Skip to content

Bump the mix-minor-and-patch group with 8 updates - #49

Merged
andreogle merged 1 commit into
mainfrom
dependabot/hex/mix-minor-and-patch-b2c58ac3c1
Aug 27, 2026
Merged

Bump the mix-minor-and-patch group with 8 updates#49
andreogle merged 1 commit into
mainfrom
dependabot/hex/mix-minor-and-patch-b2c58ac3c1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the mix-minor-and-patch group with 8 updates:

Package From To
bandit 1.12.4 1.12.5
phoenix 1.8.11 1.8.12
phoenix_live_dashboard 0.8.7 0.9.0
phoenix_live_view 1.2.9 1.2.11
req 0.7.2 0.7.3
sentry 13.4.2 13.5.0
swoosh 1.27.0 1.28.0
telemetry_metrics 1.1.0 1.2.0

Updates bandit from 1.12.4 to 1.12.5

Changelog

Sourced from bandit's changelog.

1.12.5 (20 Aug 2026)

Changes

  • Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (#671)
  • Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#665)
  • Treat proxy-connection as a connection-specific header in HTTP/2 (#632)
  • Return FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (#652)
  • Treat abortive-close posix reasons as client closures in logging (#663)

Fixes

  • Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (#670)
  • Use PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (#656)
  • Reject send_file ranges past EOF instead of emitting a negative Content-Length (#653)
  • Reject compressed WebSocket control frames regardless of the fin bit (#651)
  • Enforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (#631)
  • Fix typos (#627)
  • Fix non-deterministic compile-time code (#646)

Enhancements

  • Lazily precompile the invalid-field-value match pattern (#662)
  • Add tests for untested configuration options (#659)
  • Match the weak-etag prefix W/ explicitly (#657)
  • Do not duplicate an existing vary: accept-encoding header (#658)
  • Honor the close/keep-alive token inside a comma-separated Connection header (#655)
  • Initialize the per-stream receive window from the advertised initial_window_size (#654)
  • Keep track of body_length to avoid list iterations (#645)
  • Avoid per-header length/1 and option lookups in do_read_headers! (#614) (#626)
Commits
  • 9571499 Version bump to 1.12.5
  • f6914aa Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...
  • d38cf04 Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (#670)
  • cce7c5f Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...
  • eca1713 Fixup recent test noise
  • b65c235 Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (#667)
  • 4ccc008 Treat abortive-close posix reasons as client closures in logging (#663)
  • 274eb55 Lazily precompile the invalid-field-value match pattern (#662)
  • 10710de Enforce the chunk-size grammar in a single pass (#661)
  • d69202e Unify case-insensitive comma-separated header token checks (#660)
  • Additional commits viewable in compare view

Updates phoenix from 1.8.11 to 1.8.12

Release notes

Sourced from phoenix's releases.

v1.8.12

Bug fixes

  • [phx.gen.auth] Fix return_to session key not being cleared after logging in (#6798)
  • [Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (#6800)
Changelog

Sourced from phoenix's changelog.

v1.8.12 (2026-08-20)

Bug fixes

  • [phx.gen.auth] Fix return_to session key not being cleared after logging in (#6798)
  • [Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (#6800)
Commits

Updates phoenix_live_dashboard from 0.8.7 to 0.9.0

Changelog

Sourced from phoenix_live_dashboard's changelog.

v0.9.0 (2026-08-12)

  • Require Phoenix LiveView 1.0+
  • Require Elixir 1.15+
  • Add a compact nested list view for application supervision trees
  • Allow overriding the Ecto Stats info module per repository by passing {repo, info_module} tuples in :ecto_repos
  • Add refresh_interval as a reporting option for chart components
  • Display process label in application and process views
Commits

Updates phoenix_live_view from 1.2.9 to 1.2.11

Release notes

Sourced from phoenix_live_view's releases.

v1.2.11

Bug fixes

  • Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
  • Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
  • Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)
Changelog

Sourced from phoenix_live_view's changelog.

v1.2.11 (2026-08-27)

Bug fixes

  • Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
  • Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
  • Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10 (2026-08-20)

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)
Commits

Updates req from 0.7.2 to 0.7.3

Release notes

Sourced from req's releases.

v0.7.3

  • encode_body: Revert "Automatically change GET to POST when request body is set."
Changelog

Sourced from req's changelog.

v0.7.3 (2026-08-19)

Commits
  • 2901181 Release v0.7.3
  • e857078 Revert "encode_body: Automatically change GET to POST when request body is ...
  • See full diff in compare view

Updates sentry from 13.4.2 to 13.5.0

Release notes

Sourced from sentry's releases.

13.5.0

New Features ✨

  • (oban/cron) introduce should_report_error_check_in_callback config option by @​solnic in #1173

Bug Fixes 🐛

Tracing

Changelog

Sourced from sentry's changelog.

13.5.0

New Features ✨

  • (oban/cron) introduce should_report_error_check_in_callback config option by @​solnic in #1173

Bug Fixes 🐛

Tracing

Commits

Updates swoosh from 1.27.0 to 1.28.0

Release notes

Sourced from swoosh's releases.

v1.28.0 🚀

✨ Features

🧰 Maintenance

New Contributors

Full Changelog: swoosh/swoosh@1.27.1...v1.28.0

v1.27.1 🚀

🐛 Bug Fixes

⛓️ Dependency

New Contributors

Full Changelog: swoosh/swoosh@v1.27.0...1.27.1

Changelog

Sourced from swoosh's changelog.

1.28.0

✨ Features

1.27.1

🐛 Bug Fixes

  • Fix Swoosh.Adapters.AmazonSES crashing when the SES error response XML is missing an expected node @​youdie006 (#1186)
Commits
  • 200187e Bump release metadata and changelog
  • eab4387 Regenerate styles with Tailwind CSS
  • 485a58a Return an error tuple for any unexpected status
  • 44e6e44 Revert decode_json extraction
  • 8c04b50 Address review feedback on TurboSMTP adapter
  • 7a3d33c Reference the PR in the changelog entry
  • 120504c Add TurboSMTP adapter
  • 3985f9e build(deps): bump bandit from 1.12.0 to 1.12.4 (#1179)
  • ffa34f6 build(deps): bump cowboy from 2.17.0 to 2.18.0 (#1180)
  • 90f66ec build(deps): bump hackney from 4.5.2 to 4.7.3 (#1187)
  • Additional commits viewable in compare view

Updates telemetry_metrics from 1.1.0 to 1.2.0

Changelog

Sourced from telemetry_metrics's changelog.

1.2.0

Added

  • Add support for functions in tags (this supersedes tag_values)

Changed

  • Assorted optimizations

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the mix-minor-and-patch group with 8 updates
2a0c592 
Bumps the mix-minor-and-patch group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.12.4` | `1.12.5` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.11` | `1.8.12` |
| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.2.9` | `1.2.11` |
| [req](https://github.com/wojtekmach/req) | `0.7.2` | `0.7.3` |
| [sentry](https://github.com/getsentry/sentry-elixir) | `13.4.2` | `13.5.0` |
| [swoosh](https://github.com/swoosh/swoosh) | `1.27.0` | `1.28.0` |
| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |


Updates `bandit` from 1.12.4 to 1.12.5
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.12.4...1.12.5)

Updates `phoenix` from 1.8.11 to 1.8.12
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.8.12/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.8.11...v1.8.12)

Updates `phoenix_live_dashboard` from 0.8.7 to 0.9.0
- [Release notes](https://github.com/phoenixframework/phoenix_live_dashboard/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_dashboard@v0.8.7...v0.9.0)

Updates `phoenix_live_view` from 1.2.9 to 1.2.11
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.2.9...v1.2.11)

Updates `req` from 0.7.2 to 0.7.3
- [Release notes](https://github.com/wojtekmach/req/releases)
- [Changelog](https://github.com/wojtekmach/req/blob/main/CHANGELOG.md)
- [Commits](wojtekmach/req@v0.7.2...v0.7.3)

Updates `sentry` from 13.4.2 to 13.5.0
- [Release notes](https://github.com/getsentry/sentry-elixir/releases)
- [Changelog](https://github.com/getsentry/sentry-elixir/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-elixir@13.4.2...13.5.0)

Updates `swoosh` from 1.27.0 to 1.28.0
- [Release notes](https://github.com/swoosh/swoosh/releases)
- [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md)
- [Commits](swoosh/swoosh@v1.27.0...v1.28.0)

Updates `telemetry_metrics` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md)
- [Commits](https://github.com/beam-telemetry/telemetry_metrics/commits)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: phoenix
  dependency-version: 1.8.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: phoenix_live_dashboard
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-minor-and-patch
- dependency-name: phoenix_live_view
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: req
  dependency-version: 0.7.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: sentry
  dependency-version: 13.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-minor-and-patch
- dependency-name: swoosh
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-minor-and-patch
- dependency-name: telemetry_metrics
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 27, 2026
@dependabot
dependabot Bot requested a review from andreogle as a code owner August 27, 2026 11:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 27, 2026
@andreogle
andreogle merged commit 0a4cdaf into main Aug 27, 2026
5 checks passed
@andreogle
andreogle deleted the dependabot/hex/mix-minor-and-patch-b2c58ac3c1 branch August 27, 2026 18:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andreogle andreogle Awaiting requested review from andreogle andreogle is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@andreogle