{"action":"created","issue":{"url":"https://api.github.com/repos/liubei1900/security-on-github/issues/1","repository_url":"https://api.github.com/repos/liubei1900/security-on-github","labels_url":"https://api.github.com/repos/liubei1900/security-on-github/issues/1/labels{/name}","comments_url":"https://api.github.com/repos/liubei1900/security-on-github/issues/1/comments","events_url":"https://api.github.com/repos/liubei1900/security-on-github/issues/1/events","html_url":"https://github.com/liubei1900/security-on-github/pull/1","id":394518415,"node_id":"MDExOlB1bGxSZXF1ZXN0MjQxMjQ0NTU0","number":1,"title":"Update the vulnerable dependency","user":{"login":"github-learning-lab[bot]","id":37936606,"node_id":"MDM6Qm90Mzc5MzY2MDY=","avatar_url":"https://avatars0.githubusercontent.com/in/10572?v=4","gravatar_id":"","url":"https://api.github.com/users/github-learning-lab%5Bbot%5D","html_url":"https://github.com/apps/github-learning-lab","followers_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-28T00:41:59Z","updated_at":"2018-12-28T00:51:15Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/liubei1900/security-on-github/pulls/1","html_url":"https://github.com/liubei1900/security-on-github/pull/1","diff_url":"https://github.com/liubei1900/security-on-github/pull/1.diff","patch_url":"https://github.com/liubei1900/security-on-github/pull/1.patch"},"body":"## Update the dependency\n\nNext, we'll go through the GitHub Flow to make some changes. If you aren't sure how to do this, try the [Introduction to GitHub course](https://lab.github.com/githubtraining/introduction-to-github) and then come back to give it another try.\n\n> _Note: Before doing this with real world code, make sure that the upgraded package works with your code. Good unit tests and CI (continuous integration) will help you update with confidence._\n\n## Step 4: Updating dependency versions\n\nNow that you know the recommended version, it's time to edit the `package.json` file. You'll upgrade the package to a non-vulnerable version.\n\n### :keyboard: Activity: Update the `package.json` file\n\n1. Within this pull request, go to **Files changed**\n1. Click the pencil in the right upper corner to edit the `package.json` file\n1. Fix the vulnerability by updating to the latest version of the dependency that you took note of earlier\n1. Scroll down, and commit your change\n"},"comment":{"url":"https://api.github.com/repos/liubei1900/security-on-github/issues/comments/450264324","html_url":"https://github.com/liubei1900/security-on-github/pull/1#issuecomment-450264324","issue_url":"https://api.github.com/repos/liubei1900/security-on-github/issues/1","id":450264324,"node_id":"MDEyOklzc3VlQ29tbWVudDQ1MDI2NDMyNA==","user":{"login":"github-learning-lab[bot]","id":37936606,"node_id":"MDM6Qm90Mzc5MzY2MDY=","avatar_url":"https://avatars0.githubusercontent.com/in/10572?v=4","gravatar_id":"","url":"https://api.github.com/users/github-learning-lab%5Bbot%5D","html_url":"https://github.com/apps/github-learning-lab","followers_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/followers","following_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/repos","events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/github-learning-lab%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2018-12-28T00:51:15Z","updated_at":"2018-12-28T00:51:15Z","author_association":"NONE","body":"## Step 3: Merge this pull request\n\nGreat job, @liubei1900, your pull request looks good. Thank you for fixing the vulnerable dependency!\n\n_Note: You might notice that this repository has a `package.json` file, but no `package-lock.json` file. We are doing all parts of this activity on GitHub.com. If you work with other repositories, you might notice some differences. Regardless of what dependency files you use, the main concepts of this course still apply._\n\n### :keyboard: Activity: Merge\n1. Merge this pull request\n"}}
{"actor":{"display_login":"github-learning-lab"}}