{"action":"opened","number":1,"pull_request":{"url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1","id":285729186,"node_id":"MDExOlB1bGxSZXF1ZXN0Mjg1NzI5MTg2","html_url":"https://github.com/mateuzor/React-Timeline-Interface/pull/1","diff_url":"https://github.com/mateuzor/React-Timeline-Interface/pull/1.diff","patch_url":"https://github.com/mateuzor/React-Timeline-Interface/pull/1.patch","issue_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/1","number":1,"state":"open","locked":false,"title":"Bump handlebars from 4.0.12 to 4.1.2","user":{"login":"dependabot[bot]","id":49699333,"node_id":"MDM6Qm90NDk2OTkzMzM=","avatar_url":"https://avatars0.githubusercontent.com/in/29110?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.0.12 to 4.1.2.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [handlebars's changelog](https://github.com/wycats/handlebars.js/blob/master/release-notes.md).*\n\n> ## v4.1.2 - April 13th, 2019\n> Chore/Test:\n> - [#1515](https://github-redirect.dependabot.com/wycats/handlebars.js/pull/1515) - Port over linting and test for typings ([@&#8203;zimmi88](https://api.github.com/users/zimmi88))\n> - chore: add missing typescript dependency, add package-lock.json - 594f1e3\n> - test: remove safari from saucelabs - 871accc\n> \n> Bugfixes: \n> - fix: prevent RCE through the \"lookup\"-helper - cd38583\n> \n> Compatibility notes:\n> \n> Access to the constructor of a class thought `{{lookup obj \"constructor\" }}` is now prohibited. This closes \n> a leak that only half closed in versions 4.0.13 and 4.1.0, but it is a slight incompatibility.\n> \n> This kind of access is not the intended use of Handlebars and leads to the vulnerability described\n> in [#1495](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1495). We will **not** increase the major version, because such use is not intended or documented, \n> and because of the potential impact of the issue (we fear that most people won't use a new major version\n> and the issue may not be resolved on many systems). \n> \n> [Commits](https://github.com/wycats/handlebars.js/compare/v4.1.1...v4.1.2)\n> \n> ## v4.1.1 - March 16th, 2019\n> Bugfixes:\n> - fix: add \"runtime.d.ts\" to allow \"require('handlebars/runtime')\" in TypeScript - 5cedd62\n> \n> Refactorings:\n> - replace \"async\" with \"neo-async\" - 048f2ce\n> - use \"substring\"-function instead of \"substr\" - 445ae12\n> \n> Compatibility notes:\n> - This is a bugfix release. There are no breaking change and no new features.\n> \n> \n> [Commits](https://github.com/wycats/handlebars.js/compare/v4.1.0...v4.1.1)\n> \n> ## v4.1.0 - February 7th, 2019\n> New Features\n> \n> - import TypeScript typings - 27ac1ee\n> \n> Security fixes:\n> \n> - disallow access to the constructor in templates to prevent RCE - 42841c4, [#1495](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1495)\n> \n> Housekeeping\n> \n> - chore: fix components/handlebars package.json and auto-update on release - bacd473\n> - chore: Use node 10 to build handlebars - 78dd89c\n> - chore/doc: Add more release docs - 6b87c21\n> \n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`10b5fcf`](https://github.com/wycats/handlebars.js/commit/10b5fcf92e6f3ddcbcec93c05c00cfdbb2e8d303) v4.1.2\n- [`dd0144c`](https://github.com/wycats/handlebars.js/commit/dd0144c77127a6336b66f16415a80a9ba03cd91e) Update release notes\n- [`594f1e3`](https://github.com/wycats/handlebars.js/commit/594f1e30dde4a862ed40a7bad3a5b2db3ed97f3c) chore: add missing typescript dependency, add package-lock.json\n- [`871accc`](https://github.com/wycats/handlebars.js/commit/871acccbb1409c2864b8dfd69d936878ea3458e3) test: remove safari from saucelabs\n- [`cd38583`](https://github.com/wycats/handlebars.js/commit/cd38583216dce3252831916323202749431c773e) fix: prevent RCE through the \"lookup\"-helper\n- [`c454d94`](https://github.com/wycats/handlebars.js/commit/c454d946e355405d2f24d7dd1ca151ff939b206e) Merge pull request [#1515](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1515) from zimmi88/4.x-typings-lint\n- [`9cfb5dd`](https://github.com/wycats/handlebars.js/commit/9cfb5ddad9cbe11e443cb8c5827a83d0ce040423) Merge pull request [#1516](https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1516) from phil-davis/revert-double-release-notes\n- [`be44246`](https://github.com/wycats/handlebars.js/commit/be442462214d37d14bf9a909644d0c4455c0771d) Remove triplicate of v4.0.12 release notes\n- [`002561b`](https://github.com/wycats/handlebars.js/commit/002561be948f79965d7355038ad344ae0a000f38) Revert \"Update release notes\"\n- [`3fb6687`](https://github.com/wycats/handlebars.js/commit/3fb668701363fe85eef7dd8b8fc3e451ae8bd0b9) Port over linting and test for typings\n- Additional commits viewable in [compare view](https://github.com/wycats/handlebars.js/compare/v4.0.12...v4.1.2)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.0.12&new-version=4.1.2)](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\n\n</details>","created_at":"2019-06-06T09:57:45Z","updated_at":"2019-06-06T09:57:45Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1/commits","review_comments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1/comments","review_comment_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/comments{/number}","comments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/1/comments","statuses_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/statuses/8ee55acb82d010eab097f17cfa7334e00c2b1bdf","head":{"label":"mateuzor:dependabot/npm_and_yarn/handlebars-4.1.2","ref":"dependabot/npm_and_yarn/handlebars-4.1.2","sha":"8ee55acb82d010eab097f17cfa7334e00c2b1bdf","user":{"login":"mateuzor","id":36143994,"node_id":"MDQ6VXNlcjM2MTQzOTk0","avatar_url":"https://avatars1.githubusercontent.com/u/36143994?v=4","gravatar_id":"","url":"https://api.github.com/users/mateuzor","html_url":"https://github.com/mateuzor","followers_url":"https://api.github.com/users/mateuzor/followers","following_url":"https://api.github.com/users/mateuzor/following{/other_user}","gists_url":"https://api.github.com/users/mateuzor/gists{/gist_id}","starred_url":"https://api.github.com/users/mateuzor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mateuzor/subscriptions","organizations_url":"https://api.github.com/users/mateuzor/orgs","repos_url":"https://api.github.com/users/mateuzor/repos","events_url":"https://api.github.com/users/mateuzor/events{/privacy}","received_events_url":"https://api.github.com/users/mateuzor/received_events","type":"User","site_admin":false},"repo":{"id":181239514,"node_id":"MDEwOlJlcG9zaXRvcnkxODEyMzk1MTQ=","name":"React-Timeline-Interface","full_name":"mateuzor/React-Timeline-Interface","private":false,"owner":{"login":"mateuzor","id":36143994,"node_id":"MDQ6VXNlcjM2MTQzOTk0","avatar_url":"https://avatars1.githubusercontent.com/u/36143994?v=4","gravatar_id":"","url":"https://api.github.com/users/mateuzor","html_url":"https://github.com/mateuzor","followers_url":"https://api.github.com/users/mateuzor/followers","following_url":"https://api.github.com/users/mateuzor/following{/other_user}","gists_url":"https://api.github.com/users/mateuzor/gists{/gist_id}","starred_url":"https://api.github.com/users/mateuzor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mateuzor/subscriptions","organizations_url":"https://api.github.com/users/mateuzor/orgs","repos_url":"https://api.github.com/users/mateuzor/repos","events_url":"https://api.github.com/users/mateuzor/events{/privacy}","received_events_url":"https://api.github.com/users/mateuzor/received_events","type":"User","site_admin":false},"html_url":"https://github.com/mateuzor/React-Timeline-Interface","description":"Interface frontend de uma timeline para postagem de comentários utilizando a biblioteca React JS.","fork":false,"url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface","forks_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/forks","keys_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/teams","hooks_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/hooks","issue_events_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/events{/number}","events_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/events","assignees_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/assignees{/user}","branches_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/branches{/branch}","tags_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/tags","blobs_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/refs{/sha}","trees_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/statuses/{sha}","languages_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/languages","stargazers_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/stargazers","contributors_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/contributors","subscribers_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/subscribers","subscription_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/subscription","commits_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/commits{/sha}","git_commits_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/commits{/sha}","comments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/comments{/number}","issue_comment_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/comments{/number}","contents_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/contents/{+path}","compare_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/merges","archive_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/downloads","issues_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues{/number}","pulls_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls{/number}","milestones_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/milestones{/number}","notifications_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/labels{/name}","releases_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/releases{/id}","deployments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/deployments","created_at":"2019-04-13T23:36:22Z","updated_at":"2019-04-14T23:10:57Z","pushed_at":"2019-06-06T09:57:44Z","git_url":"git://github.com/mateuzor/React-Timeline-Interface.git","ssh_url":"git@github.com:mateuzor/React-Timeline-Interface.git","clone_url":"https://github.com/mateuzor/React-Timeline-Interface.git","svn_url":"https://github.com/mateuzor/React-Timeline-Interface","homepage":"","size":348,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"base":{"label":"mateuzor:master","ref":"master","sha":"86ca1a84598d8c4e2d1d77b14794c52bebaf778b","user":{"login":"mateuzor","id":36143994,"node_id":"MDQ6VXNlcjM2MTQzOTk0","avatar_url":"https://avatars1.githubusercontent.com/u/36143994?v=4","gravatar_id":"","url":"https://api.github.com/users/mateuzor","html_url":"https://github.com/mateuzor","followers_url":"https://api.github.com/users/mateuzor/followers","following_url":"https://api.github.com/users/mateuzor/following{/other_user}","gists_url":"https://api.github.com/users/mateuzor/gists{/gist_id}","starred_url":"https://api.github.com/users/mateuzor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mateuzor/subscriptions","organizations_url":"https://api.github.com/users/mateuzor/orgs","repos_url":"https://api.github.com/users/mateuzor/repos","events_url":"https://api.github.com/users/mateuzor/events{/privacy}","received_events_url":"https://api.github.com/users/mateuzor/received_events","type":"User","site_admin":false},"repo":{"id":181239514,"node_id":"MDEwOlJlcG9zaXRvcnkxODEyMzk1MTQ=","name":"React-Timeline-Interface","full_name":"mateuzor/React-Timeline-Interface","private":false,"owner":{"login":"mateuzor","id":36143994,"node_id":"MDQ6VXNlcjM2MTQzOTk0","avatar_url":"https://avatars1.githubusercontent.com/u/36143994?v=4","gravatar_id":"","url":"https://api.github.com/users/mateuzor","html_url":"https://github.com/mateuzor","followers_url":"https://api.github.com/users/mateuzor/followers","following_url":"https://api.github.com/users/mateuzor/following{/other_user}","gists_url":"https://api.github.com/users/mateuzor/gists{/gist_id}","starred_url":"https://api.github.com/users/mateuzor/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mateuzor/subscriptions","organizations_url":"https://api.github.com/users/mateuzor/orgs","repos_url":"https://api.github.com/users/mateuzor/repos","events_url":"https://api.github.com/users/mateuzor/events{/privacy}","received_events_url":"https://api.github.com/users/mateuzor/received_events","type":"User","site_admin":false},"html_url":"https://github.com/mateuzor/React-Timeline-Interface","description":"Interface frontend de uma timeline para postagem de comentários utilizando a biblioteca React JS.","fork":false,"url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface","forks_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/forks","keys_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/keys{/key_id}","collaborators_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/teams","hooks_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/hooks","issue_events_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/events{/number}","events_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/events","assignees_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/assignees{/user}","branches_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/branches{/branch}","tags_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/tags","blobs_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/refs{/sha}","trees_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/trees{/sha}","statuses_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/statuses/{sha}","languages_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/languages","stargazers_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/stargazers","contributors_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/contributors","subscribers_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/subscribers","subscription_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/subscription","commits_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/commits{/sha}","git_commits_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/git/commits{/sha}","comments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/comments{/number}","issue_comment_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/comments{/number}","contents_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/contents/{+path}","compare_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/compare/{base}...{head}","merges_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/merges","archive_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/downloads","issues_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues{/number}","pulls_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls{/number}","milestones_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/milestones{/number}","notifications_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/labels{/name}","releases_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/releases{/id}","deployments_url":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/deployments","created_at":"2019-04-13T23:36:22Z","updated_at":"2019-04-14T23:10:57Z","pushed_at":"2019-06-06T09:57:44Z","git_url":"git://github.com/mateuzor/React-Timeline-Interface.git","ssh_url":"git@github.com:mateuzor/React-Timeline-Interface.git","clone_url":"https://github.com/mateuzor/React-Timeline-Interface.git","svn_url":"https://github.com/mateuzor/React-Timeline-Interface","homepage":"","size":348,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1"},"html":{"href":"https://github.com/mateuzor/React-Timeline-Interface/pull/1"},"issue":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/1"},"comments":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/issues/1/comments"},"review_comments":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1/comments"},"review_comment":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/pulls/1/commits"},"statuses":{"href":"https://api.github.com/repos/mateuzor/React-Timeline-Interface/statuses/8ee55acb82d010eab097f17cfa7334e00c2b1bdf"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":24,"deletions":10,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}