{"action":"opened","number":29,"pull_request":{"url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29","id":237715980,"node_id":"MDExOlB1bGxSZXF1ZXN0MjM3NzE1OTgw","html_url":"https://github.com/mozilla-services/conduit-testing/pull/29","diff_url":"https://github.com/mozilla-services/conduit-testing/pull/29.diff","patch_url":"https://github.com/mozilla-services/conduit-testing/pull/29.patch","issue_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/29","number":29,"state":"open","locked":false,"title":"[Security] Bump requests from 2.18.4 to 2.21.0","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [requests](https://github.com/requests/requests) from 2.18.4 to 2.21.0. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects requests**\n> The Requests package through 2.19.1 before 2018-09-14 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to discover credentials by sniffing the network.\n> \n> Affected versions: <= 2.19.1\n\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [requests's changelog](https://github.com/requests/requests/blob/master/HISTORY.md).*\n\n> 2.21.0 (2018-12-10)\n> -------------------\n> \n> **Dependencies**\n> \n> - Requests now supports idna v2.8.\n> \n> 2.20.1 (2018-11-08)\n> -------------------\n> \n> **Bugfixes**\n> \n> - Fixed bug with unintended Authorization header stripping for\n>   redirects using default ports (http/80, https/443).\n> \n> 2.20.0 (2018-10-18)\n> -------------------\n> \n> **Bugfixes**\n> \n> -   Content-Type header parsing is now case-insensitive (e.g.\n>     charset=utf8 v Charset=utf8).\n> -   Fixed exception leak where certain redirect urls would raise\n>     uncaught urllib3 exceptions.\n> -   Requests removes Authorization header from requests redirected\n>     from https to http on the same hostname. (CVE-2018-18074)\n> -   `should_bypass_proxies` now handles URIs without hostnames (e.g.\n>     files).\n> \n> **Dependencies**\n> \n> - Requests now supports urllib3 v1.24.\n> \n> **Deprecations**\n> \n> - Requests has officially stopped support for Python 2.6.\n> \n> 2.19.1 (2018-06-14)\n> -------------------\n> \n> **Bugfixes**\n> \n> -   Fixed issue where status\\_codes.py's `init` function failed trying\n>     to append to a `__doc__` value of `None`.\n> \n> 2.19.0 (2018-06-12)\n> -------------------\n> \n> **Improvements**\n> \n></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`5a1e738`](https://github.com/requests/requests/commit/5a1e738ea9c399c3f59977f2f98b083986d6037a) v2.21.0\n- [`8761e97`](https://github.com/requests/requests/commit/8761e9736f7d5508a5547cdf3adecbe0b7306278) Bumped maximum version of idna\n- [`abe950c`](https://github.com/requests/requests/commit/abe950cfd3ee437279ca23866da6571571b637a6) Revert \"Set up Azure Pipelines for Linux and Windows\"\n- [`c35f342`](https://github.com/requests/requests/commit/c35f34263ae9162b91b7a57ca64594e9a296b617) Merge pull request [#4898](https://github-redirect.dependabot.com/requests/requests/issues/4898) from requests/revert_azure\n- [`0dd4752`](https://github.com/requests/requests/commit/0dd4752598719c4466e46c58e9de862bdb925934) revert azure pipeline changes\n- [`57d7284`](https://github.com/requests/requests/commit/57d7284c1a245cf9fbcecb594f50471d86e879f7) Merge pull request [#4874](https://github-redirect.dependabot.com/requests/requests/issues/4874) from kaylangan/patch-1\n- [`fc9dfac`](https://github.com/requests/requests/commit/fc9dfac2b9d1861734fabd0eb2da7b9bd14fa736) Add build badge for Azure Pipelines\n- [`bc3eddc`](https://github.com/requests/requests/commit/bc3eddc6eda5ec1937a9103a475a73ed6557cb9b) Delete settings.json\n- [`d911f27`](https://github.com/requests/requests/commit/d911f278689bf10b7a74c5b1e8e4f2af103e87d7) Delete install.ps1\n- [`3da2f10`](https://github.com/requests/requests/commit/3da2f10290a0dc78e34031856438ef1fed4e7435) Delete .travis.yml\n- Additional commits viewable in [compare view](https://github.com/requests/requests/compare/v2.18.4...v2.21.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=requests&package-manager=pip&previous-version=2.18.4&new-version=2.21.0)](https://dependabot.com/compatibility-score.html?dependency-name=requests&package-manager=pip&previous-version=2.18.4&new-version=2.21.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\nDependabot will **not** automatically merge this PR because it includes a minor update to a production dependency.\n\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-12-11T15:14:01Z","updated_at":"2018-12-11T15:14:01Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29/commits","review_comments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29/comments","review_comment_url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/comments{/number}","comments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/29/comments","statuses_url":"https://api.github.com/repos/mozilla-services/conduit-testing/statuses/ff840fc09f5bcc592a0b55d413319844e41a4efd","head":{"label":"mozilla-services:dependabot/pip/requests-2.21.0","ref":"dependabot/pip/requests-2.21.0","sha":"ff840fc09f5bcc592a0b55d413319844e41a4efd","user":{"login":"mozilla-services","id":1066228,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwNjYyMjg=","avatar_url":"https://avatars1.githubusercontent.com/u/1066228?v=4","gravatar_id":"","url":"https://api.github.com/users/mozilla-services","html_url":"https://github.com/mozilla-services","followers_url":"https://api.github.com/users/mozilla-services/followers","following_url":"https://api.github.com/users/mozilla-services/following{/other_user}","gists_url":"https://api.github.com/users/mozilla-services/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla-services/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla-services/subscriptions","organizations_url":"https://api.github.com/users/mozilla-services/orgs","repos_url":"https://api.github.com/users/mozilla-services/repos","events_url":"https://api.github.com/users/mozilla-services/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla-services/received_events","type":"Organization","site_admin":false},"repo":{"id":127161988,"node_id":"MDEwOlJlcG9zaXRvcnkxMjcxNjE5ODg=","name":"conduit-testing","full_name":"mozilla-services/conduit-testing","private":false,"owner":{"login":"mozilla-services","id":1066228,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwNjYyMjg=","avatar_url":"https://avatars1.githubusercontent.com/u/1066228?v=4","gravatar_id":"","url":"https://api.github.com/users/mozilla-services","html_url":"https://github.com/mozilla-services","followers_url":"https://api.github.com/users/mozilla-services/followers","following_url":"https://api.github.com/users/mozilla-services/following{/other_user}","gists_url":"https://api.github.com/users/mozilla-services/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla-services/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla-services/subscriptions","organizations_url":"https://api.github.com/users/mozilla-services/orgs","repos_url":"https://api.github.com/users/mozilla-services/repos","events_url":"https://api.github.com/users/mozilla-services/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla-services/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/mozilla-services/conduit-testing","description":"Repo containing tests to be run when Conduit deployments are done","fork":false,"url":"https://api.github.com/repos/mozilla-services/conduit-testing","forks_url":"https://api.github.com/repos/mozilla-services/conduit-testing/forks","keys_url":"https://api.github.com/repos/mozilla-services/conduit-testing/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mozilla-services/conduit-testing/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mozilla-services/conduit-testing/teams","hooks_url":"https://api.github.com/repos/mozilla-services/conduit-testing/hooks","issue_events_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/events{/number}","events_url":"https://api.github.com/repos/mozilla-services/conduit-testing/events","assignees_url":"https://api.github.com/repos/mozilla-services/conduit-testing/assignees{/user}","branches_url":"https://api.github.com/repos/mozilla-services/conduit-testing/branches{/branch}","tags_url":"https://api.github.com/repos/mozilla-services/conduit-testing/tags","blobs_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/refs{/sha}","trees_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mozilla-services/conduit-testing/statuses/{sha}","languages_url":"https://api.github.com/repos/mozilla-services/conduit-testing/languages","stargazers_url":"https://api.github.com/repos/mozilla-services/conduit-testing/stargazers","contributors_url":"https://api.github.com/repos/mozilla-services/conduit-testing/contributors","subscribers_url":"https://api.github.com/repos/mozilla-services/conduit-testing/subscribers","subscription_url":"https://api.github.com/repos/mozilla-services/conduit-testing/subscription","commits_url":"https://api.github.com/repos/mozilla-services/conduit-testing/commits{/sha}","git_commits_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/commits{/sha}","comments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/comments{/number}","issue_comment_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/comments{/number}","contents_url":"https://api.github.com/repos/mozilla-services/conduit-testing/contents/{+path}","compare_url":"https://api.github.com/repos/mozilla-services/conduit-testing/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mozilla-services/conduit-testing/merges","archive_url":"https://api.github.com/repos/mozilla-services/conduit-testing/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mozilla-services/conduit-testing/downloads","issues_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues{/number}","pulls_url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls{/number}","milestones_url":"https://api.github.com/repos/mozilla-services/conduit-testing/milestones{/number}","notifications_url":"https://api.github.com/repos/mozilla-services/conduit-testing/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mozilla-services/conduit-testing/labels{/name}","releases_url":"https://api.github.com/repos/mozilla-services/conduit-testing/releases{/id}","deployments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/deployments","created_at":"2018-03-28T15:35:50Z","updated_at":"2018-04-30T18:21:08Z","pushed_at":"2018-12-11T15:14:00Z","git_url":"git://github.com/mozilla-services/conduit-testing.git","ssh_url":"git@github.com:mozilla-services/conduit-testing.git","clone_url":"https://github.com/mozilla-services/conduit-testing.git","svn_url":"https://github.com/mozilla-services/conduit-testing","homepage":null,"size":23,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":5,"license":{"key":"mpl-2.0","name":"Mozilla Public License 2.0","spdx_id":"MPL-2.0","url":"https://api.github.com/licenses/mpl-2.0","node_id":"MDc6TGljZW5zZTE0"},"forks":1,"open_issues":5,"watchers":0,"default_branch":"master"}},"base":{"label":"mozilla-services:master","ref":"master","sha":"676aa27b1d8a63c84a1600d57d7469aa41ccc90b","user":{"login":"mozilla-services","id":1066228,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwNjYyMjg=","avatar_url":"https://avatars1.githubusercontent.com/u/1066228?v=4","gravatar_id":"","url":"https://api.github.com/users/mozilla-services","html_url":"https://github.com/mozilla-services","followers_url":"https://api.github.com/users/mozilla-services/followers","following_url":"https://api.github.com/users/mozilla-services/following{/other_user}","gists_url":"https://api.github.com/users/mozilla-services/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla-services/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla-services/subscriptions","organizations_url":"https://api.github.com/users/mozilla-services/orgs","repos_url":"https://api.github.com/users/mozilla-services/repos","events_url":"https://api.github.com/users/mozilla-services/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla-services/received_events","type":"Organization","site_admin":false},"repo":{"id":127161988,"node_id":"MDEwOlJlcG9zaXRvcnkxMjcxNjE5ODg=","name":"conduit-testing","full_name":"mozilla-services/conduit-testing","private":false,"owner":{"login":"mozilla-services","id":1066228,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwNjYyMjg=","avatar_url":"https://avatars1.githubusercontent.com/u/1066228?v=4","gravatar_id":"","url":"https://api.github.com/users/mozilla-services","html_url":"https://github.com/mozilla-services","followers_url":"https://api.github.com/users/mozilla-services/followers","following_url":"https://api.github.com/users/mozilla-services/following{/other_user}","gists_url":"https://api.github.com/users/mozilla-services/gists{/gist_id}","starred_url":"https://api.github.com/users/mozilla-services/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mozilla-services/subscriptions","organizations_url":"https://api.github.com/users/mozilla-services/orgs","repos_url":"https://api.github.com/users/mozilla-services/repos","events_url":"https://api.github.com/users/mozilla-services/events{/privacy}","received_events_url":"https://api.github.com/users/mozilla-services/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/mozilla-services/conduit-testing","description":"Repo containing tests to be run when Conduit deployments are done","fork":false,"url":"https://api.github.com/repos/mozilla-services/conduit-testing","forks_url":"https://api.github.com/repos/mozilla-services/conduit-testing/forks","keys_url":"https://api.github.com/repos/mozilla-services/conduit-testing/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mozilla-services/conduit-testing/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mozilla-services/conduit-testing/teams","hooks_url":"https://api.github.com/repos/mozilla-services/conduit-testing/hooks","issue_events_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/events{/number}","events_url":"https://api.github.com/repos/mozilla-services/conduit-testing/events","assignees_url":"https://api.github.com/repos/mozilla-services/conduit-testing/assignees{/user}","branches_url":"https://api.github.com/repos/mozilla-services/conduit-testing/branches{/branch}","tags_url":"https://api.github.com/repos/mozilla-services/conduit-testing/tags","blobs_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/refs{/sha}","trees_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mozilla-services/conduit-testing/statuses/{sha}","languages_url":"https://api.github.com/repos/mozilla-services/conduit-testing/languages","stargazers_url":"https://api.github.com/repos/mozilla-services/conduit-testing/stargazers","contributors_url":"https://api.github.com/repos/mozilla-services/conduit-testing/contributors","subscribers_url":"https://api.github.com/repos/mozilla-services/conduit-testing/subscribers","subscription_url":"https://api.github.com/repos/mozilla-services/conduit-testing/subscription","commits_url":"https://api.github.com/repos/mozilla-services/conduit-testing/commits{/sha}","git_commits_url":"https://api.github.com/repos/mozilla-services/conduit-testing/git/commits{/sha}","comments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/comments{/number}","issue_comment_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/comments{/number}","contents_url":"https://api.github.com/repos/mozilla-services/conduit-testing/contents/{+path}","compare_url":"https://api.github.com/repos/mozilla-services/conduit-testing/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mozilla-services/conduit-testing/merges","archive_url":"https://api.github.com/repos/mozilla-services/conduit-testing/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mozilla-services/conduit-testing/downloads","issues_url":"https://api.github.com/repos/mozilla-services/conduit-testing/issues{/number}","pulls_url":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls{/number}","milestones_url":"https://api.github.com/repos/mozilla-services/conduit-testing/milestones{/number}","notifications_url":"https://api.github.com/repos/mozilla-services/conduit-testing/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mozilla-services/conduit-testing/labels{/name}","releases_url":"https://api.github.com/repos/mozilla-services/conduit-testing/releases{/id}","deployments_url":"https://api.github.com/repos/mozilla-services/conduit-testing/deployments","created_at":"2018-03-28T15:35:50Z","updated_at":"2018-04-30T18:21:08Z","pushed_at":"2018-12-11T15:14:00Z","git_url":"git://github.com/mozilla-services/conduit-testing.git","ssh_url":"git@github.com:mozilla-services/conduit-testing.git","clone_url":"https://github.com/mozilla-services/conduit-testing.git","svn_url":"https://github.com/mozilla-services/conduit-testing","homepage":null,"size":23,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":5,"license":{"key":"mpl-2.0","name":"Mozilla Public License 2.0","spdx_id":"MPL-2.0","url":"https://api.github.com/licenses/mpl-2.0","node_id":"MDc6TGljZW5zZTE0"},"forks":1,"open_issues":5,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29"},"html":{"href":"https://github.com/mozilla-services/conduit-testing/pull/29"},"issue":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/29"},"comments":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/issues/29/comments"},"review_comments":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29/comments"},"review_comment":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/pulls/29/commits"},"statuses":{"href":"https://api.github.com/repos/mozilla-services/conduit-testing/statuses/ff840fc09f5bcc592a0b55d413319844e41a4efd"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":30,"deletions":41,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}