{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":14570749,"defaultBranch":"main","name":"bluemonday","ownerLogin":"microcosm-cc","currentUserCanPush":false,"isFork":false,"isEmpty":false,"createdAt":"2013-11-20T22:15:49.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/718906?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1720105424.0","currentOid":""},"activityList":{"items":[{"before":"30fb5d770f18c6fdaf08de8a69d653bd9c8cdd04","after":"10b8ac69db438c65c6d5469bb3c345aaa81f18d9","ref":"refs/heads/main","pushedAt":"2024-07-04T13:10:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Remove SPDX header from LICENSE to enable GitHub auto-detection","shortMessageHtmlLink":"Remove SPDX header from LICENSE to enable GitHub auto-detection"}},{"before":"e2442025bc0ec6a12e9067a239eff0ed07992720","after":"30fb5d770f18c6fdaf08de8a69d653bd9c8cdd04","ref":"refs/heads/main","pushedAt":"2024-07-04T13:07:19.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Don't duplicate attrs if multiple global policies allow them\n\nCloses #208","shortMessageHtmlLink":"Don't duplicate attrs if multiple global policies allow them"}},{"before":"109c9cf7afbd8c18dbf173a49aee097732abb519","after":"e2442025bc0ec6a12e9067a239eff0ed07992720","ref":"refs/heads/main","pushedAt":"2024-07-04T13:03:09.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Update CONTRIBUTING.md (fixup of 109c9cf)","shortMessageHtmlLink":"Update CONTRIBUTING.md (fixup of 109c9cf)"}},{"before":"e602a4a6fe37663ebe14c23c421d3c9792508e54","after":"109c9cf7afbd8c18dbf173a49aee097732abb519","ref":"refs/heads/main","pushedAt":"2024-07-04T12:55:46.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Clean up developer instructions to a vanilla Go project","shortMessageHtmlLink":"Clean up developer instructions to a vanilla Go project"}},{"before":"37251d938175452d2e44ecdfddfda1bab0e215b6","after":"e602a4a6fe37663ebe14c23c421d3c9792508e54","ref":"refs/heads/main","pushedAt":"2024-07-04T12:49:08.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Fix RequireCrossOriginAnonymous when crossorigin attr is allowed\n\nCaught by\nhttps://pkg.go.dev/golang.org/x/tools/go/analysis/passes/unusedwrite\nwhich is on by default in gopls but apparently nowhere else.","shortMessageHtmlLink":"Fix RequireCrossOriginAnonymous when crossorigin attr is allowed"}},{"before":"5703ea623cf20edfa3b559ec06a30beed52d70f0","after":"37251d938175452d2e44ecdfddfda1bab0e215b6","ref":"refs/heads/main","pushedAt":"2024-07-04T12:35:49.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Consistently raise minimum Go version and update CI\n\ngo.mod already requires Go 1.19.","shortMessageHtmlLink":"Consistently raise minimum Go version and update CI"}},{"before":"af654ef6ea1775b2930468f400d09af5a539dab9","after":"5703ea623cf20edfa3b559ec06a30beed52d70f0","ref":"refs/heads/main","pushedAt":"2024-07-04T12:24:00.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Merge pull request #207 from silverwind/4hex\n\nSupport four-value syntax for CSS hex color","shortMessageHtmlLink":"Merge pull request #207 from silverwind/4hex"}},{"before":"4444f2b80a5fd85f37ea80c29bd9af30065cb6ac","after":"af654ef6ea1775b2930468f400d09af5a539dab9","ref":"refs/heads/main","pushedAt":"2024-07-04T12:22:09.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":"Merge pull request #202 from caarlos0/tidy\n\nchore: go mod tidy","shortMessageHtmlLink":"Merge pull request #202 from caarlos0/tidy"}},{"before":"18ff7c7bee5d969aadd38a31f921a4689e3238c3","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.20.0","pushedAt":"2024-07-04T12:21:23.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"19901a8499025acb45db06a9cc4a5711bb4d15ac","after":"4444f2b80a5fd85f37ea80c29bd9af30065cb6ac","ref":"refs/heads/main","pushedAt":"2024-07-04T12:20:30.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"FiloSottile","name":"Filippo Valsorda","path":"/FiloSottile","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/1225294?s=80&v=4"},"commit":{"message":".github: disable dependabot\n\nbluemonday has very few dependencies, and uses a small subset of those.\nOn balance, the dependabot noise is not worth it, especially since it\ndoesn't do even basic package-level targeting, constantly flagging\nvulnerabilities that are ignored by e.g. govulncheck as not affecting\nthe module.","shortMessageHtmlLink":".github: disable dependabot"}},{"before":"58296ac6d804ffcc8564b0660245daf081680000","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.19.0","pushedAt":"2024-01-10T13:20:55.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"18ff7c7bee5d969aadd38a31f921a4689e3238c3","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.20.0","pushedAt":"2024-01-10T13:20:51.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.17.0 to 0.20.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.20.0.\n- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.20.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.17.0 to 0.20.0"}},{"before":"7a5503e9906499c86c1dd54749976fc8c6595511","after":"19901a8499025acb45db06a9cc4a5711bb4d15ac","ref":"refs/heads/main","pushedAt":"2023-12-11T12:50:15.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Update funding.yml\n\nNo longer accepting sponsors, will move towards finding a new owner for this project","shortMessageHtmlLink":"Update funding.yml"}},{"before":"862b5b8079df64b85f53e01b4e2a40b0027cf853","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.18.0","pushedAt":"2023-11-28T13:04:28.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"58296ac6d804ffcc8564b0660245daf081680000","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.19.0","pushedAt":"2023-11-28T13:04:23.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.17.0 to 0.19.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.19.0.\n- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.19.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.17.0 to 0.19.0"}},{"before":null,"after":"862b5b8079df64b85f53e01b4e2a40b0027cf853","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.18.0","pushedAt":"2023-11-09T13:34:35.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.17.0 to 0.18.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.18.0.\n- [Commits](https://github.com/golang/net/compare/v0.17.0...v0.18.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.17.0 to 0.18.0"}},{"before":"0eb99d24d2c54b9ade957a8c60efbb8ab9c7523c","after":"7a5503e9906499c86c1dd54749976fc8c6595511","ref":"refs/heads/main","pushedAt":"2023-10-29T11:38:04.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Merge pull request #195 from twpayne/go1.19\n\nRevert dependency on Go 1.21","shortMessageHtmlLink":"Merge pull request #195 from twpayne/go1.19"}},{"before":"162f8e523fbc136ea10d160da1a06a28bbcceb20","after":"0eb99d24d2c54b9ade957a8c60efbb8ab9c7523c","ref":"refs/heads/main","pushedAt":"2023-10-12T08:24:35.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Update go.mod to force golang.org/x/net to latest\n\nBumping version and ensuring latest golang.org/x/net as the HTTP rapid reset is triggering primitive vuln scanners, we do not implement a HTTP2 server and are not vulnerable but a minor bump can still help reduce noise for those searching for what they need to upgrade and patch.","shortMessageHtmlLink":"Update go.mod to force golang.org/x/net to latest"}},{"before":"2f1bc5bab3f5b45c01aa2f7af53c5643a6253989","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.17.0","pushedAt":"2023-10-12T08:01:22.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":"a50ca5f2e53d33247f60655e1ed76803fc61d26d","after":null,"ref":"refs/heads/buro9/update_deps","pushedAt":"2023-10-12T08:00:52.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"}},{"before":"c9ef7b1ac771a5439a45490a5a5d962208bd1f80","after":"162f8e523fbc136ea10d160da1a06a28bbcceb20","ref":"refs/heads/main","pushedAt":"2023-10-12T08:00:48.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Merge pull request #193 from microcosm-cc/buro9/update_deps\n\nUpdate deps and resolve staticcheck messages","shortMessageHtmlLink":"Merge pull request #193 from microcosm-cc/buro9/update_deps"}},{"before":null,"after":"a50ca5f2e53d33247f60655e1ed76803fc61d26d","ref":"refs/heads/buro9/update_deps","pushedAt":"2023-10-12T07:58:28.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Update deps and resolve staticcheck messages\n\nThis is a general update of the dependencies and also updates go to 1.21\n\nAs part of this the Makefile is updated to remove the long deprecated\nlint command and instead use staticcheck. Additionally staticcheck has\nbeen run and all messages resolved.\n\nThis update does not change any behaviour in bluemonday, all tests remain\nthe same and continue to pass, and there is no security issue resolved by\nthis update, it's purely a maintenance update.","shortMessageHtmlLink":"Update deps and resolve staticcheck messages"}},{"before":"8caa2974f81794189cbf3a53a2404171381335f8","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.16.0","pushedAt":"2023-10-11T13:31:12.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"2f1bc5bab3f5b45c01aa2f7af53c5643a6253989","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.17.0","pushedAt":"2023-10-11T13:31:06.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.14.0 to 0.17.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.17.0.\n- [Commits](https://github.com/golang/net/compare/v0.14.0...v0.17.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.14.0 to 0.17.0"}},{"before":"c0ab8c9ef95e5f2a7dd8c945527794f3e052edae","after":"c9ef7b1ac771a5439a45490a5a5d962208bd1f80","ref":"refs/heads/main","pushedAt":"2023-10-08T09:33:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Hacktober warning\n\nI do dread the low quality contributions during October","shortMessageHtmlLink":"Hacktober warning"}},{"before":"abcba2f2f32ec913c1ac11ad7489619eaa158eff","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.15.0","pushedAt":"2023-10-06T13:59:52.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"}},{"before":null,"after":"8caa2974f81794189cbf3a53a2404171381335f8","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.16.0","pushedAt":"2023-10-06T13:59:47.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.14.0 to 0.16.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.16.0.\n- [Commits](https://github.com/golang/net/compare/v0.14.0...v0.16.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.14.0 to 0.16.0"}},{"before":null,"after":"abcba2f2f32ec913c1ac11ad7489619eaa158eff","ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.15.0","pushedAt":"2023-09-06T13:05:00.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"dependabot[bot]","name":null,"path":"/apps/dependabot","primaryAvatarUrl":"https://avatars.githubusercontent.com/in/29110?s=80&v=4"},"commit":{"message":"Bump golang.org/x/net from 0.14.0 to 0.15.0\n\nBumps [golang.org/x/net](https://github.com/golang/net) from 0.14.0 to 0.15.0.\n- [Commits](https://github.com/golang/net/compare/v0.14.0...v0.15.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/net\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] ","shortMessageHtmlLink":"Bump golang.org/x/net from 0.14.0 to 0.15.0"}},{"before":"fdaa4340f4a0b90f65e40cb2d1e5592f644a2b19","after":null,"ref":"refs/heads/dependabot/go_modules/golang.org/x/net-0.14.0","pushedAt":"2023-08-07T14:05:49.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"}},{"before":"dd1bb0c68cd90e15b01194001a9e0bfff42af18a","after":"c0ab8c9ef95e5f2a7dd8c945527794f3e052edae","ref":"refs/heads/main","pushedAt":"2023-08-07T14:05:45.000Z","pushType":"pr_merge","commitsCount":2,"pusher":{"login":"buro9","name":"Dee","path":"/buro9","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/72949?s=80&v=4"},"commit":{"message":"Merge pull request #186 from microcosm-cc/dependabot/go_modules/golang.org/x/net-0.14.0\n\nBump golang.org/x/net from 0.12.0 to 0.14.0","shortMessageHtmlLink":"Merge pull request #186 from microcosm-cc/dependabot/go_modules/golan…"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEdu-y8QA","startCursor":null,"endCursor":null}},"title":"Activity · microcosm-cc/bluemonday"}