{"action":"created","issue":{"url":"https://api.github.com/repos/innovate-technologies/control/issues/116","repository_url":"https://api.github.com/repos/innovate-technologies/control","labels_url":"https://api.github.com/repos/innovate-technologies/control/issues/116/labels{/name}","comments_url":"https://api.github.com/repos/innovate-technologies/control/issues/116/comments","events_url":"https://api.github.com/repos/innovate-technologies/control/issues/116/events","html_url":"https://github.com/innovate-technologies/control/pull/116","id":355457357,"node_id":"MDExOlB1bGxSZXF1ZXN0MjExOTgwMjUz","number":116,"title":"[Security] Bump bootstrap from 3.3.7 to 4.1.3","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1039892334,"node_id":"MDU6TGFiZWwxMDM5ODkyMzM0","url":"https://api.github.com/repos/innovate-technologies/control/labels/dependencies","name":"dependencies","color":"0025ff","default":false},{"id":1039892339,"node_id":"MDU6TGFiZWwxMDM5ODkyMzM5","url":"https://api.github.com/repos/innovate-technologies/control/labels/security","name":"security","color":"ee0701","default":false}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-08-30T07:25:21Z","updated_at":"2018-09-02T09:51:19Z","closed_at":"2018-09-02T09:51:18Z","author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/innovate-technologies/control/pulls/116","html_url":"https://github.com/innovate-technologies/control/pull/116","diff_url":"https://github.com/innovate-technologies/control/pull/116.diff","patch_url":"https://github.com/innovate-technologies/control/pull/116.patch"},"body":"Bumps [bootstrap](https://github.com/twbs/bootstrap) from 3.3.7 to 4.1.3. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Sonatype OSS Index](https://ossindex.sonatype.org/vuln/6dd9e321-93cd-4d79-b33a-ff7e01b15ad9).*\n\n> **CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')**\n> The software does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.\n> \n> Affected versions: <= 3.3.7\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [bootstrap's releases](https://github.com/twbs/bootstrap/releases).*\n\n> ## v4.1.3\n> - **Fixed:** Removed the `:not(:root)` selector from our `svg` Reboot styles, resolving an issue that caused all inline SVGs ignore `vertical-align` styles via single class due to higher specificity.\r\n> - **Fixed:** Moved the browserslist config from our `package.json` to a separate file to avoid unintended inherited browser settings across npm projects.\r\n> - **Fixed:** Buttons in custom file inputs are once again clickable when focused.\r\n> - **Improved:** Bootstrap's plugins can now be imported separately in any contexts because they are now UMD ready.\r\n> - **Improved:** `.form-control`s now have a fixed `height` to compensate for differences in computed height across different `type`s. This also fixes some IE alignment issues.\r\n> - **Improved:** Added `Noto Color Emoji` to our system font stack for better rendering in Linux OSes.\r\n> \n> ## v4.1.2\n> - Fixed an XSS vulnerability in tooltip, collapse, and scrollspy plugins\r\n> - Improved how we query elements in our JavaScript plugins\r\n> - Inline SVGs now have the same vertical alignment as images\r\n> - Fixed issues with double transitions on carousels\r\n> - Added Edge and IE10-11 fallbacks to our floating labels example\r\n> - Various improvements to form controls, including disabled states on file inputs and unified focus styles for selects\r\n> \r\n> Checkout the [v4.1.2 ship list](https://github-redirect.dependabot.com/twbs/bootstrap/issues/26423) and [GitHub project](https://github.com/twbs/bootstrap/projects/14) for the full details.\n> \n> ## v4.1.1\n> **Our first patch release for Bootstrap 4!** Here's a quick rundown of some of the changes:\r\n> \r\n> - Added validation styles for file inputs\r\n> - Improved printing of dark tables\r\n> - Suppressed that `text-hide` deprecation notice by default\r\n> - Cleaned up some JS globals and improve coverage\r\n> - Bumped dependencies, namely Jekyll\r\n> - Fixed docs issue with incorrect name for our monospace font utility\r\n> \r\n> Checkout the [v4.1.1 ship list](https://github-redirect.dependabot.com/twbs/bootstrap/issues/25971) and [GitHub project](https://github.com/twbs/bootstrap/projects/13) for the full details.\n> \n> ## v4.1.0\n> - Added new custom range form control.\r\n> - Added new `.carousel-fade` modifier to switch carousel from horizontal sliding to crossfade.\r\n> - Added new `.dropdown-item-text` for plaintext dropdown items.\r\n> - Added new `.flex-fill`, `.flex-grow-*`, and `.flex-shrink-*` utilities.\r\n> - Added new `.table-borderless` variant for tables.\r\n> - Added new `.text-monospace` utility.\r\n> - Added new `.text-body` (default body color), `.text-black-50` (50% opacity black), and `.text-white-50` (50% opacity white) utilities.\r\n> - Added new `.shadow-*` utilities for quickly adding `box-shadow`s.\r\n> - Added ability to disable Popper's positioning in dropdowns.\r\n> - Fixed longstanding issue with Chrome incorrectly rendering cards across CSS columns.\r\n> - Deprecated `.text-hide`—you'll see a warning during compilation—as it's a dated and undocumented feature.\r\n> - Fixed up Dashboard and Offcanvas examples across Firefox and IE.\r\n> - Breadcrumbs can now use non-string values as dividers.\r\n> - Updated our Theming docs to confirm you _cannot_ use CSS variables in media queries (sorry folks!).\r\n> \r\n> Be sure to look at the [ship list](https://github-redirect.dependabot.com/twbs/bootstrap/issues/25375) and [project board](https://github.com/twbs/bootstrap/projects/5) for more details on all our fixes.\r\n> \n> ## v4.0.0\n> Our first stable v4 release! 🎉 \r\n></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`3b55873`](https://github.com/twbs/bootstrap/commit/3b558734382ce58b51e5fc676453bfd53bba9201) Ship v4.1.3\n- [`72447ad`](https://github.com/twbs/bootstrap/commit/72447ad4972105e920f1767f369b98a76dcfa107) dist\n- [`d180452`](https://github.com/twbs/bootstrap/commit/d18045210cdd09271ac033992341d4460d6bafac) fix(tests): visual plugins tests\n- [`c74a327`](https://github.com/twbs/bootstrap/commit/c74a32703a441c7efa5ccea5d0b24391a3de4788) Allow background images for active buttons\n- [`f87d5ea`](https://github.com/twbs/bootstrap/commit/f87d5eab693434199c618766632ce10134ae2a7b) Clarify to close [#26329](https://github-redirect.dependabot.com/twbs/bootstrap/issues/26329)\n- [`6cca02f`](https://github.com/twbs/bootstrap/commit/6cca02f163502a2a986713056b84a60e0bdf8397) fix `.modal-dialog-centered` on IE10/11\n- [`c04d60b`](https://github.com/twbs/bootstrap/commit/c04d60b88f7d8dd3700df60cd4517459b6bc82f3) Fix modal overflow style nesting ([#26742](https://github-redirect.dependabot.com/twbs/bootstrap/issues/26742))\n- [`23e4d48`](https://github.com/twbs/bootstrap/commit/23e4d48e658c60db7a2fa7f69e338e0a586c90fa) Merge branch 'document-tooltip-flickering' of https://github.com/simPod/boots...\n- [`6f52b2e`](https://github.com/twbs/bootstrap/commit/6f52b2eafa82850faca784f925eeddacf5303d03) [#26912](https://github-redirect.dependabot.com/twbs/bootstrap/issues/26912): fix custom file input z-index\n- [`c45e559`](https://github.com/twbs/bootstrap/commit/c45e5594b77015f48b8c21823a44d6bb8139d40a) Fix property order\n- Additional commits viewable in [compare view](https://github.com/twbs/bootstrap/compare/v3.3.7...v4.1.3)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=bootstrap&package-manager=npm_and_yarn&previous-version=3.3.7&new-version=4.1.3)](https://dependabot.com/compatibility-score.html?dependency-name=bootstrap&package-manager=npm_and_yarn&previous-version=3.3.7&new-version=4.1.3)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/innovate-technologies/control/issues/comments/417917950","html_url":"https://github.com/innovate-technologies/control/pull/116#issuecomment-417917950","issue_url":"https://api.github.com/repos/innovate-technologies/control/issues/116","id":417917950,"node_id":"MDEyOklzc3VlQ29tbWVudDQxNzkxNzk1MA==","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2018-09-02T09:51:19Z","updated_at":"2018-09-02T09:51:19Z","author_association":"NONE","body":"OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`.\n\nIf you change your mind, just re-open this PR and I'll resolve any conflicts on it."}}
{"actor":{"display_login":"dependabot"}}