Bump the mix-minor-and-patch group with 7 updates

[dependabot]

Bumps the mix-minor-and-patch group with 7 updates:

Package	From	To
dialyxir	1.4.7	1.4.8
ex_doc	0.40.3	0.40.4
hammer	7.4.1	7.5.0
oban	2.24.0	2.24.1
phoenix_live_dashboard	0.9.0	0.9.1
sentry	13.5.0	13.5.1
tzdata	1.1.4	1.1.5

Updates dialyxir from 1.4.7 to 1.4.8

Release notes

Sourced from dialyxir's releases.

1.4.8

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Changelog

Sourced from dialyxir's changelog.

Unreleased changes post [1.4.8]

[1.4.8] - 2026-09-05

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Commits

• 13bcb7d Release 1.4.8
• 4a2b6d7 Merge pull request #584 from lud-wj/fix/ignoring-by-line
• a2a4361 Merge branch 'master' into fix/ignoring-by-line
• 31a4cd8 Merge pull request #601 from BobbieBarker/docs/exdoc-0.40
• 6ba7b38 Update ExDoc to 0.40.3
• 3553678 Add OTP 28 warning support: exact_compare, opaque_compare, opaque_union (#591)
• 19dd690 Merge pull request #597 from dl-alexandre/codex/clarify-ignore-file-format
• f12db01 clarify ignore file formatter docs
• cdcea96 fix: Fixed dialyzer ignore by line for warnings with line/col
• 9fbbaf5 update changelog
• See full diff in compare view

Updates ex_doc from 0.40.3 to 0.40.4

Changelog

Sourced from ex_doc's changelog.

v0.40.4 (2026-09-03)

• Enhancements

  • Add :api_reference_noindex option to keep search engines from indexing api-reference.html
  • Generate reproducible HTML and EPUB output
  • Link HexDocs packages through their per-package subdomains

• Bug fixes

  • Preserve in-page anchors during Swup navigation and fully reload navigation between ExDoc builds
  • Format Elixir specs consistently regardless of their source line numbers
  • Autolink the Erlang/OTP 29 built-in record/0 type
  • Fix focus outline positioning for top-content heading action icons

Commits

• 80270f3 Release v0.40.4
• 934cf54 Reference to missing section (#2264)
• b5679af Add license information for remixicon font (#2263)
• 850f709 Bump brace-expansion from 1.1.12 to 1.1.18 in /assets (#2261)
• 873e03e Bump postcss from 8.5.15 to 8.5.26 in /assets (#2259)
• 27660d3 Bump js-yaml from 4.2.0 to 4.3.1 in /assets (#2260)
• ffec214 Bump postcss from 8.5.6 to 8.5.15 in /assets (#2241)
• 23cbd23 epub: Honor SOURCE_DATE_EPOCH for dcterms:modified and dc:identifier (#2256)
• a37128a Use a fixed makeup group_prefix for reproducible HTML output (#2255)
• 01f4763 Update earmark_parser dependency version -> 1.4.46 (#2254)
• Additional commits viewable in compare view

Updates hammer from 7.4.1 to 7.5.0

Changelog

Sourced from hammer's changelog.

7.5.0 - 2026-09-02

• Fix race in Atomic TokenBucket and LeakyBucket where a newly created bucket was published in ETS before its atomic was initialized, so a concurrent hit could read an uninitialized bucket. With refill_rate: 0 this lost a hit. The atomic is now initialized before it is inserted. (#202)
• Fix TokenBucket ETS backend discarding the sub-token refill remainder on every allowed hit. Callers hitting faster than one token period never refilled, and callers paced at exactly the refill rate slowly starved. The stored clock now advances only by the time whose tokens were credited, so the remainder carries into the next hit. (#197)
• Fix TokenBucket ETS backend returning a flat {:deny, 1000}; it now returns the real time in milliseconds until the bucket holds enough tokens to pay the cost, consistent with the other algorithms. Behaviour change: denied callers that sleep on this value will now retry much sooner (e.g. 19ms at refill_rate: 55 instead of 1000ms). Code that converts it to a retry-after header should round up and floor at 1 second; the tutorial examples were updated accordingly. (#198)
• Add mix hammer.install Igniter task (mix igniter.install hammer) that generates a MyApp.RateLimit module and adds it to the supervision tree. Supports --backend ets|atomic|redis; redis also adds the hammer_backend_redis dependency. Igniter is an optional dependency. (#157)

Commits

• a964ae1 fix(atomic): initialize bucket atomics before publishing them in ETS (#202)
• 7cc95bd ci: test Elixir 1.17+ only and drop EOL OTP 26 from the matrix (#201)
• 24c681c chore: Release 7.5.0 (#200)
• f8e0ce6 build(deps): bump erlex 0.2.8 -> 0.2.9 and add :mix to dialyzer PLT (#196)
• 0c492b4 fix(ets): return the real time-to-next-token on token bucket deny (#198)
• facc9e2 fix(ets): carry the sub-token refill remainder across hits (#197)
• d8f4441 chore: pin dev toolchain to Elixir 1.20.4 / OTP 29.0.5 (#199)
• 23c393d Bump actions/cache from 5 to 6 (#191)
• 7e86370 Bump actions/checkout from 6 to 7 (#190)
• 4365d00 build(deps): bump igniter 0.8.0 -> 0.8.3 and dev deps (#195)
• Additional commits viewable in compare view

Updates oban from 2.24.0 to 2.24.1

Changelog

Sourced from oban's changelog.

v2.24.1 - 2026-09-03

Bug Fixes

• [Engine] Prevent newer execution from overwriting

  Acking now verifies that the database hasn't been updated by another execution. Writes from a new executor will no longer transition an acked job, e.g. erroring or snoozing a job back out of completed.

  This applies to ack operations in Basic, Dolphin, and Lite engines.

• [Notifier] Track notify listeners in isolated registry

  Listeners were tracked within each notifier process, which was lost if the notifier crashed. Registration now lives in a dedicated registry, owne by the Oban application, which is immune to process crashes.

• [Notifier] Normalize notifier exits into error tuples

  Notifier callbacks through the notifier process could exit if it crashed or timed out, leaving callers to guard themselves with a try/catch.

  Now, exits are caught in the Notifier itself, and returned as an error tuple. Postgres and PG notifiers also no longer raise when their registered state is gone.

• [Queues] Allow dispatch_cooldown when starting queues

  The dispatch_cooldown option was silently ignored for static queues, and loudly failed validation for dynamic queues. The option was always threaded through to the producer, and now they pass validation.

Commits

• 64b8481 Release v2.24.1
• 2e44ccb Normalize notifier exits into error tuples
• b95e362 Track notify listeners in isolated registry
• 8591092 Add precommit alias for precommit hook usage
• 2368be1 Move module aliases below aliases
• b9c86b1 Prevent newer execution from overwriting
• 8d65be6 Reformat and rephrase issue templates
• ca19fab Unwrap validator type in validation module
• 0b55a41 Allow dispatch_cooldown when starting queues
• See full diff in compare view

Updates phoenix_live_dashboard from 0.9.0 to 0.9.1

Changelog

Sourced from phoenix_live_dashboard's changelog.

v0.9.1 (2026-08-31)

• Skip Ecto repos that cannot be resolved to an extras module

Commits

• f12805a Release v0.9.1
• d212df6 Skip Ecto repos that cannot be resolved to an extras module (#493)
• c79b976 format
• c0d9b5e update assets CI
• See full diff in compare view

Updates sentry from 13.5.0 to 13.5.1

Release notes

Sourced from sentry's releases.

13.5.1

Bug Fixes 🐛

• (rate-limits) Align the SDK with Sentry logging specs by @​solnic in #1180

Changelog

Sourced from sentry's changelog.

13.5.1

Bug Fixes 🐛

• (rate-limits) Align the SDK with Sentry logging specs by @​solnic in #1180

Commits

• ac8f14e release: 13.5.1
• 6e2abaf test: replace sleep-based barriers with deterministic waits (#1184)
• 02c99f3 refactor(tracing): drop unused SpanStorage.mark_span_sent/2 (#1183)
• 590ec44 fix(rate-limits): align the SDK with Sentry logging specs (#1180)
• fe588a7 chore(deps): Refresh mix.lock files (#1182)
• 1966afe Merge branch 'release/13.5.0'
• See full diff in compare view

Updates tzdata from 1.1.4 to 1.1.5

Changelog

Sourced from tzdata's changelog.

[1.1.5] - 2026-09-06

Fixed

• Fix Africa/Casablanca and Africa/El_Aaiun switching to permanent UTC six months early in tzdata 2026c, and similar errors in some historical transitions, caused by a zone line whose rules end before the line does.

Changed

• tzdata release version shipped with this library is now 2026c instead of 2026b.
• Now supports version 4.x of hackney as well as 1.x

Commits

• e70c080 Release version 1.1.5 in mix
• dbf951d Bump to 2026c and 1.1.5 (#180)
• ac9d536 Fix Morocco reported as UTC six months early in tzdata 2026c (#178)
• 766f38d Allow both hackney 1.x and 4.x (#170)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions