{"action":"closed","number":1,"pull_request":{"url":"https://api.github.com/repos/whj1995/toy/pulls/1","id":309370177,"node_id":"MDExOlB1bGxSZXF1ZXN0MzA5MzcwMTc3","html_url":"https://github.com/whj1995/toy/pull/1","diff_url":"https://github.com/whj1995/toy/pull/1.diff","patch_url":"https://github.com/whj1995/toy/pull/1.patch","issue_url":"https://api.github.com/repos/whj1995/toy/issues/1","number":1,"state":"closed","locked":false,"title":"Bump react-dom from 16.4.1 to 16.4.2 in /flux","user":{"login":"dependabot[bot]","id":49699333,"node_id":"MDM6Qm90NDk2OTkzMzM=","avatar_url":"https://avatars0.githubusercontent.com/in/29110?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) from 16.4.1 to 16.4.2.\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [react-dom's releases](https://github.com/facebook/react/releases).*\n\n> ## v16.4.2\n> ## 16.4.2 (August 1, 2018)\r\n> \r\n> ### React DOM Server\r\n> \r\n> * Fix a [potential XSS vulnerability when the attacker controls an attribute name](https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html) (`CVE-2018-6341`). This fix is available in the latest `react-dom@16.4.2`, as well as in previous affected minor versions: `react-dom@16.0.1`, `react-dom@16.1.2`, `react-dom@16.2.1`, and `react-dom@16.3.3`. ([@&#8203;gaearon](https://github.com/gaearon) in [#13302](https://github-redirect.dependabot.com/facebook/react/pull/13302))\r\n> \r\n> * Fix a crash in the server renderer when an attribute is called `hasOwnProperty`. This fix is only available in `react-dom@16.4.2`. ([@&#8203;gaearon](https://github.com/gaearon) in [#13303](https://github-redirect.dependabot.com/facebook/react/pull/13303))\r\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [react-dom's changelog](https://github.com/facebook/react/blob/master/CHANGELOG.md).*\n\n> ## 16.4.2 (August 1, 2018)\n> \n> ### React DOM Server\n> \n> * Fix a [potential XSS vulnerability when the attacker controls an attribute name](https://reactjs.org/blog/2018/08/01/react-v-16-4-2.html) (`CVE-2018-6341`). This fix is available in the latest `react-dom@16.4.2`, as well as in previous affected minor versions: `react-dom@16.0.1`, `react-dom@16.1.2`, `react-dom@16.2.1`, and `react-dom@16.3.3`. ([@&#8203;gaearon](https://github.com/gaearon) in [#13302](https://github-redirect.dependabot.com/facebook/react/pull/13302))\n> \n> * Fix a crash in the server renderer when an attribute is called `hasOwnProperty`. This fix is only available in `react-dom@16.4.2`. ([@&#8203;gaearon](https://github.com/gaearon) in [#13303](https://github-redirect.dependabot.com/facebook/react/pull/13303))\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`54adb26`](https://github.com/facebook/react/commit/54adb2674afe16ec603e0c54bf46ccf1afa42308) 16.4.2\n- [`d922ed2`](https://github.com/facebook/react/commit/d922ed2cf2fadf2578a1379be3bb89430e7ceb0c) Fix SSR crash on a hasOwnProperty attribute\n- [`5b19684`](https://github.com/facebook/react/commit/5b19684fc3eddb44a790f31804707de9234147c7) Sanitize unknown attribute names for SSR\n- See full diff in [compare view](https://github.com/facebook/react/commits/v16.4.2/packages/react-dom)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=react-dom&package-manager=npm_and_yarn&previous-version=16.4.1&new-version=16.4.2)](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/whj1995/Toy/network/alerts).\n\n</details>","created_at":"2019-08-21T07:56:50Z","updated_at":"2019-08-21T13:19:47Z","closed_at":"2019-08-21T13:19:47Z","merged_at":null,"merge_commit_sha":"fe7d32951a72b64e8c1cecd8f60c4f571f0d2749","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1511280943,"node_id":"MDU6TGFiZWwxNTExMjgwOTQz","url":"https://api.github.com/repos/whj1995/toy/labels/dependencies","name":"dependencies","color":"0366d6","default":false}],"milestone":null,"commits_url":"https://api.github.com/repos/whj1995/toy/pulls/1/commits","review_comments_url":"https://api.github.com/repos/whj1995/toy/pulls/1/comments","review_comment_url":"https://api.github.com/repos/whj1995/toy/pulls/comments{/number}","comments_url":"https://api.github.com/repos/whj1995/toy/issues/1/comments","statuses_url":"https://api.github.com/repos/whj1995/toy/statuses/4d1e8979944eb5a6d3f169ab11694cd41bff091e","head":{"label":"whj1995:dependabot/npm_and_yarn/flux/react-dom-16.4.2","ref":"dependabot/npm_and_yarn/flux/react-dom-16.4.2","sha":"4d1e8979944eb5a6d3f169ab11694cd41bff091e","user":{"login":"whj1995","id":22634735,"node_id":"MDQ6VXNlcjIyNjM0NzM1","avatar_url":"https://avatars2.githubusercontent.com/u/22634735?v=4","gravatar_id":"","url":"https://api.github.com/users/whj1995","html_url":"https://github.com/whj1995","followers_url":"https://api.github.com/users/whj1995/followers","following_url":"https://api.github.com/users/whj1995/following{/other_user}","gists_url":"https://api.github.com/users/whj1995/gists{/gist_id}","starred_url":"https://api.github.com/users/whj1995/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whj1995/subscriptions","organizations_url":"https://api.github.com/users/whj1995/orgs","repos_url":"https://api.github.com/users/whj1995/repos","events_url":"https://api.github.com/users/whj1995/events{/privacy}","received_events_url":"https://api.github.com/users/whj1995/received_events","type":"User","site_admin":false},"repo":{"id":203534873,"node_id":"MDEwOlJlcG9zaXRvcnkyMDM1MzQ4NzM=","name":"toy","full_name":"whj1995/toy","private":false,"owner":{"login":"whj1995","id":22634735,"node_id":"MDQ6VXNlcjIyNjM0NzM1","avatar_url":"https://avatars2.githubusercontent.com/u/22634735?v=4","gravatar_id":"","url":"https://api.github.com/users/whj1995","html_url":"https://github.com/whj1995","followers_url":"https://api.github.com/users/whj1995/followers","following_url":"https://api.github.com/users/whj1995/following{/other_user}","gists_url":"https://api.github.com/users/whj1995/gists{/gist_id}","starred_url":"https://api.github.com/users/whj1995/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whj1995/subscriptions","organizations_url":"https://api.github.com/users/whj1995/orgs","repos_url":"https://api.github.com/users/whj1995/repos","events_url":"https://api.github.com/users/whj1995/events{/privacy}","received_events_url":"https://api.github.com/users/whj1995/received_events","type":"User","site_admin":false},"html_url":"https://github.com/whj1995/toy","description":"toy projects","fork":false,"url":"https://api.github.com/repos/whj1995/toy","forks_url":"https://api.github.com/repos/whj1995/toy/forks","keys_url":"https://api.github.com/repos/whj1995/toy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/whj1995/toy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/whj1995/toy/teams","hooks_url":"https://api.github.com/repos/whj1995/toy/hooks","issue_events_url":"https://api.github.com/repos/whj1995/toy/issues/events{/number}","events_url":"https://api.github.com/repos/whj1995/toy/events","assignees_url":"https://api.github.com/repos/whj1995/toy/assignees{/user}","branches_url":"https://api.github.com/repos/whj1995/toy/branches{/branch}","tags_url":"https://api.github.com/repos/whj1995/toy/tags","blobs_url":"https://api.github.com/repos/whj1995/toy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/whj1995/toy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/whj1995/toy/git/refs{/sha}","trees_url":"https://api.github.com/repos/whj1995/toy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/whj1995/toy/statuses/{sha}","languages_url":"https://api.github.com/repos/whj1995/toy/languages","stargazers_url":"https://api.github.com/repos/whj1995/toy/stargazers","contributors_url":"https://api.github.com/repos/whj1995/toy/contributors","subscribers_url":"https://api.github.com/repos/whj1995/toy/subscribers","subscription_url":"https://api.github.com/repos/whj1995/toy/subscription","commits_url":"https://api.github.com/repos/whj1995/toy/commits{/sha}","git_commits_url":"https://api.github.com/repos/whj1995/toy/git/commits{/sha}","comments_url":"https://api.github.com/repos/whj1995/toy/comments{/number}","issue_comment_url":"https://api.github.com/repos/whj1995/toy/issues/comments{/number}","contents_url":"https://api.github.com/repos/whj1995/toy/contents/{+path}","compare_url":"https://api.github.com/repos/whj1995/toy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/whj1995/toy/merges","archive_url":"https://api.github.com/repos/whj1995/toy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/whj1995/toy/downloads","issues_url":"https://api.github.com/repos/whj1995/toy/issues{/number}","pulls_url":"https://api.github.com/repos/whj1995/toy/pulls{/number}","milestones_url":"https://api.github.com/repos/whj1995/toy/milestones{/number}","notifications_url":"https://api.github.com/repos/whj1995/toy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/whj1995/toy/labels{/name}","releases_url":"https://api.github.com/repos/whj1995/toy/releases{/id}","deployments_url":"https://api.github.com/repos/whj1995/toy/deployments","created_at":"2019-08-21T07:54:08Z","updated_at":"2019-08-21T13:18:01Z","pushed_at":"2019-08-21T13:19:46Z","git_url":"git://github.com/whj1995/toy.git","ssh_url":"git@github.com:whj1995/toy.git","clone_url":"https://github.com/whj1995/toy.git","svn_url":"https://github.com/whj1995/toy","homepage":"","size":1037,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":2,"license":null,"forks":0,"open_issues":2,"watchers":0,"default_branch":"master"}},"base":{"label":"whj1995:master","ref":"master","sha":"3d201c28b9cd028a53f955323c9f32084ce6b0be","user":{"login":"whj1995","id":22634735,"node_id":"MDQ6VXNlcjIyNjM0NzM1","avatar_url":"https://avatars2.githubusercontent.com/u/22634735?v=4","gravatar_id":"","url":"https://api.github.com/users/whj1995","html_url":"https://github.com/whj1995","followers_url":"https://api.github.com/users/whj1995/followers","following_url":"https://api.github.com/users/whj1995/following{/other_user}","gists_url":"https://api.github.com/users/whj1995/gists{/gist_id}","starred_url":"https://api.github.com/users/whj1995/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whj1995/subscriptions","organizations_url":"https://api.github.com/users/whj1995/orgs","repos_url":"https://api.github.com/users/whj1995/repos","events_url":"https://api.github.com/users/whj1995/events{/privacy}","received_events_url":"https://api.github.com/users/whj1995/received_events","type":"User","site_admin":false},"repo":{"id":203534873,"node_id":"MDEwOlJlcG9zaXRvcnkyMDM1MzQ4NzM=","name":"toy","full_name":"whj1995/toy","private":false,"owner":{"login":"whj1995","id":22634735,"node_id":"MDQ6VXNlcjIyNjM0NzM1","avatar_url":"https://avatars2.githubusercontent.com/u/22634735?v=4","gravatar_id":"","url":"https://api.github.com/users/whj1995","html_url":"https://github.com/whj1995","followers_url":"https://api.github.com/users/whj1995/followers","following_url":"https://api.github.com/users/whj1995/following{/other_user}","gists_url":"https://api.github.com/users/whj1995/gists{/gist_id}","starred_url":"https://api.github.com/users/whj1995/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/whj1995/subscriptions","organizations_url":"https://api.github.com/users/whj1995/orgs","repos_url":"https://api.github.com/users/whj1995/repos","events_url":"https://api.github.com/users/whj1995/events{/privacy}","received_events_url":"https://api.github.com/users/whj1995/received_events","type":"User","site_admin":false},"html_url":"https://github.com/whj1995/toy","description":"toy projects","fork":false,"url":"https://api.github.com/repos/whj1995/toy","forks_url":"https://api.github.com/repos/whj1995/toy/forks","keys_url":"https://api.github.com/repos/whj1995/toy/keys{/key_id}","collaborators_url":"https://api.github.com/repos/whj1995/toy/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/whj1995/toy/teams","hooks_url":"https://api.github.com/repos/whj1995/toy/hooks","issue_events_url":"https://api.github.com/repos/whj1995/toy/issues/events{/number}","events_url":"https://api.github.com/repos/whj1995/toy/events","assignees_url":"https://api.github.com/repos/whj1995/toy/assignees{/user}","branches_url":"https://api.github.com/repos/whj1995/toy/branches{/branch}","tags_url":"https://api.github.com/repos/whj1995/toy/tags","blobs_url":"https://api.github.com/repos/whj1995/toy/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/whj1995/toy/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/whj1995/toy/git/refs{/sha}","trees_url":"https://api.github.com/repos/whj1995/toy/git/trees{/sha}","statuses_url":"https://api.github.com/repos/whj1995/toy/statuses/{sha}","languages_url":"https://api.github.com/repos/whj1995/toy/languages","stargazers_url":"https://api.github.com/repos/whj1995/toy/stargazers","contributors_url":"https://api.github.com/repos/whj1995/toy/contributors","subscribers_url":"https://api.github.com/repos/whj1995/toy/subscribers","subscription_url":"https://api.github.com/repos/whj1995/toy/subscription","commits_url":"https://api.github.com/repos/whj1995/toy/commits{/sha}","git_commits_url":"https://api.github.com/repos/whj1995/toy/git/commits{/sha}","comments_url":"https://api.github.com/repos/whj1995/toy/comments{/number}","issue_comment_url":"https://api.github.com/repos/whj1995/toy/issues/comments{/number}","contents_url":"https://api.github.com/repos/whj1995/toy/contents/{+path}","compare_url":"https://api.github.com/repos/whj1995/toy/compare/{base}...{head}","merges_url":"https://api.github.com/repos/whj1995/toy/merges","archive_url":"https://api.github.com/repos/whj1995/toy/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/whj1995/toy/downloads","issues_url":"https://api.github.com/repos/whj1995/toy/issues{/number}","pulls_url":"https://api.github.com/repos/whj1995/toy/pulls{/number}","milestones_url":"https://api.github.com/repos/whj1995/toy/milestones{/number}","notifications_url":"https://api.github.com/repos/whj1995/toy/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/whj1995/toy/labels{/name}","releases_url":"https://api.github.com/repos/whj1995/toy/releases{/id}","deployments_url":"https://api.github.com/repos/whj1995/toy/deployments","created_at":"2019-08-21T07:54:08Z","updated_at":"2019-08-21T13:18:01Z","pushed_at":"2019-08-21T13:19:46Z","git_url":"git://github.com/whj1995/toy.git","ssh_url":"git@github.com:whj1995/toy.git","clone_url":"https://github.com/whj1995/toy.git","svn_url":"https://github.com/whj1995/toy","homepage":"","size":1037,"stargazers_count":0,"watchers_count":0,"language":"JavaScript","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":2,"license":null,"forks":0,"open_issues":2,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/whj1995/toy/pulls/1"},"html":{"href":"https://github.com/whj1995/toy/pull/1"},"issue":{"href":"https://api.github.com/repos/whj1995/toy/issues/1"},"comments":{"href":"https://api.github.com/repos/whj1995/toy/issues/1/comments"},"review_comments":{"href":"https://api.github.com/repos/whj1995/toy/pulls/1/comments"},"review_comment":{"href":"https://api.github.com/repos/whj1995/toy/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/whj1995/toy/pulls/1/commits"},"statuses":{"href":"https://api.github.com/repos/whj1995/toy/statuses/4d1e8979944eb5a6d3f169ab11694cd41bff091e"}},"author_association":"NONE","merged":false,"mergeable":false,"rebaseable":false,"mergeable_state":"dirty","merged_by":null,"comments":1,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":4,"deletions":4,"changed_files":2}}
{"actor":{"display_login":"dependabot"}}