{"action":"closed","number":2,"pull_request":{"url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2","id":357020764,"node_id":"MDExOlB1bGxSZXF1ZXN0MzU3MDIwNzY0","html_url":"https://github.com/Artgyk/k8s-hello-world/pull/2","diff_url":"https://github.com/Artgyk/k8s-hello-world/pull/2.diff","patch_url":"https://github.com/Artgyk/k8s-hello-world/pull/2.patch","issue_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/2","number":2,"state":"closed","locked":false,"title":"Bump waitress from 1.3.0 to 1.4.1","user":{"login":"dependabot[bot]","id":49699333,"node_id":"MDM6Qm90NDk2OTkzMzM=","avatar_url":"https://avatars0.githubusercontent.com/in/29110?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [waitress](https://github.com/Pylons/waitress) from 1.3.0 to 1.4.1.\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [waitress's changelog](https://github.com/Pylons/waitress/blob/master/CHANGES.txt).*\n\n> 1.4.1 (2019-12-24)\n> ------------------\n> \n> Security Fixes\n> ~~~~~~~~~~~~~~\n> \n> - Waitress did not properly validate that the HTTP headers it received were\n>   properly formed, thereby potentially allowing a front-end server to treat a\n>   request different from Waitress. This could lead to HTTP request\n>   smuggling/splitting.\n> \n>   Please see the security advisory for more information:\n>   https://github.com/Pylons/waitress/security/advisories/GHSA-m5ff-3wj3-8ph4\n> \n> 1.4.0 (2019-12-20)\n> ------------------\n> \n> Bugfixes\n> ~~~~~~~~\n> \n> - Waitress used to slam the door shut on HTTP pipelined requests without\n>   setting the ``Connection: close`` header as appropriate in the response. This\n>   is of course not very friendly. Waitress now explicitly sets the header when\n>   responding with an internally generated error such as 400 Bad Request or 500\n>   Internal Server Error to notify the remote client that it will be closing the\n>   connection after the response is sent.\n> \n> - Waitress no longer allows any spaces to exist between the header field-name\n>   and the colon. While waitress did not strip the space and thereby was not\n>   vulnerable to any potential header field-name confusion, it should have sent\n>   back a 400 Bad Request. See [Pylons/waitress#273](https://github-redirect.dependabot.com/Pylons/waitress/issues/273)\n> \n> Security Fixes\n> ~~~~~~~~~~~~~~\n> \n> - Waitress implemented a \"MAY\" part of the RFC7230\n>   (https://tools.ietf.org/html/rfc7230#section-3.5) which states:\n> \n>       Although the line terminator for the start-line and header fields is\n>       the sequence CRLF, a recipient MAY recognize a single LF as a line\n>       terminator and ignore any preceding CR.\n> \n>   Unfortunately if a front-end server does not parse header fields with an LF\n>   the same way as it does those with a CRLF it can lead to the front-end and\n>   the back-end server parsing the same HTTP message in two different ways. This\n>   can lead to a potential for HTTP request smuggling/splitting whereby Waitress\n>   may see two requests while the front-end server only sees a single HTTP\n>   message.\n> \n>   For more information I can highly recommend the blog post by ZeddYu Lu\n></tr></table> ... (truncated)\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`cd83598`](https://github.com/Pylons/waitress/commit/cd8359864400592ba0db5d74e650a8fac4763d0d) Prep v1.4.1\n- [`11d9e13`](https://github.com/Pylons/waitress/commit/11d9e138125ad46e951027184b13242a3c1de017) Merge pull request from GHSA-m5ff-3wj3-8ph4\n- [`a046a76`](https://github.com/Pylons/waitress/commit/a046a7667c8a7afa0237c668e6ff33f7c10894f7) Add links to advisories for previous security issues\n- [`3c58e39`](https://github.com/Pylons/waitress/commit/3c58e397cc17e51e1127e971621fb617b04bd33d) Bump version number\n- [`de3324d`](https://github.com/Pylons/waitress/commit/de3324dd2126ce7ae1e55411f2684c333d96d62b) Add documentation for security issue\n- [`3bcd690`](https://github.com/Pylons/waitress/commit/3bcd690f3a068e63faae898f255df047e1ae884c) Define VCHAR/OBS_TEXT once\n- [`2e46f24`](https://github.com/Pylons/waitress/commit/2e46f2426e2845e6a088e21451d3d0031b804cea) Validate HTTP header-field more completely\n- [`2a11d68`](https://github.com/Pylons/waitress/commit/2a11d6812f703e01150c2aedbca7ec2a6590f254) Add file with RFC7230 definitions/ABNF -> regex\n- [`f11093a`](https://github.com/Pylons/waitress/commit/f11093a6b3240fc26830b6111e826128af7771c3) Merge pull request from GHSA-g2xc-35jw-c63p\n- [`e586be8`](https://github.com/Pylons/waitress/commit/e586be8f43dbb266b9ef28bb285408b3ac3dacd4) Version 1.4.0\n- Additional commits viewable in [compare view](https://github.com/Pylons/waitress/compare/v1.3.0...v1.4.1)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=waitress&package-manager=pip&previous-version=1.3.0&new-version=1.4.1)](https://help.github.com/articles/configuring-automated-security-fixes)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n\nYou can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Artgyk/k8s-hello-world/network/alerts).\n\n</details>","created_at":"2019-12-26T17:36:04Z","updated_at":"2020-01-06T19:53:10Z","closed_at":"2020-01-06T19:53:10Z","merged_at":null,"merge_commit_sha":"6a9867f92636a7001d6403dfd3fbddb371b569c8","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1746135746,"node_id":"MDU6TGFiZWwxNzQ2MTM1NzQ2","url":"https://api.github.com/repos/Artgyk/k8s-hello-world/labels/dependencies","name":"dependencies","color":"0366d6","default":false,"description":"Pull requests that update a dependency file"}],"milestone":null,"commits_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2/commits","review_comments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2/comments","review_comment_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/comments{/number}","comments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/2/comments","statuses_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/statuses/7c38b12f7ba7760746e3d9fb03bd1803dfca9491","head":{"label":"Artgyk:dependabot/pip/waitress-1.4.1","ref":"dependabot/pip/waitress-1.4.1","sha":"7c38b12f7ba7760746e3d9fb03bd1803dfca9491","user":{"login":"Artgyk","id":29138121,"node_id":"MDQ6VXNlcjI5MTM4MTIx","avatar_url":"https://avatars3.githubusercontent.com/u/29138121?v=4","gravatar_id":"","url":"https://api.github.com/users/Artgyk","html_url":"https://github.com/Artgyk","followers_url":"https://api.github.com/users/Artgyk/followers","following_url":"https://api.github.com/users/Artgyk/following{/other_user}","gists_url":"https://api.github.com/users/Artgyk/gists{/gist_id}","starred_url":"https://api.github.com/users/Artgyk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Artgyk/subscriptions","organizations_url":"https://api.github.com/users/Artgyk/orgs","repos_url":"https://api.github.com/users/Artgyk/repos","events_url":"https://api.github.com/users/Artgyk/events{/privacy}","received_events_url":"https://api.github.com/users/Artgyk/received_events","type":"User","site_admin":false},"repo":{"id":195588821,"node_id":"MDEwOlJlcG9zaXRvcnkxOTU1ODg4MjE=","name":"k8s-hello-world","full_name":"Artgyk/k8s-hello-world","private":false,"owner":{"login":"Artgyk","id":29138121,"node_id":"MDQ6VXNlcjI5MTM4MTIx","avatar_url":"https://avatars3.githubusercontent.com/u/29138121?v=4","gravatar_id":"","url":"https://api.github.com/users/Artgyk","html_url":"https://github.com/Artgyk","followers_url":"https://api.github.com/users/Artgyk/followers","following_url":"https://api.github.com/users/Artgyk/following{/other_user}","gists_url":"https://api.github.com/users/Artgyk/gists{/gist_id}","starred_url":"https://api.github.com/users/Artgyk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Artgyk/subscriptions","organizations_url":"https://api.github.com/users/Artgyk/orgs","repos_url":"https://api.github.com/users/Artgyk/repos","events_url":"https://api.github.com/users/Artgyk/events{/privacy}","received_events_url":"https://api.github.com/users/Artgyk/received_events","type":"User","site_admin":false},"html_url":"https://github.com/Artgyk/k8s-hello-world","description":null,"fork":false,"url":"https://api.github.com/repos/Artgyk/k8s-hello-world","forks_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/forks","keys_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/keys{/key_id}","collaborators_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/teams","hooks_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/hooks","issue_events_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/events{/number}","events_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/events","assignees_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/assignees{/user}","branches_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/branches{/branch}","tags_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/tags","blobs_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/refs{/sha}","trees_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/trees{/sha}","statuses_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/statuses/{sha}","languages_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/languages","stargazers_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/stargazers","contributors_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/contributors","subscribers_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/subscribers","subscription_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/subscription","commits_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/commits{/sha}","git_commits_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/commits{/sha}","comments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/comments{/number}","issue_comment_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/comments{/number}","contents_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/contents/{+path}","compare_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/compare/{base}...{head}","merges_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/merges","archive_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/downloads","issues_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues{/number}","pulls_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls{/number}","milestones_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/milestones{/number}","notifications_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/labels{/name}","releases_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/releases{/id}","deployments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/deployments","created_at":"2019-07-06T22:40:18Z","updated_at":"2019-07-07T06:45:27Z","pushed_at":"2020-01-06T19:53:08Z","git_url":"git://github.com/Artgyk/k8s-hello-world.git","ssh_url":"git@github.com:Artgyk/k8s-hello-world.git","clone_url":"https://github.com/Artgyk/k8s-hello-world.git","svn_url":"https://github.com/Artgyk/k8s-hello-world","homepage":null,"size":24,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"base":{"label":"Artgyk:master","ref":"master","sha":"423b3c1040f3f508976c884a924eb667d345ea34","user":{"login":"Artgyk","id":29138121,"node_id":"MDQ6VXNlcjI5MTM4MTIx","avatar_url":"https://avatars3.githubusercontent.com/u/29138121?v=4","gravatar_id":"","url":"https://api.github.com/users/Artgyk","html_url":"https://github.com/Artgyk","followers_url":"https://api.github.com/users/Artgyk/followers","following_url":"https://api.github.com/users/Artgyk/following{/other_user}","gists_url":"https://api.github.com/users/Artgyk/gists{/gist_id}","starred_url":"https://api.github.com/users/Artgyk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Artgyk/subscriptions","organizations_url":"https://api.github.com/users/Artgyk/orgs","repos_url":"https://api.github.com/users/Artgyk/repos","events_url":"https://api.github.com/users/Artgyk/events{/privacy}","received_events_url":"https://api.github.com/users/Artgyk/received_events","type":"User","site_admin":false},"repo":{"id":195588821,"node_id":"MDEwOlJlcG9zaXRvcnkxOTU1ODg4MjE=","name":"k8s-hello-world","full_name":"Artgyk/k8s-hello-world","private":false,"owner":{"login":"Artgyk","id":29138121,"node_id":"MDQ6VXNlcjI5MTM4MTIx","avatar_url":"https://avatars3.githubusercontent.com/u/29138121?v=4","gravatar_id":"","url":"https://api.github.com/users/Artgyk","html_url":"https://github.com/Artgyk","followers_url":"https://api.github.com/users/Artgyk/followers","following_url":"https://api.github.com/users/Artgyk/following{/other_user}","gists_url":"https://api.github.com/users/Artgyk/gists{/gist_id}","starred_url":"https://api.github.com/users/Artgyk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Artgyk/subscriptions","organizations_url":"https://api.github.com/users/Artgyk/orgs","repos_url":"https://api.github.com/users/Artgyk/repos","events_url":"https://api.github.com/users/Artgyk/events{/privacy}","received_events_url":"https://api.github.com/users/Artgyk/received_events","type":"User","site_admin":false},"html_url":"https://github.com/Artgyk/k8s-hello-world","description":null,"fork":false,"url":"https://api.github.com/repos/Artgyk/k8s-hello-world","forks_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/forks","keys_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/keys{/key_id}","collaborators_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/teams","hooks_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/hooks","issue_events_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/events{/number}","events_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/events","assignees_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/assignees{/user}","branches_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/branches{/branch}","tags_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/tags","blobs_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/refs{/sha}","trees_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/trees{/sha}","statuses_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/statuses/{sha}","languages_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/languages","stargazers_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/stargazers","contributors_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/contributors","subscribers_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/subscribers","subscription_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/subscription","commits_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/commits{/sha}","git_commits_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/git/commits{/sha}","comments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/comments{/number}","issue_comment_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/comments{/number}","contents_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/contents/{+path}","compare_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/compare/{base}...{head}","merges_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/merges","archive_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/downloads","issues_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues{/number}","pulls_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls{/number}","milestones_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/milestones{/number}","notifications_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/labels{/name}","releases_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/releases{/id}","deployments_url":"https://api.github.com/repos/Artgyk/k8s-hello-world/deployments","created_at":"2019-07-06T22:40:18Z","updated_at":"2019-07-07T06:45:27Z","pushed_at":"2020-01-06T19:53:08Z","git_url":"git://github.com/Artgyk/k8s-hello-world.git","ssh_url":"git@github.com:Artgyk/k8s-hello-world.git","clone_url":"https://github.com/Artgyk/k8s-hello-world.git","svn_url":"https://github.com/Artgyk/k8s-hello-world","homepage":null,"size":24,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":1,"license":null,"forks":0,"open_issues":1,"watchers":0,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2"},"html":{"href":"https://github.com/Artgyk/k8s-hello-world/pull/2"},"issue":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/2"},"comments":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/issues/2/comments"},"review_comments":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2/comments"},"review_comment":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/pulls/2/commits"},"statuses":{"href":"https://api.github.com/repos/Artgyk/k8s-hello-world/statuses/7c38b12f7ba7760746e3d9fb03bd1803dfca9491"}},"author_association":"NONE","merged":false,"mergeable":true,"rebaseable":true,"mergeable_state":"clean","merged_by":null,"comments":1,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":40,"deletions":39,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}