{"action":"created","issue":{"url":"https://api.github.com/repos/pupper/pupper-example/issues/65","repository_url":"https://api.github.com/repos/pupper/pupper-example","labels_url":"https://api.github.com/repos/pupper/pupper-example/issues/65/labels{/name}","comments_url":"https://api.github.com/repos/pupper/pupper-example/issues/65/comments","events_url":"https://api.github.com/repos/pupper/pupper-example/issues/65/events","html_url":"https://github.com/pupper/pupper-example/pull/65","id":346863420,"node_id":"MDExOlB1bGxSZXF1ZXN0MjA1NjIxMzMx","number":65,"title":"build(deps): bump react-dom from 16.4.1 to 16.4.2","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":768982939,"node_id":"MDU6TGFiZWw3Njg5ODI5Mzk=","url":"https://api.github.com/repos/pupper/pupper-example/labels/dependencies","name":"dependencies","color":"0025ff","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":1,"created_at":"2018-08-02T05:21:28Z","updated_at":"2018-08-02T07:58:56Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/pupper/pupper-example/pulls/65","html_url":"https://github.com/pupper/pupper-example/pull/65","diff_url":"https://github.com/pupper/pupper-example/pull/65.diff","patch_url":"https://github.com/pupper/pupper-example/pull/65.patch"},"body":"Bumps [react-dom](https://github.com/facebook/react) from 16.4.1 to 16.4.2.\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [react-dom's releases](https://github.com/facebook/react/releases).*\n\n> ## v16.4.2\n> ## 16.4.2 (August 1, 2018)\r\n> \r\n> ### React DOM Server\r\n> \r\n> * Fix a [potential XSS vulnerability when the attacker controls an attribute name](https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html) (`CVE-2018-6341`). This fix is available in the latest `react-dom@16.4.2`, as well as in previous affected minor versions: `react-dom@16.0.1`, `react-dom@16.1.2`, `react-dom@16.2.1`, and `react-dom@16.3.3`. ([[**gaearon**](https://github.com/gaearon)](https://github.com/gaearon) in [#13302](https://github-redirect.dependabot.com/facebook/react/pull/13302))\r\n> \r\n> * Fix a crash in the server renderer when an attribute is called `hasOwnProperty`. This fix is only available in `react-dom@16.4.2`. ([[**gaearon**](https://github.com/gaearon)](https://github.com/gaearon) in [#13303](https://github-redirect.dependabot.com/facebook/react/pull/13303))\r\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [react-dom's changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md).*\n\n> ## 16.4.2 (August 1, 2018)\n> \n> ### React DOM Server\n> \n> * Fix a [potential XSS vulnerability when the attacker controls an attribute name](https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html) (`CVE-2018-6341`). This fix is available in the latest `react-dom@16.4.2`, as well as in previous affected minor versions: `react-dom@16.0.1`, `react-dom@16.1.2`, `react-dom@16.2.1`, and `react-dom@16.3.3`. ([[**gaearon**](https://github.com/gaearon)](https://github.com/gaearon) in [#13302](https://github-redirect.dependabot.com/facebook/react/pull/13302))\n> \n> * Fix a crash in the server renderer when an attribute is called `hasOwnProperty`. This fix is only available in `react-dom@16.4.2`. ([[**gaearon**](https://github.com/gaearon)](https://github.com/gaearon) in [#13303](https://github-redirect.dependabot.com/facebook/react/pull/13303))\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`54adb26`](https://github.com/facebook/react/commit/54adb2674afe16ec603e0c54bf46ccf1afa42308) 16.4.2\n- [`d922ed2`](https://github.com/facebook/react/commit/d922ed2cf2fadf2578a1379be3bb89430e7ceb0c) Fix SSR crash on a hasOwnProperty attribute\n- [`5b19684`](https://github.com/facebook/react/commit/5b19684fc3eddb44a790f31804707de9234147c7) Sanitize unknown attribute names for SSR\n- See full diff in [compare view](https://github.com/facebook/react/compare/v16.4.1...v16.4.2)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=react-dom&package-manager=npm_and_yarn&previous-version=16.4.1&new-version=16.4.2)](https://dependabot.com/compatibility-score.html?dependency-name=react-dom&package-manager=npm_and_yarn&previous-version=16.4.1&new-version=16.4.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/pupper/pupper-example/issues/comments/409840775","html_url":"https://github.com/pupper/pupper-example/pull/65#issuecomment-409840775","issue_url":"https://api.github.com/repos/pupper/pupper-example/issues/65","id":409840775,"node_id":"MDEyOklzc3VlQ29tbWVudDQwOTg0MDc3NQ==","user":{"login":"bouiboui","id":3274103,"node_id":"MDQ6VXNlcjMyNzQxMDM=","avatar_url":"https://avatars0.githubusercontent.com/u/3274103?v=4","gravatar_id":"","url":"https://api.github.com/users/bouiboui","html_url":"https://github.com/bouiboui","followers_url":"https://api.github.com/users/bouiboui/followers","following_url":"https://api.github.com/users/bouiboui/following{/other_user}","gists_url":"https://api.github.com/users/bouiboui/gists{/gist_id}","starred_url":"https://api.github.com/users/bouiboui/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bouiboui/subscriptions","organizations_url":"https://api.github.com/users/bouiboui/orgs","repos_url":"https://api.github.com/users/bouiboui/repos","events_url":"https://api.github.com/users/bouiboui/events{/privacy}","received_events_url":"https://api.github.com/users/bouiboui/received_events","type":"User","site_admin":false},"created_at":"2018-08-02T07:58:56Z","updated_at":"2018-08-02T07:58:56Z","author_association":"COLLABORATOR","body":"Retry Deepcode"}}
{"actor":{"display_login":"bouiboui"}}