Skip to content

chore(deps): bump the all-dependencies group with 8 updates - #132

Merged
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/all-dependencies-c5ddc17b26
Sep 1, 2026
Merged

chore(deps): bump the all-dependencies group with 8 updates#132
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/all-dependencies-c5ddc17b26

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the all-dependencies group with 8 updates:

Package From To
ash 3.14.0 3.32.1
credo 1.7.16 1.7.19
ex_doc 0.40.1 0.40.3
git_ops 2.9.0 2.12.2
igniter 0.7.2 0.8.3
mox 1.2.0 1.3.0
sobelow 0.14.1 0.15.0
tesla 1.16.0 1.21.2

Updates ash from 3.14.0 to 3.32.1

Release notes

Sourced from ash's releases.

v3.32.1

Bug Fixes:

Improvements:

Performance Improvements:

v3.32.0

Features:

... (truncated)

Changelog

Sourced from ash's changelog.

v3.32.1 (2026-08-23)

Bug Fixes:

Improvements:

Performance Improvements:

v3.32.0 (2026-08-19)

Features:

... (truncated)

Commits
  • 6d345dd chore: release version v3.32.1
  • 830e6ab improvement: only set transaction? true when the data layer supports it (#2...
  • c6549cd perf: make boolean filter parsing faster
  • 00c99ed fix: don't create tenants when reading in ETS
  • ec1bbde fix: ensure error & lazy are private functions
  • 23ccc3c fix: fix various small transformer/aggregate issues
  • 58d1ae3 fix: evaluate decimal arithmetic with an integer (#2893)
  • f34568b fix: string_position returns an integer position (#2892)
  • 03af1e9 fix: restore temporal subtraction type inference (#2887)
  • 175cf73 fix: retain compile dependencies for policy check modules (#2886)
  • Additional commits viewable in compare view

Updates credo from 1.7.16 to 1.7.19

Release notes

Sourced from credo's releases.

v1.7.19

Check it out on Hex: https://hex.pm/packages/credo/1.7.19

  • Fix compatibility & compiler warnings with Elixir 1.20.0

v1.7.18

Check it out on Hex: https://hex.pm/packages/credo/1.7.18

  • Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
  • Fix problem with transitive deps in umbrella apps
  • Credo.Check.Warning.UnusedMapOperation fix false positives

v1.7.17

Check it out on Hex: https://hex.pm/packages/credo/1.7.17

  • Credo.Check.Readability.ModuleDoc add new param :ignore_modules_using (defaults to [Credo.Check, Ecto.Schema, Phoenix.LiveView, ~r/\.Web$/])
  • Credo.Check.Warning.UnusedOperation update :modules param: instead of a list of functions to check, :all can be given to check all functions in a module
  • New Check: Credo.Check.Refactor.CondInsteadOfIfElse
  • New Check: Credo.Check.Warning.WrongTestFilename
Changelog

Sourced from credo's changelog.

1.7.19

  • Fix compatibility & compiler warnings with Elixir 1.20.0

1.7.18

  • Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
  • Fix problem with transitive deps in umbrella apps
  • Credo.Check.Warning.UnusedMapOperation fix false positives

1.7.17

  • Credo.Check.Readability.ModuleDoc add new param :ignore_modules_using (defaults to [Credo.Check, Ecto.Schema, Phoenix.LiveView, ~r/\.Web$/])
  • Credo.Check.Warning.UnusedOperation update :modules param: instead of a list of functions to check, :all can be given to check all functions in a module
  • New Check: Credo.Check.Refactor.CondInsteadOfIfElse
  • New Check: Credo.Check.Warning.WrongTestFilename
Commits

Updates ex_doc from 0.40.1 to 0.40.3

Changelog

Sourced from ex_doc's changelog.

v0.40.3 (2026-05-21)

  • Enhancements
    • Add autolinking for Erlang/OTP 29 native records

v0.40.2 (2026-05-08)

  • Bug fixes
    • Add rel="nofollow" to external links in HTML output
    • Use blockquote in llms.txt description
    • Void elements in epub, such wbr, must be terminated by the matching end-tag
    • Fix content container scrolling in older versions of Safari
    • Skip HTML comments when computing synopsis
    • Fix markdown backend code fence language and opaque type display
    • Fix false positive warning when linking to asset files
    • Prevent #search selector from impacting user content
    • Raise on extras that conflict with reserved filenames
    • Fix styling of admonition blocks
Commits

Updates git_ops from 2.9.0 to 2.12.2

Changelog

Sourced from git_ops's changelog.

v2.12.2 (2026-08-23)

Bug Fixes:

  • don't fail on prefix stripping when prefix is empty by @​zachdaniel

v2.12.1 (2026-08-14)

Improvements:

v2.12.0 (2026-08-13)

Features:

v2.11.4 (2026-08-13)

Bug Fixes:

v2.11.3 (2026-08-11)

Improvements:

v2.11.2 (2026-08-10)

... (truncated)

Commits
  • 52e3853 chore: release version v2.12.2
  • 50afc26 fix: don't fail on prefix stripping when prefix is empty
  • d8b13ae chore: release version v2.12.1
  • e588b16 improvement: support solo_pr option on packages
  • 34a9ac0 chore: release version v2.12.0
  • 78477c7 feat: close release pull requests for packages with no releasable changes (#84)
  • 8fd7d36 chore: release version v2.11.4
  • b80061e fix: handle utf8 in messages
  • 0a23dfd chore: release version v2.11.3
  • 1b6b37f improvement: even faster branch comparison
  • Additional commits viewable in compare view

Updates igniter from 0.7.2 to 0.8.3

Release notes

Sourced from igniter's releases.

v0.8.3

Bug Fixes:

  • ensure verbose is passed all the way down by Zach Daniel

  • properly check igniter.rms in --check by Zach Daniel

  • resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

  • add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

  • update to Elixir 1.20 (#391) by ESmithByui

  • direct users to format command for unless refactor by Zach Daniel

v0.8.2

Bug Fixes:

  • handle empty list in configures_key by Zach Daniel

Improvements:

  • Add scoped configure/6 options for runtime env blocks (#385) by RhettPoole

  • Send issue output to stderr (#384) by daphnerosepurcell

  • allow remapping modules to their file locations w/ regexes (#378) by aheiner2001

  • add --except to igniter.upgrade --all (#383) by febarnett3

  • intercept --help for igniter.new and other tasks. (#382) by CaydenLords

v0.8.1

Improvements:

  • adding hex confirmation for igniter.install (#379) by ESmithByui

... (truncated)

Changelog

Sourced from igniter's changelog.

v0.8.3 (2026-07-26)

Bug Fixes:

  • ensure verbose is passed all the way down by Zach Daniel

  • properly check igniter.rms in --check by Zach Daniel

  • resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

  • add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

  • update to Elixir 1.20 (#391) by ESmithByui

  • direct users to format command for unless refactor by Zach Daniel

v0.8.2 (2026-06-24)

Bug Fixes:

  • handle empty list in configures_key by Zach Daniel

Improvements:

  • Add scoped configure/6 options for runtime env blocks (#385) by RhettPoole

  • Send issue output to stderr (#384) by daphnerosepurcell

  • allow remapping modules to their file locations w/ regexes (#378) by aheiner2001

  • add --except to igniter.upgrade --all (#383) by febarnett3

  • intercept --help for igniter.new and other tasks. (#382) by CaydenLords

v0.8.1 (2026-06-02)

Improvements:

  • adding hex confirmation for igniter.install (#379) by ESmithByui

... (truncated)

Commits
  • 5a167c0 chore: release version v0.8.3
  • 83e46ba fix: ensure verbose is passed all the way down
  • 1357303 fix: properly check igniter.rms in --check
  • e7885c1 chore(deps): Update mint to 1.9.3
  • aceac7a test: cover declined igniter.install dependency prompt (#394)
  • e9d0084 improvement: add Igniter.Libs.Phoenix.web_module_for_router/2 (#393)
  • a4b5364 test: Add regression tests for nested keyword config updates (#392)
  • b29e9d6 chore: warnings
  • 2768e68 improvement: update to Elixir 1.20 (#391)
  • 479c495 improvement: direct users to format command for unless refactor
  • Additional commits viewable in compare view

Updates mox from 1.2.0 to 1.3.0

Changelog

Sourced from mox's changelog.

v1.3.0 (2026-08-25)

  • Bump Elixir requirement to v1.15
  • Use Process.info(pid, :parent) to discover allowances
  • Improve error messages
Commits

Updates sobelow from 0.14.1 to 0.15.0

Release notes

Sourced from sobelow's releases.

v0.15.0

What's Changed

New Contributors

Full Changelog: sobelow/sobelow@v0.14.1...v0.15.0

Changelog

Sourced from sobelow's changelog.

v0.15.0

  • Bug fixes
    • Config.Secrets no longer crashes the scan when a secret is written as anything other than a plain double-quoted string. Heredoc values and values containing escaped quotes previously raised a MatchError and aborted the entire run. These secrets are now reported, using the line of the enclosing config call.
    • A corrupt or unreadable version-check cache file no longer aborts the scan. Sobelow previously printed "This does not appear to be a Phoenix application" and exited 0 — a CI gate could pass having scanned nothing.
    • --strict now reports syntax errors instead of raising. It has been broken since Elixir 1.13 changed the error shape returned by Code.string_to_quoted/2. Errors are now reported as file:line:column:.
    • A template that cannot be parsed is now skipped (or reported under --strict) rather than aborting the scan with an EEx.SyntaxError. The error now names the offending template instead of nofile.
    • A malformed .sobelow-conf now produces an actionable message instead of a raw MatchError stacktrace. This mattered more since v0.14.1 began reading the file automatically.
    • An empty, whitespace-only, or comment-only .sobelow-conf is now read as no options rather than aborting the scan. Such a file parses to an empty block instead of a keyword list, so it originally crashed with a FunctionClauseError and then, once that was fixed, exited 1 with a configuration error. Since the file is read automatically, a stray touch .sobelow-conf or a truncated write was enough to break every scan in a project. Contents that cannot be interpreted are still an error.
    • --save-config now stores ignore_files relative to the project root. Absolute paths were previously baked into .sobelow-conf, breaking the committed file on every other machine and in CI.
    • Config.Secrets now reports the line of the secret itself when a config call spans multiple lines. The line search compared a tuple against an integer, so it never worked as intended.
    • An unwritable ~/.sobelow no longer fails a scan.
    • Fixed a string-interpolation typo that rendered dot-access variables as conn.${atom_to_string(field)}.
    • .sobelow-conf keys are now genuinely sorted alphabetically.
    • A .sobelow-conf can no longer stop Sobelow from scanning. --save-config wrote version into every file it generated, so mix sobelow --version --save-config produced a committed file that made every later run print the version and exit 0 — a CI gate reading that as a clean scan. version, details, all-details, save-config, and diff choose what Sobelow does rather than configure a scan, and are now accepted on the command line only. One in the file is ignored, with a warning when it would have changed anything. version is no longer written to the file in the first place.
    • # sobelow_skip comments are no longer thrown away over whitespace. The pattern demanded exactly one space after the # and exactly one before the list, so # sobelow_skip["XSS.Raw"], # sobelow_skip ["XSS.Raw"], and # sobelow_skip [ "XSS.Raw" ] were all ignored — silently, and indistinguishably from a skip that had simply not applied. Spacing around

... (truncated)

Commits
  • 4eb7d16 version bump - 0.15.0
  • 1a9e9ff fix: Stop .sobelow-conf from being able to disable the scan
  • c5e71f7 fix: Only match unqualified query/query! where Ecto is in scope
  • d112cc5 Potential fix for code scanning alert no. 1: Workflow does not contain permis...
  • cc5721a fix: Stop discarding # sobelow_skip comments over whitespace, and warn
  • 23a6ce5 test: Cover pipeline skip scoping across multiple pipelines
  • 7578758 fix: handle a disabled router on every resolution path
  • eb28ed4 Allow possibility to remove missing router warning (issue #25)
  • f7a2aed fix: sort the whole skips file, and by parsed location
  • 9a543aa Reduce churn: Sort lines in .sobelow-skips file...
  • Additional commits viewable in compare view

Updates tesla from 1.16.0 to 1.21.2

Release notes

Sourced from tesla's releases.

v1.21.2

1.21.2 (2026-08-19)

Bug Fixes

  • form-urlencoded: Do not claim a content-type it did not encode (#914) (b250b50)

v1.21.1

1.21.1 (2026-08-17)

Bug Fixes

  • finch-adapter: Surface the reason a streamed response stopped (#913) (e1f6051)
  • finch: Unwrap error structs introduced by finch 0.22 (#902) (a833717)

v1.21.0

1.21.0 (2026-08-01)

Features

  • add support for the HTTP QUERY method (RFC 10008) (#896) (c3b7bf5)

Bug Fixes

  • ci: bump release workflow to OTP 28.5 (#888) (aa22331)
  • ci: bump test matrix to OTP 28.5 (#899) (279f8bc)
  • handle atom header keys in FollowRedirects header filtering (#898) (a3d6c94)
  • silence compiler warnings on Elixir 1.20.1 (#892) (863d836)

v1.20.0

1.20.0 (2026-06-05)

Features

  • support {:form,data} tagged body tuples (#886) (b1b3b80)

v1.19.0

1.19.0 (2026-06-04)

Features

  • finch-adapter: Finch adapter will pass through all supported options (#879) (7609328)
  • form-urlencoded: support nested bodies via :brackets option (#878) (f7142e8)

... (truncated)

Changelog

Sourced from tesla's changelog.

1.21.2 (2026-08-19)

Bug Fixes

  • form-urlencoded: Do not claim a content-type it did not encode (#914) (b250b50)

1.21.1 (2026-08-17)

Bug Fixes

  • finch-adapter: Surface the reason a streamed response stopped (#913) (e1f6051)
  • finch: Unwrap error structs introduced by finch 0.22 (#902) (a833717)

1.21.0 (2026-08-01)

Features

  • add support for the HTTP QUERY method (RFC 10008) (#896) (c3b7bf5)

Bug Fixes

  • ci: bump release workflow to OTP 28.5 (#888) (aa22331)
  • ci: bump test matrix to OTP 28.5 (#899) (279f8bc)
  • handle atom header keys in FollowRedirects header filtering (#898) (a3d6c94)
  • silence compiler warnings on Elixir 1.20.1 (#892) (863d836)

1.20.0 (2026-06-05)

Features

  • support {:form,data} tagged body tuples (#886) (b1b3b80)

1.19.0 (2026-06-04)

Features

  • finch-adapter: Finch adapter will pass through all supported options (#879) (7609328)
  • form-urlencoded: support nested bodies via :brackets option (#878) (f7142e8)

1.18.3 (2026-06-02)

Important {: .error}

Please be careful using :hackney it is recommended to actually test the

... (truncated)

Commits
  • 556014d chore(master): release 1.21.2 (#915)
  • b250b50 fix(form-urlencoded): do not claim a content-type it did not encode (#914)
  • e6d214b chore(master): release 1.21.1 (#905)
  • e1f6051 fix(finch-adapter): surface the reason a streamed response stopped (#913)
  • e7ab2dc chore(ci): let PR checks work on fork pull requests (#911)
  • d49272a chore: warn that credential middleware must precede FollowRedirects (#910)
  • 5646648 chore(test): keep the gun connection owner alive while streaming (#909)
  • 119ebed chore(deps): bump hackney from 4.6.0 to 4.7.2 in the prod group across 1 dire...
  • 8ab94c4 chore(deps): bump actions/cache from 6.0.0 to 6.1.0 (#906)
  • 2c86eb9 chore(ci): unblock dependency PR checks (#908)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the all-dependencies group with 8 updates
36c670a 
Bumps the all-dependencies group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [ash](https://github.com/ash-project/ash) | `3.14.0` | `3.32.1` |
| [credo](https://github.com/rrrene/credo) | `1.7.16` | `1.7.19` |
| [ex_doc](https://github.com/elixir-lang/ex_doc) | `0.40.1` | `0.40.3` |
| [git_ops](https://github.com/zachdaniel/git_ops) | `2.9.0` | `2.12.2` |
| [igniter](https://github.com/ash-project/igniter) | `0.7.2` | `0.8.3` |
| [mox](https://github.com/dashbitco/mox) | `1.2.0` | `1.3.0` |
| [sobelow](https://github.com/sobelow/sobelow) | `0.14.1` | `0.15.0` |
| [tesla](https://github.com/elixir-tesla/tesla) | `1.16.0` | `1.21.2` |


Updates `ash` from 3.14.0 to 3.32.1
- [Release notes](https://github.com/ash-project/ash/releases)
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash@v3.14.0...v3.32.1)

Updates `credo` from 1.7.16 to 1.7.19
- [Release notes](https://github.com/rrrene/credo/releases)
- [Changelog](https://github.com/rrrene/credo/blob/master/CHANGELOG.md)
- [Commits](rrrene/credo@v1.7.16...v1.7.19)

Updates `ex_doc` from 0.40.1 to 0.40.3
- [Release notes](https://github.com/elixir-lang/ex_doc/releases)
- [Changelog](https://github.com/elixir-lang/ex_doc/blob/main/CHANGELOG.md)
- [Commits](elixir-lang/ex_doc@v0.40.1...v0.40.3)

Updates `git_ops` from 2.9.0 to 2.12.2
- [Changelog](https://github.com/zachdaniel/git_ops/blob/master/CHANGELOG.md)
- [Commits](zachdaniel/git_ops@v2.9.0...v2.12.2)

Updates `igniter` from 0.7.2 to 0.8.3
- [Release notes](https://github.com/ash-project/igniter/releases)
- [Changelog](https://github.com/ash-project/igniter/blob/main/CHANGELOG.md)
- [Commits](ash-project/igniter@v0.7.2...v0.8.3)

Updates `mox` from 1.2.0 to 1.3.0
- [Changelog](https://github.com/dashbitco/mox/blob/main/CHANGELOG.md)
- [Commits](dashbitco/mox@v1.2.0...v1.3.0)

Updates `sobelow` from 0.14.1 to 0.15.0
- [Release notes](https://github.com/sobelow/sobelow/releases)
- [Changelog](https://github.com/sobelow/sobelow/blob/main/CHANGELOG.md)
- [Commits](sobelow/sobelow@v0.14.1...v0.15.0)

Updates `tesla` from 1.16.0 to 1.21.2
- [Release notes](https://github.com/elixir-tesla/tesla/releases)
- [Changelog](https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md)
- [Commits](elixir-tesla/tesla@v1.16.0...v1.21.2)

---
updated-dependencies:
- dependency-name: ash
  dependency-version: 3.32.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: credo
  dependency-version: 1.7.19
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: ex_doc
  dependency-version: 0.40.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: git_ops
  dependency-version: 2.12.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: igniter
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: mox
  dependency-version: 1.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sobelow
  dependency-version: 0.15.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tesla
  dependency-version: 1.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Sep 1, 2026
@zachdaniel
zachdaniel merged commit 568dabf into main Sep 1, 2026
23 of 25 checks passed
@dependabot
dependabot Bot deleted the dependabot/hex/all-dependencies-c5ddc17b26 branch September 1, 2026 22:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zachdaniel