Bump the mix-production-dependencies group across 1 directory with 4 updates#36
Open
Conversation
…updates Bumps the mix-production-dependencies group with 4 updates in the /src/flagd-ui directory: [bandit](https://github.com/mtrudel/bandit), [phoenix](https://github.com/phoenixframework/phoenix), [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) and [swoosh](https://github.com/swoosh/swoosh). Updates `bandit` from 1.10.2 to 1.10.3 - [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md) - [Commits](mtrudel/bandit@1.10.2...1.10.3) Updates `phoenix` from 1.8.3 to 1.8.4 - [Release notes](https://github.com/phoenixframework/phoenix/releases) - [Changelog](https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md) - [Commits](phoenixframework/phoenix@v1.8.3...v1.8.4) Updates `phoenix_live_view` from 1.1.22 to 1.1.25 - [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases) - [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.25/CHANGELOG.md) - [Commits](phoenixframework/phoenix_live_view@v1.1.22...v1.1.25) Updates `swoosh` from 1.21.0 to 1.22.1 - [Release notes](https://github.com/swoosh/swoosh/releases) - [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md) - [Commits](swoosh/swoosh@v1.21.0...v1.22.1) --- updated-dependencies: - dependency-name: bandit dependency-version: 1.10.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mix-production-dependencies - dependency-name: phoenix dependency-version: 1.8.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mix-production-dependencies - dependency-name: phoenix_live_view dependency-version: 1.1.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: mix-production-dependencies - dependency-name: swoosh dependency-version: 1.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: mix-production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the mix-production-dependencies group with 4 updates in the /src/flagd-ui directory: bandit, phoenix, phoenix_live_view and swoosh.
Updates
banditfrom 1.10.2 to 1.10.3Changelog
Sourced from bandit's changelog.
Commits
e3fd682Version bump to 1.10.3a330b13Grant actions:write permission to lint job for PLT cache eviction0aa42c2Support authority form requests for CONNECT requests (#571)ac63021fix: detect client disconnect on timeout in ensure_completed (#566)c746d8eBump ex_doc from 0.40.0 to 0.40.1 (#569)5640a10Bump credo from 1.7.15 to 1.7.16 (#568)78e5184feat: http2 sendfile streaming (#565)Updates
phoenixfrom 1.8.3 to 1.8.4Changelog
Sourced from phoenix's changelog.
Commits
5c0f19fRelease 1.8.422ac56eUpdate assets72192e3Bump lodash from 4.17.21 to 4.17.23 (#6584)92a79b0Adds guards support in assert_push, assert_broadcast and assert_reply (#6595)ac12eecFix concurrent socket teardown (#6602)0f6a26fUpdate umbrella link2dda4b0Fix@streamtypo in usage-rules liveview streams example (#6601)7c37fa7Fix bad link (#6597)dadf946followup for phoenixframework/phoenix#6563666dcaeRevert "autocomplete with email in email fields (#6502)" (#6574)Updates
phoenix_live_viewfrom 1.1.22 to 1.1.25Release notes
Sourced from phoenix_live_view's releases.
Changelog
Sourced from phoenix_live_view's changelog.
Commits
e592ce8Release v1.1.253eaaa41click-away portal handling (#4154)1613bfffix type warning9f36807Mention auto_upload in uploads guide (#4130)9a34784Create GitHub releases with changelog (#4135)a6921d9Document phx-value- event "value" precendence42c790aadd missing file for 46fb6dc8765d24Fix flaky async tests relying on monitoraf2c40fhandle deadview hooks (#4151)72442bbfix flaky upload testsUpdates
swooshfrom 1.21.0 to 1.22.1Release notes
Sourced from swoosh's releases.
Changelog
Sourced from swoosh's changelog.
Commits
3efa0d3v1.22.18e176fdremove bad testf368d1cFix mailbox preview text-body clipping by removing negative top offset (#1108)cffbc67Move preferred_cli_env to cli functionbb2f6e8Add GitHub Actions workflow for Copilot setup71ce6f2Update Tailwind CSS version to 4.2.14556b02Bump bandit from 1.10.2 to 1.10.31a41c89v1.22.0f96fcaafeat: consistent mailersend return type and remove unnecessary auth headers98d8546feat: add mailersend deliver_manyDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions