{"action":"created","issue":{"url":"https://api.github.com/repos/apiaryio/apiary-client/issues/109","repository_url":"https://api.github.com/repos/apiaryio/apiary-client","labels_url":"https://api.github.com/repos/apiaryio/apiary-client/issues/109/labels{/name}","comments_url":"https://api.github.com/repos/apiaryio/apiary-client/issues/109/comments","events_url":"https://api.github.com/repos/apiaryio/apiary-client/issues/109/events","html_url":"https://github.com/apiaryio/apiary-client/pull/109","id":139584213,"number":109,"title":"Loosen dependecy on rest-client","user":{"login":"trek","id":9736,"avatar_url":"https://avatars.githubusercontent.com/u/9736?v=3","gravatar_id":"","url":"https://api.github.com/users/trek","html_url":"https://github.com/trek","followers_url":"https://api.github.com/users/trek/followers","following_url":"https://api.github.com/users/trek/following{/other_user}","gists_url":"https://api.github.com/users/trek/gists{/gist_id}","starred_url":"https://api.github.com/users/trek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/trek/subscriptions","organizations_url":"https://api.github.com/users/trek/orgs","repos_url":"https://api.github.com/users/trek/repos","events_url":"https://api.github.com/users/trek/events{/privacy}","received_events_url":"https://api.github.com/users/trek/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-03-09T13:58:32Z","updated_at":"2016-03-09T14:13:04Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/apiaryio/apiary-client/pulls/109","html_url":"https://github.com/apiaryio/apiary-client/pull/109","diff_url":"https://github.com/apiaryio/apiary-client/pull/109.diff","patch_url":"https://github.com/apiaryio/apiary-client/pull/109.patch"},"body":"We're using the apiary client to automatically publish documentation in our Rails app as part of each CI build in stating and production environments. We're using the library code directly as part of a rake task and not using the clie.\r\n\r\nSome dependency in our app happens to use a version of `rest-client` that is < 1.8. Is there a specific feature in 1.8+ that is required or did this just happen to be the version of `rest-client` available when authoring the first time?"},"comment":{"url":"https://api.github.com/repos/apiaryio/apiary-client/issues/comments/194311512","html_url":"https://github.com/apiaryio/apiary-client/pull/109#issuecomment-194311512","issue_url":"https://api.github.com/repos/apiaryio/apiary-client/issues/109","id":194311512,"user":{"login":"kylef","id":44164,"avatar_url":"https://avatars.githubusercontent.com/u/44164?v=3","gravatar_id":"","url":"https://api.github.com/users/kylef","html_url":"https://github.com/kylef","followers_url":"https://api.github.com/users/kylef/followers","following_url":"https://api.github.com/users/kylef/following{/other_user}","gists_url":"https://api.github.com/users/kylef/gists{/gist_id}","starred_url":"https://api.github.com/users/kylef/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kylef/subscriptions","organizations_url":"https://api.github.com/users/kylef/orgs","repos_url":"https://api.github.com/users/kylef/repos","events_url":"https://api.github.com/users/kylef/events{/privacy}","received_events_url":"https://api.github.com/users/kylef/received_events","type":"User","site_admin":false},"created_at":"2016-03-09T14:13:04Z","updated_at":"2016-03-09T14:13:04Z","body":"There have been numerous security vulnerabilities in versions of rest-client below 1.8 which is why we've required 1.8 or newer.\r\n\r\nIf you notice the pull request check for \"Hakiri\" is now red due to security warnings. Perhaps it would be a good idea to upgrade the other library to be compatible with newer versions of rest-client, especially if you are using this in a production service. There is various security advisories against these older versions of rest-client. You should be able to use [isitvulnerable](https://isitvulnerable.com) to pin-point the exact vulnerabilities against the version you are using."}}