Skip to content

deps(deps): bump the elixir-dependencies group across 1 directory with 11 updates#39

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-f252576ca5
Open

deps(deps): bump the elixir-dependencies group across 1 directory with 11 updates#39
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/elixir-dependencies-f252576ca5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jan 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the elixir-dependencies group with 10 updates in the / directory:

Package From To
bandit 1.7.0 1.10.2
finch 0.20.0 0.21.0
gettext 0.26.2 1.0.2
httpoison 2.2.3 2.3.0
lazy_html 0.1.4 0.1.8
phoenix 1.7.21 1.8.3
phoenix_live_reload 1.6.0 1.6.2
phoenix_live_view 1.1.2 1.1.20
swoosh 1.19.5 1.21.0
tailwind 0.3.1 0.4.1

Updates bandit from 1.7.0 to 1.10.2

Changelog

Sourced from bandit's changelog.

1.10.2 (22 Jan 2026)

Enhancements

  • Distinguish client disconnects from genuine body read timeouts (#564, thanks @​pepicrft!)

1.10.1 (5 Jan 2026)

Changes

  • Change default preference order for compression methods to be 'zstd (if present), gzip, deflate' (#562)

Fixes

  • Allow :zstd_options key to be set in config (#558, thanks @​Fudoshiki!)
  • Fix error where deflate responses weren't always completely sent (#559, thanks @​josevalim!)

1.10.0 (29 Dec 2025)

Enhancements

  • Expose response_encodings to allow specifying an explicit preference order to compression encodings (#555)

1.9.0 (12 Dec 2025)

Enhancements

1.8.0 (18 Aug 2025)

Enhancements

  • If the user has set a content-length header when calling send_chunked/3, the response is streamed via content-length delimited framing and not chunked (#510)
Commits

Updates finch from 0.20.0 to 0.21.0

Changelog

Sourced from finch's changelog.

v0.21.0 (2026-01-22)

Enhancements

  • Add support for querying default pool metrics via Finch.get_pool_status/2 #329
  • Add more details on Finch.request/3 docs #327

Bug Fixes

  • Prevent idle HTTP/1 pools from being terminated while connections are in use #292
  • Disable unsupported HTTP/2 server push responses to avoid crashes #333
  • Drop :cacerts from defaults for HTTP connections to avoid breaking plain HTTP pools #333
  • Only track default pool metrics when start_pool_metrics? is enabled #329

Other

  • Elixir 1.19 compatibility updates for HTTP/1 pool state handling #331
  • CI: update test matrix and x509/deps for Elixir 1.19 #330
  • Add ALPN large-body regression test coverage (issue #265) #332
Commits
  • f95c2e1 Merge pull request #339 from sneako/release-0.21.0
  • 20941ba prepare v0.21.0
  • 3053a16 Merge pull request #337 from oliveigah/main
  • 685e4ef feat: ets based default shp tracking
  • 6d1d6f1 Merge pull request #332 from neilberkman/main
  • 3c60899 Merge pull request #333 from TheOneric/fix-config-defaults
  • 173f88a Drop :cacerts from defaults for HTTP connections
  • ad478de Always disable unsupported server push responses
  • 75d06a8 Fix Credo readability warning for large number formatting
  • a38a401 Add test case for issue #265 (ALPN + large body bug)
  • Additional commits viewable in compare view

Updates gettext from 0.26.2 to 1.0.2

Changelog

Sourced from gettext's changelog.

v1.0.2

  • Only skip manifest removal on Elixir v1.19.3+

v1.0.1 (retired)

  • Remove unnecessary cleaning of Elixir manifests

v1.0.0

This is the first 1.0 release of Gettext, a silly 10 years (and 6 months) after we started working on it. There are very few changes from the latest 0.26 release, and none of them are breaking.

Here are the new goodies:

  • Add support for concatenating sigils if all parts are known at compile time (such as "Hello " <> ~s(world)).
  • Significantly increase the timeout for mix gettext.extract to two minutes.
  • Add Gettext.put_locale!/2.

Happy 10+ years of Elixir translations everyone! 🎉

Previous versions

See the CHANGELOG for versions before v1.0.

Commits
  • e3180f1 Release v1.0.2
  • ec2f9c1 Erase manifest unless on upcoming Elixir (#425)
  • 4960e49 Revert "Removed unnecessary cleaning of Elixir manifests (#423)"
  • 8844a32 Trim CHANGELOG
  • 7fe2dc7 Release v1.0.1
  • 30bf87d Removed unnecessary cleaning of Elixir manifests (#423)
  • d33d745 Bump actions/checkout from 4.2.2 to 5.0.0 (#422)
  • 7443953 Use ubuntu-latest in the publish-to-hex.yml workflow
  • d1a8c86 Release v1.0.0
  • e1df334 Update Elixir/Erlang versions in CI
  • Additional commits viewable in compare view

Updates httpoison from 2.2.3 to 2.3.0

Release notes

Sourced from httpoison's releases.

HTTPison 2.3.0

What's Changed

New Contributors

Full Changelog: edgurgel/httpoison@v2.2.3...v2.3.0

Commits
  • 3920ca7 fix: return a descriptive error for relative URLs instead of a CaseClauseErro...
  • 64ca963 Fix typos in redirect handling documentation
  • 0d7d6c8 tests: Tag network dependent test cases.
  • See full diff in compare view

Updates lazy_html from 0.1.4 to 0.1.8

Release notes

Sourced from lazy_html's releases.

v0.1.8

Added

  • Precompiled artifacts for musl

v0.1.7

Updated

  • Updated Lexbor version (#21)

v0.1.6

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Changelog

Sourced from lazy_html's changelog.

v0.1.8 (2025-09-15)

Added

  • Precompiled artifacts for musl

v0.1.7 (2025-08-29)

Updated

  • Updated Lexbor version (#21)

v0.1.6 (2025-08-07)

Fixed

  • Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

v0.1.5 (2025-08-05)

Added

  • Added LazyHTML.Tree.postreduce/3 and LazyHTML.Tree.prereduce/3 (#15)

Changed

  • Lowered the runtime glibc version requirement (#16)
Commits

Updates phoenix from 1.7.21 to 1.8.3

Changelog

Sourced from phoenix's changelog.

1.8.3 (2025-12-8)

Enhancements

  • Add top-level phoenix config: sort_verified_routes_query_params to enable sorting query params in verified routes during tests

Bug fixes

  • Fix endpoint port config in an umbrella application. (#6549)
  • Drop incoming channel messages with stale join refs

1.8.2 (2025-11-26)

Bug fixes

  • [phoenix.js] fix issue where LongPoll can cause "unmatched topic" errors (observed on iOS only) (#6538)
  • [phx.gen.live] fix tests when schema and table names are equal (#6477)
  • [Verified Routes] do not add path prefixes for static routes
  • [Phoenix.Endpoint] fix LongPoll being active by default since 1.8.0 (#6487)

Enhancements

  • [phoenix.js] socket now stops reconnection attempts while the page is hidden (#6534)
  • [phx.new] (re-)add <.input field={@form[:foo]} type="hidden" /> support in core components
  • [phx.new] set force_ssl in prod.exs by default (#6435)
  • [phx.new] change --docker base image to debian trixie (#6521)
  • [Phoenix.Socket.assign/2] allow passing a function as second argument assign(socket, fn _existing_assigns -> %{this_gets: "merged"} end) (#6530)
  • [Phoenix.Controller.assign/2] allow passing a function as second argument (#6542)
  • [Phoenix.Controller.assign/2] support keyword lists and maps as second argument similar to LiveView (#6513)
  • [Presence] support custom dispatcher for presence_diff broadcast (#6500)
  • [AGENTS.md] add short test guidelines to usage rules

1.8.1 (2025-08-28)

Bug fixes

  • [phx.new] Fix AGENTS.md failing to include CSS and JavaScript sections

1.8.0 (2025-08-05)

Bug fixes

  • [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

  • [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
  • [phx.new] Add mix precommit alias
  • [phx.new] Add AGENTS.md generation compatible with usage_rules
  • [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
  • [phx.new] Use LiveView 1.1 release in generated code
  • [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

  • Fix phx.gen.presence PubSub server name for umbrella apps

... (truncated)

Commits

Updates phoenix_html from 4.2.1 to 4.3.0

Changelog

Sourced from phoenix_html's changelog.

4.3.0 (2025-09-28)

  • Enhancements

    • Implement Phoenix.HTML.Safe for Duration
    • Add function head for argument names of normalize_value/2 to improve documentation
    • Allow custom tags in options_for_select
    • Allow datetime as form option values

  • Bug fixes

    • Avoid false positive warnings on Elixir v1.19
Commits

Updates phoenix_live_reload from 1.6.0 to 1.6.2

Changelog

Sourced from phoenix_live_reload's changelog.

1.6.2 (2025-12-08)

  • Bug fixes
    • Properly deal with Unicode when forwarding logs

1.6.1 (2025-08-31)

  • Enhancements
    • Set :phoenix_live_reload private field to downstream instrumentation
    • Add @import directive support to CSS reload strategy
Commits

Updates phoenix_live_view from 1.1.2 to 1.1.20

Changelog

Sourced from phoenix_live_view's changelog.

Commits
  • b146b33 release v1.1.20
  • b7f2e12 Update assets
  • 32b3925 Bump morphom. Closes #3932
  • fa54735 Allow live_file_input to sync attributes except value (#4112)
  • 82e50cd add warning about bypassing form validation (#4115)
  • 75c5320 Fix incorrect test name for teleported external form submission (#4113)
  • dad5d1f add note about setting properties to JS.set_attribute/1 (#3826)
  • f8f9fb6 Add documentation example for Phoenix.LiveView.render_with/2 (#4063)
  • dd29392 fix: add handle_info for :socket_close on UploadClient (#4080)
  • a2c0b8f fix external form submission for teleported form (#4111)
  • Additional commits viewable in compare view

Updates swoosh from 1.19.5 to 1.21.0

Release notes

Sourced from swoosh's releases.

v1.21.0 🚀

  • Bump Elixir requirement to 1.16, Erlang OTP to 26

Full Changelog: swoosh/swoosh@v1.20.1...v1.21.0

v1.20.1 🚀

🐛 Bug Fixes

⛓️ Dependency

New Contributors

Full Changelog: swoosh/swoosh@v1.20.0...v1.20.1

v1.20.0 🚀

✨ Features

⛓️ Dependency

New Contributors

Full Changelog: swoosh/swoosh@v1.19.9...v1.20.0

v1.19.9 🚀

✨ Features

📝 Documentation

⛓️ Dependency

... (truncated)

Changelog

Sourced from swoosh's changelog.

1.21.0

  • Bump Elixir requirement to 1.16, Erlang OTP to 26

1.20.1

🐛 Bug Fixes

1.20.0

✨ Features

1.19.9

✨ Features

📝 Documentation

1.19.8

✨ Features

1.19.7

🐛 Bug Fixes

  • Fix special "TEMPLATE" from option in CustomerIO adapter @​maltoe (#1069)

1.19.6

✨ Features

Commits

Updates tailwind from 0.3.1 to 0.4.1

Changelog

Sourced from tailwind's changelog.

v0.4.1 (2025-10-17)

  • Ignore ANSI escape codes when checking version

v0.4.0 (2025-09-10)

  • No longer copy assets in mix tailwind.install
  • Discard empty proxy env vars
  • Ensure watcher picks up rule changes on Windows
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(deps): bump the elixir-dependencies group across 1 directory wit…
ccf872a 
…h 11 updates

Bumps the elixir-dependencies group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.7.0` | `1.10.2` |
| [finch](https://github.com/sneako/finch) | `0.20.0` | `0.21.0` |
| [gettext](https://github.com/elixir-gettext/gettext) | `0.26.2` | `1.0.2` |
| [httpoison](https://github.com/edgurgel/httpoison) | `2.2.3` | `2.3.0` |
| [lazy_html](https://github.com/dashbitco/lazy_html) | `0.1.4` | `0.1.8` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.21` | `1.8.3` |
| [phoenix_live_reload](https://github.com/phoenixframework/phoenix_live_reload) | `1.6.0` | `1.6.2` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.2` | `1.1.20` |
| [swoosh](https://github.com/swoosh/swoosh) | `1.19.5` | `1.21.0` |
| [tailwind](https://github.com/phoenixframework/tailwind) | `0.3.1` | `0.4.1` |



Updates `bandit` from 1.7.0 to 1.10.2
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.7.0...1.10.2)

Updates `finch` from 0.20.0 to 0.21.0
- [Changelog](https://github.com/sneako/finch/blob/main/CHANGELOG.md)
- [Commits](sneako/finch@v0.20.0...v0.21.0)

Updates `gettext` from 0.26.2 to 1.0.2
- [Changelog](https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md)
- [Commits](elixir-gettext/gettext@v0.26.2...v1.0.2)

Updates `httpoison` from 2.2.3 to 2.3.0
- [Release notes](https://github.com/edgurgel/httpoison/releases)
- [Commits](edgurgel/httpoison@v2.2.3...v2.3.0)

Updates `lazy_html` from 0.1.4 to 0.1.8
- [Release notes](https://github.com/dashbitco/lazy_html/releases)
- [Changelog](https://github.com/dashbitco/lazy_html/blob/main/CHANGELOG.md)
- [Commits](dashbitco/lazy_html@v0.1.4...v0.1.8)

Updates `phoenix` from 1.7.21 to 1.8.3
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.3)

Updates `phoenix_html` from 4.2.1 to 4.3.0
- [Changelog](https://github.com/phoenixframework/phoenix_html/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_html@v4.2.1...v4.3.0)

Updates `phoenix_live_reload` from 1.6.0 to 1.6.2
- [Changelog](https://github.com/phoenixframework/phoenix_live_reload/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_reload@v1.6.0...v1.6.2)

Updates `phoenix_live_view` from 1.1.2 to 1.1.20
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.20/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.2...v1.1.20)

Updates `swoosh` from 1.19.5 to 1.21.0
- [Release notes](https://github.com/swoosh/swoosh/releases)
- [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md)
- [Commits](swoosh/swoosh@v1.19.5...v1.21.0)

Updates `tailwind` from 0.3.1 to 0.4.1
- [Changelog](https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/tailwind@v0.3.1...v0.4.1)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: finch
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: gettext
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: elixir-dependencies
- dependency-name: httpoison
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: lazy_html
  dependency-version: 0.1.8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: phoenix_html
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_reload
  dependency-version: 1.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.1.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: elixir-dependencies
- dependency-name: swoosh
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
- dependency-name: tailwind
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: elixir-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@royveshovda royveshovda

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@royveshovda