Skip to content

chore: bump dependencies and release 0.2.3 - #185

Merged
karim-semmoud merged 5 commits into
mainfrom
cursor/deps-update-ad6b
Oct 7, 2026
Merged

karim-semmoud merged 5 commits into
mainfrom
cursor/deps-update-ad6b

Conversation

@karim-semmoud

@karim-semmoud karim-semmoud commented Oct 5, 2026 •

Copy link
Copy Markdown
Member

Summary

Combines the open Dependabot dependency updates into one release cut. Hex packages move from 0.2.2 to 0.2.3. Nothing is published; publish corex, corex_design, corex_mcp, and corex_new manually after this is green and merged to main.

  • Hex locks: Phoenix 1.8.15, LiveView 1.2.12, ex_slop 0.4.5, Tidewave 0.9.1, Sobelow 0.16.0, plus in-range updates Dependabot had not opened yet. phoenix_live_dashboard is ~> 0.9.1 in e2e and integration_test.
  • Corex.Code assigns highlighted HTML as {:safe, html} so Sobelow 0.16 does not flag Phoenix.HTML.raw/1. The code attr stays trusted input.
  • The integration test harness has no lib/ sources, so its lint alias no longer runs Sobelow. Sobelow 0.16 aborts when the scan root is empty, and it does not scan test/.
  • npm: Zag.js 1.44.0, Prettier 3.9.9, Vitest 5.0.3 (lazy-hook and test-helper mocks typed for Vitest 5), e2e Motion 13.5.1 with e2e/pnpm-lock.yaml updated.
  • TypeScript 7 (#165) stays open. @typescript-eslint 8.69 does not support TypeScript 7.0.
  • Auth PR #161 is closed. Branch cursor/corex-gen-auth-57aa is kept.

Test plan

  • mix sobelow --exit and mix lint (Sobelow 0.16.0) in root, installer, design, and mcp
  • mix lint in integration_test (Credo on 18 files; Sobelow removed)
  • mix test test/components/code_test.exs (3 tests, 0 failures)
  • pnpm run check
  • mix test at the repo root (1453 tests, 0 failures)
  • mix test in design, mcp, and installer
Open in Web Open in Cursor 

cursoragent and others added 5 commits October 5, 2026 01:57
Update lockfiles across the Mix projects, including Phoenix 1.8.15,
LiveView 1.2.12, and LiveDashboard 0.9.1.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>
Move Zag.js, Prettier, Vitest, and Motion forward, and set corex,
corex_design, corex_mcp, and corex_new to 0.2.3 without publishing.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>
Sobelow 0.16 makes mix sobelow --exit fail on the existing low-confidence
Phoenix.HTML.raw highlight in Corex.Code.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>
Stop calling Phoenix.HTML.raw/1 so mix sobelow --exit stays clean on
Sobelow 0.16, and lock that version in every Mix project.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>
Sobelow 0.16 aborts when lib/ is missing. The harness only has test and config sources, which Sobelow does not scan.

Co-authored-by: Karim Semmoud <karim-semmoud@users.noreply.github.com>
@karim-semmoud karim-semmoud changed the title chore: bump dependencies and cut 0.2.3 chore: bump dependencies and release 0.2.3 Oct 7, 2026
@karim-semmoud
karim-semmoud marked this pull request as ready for review October 7, 2026 11:27
@karim-semmoud
karim-semmoud merged commit 0f3e095 into main Oct 7, 2026
16 checks passed
This was referenced Oct 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants