payload: {"action":"created","issue":{"url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/148","repository_url":"https://api.github.com/repos/jameswlane/status-board-ui","labels_url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/148/labels{/name}","comments_url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/148/comments","events_url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/148/events","html_url":"https://github.com/jameswlane/status-board-ui/pull/148","id":448499025,"node_id":"MDExOlB1bGxSZXF1ZXN0MjgyMjUyNTY1","number":148,"title":"build(deps): [security] bump tar from 2.2.1 to 2.2.2","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1174937977,"node_id":"MDU6TGFiZWwxMTc0OTM3OTc3","url":"https://api.github.com/repos/jameswlane/status-board-ui/labels/dependencies","name":"dependencies","color":"0025ff","default":false},{"id":1174938493,"node_id":"MDU6TGFiZWwxMTc0OTM4NDkz","url":"https://api.github.com/repos/jameswlane/status-board-ui/labels/security","name":"security","color":"ee0701","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-05-25T20:17:38Z","updated_at":"2019-05-25T20:42:58Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/jameswlane/status-board-ui/pulls/148","html_url":"https://github.com/jameswlane/status-board-ui/pull/148","diff_url":"https://github.com/jameswlane/status-board-ui/pull/148.diff","patch_url":"https://github.com/jameswlane/status-board-ui/pull/148.patch"},"body":"Bumps [tar](https://github.com/npm/node-tar) from 2.2.1 to 2.2.2. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n\n*Sourced from The GitHub Security Advisory Database.*\n\n> **High severity vulnerability that affects tar**\n> A vulnerability was found in node-tar before version 4.4.2. An Arbitrary File Overwrite issue exists when extracting a tarball containing a hardlink to a file that already exists on the system, in conjunction with a later plain file with the same name as the hardlink. This plain file content replaces the existing file content.\n> \n> Affected versions: < 2.2.2\n\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`523c5c7`](https://github.com/npm/node-tar/commit/523c5c7fef48b10811fccd12b42803c61b6aead8) 2.2.2\n- [`7ecef07`](https://github.com/npm/node-tar/commit/7ecef07da6a9e72cc0c4d0c9c6a8e85b6b52395d) Bump fstream to fix hardlink overwriting vulnerability\n- [`9fc84b9`](https://github.com/npm/node-tar/commit/9fc84b9c596c3589d4c1ab050843de0eafb002e8) Use {} for hardlink tracking instead of []\n- [`15e59f1`](https://github.com/npm/node-tar/commit/15e59f1d671ffbe4ae7c74dafcbec93ea2584e34) Only track previously seen hardlinks\n- [`4f85851`](https://github.com/npm/node-tar/commit/4f8585178af78f8f64c5ca38e923c306613278b9) Ignore potentially unsafe files\n- See full diff in [compare view](https://github.com/npm/node-tar/compare/v2.2.1...v2.2.2)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=tar&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.2)](https://dependabot.com/compatibility-score.html?dependency-name=tar&package-manager=npm_and_yarn&previous-version=2.2.1&new-version=2.2.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\nIf all status checks pass Dependabot will automatically merge this pull request.\n\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot ignore this [patch|minor|major] version` will close this PR and stop Dependabot creating any more for this minor/major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Pull request limits (per update run and/or open at any time)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\nFinally, you can contact us by mentioning @dependabot.\n\n</details>\n\n[//]: # (dependabot-acquisition-announcement-start)\n\n---\n\n<a href='https://dependabot.com/blog/hello-github/'><img width='376' alt='Dependabot has been acquired by GitHub  🎉' src='https://user-images.githubusercontent.com/20165/58035530-e739b700-7b20-11e9-9d1b-12a7630b84e0.png'></a>\n\n[//]: # (dependabot-acquisition-announcement-end)"},"comment":{"url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/comments/495947143","html_url":"https://github.com/jameswlane/status-board-ui/pull/148#issuecomment-495947143","issue_url":"https://api.github.com/repos/jameswlane/status-board-ui/issues/148","id":495947143,"node_id":"MDEyOklzc3VlQ29tbWVudDQ5NTk0NzE0Mw==","user":{"login":"codecov[bot]","id":22429695,"node_id":"MDM6Qm90MjI0Mjk2OTU=","avatar_url":"https://avatars2.githubusercontent.com/in/254?v=4","gravatar_id":"","url":"https://api.github.com/users/codecov%5Bbot%5D","html_url":"https://github.com/apps/codecov","followers_url":"https://api.github.com/users/codecov%5Bbot%5D/followers","following_url":"https://api.github.com/users/codecov%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/codecov%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/codecov%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/codecov%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/codecov%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/codecov%5Bbot%5D/repos","events_url":"https://api.github.com/users/codecov%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/codecov%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2019-05-25T20:42:58Z","updated_at":"2019-05-25T20:42:58Z","author_association":"NONE","body":"# [Codecov](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=h1) Report\n> Merging [#148](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=desc) into [master](https://codecov.io/gh/jameswlane/status-board-ui/commit/cfcb92f73ff01a4c79dbe1046b283673728de20b?src=pr&el=desc) will **not change** coverage.\n> The diff coverage is `n/a`.\n\n[![Impacted file tree graph](https://codecov.io/gh/jameswlane/status-board-ui/pull/148/graphs/tree.svg?width=650&token=zyadBjkDBC&height=150&src=pr)](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=tree)\n\n```diff\n@@          Coverage Diff          @@\n##           master   #148   +/-   ##\n=====================================\n  Coverage     100%   100%           \n=====================================\n  Files           1      1           \n  Lines           3      3           \n=====================================\n  Hits            3      3\n```\n\n\n\n------\n\n[Continue to review full report at Codecov](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=continue).\n> **Legend** - [Click here to learn more](https://docs.codecov.io/docs/codecov-delta)\n> `Δ = absolute <relative> (impact)`, `ø = not affected`, `? = missing data`\n> Powered by [Codecov](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=footer). Last update [cfcb92f...f0c1d78](https://codecov.io/gh/jameswlane/status-board-ui/pull/148?src=pr&el=lastupdated). Read the [comment docs](https://docs.codecov.io/docs/pull-request-comments).\n"}}
other: {"actor":{"display_login":"codecov"}}