{"action":"created","comment":{"url":"https://api.github.com/repos/beancount/fava/pulls/comments/241720024","pull_request_review_id":185063552,"id":241720024,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDI0MTcyMDAyNA==","diff_hunk":"@@ -1,13 +1,13 @@\n-FROM python:3.6.3-alpine\n+FROM python:3.6.7-alpine","path":"contrib/docker/Dockerfile","position":2,"original_position":2,"commit_id":"7bbad20ecca917c3d2e0adf2ba118a90caf57623","original_commit_id":"7bbad20ecca917c3d2e0adf2ba118a90caf57623","user":{"login":"yagebu","id":2482259,"node_id":"MDQ6VXNlcjI0ODIyNTk=","avatar_url":"https://avatars2.githubusercontent.com/u/2482259?v=4","gravatar_id":"","url":"https://api.github.com/users/yagebu","html_url":"https://github.com/yagebu","followers_url":"https://api.github.com/users/yagebu/followers","following_url":"https://api.github.com/users/yagebu/following{/other_user}","gists_url":"https://api.github.com/users/yagebu/gists{/gist_id}","starred_url":"https://api.github.com/users/yagebu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yagebu/subscriptions","organizations_url":"https://api.github.com/users/yagebu/orgs","repos_url":"https://api.github.com/users/yagebu/repos","events_url":"https://api.github.com/users/yagebu/events{/privacy}","received_events_url":"https://api.github.com/users/yagebu/received_events","type":"User","site_admin":false},"body":"Why not use a more up-to-date version? And why fix it in the first place (that will probably just lead to similar security problems in the future)?","created_at":"2018-12-14T11:09:54Z","updated_at":"2018-12-14T11:09:54Z","html_url":"https://github.com/beancount/fava/pull/849#discussion_r241720024","pull_request_url":"https://api.github.com/repos/beancount/fava/pulls/849","author_association":"COLLABORATOR","_links":{"self":{"href":"https://api.github.com/repos/beancount/fava/pulls/comments/241720024"},"html":{"href":"https://github.com/beancount/fava/pull/849#discussion_r241720024"},"pull_request":{"href":"https://api.github.com/repos/beancount/fava/pulls/849"}}},"pull_request":{"url":"https://api.github.com/repos/beancount/fava/pulls/849","id":238537224,"node_id":"MDExOlB1bGxSZXF1ZXN0MjM4NTM3MjI0","html_url":"https://github.com/beancount/fava/pull/849","diff_url":"https://github.com/beancount/fava/pull/849.diff","patch_url":"https://github.com/beancount/fava/pull/849.patch","issue_url":"https://api.github.com/repos/beancount/fava/issues/849","number":849,"state":"open","locked":false,"title":"Reduce docker image size and fix libpng CVEs","user":{"login":"adamgibbins","id":46830,"node_id":"MDQ6VXNlcjQ2ODMw","avatar_url":"https://avatars0.githubusercontent.com/u/46830?v=4","gravatar_id":"","url":"https://api.github.com/users/adamgibbins","html_url":"https://github.com/adamgibbins","followers_url":"https://api.github.com/users/adamgibbins/followers","following_url":"https://api.github.com/users/adamgibbins/following{/other_user}","gists_url":"https://api.github.com/users/adamgibbins/gists{/gist_id}","starred_url":"https://api.github.com/users/adamgibbins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adamgibbins/subscriptions","organizations_url":"https://api.github.com/users/adamgibbins/orgs","repos_url":"https://api.github.com/users/adamgibbins/repos","events_url":"https://api.github.com/users/adamgibbins/events{/privacy}","received_events_url":"https://api.github.com/users/adamgibbins/received_events","type":"User","site_admin":false},"body":"Upgrades python to pull in newer alpine which fixes a load of  libpng CVEs (https://snyk.io/vuln/SNYK-LINUX-LIBPNG-174098 and https://snyk.io/vuln/SNYK-LINUX-LIBPNG-174252).\r\n\r\nAdditionally removes apk cache to remove need to clean it up later and purges pyc files to reduce the size.","created_at":"2018-12-13T21:25:24Z","updated_at":"2018-12-14T11:09:54Z","closed_at":null,"merged_at":null,"merge_commit_sha":"d19799bf7362f94865933c79faa127ede30b7d44","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/beancount/fava/pulls/849/commits","review_comments_url":"https://api.github.com/repos/beancount/fava/pulls/849/comments","review_comment_url":"https://api.github.com/repos/beancount/fava/pulls/comments{/number}","comments_url":"https://api.github.com/repos/beancount/fava/issues/849/comments","statuses_url":"https://api.github.com/repos/beancount/fava/statuses/7bbad20ecca917c3d2e0adf2ba118a90caf57623","head":{"label":"adamgibbins:docker_fixes","ref":"docker_fixes","sha":"7bbad20ecca917c3d2e0adf2ba118a90caf57623","user":{"login":"adamgibbins","id":46830,"node_id":"MDQ6VXNlcjQ2ODMw","avatar_url":"https://avatars0.githubusercontent.com/u/46830?v=4","gravatar_id":"","url":"https://api.github.com/users/adamgibbins","html_url":"https://github.com/adamgibbins","followers_url":"https://api.github.com/users/adamgibbins/followers","following_url":"https://api.github.com/users/adamgibbins/following{/other_user}","gists_url":"https://api.github.com/users/adamgibbins/gists{/gist_id}","starred_url":"https://api.github.com/users/adamgibbins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adamgibbins/subscriptions","organizations_url":"https://api.github.com/users/adamgibbins/orgs","repos_url":"https://api.github.com/users/adamgibbins/repos","events_url":"https://api.github.com/users/adamgibbins/events{/privacy}","received_events_url":"https://api.github.com/users/adamgibbins/received_events","type":"User","site_admin":false},"repo":{"id":72390298,"node_id":"MDEwOlJlcG9zaXRvcnk3MjM5MDI5OA==","name":"fava","full_name":"adamgibbins/fava","private":false,"owner":{"login":"adamgibbins","id":46830,"node_id":"MDQ6VXNlcjQ2ODMw","avatar_url":"https://avatars0.githubusercontent.com/u/46830?v=4","gravatar_id":"","url":"https://api.github.com/users/adamgibbins","html_url":"https://github.com/adamgibbins","followers_url":"https://api.github.com/users/adamgibbins/followers","following_url":"https://api.github.com/users/adamgibbins/following{/other_user}","gists_url":"https://api.github.com/users/adamgibbins/gists{/gist_id}","starred_url":"https://api.github.com/users/adamgibbins/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/adamgibbins/subscriptions","organizations_url":"https://api.github.com/users/adamgibbins/orgs","repos_url":"https://api.github.com/users/adamgibbins/repos","events_url":"https://api.github.com/users/adamgibbins/events{/privacy}","received_events_url":"https://api.github.com/users/adamgibbins/received_events","type":"User","site_admin":false},"html_url":"https://github.com/adamgibbins/fava","description":"fava - Web interface for beancount","fork":true,"url":"https://api.github.com/repos/adamgibbins/fava","forks_url":"https://api.github.com/repos/adamgibbins/fava/forks","keys_url":"https://api.github.com/repos/adamgibbins/fava/keys{/key_id}","collaborators_url":"https://api.github.com/repos/adamgibbins/fava/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/adamgibbins/fava/teams","hooks_url":"https://api.github.com/repos/adamgibbins/fava/hooks","issue_events_url":"https://api.github.com/repos/adamgibbins/fava/issues/events{/number}","events_url":"https://api.github.com/repos/adamgibbins/fava/events","assignees_url":"https://api.github.com/repos/adamgibbins/fava/assignees{/user}","branches_url":"https://api.github.com/repos/adamgibbins/fava/branches{/branch}","tags_url":"https://api.github.com/repos/adamgibbins/fava/tags","blobs_url":"https://api.github.com/repos/adamgibbins/fava/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/adamgibbins/fava/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/adamgibbins/fava/git/refs{/sha}","trees_url":"https://api.github.com/repos/adamgibbins/fava/git/trees{/sha}","statuses_url":"https://api.github.com/repos/adamgibbins/fava/statuses/{sha}","languages_url":"https://api.github.com/repos/adamgibbins/fava/languages","stargazers_url":"https://api.github.com/repos/adamgibbins/fava/stargazers","contributors_url":"https://api.github.com/repos/adamgibbins/fava/contributors","subscribers_url":"https://api.github.com/repos/adamgibbins/fava/subscribers","subscription_url":"https://api.github.com/repos/adamgibbins/fava/subscription","commits_url":"https://api.github.com/repos/adamgibbins/fava/commits{/sha}","git_commits_url":"https://api.github.com/repos/adamgibbins/fava/git/commits{/sha}","comments_url":"https://api.github.com/repos/adamgibbins/fava/comments{/number}","issue_comment_url":"https://api.github.com/repos/adamgibbins/fava/issues/comments{/number}","contents_url":"https://api.github.com/repos/adamgibbins/fava/contents/{+path}","compare_url":"https://api.github.com/repos/adamgibbins/fava/compare/{base}...{head}","merges_url":"https://api.github.com/repos/adamgibbins/fava/merges","archive_url":"https://api.github.com/repos/adamgibbins/fava/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/adamgibbins/fava/downloads","issues_url":"https://api.github.com/repos/adamgibbins/fava/issues{/number}","pulls_url":"https://api.github.com/repos/adamgibbins/fava/pulls{/number}","milestones_url":"https://api.github.com/repos/adamgibbins/fava/milestones{/number}","notifications_url":"https://api.github.com/repos/adamgibbins/fava/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/adamgibbins/fava/labels{/name}","releases_url":"https://api.github.com/repos/adamgibbins/fava/releases{/id}","deployments_url":"https://api.github.com/repos/adamgibbins/fava/deployments","created_at":"2016-10-31T02:17:13Z","updated_at":"2018-11-27T21:56:52Z","pushed_at":"2018-12-13T21:23:38Z","git_url":"git://github.com/adamgibbins/fava.git","ssh_url":"git@github.com:adamgibbins/fava.git","clone_url":"https://github.com/adamgibbins/fava.git","svn_url":"https://github.com/adamgibbins/fava","homepage":"https://beancount.github.io/fava/","size":7897,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":false,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":0,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"beancount:master","ref":"master","sha":"310338d479fd18386e7bb7e6bae77c367907341b","user":{"login":"beancount","id":22910810,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIyOTEwODEw","avatar_url":"https://avatars1.githubusercontent.com/u/22910810?v=4","gravatar_id":"","url":"https://api.github.com/users/beancount","html_url":"https://github.com/beancount","followers_url":"https://api.github.com/users/beancount/followers","following_url":"https://api.github.com/users/beancount/following{/other_user}","gists_url":"https://api.github.com/users/beancount/gists{/gist_id}","starred_url":"https://api.github.com/users/beancount/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beancount/subscriptions","organizations_url":"https://api.github.com/users/beancount/orgs","repos_url":"https://api.github.com/users/beancount/repos","events_url":"https://api.github.com/users/beancount/events{/privacy}","received_events_url":"https://api.github.com/users/beancount/received_events","type":"Organization","site_admin":false},"repo":{"id":47411155,"node_id":"MDEwOlJlcG9zaXRvcnk0NzQxMTE1NQ==","name":"fava","full_name":"beancount/fava","private":false,"owner":{"login":"beancount","id":22910810,"node_id":"MDEyOk9yZ2FuaXphdGlvbjIyOTEwODEw","avatar_url":"https://avatars1.githubusercontent.com/u/22910810?v=4","gravatar_id":"","url":"https://api.github.com/users/beancount","html_url":"https://github.com/beancount","followers_url":"https://api.github.com/users/beancount/followers","following_url":"https://api.github.com/users/beancount/following{/other_user}","gists_url":"https://api.github.com/users/beancount/gists{/gist_id}","starred_url":"https://api.github.com/users/beancount/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/beancount/subscriptions","organizations_url":"https://api.github.com/users/beancount/orgs","repos_url":"https://api.github.com/users/beancount/repos","events_url":"https://api.github.com/users/beancount/events{/privacy}","received_events_url":"https://api.github.com/users/beancount/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/beancount/fava","description":"Fava - web interface for Beancount","fork":false,"url":"https://api.github.com/repos/beancount/fava","forks_url":"https://api.github.com/repos/beancount/fava/forks","keys_url":"https://api.github.com/repos/beancount/fava/keys{/key_id}","collaborators_url":"https://api.github.com/repos/beancount/fava/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/beancount/fava/teams","hooks_url":"https://api.github.com/repos/beancount/fava/hooks","issue_events_url":"https://api.github.com/repos/beancount/fava/issues/events{/number}","events_url":"https://api.github.com/repos/beancount/fava/events","assignees_url":"https://api.github.com/repos/beancount/fava/assignees{/user}","branches_url":"https://api.github.com/repos/beancount/fava/branches{/branch}","tags_url":"https://api.github.com/repos/beancount/fava/tags","blobs_url":"https://api.github.com/repos/beancount/fava/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/beancount/fava/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/beancount/fava/git/refs{/sha}","trees_url":"https://api.github.com/repos/beancount/fava/git/trees{/sha}","statuses_url":"https://api.github.com/repos/beancount/fava/statuses/{sha}","languages_url":"https://api.github.com/repos/beancount/fava/languages","stargazers_url":"https://api.github.com/repos/beancount/fava/stargazers","contributors_url":"https://api.github.com/repos/beancount/fava/contributors","subscribers_url":"https://api.github.com/repos/beancount/fava/subscribers","subscription_url":"https://api.github.com/repos/beancount/fava/subscription","commits_url":"https://api.github.com/repos/beancount/fava/commits{/sha}","git_commits_url":"https://api.github.com/repos/beancount/fava/git/commits{/sha}","comments_url":"https://api.github.com/repos/beancount/fava/comments{/number}","issue_comment_url":"https://api.github.com/repos/beancount/fava/issues/comments{/number}","contents_url":"https://api.github.com/repos/beancount/fava/contents/{+path}","compare_url":"https://api.github.com/repos/beancount/fava/compare/{base}...{head}","merges_url":"https://api.github.com/repos/beancount/fava/merges","archive_url":"https://api.github.com/repos/beancount/fava/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/beancount/fava/downloads","issues_url":"https://api.github.com/repos/beancount/fava/issues{/number}","pulls_url":"https://api.github.com/repos/beancount/fava/pulls{/number}","milestones_url":"https://api.github.com/repos/beancount/fava/milestones{/number}","notifications_url":"https://api.github.com/repos/beancount/fava/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/beancount/fava/labels{/name}","releases_url":"https://api.github.com/repos/beancount/fava/releases{/id}","deployments_url":"https://api.github.com/repos/beancount/fava/deployments","created_at":"2015-12-04T15:12:55Z","updated_at":"2018-12-13T09:28:02Z","pushed_at":"2018-12-13T21:25:24Z","git_url":"git://github.com/beancount/fava.git","ssh_url":"git@github.com:beancount/fava.git","clone_url":"https://github.com/beancount/fava.git","svn_url":"https://github.com/beancount/fava","homepage":"https://beancount.github.io/fava/","size":7968,"stargazers_count":320,"watchers_count":320,"language":"Python","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":true,"forks_count":65,"mirror_url":null,"archived":false,"open_issues_count":28,"license":{"key":"mit","name":"MIT License","spdx_id":"MIT","url":"https://api.github.com/licenses/mit","node_id":"MDc6TGljZW5zZTEz"},"forks":65,"open_issues":28,"watchers":320,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/beancount/fava/pulls/849"},"html":{"href":"https://github.com/beancount/fava/pull/849"},"issue":{"href":"https://api.github.com/repos/beancount/fava/issues/849"},"comments":{"href":"https://api.github.com/repos/beancount/fava/issues/849/comments"},"review_comments":{"href":"https://api.github.com/repos/beancount/fava/pulls/849/comments"},"review_comment":{"href":"https://api.github.com/repos/beancount/fava/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/beancount/fava/pulls/849/commits"},"statuses":{"href":"https://api.github.com/repos/beancount/fava/statuses/7bbad20ecca917c3d2e0adf2ba118a90caf57623"}},"author_association":"CONTRIBUTOR"}}
{"actor":{"display_login":"yagebu"}}