{"action":"opened","number":5,"pull_request":{"url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5","id":226937549,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI2OTM3NTQ5","html_url":"https://github.com/brunoarueira/example_mongodb/pull/5","diff_url":"https://github.com/brunoarueira/example_mongodb/pull/5.diff","patch_url":"https://github.com/brunoarueira/example_mongodb/pull/5.patch","issue_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/5","number":5,"state":"open","locked":false,"title":"[Security] Bump sprockets from 3.5.2 to 3.7.2","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [sprockets](http://getsprockets.org/) from 3.5.2 to 3.7.2. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/sprockets/CVE-2018-3760.yml).*\n\n> **Path Traversal in Sprockets**\n> Specially crafted requests can be used to access files that exist on\n> the filesystem that is outside an application's root directory, when the\n> Sprockets server is used in production.\n> \n> All users running an affected release should either upgrade or use one of the work arounds immediately.\n> \n> Workaround:\n> In Rails applications, work around this issue, set `config.assets.compile = false` and\n> `config.public_file_server.enabled = true` in an initializer and precompile the assets.\n> \n>  This work around will not be possible in all hosting environments and upgrading is advised.\n> \n> Patched versions: >= 2.12.5, < 3.0.0; >= 3.7.2, < 4.0.0; >= 4.0.0.beta8\n> Unaffected versions: none\n\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=sprockets&package-manager=bundler&previous-version=3.5.2&new-version=3.7.2)](https://dependabot.com/compatibility-score.html?dependency-name=sprockets&package-manager=bundler&previous-version=3.5.2&new-version=3.7.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2018-10-30T14:10:28Z","updated_at":"2018-10-30T14:10:28Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5/commits","review_comments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5/comments","review_comment_url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/comments{/number}","comments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/5/comments","statuses_url":"https://api.github.com/repos/brunoarueira/example_mongodb/statuses/711d83caeffceba1d06fac98e124dd5b96f85366","head":{"label":"brunoarueira:dependabot/bundler/sprockets-3.7.2","ref":"dependabot/bundler/sprockets-3.7.2","sha":"711d83caeffceba1d06fac98e124dd5b96f85366","user":{"login":"brunoarueira","id":119518,"node_id":"MDQ6VXNlcjExOTUxOA==","avatar_url":"https://avatars2.githubusercontent.com/u/119518?v=4","gravatar_id":"","url":"https://api.github.com/users/brunoarueira","html_url":"https://github.com/brunoarueira","followers_url":"https://api.github.com/users/brunoarueira/followers","following_url":"https://api.github.com/users/brunoarueira/following{/other_user}","gists_url":"https://api.github.com/users/brunoarueira/gists{/gist_id}","starred_url":"https://api.github.com/users/brunoarueira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brunoarueira/subscriptions","organizations_url":"https://api.github.com/users/brunoarueira/orgs","repos_url":"https://api.github.com/users/brunoarueira/repos","events_url":"https://api.github.com/users/brunoarueira/events{/privacy}","received_events_url":"https://api.github.com/users/brunoarueira/received_events","type":"User","site_admin":false},"repo":{"id":2168928,"node_id":"MDEwOlJlcG9zaXRvcnkyMTY4OTI4","name":"example_mongodb","full_name":"brunoarueira/example_mongodb","private":false,"owner":{"login":"brunoarueira","id":119518,"node_id":"MDQ6VXNlcjExOTUxOA==","avatar_url":"https://avatars2.githubusercontent.com/u/119518?v=4","gravatar_id":"","url":"https://api.github.com/users/brunoarueira","html_url":"https://github.com/brunoarueira","followers_url":"https://api.github.com/users/brunoarueira/followers","following_url":"https://api.github.com/users/brunoarueira/following{/other_user}","gists_url":"https://api.github.com/users/brunoarueira/gists{/gist_id}","starred_url":"https://api.github.com/users/brunoarueira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brunoarueira/subscriptions","organizations_url":"https://api.github.com/users/brunoarueira/orgs","repos_url":"https://api.github.com/users/brunoarueira/repos","events_url":"https://api.github.com/users/brunoarueira/events{/privacy}","received_events_url":"https://api.github.com/users/brunoarueira/received_events","type":"User","site_admin":false},"html_url":"https://github.com/brunoarueira/example_mongodb","description":"Example rails app with mongodb using mongomapper","fork":false,"url":"https://api.github.com/repos/brunoarueira/example_mongodb","forks_url":"https://api.github.com/repos/brunoarueira/example_mongodb/forks","keys_url":"https://api.github.com/repos/brunoarueira/example_mongodb/keys{/key_id}","collaborators_url":"https://api.github.com/repos/brunoarueira/example_mongodb/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/brunoarueira/example_mongodb/teams","hooks_url":"https://api.github.com/repos/brunoarueira/example_mongodb/hooks","issue_events_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/events{/number}","events_url":"https://api.github.com/repos/brunoarueira/example_mongodb/events","assignees_url":"https://api.github.com/repos/brunoarueira/example_mongodb/assignees{/user}","branches_url":"https://api.github.com/repos/brunoarueira/example_mongodb/branches{/branch}","tags_url":"https://api.github.com/repos/brunoarueira/example_mongodb/tags","blobs_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/refs{/sha}","trees_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/trees{/sha}","statuses_url":"https://api.github.com/repos/brunoarueira/example_mongodb/statuses/{sha}","languages_url":"https://api.github.com/repos/brunoarueira/example_mongodb/languages","stargazers_url":"https://api.github.com/repos/brunoarueira/example_mongodb/stargazers","contributors_url":"https://api.github.com/repos/brunoarueira/example_mongodb/contributors","subscribers_url":"https://api.github.com/repos/brunoarueira/example_mongodb/subscribers","subscription_url":"https://api.github.com/repos/brunoarueira/example_mongodb/subscription","commits_url":"https://api.github.com/repos/brunoarueira/example_mongodb/commits{/sha}","git_commits_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/commits{/sha}","comments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/comments{/number}","issue_comment_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/comments{/number}","contents_url":"https://api.github.com/repos/brunoarueira/example_mongodb/contents/{+path}","compare_url":"https://api.github.com/repos/brunoarueira/example_mongodb/compare/{base}...{head}","merges_url":"https://api.github.com/repos/brunoarueira/example_mongodb/merges","archive_url":"https://api.github.com/repos/brunoarueira/example_mongodb/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/brunoarueira/example_mongodb/downloads","issues_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues{/number}","pulls_url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls{/number}","milestones_url":"https://api.github.com/repos/brunoarueira/example_mongodb/milestones{/number}","notifications_url":"https://api.github.com/repos/brunoarueira/example_mongodb/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/brunoarueira/example_mongodb/labels{/name}","releases_url":"https://api.github.com/repos/brunoarueira/example_mongodb/releases{/id}","deployments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/deployments","created_at":"2011-08-07T14:35:42Z","updated_at":"2018-10-30T13:57:05Z","pushed_at":"2018-10-30T14:10:28Z","git_url":"git://github.com/brunoarueira/example_mongodb.git","ssh_url":"git@github.com:brunoarueira/example_mongodb.git","clone_url":"https://github.com/brunoarueira/example_mongodb.git","svn_url":"https://github.com/brunoarueira/example_mongodb","homepage":"http://brunoarueira.wordpress.com/2011/08/07/mongodb-mongomapper-and-rails-3/","size":104,"stargazers_count":1,"watchers_count":1,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":4,"license":null,"forks":0,"open_issues":4,"watchers":1,"default_branch":"master"}},"base":{"label":"brunoarueira:master","ref":"master","sha":"75d74a4ac333124b0971bd81ad078b752a381d2c","user":{"login":"brunoarueira","id":119518,"node_id":"MDQ6VXNlcjExOTUxOA==","avatar_url":"https://avatars2.githubusercontent.com/u/119518?v=4","gravatar_id":"","url":"https://api.github.com/users/brunoarueira","html_url":"https://github.com/brunoarueira","followers_url":"https://api.github.com/users/brunoarueira/followers","following_url":"https://api.github.com/users/brunoarueira/following{/other_user}","gists_url":"https://api.github.com/users/brunoarueira/gists{/gist_id}","starred_url":"https://api.github.com/users/brunoarueira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brunoarueira/subscriptions","organizations_url":"https://api.github.com/users/brunoarueira/orgs","repos_url":"https://api.github.com/users/brunoarueira/repos","events_url":"https://api.github.com/users/brunoarueira/events{/privacy}","received_events_url":"https://api.github.com/users/brunoarueira/received_events","type":"User","site_admin":false},"repo":{"id":2168928,"node_id":"MDEwOlJlcG9zaXRvcnkyMTY4OTI4","name":"example_mongodb","full_name":"brunoarueira/example_mongodb","private":false,"owner":{"login":"brunoarueira","id":119518,"node_id":"MDQ6VXNlcjExOTUxOA==","avatar_url":"https://avatars2.githubusercontent.com/u/119518?v=4","gravatar_id":"","url":"https://api.github.com/users/brunoarueira","html_url":"https://github.com/brunoarueira","followers_url":"https://api.github.com/users/brunoarueira/followers","following_url":"https://api.github.com/users/brunoarueira/following{/other_user}","gists_url":"https://api.github.com/users/brunoarueira/gists{/gist_id}","starred_url":"https://api.github.com/users/brunoarueira/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/brunoarueira/subscriptions","organizations_url":"https://api.github.com/users/brunoarueira/orgs","repos_url":"https://api.github.com/users/brunoarueira/repos","events_url":"https://api.github.com/users/brunoarueira/events{/privacy}","received_events_url":"https://api.github.com/users/brunoarueira/received_events","type":"User","site_admin":false},"html_url":"https://github.com/brunoarueira/example_mongodb","description":"Example rails app with mongodb using mongomapper","fork":false,"url":"https://api.github.com/repos/brunoarueira/example_mongodb","forks_url":"https://api.github.com/repos/brunoarueira/example_mongodb/forks","keys_url":"https://api.github.com/repos/brunoarueira/example_mongodb/keys{/key_id}","collaborators_url":"https://api.github.com/repos/brunoarueira/example_mongodb/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/brunoarueira/example_mongodb/teams","hooks_url":"https://api.github.com/repos/brunoarueira/example_mongodb/hooks","issue_events_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/events{/number}","events_url":"https://api.github.com/repos/brunoarueira/example_mongodb/events","assignees_url":"https://api.github.com/repos/brunoarueira/example_mongodb/assignees{/user}","branches_url":"https://api.github.com/repos/brunoarueira/example_mongodb/branches{/branch}","tags_url":"https://api.github.com/repos/brunoarueira/example_mongodb/tags","blobs_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/refs{/sha}","trees_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/trees{/sha}","statuses_url":"https://api.github.com/repos/brunoarueira/example_mongodb/statuses/{sha}","languages_url":"https://api.github.com/repos/brunoarueira/example_mongodb/languages","stargazers_url":"https://api.github.com/repos/brunoarueira/example_mongodb/stargazers","contributors_url":"https://api.github.com/repos/brunoarueira/example_mongodb/contributors","subscribers_url":"https://api.github.com/repos/brunoarueira/example_mongodb/subscribers","subscription_url":"https://api.github.com/repos/brunoarueira/example_mongodb/subscription","commits_url":"https://api.github.com/repos/brunoarueira/example_mongodb/commits{/sha}","git_commits_url":"https://api.github.com/repos/brunoarueira/example_mongodb/git/commits{/sha}","comments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/comments{/number}","issue_comment_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/comments{/number}","contents_url":"https://api.github.com/repos/brunoarueira/example_mongodb/contents/{+path}","compare_url":"https://api.github.com/repos/brunoarueira/example_mongodb/compare/{base}...{head}","merges_url":"https://api.github.com/repos/brunoarueira/example_mongodb/merges","archive_url":"https://api.github.com/repos/brunoarueira/example_mongodb/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/brunoarueira/example_mongodb/downloads","issues_url":"https://api.github.com/repos/brunoarueira/example_mongodb/issues{/number}","pulls_url":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls{/number}","milestones_url":"https://api.github.com/repos/brunoarueira/example_mongodb/milestones{/number}","notifications_url":"https://api.github.com/repos/brunoarueira/example_mongodb/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/brunoarueira/example_mongodb/labels{/name}","releases_url":"https://api.github.com/repos/brunoarueira/example_mongodb/releases{/id}","deployments_url":"https://api.github.com/repos/brunoarueira/example_mongodb/deployments","created_at":"2011-08-07T14:35:42Z","updated_at":"2018-10-30T13:57:05Z","pushed_at":"2018-10-30T14:10:28Z","git_url":"git://github.com/brunoarueira/example_mongodb.git","ssh_url":"git@github.com:brunoarueira/example_mongodb.git","clone_url":"https://github.com/brunoarueira/example_mongodb.git","svn_url":"https://github.com/brunoarueira/example_mongodb","homepage":"http://brunoarueira.wordpress.com/2011/08/07/mongodb-mongomapper-and-rails-3/","size":104,"stargazers_count":1,"watchers_count":1,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":4,"license":null,"forks":0,"open_issues":4,"watchers":1,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5"},"html":{"href":"https://github.com/brunoarueira/example_mongodb/pull/5"},"issue":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/5"},"comments":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/issues/5/comments"},"review_comments":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5/comments"},"review_comment":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/pulls/5/commits"},"statuses":{"href":"https://api.github.com/repos/brunoarueira/example_mongodb/statuses/711d83caeffceba1d06fac98e124dd5b96f85366"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":3,"deletions":3,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}