{"action":"opened","number":59,"pull_request":{"url":"https://api.github.com/repos/venetucci/giveback/pulls/59","id":193454589,"node_id":"MDExOlB1bGxSZXF1ZXN0MTkzNDU0NTg5","html_url":"https://github.com/venetucci/giveback/pull/59","diff_url":"https://github.com/venetucci/giveback/pull/59.diff","patch_url":"https://github.com/venetucci/giveback/pull/59.patch","issue_url":"https://api.github.com/repos/venetucci/giveback/issues/59","number":59,"state":"open","locked":false,"title":"[Security] Bump uglifier from 2.7.1 to 4.1.11","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [uglifier](https://github.com/lautis/uglifier) from 2.7.1 to 4.1.11. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/uglifier/OSVDB-126747.yml).*\n\n> **uglifier incorrectly handles non-boolean comparisons during minification**\n> The upstream library for the Ruby uglifier gem, UglifyJS, is\n> affected by a vulnerability that allows a specially crafted \n> Javascript file to have altered functionality after minification.\n> \n> This bug, found in UglifyJS versions 2.4.23 and earlier, was demonstrated\n> to allow potentially malicious code to be hidden within secure code, \n> and activated by the minification process.\n> \n> For more information, consult: https://zyan.scripts.mit.edu/blog/backdooring-js/\n> \n> Patched versions: >= 2.7.2\n> Unaffected versions: none\n\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [uglifier's changelog](https://github.com/lautis/uglifier/blob/master/CHANGELOG.md).*\n\n> ## 4.1.11 (02 June 2018)\n> \n> - update UglifyJS to [3.3.28](https://github.com/mishoo/UglifyJS2/compare/v3.3.22...v3.3.28)\n> \n> ## 4.1.10 (21 April 2018)\n> \n> - update UglifyJS to [3.3.22](https://github.com/mishoo/UglifyJS2/compare/v3.3.20...v3.3.22)\n> \n> ## 4.1.9 (11 April 2018)\n> \n> - update UglifyJS to [3.3.20](https://github.com/mishoo/UglifyJS2/compare/v3.3.16...v3.3.20)\n> \n> ## 4.1.8 (14 March 2018)\n> \n> - update UglifyJS to [3.3.15](https://github.com/mishoo/UglifyJS2/compare/v3.3.14...v3.3.15)\n> \n> ## 4.1.7 (11 March 2018)\n> \n> - update UglifyJS to [3.3.14](https://github.com/mishoo/UglifyJS2/compare/v3.3.10...v3.3.14)\n> \n> ## 4.1.6 (08 February 2018)\n> \n> - update UglifyJS to [3.3.10](https://github.com/mishoo/UglifyJS2/compare/v3.3.9...v3.3.10)\n> - update uglify-es to [3.3.10](https://github.com/mishoo/UglifyJS2/compare/harmony-v3.3.9...harmony-v3.3.10)\n> \n> ## 4.1.5 (28 January 2018)\n> \n> - update UglifyJS to [3.3.9](https://github.com/mishoo/UglifyJS2/compare/v3.3.8...v3.3.9)\n> - update uglify-es to [3.3.9](https://github.com/mishoo/UglifyJS2/compare/harmony-v3.3.8...harmony-v3.3.9)\n> \n> ## 4.1.4 (22 January 2018)\n> \n> - update UglifyJS to [3.3.8](https://github.com/mishoo/UglifyJS2/compare/v3.3.5...v3.3.8)\n> - update uglify-es to [3.3.8](https://github.com/mishoo/UglifyJS2/compare/harmony-v3.3.5...harmony-v3.3.8)\n> \n> ## 4.1.3 (7 January 2018)\n> \n> - update UglifyJS to 3.3.5\n> \n> ## 4.1.2 (30 December 2017)\n> \n> - update UglifyJS to 3.3.4\n> \n> ## 4.1.1 (29 December 2017)\n> \n> - update UglifyJS to 3.3.3\n> \n> ## 4.1.0 (28 December 2017)\n> \n> - update UglifyJS to 3.3.2\n></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`34f1be2`](https://github.com/lautis/uglifier/commit/34f1be2c25f309cacf86c23c57e2a0309cf75630) Bump version to 4.1.11\n- [`ab188f9`](https://github.com/lautis/uglifier/commit/ab188f9c60ec2952a1f442582b85ee3b47e44cdd) Update UglifyJS to 3.3.28\n- [`1accfa8`](https://github.com/lautis/uglifier/commit/1accfa887437da041a5dbd130aac8b4ae55ca23a) Update Rubocop to 0.56.0\n- [`2c4ccb0`](https://github.com/lautis/uglifier/commit/2c4ccb0e7a3e57cff7cb204634d4fc5b66c3ed91) Bump version to 4.1.10\n- [`83d11a6`](https://github.com/lautis/uglifier/commit/83d11a67ff8d36ad1dbafdfdd4c1ece1e21777bb) Update Travis ruby versions\n- [`bc1bdff`](https://github.com/lautis/uglifier/commit/bc1bdffb287c4386165dec0d0e2a494956453f92) Update UglifyJS to 3.3.22\n- [`ad7b703`](https://github.com/lautis/uglifier/commit/ad7b7035f6e6ac86961e20d171b153b08703b60e) Bump version to 4.1.9\n- [`5a92d5c`](https://github.com/lautis/uglifier/commit/5a92d5c236c2101bb554f4f012122c5ef8d5487d) Migrate braces to previous bracketize output option for consistency and backw...\n- [`3181dc6`](https://github.com/lautis/uglifier/commit/3181dc6bfd3c79a9a0a1e4e205195428024b3a8a) Update UglifyJS to 3.3.20\n- [`8072269`](https://github.com/lautis/uglifier/commit/8072269a2b437441ae0eaf08a7f70671b99ffc4a) Bump version to 4.1.8\n- Additional commits viewable in [compare view](https://github.com/lautis/uglifier/compare/v2.7.1...v4.1.11)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/ci_status?dependency-name=uglifier&package-manager=bundler&previous-version=2.7.1&new-version=4.1.11)](https://dependabot.com/compatibility-score.html?dependency-name=uglifier&package-manager=bundler&previous-version=2.7.1&new-version=4.1.11)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use (this|these) label[s]` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use (this|these) reviewer[s]` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use (this|these) assignee[s]` will set the current assignees as the default for future PRs for this repo and language\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-06-07T21:37:38Z","updated_at":"2018-06-07T21:37:38Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/venetucci/giveback/pulls/59/commits","review_comments_url":"https://api.github.com/repos/venetucci/giveback/pulls/59/comments","review_comment_url":"https://api.github.com/repos/venetucci/giveback/pulls/comments{/number}","comments_url":"https://api.github.com/repos/venetucci/giveback/issues/59/comments","statuses_url":"https://api.github.com/repos/venetucci/giveback/statuses/a9c668e07216b5241b2cf94c33a5c4c834f686a3","head":{"label":"venetucci:dependabot/bundler/uglifier-4.1.11","ref":"dependabot/bundler/uglifier-4.1.11","sha":"a9c668e07216b5241b2cf94c33a5c4c834f686a3","user":{"login":"venetucci","id":5547897,"node_id":"MDQ6VXNlcjU1NDc4OTc=","avatar_url":"https://avatars3.githubusercontent.com/u/5547897?v=4","gravatar_id":"","url":"https://api.github.com/users/venetucci","html_url":"https://github.com/venetucci","followers_url":"https://api.github.com/users/venetucci/followers","following_url":"https://api.github.com/users/venetucci/following{/other_user}","gists_url":"https://api.github.com/users/venetucci/gists{/gist_id}","starred_url":"https://api.github.com/users/venetucci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/venetucci/subscriptions","organizations_url":"https://api.github.com/users/venetucci/orgs","repos_url":"https://api.github.com/users/venetucci/repos","events_url":"https://api.github.com/users/venetucci/events{/privacy}","received_events_url":"https://api.github.com/users/venetucci/received_events","type":"User","site_admin":true},"repo":{"id":33056088,"node_id":"MDEwOlJlcG9zaXRvcnkzMzA1NjA4OA==","name":"giveback","full_name":"venetucci/giveback","owner":{"login":"venetucci","id":5547897,"node_id":"MDQ6VXNlcjU1NDc4OTc=","avatar_url":"https://avatars3.githubusercontent.com/u/5547897?v=4","gravatar_id":"","url":"https://api.github.com/users/venetucci","html_url":"https://github.com/venetucci","followers_url":"https://api.github.com/users/venetucci/followers","following_url":"https://api.github.com/users/venetucci/following{/other_user}","gists_url":"https://api.github.com/users/venetucci/gists{/gist_id}","starred_url":"https://api.github.com/users/venetucci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/venetucci/subscriptions","organizations_url":"https://api.github.com/users/venetucci/orgs","repos_url":"https://api.github.com/users/venetucci/repos","events_url":"https://api.github.com/users/venetucci/events{/privacy}","received_events_url":"https://api.github.com/users/venetucci/received_events","type":"User","site_admin":true},"private":false,"html_url":"https://github.com/venetucci/giveback","description":"Organizations we like, and encourage you to donate to.","fork":false,"url":"https://api.github.com/repos/venetucci/giveback","forks_url":"https://api.github.com/repos/venetucci/giveback/forks","keys_url":"https://api.github.com/repos/venetucci/giveback/keys{/key_id}","collaborators_url":"https://api.github.com/repos/venetucci/giveback/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/venetucci/giveback/teams","hooks_url":"https://api.github.com/repos/venetucci/giveback/hooks","issue_events_url":"https://api.github.com/repos/venetucci/giveback/issues/events{/number}","events_url":"https://api.github.com/repos/venetucci/giveback/events","assignees_url":"https://api.github.com/repos/venetucci/giveback/assignees{/user}","branches_url":"https://api.github.com/repos/venetucci/giveback/branches{/branch}","tags_url":"https://api.github.com/repos/venetucci/giveback/tags","blobs_url":"https://api.github.com/repos/venetucci/giveback/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/venetucci/giveback/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/venetucci/giveback/git/refs{/sha}","trees_url":"https://api.github.com/repos/venetucci/giveback/git/trees{/sha}","statuses_url":"https://api.github.com/repos/venetucci/giveback/statuses/{sha}","languages_url":"https://api.github.com/repos/venetucci/giveback/languages","stargazers_url":"https://api.github.com/repos/venetucci/giveback/stargazers","contributors_url":"https://api.github.com/repos/venetucci/giveback/contributors","subscribers_url":"https://api.github.com/repos/venetucci/giveback/subscribers","subscription_url":"https://api.github.com/repos/venetucci/giveback/subscription","commits_url":"https://api.github.com/repos/venetucci/giveback/commits{/sha}","git_commits_url":"https://api.github.com/repos/venetucci/giveback/git/commits{/sha}","comments_url":"https://api.github.com/repos/venetucci/giveback/comments{/number}","issue_comment_url":"https://api.github.com/repos/venetucci/giveback/issues/comments{/number}","contents_url":"https://api.github.com/repos/venetucci/giveback/contents/{+path}","compare_url":"https://api.github.com/repos/venetucci/giveback/compare/{base}...{head}","merges_url":"https://api.github.com/repos/venetucci/giveback/merges","archive_url":"https://api.github.com/repos/venetucci/giveback/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/venetucci/giveback/downloads","issues_url":"https://api.github.com/repos/venetucci/giveback/issues{/number}","pulls_url":"https://api.github.com/repos/venetucci/giveback/pulls{/number}","milestones_url":"https://api.github.com/repos/venetucci/giveback/milestones{/number}","notifications_url":"https://api.github.com/repos/venetucci/giveback/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/venetucci/giveback/labels{/name}","releases_url":"https://api.github.com/repos/venetucci/giveback/releases{/id}","deployments_url":"https://api.github.com/repos/venetucci/giveback/deployments","created_at":"2015-03-29T00:40:38Z","updated_at":"2018-05-01T20:49:21Z","pushed_at":"2018-06-07T21:37:38Z","git_url":"git://github.com/venetucci/giveback.git","ssh_url":"git@github.com:venetucci/giveback.git","clone_url":"https://github.com/venetucci/giveback.git","svn_url":"https://github.com/venetucci/giveback","homepage":"http://www.julianandmichellegiveback.com","size":2980,"stargazers_count":3,"watchers_count":3,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":8,"license":null,"forks":1,"open_issues":8,"watchers":3,"default_branch":"master"}},"base":{"label":"venetucci:master","ref":"master","sha":"5967d97fb1b5d05c1ab42f41e14707adbccbb9af","user":{"login":"venetucci","id":5547897,"node_id":"MDQ6VXNlcjU1NDc4OTc=","avatar_url":"https://avatars3.githubusercontent.com/u/5547897?v=4","gravatar_id":"","url":"https://api.github.com/users/venetucci","html_url":"https://github.com/venetucci","followers_url":"https://api.github.com/users/venetucci/followers","following_url":"https://api.github.com/users/venetucci/following{/other_user}","gists_url":"https://api.github.com/users/venetucci/gists{/gist_id}","starred_url":"https://api.github.com/users/venetucci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/venetucci/subscriptions","organizations_url":"https://api.github.com/users/venetucci/orgs","repos_url":"https://api.github.com/users/venetucci/repos","events_url":"https://api.github.com/users/venetucci/events{/privacy}","received_events_url":"https://api.github.com/users/venetucci/received_events","type":"User","site_admin":true},"repo":{"id":33056088,"node_id":"MDEwOlJlcG9zaXRvcnkzMzA1NjA4OA==","name":"giveback","full_name":"venetucci/giveback","owner":{"login":"venetucci","id":5547897,"node_id":"MDQ6VXNlcjU1NDc4OTc=","avatar_url":"https://avatars3.githubusercontent.com/u/5547897?v=4","gravatar_id":"","url":"https://api.github.com/users/venetucci","html_url":"https://github.com/venetucci","followers_url":"https://api.github.com/users/venetucci/followers","following_url":"https://api.github.com/users/venetucci/following{/other_user}","gists_url":"https://api.github.com/users/venetucci/gists{/gist_id}","starred_url":"https://api.github.com/users/venetucci/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/venetucci/subscriptions","organizations_url":"https://api.github.com/users/venetucci/orgs","repos_url":"https://api.github.com/users/venetucci/repos","events_url":"https://api.github.com/users/venetucci/events{/privacy}","received_events_url":"https://api.github.com/users/venetucci/received_events","type":"User","site_admin":true},"private":false,"html_url":"https://github.com/venetucci/giveback","description":"Organizations we like, and encourage you to donate to.","fork":false,"url":"https://api.github.com/repos/venetucci/giveback","forks_url":"https://api.github.com/repos/venetucci/giveback/forks","keys_url":"https://api.github.com/repos/venetucci/giveback/keys{/key_id}","collaborators_url":"https://api.github.com/repos/venetucci/giveback/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/venetucci/giveback/teams","hooks_url":"https://api.github.com/repos/venetucci/giveback/hooks","issue_events_url":"https://api.github.com/repos/venetucci/giveback/issues/events{/number}","events_url":"https://api.github.com/repos/venetucci/giveback/events","assignees_url":"https://api.github.com/repos/venetucci/giveback/assignees{/user}","branches_url":"https://api.github.com/repos/venetucci/giveback/branches{/branch}","tags_url":"https://api.github.com/repos/venetucci/giveback/tags","blobs_url":"https://api.github.com/repos/venetucci/giveback/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/venetucci/giveback/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/venetucci/giveback/git/refs{/sha}","trees_url":"https://api.github.com/repos/venetucci/giveback/git/trees{/sha}","statuses_url":"https://api.github.com/repos/venetucci/giveback/statuses/{sha}","languages_url":"https://api.github.com/repos/venetucci/giveback/languages","stargazers_url":"https://api.github.com/repos/venetucci/giveback/stargazers","contributors_url":"https://api.github.com/repos/venetucci/giveback/contributors","subscribers_url":"https://api.github.com/repos/venetucci/giveback/subscribers","subscription_url":"https://api.github.com/repos/venetucci/giveback/subscription","commits_url":"https://api.github.com/repos/venetucci/giveback/commits{/sha}","git_commits_url":"https://api.github.com/repos/venetucci/giveback/git/commits{/sha}","comments_url":"https://api.github.com/repos/venetucci/giveback/comments{/number}","issue_comment_url":"https://api.github.com/repos/venetucci/giveback/issues/comments{/number}","contents_url":"https://api.github.com/repos/venetucci/giveback/contents/{+path}","compare_url":"https://api.github.com/repos/venetucci/giveback/compare/{base}...{head}","merges_url":"https://api.github.com/repos/venetucci/giveback/merges","archive_url":"https://api.github.com/repos/venetucci/giveback/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/venetucci/giveback/downloads","issues_url":"https://api.github.com/repos/venetucci/giveback/issues{/number}","pulls_url":"https://api.github.com/repos/venetucci/giveback/pulls{/number}","milestones_url":"https://api.github.com/repos/venetucci/giveback/milestones{/number}","notifications_url":"https://api.github.com/repos/venetucci/giveback/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/venetucci/giveback/labels{/name}","releases_url":"https://api.github.com/repos/venetucci/giveback/releases{/id}","deployments_url":"https://api.github.com/repos/venetucci/giveback/deployments","created_at":"2015-03-29T00:40:38Z","updated_at":"2018-05-01T20:49:21Z","pushed_at":"2018-06-07T21:37:38Z","git_url":"git://github.com/venetucci/giveback.git","ssh_url":"git@github.com:venetucci/giveback.git","clone_url":"https://github.com/venetucci/giveback.git","svn_url":"https://github.com/venetucci/giveback","homepage":"http://www.julianandmichellegiveback.com","size":2980,"stargazers_count":3,"watchers_count":3,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":1,"mirror_url":null,"archived":false,"open_issues_count":8,"license":null,"forks":1,"open_issues":8,"watchers":3,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/venetucci/giveback/pulls/59"},"html":{"href":"https://github.com/venetucci/giveback/pull/59"},"issue":{"href":"https://api.github.com/repos/venetucci/giveback/issues/59"},"comments":{"href":"https://api.github.com/repos/venetucci/giveback/issues/59/comments"},"review_comments":{"href":"https://api.github.com/repos/venetucci/giveback/pulls/59/comments"},"review_comment":{"href":"https://api.github.com/repos/venetucci/giveback/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/venetucci/giveback/pulls/59/commits"},"statuses":{"href":"https://api.github.com/repos/venetucci/giveback/statuses/a9c668e07216b5241b2cf94c33a5c4c834f686a3"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":4,"deletions":5,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}