4ce55b5cb85d0bd838f21a880dddb5336cdc..593c4a60b5841bef89dc43fa918fb32e2a794754 100644
--- a/lib/config/templates/docker/pr-body.hbs
+++ b/lib/config/templates/docker/pr-body.hbs
@@ -1,7 +1,7 @@
-This Pull Request updates Docker base image {{depName}} from tag `{{currentTag}}` to new tag `{{newTag}}`. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
+This Pull Request updates Docker base image {{{depName}}} from tag `{{{currentTag}}}` to new tag `{{{newTag}}}`. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
diff --git a/lib/config/templates/docker/pr-title.hbs b/lib/config/templates/docker/pr-title.hbs
index 5a4e6e9d6ca34e1409db4ae8d22ff515f9a73017..b0f3d51d7f8b386528984b800e67cc0e6565dbfd 100644
--- a/lib/config/templates/docker/pr-title.hbs
+++ b/lib/config/templates/docker/pr-title.hbs
@@ -1 +1 @@
-Update {{depName}} Dockerfile tag to {{#if isMajor}}v{{newVersionMajor}}{{else}}v{{newTag}}{{/if}}
+Update {{{depName}}} Dockerfile tag to {{#if isMajor}}v{{{newVersionMajor}}}{{else}}v{{{newTag}}}{{/if}}
diff --git a/lib/config/templates/group/branch-name.hbs b/lib/config/templates/group/branch-name.hbs
index e08a79f25417dca9a4b7e7346fbdf2d06c78ada1..30d001b693b9dfd57876e44db8b77862eb0d456c 100644
--- a/lib/config/templates/group/branch-name.hbs
+++ b/lib/config/templates/group/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}{{groupSlug}}
+{{{branchPrefix}}}{{groupSlug}}
diff --git a/lib/config/templates/group/commit-message.hbs b/lib/config/templates/group/commit-message.hbs
index c30dd38dccc9388847356f56bf1576c893d2dffe..16e6b7d8b97e42a914aa1b963c51790b7969a52d 100644
--- a/lib/config/templates/group/commit-message.hbs
+++ b/lib/config/templates/group/commit-message.hbs
@@ -1 +1 @@
-Update {{groupName}} packages
+Update {{{groupName}}} packages
diff --git a/lib/config/templates/group/pr-body.hbs b/lib/config/templates/group/pr-body.hbs
index efcf07d255b5c8bd4d540a47afbdedf9fb0b5153..04679fed10f28fe6b18a5d98c9d275bd33e93286 100644
--- a/lib/config/templates/group/pr-body.hbs
+++ b/lib/config/templates/group/pr-body.hbs
@@ -1,11 +1,11 @@
-This Pull Request renovates the package group "{{groupName}}".
+This Pull Request renovates the package group "{{{groupName}}}".
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#each upgrades as |upgrade|}}
--   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{depName}}{{/if}}: from `{{upgrade.currentVersion}}` to `{{upgrade.newVersion}}`
+-   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{{depName}}}{{/if}}: from `{{upgrade.currentVersion}}` to `{{upgrade.newVersion}}`
 {{/each}}
 
 {{#unless isPin}}
diff --git a/lib/config/templates/group/pr-title.hbs b/lib/config/templates/group/pr-title.hbs
index 9f8028e5298e865e1b9f762af603a310bda23148..30c85d545a74de627cb269f52f8f84294d0163d3 100644
--- a/lib/config/templates/group/pr-title.hbs
+++ b/lib/config/templates/group/pr-title.hbs
@@ -1 +1 @@
-Update {{groupName}} packages{{#if singleVersion}} to {{#unless isRange}}v{{/unless}}{{singleVersion}}{{/if}}
+Update {{{groupName}}} packages{{#if singleVersion}} to {{#unless isRange}}v{{/unless}}{{{singleVersion}}}{{/if}}
diff --git a/lib/config/templates/lock-file-maintenance/branch-name.hbs b/lib/config/templates/lock-file-maintenance/branch-name.hbs
index 01cdd676b621be6c340aaea93be4e5e955a9c908..4f4502faebb87292e66fa111833419d5843eb425 100644
--- a/lib/config/templates/lock-file-maintenance/branch-name.hbs
+++ b/lib/config/templates/lock-file-maintenance/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}lock-file-maintenance
+{{{branchPrefix}}}lock-file-maintenance
diff --git a/lib/config/templates/lock-file-maintenance/pr-body.hbs b/lib/config/templates/lock-file-maintenance/pr-body.hbs
index b1dfe755fb38657be8debfd4e2a987b5ab3e78c0..6aabf917ecd3761b091756dda7f2242db2addf97 100644
--- a/lib/config/templates/lock-file-maintenance/pr-body.hbs
+++ b/lib/config/templates/lock-file-maintenance/pr-body.hbs
@@ -1,7 +1,7 @@
 This Pull Request updates `package.json` lock files to use the latest dependency versions.
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
diff --git a/lib/config/templates/node/branch-name.hbs b/lib/config/templates/node/branch-name.hbs
index 38a6f040dfed949579273a93c2abba02546b27bf..2d1e57a7dd4540a868a80a8cf434a74eb154ed30 100644
--- a/lib/config/templates/node/branch-name.hbs
+++ b/lib/config/templates/node/branch-name.hbs
@@ -1 +1 @@
-{{branchPrefix}}node-{{depNameSanitized}}
+{{{branchPrefix}}}node-{{{depNameSanitized}}}
diff --git a/lib/config/templates/node/pr-body.hbs b/lib/config/templates/node/pr-body.hbs
index 4d3a13278754dcf32636740528b641458afaf4cf..f9a4ab4fe356d9796983833d9486dc4aad57e50c 100644
--- a/lib/config/templates/node/pr-body.hbs
+++ b/lib/config/templates/node/pr-body.hbs
@@ -1,7 +1,7 @@
-This Pull Request updates {{depName}} versions from `{{currentVersions}}` to `{{newVersions}}`. This is according to the configured node.js support policy "{{supportPolicy}}".
+This Pull Request updates {{{depName}}} versions from `{{{currentVersions}}}` to `{{{newVersions}}}`. This is according to the configured node.js support policy "{{{supportPolicy}}}".
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule ("{{schedule}}"{{#if timezone}} in timezone `{{timezone}}`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule ("{{{schedule}}}"{{#if timezone}} in timezone `{{{timezone}}}`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
diff --git a/lib/config/templates/node/pr-title.hbs b/lib/config/templates/node/pr-title.hbs
index 55ab0e503e740fb77e79bc2553834560a23e7e59..49968ba46cab0f0228fde5371d1c155dc33209ab 100644
--- a/lib/config/templates/node/pr-title.hbs
+++ b/lib/config/templates/node/pr-title.hbs
@@ -1 +1 @@
-Update {{depName}} versions to [{{newVersions}}]
+Update {{{depName}}} versions to [{{{newVersions}}}]
diff --git a/lib/workers/package/versions.js b/lib/workers/package/versions.js
index 15a1d4024ba92dc49b9e04b10829a7239c8dfc76..b87e7196c3ae069672f9275159c92812a900871a 100644
--- a/lib/workers/package/versions.js
+++ b/lib/workers/package/versions.js
@@ -62,7 +62,7 @@ function determineUpgrades(npmDep, config) {
         newVersionMajor: semver.major(rollbackVersion),
         semanticCommitType: 'fix',
         branchName:
-          '{{branchPrefix}}rollback-{{depNameSanitized}}-{{newVersionMajor}}.x',
+          '{{{branchPrefix}}}rollback-{{{depNameSanitized}}}-{{{newVersionMajor}}}.x',
       };
     } catch (err) /* istanbul ignore next */ {
       logger.info(
@@ -117,7 +117,7 @@ function determineUpgrades(npmDep, config) {
       } else if (!config.multipleMajorPrs && type === 'major') {
         upgradeKey = 'major';
       } else if (type === 'patch') {
-        upgradeKey = `{{newVersionMajor}}.{{newVersionMinor}}`;
+        upgradeKey = `{{{newVersionMajor}}}.{{{newVersionMinor}}}`;
       } else {
         // Use major version as lookup key
         upgradeKey = newVersionMajor;
diff --git a/test/config/__snapshots__/index.spec.js.snap b/test/config/__snapshots__/index.spec.js.snap
index 73df5d60dca5903b72ce29704bc547a9a64c6cc9..fd874940633bab97cc052a8125e85fe5da53ecf5 100644
--- a/test/config/__snapshots__/index.spec.js.snap
+++ b/test/config/__snapshots__/index.spec.js.snap
@@ -2,14 +2,14 @@
 
 exports[`config/index mergeChildConfig(parentConfig, childConfig) merges 1`] = `
 Object {
-  "branchName": "{{branchPrefix}}lock-file-maintenance",
+  "branchName": "{{{branchPrefix}}}lock-file-maintenance",
   "commitMessage": "Update lock file",
   "enabled": false,
   "groupName": null,
   "prBody": "This Pull Request updates \`package.json\` lock files to use the latest dependency versions.
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
diff --git a/test/manager/__snapshots__/resolve.spec.js.snap b/test/manager/__snapshots__/resolve.spec.js.snap
index 1e98a4fee39f872c1e4525ca4cba253b4d402f5c..12a73634ddd86321d108046fac5481665657bfe6 100644
--- a/test/manager/__snapshots__/resolve.spec.js.snap
+++ b/test/manager/__snapshots__/resolve.spec.js.snap
@@ -47,19 +47,19 @@ Array [
     "packageFile": "package.js",
   },
   Object {
-    "branchName": "{{branchPrefix}}docker-{{depNameSanitized}}-{{newVersionMajor}}.x",
-    "commitMessage": "Update {{depName}} to tag {{newTag}}",
+    "branchName": "{{{branchPrefix}}}docker-{{{depNameSanitized}}}-{{{newVersionMajor}}}.x",
+    "commitMessage": "Update {{{depName}}} to tag {{{newTag}}}",
     "content": "# comment
 FROM node:8
 ",
     "currentFrom": "node:8",
     "digest": Object {
-      "branchName": "{{branchPrefix}}docker-{{depNameSanitized}}-{{currentTag}}",
-      "commitMessage": "Update {{depName}}:{{currentTag}} digest",
-      "prBody": "This Pull Request updates Docker base image \`{{depName}}:{{currentTag}}\` to the latest digest (\`{{newDigest}}\`). For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
+      "branchName": "{{{branchPrefix}}}docker-{{{depNameSanitized}}}-{{{currentTag}}}",
+      "commitMessage": "Update {{{depName}}}:{{{currentTag}}} digest",
+      "prBody": "This Pull Request updates Docker base image \`{{{depName}}}:{{{currentTag}}}\` to the latest digest (\`{{{newDigest}}}\`). For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
@@ -91,18 +91,18 @@ Please make sure the following warnings are safe to ignore:
 ---
 
 This PR has been generated by [Renovate Bot](https://renovateapp.com).",
-      "prTitle": "Update Dockerfile {{depName}} image {{currentTag}} digest ({{newDigestShort}})",
+      "prTitle": "Update Dockerfile {{{depName}}} image {{{currentTag}}} digest ({{{newDigestShort}}})",
     },
     "enabled": true,
     "group": Object {
       "prBody": "This Pull Request updates Dockerfiles to use image digests.
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#each upgrades as |upgrade|}}
--   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{depName}}{{/if}}: \`{{upgrade.newDigest}}\`
+-   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{{depName}}}{{/if}}: \`{{upgrade.newDigest}}\`
 {{/each}}
 
 {{#if hasErrors}}
@@ -134,23 +134,23 @@ Please make sure the following warnings are safe to ignore:
 ---
 
 This PR has been generated by [Renovate Bot](https://renovateapp.com).",
-      "prTitle": "Update Docker {{groupName}} digests",
+      "prTitle": "Update Docker {{{groupName}}} digests",
     },
     "major": Object {
       "enabled": false,
     },
     "packageFile": "Dockerfile",
     "pin": Object {
-      "branchName": "{{branchPrefix}}docker-pin-{{depNameSanitized}}-{{currentTag}}",
+      "branchName": "{{{branchPrefix}}}docker-pin-{{{depNameSanitized}}}-{{{currentTag}}}",
       "group": Object {
         "prBody": "This Pull Request pins Dockerfiles to use image digests. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#each upgrades as |upgrade|}}
--   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{depName}}{{/if}}: \`{{upgrade.newDigest}}\`
+-   {{#if repositoryUrl}}[{{upgrade.depName}}]({{upgrade.repositoryUrl}}){{else}}{{{depName}}}{{/if}}: \`{{upgrade.newDigest}}\`
 {{/each}}
 
 **Important**: Renovate will wait until you have merged this Pin request before creating PRs for any *upgrades*. If you do not wish to pin anything, please update your config accordingly instead of leaving this PR open.
@@ -187,11 +187,11 @@ This PR has been generated by [Renovate Bot](https://renovateapp.com).",
         "prTitle": "Pin Docker digests",
       },
       "groupName": "Pin Docker Digests",
-      "prBody": "This Pull Request pins Docker base image \`{{depName}}:{{currentTag}}\` to use a digest (\`{{newDigest}}\`).
+      "prBody": "This Pull Request pins Docker base image \`{{{depName}}}:{{{currentTag}}}\` to use a digest (\`{{{newDigest}}}\`).
 This digest will then be kept updated via Pull Requests whenever the image is updated on the Docker registry. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 **Important**: Renovate will wait until you have merged this Pin request before creating PRs for any *upgrades*. If you do not wish to pin anything, please update your config accordingly instead of leaving this PR open.
@@ -225,12 +225,12 @@ Please make sure the following warnings are safe to ignore:
 ---
 
 This PR has been generated by [Renovate Bot](https://renovateapp.com).",
-      "prTitle": "Pin Dockerfile {{depName}}:{{currentTag}} image digest",
+      "prTitle": "Pin Dockerfile {{{depName}}}:{{{currentTag}}} image digest",
     },
-    "prBody": "This Pull Request updates Docker base image {{depName}} from tag \`{{currentTag}}\` to new tag \`{{newTag}}\`. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
+    "prBody": "This Pull Request updates Docker base image {{{depName}}} from tag \`{{{currentTag}}}\` to new tag \`{{{newTag}}}\`. For details on Renovate's Docker support, please visit https://renovateapp.com/docs/language-support/docker
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
@@ -262,18 +262,18 @@ Please make sure the following warnings are safe to ignore:
 ---
 
 This PR has been generated by [Renovate Bot](https://renovateapp.com).",
-    "prTitle": "Update {{depName}} Dockerfile tag to {{#if isMajor}}v{{newVersionMajor}}{{else}}v{{newTag}}{{/if}}",
+    "prTitle": "Update {{{depName}}} Dockerfile tag to {{#if isMajor}}v{{{newVersionMajor}}}{{else}}v{{{newTag}}}{{/if}}",
   },
   Object {
-    "branchName": "{{branchPrefix}}node-{{depNameSanitized}}",
+    "branchName": "{{{branchPrefix}}}node-{{{depNameSanitized}}}",
     "content": "hello: world
 ",
     "enabled": true,
     "packageFile": ".travis.yml",
-    "prBody": "This Pull Request updates {{depName}} versions from \`{{currentVersions}}\` to \`{{newVersions}}\`. This is according to the configured node.js support policy \\"{{supportPolicy}}\\".
+    "prBody": "This Pull Request updates {{{depName}}} versions from \`{{{currentVersions}}}\` to \`{{{newVersions}}}\`. This is according to the configured node.js support policy \\"{{{supportPolicy}}}\\".
 
 {{#if schedule}}
-**Note**: This PR was created on a configured schedule (\\"{{schedule}}\\"{{#if timezone}} in timezone \`{{timezone}}\`{{/if}}) and will not receive updates outside those times.
+**Note**: This PR was created on a configured schedule (\\"{{{schedule}}}\\"{{#if timezone}} in timezone \`{{{timezone}}}\`{{/if}}) and will not receive updates outside those times.
 {{/if}}
 
 {{#if hasErrors}}
@@ -305,7 +305,7 @@ Please make sure the following warnings are safe to ignore:
 ---
 
 This PR has been generated by [Renovate Bot](https://renovateapp.com).",
-    "prTitle": "Update {{depName}} versions to [{{newVersions}}]",
+    "prTitle": "Update {{{depName}}} versions to [{{{newVersions}}}]",
     "supportPolicy": Array [
       "lts",
     ],
diff --git a/test/workers/package/__snapshots__/versions.spec.js.snap b/test/workers/package/__snapshots__/versions.spec.js.snap
index 1db60a1b7ad5b8223c2ed8ec5ae35fadca3e44c6..9e0e70b2d9ad8f1f32c1b704f9f4af9d9e4444d3 100644
--- a/test/workers/package/__snapshots__/versions.spec.js.snap
+++ b/test/workers/package/__snapshots__/versions.spec.js.snap
@@ -313,7 +313,7 @@ Array [
 
 exports[`workers/package/versions .determineUpgrades(npmDep, config) should downgrade from missing versions 1`] = `
 Object {
-  "branchName": "{{branchPrefix}}rollback-{{depNameSanitized}}-{{newVersionMajor}}.x",
+  "branchName": "{{{branchPrefix}}}rollback-{{{depNameSanitized}}}-{{{newVersionMajor}}}.x",
   "isRollback": true,
   "newVersion": "1.16.0",
   "newVersionMajor": 1,