Skip to content

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates - #18

Merged
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/dev-dependencies-bbff1333d5
May 2, 2026
Merged

chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates#18
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/dev-dependencies-bbff1333d5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2026

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps the dev-dependencies group with 4 updates in the / directory: ash_phoenix, ash_postgres, credo and git_ops.

Updates ash_phoenix from 2.3.20 to 2.3.22

Release notes

Sourced from ash_phoenix's releases.

v2.3.22

Bug Fixes:

Changelog

Sourced from ash_phoenix's changelog.

v2.3.22 (2026-05-02)

Bug Fixes:

v2.3.21 (2026-04-13)

Bug Fixes:

Commits
  • 5e7d25a chore: release version v2.3.22
  • b8c4e30 chore: update deps
  • 3ac860a fix: filter empty values from array form params (#471)
  • 6c0fa92 chore: release version v2.3.21
  • 3680af0 chore: update deps
  • 128c85d fix: Add missing usage_rules files to hex package (#470)
  • 792615f chore(deps): bump the production-dependencies group across 1 directory with 5...
  • 77cf8bc chore(deps-dev): bump the dev-dependencies group with 2 updates (#466)
  • 5db38dc fix: propagate context to nested forms (#465)
  • See full diff in compare view

Updates ash_postgres from 2.8.0 to 2.9.1

Release notes

Sourced from ash_postgres's releases.

v2.9.1

Bug Fixes:

  • handle base filter index rewrite detection (#742) by Minsub Kim

  • failing test for calculation loading on relationships in policies (#741) by Rutgerdj

  • immutable_expr_error support for newly added required expr (#737) by adamtharani

  • correct prefix name when loading many_to_many relationships (#736) by gcugnet

Changelog

Sourced from ash_postgres's changelog.

v2.9.1 (2026-05-01)

Bug Fixes:

  • handle base filter index rewrite detection (#742) by Minsub Kim

  • failing test for calculation loading on relationships in policies (#741) by Rutgerdj

  • immutable_expr_error support for newly added required expr (#737) by adamtharani

  • correct prefix name when loading many_to_many relationships (#736) by gcugnet

v2.9.0 (2026-04-12)

Features:

  • relationship through (#686) by Kenneth Kostrešević

  • add support for :identity types (#715) by Jatanasio

  • add native_in/2 function for SQL IN (...) syntax (#728) by jkreddy020203

  • Drop tables on missing resources & table name change handling (#713) by obviouslyweb

Bug Fixes:

  • Add missing usage_rules files to hex package (#733) by Philip Munksgaard

  • ensure proper ordering when dropping orphan tables (#730) by Jechol Lee

  • sort snapshot JSON keys when recording drop_table opt-out (#729) by Jechol Lee

  • sort AddUniqueIndex after CreateTable and all AddAttribute ops by Zach Daniel

  • ensure split migrations get unique names and modules by Zach Daniel

  • properly sequence items that depend on concurrent migrations by Zach Daniel

  • Fix/236 unique index before self fk (#705) by WillG2001

  • show warning on concurrent index multitenancy #610 (#711) by Ryland Bangerter

  • raise error when reference is configured for non-belongs_to relationship (#712) by henryzhan013

... (truncated)

Commits
  • 40e9e2b chore: release version v2.9.1
  • 81254d7 chore(deps-dev): bump the dev-dependencies group with 2 updates (#743)
  • 14a6bb7 chore(deps): bump the production-dependencies group with 2 updates (#744)
  • d473cf3 fix: handle base filter index rewrite detection (#742)
  • 4c3b733 fix: failing test for calculation loading on relationships in policies (#741)
  • bf65531 chore: Remove stale timestamp_from_uuid_v7 drop entries (#738)
  • 4ed2570 fix: immutable_expr_error support for newly added required expr (#737)
  • f8cab09 fix: correct prefix name when loading many_to_many relationships (#736)
  • 1a849bf chore: add test for loading aggregates w/ limits
  • a67ca13 chore: update ash
  • Additional commits viewable in compare view

Updates bandit from 1.10.4 to 1.11.0

Changelog

Sourced from bandit's changelog.

1.11.0 (1 May 2026)

Fixes

Enhancements

  • Define a new max_inflate_ratio WebSocket configuration option that defines a maximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1
  • Define a new max_fragmented_message_size WebSocket configuration option which defines the maximum allowed WebSocket frame size (inclusive of continuation frames). Defaults to 8MB

Changes

  • The default value of the max_frame_size WebSocket option has changed from :infinity to 8MB
  • Zero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)
  • Multiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks @​PJUllrich & @​maennchen!)
  • We now only use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks @​PJUllrich & @​maennchen!)
Commits

Updates credo from 1.7.17 to 1.7.18

Release notes

Sourced from credo's releases.

v1.7.18

Check it out on Hex: https://hex.pm/packages/credo/1.7.18

  • Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
  • Fix problem with transitive deps in umbrella apps
  • Credo.Check.Warning.UnusedMapOperation fix false positives
Changelog

Sourced from credo's changelog.

1.7.18

  • Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
  • Fix problem with transitive deps in umbrella apps
  • Credo.Check.Warning.UnusedMapOperation fix false positives
Commits
  • 63d9bf4 Bump version to 1.7.18
  • e5f7956 Update CHANGELOG
  • da4f401 Fix false positives for UnusedMapOperation
  • 288a1b1 Update Elixir to 1.20.0-rc.4
  • 474b769 Fix errors due to new token format
  • a03f6bd Fix error raised by new sigil token format
  • aea4b77 Fix compiler warnings for 1.20.0-rc.2
  • 1169b69 Add requirements "loadpaths" to Mix task.
  • f0d654f Add experimental JSONL output to suggest command
  • See full diff in compare view

Updates git_ops from 2.9.3 to 2.10.0

Changelog

Sourced from git_ops's changelog.

v2.10.0 (2026-04-12)

Features:

Bug Fixes:

Commits
  • 9978c16 chore: release version v2.10.0
  • d90ae56 fix: parse multi-line commit messages without errors (#83)
  • 43b2e3a chore: clean up badges
  • d5755df feat: add managed_files config for updating arbitrary files on release (#81)
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels May 2, 2026
@zachdaniel

Copy link
Copy Markdown
Contributor

@dependabot rebase

…ith 5 updates

Bumps the dev-dependencies group with 4 updates in the / directory: [ash_phoenix](https://github.com/ash-project/ash_phoenix), [ash_postgres](https://github.com/ash-project/ash_postgres), [credo](https://github.com/rrrene/credo) and [git_ops](https://github.com/zachdaniel/git_ops).


Updates `ash_phoenix` from 2.3.20 to 2.3.22
- [Release notes](https://github.com/ash-project/ash_phoenix/releases)
- [Changelog](https://github.com/ash-project/ash_phoenix/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_phoenix@v2.3.20...v2.3.22)

Updates `ash_postgres` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/ash-project/ash_postgres/releases)
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_postgres@v2.8.0...v2.9.1)

Updates `bandit` from 1.10.4 to 1.11.0
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.10.4...1.11.0)

Updates `credo` from 1.7.17 to 1.7.18
- [Release notes](https://github.com/rrrene/credo/releases)
- [Changelog](https://github.com/rrrene/credo/blob/master/CHANGELOG.md)
- [Commits](rrrene/credo@v1.7.17...v1.7.18)

Updates `git_ops` from 2.9.3 to 2.10.0
- [Changelog](https://github.com/zachdaniel/git_ops/blob/master/CHANGELOG.md)
- [Commits](zachdaniel/git_ops@v2.9.3...v2.10.0)

---
updated-dependencies:
- dependency-name: ash_phoenix
  dependency-version: 2.3.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: ash_postgres
  dependency-version: 2.9.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: bandit
  dependency-version: 1.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
- dependency-name: credo
  dependency-version: 1.7.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dev-dependencies
- dependency-name: git_ops
  dependency-version: 2.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps-dev): bump the dev-dependencies group with 5 updates chore(deps-dev): bump the dev-dependencies group across 1 directory with 5 updates May 2, 2026
@dependabot
dependabot Bot force-pushed the dependabot/hex/dev-dependencies-bbff1333d5 branch from 71985f3 to b2f57f9 Compare May 2, 2026 03:05
@zachdaniel
zachdaniel merged commit c9c012b into main May 2, 2026
5 of 7 checks passed
@dependabot
dependabot Bot deleted the dependabot/hex/dev-dependencies-bbff1333d5 branch May 2, 2026 03:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant