Skip to content

Comments

build(deps): bump the production-dependencies group across 1 directory with 8 updates#402

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/hex/production-dependencies-da9cb1b746
Closed

build(deps): bump the production-dependencies group across 1 directory with 8 updates#402
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/hex/production-dependencies-da9cb1b746

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 26, 2025

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
beacon c496ae8 236da4b
ecto 3.12.5 3.13.2
esbuild 0.9.0 0.10.0
floki 0.37.1 0.38.0
igniter 0.5.43 0.6.28
live_svelte 0.15.0 0.16.0

Updates beacon from c496ae8 to 236da4b

Commits

Updates ecto from 3.12.5 to 3.13.2

Changelog

Sourced from ecto's changelog.

v3.13.2 (2025-06-24)

Bug fixes

  • [Ecto.Query] Fix regression which made queries with multiple joins expensive to compile
  • [Ecto.Repo] Fix detection of missing primary key on associations with only nil entries
  • [Ecto.Query] Fix macro expansion in over clause's order_by

v3.13.1 (2025-06-19)

Bug fixes

  • [Ecto.Repo] Do not automatically apply HOT updates on upsert with replace. It is the user responsibility to make sure they do not overlap

v3.13.0 (2025-06-18)

Requires Elixir v1.14+.

Enhancements

  • [Ecto] Support Elixir's built-in JSON
  • [Ecto.Enum] Add Ecto.Enum.cast_value/3
  • [Ecto.Query] Allow schema to be used for values list types
  • [Ecto.Query] Allow strings in field/2
  • [Ecto.Query] Add identifier/1 in queries
  • [Ecto.Query] Add constant/1 in queries
  • [Ecto.Query] Allow exclude/2 to remove windows
  • [Ecto.Query] Allow source fields in json_extract_path
  • [Ecto.Repo] Add Ecto.Repo.prepare_transaction/2 user callback
  • [Ecto.Repo] Add Ecto.Repo.all_by/3
  • [Ecto.Repo] Add Ecto.Repo.transact/2
  • [Ecto.Repo] Allow HOT updates on upsert queries in Postgres by removing duplicate fields during replace_all_except
  • [Ecto.Schema] Support @schema_redact: :all_except_primary_keys module attribute

Bug fixes

  • [Ecto.Query] Allow select merging maps with all nil values
  • [Ecto.Query] map/2 in queries now always returns a map on joins, even on left joins, for consistency with from sources
  • [Ecto.Schema] Fix an issue where Ecto could warn an association did not exist, when it did

Soft deprecations (no warnings emitted)

  • [Ecto.Repo] Ecto.Repo.transaction/2 is soft-deprecated in favor of Ecto.Repo.transact/1
  • [Ecto.Query.API] literal/1 is deprecated in favor of identifier/1

v3.12.6 (2025-06-11)

Fix deprecations on Elixir v1.19.

Commits
  • cd0f70b Release v3.13.2
  • 3816296 Revert "Add support for :writable option on belongs_to (#4624)"
  • 59d21ee Fix nil map associations (#4631)
  • 18a633a Docs: Don't reference deprecated literal (#4627)
  • 5750491 Fix issue with macro expansion in over clause's order_by (#4630)
  • 3637802 Docs: Fix identifier docs unused variable (#4626)
  • 3b2d006 Use unique var names when computing bindings (#4625)
  • 9cdc5bf Only compute expression to string if necessary
  • 576665f Add support for :writable option on belongs_to (#4624)
  • db12e07 upserts: offer guidance when :replace_all or :replace_all_except produce ...
  • Additional commits viewable in compare view

Updates esbuild from 0.9.0 to 0.10.0

Changelog

Sourced from esbuild's changelog.

v0.10.0 (2025-05-27)

  • Automatically join environment variables specified as lists using the correct PATH separator. For example:
    config :esbuild,
      my_profile: [
        ...
        env: %{
          "NODE_PATH" => [Path.expand("../deps", __DIR__), Mix.Project.build_path()]
        }
      ]
Commits

Updates floki from 0.37.1 to 0.38.0

Release notes

Sourced from floki's releases.

v0.38.0

Added

  • This version adds initial support for the :has pseudo-selector. It is a great addition that enables finding elements containing matching children.

    Examples for selectors:

    • "div:has(h1)"
    • "div:has(h1, p, span)"
    • "div:has(p.foo)"
    • "div:has(img[src='https://example.com'])"
    • "tr:has(*:fl-contains('TEST'))"

    Note that combinators like ">" are not allowed yet.

    Thank you @​bvobart for this feature!

Fixed

  • Add :style option documentation to Floki.text/2. Thanks @​s3cur3 for the fix.

  • Fix deprecation warnings for upcoming Elixir 1.19.

  • Prevent from crashing when selector is an empty string.

Removed

  • Remove support for Elixir 1.14 and OTP 23.

  • Remove deprecated functions and function clauses that were accepting strings (binaries).

    Affected functions:

    • parse/1 - removed function
    • map/2 - removed function
    • attr/4 - removed clause
    • find/2 - removed clause
    • text/3 - removed clause
    • text/3 - removed clause
    • attribute/2 - removed clause
    • filter_out/2 - removed clause

    HTML must be parsed before searching. Functions like Floki.find/2, Floki.attribute/2, and other HTML manipulation functions no longer work directly with HTML strings. The HTML must be parsed first using Floki.parse_fragment/2 or Floki.parse_document/2.

... (truncated)

Changelog

Sourced from floki's changelog.

[0.38.0] - 2025-06-14

Added

  • This version adds initial support for the :has pseudo-selector. It is a great addition that enables finding elements containing matching children.

    Examples for selectors:

    • "div:has(h1)"
    • "div:has(h1, p, span)"
    • "div:has(p.foo)"
    • "div:has(img[src='https://example.com'])"
    • "tr:has(*:fl-contains('TEST'))"

    Note that combinators like ">" are not allowed yet.

    Thank you @​bvobart for this feature!

Fixed

  • Add :style option documentation to Floki.text/2. Thanks @​s3cur3 for the fix.

  • Fix deprecation warnings for upcoming Elixir 1.19.

  • Prevent from crashing when selector is an empty string.

Removed

  • Remove support for Elixir 1.14 and OTP 23.

  • Remove deprecated functions and function clauses that were accepting strings (binaries).

    Affected functions:

    • parse/1 - removed function
    • map/2 - removed function
    • attr/4 - removed clause
    • find/2 - removed clause
    • text/3 - removed clause
    • text/3 - removed clause
    • attribute/2 - removed clause
    • filter_out/2 - removed clause
  • HTML must be parsed before searching. Functions like Floki.find/2, Floki.attribute/2, and other HTML manipulation functions no longer work directly with HTML strings. The HTML must be parsed first using

... (truncated)

Commits

Updates igniter from 0.5.43 to 0.6.28

Release notes

Sourced from igniter's releases.

v0.6.25

Bug Fixes:

  • remove another enumeration of the rewrite by Zach Daniel

v0.6.24

Bug Fixes:

  • iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23

Bug Fixes:

  • remove case where we iterate a rewrite by Zach Daniel

v0.6.22

Bug Fixes:

  • handle :error coming from alias updater by Zach Daniel

  • add :error case clause in modify_existing_alias by Zach Daniel

v0.6.21

Bug Fixes:

  • properly detect deps location by Zach Daniel

Improvements:

  • don't enumerate igniter.rewrite by Zach Daniel

... (truncated)

Changelog

Sourced from igniter's changelog.

v0.6.28 (2025-08-21)

Bug Fixes:

  • use appropriate function name function -> function? (#326) by Ciarán Walsh

Improvements:

  • igniter.new Don't run git init if already in git repo (#328) by Erik André Jakobsen

v0.6.27 (2025-08-14)

  • releasing a new version to handle locally published version with IO.inspects left in 🤦‍♂️

v0.6.26 (2025-07-29)

Bug Fixes:

  • improve Phoenix web module detection in list_routers (#325) by James Harton

v0.6.25 (2025-07-23)

Bug Fixes:

  • remove another enumeration of the rewrite by Zach Daniel

v0.6.24 (2025-07-23)

Bug Fixes:

  • iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23 (2025-07-23)

... (truncated)

Commits
  • 3234063 chore: release version v0.6.28
  • 924a724 improvement: igniter.new Don't run git init if already in git repo (#328)
  • ff45e81 chore: update changelog
  • fa22a3c chore: release version v0.6.27
  • 99d5145 fix: use appropriate function name function -> function? (#326)
  • a803b22 chore: release version v0.6.26
  • d023d3e chore: don't require a web module
  • 956bd4e fix: improve Phoenix web module detection in list_routers (#325)
  • bf9c097 chore: release version v0.6.25
  • a0c4689 fix: remove another enumeration of the rewrite
  • Additional commits viewable in compare view

Updates live_svelte from 0.15.0 to 0.16.0

Release notes

Sourced from live_svelte's releases.

v0.16.0

What's Changed

New Contributors

Full Changelog: woutdp/live_svelte@v0.15.0...v0.16.0

Changelog

Sourced from live_svelte's changelog.

0.16.0 - 2025-04-18

Added

Fixed

  • Documentation tweaks that refer to adding the socket when not using SSR
Commits
  • 08ecd4d Update changelog
  • 23f64b2 Bump version 0.15.0 -> 0.160
  • b1f6845 Add TV labs and remore territoriez
  • 1d811a7 Add to changelog
  • ec1923c Update README.md fallback content
  • 26fd898 Add documentation for loading slot
  • 649a99a Edit warning message ssr + loading
  • 7fd90a5 Add example loading slot
  • 640dd6e Add warning if ssr and loading slot is being used together
  • a3615e4 feat: <:loading /> slot for server-rendered markup
  • Additional commits viewable in compare view

Updates phoenix from 1.7.21 to 1.8.0

Changelog

Sourced from phoenix's changelog.

1.8.0 (2025-08-05)

Bug fixes

  • [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

  • [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
  • [phx.new] Add mix precommit alias
  • [phx.new] Add AGENTS.md generation compatible with usage_rules
  • [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
  • [phx.new] Use LiveView 1.1 release in generated code
  • [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

  • Fix phx.gen.presence PubSub server name for umbrella apps
  • Fix phx.gen.live subscribing to pubsub in disconnected mounts

Enhancements

  • [phx.new] Initialize initial git repo when git is installed
  • [phx.new] Opt-in to HEEx :debug_tags_location in development
  • [phx.gen.live|html|json|context] Make context name optional and inflect based on schema when missing
  • [phx.gen.*] Use new Ecto 3.13 Repo.transact/2 in generators
  • [phx.gen.auth] Warn when using phx.gen.auth without esbuild as features assume phoenix_html.js in bundle
  • Add security.md guide for security best practices
  • [phoenix.js] - Add fetch() support to LongPoll when XMLHTTPRequest is not available
  • Optimize parameter scrubbing by precompiling patterns

1.8.0-rc.3 (2025-05-07)

Enhancements

  • [phx.gen.auth] Allow configuring the scope's assign key in phx.gen.auth
  • [phx.new] Do not override theme in root layout if explicitly set

1.8.0-rc.2 (2025-04-29)

Bug Fixes

  • [phx.gen.live] Only subscribe to pubsub if connected
  • [phx.gen.auth] Remove unused current_password field
  • [phx.gen.auth] Use context_app for scopes to fix generated scopes in umbrella apps

1.8.0-rc.1 (2025-04-16)

Enhancements

  • [phx.new] Support PORT in dev
  • [phx.gen.auth] Replace utc_now/0 + truncate/1 with utc_now/1
  • [phx.gen.auth] Make dev mailbox link more obvious

Bug Fixes

... (truncated)

Commits

Updates phoenix_live_view from 1.0.9 to 1.1.8

Changelog

Sourced from phoenix_live_view's changelog.

v1.1.8 (2025-08-20)

Bug fixes

  • Fix race condition where patches were discarded when a join was still pending (#3957)

v1.1.7 (2025-08-18)

Bug fixes

  • Fix regression introduced in v1.1.6

v1.1.6 (2025-08-18)

Bug fixes

  • Fix live components in nested views accidentally destroying live components in parent views (#3953)

v1.1.5 (2025-08-18)

Bug fixes

  • Fix hooks not working when used inside of Phoenix.Component.portal/1 (#3950)
  • Fix form participating custom elements not being reset to empty in some cases (#3946)

Enhancements

  • Allow assign_async to return a keyword list
  • Add Phoenix.LiveView.stream_async/4 to asynchronously insert items into a stream

v1.1.4 (2025-08-13)

Bug fixes

  • Fix LiveComponent updates being inadvertently discarded in rare circumstances when locked DOM trees are restored (#3941)

v1.1.3 (2025-08-05)

Bug fixes

  • Fix warning when importing LiveView JS (#3926)
  • Ensure form recovery respects fieldsets (#3921)
  • LiveViewTest: Fix crash when submitting a form with custom submitter, but without ID (#3927)
  • LiveViewTest: Ensure whitespace in textarea content is preserved when submitting a form (#3928)
  • Make hook types less strict (#3913)

Enhancements

  • HTMLFormatter: do not try to format attributes into a single line when they are spread over multiple lines. This follows the behavior of the Elixir formatter that also respects newlines.

... (truncated)

Commits

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
beacon [>= 1.a, < 2]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 8 updates

Bumps the production-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [beacon](https://github.com/BeaconCMS/beacon) | ``c496ae8`` | ``236da4b`` |
| [ecto](https://github.com/elixir-ecto/ecto) | `3.12.5` | `3.13.2` |
| [esbuild](https://github.com/phoenixframework/esbuild) | `0.9.0` | `0.10.0` |
| [floki](https://github.com/philss/floki) | `0.37.1` | `0.38.0` |
| [igniter](https://github.com/ash-project/igniter) | `0.5.43` | `0.6.28` |
| [live_svelte](https://github.com/woutdp/live_svelte) | `0.15.0` | `0.16.0` |



Updates `beacon` from `c496ae8` to `236da4b`
- [Release notes](https://github.com/BeaconCMS/beacon/releases)
- [Commits](BeaconCMS/beacon@c496ae8...236da4b)

Updates `ecto` from 3.12.5 to 3.13.2
- [Release notes](https://github.com/elixir-ecto/ecto/releases)
- [Changelog](https://github.com/elixir-ecto/ecto/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/ecto@v3.12.5...v3.13.2)

Updates `esbuild` from 0.9.0 to 0.10.0
- [Changelog](https://github.com/phoenixframework/esbuild/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/esbuild@v0.9.0...v0.10.0)

Updates `floki` from 0.37.1 to 0.38.0
- [Release notes](https://github.com/philss/floki/releases)
- [Changelog](https://github.com/philss/floki/blob/main/CHANGELOG.md)
- [Commits](philss/floki@v0.37.1...v0.38.0)

Updates `igniter` from 0.5.43 to 0.6.28
- [Release notes](https://github.com/ash-project/igniter/releases)
- [Changelog](https://github.com/ash-project/igniter/blob/main/CHANGELOG.md)
- [Commits](ash-project/igniter@v0.5.43...v0.6.28)

Updates `live_svelte` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/woutdp/live_svelte/releases)
- [Changelog](https://github.com/woutdp/live_svelte/blob/master/CHANGELOG.md)
- [Commits](woutdp/live_svelte@v0.15.0...v0.16.0)

Updates `phoenix` from 1.7.21 to 1.8.0
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.7.21...v1.8.0)

Updates `phoenix_live_view` from 1.0.9 to 1.1.8
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.8/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.0.9...v1.1.8)

---
updated-dependencies:
- dependency-name: beacon
  dependency-version: 236da4b187fe9498a2d9bd1c7e0e4a7704e73c0d
  dependency-type: direct:production
  dependency-group: production-dependencies
- dependency-name: ecto
  dependency-version: 3.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: esbuild
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: floki
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: igniter
  dependency-version: 0.6.28
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: live_svelte
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.1.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Aug 26, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Sep 8, 2025
@dependabot dependabot bot deleted the dependabot/hex/production-dependencies-da9cb1b746 branch September 8, 2025 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants