{"action":"created","issue":{"url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/102","repository_url":"https://api.github.com/repos/NdagiStanley/vue-django","labels_url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/102/labels{/name}","comments_url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/102/comments","events_url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/102/events","html_url":"https://github.com/NdagiStanley/vue-django/pull/102","id":298260758,"number":102,"title":"Scheduled daily dependency update on monday","user":{"login":"pyup-bot","id":16239342,"avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-02-19T12:36:08Z","updated_at":"2018-02-20T12:36:11Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/NdagiStanley/vue-django/pulls/102","html_url":"https://github.com/NdagiStanley/vue-django/pull/102","diff_url":"https://github.com/NdagiStanley/vue-django/pull/102.diff","patch_url":"https://github.com/NdagiStanley/vue-django/pull/102.patch"},"body":"\n\n\n## Updates\nHere's a list of all the updates bundled in this pull request. I've added some links to make it easier for you to find all the information you need.\n<table align=\"center\">\n\n<tr>\n<td><b>coverage</b></td>\n<td align=\"center\">4.4.2</td>\n<td align=\"center\">&raquo;</td>\n<td align=\"center\">4.5.1</td>\n<td>\n     <a href=\"https://pypi.python.org/pypi/coverage\">PyPI</a> | <a href=\"https://pyup.io/changelogs/coverage/\">Changelog</a> | <a href=\"https://bitbucket.org/ned/coveragepy\">Repo</a> \n\n</td>\n\n<tr>\n<td><b>Django</b></td>\n<td align=\"center\">2.0.1</td>\n<td align=\"center\">&raquo;</td>\n<td align=\"center\">2.0.2</td>\n<td>\n     <a href=\"https://pypi.python.org/pypi/django\">PyPI</a> | <a href=\"https://pyup.io/changelogs/django/\">Changelog</a> | <a href=\"https://www.djangoproject.com/\">Homepage</a> \n\n</td>\n\n</tr>\n</table>\n\n\n\n## Changelogs\n\n\n### coverage 4.4.2 -> 4.5.1\n\n>### 4.5.1\n\n>----------------------------\n\n>- Now that 4.5 properly separated the ``[run] omit`` and ``[report] omit``\n>  settings, an old bug has become apparent.  If you specified a package name\n>  for ``[run] source``, then omit patterns weren&#39;t matched inside that package.\n>  This bug (`issue 638`_) is now fixed.\n\n>- On Python 3.7, reporting about a decorated function with no body other than a\n>  docstring would crash coverage.py with an IndexError (`issue 640`_).  This is\n>  now fixed.\n\n>- Configurer plugins are now reported in the output of ``--debug=sys``.\n\n>.. _issue 638: https://bitbucket.org/ned/coveragepy/issues/638/run-omit-is-ignored-since-45\n>.. _issue 640: https://bitbucket.org/ned/coveragepy/issues/640/indexerror-reporting-on-an-empty-decorated\n\n\n>.. _changes_45:\n\n\n\n>### 4.5\n\n>--------------------------\n\n>- A new kind of plugin is supported: configurators are invoked at start-up to\n>  allow more complex configuration than the .coveragerc file can easily do.\n>  See :ref:`api_plugin` for details.  This solves the complex configuration\n>  problem described in `issue 563`_.\n\n>- The ``fail_under`` option can now be a float.  Note that you must specify the\n>  ``[report] precision`` configuration option for the fractional part to be\n>  used.  Thanks to Lars Hupfeldt Nielsen for help with the implementation.\n>  Fixes `issue 631`_.\n\n>- The ``include`` and ``omit`` options can be specified for both the ``[run]``\n>  and ``[report]`` phases of execution.  4.4.2 introduced some incorrect\n>  interactions between those phases, where the options for one were confused\n>  for the other.  This is now corrected, fixing `issue 621`_ and `issue 622`_.\n>  Thanks to Daniel Hahler for seeing more clearly than I could.\n\n>- The ``coverage combine`` command used to always overwrite the data file, even\n>  when no data had been read from apparently combinable files.  Now, an error\n>  is raised if we thought there were files to combine, but in fact none of them\n>  could be used.  Fixes `issue 629`_.\n\n>- The ``coverage combine`` command could get confused about path separators\n>  when combining data collected on Windows with data collected on Linux, as\n>  described in `issue 618`_.  This is now fixed: the result path always uses\n>  the path separator specified in the ``[paths]`` result.\n\n>- On Windows, the HTML report could fail when source trees are deeply nested,\n>  due to attempting to create HTML filenames longer than the 250-character\n>  maximum.  Now filenames will never get much larger than 200 characters,\n>  fixing `issue 627`_.  Thanks to Alex Sandro for helping with the fix.\n\n>.. _issue 563: https://bitbucket.org/ned/coveragepy/issues/563/platform-specific-configuration\n>.. _issue 618: https://bitbucket.org/ned/coveragepy/issues/618/problem-when-combining-windows-generated\n>.. _issue 621: https://bitbucket.org/ned/coveragepy/issues/621/include-ignored-warning-when-using\n>.. _issue 622: https://bitbucket.org/ned/coveragepy/issues/622/report-omit-overwrites-run-omit\n>.. _issue 627: https://bitbucket.org/ned/coveragepy/issues/627/failure-generating-html-reports-when-the\n>.. _issue 629: https://bitbucket.org/ned/coveragepy/issues/629/multiple-use-of-combine-leads-to-empty\n>.. _issue 631: https://bitbucket.org/ned/coveragepy/issues/631/precise-coverage-percentage-value\n\n\n>.. _changes_442:\n\n\n\n\n\n\n\n### Django 2.0.1 -> 2.0.2\n\n>### 2.0.2\n\n>==========================\n\n>*February 1, 2018*\n\n>Django 2.0.2 fixes a security issue and several bugs in 2.0.1.\n\n>CVE-2018-6188: Information leakage in ``AuthenticationForm``\n>============================================================\n\n>A regression in Django 1.11.8 made\n>:class:`~django.contrib.auth.forms.AuthenticationForm` run its\n>``confirm_login_allowed()`` method even if an incorrect password is entered.\n>This can leak information about a user, depending on what messages\n>``confirm_login_allowed()`` raises. If ``confirm_login_allowed()`` isn&#39;t\n>overridden, an attacker enter an arbitrary username and see if that user has\n>been set to ``is_active=False``. If ``confirm_login_allowed()`` is overridden,\n>more sensitive details could be leaked.\n\n>This issue is fixed with the caveat that ``AuthenticationForm`` can no longer\n>raise the &quot;This account is inactive.&quot; error if the authentication backend\n>rejects inactive users (the default authentication backend, ``ModelBackend``,\n>has done that since Django 1.10). This issue will be revisited for Django 2.1\n>as a fix to address the caveat will likely be too invasive for inclusion in\n>older versions.\n\n>Bugfixes\n>========\n\n>* Fixed hidden content at the bottom of the &quot;The install worked successfully!&quot;\n>  page for some languages (:ticket:`28885`).\n\n>* Fixed incorrect foreign key nullification if a model has two foreign keys to\n>  the same model and a target model is deleted (:ticket:`29016`).\n\n>* Fixed regression in the use of ``QuerySet.values_list(..., flat=True)``\n>  followed by ``annotate()`` (:ticket:`29067`).\n\n>* Fixed a regression where a queryset that annotates with geometry objects\n>  crashes (:ticket:`29054`).\n\n>* Fixed a regression where ``contrib.auth.authenticate()`` crashes if an\n>  authentication backend doesn&#39;t accept ``request`` and a later one does\n>  (:ticket:`29071`).\n\n>* Fixed a regression where ``makemigrations`` crashes if a migrations directory\n>  doesn&#39;t have an ``__init__.py`` file (:ticket:`29091`).\n\n>* Fixed crash when entering an invalid uuid in ``ModelAdmin.raw_id_fields``\n>  (:ticket:`29094`).\n\n\n>==========================\n\n\n\n\n\n\n\n\n\nThat's it for now!\n\nHappy merging! 🤖\n"},"comment":{"url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/comments/366964216","html_url":"https://github.com/NdagiStanley/vue-django/pull/102#issuecomment-366964216","issue_url":"https://api.github.com/repos/NdagiStanley/vue-django/issues/102","id":366964216,"user":{"login":"pyup-bot","id":16239342,"avatar_url":"https://avatars0.githubusercontent.com/u/16239342?v=4","gravatar_id":"","url":"https://api.github.com/users/pyup-bot","html_url":"https://github.com/pyup-bot","followers_url":"https://api.github.com/users/pyup-bot/followers","following_url":"https://api.github.com/users/pyup-bot/following{/other_user}","gists_url":"https://api.github.com/users/pyup-bot/gists{/gist_id}","starred_url":"https://api.github.com/users/pyup-bot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyup-bot/subscriptions","organizations_url":"https://api.github.com/users/pyup-bot/orgs","repos_url":"https://api.github.com/users/pyup-bot/repos","events_url":"https://api.github.com/users/pyup-bot/events{/privacy}","received_events_url":"https://api.github.com/users/pyup-bot/received_events","type":"User","site_admin":false},"created_at":"2018-02-20T12:36:11Z","updated_at":"2018-02-20T12:36:11Z","author_association":"CONTRIBUTOR","body":"Closing this in favor of #103"}}
{"actor":{"display_login":"pyup-bot"}}