{"action":"opened","number":5,"pull_request":{"url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5","id":236192028,"node_id":"MDExOlB1bGxSZXF1ZXN0MjM2MTkyMDI4","html_url":"https://github.com/sambeevors/front-end-boilerplate/pull/5","diff_url":"https://github.com/sambeevors/front-end-boilerplate/pull/5.diff","patch_url":"https://github.com/sambeevors/front-end-boilerplate/pull/5.patch","issue_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/5","number":5,"state":"open","locked":false,"title":"[Security] Bump brace-expansion from 1.1.6 to 1.1.11","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.6 to 1.1.11. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/0668a05b-b514-4298-88e6-526f0f437405).*\n\n> **CWE-400: Uncontrolled Resource Consumption ('Resource Exhaustion')**\n> The software does not properly restrict the size or amount of resources that are requested or influenced by an actor, which can be used to consume more resources than intended.\n> \n> Affected versions: <=1.1.6\n\n*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/4a06954e-022f-4736-abc7-6bad5be193f4).*\n\n> **CWE-185: Incorrect Regular Expression**\n> The software specifies a regular expression in a way that causes data to be improperly matched or compared.\n> \n> Affected versions: >=1.0.0 <1.1.7\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects brace-expansion**\n> index.js in brace-expansion before 1.1.7 is vulnerable to Regular Expression Denial of Service (ReDoS) attacks, as demonstrated by an expand argument containing many comma characters.\n> \n> Affected versions: < 1.1.7\n\n*Sourced from [The Node Security Working Group](https://github.com/nodejs/security-wg/blob/master/vuln/npm/338.json).*\n\n> **ReDoS**\n> brace-expansion is a module to support bash-like brace expansion in JavaScript.  For example,`{1,2,3,4}` would expand to `1 2 3 4`.\n> brace expansion versions before 1.1.7 are vulnerable to Regular Expression Denial of Service attacks.  A proof of concept is provided below:\n> \n> ```\n> var expand = require('brace-expansion');\n> expand('{,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,\\n}');\n> ```\n> \n> Affected versions: <=1.1.6\n\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`01a21de`](https://github.com/juliangruber/brace-expansion/commit/01a21de7441549d26ac0c0a9ff91385d16e5c21c) 1.1.11\n- [`d7c93ee`](https://github.com/juliangruber/brace-expansion/commit/d7c93eebd9d99f4aace9dc829acab4caa13f5125) sponsors\n- [`54a6176`](https://github.com/juliangruber/brace-expansion/commit/54a6176731eb223cd3dede1473190d885d6b3648) 1.1.10\n- [`327c729`](https://github.com/juliangruber/brace-expansion/commit/327c729fa7e12a92237c26e8900c72165ebbd952) Merge pull request [#40](https://github-redirect.dependabot.com/juliangruber/brace-expansion/issues/40) from Parcley/add-license-1\n- [`b6ba2e0`](https://github.com/juliangruber/brace-expansion/commit/b6ba2e02407ff1edcf4a99f0bcc58468084d308f) create LICENSE file\n- [`0f82dab`](https://github.com/juliangruber/brace-expansion/commit/0f82dab6708f7c451e4a865b817057bc5a6b3c8e) 1.1.9\n- [`acd1754`](https://github.com/juliangruber/brace-expansion/commit/acd17547daab3615bd99a477746c8656224c0bc8) support\n- [`40ff02d`](https://github.com/juliangruber/brace-expansion/commit/40ff02d2f89d22ff0d76eafe3ecf5d762839a2b4) Merge pull request [#39](https://github-redirect.dependabot.com/juliangruber/brace-expansion/issues/39) from EdwardBetts/spelling\n- [`c295b60`](https://github.com/juliangruber/brace-expansion/commit/c295b6076fcdfe21ca402482b987ea7754d1f3d2) correct spelling mistake\n- [`8f59e68`](https://github.com/juliangruber/brace-expansion/commit/8f59e68bd5c915a0d624e8e39354e1ccf672edf6) 1.1.8\n- Additional commits viewable in [compare view](https://github.com/juliangruber/brace-expansion/compare/v1.1.6...v1.1.11)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=brace-expansion&package-manager=npm_and_yarn&previous-version=1.1.6&new-version=1.1.11)](https://dependabot.com/compatibility-score.html?dependency-name=brace-expansion&package-manager=npm_and_yarn&previous-version=1.1.6&new-version=1.1.11)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-12-05T14:23:11Z","updated_at":"2018-12-05T14:23:11Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5/commits","review_comments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5/comments","review_comment_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/comments{/number}","comments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/5/comments","statuses_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/statuses/289832755010f05b68c2b7af46fe0dce9d822c17","head":{"label":"sambeevors:dependabot/npm_and_yarn/brace-expansion-1.1.11","ref":"dependabot/npm_and_yarn/brace-expansion-1.1.11","sha":"289832755010f05b68c2b7af46fe0dce9d822c17","user":{"login":"sambeevors","id":13867100,"node_id":"MDQ6VXNlcjEzODY3MTAw","avatar_url":"https://avatars1.githubusercontent.com/u/13867100?v=4","gravatar_id":"","url":"https://api.github.com/users/sambeevors","html_url":"https://github.com/sambeevors","followers_url":"https://api.github.com/users/sambeevors/followers","following_url":"https://api.github.com/users/sambeevors/following{/other_user}","gists_url":"https://api.github.com/users/sambeevors/gists{/gist_id}","starred_url":"https://api.github.com/users/sambeevors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sambeevors/subscriptions","organizations_url":"https://api.github.com/users/sambeevors/orgs","repos_url":"https://api.github.com/users/sambeevors/repos","events_url":"https://api.github.com/users/sambeevors/events{/privacy}","received_events_url":"https://api.github.com/users/sambeevors/received_events","type":"User","site_admin":false},"repo":{"id":125671155,"node_id":"MDEwOlJlcG9zaXRvcnkxMjU2NzExNTU=","name":"front-end-boilerplate","full_name":"sambeevors/front-end-boilerplate","private":false,"owner":{"login":"sambeevors","id":13867100,"node_id":"MDQ6VXNlcjEzODY3MTAw","avatar_url":"https://avatars1.githubusercontent.com/u/13867100?v=4","gravatar_id":"","url":"https://api.github.com/users/sambeevors","html_url":"https://github.com/sambeevors","followers_url":"https://api.github.com/users/sambeevors/followers","following_url":"https://api.github.com/users/sambeevors/following{/other_user}","gists_url":"https://api.github.com/users/sambeevors/gists{/gist_id}","starred_url":"https://api.github.com/users/sambeevors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sambeevors/subscriptions","organizations_url":"https://api.github.com/users/sambeevors/orgs","repos_url":"https://api.github.com/users/sambeevors/repos","events_url":"https://api.github.com/users/sambeevors/events{/privacy}","received_events_url":"https://api.github.com/users/sambeevors/received_events","type":"User","site_admin":false},"html_url":"https://github.com/sambeevors/front-end-boilerplate","description":"Front end boilerplate with PostCSS, Tailwind, Jigsaw and Babel","fork":false,"url":"https://api.github.com/repos/sambeevors/front-end-boilerplate","forks_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/forks","keys_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/keys{/key_id}","collaborators_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/teams","hooks_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/hooks","issue_events_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/events{/number}","events_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/events","assignees_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/assignees{/user}","branches_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/branches{/branch}","tags_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/tags","blobs_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/refs{/sha}","trees_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/trees{/sha}","statuses_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/statuses/{sha}","languages_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/languages","stargazers_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/stargazers","contributors_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/contributors","subscribers_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/subscribers","subscription_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/subscription","commits_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/commits{/sha}","git_commits_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/commits{/sha}","comments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/comments{/number}","issue_comment_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/comments{/number}","contents_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/contents/{+path}","compare_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/compare/{base}...{head}","merges_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/merges","archive_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/downloads","issues_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues{/number}","pulls_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls{/number}","milestones_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/milestones{/number}","notifications_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/labels{/name}","releases_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/releases{/id}","deployments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/deployments","created_at":"2018-03-17T21:40:29Z","updated_at":"2018-11-28T15:07:46Z","pushed_at":"2018-12-05T14:23:10Z","git_url":"git://github.com/sambeevors/front-end-boilerplate.git","ssh_url":"git@github.com:sambeevors/front-end-boilerplate.git","clone_url":"https://github.com/sambeevors/front-end-boilerplate.git","svn_url":"https://github.com/sambeevors/front-end-boilerplate","homepage":null,"size":3612,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":5,"license":null,"forks":0,"open_issues":5,"watchers":0,"default_branch":"master"}},"base":{"label":"sambeevors:master","ref":"master","sha":"d3a66523a69e707e245735f0cc804d35b243e7e4","user":{"login":"sambeevors","id":13867100,"node_id":"MDQ6VXNlcjEzODY3MTAw","avatar_url":"https://avatars1.githubusercontent.com/u/13867100?v=4","gravatar_id":"","url":"https://api.github.com/users/sambeevors","html_url":"https://github.com/sambeevors","followers_url":"https://api.github.com/users/sambeevors/followers","following_url":"https://api.github.com/users/sambeevors/following{/other_user}","gists_url":"https://api.github.com/users/sambeevors/gists{/gist_id}","starred_url":"https://api.github.com/users/sambeevors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sambeevors/subscriptions","organizations_url":"https://api.github.com/users/sambeevors/orgs","repos_url":"https://api.github.com/users/sambeevors/repos","events_url":"https://api.github.com/users/sambeevors/events{/privacy}","received_events_url":"https://api.github.com/users/sambeevors/received_events","type":"User","site_admin":false},"repo":{"id":125671155,"node_id":"MDEwOlJlcG9zaXRvcnkxMjU2NzExNTU=","name":"front-end-boilerplate","full_name":"sambeevors/front-end-boilerplate","private":false,"owner":{"login":"sambeevors","id":13867100,"node_id":"MDQ6VXNlcjEzODY3MTAw","avatar_url":"https://avatars1.githubusercontent.com/u/13867100?v=4","gravatar_id":"","url":"https://api.github.com/users/sambeevors","html_url":"https://github.com/sambeevors","followers_url":"https://api.github.com/users/sambeevors/followers","following_url":"https://api.github.com/users/sambeevors/following{/other_user}","gists_url":"https://api.github.com/users/sambeevors/gists{/gist_id}","starred_url":"https://api.github.com/users/sambeevors/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sambeevors/subscriptions","organizations_url":"https://api.github.com/users/sambeevors/orgs","repos_url":"https://api.github.com/users/sambeevors/repos","events_url":"https://api.github.com/users/sambeevors/events{/privacy}","received_events_url":"https://api.github.com/users/sambeevors/received_events","type":"User","site_admin":false},"html_url":"https://github.com/sambeevors/front-end-boilerplate","description":"Front end boilerplate with PostCSS, Tailwind, Jigsaw and Babel","fork":false,"url":"https://api.github.com/repos/sambeevors/front-end-boilerplate","forks_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/forks","keys_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/keys{/key_id}","collaborators_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/teams","hooks_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/hooks","issue_events_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/events{/number}","events_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/events","assignees_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/assignees{/user}","branches_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/branches{/branch}","tags_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/tags","blobs_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/refs{/sha}","trees_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/trees{/sha}","statuses_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/statuses/{sha}","languages_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/languages","stargazers_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/stargazers","contributors_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/contributors","subscribers_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/subscribers","subscription_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/subscription","commits_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/commits{/sha}","git_commits_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/git/commits{/sha}","comments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/comments{/number}","issue_comment_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/comments{/number}","contents_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/contents/{+path}","compare_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/compare/{base}...{head}","merges_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/merges","archive_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/downloads","issues_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues{/number}","pulls_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls{/number}","milestones_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/milestones{/number}","notifications_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/labels{/name}","releases_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/releases{/id}","deployments_url":"https://api.github.com/repos/sambeevors/front-end-boilerplate/deployments","created_at":"2018-03-17T21:40:29Z","updated_at":"2018-11-28T15:07:46Z","pushed_at":"2018-12-05T14:23:10Z","git_url":"git://github.com/sambeevors/front-end-boilerplate.git","ssh_url":"git@github.com:sambeevors/front-end-boilerplate.git","clone_url":"https://github.com/sambeevors/front-end-boilerplate.git","svn_url":"https://github.com/sambeevors/front-end-boilerplate","homepage":null,"size":3612,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":5,"license":null,"forks":0,"open_issues":5,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5"},"html":{"href":"https://github.com/sambeevors/front-end-boilerplate/pull/5"},"issue":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/5"},"comments":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/issues/5/comments"},"review_comments":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5/comments"},"review_comment":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/pulls/5/commits"},"statuses":{"href":"https://api.github.com/repos/sambeevors/front-end-boilerplate/statuses/289832755010f05b68c2b7af46fe0dce9d822c17"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":4705,"deletions":537,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}