{"action":"opened","number":449,"pull_request":{"url":"https://api.github.com/repos/ualbertalib/avalon/pulls/449","id":272445861,"node_id":"MDExOlB1bGxSZXF1ZXN0MjcyNDQ1ODYx","html_url":"https://github.com/ualbertalib/avalon/pull/449","diff_url":"https://github.com/ualbertalib/avalon/pull/449.diff","patch_url":"https://github.com/ualbertalib/avalon/pull/449.patch","issue_url":"https://api.github.com/repos/ualbertalib/avalon/issues/449","number":449,"state":"open","locked":false,"title":"[Security] Bump nokogiri from 1.8.2 to 1.10.3","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.8.2 to 1.10.3. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-8048.yml).*\n\n> **Revert libxml2 behavior in Nokogiri gem that could cause XSS**\n> [MRI] Behavior in libxml2 has been reverted which caused\n> CVE-2018-8048 (loofah gem), CVE-2018-3740 (sanitize gem), and\n> CVE-2018-3741 (rails-html-sanitizer gem). The commit in question is\n> here:\n> \n> https://github.com/GNOME/libxml2/commit/960f0e2\n> \n> and more information is available about this commit and its impact\n> here:\n> \n> [#144](https://github-redirect.dependabot.com/flavorjones/loofah/issues/144)\n> \n> This release simply reverts the libxml2 commit in question to protect\n> users of Nokogiri's vendored libraries from similar vulnerabilities.\n> \n> If you're offended by what happened here, I'd kindly ask that you\n> comment on the upstream bug report here:\n> \n> https://bugzilla.gnome.org/show_bug.cgi?id=769760\n> \n> Patched versions: >= 1.8.3\n> Unaffected versions: none\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2018-14404.yml).*\n\n> **Nokogiri gem, via libxml2, is affected by multiple vulnerabilities**\n> Nokogiri 1.8.5 has been released.\n> \n> This is a security and bugfix release. It addresses two CVEs in upstream\n> libxml2 rated as \"medium\" by Red Hat, for which details are below.\n> \n> If you're using your distro's system libraries, rather than Nokogiri's\n> vendored libraries, there's no security need to upgrade at this time,\n> though you may want to check with your distro whether they've patched this\n> (Canonical has patched Ubuntu packages). Note that these patches are not\n> yet (as of 2018-10-04) in an upstream release of libxml2.\n> \n> Full details about the security update are available in Github Issue #1785.\n> [#1785]: [#1785](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1785)\n> \n> -----\n> \n> [MRI] Pulled in upstream patches from libxml2 that address CVE-2018-14404\n> and CVE-2018-14567. Full details are available in #1785. Note that these\n> patches are not yet (as of 2018-10-04) in an upstream release of libxml2.\n> \n></tr></table> ... (truncated)\n> \n> Patched versions: >= 1.8.5\n> Unaffected versions: none\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-11068.yml).*\n\n> **Nokogiri gem, via libxslt, is affected by improper access control vulnerability**\n> Nokogiri v1.10.3 has been released.\n> \n> This is a security release. It addresses a CVE in upstream libxslt rated as\n> \"Priority: medium\" by Canonical, and \"NVD Severity: high\" by Debian. More\n> details are available below.\n> \n> If you're using your distro's system libraries, rather than Nokogiri's\n> vendored libraries, there's no security need to upgrade at this time, though\n> you may want to check with your distro whether they've patched this\n> (Canonical has patched Ubuntu packages). Note that this patch is not yet (as\n> of 2019-04-22) in an upstream release of libxslt.\n> \n> Full details about the security update are available in Github Issue\n> [#1892] https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1892.\n> \n> ---\n> \n> CVE-2019-11068\n> \n> Permalinks are:\n></tr></table> ... (truncated)\n> \n> Patched versions: >= 1.10.3\n> Unaffected versions: none\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [nokogiri's releases](https://github.com/sparklemotion/nokogiri/releases).*\n\n> ## 1.10.3 / 2019-04-22\r\n> \r\n> ### Security Notes\r\n> \r\n> [MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in [#1892](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1892). Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt.\r\n> \n> ## 1.10.2 / 2019-03-24\r\n> \r\n> ### Security\r\n> \r\n> * [MRI] Remove support from vendored libxml2 for future script macros. [#1871]\r\n> * [MRI] Remove support from vendored libxml2 for server-side includes within attributes. [#1877]\r\n> \r\n> \r\n> ### Bug fixes\r\n> \r\n> * [JRuby] Fix node ownership in duplicated documents. [#1060]\r\n> * [JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, [#1872](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1872)] (Thanks, [@&#8203;adjam](https://github.com/adjam)!)\r\n> \r\n> \r\n> \n> ## 1.10.1 / 2019-01-13\r\n> \r\n> ### Features\r\n> \r\n> * [MRI] During installation, handle Xcode 10's new library pathOS. [#1801, [#1851](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1851)] (Thanks, [@&#8203;mlj](https://github.com/mlj) and [@&#8203;deepj](https://github.com/deepj)!)\r\n> * Avoid unnecessary creation of `Proc`s in many methods. [#1776] (Thanks, [@&#8203;chopraanmol1](https://github.com/chopraanmol1)!)\r\n> \r\n> \r\n> ### Bug fixes\r\n> \r\n> * CSS selector `:has()` now correctly matches against any descendant. Previously this selector matched against only direct children). [#350] (Thanks, [@&#8203;Phrogz](https://github.com/Phrogz)!)\r\n> * `NodeSet#attr` now returns `nil` if it's empty. Previously this raised a NoMethodError.\r\n> * [MRI] XPath errors are no longer suppressed during `XSLT::Stylesheet#transform`. Previously these errors were suppressed which led to silent failures and a subsequent segfault. [#1802]\r\n> \r\n> \r\n> \n> ## 1.10.0 / 2019-01-04\r\n> \r\n> ### Features\r\n> \r\n> * [MRI] Cross-built Windows gems now support Ruby 2.6 [#1842, [#1850](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1850)]\r\n> \r\n> \r\n> ### Backwards incompatibilities\r\n> \r\n> This release ends support for:\r\n> \r\n> * Ruby 2.2, for which [official support ended on 2018-03-31](https://www.ruby-lang.org/en/news/2018/06/20/support-of-ruby-2-2-has-ended/) [#1841]\r\n> * JRuby 1.7, for which [official support ended on 2017-11-21](https://github-redirect.dependabot.com/jruby/jruby/issues/4112) [#1741]\r\n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [nokogiri's changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md).*\n\n> ## 1.10.3 / 2019-04-22\n> \n> ### Security Notes\n> \n> [MRI] Pulled in upstream patch from libxslt that addresses CVE-2019-11068. Full details are available in [#1892](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1892). Note that this patch is not yet (as of 2019-04-22) in an upstream release of libxslt.\n> \n> \n> ## 1.10.2 / 2019-03-24\n> \n> ### Security\n> \n> * [MRI] Remove support from vendored libxml2 for future script macros. [#1871]\n> * [MRI] Remove support from vendored libxml2 for server-side includes within attributes. [#1877]\n> \n> \n> ### Bug fixes\n> \n> * [JRuby] Fix node ownership in duplicated documents. [#1060]\n> * [JRuby] Rethrow exceptions caught by Java SAX handler. [#1847, [#1872](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1872)] (Thanks, [@&#8203;adjam](https://github.com/adjam)!)\n> \n> \n> ## 1.10.1 / 2019-01-13\n> \n> ### Features\n> \n> * [MRI] During installation, handle Xcode 10's new library path. [#1801, [#1851](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1851)] (Thanks, [@&#8203;mlj](https://github.com/mlj) and [@&#8203;deepj](https://github.com/deepj)!)\n> * Avoid unnecessary creation of `Proc`s in many methods. [#1776] (Thanks, [@&#8203;chopraanmol1](https://github.com/chopraanmol1)!)\n> \n> \n> ### Bug fixes\n> \n> * CSS selector `:has()` now correctly matches against any descendant. Previously this selector matched against only direct children). [#350] (Thanks, [@&#8203;Phrogz](https://github.com/Phrogz)!)\n> * `NodeSet#attr` now returns `nil` if it's empty. Previously this raised a NoMethodError.\n> * [MRI] XPath errors are no longer suppressed during `XSLT::Stylesheet#transform`. Previously these errors were suppressed which led to silent failures and a subsequent segfault. [#1802]\n> \n> \n> ## 1.10.0 / 2019-01-04\n> \n> ### Features\n> \n> * [MRI] Cross-built Windows gems now support Ruby 2.6 [#1842, [#1850](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1850)]\n> \n> \n> ### Backwards incompatibilities\n> \n> This release ends support for:\n> \n> * Ruby 2.2, for which [official support ended on 2018-03-31](https://www.ruby-lang.org/en/news/2018/06/20/support-of-ruby-2-2-has-ended/) [#1841]\n> * JRuby 1.7, for which [official support ended on 2017-11-21](https://github-redirect.dependabot.com/jruby/jruby/issues/4112) [#1741]\n> \n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`8e24af5`](https://github.com/sparklemotion/nokogiri/commit/8e24af59af22c0bf61376d8c9ae6a85e5b2ba3bd) version bump to v1.10.3\n- [`d31f742`](https://github.com/sparklemotion/nokogiri/commit/d31f74291b9c8484d32b66b3b174ca84bdff58ec) Merge pull request [#1898](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1898) from sparklemotion/1892-libxslt-patch-for-usn-3947\n- [`fe034ae`](https://github.com/sparklemotion/nokogiri/commit/fe034aedcc59b566740567d621843731686676b9) Backport libxslt patch for CVE-2019-11068\n- [`6dfce6b`](https://github.com/sparklemotion/nokogiri/commit/6dfce6ba2befad06cd8a8b2d173fbcb15e412058) Merge branch 'concourse-icons'\n- [`349edaf`](https://github.com/sparklemotion/nokogiri/commit/349edaf3bfc667bdfc4ddc210daae97522bea9ef) ci: add icons to concourse resources\n- [`93d1a80`](https://github.com/sparklemotion/nokogiri/commit/93d1a80a154f33a925f2b7d3a127add194cc763c) version bump to v1.10.2\n- [`00d4023`](https://github.com/sparklemotion/nokogiri/commit/00d4023c6451023c5abae1e28ef5e9f288892638) ci: ensure gem-test will work for java\n- [`9224158`](https://github.com/sparklemotion/nokogiri/commit/92241586357e11518a2cde9e045da92b78c73792) refining valgrind suppressions for ruby 2.6\n- [`2340bd7`](https://github.com/sparklemotion/nokogiri/commit/2340bd77fe2f45e1acd3d4dae4a58416d34af41d) Merge pull request [#1880](https://github-redirect.dependabot.com/sparklemotion/nokogiri/issues/1880) from larskanis/adjust-test-class-name\n- [`528f076`](https://github.com/sparklemotion/nokogiri/commit/528f076f4fc8aeaeb651bdd43feed358d8333b5a) update README with Appveyor badge\n- Additional commits viewable in [compare view](https://github.com/sparklemotion/nokogiri/compare/v1.8.2...v1.10.3)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=nokogiri&package-manager=bundler&previous-version=1.8.2&new-version=1.10.3)](https://dependabot.com/compatibility-score.html?dependency-name=nokogiri&package-manager=bundler&previous-version=1.8.2&new-version=1.10.3)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n**Note:** This repo was added to Dependabot recently, so you'll receive a maximum of 5 PRs for your first few update runs. Once an update run creates fewer than 5 PRs we'll remove that limit.\n\nYou can always request more updates by clicking `Bump now` in your [Dependabot dashboard](https://app.dependabot.com).\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2019-04-22T17:56:19Z","updated_at":"2019-04-22T17:56:19Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/ualbertalib/avalon/pulls/449/commits","review_comments_url":"https://api.github.com/repos/ualbertalib/avalon/pulls/449/comments","review_comment_url":"https://api.github.com/repos/ualbertalib/avalon/pulls/comments{/number}","comments_url":"https://api.github.com/repos/ualbertalib/avalon/issues/449/comments","statuses_url":"https://api.github.com/repos/ualbertalib/avalon/statuses/39c85f06429e22d4e58c5c74fa4e37ec0cb4bfa0","head":{"label":"ualbertalib:dependabot/bundler/nokogiri-1.10.3","ref":"dependabot/bundler/nokogiri-1.10.3","sha":"39c85f06429e22d4e58c5c74fa4e37ec0cb4bfa0","user":{"login":"ualbertalib","id":2856757,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4NTY3NTc=","avatar_url":"https://avatars3.githubusercontent.com/u/2856757?v=4","gravatar_id":"","url":"https://api.github.com/users/ualbertalib","html_url":"https://github.com/ualbertalib","followers_url":"https://api.github.com/users/ualbertalib/followers","following_url":"https://api.github.com/users/ualbertalib/following{/other_user}","gists_url":"https://api.github.com/users/ualbertalib/gists{/gist_id}","starred_url":"https://api.github.com/users/ualbertalib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ualbertalib/subscriptions","organizations_url":"https://api.github.com/users/ualbertalib/orgs","repos_url":"https://api.github.com/users/ualbertalib/repos","events_url":"https://api.github.com/users/ualbertalib/events{/privacy}","received_events_url":"https://api.github.com/users/ualbertalib/received_events","type":"Organization","site_admin":false},"repo":{"id":44204376,"node_id":"MDEwOlJlcG9zaXRvcnk0NDIwNDM3Ng==","name":"avalon","full_name":"ualbertalib/avalon","private":false,"owner":{"login":"ualbertalib","id":2856757,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4NTY3NTc=","avatar_url":"https://avatars3.githubusercontent.com/u/2856757?v=4","gravatar_id":"","url":"https://api.github.com/users/ualbertalib","html_url":"https://github.com/ualbertalib","followers_url":"https://api.github.com/users/ualbertalib/followers","following_url":"https://api.github.com/users/ualbertalib/following{/other_user}","gists_url":"https://api.github.com/users/ualbertalib/gists{/gist_id}","starred_url":"https://api.github.com/users/ualbertalib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ualbertalib/subscriptions","organizations_url":"https://api.github.com/users/ualbertalib/orgs","repos_url":"https://api.github.com/users/ualbertalib/repos","events_url":"https://api.github.com/users/ualbertalib/events{/privacy}","received_events_url":"https://api.github.com/users/ualbertalib/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/ualbertalib/avalon","description":"University of Alberta's Media Repository based on Avalon","fork":true,"url":"https://api.github.com/repos/ualbertalib/avalon","forks_url":"https://api.github.com/repos/ualbertalib/avalon/forks","keys_url":"https://api.github.com/repos/ualbertalib/avalon/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ualbertalib/avalon/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ualbertalib/avalon/teams","hooks_url":"https://api.github.com/repos/ualbertalib/avalon/hooks","issue_events_url":"https://api.github.com/repos/ualbertalib/avalon/issues/events{/number}","events_url":"https://api.github.com/repos/ualbertalib/avalon/events","assignees_url":"https://api.github.com/repos/ualbertalib/avalon/assignees{/user}","branches_url":"https://api.github.com/repos/ualbertalib/avalon/branches{/branch}","tags_url":"https://api.github.com/repos/ualbertalib/avalon/tags","blobs_url":"https://api.github.com/repos/ualbertalib/avalon/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ualbertalib/avalon/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ualbertalib/avalon/git/refs{/sha}","trees_url":"https://api.github.com/repos/ualbertalib/avalon/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ualbertalib/avalon/statuses/{sha}","languages_url":"https://api.github.com/repos/ualbertalib/avalon/languages","stargazers_url":"https://api.github.com/repos/ualbertalib/avalon/stargazers","contributors_url":"https://api.github.com/repos/ualbertalib/avalon/contributors","subscribers_url":"https://api.github.com/repos/ualbertalib/avalon/subscribers","subscription_url":"https://api.github.com/repos/ualbertalib/avalon/subscription","commits_url":"https://api.github.com/repos/ualbertalib/avalon/commits{/sha}","git_commits_url":"https://api.github.com/repos/ualbertalib/avalon/git/commits{/sha}","comments_url":"https://api.github.com/repos/ualbertalib/avalon/comments{/number}","issue_comment_url":"https://api.github.com/repos/ualbertalib/avalon/issues/comments{/number}","contents_url":"https://api.github.com/repos/ualbertalib/avalon/contents/{+path}","compare_url":"https://api.github.com/repos/ualbertalib/avalon/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ualbertalib/avalon/merges","archive_url":"https://api.github.com/repos/ualbertalib/avalon/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ualbertalib/avalon/downloads","issues_url":"https://api.github.com/repos/ualbertalib/avalon/issues{/number}","pulls_url":"https://api.github.com/repos/ualbertalib/avalon/pulls{/number}","milestones_url":"https://api.github.com/repos/ualbertalib/avalon/milestones{/number}","notifications_url":"https://api.github.com/repos/ualbertalib/avalon/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ualbertalib/avalon/labels{/name}","releases_url":"https://api.github.com/repos/ualbertalib/avalon/releases{/id}","deployments_url":"https://api.github.com/repos/ualbertalib/avalon/deployments","created_at":"2015-10-13T20:56:46Z","updated_at":"2019-03-20T21:56:15Z","pushed_at":"2019-04-22T17:56:20Z","git_url":"git://github.com/ualbertalib/avalon.git","ssh_url":"git@github.com:ualbertalib/avalon.git","clone_url":"https://github.com/ualbertalib/avalon.git","svn_url":"https://github.com/ualbertalib/avalon","homepage":"","size":61723,"stargazers_count":2,"watchers_count":2,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":149,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":149,"watchers":2,"default_branch":"master"}},"base":{"label":"ualbertalib:master","ref":"master","sha":"813389ba3c3ed22ceba7a504b32a90f54c3cf6d0","user":{"login":"ualbertalib","id":2856757,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4NTY3NTc=","avatar_url":"https://avatars3.githubusercontent.com/u/2856757?v=4","gravatar_id":"","url":"https://api.github.com/users/ualbertalib","html_url":"https://github.com/ualbertalib","followers_url":"https://api.github.com/users/ualbertalib/followers","following_url":"https://api.github.com/users/ualbertalib/following{/other_user}","gists_url":"https://api.github.com/users/ualbertalib/gists{/gist_id}","starred_url":"https://api.github.com/users/ualbertalib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ualbertalib/subscriptions","organizations_url":"https://api.github.com/users/ualbertalib/orgs","repos_url":"https://api.github.com/users/ualbertalib/repos","events_url":"https://api.github.com/users/ualbertalib/events{/privacy}","received_events_url":"https://api.github.com/users/ualbertalib/received_events","type":"Organization","site_admin":false},"repo":{"id":44204376,"node_id":"MDEwOlJlcG9zaXRvcnk0NDIwNDM3Ng==","name":"avalon","full_name":"ualbertalib/avalon","private":false,"owner":{"login":"ualbertalib","id":2856757,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4NTY3NTc=","avatar_url":"https://avatars3.githubusercontent.com/u/2856757?v=4","gravatar_id":"","url":"https://api.github.com/users/ualbertalib","html_url":"https://github.com/ualbertalib","followers_url":"https://api.github.com/users/ualbertalib/followers","following_url":"https://api.github.com/users/ualbertalib/following{/other_user}","gists_url":"https://api.github.com/users/ualbertalib/gists{/gist_id}","starred_url":"https://api.github.com/users/ualbertalib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ualbertalib/subscriptions","organizations_url":"https://api.github.com/users/ualbertalib/orgs","repos_url":"https://api.github.com/users/ualbertalib/repos","events_url":"https://api.github.com/users/ualbertalib/events{/privacy}","received_events_url":"https://api.github.com/users/ualbertalib/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/ualbertalib/avalon","description":"University of Alberta's Media Repository based on Avalon","fork":true,"url":"https://api.github.com/repos/ualbertalib/avalon","forks_url":"https://api.github.com/repos/ualbertalib/avalon/forks","keys_url":"https://api.github.com/repos/ualbertalib/avalon/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ualbertalib/avalon/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ualbertalib/avalon/teams","hooks_url":"https://api.github.com/repos/ualbertalib/avalon/hooks","issue_events_url":"https://api.github.com/repos/ualbertalib/avalon/issues/events{/number}","events_url":"https://api.github.com/repos/ualbertalib/avalon/events","assignees_url":"https://api.github.com/repos/ualbertalib/avalon/assignees{/user}","branches_url":"https://api.github.com/repos/ualbertalib/avalon/branches{/branch}","tags_url":"https://api.github.com/repos/ualbertalib/avalon/tags","blobs_url":"https://api.github.com/repos/ualbertalib/avalon/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ualbertalib/avalon/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ualbertalib/avalon/git/refs{/sha}","trees_url":"https://api.github.com/repos/ualbertalib/avalon/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ualbertalib/avalon/statuses/{sha}","languages_url":"https://api.github.com/repos/ualbertalib/avalon/languages","stargazers_url":"https://api.github.com/repos/ualbertalib/avalon/stargazers","contributors_url":"https://api.github.com/repos/ualbertalib/avalon/contributors","subscribers_url":"https://api.github.com/repos/ualbertalib/avalon/subscribers","subscription_url":"https://api.github.com/repos/ualbertalib/avalon/subscription","commits_url":"https://api.github.com/repos/ualbertalib/avalon/commits{/sha}","git_commits_url":"https://api.github.com/repos/ualbertalib/avalon/git/commits{/sha}","comments_url":"https://api.github.com/repos/ualbertalib/avalon/comments{/number}","issue_comment_url":"https://api.github.com/repos/ualbertalib/avalon/issues/comments{/number}","contents_url":"https://api.github.com/repos/ualbertalib/avalon/contents/{+path}","compare_url":"https://api.github.com/repos/ualbertalib/avalon/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ualbertalib/avalon/merges","archive_url":"https://api.github.com/repos/ualbertalib/avalon/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ualbertalib/avalon/downloads","issues_url":"https://api.github.com/repos/ualbertalib/avalon/issues{/number}","pulls_url":"https://api.github.com/repos/ualbertalib/avalon/pulls{/number}","milestones_url":"https://api.github.com/repos/ualbertalib/avalon/milestones{/number}","notifications_url":"https://api.github.com/repos/ualbertalib/avalon/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ualbertalib/avalon/labels{/name}","releases_url":"https://api.github.com/repos/ualbertalib/avalon/releases{/id}","deployments_url":"https://api.github.com/repos/ualbertalib/avalon/deployments","created_at":"2015-10-13T20:56:46Z","updated_at":"2019-03-20T21:56:15Z","pushed_at":"2019-04-22T17:56:20Z","git_url":"git://github.com/ualbertalib/avalon.git","ssh_url":"git@github.com:ualbertalib/avalon.git","clone_url":"https://github.com/ualbertalib/avalon.git","svn_url":"https://github.com/ualbertalib/avalon","homepage":"","size":61723,"stargazers_count":2,"watchers_count":2,"language":"Ruby","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":149,"license":{"key":"apache-2.0","name":"Apache License 2.0","spdx_id":"Apache-2.0","url":"https://api.github.com/licenses/apache-2.0","node_id":"MDc6TGljZW5zZTI="},"forks":0,"open_issues":149,"watchers":2,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/ualbertalib/avalon/pulls/449"},"html":{"href":"https://github.com/ualbertalib/avalon/pull/449"},"issue":{"href":"https://api.github.com/repos/ualbertalib/avalon/issues/449"},"comments":{"href":"https://api.github.com/repos/ualbertalib/avalon/issues/449/comments"},"review_comments":{"href":"https://api.github.com/repos/ualbertalib/avalon/pulls/449/comments"},"review_comment":{"href":"https://api.github.com/repos/ualbertalib/avalon/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/ualbertalib/avalon/pulls/449/commits"},"statuses":{"href":"https://api.github.com/repos/ualbertalib/avalon/statuses/39c85f06429e22d4e58c5c74fa4e37ec0cb4bfa0"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":5,"deletions":5,"changed_files":2}}
{"actor":{"display_login":"dependabot"}}