payload: {"action":"created","issue":{"url":"https://api.github.com/repos/Coursemology/coursemology2/issues/3704","repository_url":"https://api.github.com/repos/Coursemology/coursemology2","labels_url":"https://api.github.com/repos/Coursemology/coursemology2/issues/3704/labels{/name}","comments_url":"https://api.github.com/repos/Coursemology/coursemology2/issues/3704/comments","events_url":"https://api.github.com/repos/Coursemology/coursemology2/issues/3704/events","html_url":"https://github.com/Coursemology/coursemology2/pull/3704","id":515751415,"node_id":"MDExOlB1bGxSZXF1ZXN0MzM1MTU4NTUx","number":3704,"title":"Bump nokogiri from 1.10.4 to 1.10.5","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[{"id":1035560727,"node_id":"MDU6TGFiZWwxMDM1NTYwNzI3","url":"https://api.github.com/repos/Coursemology/coursemology2/labels/dependencies","name":"dependencies","color":"0025ff","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2019-10-31T21:15:28Z","updated_at":"2019-11-17T20:18:07Z","closed_at":null,"author_association":"CONTRIBUTOR","pull_request":{"url":"https://api.github.com/repos/Coursemology/coursemology2/pulls/3704","html_url":"https://github.com/Coursemology/coursemology2/pull/3704","diff_url":"https://github.com/Coursemology/coursemology2/pull/3704.diff","patch_url":"https://github.com/Coursemology/coursemology2/pull/3704.patch"},"body":"Bumps [nokogiri](https://github.com/sparklemotion/nokogiri) from 1.10.4 to 1.10.5.\n<details>\n<summary>Release notes</summary>\n\n*Sourced from [nokogiri's releases](https://github.com/sparklemotion/nokogiri/releases).*\n\n> ## 1.10.5 / 2019-10-31\r\n> \r\n> ### Dependencies\r\n> \r\n> * [MRI] vendored libxml2 is updated from 2.9.9 to 2.9.10\r\n> * [MRI] vendored libxslt is updated from 1.1.33 to 1.1.34\r\n> \r\n> \r\n</details>\n<details>\n<summary>Changelog</summary>\n\n*Sourced from [nokogiri's changelog](https://github.com/sparklemotion/nokogiri/blob/master/CHANGELOG.md).*\n\n> ## 1.10.5 / 2019-10-31\n> \n> ### Dependencies\n> \n> * [MRI] vendored libxml2 is updated from 2.9.9 to 2.9.10\n> * [MRI] vendored libxslt is updated from 1.1.33 to 1.1.34\n</details>\n<details>\n<summary>Commits</summary>\n\n- [`1bc2ff9`](https://github.com/sparklemotion/nokogiri/commit/1bc2ff9f6218e1f814b18040e5bbb49b7b7bf60b) version bump to v1.10.5\n- [`383c1f8`](https://github.com/sparklemotion/nokogiri/commit/383c1f8ee833cb63ca93fe3ecfe8d93755a993b6) update CHANGELOG\n- [`43a1753`](https://github.com/sparklemotion/nokogiri/commit/43a175339b47b8c604508813fc75b83f13cd173e) dependency: update libxslt to 1.1.34 final\n- [`99d8a6b`](https://github.com/sparklemotion/nokogiri/commit/99d8a6b6ec83077652a06a333571e4705120f022) dependency: update libxml to 2.9.10 final\n- [`2a86496`](https://github.com/sparklemotion/nokogiri/commit/2a86496ca565aa283c4fd9cd247d21c6026d7b61) add suppressions for ruby 2.7\n- [`dca794a`](https://github.com/sparklemotion/nokogiri/commit/dca794a716fb285e2b19f8e028e61e4e3613ed14) update CHANGELOG with correct release date for v1.10.4\n- [`077e010`](https://github.com/sparklemotion/nokogiri/commit/077e010613cfb41f8cc03383c3e3b901a3985a49) update rake-compiler commands to install bundler\n- See full diff in [compare view](https://github.com/sparklemotion/nokogiri/compare/v1.10.4...v1.10.5)\n</details>\n<br />\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=nokogiri&package-manager=bundler&previous-version=1.10.4&new-version=1.10.5)](https://dependabot.com/compatibility-score.html?dependency-name=nokogiri&package-manager=bundler&previous-version=1.10.4&new-version=1.10.5)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>"},"comment":{"url":"https://api.github.com/repos/Coursemology/coursemology2/issues/comments/554782095","html_url":"https://github.com/Coursemology/coursemology2/pull/3704#issuecomment-554782095","issue_url":"https://api.github.com/repos/Coursemology/coursemology2/issues/3704","id":554782095,"node_id":"MDEyOklzc3VlQ29tbWVudDU1NDc4MjA5NQ==","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars3.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","site_admin":false},"created_at":"2019-11-17T20:18:07Z","updated_at":"2019-11-17T20:18:07Z","author_association":"CONTRIBUTOR","body":"We've just been alerted that this update fixes a security vulnerability:\n\n*Sourced from [The Ruby Advisory Database](https://github.com/rubysec/ruby-advisory-db/blob/master/gems/nokogiri/CVE-2019-13117.yml).*\n\n> **Nokogiri gem, via libxslt, is affected by multiple vulnerabilities**\n> Nokogiri v1.10.5 has been released.\n> \n> This is a security release. It addresses three CVEs in upstream libxml2,\n> for which details are below.\n> \n> If you're using your distro's system libraries, rather than Nokogiri's\n> vendored libraries, there's no security need to upgrade at this time,\n> though you may want to check with your distro whether they've patched this\n> (Canonical has patched Ubuntu packages). Note that libxslt 1.1.34 addresses\n> these vulnerabilities.\n> ... (truncated)\n\n> \n> Patched versions: [\">= 1.10.5\"]\n\n"}}
other: {"actor":{"display_login":"dependabot-preview"}}