{"action":"created","issue":{"url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/150","repository_url":"https://api.github.com/repos/jamesoff/simplemonitor","labels_url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/150/labels{/name}","comments_url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/150/comments","events_url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/150/events","html_url":"https://github.com/jamesoff/simplemonitor/pull/150","id":371818988,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI0MTgwMDQ0","number":150,"title":"Bump requests from 2.19.1 to 2.20.0","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":920554856,"node_id":"MDU6TGFiZWw5MjA1NTQ4NTY=","url":"https://api.github.com/repos/jamesoff/simplemonitor/labels/dependencies","name":"dependencies","color":"0025ff","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":4,"created_at":"2018-10-19T06:08:27Z","updated_at":"2018-10-29T19:08:02Z","closed_at":"2018-10-19T16:45:26Z","author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/jamesoff/simplemonitor/pulls/150","html_url":"https://github.com/jamesoff/simplemonitor/pull/150","diff_url":"https://github.com/jamesoff/simplemonitor/pull/150.diff","patch_url":"https://github.com/jamesoff/simplemonitor/pull/150.patch"},"body":"Bumps [requests](https://github.com/requests/requests) from 2.19.1 to 2.20.0.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [requests's changelog](https://github.com/requests/requests/blob/master/HISTORY.md).*\n\n> 2.20.0 (2018-10-18)\n> -------------------\n> \n> **Bugfixes**\n> \n> -   Content-Type header parsing is now case-insensitive (e.g.\n>     charset=utf8 v Charset=utf8).\n> -   Fixed exception leak where certain redirect urls would raise\n>     uncaught urllib3 exceptions.\n> -   Requests removes Authorization header from requests redirected\n>     from https to http on the same hostname. (CVE-2018-18074)\n> -   `should_bypass_proxies` now handles URIs without hostnames (e.g.\n>     files).\n> \n> **Dependencies**\n> \n> - Requests now supports urllib3 v1.24.\n> \n> **Deprecations**\n> \n> - Requests has officially stopped support for Python 2.6.\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`bd84045`](https://github.com/requests/requests/commit/bd840450c0d1e9db3bf62382c15d96378cc3a056) v2.20.0\n- [`7fd9267`](https://github.com/requests/requests/commit/7fd9267b3bab1d45f5e4ac0953629c5531ecbc55) remove final remnants from 2.6\n- [`6ae8a21`](https://github.com/requests/requests/commit/6ae8a2189235b62d7c5b2a6b95528750f046097c) Add myself to AUTHORS\n- [`89ab030`](https://github.com/requests/requests/commit/89ab030cdb83a728a30e172bc65d27ba214d2eda) Use comprehensions whenever possible\n- [`2c6a842`](https://github.com/requests/requests/commit/2c6a8426aebd853966747f2c851f551c583cb21a) Merge pull request [#4827](https://github-redirect.dependabot.com/requests/requests/issues/4827) from webmaven/patch-1\n- [`30be889`](https://github.com/requests/requests/commit/30be889651e7034eaa56edaf5794d68ffbfde9ed) CVE URLs update: www sub-subdomain no longer valid\n- [`a6cd380`](https://github.com/requests/requests/commit/a6cd380c640087218695bc7c62311a4843777e43) Merge pull request [#4765](https://github-redirect.dependabot.com/requests/requests/issues/4765) from requests/encapsulate_urllib3_exc\n- [`bbdbcc8`](https://github.com/requests/requests/commit/bbdbcc8f0553f112ff68b0950b4128bd8af000fc) wrap url parsing exceptions from urllib3's PoolManager\n- [`ff0c325`](https://github.com/requests/requests/commit/ff0c325014f817095de35013d385e137b111d6e8) Merge pull request [#4805](https://github-redirect.dependabot.com/requests/requests/issues/4805) from jdufresne/https\n- [`b0ad249`](https://github.com/requests/requests/commit/b0ad2499c8641d29affc90f565e6628d333d2a96) Prefer https:// for URLs throughout project\n- Additional commits viewable in [compare view](https://github.com/requests/requests/compare/v2.19.1...v2.20.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=requests&package-manager=pip&previous-version=2.19.1&new-version=2.20.0)](https://dependabot.com/compatibility-score.html?dependency-name=requests&package-manager=pip&previous-version=2.19.1&new-version=2.20.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/comments/434040494","html_url":"https://github.com/jamesoff/simplemonitor/pull/150#issuecomment-434040494","issue_url":"https://api.github.com/repos/jamesoff/simplemonitor/issues/150","id":434040494,"node_id":"MDEyOklzc3VlQ29tbWVudDQzNDA0MDQ5NA==","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2018-10-29T19:08:02Z","updated_at":"2018-10-29T19:08:02Z","author_association":"NONE","body":"We've just been alerted that this update fixes a security vulnerability:\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects requests**\n> The Requests package through 2.19.1 before 2018-09-14 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.\n> \n> Affected versions: [\"<= 2.19.1\"]\n\n"}}
{"actor":{"display_login":"dependabot"}}