Skip to content

deps(deps): bump the elixir-dependencies group across 1 directory with 9 updates#31

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-b44719848d
Closed

deps(deps): bump the elixir-dependencies group across 1 directory with 9 updates#31
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-b44719848d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 29, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the elixir-dependencies group with 8 updates in the / directory:

Package From To
bandit 1.7.0 1.8.0
gettext 0.26.2 1.0.0
lazy_html 0.1.4 0.1.8
phoenix 1.7.21 1.8.1
phoenix_live_reload 1.6.0 1.6.1
phoenix_live_view 1.1.2 1.1.13
swoosh 1.19.5 1.19.8
tailwind 0.3.1 0.4.0

Updates bandit from 1.7.0 to 1.8.0

Changelog

Sourced from bandit's changelog.

1.8.0 (18 Aug 2025)

Enhancements

  • If the user has set a content-length header when calling send_chunked/3, the response is streamed via content-length delimited framing and not chunked (#510)
Commits

Updates gettext from 0.26.2 to 1.0.0

Changelog

Sourced from gettext's changelog.

v1.0.0

This is the first 1.0 release of Gettext, a silly 10 years (and 6 months) after we started working on it. There are very few changes from the latest 0.26 release, and none of them are breaking.

Here are the new goodies:

  • Add support for concatenating sigils if all parts are known at compile time (such as "Hello " <> ~s(world)).
  • Significantly increase the timeout for mix gettext.extract to two minutes.
  • Add Gettext.put_locale!/1.

Happy 10+ years of Elixir translations everyone! 🎉

Commits

Updates lazy_html from 0.1.4 to 0.1.8

Release notes

Sourced from lazy_html's releases.

v0.1.8

Added

  • Precompiled artifacts for musl

v0.1.7

Updated

  • Updated Lexbor version (#21)

v0.1.6

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Changelog

Sourced from lazy_html's changelog.

v0.1.8 (2025-09-15)

Added

  • Precompiled artifacts for musl

v0.1.7 (2025-08-29)

Updated

  • Updated Lexbor version (#21)

v0.1.6 (2025-08-07)

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5 (2025-08-05)

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Commits

Updates phoenix from 1.7.21 to 1.8.1

Changelog

Sourced from phoenix's changelog.

1.8.1 (2025-08-28)

Bug fixes

  • [phx.new] Fix AGENTS.md failing to include CSS and JavaScript sections

1.8.0 (2025-08-05)

Bug fixes

  • [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

  • [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
  • [phx.new] Add mix precommit alias
  • [phx.new] Add AGENTS.md generation compatible with usage_rules
  • [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
  • [phx.new] Use LiveView 1.1 release in generated code
  • [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

  • Fix phx.gen.presence PubSub server name for umbrella apps
  • Fix phx.gen.live subscribing to pubsub in disconnected mounts

Enhancements

  • [phx.new] Initialize initial git repo when git is installed
  • [phx.new] Opt-in to HEEx :debug_tags_location in development
  • [phx.gen.live|html|json|context] Make context name optional and inflect based on schema when missing
  • [phx.gen.*] Use new Ecto 3.13 Repo.transact/2 in generators
  • [phx.gen.auth] Warn when using phx.gen.auth without esbuild as features assume phoenix_html.js in bundle
  • Add security.md guide for security best practices
  • [phoenix.js] - Add fetch() support to LongPoll when XMLHTTPRequest is not available
  • Optimize parameter scrubbing by precompiling patterns

1.8.0-rc.3 (2025-05-07)

Enhancements

  • [phx.gen.auth] Allow configuring the scope's assign key in phx.gen.auth
  • [phx.new] Do not override theme in root layout if explicitly set

1.8.0-rc.2 (2025-04-29)

Bug Fixes

  • [phx.gen.live] Only subscribe to pubsub if connected
  • [phx.gen.auth] Remove unused current_password field
  • [phx.gen.auth] Use context_app for scopes to fix generated scopes in umbrella apps

1.8.0-rc.1 (2025-04-16)

Enhancements

... (truncated)

Commits

Updates phoenix_html from 4.2.1 to 4.3.0

Changelog

Sourced from phoenix_html's changelog.

4.3.0 (2025-09-28)

  • Enhancements

    • Implement Phoenix.HTML.Safe for Duration
    • Add function head for argument names of normalize_value/2 to improve documentation
    • Allow custom tags in options_for_select
    • Allow datetime as form option values

  • Bug fixes

    • Avoid false positive warnings on Elixir v1.19
Commits

Updates phoenix_live_reload from 1.6.0 to 1.6.1

Changelog

Sourced from phoenix_live_reload's changelog.

1.6.1 (2025-08-31)

  • Enhancements
    • Set :phoenix_live_reload private field to downstream instrumentation
    • Add @import directive support to CSS reload strategy
Commits

Updates phoenix_live_view from 1.1.2 to 1.1.13

Changelog

Sourced from phoenix_live_view's changelog.

v1.1.13 (2025-09-18)

Bug fixes

  • Fix invalid stream merging in LiveViewTest (#3993)
  • Fix extra spaces when formatting nested inline tags (#3995)
  • Ensure error reasons are serialized into message on the client (#3984)
  • Prevent JavaScript exception when passing "*" to JS.ignore_attributes/3 (#3996)

v1.1.12 (2025-09-14)

Bug fixes

  • Prevent HEEx line from being reported as uncovered when using a pattern in :let={} (#3989)

Enhancements

  • Automatically symlink assets/node_modules folder for colocated hooks (see the documentation for Phoenix.LiveView.ColocatedJS, #3988)

v1.1.11 (2025-09-04)

Bug fixes

  • Fix LiveComponents being destroyed when their DOM ID changes, even though they are still rendered (#3981)
  • Fix warning when an empty comprehension is rendered in LiveViewTest

Enhancements

  • Speed up duplicate ID check in LiveViewTest (#3962)

v1.1.10 (2025-09-03)

Bug fixxes

  • Regression in v1.1.9 - fix Phoenix.LiveViewTest.submit_form/2 and Phoenix.LiveViewTest.follow_trigger_action/2 crashing when using keywords lists and not properly handling atom keys (#3975)

v1.1.9 (2025-09-02)

Bug fixes

  • Fix moved comprehension diff crashing LiveViewTest (#3963)
  • Ensure push_patch works during form recovery (#3964)
  • Fix diff crash in LiveViewTest when rendering structs (#3970)

Enhancements

  • Include form values from DOM in Phoenix.LiveViewTest.submit_form/2 and Phoenix.LiveViewTest.follow_trigger_action/2 to mimic browser behavior (#3885)
  • Allow assigning generic hooks to type Hook (#3955)
  • Allow typing hook element when using TypeScript (#3956)
  • Add more metadata to phx:page-loading-start event in case of errors (#3910)

... (truncated)

Commits

Updates swoosh from 1.19.5 to 1.19.8

Release notes

Sourced from swoosh's releases.

v1.19.8 🚀

✨ Features

Full Changelog: swoosh/swoosh@v1.19.7...v1.19.8

v1.19.7 🚀

🐛 Bug Fixes

  • Fix special "TEMPLATE" from option in CustomerIO adapter @​maltoe (#1069)

New Contributors

Full Changelog: swoosh/swoosh@v1.19.6...v1.19.7

v1.19.6 🚀

✨ Features

⛓️ Dependency

Full Changelog: swoosh/swoosh@v1.19.5...v1.19.6

Changelog

Sourced from swoosh's changelog.

1.19.8

✨ Features

1.19.7

🐛 Bug Fixes

  • Fix special "TEMPLATE" from option in CustomerIO adapter @​maltoe (#1069)

1.19.6

✨ Features

Commits

Updates tailwind from 0.3.1 to 0.4.0

Changelog

Sourced from tailwind's changelog.

v0.4.0 (2025-09-10)

  • No longer copy assets in mix tailwind.install
  • Discard empty proxy env vars
  • Ensure watcher picks up rule changes on Windows
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Sep 29, 2025
@dependabot
deps(deps): bump the elixir-dependencies group across 1 directory wit…
c303dc2 
…h 9 updates

Bumps the elixir-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.7.0` | `1.8.0` |
| [gettext](https://github.com/elixir-gettext/gettext) | `0.26.2` | `1.0.0` |
| [lazy_html](https://github.com/dashbitco/lazy_html) | `0.1.4` | `0.1.8` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.21` | `1.8.1` |
| [phoenix_live_reload](https://github.com/phoenixframework/phoenix_live_reload) | `1.6.0` | `1.6.1` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.2` | `1.1.13` |
| [swoosh](https://github.com/swoosh/swoosh) | `1.19.5` | `1.19.8` |
| [tailwind](https://github.com/phoenixframework/tailwind) | `0.3.1` | `0.4.0` |



Updates `bandit` from 1.7.0 to 1.8.0
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.7.0...1.8.0)

Updates `gettext` from 0.26.2 to 1.0.0
- [Changelog](https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md)
- [Commits](elixir-gettext/gettext@v0.26.2...v1.0.0)

Updates `lazy_html` from 0.1.4 to 0.1.8
- [Release notes](https://github.com/dashbitco/lazy_html/releases)
- [Changelog](https://github.com/dashbitco/lazy_html/blob/main/CHANGELOG.md)
- [Commits](dashbitco/lazy_html@v0.1.4...v0.1.8)

Updates `phoenix` from 1.7.21 to 1.8.1
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.1)

Updates `phoenix_html` from 4.2.1 to 4.3.0
- [Changelog](https://github.com/phoenixframework/phoenix_html/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_html@v4.2.1...v4.3.0)

Updates `phoenix_live_reload` from 1.6.0 to 1.6.1
- [Changelog](https://github.com/phoenixframework/phoenix_live_reload/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_reload@v1.6.0...v1.6.1)

Updates `phoenix_live_view` from 1.1.2 to 1.1.13
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.13/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.2...v1.1.13)

Updates `swoosh` from 1.19.5 to 1.19.8
- [Release notes](https://github.com/swoosh/swoosh/releases)
- [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md)
- [Commits](swoosh/swoosh@v1.19.5...v1.19.8)

Updates `tailwind` from 0.3.1 to 0.4.0
- [Changelog](https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/tailwind@v0.3.1...v0.4.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: gettext
  dependency-version: 1.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: elixir-dependencies
- dependency-name: lazy_html
  dependency-version: 0.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: phoenix_html
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_reload
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.1.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: swoosh
  dependency-version: 1.19.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: tailwind
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/hex/elixir-dependencies-b44719848d branch from 5c67f00 to c303dc2 Compare October 23, 2025 10:42
@dependabot @github

dependabot Bot commented on behalf of github Nov 17, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 17, 2025
@dependabot dependabot Bot deleted the dependabot/hex/elixir-dependencies-b44719848d branch November 17, 2025 09:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@royveshovda royveshovda

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@royveshovda