{"action":"created","issue":{"url":"https://api.github.com/repos/sleaz0id/event-manager/issues/3","repository_url":"https://api.github.com/repos/sleaz0id/event-manager","labels_url":"https://api.github.com/repos/sleaz0id/event-manager/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/sleaz0id/event-manager/issues/3/comments","events_url":"https://api.github.com/repos/sleaz0id/event-manager/issues/3/events","html_url":"https://github.com/sleaz0id/event-manager/pull/3","id":540758351,"node_id":"MDExOlB1bGxSZXF1ZXN0MzU1NTI2OTIx","number":3,"title":"Bump rack from 2.0.7 to 2.0.8","user":{"login":"dependabot[bot]","id":49699333,"node_id":"MDM6Qm90NDk2OTkzMzM=","avatar_url":"https://avatars0.githubusercontent.com/in/29110?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1667218621,"node_id":"MDU6TGFiZWwxNjY3MjE4NjIx","url":"https://api.github.com/repos/sleaz0id/event-manager/labels/dependencies","name":"dependencies","color":"0366d6","default":false,"description":"Pull requests that update a dependency file"},{"id":1744637842,"node_id":"MDU6TGFiZWwxNzQ0NjM3ODQy","url":"https://api.github.com/repos/sleaz0id/event-manager/labels/ruby","name":"ruby","color":"ce2d2d","default":false,"description":"Pull requests that update Ruby code"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-12-20T04:53:40Z","updated_at":"2019-12-24T06:52:40Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/sleaz0id/event-manager/pulls/3","html_url":"https://github.com/sleaz0id/event-manager/pull/3","diff_url":"https://github.com/sleaz0id/event-manager/pull/3.diff","patch_url":"https://github.com/sleaz0id/event-manager/pull/3.patch"},"body":"Bumps [rack](https://github.com/rack/rack) from 2.0.7 to 2.0.8.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [rack's changelog](https://github.com/rack/rack/blob/master/CHANGELOG.md).*\n\n> ## [2.0.8] - 2019-12-08\n> \n> - [[CVE-2019-16782](https://nvd.nist.gov/vuln/detail/CVE-2019-16782)] Prevent timing attacks targeted at session ID lookup. ([@&#8203;tenderlove](https://github.com/tenderlove), [@&#8203;rafaelfranca](https://github.com/rafaelfranca))\n> \n> ## [1.6.12] - 2019-12-08\n> \n> - [[CVE-2019-16782](https://nvd.nist.gov/vuln/detail/CVE-2019-16782)] Prevent timing attacks targeted at session ID lookup. ([@&#8203;tenderlove](https://github.com/tenderlove), [@&#8203;rafaelfranca](https://github.com/rafaelfranca))\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`e7ee459`](https://github.com/rack/rack/commit/e7ee459546d217f32afc83e0b168c5eb9f95d784) Bumping version\n- [`f1a79b2`](https://github.com/rack/rack/commit/f1a79b208c4ea877420beee62646e0b146402bd0) Introduce a new base class to avoid breaking when upgrading\n- [`5b1cab6`](https://github.com/rack/rack/commit/5b1cab667270d7ad1a4d2088adf5ff4eb9845496) Add a version prefix to the private id to make easier to migrate old values\n- [`1e96e0f`](https://github.com/rack/rack/commit/1e96e0f197777458216bb3dfdbcce57a0bbba0c5) Fallback to the public id when reading the session in the pool adapter\n- [`3ba123d`](https://github.com/rack/rack/commit/3ba123d278f1085ba78fc000df954e507af2d622) Also drop the session with the public id when destroying sessions\n- [`6a04bbf`](https://github.com/rack/rack/commit/6a04bbf6b742c305d3a56f9bd6242e6c943cc2ad) Fallback to the legacy id when the new id is not found\n- [`dc45a06`](https://github.com/rack/rack/commit/dc45a06b339c707c1f658c123ec7216151878f7a) Add the private id\n- [`73a5f79`](https://github.com/rack/rack/commit/73a5f79f6854eed81ecc3e5fb9f8154e967ccc49) revert conditionals to master\n- [`4e32262`](https://github.com/rack/rack/commit/4e322629e0c6698c75a3fb541a42571f8543c34c) remove NullSession\n- [`1c7e3b2`](https://github.com/rack/rack/commit/1c7e3b259f0741c869dcfbabeb3e0670c4d3f848) remove || raise and get closer to master\n- Additional commits viewable in [compare view](https://github.com/rack/rack/compare/2.0.7...2.0.8)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rack&package-manager=bundler&previous-version=2.0.7&new-version=2.0.8)](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/sleaz0id/event-manager/network/alerts).\n\n</details>"},"comment":{"url":"https://api.github.com/repos/sleaz0id/event-manager/issues/comments/568673136","html_url":"https://github.com/sleaz0id/event-manager/pull/3#issuecomment-568673136","issue_url":"https://api.github.com/repos/sleaz0id/event-manager/issues/3","id":568673136,"node_id":"MDEyOklzc3VlQ29tbWVudDU2ODY3MzEzNg==","user":{"login":"sleaz0id","id":7406028,"node_id":"MDQ6VXNlcjc0MDYwMjg=","avatar_url":"https://avatars3.githubusercontent.com/u/7406028?v=4","gravatar_id":"","url":"https://api.github.com/users/sleaz0id","html_url":"https://github.com/sleaz0id","followers_url":"https://api.github.com/users/sleaz0id/followers","following_url":"https://api.github.com/users/sleaz0id/following{/other_user}","gists_url":"https://api.github.com/users/sleaz0id/gists{/gist_id}","starred_url":"https://api.github.com/users/sleaz0id/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sleaz0id/subscriptions","organizations_url":"https://api.github.com/users/sleaz0id/orgs","repos_url":"https://api.github.com/users/sleaz0id/repos","events_url":"https://api.github.com/users/sleaz0id/events{/privacy}","received_events_url":"https://api.github.com/users/sleaz0id/received_events","type":"User","site_admin":false},"created_at":"2019-12-24T06:52:40Z","updated_at":"2019-12-24T06:52:40Z","author_association":"OWNER","body":"@dependabot rebase"}}
{"actor":{"display_login":"sleaz0id"}}