Skip to content

deps(deps): bump the elixir-dependencies group across 1 directory with 5 updates#25

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-7ca16588fa
Closed

deps(deps): bump the elixir-dependencies group across 1 directory with 5 updates#25
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-7ca16588fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 8, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the elixir-dependencies group with 5 updates in the / directory:

Package From To
bandit 1.7.0 1.8.0
lazy_html 0.1.4 0.1.7
phoenix 1.7.21 1.8.1
phoenix_live_reload 1.6.0 1.6.1
phoenix_live_view 1.1.2 1.1.11

Updates bandit from 1.7.0 to 1.8.0

Changelog

Sourced from bandit's changelog.

1.8.0 (18 Aug 2025)

Enhancements

  • If the user has set a content-length header when calling send_chunked/3, the response is streamed via content-length delimited framing and not chunked (#510)
Commits

Updates lazy_html from 0.1.4 to 0.1.7

Release notes

Sourced from lazy_html's releases.

v0.1.7

Updated

  • Updated Lexbor version (#21)

v0.1.6

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Changelog

Sourced from lazy_html's changelog.

v0.1.7 (2025-08-29)

Updated

  • Updated Lexbor version (#21)

v0.1.6 (2025-08-07)

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5 (2025-08-05)

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Commits

Updates phoenix from 1.7.21 to 1.8.1

Changelog

Sourced from phoenix's changelog.

1.8.1 (2025-08-28)

Bug fixes

  • [phx.new] Fix AGENTS.md failing to include CSS and JavaScript sections

1.8.0 (2025-08-05)

Bug fixes

  • [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

  • [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
  • [phx.new] Add mix precommit alias
  • [phx.new] Add AGENTS.md generation compatible with usage_rules
  • [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
  • [phx.new] Use LiveView 1.1 release in generated code
  • [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

  • Fix phx.gen.presence PubSub server name for umbrella apps
  • Fix phx.gen.live subscribing to pubsub in disconnected mounts

Enhancements

  • [phx.new] Initialize initial git repo when git is installed
  • [phx.new] Opt-in to HEEx :debug_tags_location in development
  • [phx.gen.live|html|json|context] Make context name optional and inflect based on schema when missing
  • [phx.gen.*] Use new Ecto 3.13 Repo.transact/2 in generators
  • [phx.gen.auth] Warn when using phx.gen.auth without esbuild as features assume phoenix_html.js in bundle
  • Add security.md guide for security best practices
  • [phoenix.js] - Add fetch() support to LongPoll when XMLHTTPRequest is not available
  • Optimize parameter scrubbing by precompiling patterns

1.8.0-rc.3 (2025-05-07)

Enhancements

  • [phx.gen.auth] Allow configuring the scope's assign key in phx.gen.auth
  • [phx.new] Do not override theme in root layout if explicitly set

1.8.0-rc.2 (2025-04-29)

Bug Fixes

  • [phx.gen.live] Only subscribe to pubsub if connected
  • [phx.gen.auth] Remove unused current_password field
  • [phx.gen.auth] Use context_app for scopes to fix generated scopes in umbrella apps

1.8.0-rc.1 (2025-04-16)

Enhancements

... (truncated)

Commits

Updates phoenix_live_reload from 1.6.0 to 1.6.1

Changelog

Sourced from phoenix_live_reload's changelog.

1.6.1 (2025-08-31)

  • Enhancements
    • Set :phoenix_live_reload private field to downstream instrumentation
    • Add @import directive support to CSS reload strategy
Commits

Updates phoenix_live_view from 1.1.2 to 1.1.11

Changelog

Sourced from phoenix_live_view's changelog.

v1.1.11 (2025-09-04)

Bug fixes

  • Fix LiveComponents being destroyed when their DOM ID changes, even though they are still rendered (#3981)
  • Fix warning when an empty comprehension is rendered in LiveViewTest

Enhancements

  • Speed up duplicate ID check in LiveViewTest (#3962)

v1.1.10 (2025-09-03)

Bug fixxes

  • Regression in v1.1.9 - fix Phoenix.LiveViewTest.submit_form/2 and Phoenix.LiveViewTest.follow_trigger_action/2 crashing when using keywords lists and not properly handling atom keys (#3975)

v1.1.9 (2025-09-02)

Bug fixes

  • Fix moved comprehension diff crashing LiveViewTest (#3963)
  • Ensure push_patch works during form recovery (#3964)
  • Fix diff crash in LiveViewTest when rendering structs (#3970)

Enhancements

  • Include form values from DOM in Phoenix.LiveViewTest.submit_form/2 and Phoenix.LiveViewTest.follow_trigger_action/2 to mimic browser behavior (#3885)
  • Allow assigning generic hooks to type Hook (#3955)
  • Allow typing hook element when using TypeScript (#3956)
  • Add more metadata to phx:page-loading-start event in case of errors (#3910)

v1.1.8 (2025-08-20)

Bug fixes

  • Fix race condition where patches were discarded when a join was still pending (#3957, big thank you to @​DaTrader)

v1.1.7 (2025-08-18)

Bug fixes

  • Fix regression introduced in v1.1.6

v1.1.6 (2025-08-18)

Bug fixes

  • Fix live components in nested views accidentally destroying live components in parent views (#3953)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the elixir-dependencies group across 1 directory wit…
23551bd 
…h 5 updates

Bumps the elixir-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.7.0` | `1.8.0` |
| [lazy_html](https://github.com/dashbitco/lazy_html) | `0.1.4` | `0.1.7` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.21` | `1.8.1` |
| [phoenix_live_reload](https://github.com/phoenixframework/phoenix_live_reload) | `1.6.0` | `1.6.1` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.2` | `1.1.11` |



Updates `bandit` from 1.7.0 to 1.8.0
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.7.0...1.8.0)

Updates `lazy_html` from 0.1.4 to 0.1.7
- [Release notes](https://github.com/dashbitco/lazy_html/releases)
- [Changelog](https://github.com/dashbitco/lazy_html/blob/main/CHANGELOG.md)
- [Commits](dashbitco/lazy_html@v0.1.4...v0.1.7)

Updates `phoenix` from 1.7.21 to 1.8.1
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.1)

Updates `phoenix_live_reload` from 1.6.0 to 1.6.1
- [Changelog](https://github.com/phoenixframework/phoenix_live_reload/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_reload@v1.6.0...v1.6.1)

Updates `phoenix_live_view` from 1.1.2 to 1.1.11
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.11/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.2...v1.1.11)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: lazy_html
  dependency-version: 0.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_reload
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.1.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Sep 8, 2025
@dependabot @github

dependabot Bot commented on behalf of github Sep 15, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 15, 2025
@dependabot dependabot Bot deleted the dependabot/hex/elixir-dependencies-7ca16588fa branch September 15, 2025 10:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@royveshovda royveshovda

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@royveshovda