chore(deps): bump the production-dependencies group with 10 updates #267

dependabot · 2024-12-12T07:43:23Z

Bumps the production-dependencies group with 10 updates:

Package	From	To
ash	`3.4.43`	`3.4.45`
ash_graphql	`1.4.4`	`1.4.6`
ash_phoenix	`2.1.8`	`2.1.9`
ash_postgres	`2.4.14`	`2.4.15`
bandit	`1.6.0`	`1.6.1`
flame	`0.5.1`	`0.5.2`
floki	`0.36.3`	`0.37.0`
makeup_elixir	`1.0.0`	`1.0.1`
phoenix	`1.7.17`	`1.7.18`
swoosh	`1.17.3`	`1.17.4`

Updates ash from 3.4.43 to 3.4.45

Changelog

Sourced from ash's changelog.

v3.4.45 (2024-12-10)

Bug Fixes:

[Ash] don't ignore tenant when calling aggregate functions

Improvements:

[Ash.Policy.Authorizer] don't log field policies unless logging successful policy breakdowns

v3.4.44 (2024-12-06)

Bug Fixes:

[Ash.Changeset] use Ash.read when eager validating relationships

[Ash.Expr] allow strings in get_path/2

[Ash.Sort] don't expand calculations until after authorization is complete

[Ash.Resource.Change.GetAndLock] don't automatically skip get_and_lock changes

[Ash.Filter] handle indexed maps in filter map syntax

[Ash.Filter] handle case where %{or is composing a single map

[Ash.Policy.Authorizer] ensure that subject is properly set when running field policies

[Ash.Type] fix logic errors in matches_type?/list logic

[pagination] add tenant to Aggregate opts when building count query (#1630)

[notifications] some notifications not being sent for bulk create actions

[validations] negate atomic validation expressions when used as where conditions (#1624)

[Ash.Policy.Authorizer] don't double apply action-filters when attaching policy filters (optimization)

[Ash.read] Fix not working skip_unknown_inputs opt of read action (#1596)

[Ash.read] Fix warning when actions.read.argument constraint is violated (#1607)

[aggregates] use last relationship's read action properly in aggregate queries

[Ash.Changeset] finish conversion from append? to prepend? option (#1601)

Improvements:

[Ash.Type.NewType] add lazy_init? option. Allows for recursive embedded types.

... (truncated)

Commits

844ab04 chore: release version v3.4.45
d04e804 improvement: don't log field policies unless logging successful policy breakd...
46c06ef chore: format
a3854ab fix: don't ignore tenant when calling aggregate functions
e2d168e test: use a fragment in the test (#1650)
c1f43c5 docs: fix arguments missing on calc context (#1648)
80bfd86 docs: add some better links
88a1d77 docs: better typespecs and docs around errors
760783d docs: improve error handling docs
0ad0d3b docs(filters): clarify how to use string maps (#1644)
Additional commits viewable in compare view

Updates ash_graphql from 1.4.4 to 1.4.6

Changelog

Sourced from ash_graphql's changelog.

v1.4.6 (2024-12-11)

Bug Fixes:

fix docs & return type for generic actions

v1.4.5 (2024-12-11)

Improvements:

support error_location option on generic actions

add description to update and destroy mutations (#250)

Commits

c986f39 chore: release version v1.4.6
afc5803 fix: fix docs & return type for generic actions
76a6dc8 chore: release version v1.4.5
4bcea78 improvement: support error_location option on generic actions
9da1105 docs: fix config reference in subscription docs (#251)
62370af improvement: add description to update and destroy mutations (#250)
See full diff in compare view

Updates ash_phoenix from 2.1.8 to 2.1.9

Changelog

Sourced from ash_phoenix's changelog.

v2.1.9 (2024-12-11)

Bug Fixes:

ensure that errors on before_action hooks invalidate the form

Improvements:

Migrate phoenix gen to igniter (#261)

add AshPhoenix.Form.update_params/1

Commits

1d0f216 chore: release version v2.1.9
44437af fix: ensure that errors on before_action hooks invalidate the form
3ef7acb chore(deps): bump the production-dependencies group with 2 updates (#272)
89cf824 docs: Update the tutorial to use Igniter (#271)
6deb819 chore(deps): bump igniter in the production-dependencies group (#270)
63fa4c7 improvement: Migrate phoenix gen to igniter (#261)
c89c97d chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
0efce43 chore(deps): bump ash (#269)
dec737a docs: Fix AshJson Link in getting-started-with-ash-and-phoenix.md (#266)
29adf29 docs: remove incorrect formatter import_deps (#262)
Additional commits viewable in compare view

Updates ash_postgres from 2.4.14 to 2.4.15

Changelog

Sourced from ash_postgres's changelog.

v2.4.15 (2024-12-06)

Bug Fixes:

split off varchar options from index

don't attempt to use non-existent relationship

handle manual/no_attributes? relationships in lateral join logic

don't use priv configuration for snapshot_path

Improvements:

update sql implementation for type determination

Commits

5f7c436 chore: release version v2.4.15
14374ad fix: split off varchar options from index
411a94e chore: add missing else case
48b2703 fix: don't attempt to use non-existent relationship
25fbdfc chore(deps): bump ecto in the production-dependencies group (#436)
7155754 docs: add configuration example and reference in exceptions (#435)
813944b fix: handle manual/no_attributes? relationships in lateral join logic
8ff7534 chore: remove unused variable
28f863c fix: don't use priv configuration for snapshot_path
26291dd chore: don't raise debugging error
Additional commits viewable in compare view

Updates bandit from 1.6.0 to 1.6.1

Changelog

Sourced from bandit's changelog.

1.6.1 (6 Dec 2024)

Enhancements

Add deflate support when sending chunked responses (#429)

Fixes

Bring in updated HPAX to fix HTTP/2 error cases seen in AWS load balancing environments (#392)

Improve handle of pipelined HTTP/1.1 requests (#437)

Improve error handling when dealing with socket errors (#433)

Changes

Use Plug.Call.inform/2 to send websocket upgrades (#428)

Commits

9d86e27 Version bump to 1.6.1
99a0364 Bump HPAX to fix #392
e73e379 Handle pipelined requests (#437)
267b4af Improve unrecoverable error handling (#433)
22064e7 Update README.md
9ea100a Bump req from 0.5.7 to 0.5.8 (#435)
079f1b6 Bump thousand_island from 1.3.6 to 1.3.7 (#434)
90191d3 Deflate support on chunked responses (take 2) (#429)
4781d31 Use inform to send websocket upgrades instead of a regular sending (#428)
84e0d5d Bump ex_doc from 0.34.2 to 0.35.1 (#430)
Additional commits viewable in compare view

Updates flame from 0.5.1 to 0.5.2

Changelog

Sourced from flame's changelog.

0.5.2 (2024-12-06)

Enhancements

Clean up parent tmp code_sync artifacts on pool shutdown

Commits

c942337 Release 0.5.2
0c0c287 Remove dead code found by Elixir v1.18 (#71)
e64ad84 Clean up parent code_sync artifacts on pool shutdown
439752e format
See full diff in compare view

Updates floki from 0.36.3 to 0.37.0

Release notes

Sourced from floki's releases.

v0.37.0

Added

Add Floki.css_escape/1 - thanks @SteffenDE.

Fixed

Fix bug propagating identity encoder in raw_html/2 - thanks @andyleclair.

Removed

Remove support for Elixir 1.13 and OTP 22.

Pull requests

Drop support for Elixir 1.13 by @philss in philss/floki#595

Bump credo from 1.7.8 to 1.7.9 by @dependabot in philss/floki#596

Bump credo from 1.7.9 to 1.7.10 by @dependabot in philss/floki#597

Bump fast_html from 2.3.0 to 2.4.0 by @dependabot in philss/floki#599

Bump dialyxir from 1.4.4 to 1.4.5 by @dependabot in philss/floki#600

Bump ex_doc from 0.34.2 to 0.35.1 by @dependabot in philss/floki#602

Fix bug propagating identity encoder in raw_html/2 by @andyleclair in philss/floki#603

New Contributors

@andyleclair made their first contribution in philss/floki#603

Full Changelog: philss/floki@v0.36.3...v0.37.0

Changelog

Sourced from floki's changelog.

[0.37.0] - 2024-12-06

Added

Add Floki.css_escape/1 - thanks @SteffenDE.

Fixed

Fix bug propagating identity encoder in raw_html/2 - thanks @andyleclair.

Removed

Remove support for Elixir 1.13 and OTP 22.

Commits

2c68b0f Release v0.37.0
4700038 Fix bug propagating identity encoder in raw_html/2 (#603)
cabdd7a Bump ex_doc from 0.34.2 to 0.35.1 (#602)
eab60f1 Bump dialyxir from 1.4.4 to 1.4.5 (#600)
4eac58a Bump fast_html from 2.3.0 to 2.4.0 (#599)
576d356 Bump credo from 1.7.9 to 1.7.10 (#597)
f5845f9 Bump credo from 1.7.8 to 1.7.9 (#596)
96955f9 Add notes to changelog [ciskip]
17fd1d0 Drop support for Elixir 1.13 (#595)
ce33a55 Reapply "add Floki.css_escape/1 (#594)"
See full diff in compare view

Updates makeup_elixir from 1.0.0 to 1.0.1

Changelog

Sourced from makeup_elixir's changelog.

1.0.1 (2024-12-10)

Support multi-letter sigils

Allow options to be registered with custom lexers

Commits

6b519fc Release v1.0.1
f578da0 Support multi-letter sigils
532ebf9 Allow to configure lexer options for sigil lexers (#36)
1b74809 Bump Elixir requirement, update CI and fix flaky test (#35)
8c3c36a Fix tests
See full diff in compare view

Updates phoenix from 1.7.17 to 1.7.18

Changelog

Sourced from phoenix's changelog.

1.7.18 (2024-12-10)

Enhancements

Use new interpolation syntax in generators

Update gettext in generators to 0.26

Commits

e2ec5e0 Release 1.7.18
e13540c update changelog
ac10bf4 backport new interpolation syntax (#6008)
4c6fc11 update mix.lock
ab49d2f Update generators with new Gettext API (#5902) (#6006)
6858b4f Updates to release notes and up and running
618811c Release 1.7.17 for LiveView 1.0.0
b9e68ce No need to install Hex directly
See full diff in compare view

Updates swoosh from 1.17.3 to 1.17.4

Release notes

Sourced from swoosh's releases.

v1.17.4 🚀

🐛 Bug Fixes

mua: fix default message-id @ruslandoga (#978)

🧰 Maintenance

mua: cleanup test @ruslandoga (#938)

⛓️ Dependency

Bump bandit from 1.6.0 to 1.6.1 @dependabot (#977)

Bump req from 0.5.7 to 0.5.8 @dependabot (#976)

Bump ex_doc from 0.35.0 to 0.35.1 @dependabot (#975)

Bump ex_doc from 0.34.2 to 0.35.0 @dependabot (#974)

Bump bandit from 1.5.7 to 1.6.0 @dependabot (#973)

Bump mail from 0.4.2 to 0.4.3 @dependabot (#972)

Bump mua from 0.2.3 to 0.2.4 @dependabot (#970)

Full Changelog: swoosh/swoosh@v1.17.3...v1.17.4

Changelog

Sourced from swoosh's changelog.

1.17.4

🐛 Bug Fixes

mua: fix default message-id @ruslandoga (#978)

🧰 Maintenance

mua: cleanup test @ruslandoga (#938)

Commits

16b4033 v1.17.4
0d3c001 Merge pull request #938 from ruslandoga/cleanup-mua-test
ca21df7 Merge branch 'main' into cleanup-mua-test
e117817 Merge pull request #978 from ruslandoga/mua-fix-message-id
c606516 mua: cleanup test
ac51c5a mua: fix default message-id
4e51b6e Bump bandit from 1.6.0 to 1.6.1 (#977)
2d65666 Bump req from 0.5.7 to 0.5.8 (#976)
e3f6aae Bump ex_doc from 0.35.0 to 0.35.1 (#975)
ff91714 Bump ex_doc from 0.34.2 to 0.35.0 (#974)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 10 updates: | Package | From | To | | --- | --- | --- | | [ash](https://github.com/ash-project/ash) | `3.4.43` | `3.4.45` | | [ash_graphql](https://github.com/ash-project/ash_graphql) | `1.4.4` | `1.4.6` | | [ash_phoenix](https://github.com/ash-project/ash_phoenix) | `2.1.8` | `2.1.9` | | [ash_postgres](https://github.com/ash-project/ash_postgres) | `2.4.14` | `2.4.15` | | [bandit](https://github.com/mtrudel/bandit) | `1.6.0` | `1.6.1` | | [flame](https://github.com/phoenixframework/flame) | `0.5.1` | `0.5.2` | | [floki](https://github.com/philss/floki) | `0.36.3` | `0.37.0` | | [makeup_elixir](https://github.com/elixir-makeup/makeup_elixir) | `1.0.0` | `1.0.1` | | [phoenix](https://github.com/phoenixframework/phoenix) | `1.7.17` | `1.7.18` | | [swoosh](https://github.com/swoosh/swoosh) | `1.17.3` | `1.17.4` | Updates `ash` from 3.4.43 to 3.4.45 - [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md) - [Commits](ash-project/ash@v3.4.43...v3.4.45) Updates `ash_graphql` from 1.4.4 to 1.4.6 - [Changelog](https://github.com/ash-project/ash_graphql/blob/main/CHANGELOG.md) - [Commits](ash-project/ash_graphql@v1.4.4...v1.4.6) Updates `ash_phoenix` from 2.1.8 to 2.1.9 - [Changelog](https://github.com/ash-project/ash_phoenix/blob/main/CHANGELOG.md) - [Commits](ash-project/ash_phoenix@v2.1.8...v2.1.9) Updates `ash_postgres` from 2.4.14 to 2.4.15 - [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md) - [Commits](ash-project/ash_postgres@v2.4.14...v2.4.15) Updates `bandit` from 1.6.0 to 1.6.1 - [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md) - [Commits](mtrudel/bandit@1.6.0...1.6.1) Updates `flame` from 0.5.1 to 0.5.2 - [Changelog](https://github.com/phoenixframework/flame/blob/main/CHANGELOG.md) - [Commits](phoenixframework/flame@v0.5.1...v0.5.2) Updates `floki` from 0.36.3 to 0.37.0 - [Release notes](https://github.com/philss/floki/releases) - [Changelog](https://github.com/philss/floki/blob/main/CHANGELOG.md) - [Commits](philss/floki@v0.36.3...v0.37.0) Updates `makeup_elixir` from 1.0.0 to 1.0.1 - [Changelog](https://github.com/elixir-makeup/makeup_elixir/blob/master/CHANGELOG.md) - [Commits](elixir-makeup/makeup_elixir@v1.0.0...v1.0.1) Updates `phoenix` from 1.7.17 to 1.7.18 - [Release notes](https://github.com/phoenixframework/phoenix/releases) - [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.7.18/CHANGELOG.md) - [Commits](phoenixframework/phoenix@v1.7.17...v1.7.18) Updates `swoosh` from 1.17.3 to 1.17.4 - [Release notes](https://github.com/swoosh/swoosh/releases) - [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md) - [Commits](swoosh/swoosh@v1.17.3...v1.17.4) --- updated-dependencies: - dependency-name: ash dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ash_graphql dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ash_phoenix dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ash_postgres dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: bandit dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: flame dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: floki dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: makeup_elixir dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: phoenix dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: swoosh dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added the dependencies Pull requests that update a dependency file label Dec 12, 2024

zachdaniel merged commit 8e2e7fa into main Dec 12, 2024
2 of 4 checks passed

dependabot bot deleted the dependabot/hex/production-dependencies-d44c3dbaef branch December 12, 2024 17:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the production-dependencies group with 10 updates #267

chore(deps): bump the production-dependencies group with 10 updates #267

dependabot bot commented on behalf of github Dec 12, 2024

chore(deps): bump the production-dependencies group with 10 updates #267

chore(deps): bump the production-dependencies group with 10 updates #267

Conversation

dependabot bot commented on behalf of github Dec 12, 2024

v3.4.45 (2024-12-10)

Bug Fixes:

Improvements:

v3.4.44 (2024-12-06)

Bug Fixes:

Improvements:

v1.4.6 (2024-12-11)

Bug Fixes:

v1.4.5 (2024-12-11)

Improvements:

v2.1.9 (2024-12-11)

Bug Fixes:

Improvements:

v2.4.15 (2024-12-06)

Bug Fixes:

Improvements:

1.6.1 (6 Dec 2024)

Enhancements

Fixes

Changes

0.5.2 (2024-12-06)

Enhancements

v0.37.0

Added

Fixed

Removed

Pull requests

New Contributors

[0.37.0] - 2024-12-06

Added

Fixed

Removed

1.0.1 (2024-12-10)

1.7.18 (2024-12-10)

Enhancements

v1.17.4 🚀

🐛 Bug Fixes

🧰 Maintenance

⛓️ Dependency

1.17.4

🐛 Bug Fixes

🧰 Maintenance