Bump the development-dependencies group with 5 updates

[dependabot]

Bumps the development-dependencies group with 5 updates:

Package	From	To
esbuild	0.9.0	0.10.0
ex_doc	0.37.3	0.39.3
makeup_syntect	0.1.3	0.1.4
phoenix_live_reload	1.6.0	1.6.2
plug_cowboy	2.7.3	2.7.5

Updates esbuild from 0.9.0 to 0.10.0

Changelog

Sourced from esbuild's changelog.

v0.10.0 (2025-05-27)

• Automatically join environment variables specified as lists using the correct PATH separator. For example:

  config :esbuild,
    my_profile: [
      ...
      env: %{
        "NODE_PATH" => [Path.expand("../deps", __DIR__), Mix.Project.build_path()]
      }
    ]

Commits

• 86f4304 release v0.10.0
• c891ea2 Merge pull request #78 from phoenixframework/sd-path-sep
• 6f8b4df join all lists
• e818a27 update CI
• 809c25f support passing NODE_PATH as list
• See full diff in compare view

Updates ex_doc from 0.37.3 to 0.39.3

Changelog

Sourced from ex_doc's changelog.

v0.39.3 (2025-12-09)

• Enhancements
  • Add the option to trim down the footer

v0.39.2 (2025-12-04)

• Bug fixes
  • Do not strip hrefs on summaries
  • Show go to latest for prereleases
  • Prevent fake italic in autocomplete text
  • Rename "Search Hexdocs" link to "Go to package docs"

v0.39.1 (2025-10-23)

• Bug fixes
  • Improve box-shadow around autocompletion
  • Trim search engine selector on small screens
  • Fix admonition titles on small screens

v0.39.0 (2025-10-23)

• Enhancements
  • Allow custom search engines to be configured with support for https://hexdocs.pm
  • Improve admonition blocks so they better integrate with the page flow
• Bug fixes
  • Add .cheatmd to EPUB to avoid broken links
• Backwards incompatible changes
  • Validate :extras fields: if you were previously setting them to unexpected values, you may now get an exception
  • Setting exdoc:full-text-search-url metadata is no longer supported, using the new search engines configuration

v0.38.4 (2025-09-09)

• Bug fixes
  • Fix escaping of links when they have ampersand in them
  • Increase spacing of footers in pages
  • Align stale icon positioning

v0.38.3 (2025-08-17)

• Enhancements
  • Allow configuring autocomplete limit, and default it to 10 instead of 8
  • Display description text in docs groups
  • Load discovered makeup apps for CLI

v0.38.2 (2025-05-27)

• Bug fixes
  • Render documents with hardcoded <h2>/<h3> entries correctly
  • Fix padding on external links

... (truncated)

Commits

• a359f56 Release v0.39.3
• 94134e0 Add the option to trim down the footer
• 08482c0 Bump js-yaml from 4.1.0 to 4.1.1 in /assets (#2170)
• 425378e Release v0.39.2
• 10d8315 Ensure IDs rather than hrefs are stripped, closes #2175
• 72bb755 Show go to latest for prereleases, closes #2173
• 6db9cab Fix docs: Move source_url to project (#2172)
• e7abbae Add Elixir v1.19 and Erlang/OTP 28 to CI (#2166)
• 60203be Update assets
• a4927a4 Prevent fake italic in autocomplete text (#2168)
• Additional commits viewable in compare view

Updates makeup_syntect from 0.1.3 to 0.1.4

Changelog

Sourced from makeup_syntect's changelog.

v0.1.4

• Updated syntect and two-face dependencies.
  • Adds support for debsources, GDScript, Idris, Odin, Typst, VHDL syntaxes

Commits

• 76215a6 release v0.1.4
• 3c88ed0 Merge pull request #21 from elixir-makeup/dependabot/cargo/native/makeup_synt...
• c6c0fe0 Bump two-face from 0.4.5 to 0.5.1 in /native/makeup_syntect
• 4471590 fix rustler vsn
• f1654ac update to stable, set lto to thin
• 5b03508 back to 1.86
• caed490 downgrade rustler
• 24d1bbb Revert "back to stable toolchain"
• b6c78c5 try to fix cross compile
• 0d58d06 back to stable toolchain
• Additional commits viewable in compare view

Updates phoenix_live_reload from 1.6.0 to 1.6.2

Changelog

Sourced from phoenix_live_reload's changelog.

1.6.2 (2025-12-08)

• Bug fixes
  • Properly deal with Unicode when forwarding logs

1.6.1 (2025-08-31)

• Enhancements
  • Set :phoenix_live_reload private field to downstream instrumentation
  • Add @import directive support to CSS reload strategy

Commits

• 6e139d2 Release v1.6.2
• e09911e Deal with charlists in logger
• a2a3702 Release v1.6.1
• 3644706 Set :phoenix_live_reload private field to downstream instrumentation
• 1c5c150 Add @​import directive support to CSS reload strategy (#172)
• 5e8c104 Merge pull request #170 from cloud8421/patch-1
• 2c864c8 Fix default target window mention in CHANGELOG
• See full diff in compare view

Updates plug_cowboy from 2.7.3 to 2.7.5

Changelog

Sourced from plug_cowboy's changelog.

v2.7.5

Enhancements

• Ensure path too large request errors are correctly translated

v2.7.4

Enhancements

• Ensure errors from Ranch are correctly translated

Commits

• 553b43e Release v2.7.5
• 1fc7cf0 Fixes crash when path is too long (#110)
• 9a2873e Release v2.7.4
• e880695 Release v2.7.4
• 827218f Ensure crash_reason is a two-element tuple for exit case (#108)
• 75bbb20 Update CI for additional task
• 3468307 Update CI (#109)
• acc3f85 Use a fixed port on websocket tests
• f23d86d Fix warnings on more recent Elixir versions
• 975a5ac Emit {:plug_conn, :sent} on responses
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions