payload: {"action":"created","issue":{"url":"https://api.github.com/repos/Robdel12/checkbox/issues/11","repository_url":"https://api.github.com/repos/Robdel12/checkbox","labels_url":"https://api.github.com/repos/Robdel12/checkbox/issues/11/labels{/name}","comments_url":"https://api.github.com/repos/Robdel12/checkbox/issues/11/comments","events_url":"https://api.github.com/repos/Robdel12/checkbox/issues/11/events","html_url":"https://github.com/Robdel12/checkbox/pull/11","id":471474004,"node_id":"MDExOlB1bGxSZXF1ZXN0MzAwMTE4Mjkx","number":11,"title":"[Security] Bump no-case from 2.3.1 to 2.3.2","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1464314460,"node_id":"MDU6TGFiZWwxNDY0MzE0NDYw","url":"https://api.github.com/repos/Robdel12/checkbox/labels/dependencies","name":"dependencies","color":"0366d6","default":false},{"id":1464314481,"node_id":"MDU6TGFiZWwxNDY0MzE0NDgx","url":"https://api.github.com/repos/Robdel12/checkbox/labels/security","name":"security","color":"ee0701","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-07-23T03:53:33Z","updated_at":"2019-07-23T03:54:17Z","closed_at":null,"author_association":"NONE","pull_request":{"url":"https://api.github.com/repos/Robdel12/checkbox/pulls/11","html_url":"https://github.com/Robdel12/checkbox/pull/11","diff_url":"https://github.com/Robdel12/checkbox/pull/11.diff","patch_url":"https://github.com/Robdel12/checkbox/pull/11.patch"},"body":"Bumps [no-case](https://github.com/blakeembrey/no-case) from 2.3.1 to 2.3.2. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **High severity vulnerability that affects no-case**\n> The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.\n> \n> Affected versions: < 2.3.2\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **High severity vulnerability that affects no-case**\n> The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition.\n> \n> Affected versions: <2.3.2\n\n</details>\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [no-case's releases](https://github.com/blakeembrey/no-case/releases).*\n\n> ## Remove RegExp Repetition\n> **Fixed**\r\n> \r\n> * Remove RegExp repetition from camel case upper case check\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`43ac059`](https://github.com/blakeembrey/no-case/commit/43ac059574d5e2dd5fd19c8ca5c62bf946cae3d5) 2.3.2\n- [`db500d7`](https://github.com/blakeembrey/no-case/commit/db500d7391870c799c7efbf6869faddd5272cf58) Remove regexp repetition to avoid ReDoS ([#18](https://github-redirect.dependabot.com/blakeembrey/no-case/issues/18))\n- [`1a2278a`](https://github.com/blakeembrey/no-case/commit/1a2278aa2eb2732670b89e11ea7f8e66f5d3f442) chore(package): update chai to version 4.0.2 ([#16](https://github-redirect.dependabot.com/blakeembrey/no-case/issues/16))\n- [`9085f40`](https://github.com/blakeembrey/no-case/commit/9085f40434dd40c2f02fb251abedabda191b8dd4) Update dependencies to enable Greenkeeper 🌴 ([#15](https://github-redirect.dependabot.com/blakeembrey/no-case/issues/15))\n- See full diff in [compare view](https://github.com/blakeembrey/no-case/compare/v2.3.1...v2.3.2)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=no-case&package-manager=npm_and_yarn&previous-version=2.3.1&new-version=2.3.2)](https://dependabot.com/compatibility-score.html?dependency-name=no-case&package-manager=npm_and_yarn&previous-version=2.3.1&new-version=2.3.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\nIf all status checks pass Dependabot will automatically merge this pull request.\n\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it). To ignore the version in this PR you can just close it\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>"},"comment":{"url":"https://api.github.com/repos/Robdel12/checkbox/issues/comments/514043771","html_url":"https://github.com/Robdel12/checkbox/pull/11#issuecomment-514043771","issue_url":"https://api.github.com/repos/Robdel12/checkbox/issues/11","id":514043771,"node_id":"MDEyOklzc3VlQ29tbWVudDUxNDA0Mzc3MQ==","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2019-07-23T03:54:17Z","updated_at":"2019-07-23T03:54:17Z","author_association":"NONE","body":"One of your CI runs failed on this pull request, so Dependabot won't merge it.\n\n- [ci/circleci](https://circleci.com/gh/Robdel12/checkbox/37?utm_campaign=vcs-integration-link&utm_medium=referral&utm_source=github-build-link)\n\nDependabot will still automatically merge this pull request if you amend it and your tests pass."}}
other: {"actor":{"display_login":"dependabot-preview"}}