Skip to content

build(deps): bump the production-dependencies group with 7 updates - #2815

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/production-dependencies-276645b0a9
Closed

build(deps): bump the production-dependencies group with 7 updates#2815
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/production-dependencies-276645b0a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 7 updates:

Package From To
crux 0.1.3 0.1.4
ecto 3.14.0 3.14.1
igniter 0.8.1 0.8.3
plug 1.19.2 1.20.3
reactor 1.0.2 1.0.3
spark 2.7.1 2.7.2
stream_data 1.3.0 1.4.0

Updates crux from 0.1.3 to 0.1.4

Release notes

Sourced from crux's releases.

v0.1.4

Bug Fixes:

Changelog

Sourced from crux's changelog.

v0.1.4 (2026-07-02)

Bug Fixes:

Commits
  • 3c8028c chore: release version v0.1.4
  • 81c88bf fix: fix annoying dialyzer error from mapsets
  • 571bd62 chore(deps-dev): bump the dev-dependencies group with 4 updates (#31)
  • 809c9be chore(deps): bump actions/checkout in the github-actions group (#30)
  • e1f2e4e chore(deps): bump actions/checkout in the github-actions group (#29)
  • See full diff in compare view

Updates ecto from 3.14.0 to 3.14.1

Changelog

Sourced from ecto's changelog.

v3.14.1 (2026-07-09)

Enhancements

  • [Ecto.Schema] Allow embedded_schema to have non-virtual :any fields
  • [Ecto.Schema] Add :on_writable_violation option for fields (a default can be specified with @on_writable_violation)
  • [Ecto.UUID] Add helper functions for UUIDv7

Bug fixes

  • [Ecto.Query] Warn on parentheses in query field access
  • [Ecto.Query] Expand macros in window frames
  • [Ecto.Query] Fix data-modifying CTE planner cache traversal
  • [Ecto.Query] Fix splice parameters in dynamic expressions
  • [Ecto.Query] Fix subquery order in query builders
  • [Ecto.Query] Fix wrong placeholder numbering when a from source is a {fragment, schema} tuple
  • [Ecto.Repo] Do not reflect changes ignored due to :writable in returned struct
  • [Ecto.Repo] Fix placeholder type mismatch check on insert_all with placeholders
Commits
  • e0aa6e1 Release v3.14.1
  • f1bd9d1 Fix splice params in dynamic expressions (#4750)
  • 9d7b301 Fix data-modifying CTE planner cache traversal (#4748)
  • 18c050d Add UUID v7 helper functions (#4739)
  • ca66f38 Warn on parentheses in query field access (#4746)
  • ea41949 Fix subquery order in query builders (#4745)
  • 59371b9 Match on correct tuple shape in insert_all placeholder type mismatch check (#...
  • 32d07c8 Fix wrong placeholder numbering when a from source is a `{fragment, schema}...
  • c4bb74a Improve warning/error message for writable violations (#4738)
  • 2e59540 Do not reflect changes ignored due to :writable in returned struct (#4736)
  • Additional commits viewable in compare view

Updates igniter from 0.8.1 to 0.8.3

Release notes

Sourced from igniter's releases.

v0.8.3

Bug Fixes:

  • ensure verbose is passed all the way down by Zach Daniel

  • properly check igniter.rms in --check by Zach Daniel

  • resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

  • add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

  • update to Elixir 1.20 (#391) by ESmithByui

  • direct users to format command for unless refactor by Zach Daniel

v0.8.2

Bug Fixes:

  • handle empty list in configures_key by Zach Daniel

Improvements:

  • Add scoped configure/6 options for runtime env blocks (#385) by RhettPoole

  • Send issue output to stderr (#384) by daphnerosepurcell

  • allow remapping modules to their file locations w/ regexes (#378) by aheiner2001

  • add --except to igniter.upgrade --all (#383) by febarnett3

  • intercept --help for igniter.new and other tasks. (#382) by CaydenLords

Changelog

Sourced from igniter's changelog.

v0.8.3 (2026-07-26)

Bug Fixes:

  • ensure verbose is passed all the way down by Zach Daniel

  • properly check igniter.rms in --check by Zach Daniel

  • resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

  • add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

  • update to Elixir 1.20 (#391) by ESmithByui

  • direct users to format command for unless refactor by Zach Daniel

v0.8.2 (2026-06-24)

Bug Fixes:

  • handle empty list in configures_key by Zach Daniel

Improvements:

  • Add scoped configure/6 options for runtime env blocks (#385) by RhettPoole

  • Send issue output to stderr (#384) by daphnerosepurcell

  • allow remapping modules to their file locations w/ regexes (#378) by aheiner2001

  • add --except to igniter.upgrade --all (#383) by febarnett3

  • intercept --help for igniter.new and other tasks. (#382) by CaydenLords

Commits
  • 5a167c0 chore: release version v0.8.3
  • 83e46ba fix: ensure verbose is passed all the way down
  • 1357303 fix: properly check igniter.rms in --check
  • e7885c1 chore(deps): Update mint to 1.9.3
  • aceac7a test: cover declined igniter.install dependency prompt (#394)
  • e9d0084 improvement: add Igniter.Libs.Phoenix.web_module_for_router/2 (#393)
  • a4b5364 test: Add regression tests for nested keyword config updates (#392)
  • b29e9d6 chore: warnings
  • 2768e68 improvement: update to Elixir 1.20 (#391)
  • 479c495 improvement: direct users to format command for unless refactor
  • Additional commits viewable in compare view

Updates plug from 1.19.2 to 1.20.3

Changelog

Sourced from plug's changelog.

v1.20.3 (2026-07-09)

Security

  • [Plug.Parsers.MULTIPART] Count files and skipped multipart parts towards the length limit (CVE-2026-56814)
  • [Plug.Conn.Cookies] Raise if ; is present in cookie attributes (CVE-2026-56813)

v1.20.2 (2026-06-30)

Bug fixes

  • [Plug.Conn] Set state to :set_upgrade and status to 101 when running before_send callbacks for upgrades

v1.20.1 (2026-06-23)

Bug fixes

  • [Plug.Conn] Fix inform/inform! when atoms are given as header keys

v1.20.0 (2026-06-23)

This release requires Elixir v1.15+.

Enhancements

  • [Plug.RequestId] Make request ID generation configurable
  • [Plug.Test] Support :sign and :encrypt options in put_req_cookie/4

Bug fixes

  • [Plug.Conn] Run before_send callbacks before upgrade_adapter/3
  • [Plug.Debugger] Raise if Elixir is compiled without source information
  • [Plug.RewriteOn] Rewrite the protocol to HTTPS when x-forwarded-proto is wss
  • [Plug.Static] Return 416 for invalid range requests
  • [Plug.Static] Fix :raise_on_missing_only raising on non-matching paths with colons

Optimizations

  • [Plug.Conn.Cookies] Optimize cookie parsing
  • [Plug.Conn.Cookies] Optimize cookie encoding
  • [Plug.Conn.Utils] Optimize validate_utf8!/3
  • [Plug.Conn.Utils] Optimize splitting by semicolons
  • [Plug.Router] Optimize host matching

v1.19.5 (2026-07-09)

Security

  • [Plug.Parsers.MULTIPART] Count files and skipped multipart parts towards the length limit (CVE-2026-56814)
  • [Plug.Conn.Cookies] Raise if ; is present in cookie attributes (CVE-2026-56813)

... (truncated)

Commits

Updates reactor from 1.0.2 to 1.0.3

Release notes

Sourced from reactor's releases.

v1.0.3

Bug Fixes:

  • avoid spinning when waiting for retry backoffs (#322) by Marek Kaput
Changelog

Sourced from reactor's changelog.

v1.0.3 (2026-07-26)

Bug Fixes:

  • avoid spinning when waiting for retry backoffs (#322) by Marek Kaput
Commits
  • c11578c chore: release version v1.0.3
  • 15f89a2 fix: avoid spinning when waiting for retry backoffs (#322)
  • 227dfd7 chore(deps): Update mint to 1.9.3.
  • 8890bff chore(deps): Bump the production-dependencies group with 2 updates (#320)
  • 43813ca chore(deps-dev): Bump credo in the dev-dependencies group (#319)
  • 1fbabba chore(deps): update req
  • 172d53d chore(deps): update dependency elixir to v1.20.2 (#318)
  • a846ff2 chore(deps): update dependency erlang to v29.0.2 (#317)
  • 0c498c1 chore(deps-dev): Bump the dev-dependencies group across 1 directory with 2 up...
  • 2ca0a68 chore(deps): Bump the production-dependencies group with 4 updates (#316)
  • See full diff in compare view

Updates spark from 2.7.1 to 2.7.2

Changelog

Sourced from spark's changelog.

v2.7.2 (2026-06-07)

Bug Fixes:

  • revert pmap introduction (#282) by nxy7
Commits

Updates stream_data from 1.3.0 to 1.4.0

Changelog

Sourced from stream_data's changelog.

v1.4.0

  • Require Elixir 1.14+.
  • Fix StreamData.float/1 when min and max are too far apart.
  • Support choosing between graphemes and codepoints in StreamData.string/2.
  • Shrink StreamData.one_of/1 towards earlier elements first (instead of smaller values for later elements).
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the production-dependencies group with 7 updates
5320dc7 
Bumps the production-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [crux](https://github.com/ash-project/crux) | `0.1.3` | `0.1.4` |
| [ecto](https://github.com/elixir-ecto/ecto) | `3.14.0` | `3.14.1` |
| [igniter](https://github.com/ash-project/igniter) | `0.8.1` | `0.8.3` |
| [plug](https://github.com/elixir-plug/plug) | `1.19.2` | `1.20.3` |
| [reactor](https://github.com/ash-project/reactor) | `1.0.2` | `1.0.3` |
| [spark](https://github.com/ash-project/spark) | `2.7.1` | `2.7.2` |
| [stream_data](https://github.com/whatyouhide/stream_data) | `1.3.0` | `1.4.0` |


Updates `crux` from 0.1.3 to 0.1.4
- [Release notes](https://github.com/ash-project/crux/releases)
- [Changelog](https://github.com/ash-project/crux/blob/main/CHANGELOG.md)
- [Commits](ash-project/crux@v0.1.3...v0.1.4)

Updates `ecto` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/elixir-ecto/ecto/releases)
- [Changelog](https://github.com/elixir-ecto/ecto/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/ecto@v3.14.0...v3.14.1)

Updates `igniter` from 0.8.1 to 0.8.3
- [Release notes](https://github.com/ash-project/igniter/releases)
- [Changelog](https://github.com/ash-project/igniter/blob/main/CHANGELOG.md)
- [Commits](ash-project/igniter@v0.8.1...v0.8.3)

Updates `plug` from 1.19.2 to 1.20.3
- [Changelog](https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md)
- [Commits](elixir-plug/plug@v1.19.2...v1.20.3)

Updates `reactor` from 1.0.2 to 1.0.3
- [Release notes](https://github.com/ash-project/reactor/releases)
- [Changelog](https://github.com/ash-project/reactor/blob/main/CHANGELOG.md)
- [Commits](ash-project/reactor@v1.0.2...v1.0.3)

Updates `spark` from 2.7.1 to 2.7.2
- [Release notes](https://github.com/ash-project/spark/releases)
- [Changelog](https://github.com/ash-project/spark/blob/main/CHANGELOG.md)
- [Commits](ash-project/spark@v2.7.1...v2.7.2)

Updates `stream_data` from 1.3.0 to 1.4.0
- [Changelog](https://github.com/whatyouhide/stream_data/blob/main/CHANGELOG.md)
- [Commits](whatyouhide/stream_data@v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: crux
  dependency-version: 0.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ecto
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: igniter
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: plug
  dependency-version: 1.20.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: reactor
  dependency-version: 1.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: spark
  dependency-version: 2.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: stream_data
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 1, 2026
@zachdaniel

zachdaniel commented Aug 2, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Aug 2, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 2, 2026
@dependabot
dependabot Bot deleted the dependabot/hex/production-dependencies-276645b0a9 branch August 2, 2026 17:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@zachdaniel