{"action":"opened","number":48,"pull_request":{"url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48","id":266161641,"node_id":"MDExOlB1bGxSZXF1ZXN0MjY2MTYxNjQx","html_url":"https://github.com/sp3rg/www.william.gg/pull/48","diff_url":"https://github.com/sp3rg/www.william.gg/pull/48.diff","patch_url":"https://github.com/sp3rg/www.william.gg/pull/48.patch","issue_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/48","number":48,"state":"open","locked":false,"title":"[Security] Bump django from 2.0.7 to 2.1.8","user":{"login":"dependabot[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot%5Bbot%5D","html_url":"https://github.com/apps/dependabot","followers_url":"https://api.github.com/users/dependabot%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot%5Bbot%5D/received_events","type":"Bot","site_admin":false},"body":"Bumps [django](https://github.com/django/django) from 2.0.7 to 2.1.8. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects django**\n> django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.\n> \n> Affected versions: >= 2.0, < 2.0.8\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Low severity vulnerability that affects django**\n> In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defaults.page_not_found(), leading to content spoofing (in a 404 error page) if a user fails to recognize that a crafted URL has malicious content.\n> \n> Affected versions: >= 2.0.0, < 2.0.10\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Memory exhaustion in django.utils.numberformat.format()**\n> If django.utils.numberformat.format() -- used by contrib.admin as well as the the floatformat, filesizeformat, and intcomma templates filters -- received a Decimal with a large number of digits or a large exponent, it could lead to significant memory usage due to a call to '{:f}'.format().\n> \n> Affected versions: >= 1.11.0, < 1.11.19; >= 2.0.0, < 2.0.11; >= 2.1.0, < 2.1.6\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **Moderate severity vulnerability that affects django**\n> Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() function.\n> \n> Affected versions: >= 2.0.0, < 2.0.11\n\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`e49b2ae`](https://github.com/django/django/commit/e49b2ae36122030e434e10c1c54ebd834dcda6bb) [2.1.x] Bumped version for 2.1.8 release.\n- [`aafdf62`](https://github.com/django/django/commit/aafdf62921f880f37d7091ed7ac8bc948cd5a9a5) [2.1.x] Fixed [#30289](https://github-redirect.dependabot.com/django/django/issues/30289) -- Prevented admin inlines for a ManyToManyField's impli...\n- [`6bfad83`](https://github.com/django/django/commit/6bfad83c2a36cca58c2360e7393becc55eb366dd) [2.1.x] Added stub 2.1.8 release notes.\n- [`28fb3ea`](https://github.com/django/django/commit/28fb3ea827edba4aac02dbfa437ef362b97fc306) [2.1.x] Fixed [#30277](https://github-redirect.dependabot.com/django/django/issues/30277) -- Fixed broken links to packaging.python.org.\n- [`bb880e1`](https://github.com/django/django/commit/bb880e17ebff6ac1bda2a4d6d7a5a10ea338e9c7) [2.1.x] Fixed serializers test crash if PyYAML isn't installed.\n- [`e12cf38`](https://github.com/django/django/commit/e12cf38ae9249fbf89913e015266d3569d911deb) [2.1.x] Fixed serializers tests for PyYAML 5.1+.\n- [`1999c0a`](https://github.com/django/django/commit/1999c0a00aec9736a58a235d90c9ef5a6f9cff34) [2.1.x] Reverted \"Fixed relative paths imports per isort 4.3.5.\"\n- [`4fd6e09`](https://github.com/django/django/commit/4fd6e09fdce02c00dfbde9d45a815e9d93060756) [2.1.x] Clarified permission-related docs.\n- [`0c295a7`](https://github.com/django/django/commit/0c295a757085b2fecf7a336c08debf1ab82ca80d) [2.1.x] Refs [#29683](https://github-redirect.dependabot.com/django/django/issues/29683) -- Updated multi-db docs for view permission.\n- [`7514a6c`](https://github.com/django/django/commit/7514a6cc956ca01641973952313592f3a2ab6b04) [2.1.x] Fixed documentation of database representation for ManyToManyField.\n- Additional commits viewable in [compare view](https://github.com/django/django/compare/2.0.7...2.1.8)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=django&package-manager=pip&previous-version=2.0.7&new-version=2.1.8)](https://dependabot.com/compatibility-score.html?dependency-name=django&package-manager=pip&previous-version=2.0.7&new-version=2.1.8)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>","created_at":"2019-04-01T09:32:36Z","updated_at":"2019-04-01T09:32:36Z","closed_at":null,"merged_at":null,"merge_commit_sha":null,"assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48/commits","review_comments_url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48/comments","review_comment_url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/comments{/number}","comments_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/48/comments","statuses_url":"https://api.github.com/repos/sp3rg/www.william.gg/statuses/2f3ad20b8b285a9b64bb771b2159f609a862f156","head":{"label":"sp3rg:dependabot/pip/django-2.1.8","ref":"dependabot/pip/django-2.1.8","sha":"2f3ad20b8b285a9b64bb771b2159f609a862f156","user":{"login":"sp3rg","id":31941180,"node_id":"MDQ6VXNlcjMxOTQxMTgw","avatar_url":"https://avatars1.githubusercontent.com/u/31941180?v=4","gravatar_id":"","url":"https://api.github.com/users/sp3rg","html_url":"https://github.com/sp3rg","followers_url":"https://api.github.com/users/sp3rg/followers","following_url":"https://api.github.com/users/sp3rg/following{/other_user}","gists_url":"https://api.github.com/users/sp3rg/gists{/gist_id}","starred_url":"https://api.github.com/users/sp3rg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sp3rg/subscriptions","organizations_url":"https://api.github.com/users/sp3rg/orgs","repos_url":"https://api.github.com/users/sp3rg/repos","events_url":"https://api.github.com/users/sp3rg/events{/privacy}","received_events_url":"https://api.github.com/users/sp3rg/received_events","type":"User","site_admin":false},"repo":{"id":140533693,"node_id":"MDEwOlJlcG9zaXRvcnkxNDA1MzM2OTM=","name":"www.william.gg","full_name":"sp3rg/www.william.gg","private":false,"owner":{"login":"sp3rg","id":31941180,"node_id":"MDQ6VXNlcjMxOTQxMTgw","avatar_url":"https://avatars1.githubusercontent.com/u/31941180?v=4","gravatar_id":"","url":"https://api.github.com/users/sp3rg","html_url":"https://github.com/sp3rg","followers_url":"https://api.github.com/users/sp3rg/followers","following_url":"https://api.github.com/users/sp3rg/following{/other_user}","gists_url":"https://api.github.com/users/sp3rg/gists{/gist_id}","starred_url":"https://api.github.com/users/sp3rg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sp3rg/subscriptions","organizations_url":"https://api.github.com/users/sp3rg/orgs","repos_url":"https://api.github.com/users/sp3rg/repos","events_url":"https://api.github.com/users/sp3rg/events{/privacy}","received_events_url":"https://api.github.com/users/sp3rg/received_events","type":"User","site_admin":false},"html_url":"https://github.com/sp3rg/www.william.gg","description":"sign my guestbook (william.gg may not be up to date always *shrug*)","fork":false,"url":"https://api.github.com/repos/sp3rg/www.william.gg","forks_url":"https://api.github.com/repos/sp3rg/www.william.gg/forks","keys_url":"https://api.github.com/repos/sp3rg/www.william.gg/keys{/key_id}","collaborators_url":"https://api.github.com/repos/sp3rg/www.william.gg/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/sp3rg/www.william.gg/teams","hooks_url":"https://api.github.com/repos/sp3rg/www.william.gg/hooks","issue_events_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/events{/number}","events_url":"https://api.github.com/repos/sp3rg/www.william.gg/events","assignees_url":"https://api.github.com/repos/sp3rg/www.william.gg/assignees{/user}","branches_url":"https://api.github.com/repos/sp3rg/www.william.gg/branches{/branch}","tags_url":"https://api.github.com/repos/sp3rg/www.william.gg/tags","blobs_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/refs{/sha}","trees_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/trees{/sha}","statuses_url":"https://api.github.com/repos/sp3rg/www.william.gg/statuses/{sha}","languages_url":"https://api.github.com/repos/sp3rg/www.william.gg/languages","stargazers_url":"https://api.github.com/repos/sp3rg/www.william.gg/stargazers","contributors_url":"https://api.github.com/repos/sp3rg/www.william.gg/contributors","subscribers_url":"https://api.github.com/repos/sp3rg/www.william.gg/subscribers","subscription_url":"https://api.github.com/repos/sp3rg/www.william.gg/subscription","commits_url":"https://api.github.com/repos/sp3rg/www.william.gg/commits{/sha}","git_commits_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/commits{/sha}","comments_url":"https://api.github.com/repos/sp3rg/www.william.gg/comments{/number}","issue_comment_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/comments{/number}","contents_url":"https://api.github.com/repos/sp3rg/www.william.gg/contents/{+path}","compare_url":"https://api.github.com/repos/sp3rg/www.william.gg/compare/{base}...{head}","merges_url":"https://api.github.com/repos/sp3rg/www.william.gg/merges","archive_url":"https://api.github.com/repos/sp3rg/www.william.gg/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/sp3rg/www.william.gg/downloads","issues_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues{/number}","pulls_url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls{/number}","milestones_url":"https://api.github.com/repos/sp3rg/www.william.gg/milestones{/number}","notifications_url":"https://api.github.com/repos/sp3rg/www.william.gg/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/sp3rg/www.william.gg/labels{/name}","releases_url":"https://api.github.com/repos/sp3rg/www.william.gg/releases{/id}","deployments_url":"https://api.github.com/repos/sp3rg/www.william.gg/deployments","created_at":"2018-07-11T06:49:31Z","updated_at":"2018-08-16T01:56:37Z","pushed_at":"2019-04-01T09:32:33Z","git_url":"git://github.com/sp3rg/www.william.gg.git","ssh_url":"git@github.com:sp3rg/www.william.gg.git","clone_url":"https://github.com/sp3rg/www.william.gg.git","svn_url":"https://github.com/sp3rg/www.william.gg","homepage":"https://william.gg","size":845,"stargazers_count":1,"watchers_count":1,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":12,"license":{"key":"gpl-3.0","name":"GNU General Public License v3.0","spdx_id":"GPL-3.0","url":"https://api.github.com/licenses/gpl-3.0","node_id":"MDc6TGljZW5zZTk="},"forks":0,"open_issues":12,"watchers":1,"default_branch":"master"}},"base":{"label":"sp3rg:master","ref":"master","sha":"ec324ae1779cf45b7e7f13cc8e948380cae654c5","user":{"login":"sp3rg","id":31941180,"node_id":"MDQ6VXNlcjMxOTQxMTgw","avatar_url":"https://avatars1.githubusercontent.com/u/31941180?v=4","gravatar_id":"","url":"https://api.github.com/users/sp3rg","html_url":"https://github.com/sp3rg","followers_url":"https://api.github.com/users/sp3rg/followers","following_url":"https://api.github.com/users/sp3rg/following{/other_user}","gists_url":"https://api.github.com/users/sp3rg/gists{/gist_id}","starred_url":"https://api.github.com/users/sp3rg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sp3rg/subscriptions","organizations_url":"https://api.github.com/users/sp3rg/orgs","repos_url":"https://api.github.com/users/sp3rg/repos","events_url":"https://api.github.com/users/sp3rg/events{/privacy}","received_events_url":"https://api.github.com/users/sp3rg/received_events","type":"User","site_admin":false},"repo":{"id":140533693,"node_id":"MDEwOlJlcG9zaXRvcnkxNDA1MzM2OTM=","name":"www.william.gg","full_name":"sp3rg/www.william.gg","private":false,"owner":{"login":"sp3rg","id":31941180,"node_id":"MDQ6VXNlcjMxOTQxMTgw","avatar_url":"https://avatars1.githubusercontent.com/u/31941180?v=4","gravatar_id":"","url":"https://api.github.com/users/sp3rg","html_url":"https://github.com/sp3rg","followers_url":"https://api.github.com/users/sp3rg/followers","following_url":"https://api.github.com/users/sp3rg/following{/other_user}","gists_url":"https://api.github.com/users/sp3rg/gists{/gist_id}","starred_url":"https://api.github.com/users/sp3rg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sp3rg/subscriptions","organizations_url":"https://api.github.com/users/sp3rg/orgs","repos_url":"https://api.github.com/users/sp3rg/repos","events_url":"https://api.github.com/users/sp3rg/events{/privacy}","received_events_url":"https://api.github.com/users/sp3rg/received_events","type":"User","site_admin":false},"html_url":"https://github.com/sp3rg/www.william.gg","description":"sign my guestbook (william.gg may not be up to date always *shrug*)","fork":false,"url":"https://api.github.com/repos/sp3rg/www.william.gg","forks_url":"https://api.github.com/repos/sp3rg/www.william.gg/forks","keys_url":"https://api.github.com/repos/sp3rg/www.william.gg/keys{/key_id}","collaborators_url":"https://api.github.com/repos/sp3rg/www.william.gg/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/sp3rg/www.william.gg/teams","hooks_url":"https://api.github.com/repos/sp3rg/www.william.gg/hooks","issue_events_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/events{/number}","events_url":"https://api.github.com/repos/sp3rg/www.william.gg/events","assignees_url":"https://api.github.com/repos/sp3rg/www.william.gg/assignees{/user}","branches_url":"https://api.github.com/repos/sp3rg/www.william.gg/branches{/branch}","tags_url":"https://api.github.com/repos/sp3rg/www.william.gg/tags","blobs_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/refs{/sha}","trees_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/trees{/sha}","statuses_url":"https://api.github.com/repos/sp3rg/www.william.gg/statuses/{sha}","languages_url":"https://api.github.com/repos/sp3rg/www.william.gg/languages","stargazers_url":"https://api.github.com/repos/sp3rg/www.william.gg/stargazers","contributors_url":"https://api.github.com/repos/sp3rg/www.william.gg/contributors","subscribers_url":"https://api.github.com/repos/sp3rg/www.william.gg/subscribers","subscription_url":"https://api.github.com/repos/sp3rg/www.william.gg/subscription","commits_url":"https://api.github.com/repos/sp3rg/www.william.gg/commits{/sha}","git_commits_url":"https://api.github.com/repos/sp3rg/www.william.gg/git/commits{/sha}","comments_url":"https://api.github.com/repos/sp3rg/www.william.gg/comments{/number}","issue_comment_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues/comments{/number}","contents_url":"https://api.github.com/repos/sp3rg/www.william.gg/contents/{+path}","compare_url":"https://api.github.com/repos/sp3rg/www.william.gg/compare/{base}...{head}","merges_url":"https://api.github.com/repos/sp3rg/www.william.gg/merges","archive_url":"https://api.github.com/repos/sp3rg/www.william.gg/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/sp3rg/www.william.gg/downloads","issues_url":"https://api.github.com/repos/sp3rg/www.william.gg/issues{/number}","pulls_url":"https://api.github.com/repos/sp3rg/www.william.gg/pulls{/number}","milestones_url":"https://api.github.com/repos/sp3rg/www.william.gg/milestones{/number}","notifications_url":"https://api.github.com/repos/sp3rg/www.william.gg/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/sp3rg/www.william.gg/labels{/name}","releases_url":"https://api.github.com/repos/sp3rg/www.william.gg/releases{/id}","deployments_url":"https://api.github.com/repos/sp3rg/www.william.gg/deployments","created_at":"2018-07-11T06:49:31Z","updated_at":"2018-08-16T01:56:37Z","pushed_at":"2019-04-01T09:32:33Z","git_url":"git://github.com/sp3rg/www.william.gg.git","ssh_url":"git@github.com:sp3rg/www.william.gg.git","clone_url":"https://github.com/sp3rg/www.william.gg.git","svn_url":"https://github.com/sp3rg/www.william.gg","homepage":"https://william.gg","size":845,"stargazers_count":1,"watchers_count":1,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":true,"forks_count":0,"mirror_url":null,"archived":false,"open_issues_count":12,"license":{"key":"gpl-3.0","name":"GNU General Public License v3.0","spdx_id":"GPL-3.0","url":"https://api.github.com/licenses/gpl-3.0","node_id":"MDc6TGljZW5zZTk="},"forks":0,"open_issues":12,"watchers":1,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48"},"html":{"href":"https://github.com/sp3rg/www.william.gg/pull/48"},"issue":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/issues/48"},"comments":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/issues/48/comments"},"review_comments":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48/comments"},"review_comment":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/pulls/48/commits"},"statuses":{"href":"https://api.github.com/repos/sp3rg/www.william.gg/statuses/2f3ad20b8b285a9b64bb771b2159f609a862f156"}},"author_association":"NONE","merged":false,"mergeable":null,"rebaseable":null,"mergeable_state":"unknown","merged_by":null,"comments":0,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":1,"deletions":1,"changed_files":1}}
{"actor":{"display_login":"dependabot"}}