Skip to content

Bump the mix group with 4 updates - #24

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/mix-54c3074fb0
Open

Bump the mix group with 4 updates#24
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/mix-54c3074fb0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the mix group with 4 updates: jump_credo_checks, public_sufx, req and tesla.

Updates jump_credo_checks from 0.4.0 to 0.5.0

Release notes

Sourced from jump_credo_checks's releases.

v0.5.0

New features

  • Added Jump.CredoChecks.NoManualContentDisposition check, courtesy of @​ftes (PR)
  • Added Jump.CredoChecks.LiveViewPubSubRequiresConnected, which flags Phoenix.PubSub.subscribe/{2,3} calls (or your custom wrappers) in LiveView mount/3 that are not wrapped in if connected?(socket). (PR)

Improvements

  • Improvements to Jump.CredoChecks.UnusedLiveViewAssign:
    • Add custom_assign_functions to track project-specific helpers that write assigns ({function, arity} or {module, function, arity}). (PR)
    • Recognize with expression reads of assigns (PR)
    • Recognize piped Map.get/{2,3} as a read (PR)

Housekeeping

  • Add links in changelog (PR)
  • Bump igniter from 0.8.1 to 0.8.3

Full Changelog: Jump-App/credo_checks@v0.4.0...v0.5.0

Changelog

Sourced from jump_credo_checks's changelog.

v0.5.0

  • Added Jump.CredoChecks.NoManualContentDisposition check, courtesy of @​ftes (PR.
  • Added Jump.CredoChecks.LiveViewPubSubRequiresConnected, which flags Phoenix.PubSub.subscribe/{2,3} calls (or your custom wrappers) in LiveView mount/3 that are not wrapped in if connected?(socket). (PR)
  • Improvements to Jump.CredoChecks.UnusedLiveViewAssign:
    • Add custom_assign_functions to track project-specific helpers that write assigns ({function, arity} or {module, function, arity}). (PR)
    • Recognize with expression reads of assigns (PR)
    • Recognize piped Map.get/{2,3} as a read (PR)
Commits
  • fecb209 chore (release): Prep v0.5.0 release (#32)
  • ac3762d feat (LiveViewPubSubRequiresConnected): Add check to ensure LiveView mount ...
  • 5c08e35 fix (UnusedLiveViewAssign): Recognize with expression reads of assigns (#29)
  • 5b42c77 fix (UnusedLiveViewAssign): Recognize piped Map.get/{2,3} as a read (#28)
  • cdd73a3 Bump igniter from 0.8.2 to 0.8.3 (#27)
  • 9d638b6 feat (UnusedLiveViewAssign): Support custom assign functions (#26)
  • 795e1ca feat: Add NoManualContentDisposition check (prefer send_download to encode fi...
  • 28bd1f9 Bump igniter from 0.8.1 to 0.8.2 (#24)
  • e99ec2e Add changelog links (#23)
  • See full diff in compare view

Updates public_sufx from 0.7.20260709 to 0.7.20260725

Commits
  • a96707a Update public suffix list
  • ba91d21 Update public suffix list
  • 895c982 [skip publish] Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group
  • e564f66 Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group
  • a8a2c26 [skip publish] Update public_sufx dependency version in README to 0.7.0
  • See full diff in compare view

Updates req from 0.7.1 to 0.7.4

Release notes

Sourced from req's releases.

v0.7.4

  • put_params: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
    
  • put_path_params: Do not overwrite redirect target.

v0.7.3

  • encode_body: Revert "Automatically change GET to POST when request body is set."

v0.7.2

  • encode_body: Bring back form_multipart: [{string_name, value}].
  • put_aws_sigv4: Fix AWS SigV4 compatibility with Supabase Storage S3.
Changelog

Sourced from req's changelog.

v0.7.4 (2026-08-26)

  • [put_params]: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
    
  • [put_path_params]: Do not overwrite redirect target.

v0.7.3 (2026-08-19)

v0.7.2 (2026-07-31)

  • encode_body: Bring back form_multipart: [{string_name, value}].
  • [put_aws_sigv4]: Fix AWS SigV4 compatibility with Supabase Storage S3.
Commits
  • 3678dc4 Release v0.7.4
  • bd160b2 put_path_params: Do not overwrite redirect target, closes #562
  • 9b7330f put_params: Preserve order
  • b099a12 put_params: Allow explicit duplicate param names
  • 2901181 Release v0.7.3
  • e857078 Revert "encode_body: Automatically change GET to POST when request body is ...
  • c136357 Release v0.7.2
  • e9d4ebc Fix AWS SigV4 compatibility with Supabase Storage S3 (#498)
  • See full diff in compare view

Updates tesla from 1.20.0 to 1.21.2

Release notes

Sourced from tesla's releases.

v1.21.2

1.21.2 (2026-08-19)

Bug Fixes

  • form-urlencoded: Do not claim a content-type it did not encode (#914) (b250b50)

v1.21.1

1.21.1 (2026-08-17)

Bug Fixes

  • finch-adapter: Surface the reason a streamed response stopped (#913) (e1f6051)
  • finch: Unwrap error structs introduced by finch 0.22 (#902) (a833717)

v1.21.0

1.21.0 (2026-08-01)

Features

  • add support for the HTTP QUERY method (RFC 10008) (#896) (c3b7bf5)

Bug Fixes

  • ci: bump release workflow to OTP 28.5 (#888) (aa22331)
  • ci: bump test matrix to OTP 28.5 (#899) (279f8bc)
  • handle atom header keys in FollowRedirects header filtering (#898) (a3d6c94)
  • silence compiler warnings on Elixir 1.20.1 (#892) (863d836)
Changelog

Sourced from tesla's changelog.

1.21.2 (2026-08-19)

Bug Fixes

  • form-urlencoded: Do not claim a content-type it did not encode (#914) (b250b50)

1.21.1 (2026-08-17)

Bug Fixes

  • finch-adapter: Surface the reason a streamed response stopped (#913) (e1f6051)
  • finch: Unwrap error structs introduced by finch 0.22 (#902) (a833717)

1.21.0 (2026-08-01)

Features

  • add support for the HTTP QUERY method (RFC 10008) (#896) (c3b7bf5)

Bug Fixes

  • ci: bump release workflow to OTP 28.5 (#888) (aa22331)
  • ci: bump test matrix to OTP 28.5 (#899) (279f8bc)
  • handle atom header keys in FollowRedirects header filtering (#898) (a3d6c94)
  • silence compiler warnings on Elixir 1.20.1 (#892) (863d836)
Commits
  • 556014d chore(master): release 1.21.2 (#915)
  • b250b50 fix(form-urlencoded): do not claim a content-type it did not encode (#914)
  • e6d214b chore(master): release 1.21.1 (#905)
  • e1f6051 fix(finch-adapter): surface the reason a streamed response stopped (#913)
  • e7ab2dc chore(ci): let PR checks work on fork pull requests (#911)
  • d49272a chore: warn that credential middleware must precede FollowRedirects (#910)
  • 5646648 chore(test): keep the gun connection owner alive while streaming (#909)
  • 119ebed chore(deps): bump hackney from 4.6.0 to 4.7.2 in the prod group across 1 dire...
  • 8ab94c4 chore(deps): bump actions/cache from 6.0.0 to 6.1.0 (#906)
  • 2c86eb9 chore(ci): unblock dependency PR checks (#908)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the mix group with 4 updates: [jump_credo_checks](https://github.com/Jump-App/credo_checks), [public_sufx](https://github.com/reisub/public_sufx), [req](https://github.com/wojtekmach/req) and [tesla](https://github.com/elixir-tesla/tesla).


Updates `jump_credo_checks` from 0.4.0 to 0.5.0
- [Release notes](https://github.com/Jump-App/credo_checks/releases)
- [Changelog](https://github.com/Jump-App/credo_checks/blob/main/CHANGELOG.md)
- [Commits](Jump-App/credo_checks@v0.4.0...v0.5.0)

Updates `public_sufx` from 0.7.20260709 to 0.7.20260725
- [Changelog](https://github.com/reisub/public_sufx/blob/main/CHANGELOG.md)
- [Commits](reisub/public_sufx@v0.7.20260709...v0.7.20260725)

Updates `req` from 0.7.1 to 0.7.4
- [Release notes](https://github.com/wojtekmach/req/releases)
- [Changelog](https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md)
- [Commits](wojtekmach/req@v0.7.1...v0.7.4)

Updates `tesla` from 1.20.0 to 1.21.2
- [Release notes](https://github.com/elixir-tesla/tesla/releases)
- [Changelog](https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md)
- [Commits](elixir-tesla/tesla@v1.20.0...v1.21.2)

---
updated-dependencies:
- dependency-name: jump_credo_checks
  dependency-version: 0.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: mix
- dependency-name: public_sufx
  dependency-version: 0.7.20260725
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix
- dependency-name: req
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix
- dependency-name: tesla
  dependency-version: 1.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Sep 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant