{"action":"opened","number":301,"pull_request":{"url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301","id":230182238,"node_id":"MDExOlB1bGxSZXF1ZXN0MjMwMTgyMjM4","html_url":"https://github.com/ember-cli/ember-cli-mocha/pull/301","diff_url":"https://github.com/ember-cli/ember-cli-mocha/pull/301.diff","patch_url":"https://github.com/ember-cli/ember-cli-mocha/pull/301.patch","issue_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/301","number":301,"state":"open","locked":false,"title":"[Security] Bump morgan from 1.8.2 to 1.9.1","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [morgan](https://github.com/expressjs/morgan) from 1.8.2 to 1.9.1. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Node Security Working Group](https://github.com/nodejs/security-wg/blob/master/vuln/npm/473.json).*\n\n> **Arbitrary Code Injection**\n> Code Injection Vulnerability in morgan Package\n> \n> Affected versions: <1.9.1\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [morgan's releases](https://github.com/expressjs/morgan/releases).*\n\n> ## 1.9.1\n>   * Fix using special characters in format\r\n>   * deps: depd@~1.1.2\r\n>     - perf: remove argument reassignment\n> \n> ## 1.9.0\n>   * Use `res.headersSent` when available\r\n>   * deps: basic-auth@~2.0.0\r\n>      - Use `safe-buffer` for improved Buffer API\r\n>   * deps: debug@2.6.9\r\n>   * deps: depd@~1.1.1\r\n>     - Remove unnecessary `Buffer` loading\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [morgan's changelog](https://github.com/expressjs/morgan/blob/master/HISTORY.md).*\n\n> 1.9.1 / 2018-09-10\n> ==================\n> \n>   * Fix using special characters in format\n>   * deps: depd@~1.1.2\n>     - perf: remove argument reassignment\n> \n> 1.9.0 / 2017-09-26\n> ==================\n> \n>   * Use `res.headersSent` when available\n>   * deps: basic-auth@~2.0.0\n>      - Use `safe-buffer` for improved Buffer API\n>   * deps: debug@2.6.9\n>   * deps: depd@~1.1.1\n>     - Remove unnecessary `Buffer` loading\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`572dd93`](https://github.com/expressjs/morgan/commit/572dd937f26d486babc709228c98fd15dd807408) 1.9.1\n- [`e02de38`](https://github.com/expressjs/morgan/commit/e02de384bd27c6131c516e05d6499845a6793707) lint: apply standard 12 style\n- [`e329663`](https://github.com/expressjs/morgan/commit/e329663836809de4be557b200a5b983ab8b4e6c2) Fix using special characters in format\n- [`eb1968a`](https://github.com/expressjs/morgan/commit/eb1968ac69a3d1ad98bacd06b738e9125630c3d3) tests: use strict equality checks\n- [`310b206`](https://github.com/expressjs/morgan/commit/310b2069de0143c958db341141cbc429bc0e2cd2) build: use yaml eslint configuration\n- [`5810937`](https://github.com/expressjs/morgan/commit/581093770cc2c323a39fd306034e9e859cb0ffb2) build: Node.js@9.11\n- [`f60afd5`](https://github.com/expressjs/morgan/commit/f60afd502f5be3ebc916f10dab84fdb818a1c494) build: Node.js@8.11\n- [`5295b0c`](https://github.com/expressjs/morgan/commit/5295b0cff959201aa06186f999d8d48f8f3c8384) build: eslint-plugin-standard@3.1.0\n- [`178daaf`](https://github.com/expressjs/morgan/commit/178daaf25c4edebc9daddd5a847d40cd69594705) build: eslint-plugin-promise@3.8.0\n- [`7b08641`](https://github.com/expressjs/morgan/commit/7b08641f7d96472bd959b11f07cfaef94f6818ba) build: eslint-plugin-import@2.12.0\n- Additional commits viewable in [compare view](https://github.com/expressjs/morgan/compare/1.8.2...1.9.1)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=morgan&package-manager=npm_and_yarn&previous-version=1.8.2&new-version=1.9.1)](https://dependabot.com/compatibility-score.html?dependency-name=morgan&package-manager=npm_and_yarn&previous-version=1.8.2&new-version=1.9.1)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-11-12T15:54:10Z","updated_at":"2018-11-12T15:54:10Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301/commits","review_comments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301/comments","review_comment_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/comments{/number}","comments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/301/comments","statuses_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/statuses/5fec199730f4c4efa58c5c1866f8fa4a6ca424bc","head":{"label":"ember-cli:dependabot/npm_and_yarn/morgan-1.9.1","ref":"dependabot/npm_and_yarn/morgan-1.9.1","sha":"5fec199730f4c4efa58c5c1866f8fa4a6ca424bc","user":{"login":"ember-cli","id":10262982,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwMjYyOTgy","avatar_url":"https://avatars3.githubusercontent.com/u/10262982?v=4","gravatar_id":"","url":"https://api.github.com/users/ember-cli","html_url":"https://github.com/ember-cli","followers_url":"https://api.github.com/users/ember-cli/followers","following_url":"https://api.github.com/users/ember-cli/following{/other_user}","gists_url":"https://api.github.com/users/ember-cli/gists{/gist_id}","starred_url":"https://api.github.com/users/ember-cli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ember-cli/subscriptions","organizations_url":"https://api.github.com/users/ember-cli/orgs","repos_url":"https://api.github.com/users/ember-cli/repos","events_url":"https://api.github.com/users/ember-cli/events{/privacy}","received_events_url":"https://api.github.com/users/ember-cli/received_events","type":"Organization","site_admin":false},"repo":{"id":26506083,"node_id":"MDEwOlJlcG9zaXRvcnkyNjUwNjA4Mw==","name":"ember-cli-mocha","full_name":"ember-cli/ember-cli-mocha","private":false,"owner":{"login":"ember-cli","id":10262982,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwMjYyOTgy","avatar_url":"https://avatars3.githubusercontent.com/u/10262982?v=4","gravatar_id":"","url":"https://api.github.com/users/ember-cli","html_url":"https://github.com/ember-cli","followers_url":"https://api.github.com/users/ember-cli/followers","following_url":"https://api.github.com/users/ember-cli/following{/other_user}","gists_url":"https://api.github.com/users/ember-cli/gists{/gist_id}","starred_url":"https://api.github.com/users/ember-cli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ember-cli/subscriptions","organizations_url":"https://api.github.com/users/ember-cli/orgs","repos_url":"https://api.github.com/users/ember-cli/repos","events_url":"https://api.github.com/users/ember-cli/events{/privacy}","received_events_url":"https://api.github.com/users/ember-cli/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/ember-cli/ember-cli-mocha","description":"Mocha and Chai tests for ember-cli applications","fork":false,"url":"https://api.github.com/repos/ember-cli/ember-cli-mocha","forks_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/forks","keys_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/teams","hooks_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/hooks","issue_events_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/events{/number}","events_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/events","assignees_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/assignees{/user}","branches_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/branches{/branch}","tags_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/tags","blobs_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/refs{/sha}","trees_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/statuses/{sha}","languages_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/languages","stargazers_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/stargazers","contributors_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/contributors","subscribers_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/subscribers","subscription_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/subscription","commits_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/commits{/sha}","git_commits_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/commits{/sha}","comments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/comments{/number}","issue_comment_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/comments{/number}","contents_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/contents/{+path}","compare_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/merges","archive_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/downloads","issues_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues{/number}","pulls_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls{/number}","milestones_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/milestones{/number}","notifications_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/labels{/name}","releases_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/releases{/id}","deployments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/deployments","created_at":"2014-11-11T21:41:08Z","updated_at":"2018-11-02T21:52:42Z","pushed_at":"2018-11-12T15:54:09Z","git_url":"git://github.com/ember-cli/ember-cli-mocha.git","ssh_url":"git@github.com:ember-cli/ember-cli-mocha.git","clone_url":"https://github.com/ember-cli/ember-cli-mocha.git","svn_url":"https://github.com/ember-cli/ember-cli-mocha","homepage":"","size":1321,"stargazers_count":152,"watchers_count":152,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":59,"mirror_url":null,"archived":false,"open_issues_count":17,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":59,"open_issues":17,"watchers":152,"default_branch":"master"}},"base":{"label":"ember-cli:master","ref":"master","sha":"643baae2f939250ba40c7c9435d08481370e4c05","user":{"login":"ember-cli","id":10262982,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwMjYyOTgy","avatar_url":"https://avatars3.githubusercontent.com/u/10262982?v=4","gravatar_id":"","url":"https://api.github.com/users/ember-cli","html_url":"https://github.com/ember-cli","followers_url":"https://api.github.com/users/ember-cli/followers","following_url":"https://api.github.com/users/ember-cli/following{/other_user}","gists_url":"https://api.github.com/users/ember-cli/gists{/gist_id}","starred_url":"https://api.github.com/users/ember-cli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ember-cli/subscriptions","organizations_url":"https://api.github.com/users/ember-cli/orgs","repos_url":"https://api.github.com/users/ember-cli/repos","events_url":"https://api.github.com/users/ember-cli/events{/privacy}","received_events_url":"https://api.github.com/users/ember-cli/received_events","type":"Organization","site_admin":false},"repo":{"id":26506083,"node_id":"MDEwOlJlcG9zaXRvcnkyNjUwNjA4Mw==","name":"ember-cli-mocha","full_name":"ember-cli/ember-cli-mocha","private":false,"owner":{"login":"ember-cli","id":10262982,"node_id":"MDEyOk9yZ2FuaXphdGlvbjEwMjYyOTgy","avatar_url":"https://avatars3.githubusercontent.com/u/10262982?v=4","gravatar_id":"","url":"https://api.github.com/users/ember-cli","html_url":"https://github.com/ember-cli","followers_url":"https://api.github.com/users/ember-cli/followers","following_url":"https://api.github.com/users/ember-cli/following{/other_user}","gists_url":"https://api.github.com/users/ember-cli/gists{/gist_id}","starred_url":"https://api.github.com/users/ember-cli/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ember-cli/subscriptions","organizations_url":"https://api.github.com/users/ember-cli/orgs","repos_url":"https://api.github.com/users/ember-cli/repos","events_url":"https://api.github.com/users/ember-cli/events{/privacy}","received_events_url":"https://api.github.com/users/ember-cli/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/ember-cli/ember-cli-mocha","description":"Mocha and Chai tests for ember-cli applications","fork":false,"url":"https://api.github.com/repos/ember-cli/ember-cli-mocha","forks_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/forks","keys_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/teams","hooks_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/hooks","issue_events_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/events{/number}","events_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/events","assignees_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/assignees{/user}","branches_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/branches{/branch}","tags_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/tags","blobs_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/refs{/sha}","trees_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/statuses/{sha}","languages_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/languages","stargazers_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/stargazers","contributors_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/contributors","subscribers_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/subscribers","subscription_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/subscription","commits_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/commits{/sha}","git_commits_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/git/commits{/sha}","comments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/comments{/number}","issue_comment_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/comments{/number}","contents_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/contents/{+path}","compare_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/merges","archive_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/downloads","issues_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues{/number}","pulls_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls{/number}","milestones_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/milestones{/number}","notifications_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/labels{/name}","releases_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/releases{/id}","deployments_url":"https://api.github.com/repos/ember-cli/ember-cli-mocha/deployments","created_at":"2014-11-11T21:41:08Z","updated_at":"2018-11-02T21:52:42Z","pushed_at":"2018-11-12T15:54:09Z","git_url":"git://github.com/ember-cli/ember-cli-mocha.git","ssh_url":"git@github.com:ember-cli/ember-cli-mocha.git","clone_url":"https://github.com/ember-cli/ember-cli-mocha.git","svn_url":"https://github.com/ember-cli/ember-cli-mocha","homepage":"","size":1321,"stargazers_count":152,"watchers_count":152,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":59,"mirror_url":null,"archived":false,"open_issues_count":17,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":59,"open_issues":17,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301"},"html":{"href":"https://github.com/ember-cli/ember-cli-mocha/pull/301"},"issue":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/301"},"comments":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/issues/301/comments"},"review_comments":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301/comments"},"review_comment":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/pulls/301/commits"},"statuses":{"href":"https://api.github.com/repos/ember-cli/ember-cli-mocha/statuses/5fec199730f4c4efa58c5c1866f8fa4a6ca424bc"}},"author_association":"CONTRIBUTOR","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":24,"deletions":14,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}