{"action":"created","issue":{"url":"https://api.github.com/repos/le-campus-numerique/socya/issues/124","repository_url":"https://api.github.com/repos/le-campus-numerique/socya","labels_url":"https://api.github.com/repos/le-campus-numerique/socya/issues/124/labels{/name}","comments_url":"https://api.github.com/repos/le-campus-numerique/socya/issues/124/comments","events_url":"https://api.github.com/repos/le-campus-numerique/socya/issues/124/events","html_url":"https://github.com/le-campus-numerique/socya/pull/124","id":449159361,"node_id":"MDExOlB1bGxSZXF1ZXN0MjgyNzQxMzgx","number":124,"title":"[Security] Bump phpoffice/phpspreadsheet from 1.5.0 to 1.7.0","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1380201343,"node_id":"MDU6TGFiZWwxMzgwMjAxMzQz","url":"https://api.github.com/repos/le-campus-numerique/socya/labels/dependencies","name":"dependencies","color":"0366d6","default":false},{"id":1380203029,"node_id":"MDU6TGFiZWwxMzgwMjAzMDI5","url":"https://api.github.com/repos/le-campus-numerique/socya/labels/security","name":"security","color":"ee0701","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-05-28T09:24:35Z","updated_at":"2019-07-01T08:10:27Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/le-campus-numerique/socya/pulls/124","html_url":"https://github.com/le-campus-numerique/socya/pull/124","diff_url":"https://github.com/le-campus-numerique/socya/pull/124.diff","patch_url":"https://github.com/le-campus-numerique/socya/pull/124.patch"},"body":"Bumps [phpoffice/phpspreadsheet](https://github.com/PHPOffice/PhpSpreadsheet) from 1.5.0 to 1.7.0. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The PHP Security Advisories Database](https://github.com/FriendsOfPHP/security-advisories/blob/master/phpoffice/phpspreadsheet/CVE-2018-19277.yaml).*\n\n> **XXE Vulnerability**\n> \n> Affected versions: <=1.5.0\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [phpoffice/phpspreadsheet's releases](https://github.com/PHPOffice/PhpSpreadsheet/releases).*\n\n> ## 1.7.0\n> ### Added\r\n> \r\n> - Added support for inline styles in Html reader (borders, alignment, width, height)\r\n> - QuotedText cells no longer treated as formulae if the content begins with a `=`\r\n> - Clean handling for DDE in formulae\r\n> \r\n> ### Fixed\r\n> \r\n> - Fix handling for escaped enclosures and new lines in CSV Separator Inference\r\n> - Fix MATCH an error was appearing when comparing strings against 0 (always true)\r\n> - Fix wrong calculation of highest column with specified row [#700](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/700)\r\n> - Fix VLOOKUP \r\n> - Fix return type hint\r\n> \n> ## 1.6.0\n> ### Added\r\n> \r\n> - Refactored Matrix Functions to use external Matrix library\r\n> - Possibility to specify custom colors of values for pie and donut charts - [#768](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/768)\r\n> \r\n> ### Fixed\r\n> \r\n> - Improve XLSX parsing speed if no readFilter is applied - [#772](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/772)\r\n> - Fix column names if read filter calls in XLSX reader skip columns - [#777](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/777)\r\n> - Fix LOOKUP function which was breaking on edge cases - [#796](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/796)\r\n> - Fix VLOOKUP with exact matches - [#809](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/809)\r\n> - Support COUNTIFS multiple arguments - [#830](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/830)\r\n> - Change `libxml_disable_entity_loader()` as shortly as possible - [#819](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/819)\r\n> - Improved memory usage and performance when loading large spreadsheets - [#822](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/822)\r\n> - Improved performance when loading large spreadsheets - [#825](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/825)\r\n> - Improved performance when loading large spreadsheets - [#824](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/824)\r\n> - Fix color from CSS when reading from HTML - [#831](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/831) \r\n> - Fix infinite loop when reading invalid ODS files - [#832](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/832) \r\n> - Fix time format for duration is incorrect - [#666](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/pull/666)\r\n> - Fix iconv unsupported `//IGNORE//TRANSLIT` on IBM i - [#791](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/791)\r\n> \r\n> ### Changed\r\n> \r\n> - `master` is the new default branch, `develop` does not exist anymore\r\n> \n> ## 1.5.2\n> ### Security\r\n> \r\n> - Improvements to the design of the XML Security Scanner - [#771](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/771)\r\n> \n> ## 1.5.1\n> ### Security\r\n> \r\n> - Fix and improve XXE security scanning for XML-based and HTML Readers - [#771](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/771)\r\n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [phpoffice/phpspreadsheet's changelog](https://github.com/PHPOffice/PhpSpreadsheet/blob/master/CHANGELOG.PHPExcel.md).*\n\n> ## [1.7.0] - 2009-08-10\n> \n> ### General\n> \n> - Expand documentation: Number formats - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Class 'PHPExcel_Cell_AdvancedValueBinder' not found - [@&#8203;Erik](https://github.com/Erik) Tilt\n> \n> ### Features\n> \n> - Change return type of date functions to PHPExcel_Calculation_Functions::RETURNDATE_EXCEL - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - New RPN and stack-based calculation engine for improved performance of formula calculation - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n>     - Faster (anything between 2 and 12 times faster than the old parser, depending on the complexity and nature of the formula)\n>     - Significantly more memory efficient when formulae reference cells across worksheets\n>     - Correct behaviour when referencing Named Ranges that exist on several worksheets\n>     - Support for Excel ^ (Exponential) and % (Percentage) operators\n>     - Support for matrices within basic arithmetic formulae (e.g. ={1,2,3;4,5,6;7,8,9}/2)\n>     - Better trapping/handling of NaN and infinity results (return #NUM! error)\n>     - Improved handling of empty parameters for Excel functions\n>     - Optional logging of calculation steps- New calculation engine can be accessed independently of workbooks (for use as a standalone calculator) - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Implement more Excel calculation functions - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n>     - Initial implementation of the COUNTIF() and SUMIF() Statistical functions\n>     - Added ACCRINT() Financial function- Modifications to number format handling for dddd and ddd masks in dates, use of thousand separators even when locale only implements it for money, and basic fraction masks (0 ?/? and ?/?) - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Support arbitrary fixed number of decimals in PHPExcel_Style_NumberFormat::toFormattedString() - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Improving performance and memory on data dumps - [@&#8203;Erik](https://github.com/Erik) Tilt\n>     - Various style optimizations (merging from branch wi6857-memory)\n>     - Moving hyperlink and dataValidation properties from cell to worksheet for lower PHP memory usage- Provide fluent interfaces where possible - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Make easy way to apply a border to a rectangular selection - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Support for system window colors in PHPExcel_Reader_Excel5 - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Horizontal center across selection - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Merged cells record, write to full record size in PHPExcel_Writer_Excel5 - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Add page break between sheets in exported PDF - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Sanitization of UTF-8 input for cell values - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Read cached calculated value with PHPExcel_Reader_Excel5 - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Miscellaneous CSS improvements for PHPExcel_Writer_HTML - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - getProperties: setCompany feature request - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Insert worksheet at a specified index - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Change worksheet index - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Readfilter for CSV reader - [@&#8203;MarkBaker](https://github.com/MarkBaker)\n> - Check value of mbstring.func_overload when saving with PHPExcel_Writer_Excel5 - [@&#8203;Erik](https://github.com/Erik) Tilt [CodePlex [#10172](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10172)](https://phpexcel.codeplex.com/workitem/10172)\n> - Eliminate dependency of an include path pointing to class directory - [@&#8203;Erik](https://github.com/Erik) Tilt [CodePlex [#10251](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10251)](https://phpexcel.codeplex.com/workitem/10251)\n> - Method for getting the correct reader for a certain file (contribution) - [@&#8203;Erik](https://github.com/Erik) Tilt [CodePlex [#10292](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10292)](https://phpexcel.codeplex.com/workitem/10292)\n> - Choosing specific row in fromArray method - [@&#8203;Erik](https://github.com/Erik) Tilt [CodePlex [#10287](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10287)](https://phpexcel.codeplex.com/workitem/10287)\n> - Shared formula support in PHPExcel_Reader_Excel5 - [@&#8203;Erik](https://github.com/Erik) Tilt [CodePlex [#10319](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10319)](https://phpexcel.codeplex.com/workitem/10319)\n> \n> ### Bugfixes\n> \n> - Right-to-left column direction in worksheet - [@&#8203;MB](https://github.com/MB),ET [CodePlex [#10345](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/10345)](https://phpexcel.codeplex.com/workitem/10345)\n> - PHPExcel_Reader_Excel5 not reading PHPExcel_Style_NumberFormat::FORMAT_NUMBER ('0') - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Fractional row height in locale other than English results in corrupt output using PHPExcel_Writer_Excel2007 - [@&#8203;Erik](https://github.com/Erik) Tilt\n> - Fractional (decimal) numbers not inserted correctly when locale is other than English - [@&#8203;Erik](https://github.com/Erik) Tilt\n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`84e09df`](https://github.com/PHPOffice/PhpSpreadsheet/commit/84e09df79855ed3da84e2eab6850eb7741d8cbda) 1.7.0\n- [`170671c`](https://github.com/PHPOffice/PhpSpreadsheet/commit/170671c616bfb31cf1684e95583e2749d3823cee) CS Fixes ([#962](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/962))\n- [`37493de`](https://github.com/PHPOffice/PhpSpreadsheet/commit/37493de2344c14ee1023a908e26781d2620daab2) Updated return type ([#880](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/880))\n- [`98d1782`](https://github.com/PHPOffice/PhpSpreadsheet/commit/98d1782bbb4e392d9cd0aab7f896e7c3722083c4) Xls(x) Readers now respect the readBlankCells setting. ([#835](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/835))\n- [`15abdf4`](https://github.com/PHPOffice/PhpSpreadsheet/commit/15abdf43ad978b2ff954b7947e4000041e441b2e) - Create unit test ([#944](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/944))\n- [`ccebf0f`](https://github.com/PHPOffice/PhpSpreadsheet/commit/ccebf0f28882c783b877847143fe996d319398e5) Fix VLOOKUP whose return was impacted by order for a $not_exact_match ([#854](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/854))\n- [`dfd9c5b`](https://github.com/PHPOffice/PhpSpreadsheet/commit/dfd9c5bb3ea85097e70deb53c43c81502f3a4161) Fix \"Xlsx::getArrayItem(): Node no longer exists\" issue ([#931](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/931))\n- [`25c7187`](https://github.com/PHPOffice/PhpSpreadsheet/commit/25c71877277d6e8ccb3d8a12e2e5aad2c7b6d92f) Fix return type hint ([#947](https://github-redirect.dependabot.com/PHPOffice/PhpSpreadsheet/issues/947))\n- [`0dd6e27`](https://github.com/PHPOffice/PhpSpreadsheet/commit/0dd6e27d8f8b4c7963698e5dc8f2864887a54d0a) Conditional formatting - support for Conditional::CONDITION_CONTAINSBLANKS (#...\n- [`8b589c4`](https://github.com/PHPOffice/PhpSpreadsheet/commit/8b589c4ef39dc0aaaba9a82609379308bd85a956) Fix MATCH an error was appearing when comparing strings against 0 (always tru...\n- Additional commits viewable in [compare view](https://github.com/PHPOffice/PhpSpreadsheet/compare/1.5.0...1.7.0)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=phpoffice/phpspreadsheet&package-manager=composer&previous-version=1.5.0&new-version=1.7.0)](https://dependabot.com/compatibility-score.html?dependency-name=phpoffice/phpspreadsheet&package-manager=composer&previous-version=1.5.0&new-version=1.7.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>\n\n[//]: # (dependabot-acquisition-announcement-start)\n\n---\n\n<a href='https://dependabot.com/blog/hello-github/'><img width='376' alt='Dependabot has been acquired by GitHub  🎉' src='https://user-images.githubusercontent.com/20165/58035530-e739b700-7b20-11e9-9d1b-12a7630b84e0.png'></a>\n\n[//]: # (dependabot-acquisition-announcement-end)"},"comment":{"url":"https://api.github.com/repos/le-campus-numerique/socya/issues/comments/507162500","html_url":"https://github.com/le-campus-numerique/socya/pull/124#issuecomment-507162500","issue_url":"https://api.github.com/repos/le-campus-numerique/socya/issues/124","id":507162500,"node_id":"MDEyOklzc3VlQ29tbWVudDUwNzE2MjUwMA==","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2019-07-01T08:10:27Z","updated_at":"2019-07-01T08:10:27Z","author_association":"NONE","body":"Superseded by #139."}}
{"actor":{"display_login":"dependabot-preview"}}