Bump the production-dependencies group with 6 updates#210
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the production-dependencies group with 6 updates#210dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the production-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [bandit](https://github.com/mtrudel/bandit) | `1.10.4` | `1.11.0` | | [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` | | [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.7` | | [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.28` | `1.1.30` | | [postgrex](https://github.com/elixir-ecto/postgrex) | `0.22.0` | `0.22.1` | | [swoosh](https://github.com/swoosh/swoosh) | `1.25.0` | `1.25.2` | Updates `bandit` from 1.10.4 to 1.11.0 - [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md) - [Commits](mtrudel/bandit@1.10.4...1.11.0) Updates `jason` from 1.4.4 to 1.4.5 - [Release notes](https://github.com/michalmuskala/jason/releases) - [Changelog](https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md) - [Commits](michalmuskala/jason@v1.4.4...v1.4.5) Updates `phoenix` from 1.8.5 to 1.8.7 - [Release notes](https://github.com/phoenixframework/phoenix/releases) - [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md) - [Commits](phoenixframework/phoenix@v1.8.5...v1.8.7) Updates `phoenix_live_view` from 1.1.28 to 1.1.30 - [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases) - [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.30/CHANGELOG.md) - [Commits](phoenixframework/phoenix_live_view@v1.1.28...v1.1.30) Updates `postgrex` from 0.22.0 to 0.22.1 - [Release notes](https://github.com/elixir-ecto/postgrex/releases) - [Changelog](https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md) - [Commits](elixir-ecto/postgrex@v0.22.0...v0.22.1) Updates `swoosh` from 1.25.0 to 1.25.2 - [Release notes](https://github.com/swoosh/swoosh/releases) - [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md) - [Commits](swoosh/swoosh@v1.25.0...v1.25.2) --- updated-dependencies: - dependency-name: bandit dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: jason dependency-version: 1.4.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: phoenix dependency-version: 1.8.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: phoenix_live_view dependency-version: 1.1.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: postgrex dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: swoosh dependency-version: 1.25.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the production-dependencies group with 6 updates:
1.10.41.11.01.4.41.4.51.8.51.8.71.1.281.1.300.22.00.22.11.25.01.25.2Updates
banditfrom 1.10.4 to 1.11.0Changelog
Sourced from bandit's changelog.
Commits
e626198Version bump to 1.11.0014c157Tweaks to Autobahn test suite1e8e559Merge commit from fork45feea2Merge commit from forkf2ca636Merge commit from fork21612c7Merge commit from fork8156921Merge commit from forkfc3cf61Improve handling of edge cases in send_file (#580)1085ad0Bump machete from 0.3.11 to 0.3.12 (#579)c70e175Bump credo from 1.7.17 to 1.7.18 (#578)Updates
jasonfrom 1.4.4 to 1.4.5Changelog
Sourced from jason's changelog.
Commits
4ede428Bump v1.4.5b8c2185Fix dialyzer joba363975Modernise CI to currently supported versions243c8a8Allow decimal 3.0c8e8d05Revert the experimental 1.5 branch and jason_native experiment0e7a3e2Add example/doctest for Jason.OrderedObject.new/1984bc07fix broken linkf775592Raise if trying to decode decimals without decimal79d59dfRemove unneeded workarounds for xref warningsbaac78eFix warnings by conditionally compiling Decimal supportUpdates
phoenixfrom 1.8.5 to 1.8.7Changelog
Sourced from phoenix's changelog.
Commits
ba3a131Release v1.8.7e74eaccfix invalid status on longpoll window timeout035fde9Update assetseb5f52fCorrectly serialize non ASCII metadata (#6664)a99c5e8Filter token parameters by default (#6665)2190111update installer versionddcdadbRelease v1.8.61a67c61prevent unexpected memory usage on nd-json body splitting8ca76a2fix a couple of typos (#6672)6214d83Bump postcss from 8.5.6 to 8.5.13 (#6671)Updates
phoenix_live_viewfrom 1.1.28 to 1.1.30Release notes
Sourced from phoenix_live_view's releases.
Changelog
Sourced from phoenix_live_view's changelog.
Commits
fdbbe52Release v1.1.30970932bUpdate assetsff31d01Ensure phx-viewport hook does not fail if there's no scrollContainer24090b5Release v1.1.29cc83643Update assets8deb3e5Use moveBefore if supported when reordering stream items (#4213)174dad5DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...4e18a20handle locks on skipped nodes (#4210)031f00cRemove unreachable error clause in UploadTmpFileWriter.write_chunk/20b4005bOptimize traverse_dynamic for nil and binary entriesUpdates
postgrexfrom 0.22.0 to 0.22.1Changelog
Sourced from postgrex's changelog.
Commits
f78f401Release v0.22.103717e9Add multirange to sidebar section0f92ae3Return proper error when getting tcp closed after fatal errors (#765)3385a98Set some process labels (#764)e4f7942Simplify decode simple handling to avoid unused clausesdf184a4Release v0.22.0de38918Add text query support (#761)b3e895aSupport infinite intervals (#759)Updates
swooshfrom 1.25.0 to 1.25.2Release notes
Sourced from swoosh's releases.
Changelog
Sourced from swoosh's changelog.
Commits
7baea5cBump jason from 1.4.4 to 1.4.5 (#1130)37342cachore: prepare 1.25.2 patch release (#1136)f6eedb4fix(config): prioritize runtime config for Mailer (#1134)5596e97Bump bandit from 1.10.4 to 1.11.0 (#1129)f656c6bFix release comment workflow checkout (#1128)2aa9af4Bump version to 1.25.1 (#1127)df97f1cBump plug_cowboy from 2.8.0 to 2.8.1 (#1126)397562eRegenerate styles with Tailwind CSS3e4ff5ffix: use github.ref_name instead of github.ref for tailwind branch namef0b12c0Escape email content in mailbox preview UI (#1124)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions