{"action":"created","issue":{"url":"https://api.github.com/repos/libertempo/web/issues/740","repository_url":"https://api.github.com/repos/libertempo/web","labels_url":"https://api.github.com/repos/libertempo/web/issues/740/labels{/name}","comments_url":"https://api.github.com/repos/libertempo/web/issues/740/comments","events_url":"https://api.github.com/repos/libertempo/web/issues/740/events","html_url":"https://github.com/libertempo/web/pull/740","id":376258362,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI3NTE2NzQ3","number":740,"title":"Bump jasig/phpcas from 1.3.5 to 1.3.6","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":216500939,"node_id":"MDU6TGFiZWwyMTY1MDA5Mzk=","url":"https://api.github.com/repos/libertempo/web/labels/Help%20Wanted","name":"Help Wanted","color":"159818","default":false},{"id":1098486182,"node_id":"MDU6TGFiZWwxMDk4NDg2MTgy","url":"https://api.github.com/repos/libertempo/web/labels/dependencies","name":"dependencies","color":"0025ff","default":false},{"id":1098486490,"node_id":"MDU6TGFiZWwxMDk4NDg2NDkw","url":"https://api.github.com/repos/libertempo/web/labels/php","name":"php","color":"45229e","default":false},{"id":273133098,"node_id":"MDU6TGFiZWwyNzMxMzMwOTg=","url":"https://api.github.com/repos/libertempo/web/labels/%C3%80%20relire","name":"À relire","color":"0052cc","default":false},{"id":273133170,"node_id":"MDU6TGFiZWwyNzMxMzMxNzA=","url":"https://api.github.com/repos/libertempo/web/labels/%C3%80%20tester","name":"À tester","color":"d4c5f9","default":false}],"state":"open","locked":false,"assignee":{"login":"wouldsmina","id":12614881,"node_id":"MDQ6VXNlcjEyNjE0ODgx","avatar_url":"https://avatars2.githubusercontent.com/u/12614881?v=4","gravatar_id":"","url":"https://api.github.com/users/wouldsmina","html_url":"https://github.com/wouldsmina","followers_url":"https://api.github.com/users/wouldsmina/followers","following_url":"https://api.github.com/users/wouldsmina/following{/other_user}","gists_url":"https://api.github.com/users/wouldsmina/gists{/gist_id}","starred_url":"https://api.github.com/users/wouldsmina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wouldsmina/subscriptions","organizations_url":"https://api.github.com/users/wouldsmina/orgs","repos_url":"https://api.github.com/users/wouldsmina/repos","events_url":"https://api.github.com/users/wouldsmina/events{/privacy}","received_events_url":"https://api.github.com/users/wouldsmina/received_events","type":"User","site_admin":false},"assignees":[{"login":"wouldsmina","id":12614881,"node_id":"MDQ6VXNlcjEyNjE0ODgx","avatar_url":"https://avatars2.githubusercontent.com/u/12614881?v=4","gravatar_id":"","url":"https://api.github.com/users/wouldsmina","html_url":"https://github.com/wouldsmina","followers_url":"https://api.github.com/users/wouldsmina/followers","following_url":"https://api.github.com/users/wouldsmina/following{/other_user}","gists_url":"https://api.github.com/users/wouldsmina/gists{/gist_id}","starred_url":"https://api.github.com/users/wouldsmina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wouldsmina/subscriptions","organizations_url":"https://api.github.com/users/wouldsmina/orgs","repos_url":"https://api.github.com/users/wouldsmina/repos","events_url":"https://api.github.com/users/wouldsmina/events{/privacy}","received_events_url":"https://api.github.com/users/wouldsmina/received_events","type":"User","site_admin":false}],"milestone":null,"comments":4,"created_at":"2018-11-01T05:26:02Z","updated_at":"2018-12-08T11:16:43Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/libertempo/web/pulls/740","html_url":"https://github.com/libertempo/web/pull/740","diff_url":"https://github.com/libertempo/web/pull/740.diff","patch_url":"https://github.com/libertempo/web/pull/740.patch"},"body":"Bumps [jasig/phpcas](https://github.com/apereo/phpCAS) from 1.3.5 to 1.3.6.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [jasig/phpcas's changelog](https://github.com/apereo/phpCAS/blob/master/docs/ChangeLog).*\n\n> Changes in version 1.3.6\n> \n> Security Fixes:\n>    * Fix XSS in proxy mode [#271] (Joachim Fritschi)\n> \n> Bug Fixes:\n>    * Fix bad condition [#252] (Brice Vercoustre)\n>    * Hash ticket strings to generate valid-length session-ids [#224, [#244](https://github-redirect.dependabot.com/apereo/phpCAS/issues/244), #248] (Adam Franco)\n>    * Fix \"phpCAS\" class capitalization in code [#273, #277] (phy25)\n>    \n> Improvement:\n>    * Remove fallback for __autoload [#247] (marinaglancy)\n>    * More robust check for Windows OS in File.php [#275] (xamount)\n>    * Fix continue statement within switch/case for php 7.3 compatibility [#278] (stonk7)\n> \n> Changes in version 1.3.5\n> \n> Security Fixes:\n>    * Fix possible authentication bypass in validateCAS20 [#228] (Gregory Boddin)\n> \n> Bug Fixes:\n>    * Fix file permissions (non-executable) [#177] (Remi Collet)\n>    * Fixed translations Greek and Japanese [#192](ikari7789)\n>    * Fix errors under phpdbg [#204] (MasonM)\n>    * Fix logout replication error [#213] (Gregory Boddin)\n> \n> Improvement:\n>    * Add more debug info to logout code [#95] (Joachim Fritschi)\n>    * Allow longer ticket >32 chars for PGTStorage [#130] (Joachim Fritchi)\n>    * Improved verification of supplied CA arguments [#172] (Joachim Fritschi)\n>    * Change minimum supported php version to 5.4 in documentation (Joachim Fritschi)\n>    * Add message to CAS_Authentication_Exception [#197] (Baldinof)\n>    * Ingnore composer related files and directories [#201] (greg0ire)\n>    * Add setter for cas client [#206] (greg0ire)\n>    * Add callback for attribute parsing [#205] (Gregory Boddin)\n>    * Added setter for base url [#208] (LeopardDennis)\n>    * Fix documentation of code documentation [#216] (erozqba)\n>    * Improved https detection by HTTP_X_FORWARDED_Protocol [#220] (Gregory Boddin)\n>    * Add language support for simplified chinese [#227] (phy25)\n> \n> \n> Changes in version 1.3.4\n> Security Fixes:\n> \n> Bug Fixes:\n>    * Mark auth call completed for post-auth callback [#131] (Daniel Frett)\n>    * Remove typo CAS_TypeMismatchException [#133] (Gabrijel Gavranović)\n>    * Fix SERVER_ADMIN error for alternate Webservers [#103] (Joachim Fritschi)\n>    * Fix non-strict string comparision in _isHttps check [#139] (Brandon Peters)\n>    * Fix setNoCasServerValidation for cURL 7.10 [#122] (Joachim Fritschi)\n></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`7972833`](https://github.com/apereo/phpCAS/commit/7972833e84f6ee5fa41f1479eab5d855109627f5) Updated versions for the 1.3.6 release.\n- [`fec3a1c`](https://github.com/apereo/phpCAS/commit/fec3a1cd959e5389ee383dd79da5adfd0db9f0ff) Update changelog for release\n- [`b44dacd`](https://github.com/apereo/phpCAS/commit/b44dacd84055ed0aec8513ce09629d2b0959dff3) Fix [#271](https://github-redirect.dependabot.com/apereo/phpCAS/issues/271) XSS in proxy mode\n- [`6846e00`](https://github.com/apereo/phpCAS/commit/6846e000570bb4a82e72ea00ff1e5a2b0ac78c6f) Fix \"phpCAS\" class capitalization in code ([#273](https://github-redirect.dependabot.com/apereo/phpCAS/issues/273)) ([#277](https://github-redirect.dependabot.com/apereo/phpCAS/issues/277))\n- [`0729891`](https://github.com/apereo/phpCAS/commit/0729891ec695bfa0b0ccbd2e3771730591466231) Fix continue statement within switch/case keeping original behavior ([#278](https://github-redirect.dependabot.com/apereo/phpCAS/issues/278))\n- [`5ad9c1e`](https://github.com/apereo/phpCAS/commit/5ad9c1e8d7b84b943ba372c8b0b54a8f49537cc4) More robust check for Windows OS in File.php ([#275](https://github-redirect.dependabot.com/apereo/phpCAS/issues/275))\n- [`7a949de`](https://github.com/apereo/phpCAS/commit/7a949dee79aaadc16161d7d4863b5c0871546222) Merge pull request [#258](https://github-redirect.dependabot.com/apereo/phpCAS/issues/258) from apereo/hash_ticket_for_session_id_with_salt\n- [`96b7d6b`](https://github.com/apereo/phpCAS/commit/96b7d6b5fca7dd06134e27f500fca10a8f68d416) [#224](https://github-redirect.dependabot.com/apereo/phpCAS/issues/224): Add configurable session-id salt when hashing the ticket.\n- [`e4afa9d`](https://github.com/apereo/phpCAS/commit/e4afa9d206d103761fa63a2da92515f15a1f6d29) [#224](https://github-redirect.dependabot.com/apereo/phpCAS/issues/224), [#244](https://github-redirect.dependabot.com/apereo/phpCAS/issues/244), [#248](https://github-redirect.dependabot.com/apereo/phpCAS/issues/248): Hash ticket strings to generate valid-length session-ids.\n- [`62e5185`](https://github.com/apereo/phpCAS/commit/62e51852bd2b3eeed43163e62bc5bd81bdc9598c) Fix bad condition ([#252](https://github-redirect.dependabot.com/apereo/phpCAS/issues/252))\n- Additional commits viewable in [compare view](https://github.com/apereo/phpCAS/compare/1.3.5...1.3.6)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=jasig/phpcas&package-manager=composer&previous-version=1.3.5&new-version=1.3.6)](https://dependabot.com/compatibility-score.html?dependency-name=jasig/phpcas&package-manager=composer&previous-version=1.3.5&new-version=1.3.6)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/libertempo/web/issues/comments/445451619","html_url":"https://github.com/libertempo/web/pull/740#issuecomment-445451619","issue_url":"https://api.github.com/repos/libertempo/web/issues/740","id":445451619,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0NTQ1MTYxOQ==","user":{"login":"wouldsmina","id":12614881,"node_id":"MDQ6VXNlcjEyNjE0ODgx","avatar_url":"https://avatars2.githubusercontent.com/u/12614881?v=4","gravatar_id":"","url":"https://api.github.com/users/wouldsmina","html_url":"https://github.com/wouldsmina","followers_url":"https://api.github.com/users/wouldsmina/followers","following_url":"https://api.github.com/users/wouldsmina/following{/other_user}","gists_url":"https://api.github.com/users/wouldsmina/gists{/gist_id}","starred_url":"https://api.github.com/users/wouldsmina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wouldsmina/subscriptions","organizations_url":"https://api.github.com/users/wouldsmina/orgs","repos_url":"https://api.github.com/users/wouldsmina/repos","events_url":"https://api.github.com/users/wouldsmina/events{/privacy}","received_events_url":"https://api.github.com/users/wouldsmina/received_events","type":"User","site_admin":false},"created_at":"2018-12-08T11:16:43Z","updated_at":"2018-12-08T11:16:43Z","author_association":"MEMBER","body":"Oui, je vais en avoir besoin. "}}
{"actor":{"display_login":"wouldsmina"}}