Skip to content

Bump the production-dependencies group across 1 directory with 11 updates #89

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the production-dependencies group across 1 directory with 11 updates #89

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 17, 2025

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
bandit 1.5.7 1.6.7
esbuild 0.8.1 0.9.0
gettext 0.25.0 0.26.2
nimble_parsec 1.4.0 1.4.2
phoenix 1.7.14 1.7.19
phoenix_ecto 4.6.2 4.6.3
phoenix_live_dashboard 0.8.4 0.8.6
phoenix_live_view 0.20.17 1.0.4
tailwind 0.2.3 0.2.4

Updates bandit from 1.5.7 to 1.6.7

Changelog

Sourced from bandit's changelog.

1.6.7 (30 Jan 2025)

Changes

  • Consider timeouts when reading HTTP/1 headers as a connection error and not an HTTP error
  • Enhance logging for WebSocket deflation errors

1.6.6 (25 Jan 2025)

Fixes

  • Consider closures during HTTP/1 header reading as a socket error to silence them by default via log_client_closures config flag
  • Send connection: close when closing connection on error per RFC9112§9.6

Enhancements

  • Add experimental opt-in trace logging to help diagnose hard to reproduce errors
  • Move CI to 1.18 & improve tests (#459, #461, thanks @​grzuy!)

1.6.5 (15 Jan 2025)

Fixes

  • Fix regression introduced in 1.6.1 where we would not send headers set by the Plug during WebSocket upgrades (#458)

Enhancements

  • Properly normalize Erlang errors before emitting telemetry and logged crash_reason (#455, thanks @​grzuy!)

1.6.4 (11 Jan 2025)

Fixes

  • Fix error in socket setup error handling introduced in 1.6.2 (thanks @​danielspofford!)

1.6.3 (8 Jan 2025)

Fixes

  • Always close HTTP/1 connection in any case where an error comes out of the plug (#452, thanks @​zookzook!)
  • Fix dialyzer warning introduced by Thousand Island 1.3.9

1.6.2 (4 Jan 2025)

Enhancements

  • Send telemetry events on Plugs that throw or exit (#443)
  • Improve test robustness & speed (#446)
  • Read a minimal number of bytes when sniffing for protocol (#449)
  • Add plug and websock to logging metadata whenever possible (#448)

... (truncated)

Commits
  • 5879549 Version bump to 1.6.7
  • 2f55abc Include details of websocket deflation error
  • 8f257f1 Consider HTTP/1 header read timeouts as connection errors
  • 575c396 Version bump to 1.6.6
  • 137ff68 Fixup dialyzer warning under 1.18
  • 9e6ba26 Don't credo test files
  • f62faab Version bump CI to 1.18/27
  • a5fcb83 Minor typo
  • 5adc828 Trace tooling (#453)
  • bc0a4fd Use an apply when inducing runtime crashes in order to fool the increasingly ...
  • Additional commits viewable in compare view

Updates esbuild from 0.8.1 to 0.9.0

Changelog

Sourced from esbuild's changelog.

v0.9.0 (2025-02-10)

This release requires Elixir v1.14+ and Erlang/OTP 25+.

  • Update PGP keys to support latest esbuild versions
  • Update esbuild to version 0.25.0
  • Remove dependency on CAStore in favor of using Erlang certificates

v0.8.2 (2024-10-18)

  • Fallback to ipv4/ipv6 for unreachable hosts
Commits

Updates gettext from 0.25.0 to 0.26.2

Changelog

Sourced from gettext's changelog.

v0.26.2

  • Introduces warning if plural messages are defined with the same singular message and conflicting plural messages.
  • Improves performance by striping not required metadata when compiling the Gettext backend.

v0.26.1

  • Address backwards incompatible changes in previous release

v0.26.0

This release changes the way you use Gettext. We're not crazy: it does so because doing so makes it a lot faster to compile projects that use Gettext. The changes you have to make to your code are minimal, and the old behavior is deprecated so that you will be guided on how to update.

The reason for this change is that it removes compile-time dependencies from modules that used to import a Gettext backend. In applications such as Phoenix applications, where every view and controller imports the Gettext backend, this change means a lot less compilation when you make translation changes!

Here's the new API. Now, instead of defining a Gettext backend (use Gettext) and then importing that to use its macros, you need to:

  1. Define a Gettext backend with use Gettext.Backend
  2. Import and use its macros with use Gettext, backend: MyApp.Gettext.

Before and After

Before this release, code using Gettext used to look something like this:

defmodule MyApp.Gettext do
  use Gettext, otp_app: :my_app
end
defmodule MyAppWeb.Controller do
import MyApp.Gettext
end

This creates a compile-time dependency for every module that imports the Gettext backend.

With this release, the above turns into:

defmodule MyApp.Gettext do
  use Gettext.Backend, otp_app: :my_app
end
defmodule MyAppWeb.Controller do
use Gettext, backend: MyApp.Gettext
end

... (truncated)

Commits

Updates nimble_parsec from 1.4.0 to 1.4.2

Changelog

Sourced from nimble_parsec's changelog.

v1.4.2 (2025-01-21)

Enhancements

  • Remove more warnings on Elixir v1.18+

v1.4.1 (2025-01-15)

Enhancements

  • Remove warnings on Elixir v1.18+
Commits

Updates phoenix from 1.7.14 to 1.7.19

Changelog

Sourced from phoenix's changelog.

1.7.19 (2024-01-31)

Enhancements

  • [phx.new] - bind to 0.0.0.0 in dev.exs if phx.new is being run inside a docker container. This exposes the container's phoenix server to the host so that it is accessible over port forwarding.

1.7.18 (2024-12-10)

Enhancements

  • Use new interpolation syntax in generators
  • Update gettext in generators to 0.26

1.7.17 (2024-12-03)

Enhancements

  • Use LiveView 1.0.0 for newly generated applications

1.7.16 (2024-12-03)

Bug fixes

  • Fix required Elixir version in mix.exs

1.7.15 (2024-12-02)

Enhancements

  • Support phoenixframework.org installer
Commits

Updates phoenix_ecto from 4.6.2 to 4.6.3

Changelog

Sourced from phoenix_ecto's changelog.

v4.6.3

  • Enhancements

    • Add prefix option to check repo status plug

  • Bug fix

    • Fix map.field notation warning on Elixir 1.17
Commits

Updates phoenix_html from 4.1.1 to 4.2.0

Changelog

Sourced from phoenix_html's changelog.

4.2.0 (2024-12-28)

  • Enhancements

    • Add Phoenix.HTML.css_escape/1 to escape strings for use inside CSS selectors
    • Add the ability to pass :hr to options_for_select/2 to render a horizontal rule

  • Bug fixes

    • Pass form action through in FormData implementation
Commits

Updates phoenix_live_dashboard from 0.8.4 to 0.8.6

Changelog

Sourced from phoenix_live_dashboard's changelog.

v0.8.6 (2024-12-30)

  • Update Erlang docs url
  • Fix rendering of durations in Elixir v1.18+
  • Fix warnings on Elixir v1.18+
  • Remove img nonce which had no effect whatsoever

v0.8.5 (2024-11-14)

  • Provide a mechanism for user extensible LiveView hooks
  • Add Erlang/OTP 27 Process label support
Commits
  • 3a1bd99 Release v0.8.6
  • f8f60d2 Duration.to_string (#464)
  • 46b14cb Update Erlang docs url since they changed to ExDoc (#462)
  • 36ad469 Merge pull request #456 from phoenixframework/sd-update-deps
  • 96f6468 don't migrate to curly braces yet
  • 028f957 fix test that relied on push_patch to wrong live session
  • 7901e06 Update assets
  • 3eafe7f Build assets on CI and add caching (#461)
  • 93627a3 remove dead code found by type system
  • 6b776e5 fix deprecation warnings
  • Additional commits viewable in compare view

Updates phoenix_live_view from 0.20.17 to 1.0.4

Changelog

Sourced from phoenix_live_view's changelog.

1.0.4 (2025-02-04)

Bug fixes

  • Fix elements with phx-remove inside sticky LiveViews being unintentionally removed on navigation (#3658)
  • Fix phx-click-loading not being removed from links in sticky LiveViews (#3656)
  • Fix Phoenix.LiveView.JS.focus/2 and Phoenix.LiveView.JS.focus_first/2 not properly focusing elements on Mobile Safari (#3563)

1.0.3 (2025-01-28)

Bug fixes

  • Fix regression where browser back/forward buttons used patch instead of navigate, failing to update the page (#3529)
  • Fix client hooks inside streams that contain nested LiveViews (#3530)
  • Fix LiveComponents in nested LiveViews not updating under certain conditions (#3626)
  • Fix client-side hooks not being cleared properly (#3628)
  • Fix LiveUpload from client hook not auto uploading when immediately followed by form event (#3647)
  • Fix inputs being cleared in some cases when patching locked trees (#3647)
  • Fix client hooks with dynamic IDs not being destroyed properly when parts of the DOM are locked (#3651)

Enhancements

  • Allow to configure if duplicate IDs / other detected errors should warn or raise by passing on_error to Phoenix.LiveViewTest.live/3 / Phoenix.LiveViewTest.live_isolated/3 (#3653)
  • Also detect duplicate LiveComponents that are added dynamically to the page in LiveViewTest (#3653)
  • Log an error in the JavaScript console when detecting a stream container with missing phx-update="stream" attribute (#3645)
  • Update documentation to mention :fun and {:fun, arity} as valid attribute types for Phoenix.Component.attr/3 (#3635)
  • Update documentation to mention ways for dynamically rendering function components (#3632)
  • Update documentation to mention {:inner, selector} and {:closest, selector} as valid options for to in JS commands (#3638)

1.0.2 (2025-01-09)

Bug fixes

  • Fix inconsistency between mix format and mix format --check-formatted with new curly interpolation syntax (#3590)
  • Fix unnecessary compile time dependencies when using attr / on_mount / live (#3592)
  • Fix crash when testing LiveViews with embedded XML (e.g. SVGs) (#3594)
  • Fix type warning when using follow_redirect (#3581)
  • Prevent phx-trigger-action from clashing with locked forms (#3591)
  • Fix form recovery sending wrong event name when using JS commands in phx-change (#3607)

Enhancements

  • Deduplicate items on stream/4 / steam_insert/4 (#3599)
  • Restore scroll position on initial navigation (#3572)
  • Change-track non existing keys in maps (#3584)
  • Only warn instead of raising when detecting a duplicate ID in LiveViewTest (#3603)

1.0.1 (2024-12-13)

Bug fixes

  • Raise when duplicate DOM IDs are found when rendering a LiveView during tests to avoid undefined behaviour
  • Fix live session verification causing logged errors, push_patch failures, and failed mounts when a cold deploy occurs
  • Fix a bug where the live_session's on_mount hooks would be called for sticky live views on connected mount. Now a sticky live view is consistently marked as :not_mounted_at_router

1.0.0 (2024-12-03) 🚀

... (truncated)

Commits

Updates tailwind from 0.2.3 to 0.2.4

Changelog

Sourced from tailwind's changelog.

v0.2.4 (2024-10-18)

  • Add version check flag
  • Fallback to ipv4/ipv6 for unreachable hosts
Commits

Updates telemetry_metrics from 1.0.0 to 1.1.0

Changelog

Sourced from telemetry_metrics's changelog.

1.1.0

Changed

Add support for measurements as second argument of keep/drop callback.

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 11 upd…
b9332e6 
…ates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.5.7` | `1.6.7` |
| [esbuild](https://github.com/phoenixframework/esbuild) | `0.8.1` | `0.9.0` |
| [gettext](https://github.com/elixir-gettext/gettext) | `0.25.0` | `0.26.2` |
| [nimble_parsec](https://github.com/dashbitco/nimble_parsec) | `1.4.0` | `1.4.2` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.14` | `1.7.19` |
| [phoenix_ecto](https://github.com/phoenixframework/phoenix_ecto) | `4.6.2` | `4.6.3` |
| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.4` | `0.8.6` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `0.20.17` | `1.0.4` |
| [tailwind](https://github.com/phoenixframework/tailwind) | `0.2.3` | `0.2.4` |



Updates `bandit` from 1.5.7 to 1.6.7
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.5.7...1.6.7)

Updates `esbuild` from 0.8.1 to 0.9.0
- [Changelog](https://github.com/phoenixframework/esbuild/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/esbuild@v0.8.1...v0.9.0)

Updates `gettext` from 0.25.0 to 0.26.2
- [Changelog](https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md)
- [Commits](elixir-gettext/gettext@v0.25.0...v0.26.2)

Updates `nimble_parsec` from 1.4.0 to 1.4.2
- [Changelog](https://github.com/dashbitco/nimble_parsec/blob/master/CHANGELOG.md)
- [Commits](dashbitco/nimble_parsec@v1.4.0...v1.4.2)

Updates `phoenix` from 1.7.14 to 1.7.19
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.7.19/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.14...v1.7.19)

Updates `phoenix_ecto` from 4.6.2 to 4.6.3
- [Changelog](https://github.com/phoenixframework/phoenix_ecto/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_ecto@v4.6.2...v4.6.3)

Updates `phoenix_html` from 4.1.1 to 4.2.0
- [Changelog](https://github.com/phoenixframework/phoenix_html/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_html@v4.1.1...v4.2.0)

Updates `phoenix_live_dashboard` from 0.8.4 to 0.8.6
- [Release notes](https://github.com/phoenixframework/phoenix_live_dashboard/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_dashboard@v0.8.4...v0.8.6)

Updates `phoenix_live_view` from 0.20.17 to 1.0.4
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.0.4/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v0.20.17...v1.0.4)

Updates `tailwind` from 0.2.3 to 0.2.4
- [Changelog](https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/tailwind@v0.2.3...v0.2.4)

Updates `telemetry_metrics` from 1.0.0 to 1.1.0
- [Changelog](https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md)
- [Commits](beam-telemetry/telemetry_metrics@v1.0.0...v1.1.0)

---
updated-dependencies:
- dependency-name: bandit
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: esbuild
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: gettext
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: nimble_parsec
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix_ecto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix_html
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: phoenix_live_dashboard
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: phoenix_live_view
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: tailwind
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: telemetry_metrics
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Feb 17, 2025
@dependabot dependabot bot mentioned this pull request Feb 17, 2025
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant