chore(deps-dev): bump igniter from 0.8.1 to 0.8.4

[dependabot]

Bumps igniter from 0.8.1 to 0.8.4.

Release notes

Sourced from igniter's releases.

v0.8.4

Security

• Fixes a terminal escape sequence injection in the mix igniter.install confirmation prompt via package metadata (CVE-2026-82584, GHSA-cj7w-j579-gc42).

Bug Fixes:

• strip terminal control sequences from hex install confirmation metadata (CVE-2026-82584)
• restore application env exactly after evaluating project config (#400)
• Control rerunning installers for existing packages (#399)
• unbreak mix igniter.upgrade --git-ci, and positional args after flags (#397)
• stop boolean flags consuming the following positional arg
• don't require a package list for igniter.upgrade --git-ci

v0.8.3

Bug Fixes:

• ensure verbose is passed all the way down by Zach Daniel

• properly check igniter.rms in --check by Zach Daniel

• resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

• add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

• update to Elixir 1.20 (#391) by ESmithByui

• direct users to format command for unless refactor by Zach Daniel

v0.8.2

Bug Fixes:

• handle empty list in configures_key by Zach Daniel

Improvements:

• Add scoped configure/6 options for runtime env blocks (#385) by RhettPoole

• Send issue output to stderr (#384) by daphnerosepurcell

... (truncated)

Changelog

Sourced from igniter's changelog.

v0.8.4 (2026-09-07)

Bug Fixes:

• strip terminal control sequences from hex install confirmation metadata (CVE-2026-82584) by Zach Daniel

• restore application env exactly after evaluating project config (#400) by neilberkman

• Control rerunning installers for existing packages (#399) by mvanhorn

• unbreak mix igniter.upgrade --git-ci, and positional args after flags (#397) by James Harton

• stop boolean flags consuming the following positional arg by James Harton

• don't require a package list for igniter.upgrade --git-ci by James Harton

v0.8.3 (2026-07-26)

Bug Fixes:

• ensure verbose is passed all the way down by Zach Daniel

• properly check igniter.rms in --check by Zach Daniel

• resolve Elixir 1.20 type-check warnings (#387) by Gilbert

Improvements:

• add Igniter.Libs.Phoenix.web_module_for_router/2 (#393) by James Harton

• update to Elixir 1.20 (#391) by ESmithByui

• direct users to format command for unless refactor by Zach Daniel

v0.8.2 (2026-06-24)

Bug Fixes:

• handle empty list in configures_key by Zach Daniel

Improvements:

... (truncated)

Commits

• c6d2b7f chore: release version v0.8.4
• d492b1a fix: strip terminal control sequences from hex install confirmation metadata
• 1d9bb60 test: drop unfinished install-rerun tests that never compiled
• b3fd506 fix: restore application env exactly after evaluating project config (#400)
• c0379c4 fix: Control rerunning installers for existing packages (#399)
• aa67bdd build(deps): bump the all-dependencies group with 3 updates (#398)
• 26608c5 chore: use a single monthly dependabot group
• 8b0f91c chore: fix tests
• 31db3a5 fix: unbreak mix igniter.upgrade --git-ci, and positional args after flags ...
• 64b02a4 build(deps): bump the production-dependencies group with 4 updates (#396)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)