Skip to content

chore(deps): bump the production-dependencies group with 12 updates #307

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 12, 2025

Bumps the production-dependencies group with 12 updates:

Package From To
ash 3.5.12 3.5.18
ash_admin 0.13.5 0.13.9
ash_ai 0.1.9 0.2.2
ash_graphql 1.7.12 1.7.14
ash_json_api 1.4.32 1.4.34
ash_oban 0.4.7 0.4.9
ash_phoenix 2.3.2 2.3.6
ash_postgres 2.5.22 2.6.6
bandit 1.6.11 1.7.0
phoenix_live_view 1.0.13 1.0.17
swoosh 1.19.1 1.19.2
timex 3.7.11 3.7.12

Updates ash from 3.5.12 to 3.5.18

Changelog

Sourced from ash's changelog.

v3.5.18 (2025-06-11)

Improvements:

  • support regexes in match constraint/validation again by @​zachdaniel

v3.5.17 (2025-06-10)

Bug Fixes:

v3.5.16 (2025-06-10)

Bug Fixes:

  • ensure context is properly threaded through bulk update/atomic upgrades by @​zachdaniel

  • ensure actor: nil key is retained on scope to opts by @​zachdaniel

  • ensure stream_batch_size is properly set to batch_size on stream by @​zachdaniel

  • set batch size option when streaming by @​zachdaniel

  • keep union types in order by @​zachdaniel

  • resolve accidentally backwards incompatible inspect implementation by @​zachdaniel

  • better error message on mismatch action types in changesets by @​zachdaniel

  • add clause in Ash.Type.String.match/1 to handle the OTP 28 regex tuples (#2119) by Simon Bergström

  • underlying ecto type casting should use coercion, not cast_input by @​zachdaniel

  • make decimal type less strict by @​zachdaniel

  • Fix typespecs for Ash.get! and Ash.load! (#2117) by Moxley Stratton

  • implement Scope.to_opts for policy authorizer by @​zachdaniel

  • simplify relationship loading, to prevent losing set query info by @​zachdaniel

... (truncated)

Commits
  • 69cc627 chore: release version v3.5.18
  • d158144 chore: update deps & docs
  • e6bd693 chore: update docs & tests
  • ccd53d8 improvement: support regexes in match constraint/validation again
  • bc85e4a fix(calculations): correct path construction order for nested relationship re...
  • 878accf chore(deps): bump spark in the production-dependencies group (#2124)
  • f5b1b06 chore: release version v3.5.17
  • 761a9c7 fix: set_tenant on combination query (#2123)
  • a4e2a0b chore: handle nil context
  • b425edf chore: format
  • Additional commits viewable in compare view

Updates ash_admin from 0.13.5 to 0.13.9

Changelog

Sourced from ash_admin's changelog.

v0.13.9 (2025-06-06)

Bug Fixes:

  • don't use access protocol on structs by Zach Daniel

v0.13.8 (2025-06-06)

Bug Fixes:

  • handle case where no uploads are present by Zach Daniel

v0.13.7 (2025-06-04)

Bug Fixes:

  • allow uploads in nested forms

  • lookup and consume upload entries correctly

  • Handle cross-domain links (#314)

  • Handle cross-domain links

Improvements:

  • add upload options for Ash.Type.File arguments (#316)

v0.13.6 (2025-06-01)

Bug Fixes:

  • various mistakes in union type handling

  • don't assume form.source.type is set

  • Handle cross-domain links

Commits
  • 4d11594 chore: release version v0.13.9
  • 1af6a5d chore: get build passing
  • faa35e0 fix: don't use access protocol on structs
  • 1faf052 chore: release version v0.13.8
  • 7047a84 fix: handle case where no uploads are present
  • aa88d54 chore(deps-dev): bump the dev-dependencies group across 1 directory with 3 up...
  • b52d5e0 chore(deps): bump the production-dependencies group with 3 updates (#317)
  • 7aa874d chore: release version v0.13.7
  • 76acf43 improvement: add upload options for Ash.Type.File arguments (#316)
  • e8f496b feature: Add file upload support for Ash.Type.File arguments (#313)
  • Additional commits viewable in compare view

Updates ash_ai from 0.1.9 to 0.2.2

Changelog

Sourced from ash_ai's changelog.

v0.2.2 (2025-06-11)

Bug Fixes:

  • properly close connection after sending the endpoint by @​zachdaniel

Improvements:

v0.2.1 (2025-06-11)

Bug Fixes:

Improvements:

  • make usage rules display all and show file paths instead of by @​zachdaniel

v0.2.0 (2025-06-10)

Features:

Bug Fixes:

Improvements:

... (truncated)

Commits
  • 31c5c07 chore: release version v0.2.2
  • 15dba2a fix: properly close connection after sending the endpoint
  • e6e2f1e improvement: use relative paths in usage rules MCP
  • 782f0c1 chore: release version v0.2.1
  • 3e69e03 test: update tests w/ new usage rules changes
  • 2e74243 fix: fix installer waiting for input
  • cbdbdc9 chore: release version v0.2.0
  • 2b4a78d chore: update deps, config & fix build
  • b108c82 improvement: sync usage rules on project creation
  • df182b6 chore: don't store regexes in module attributes
  • Additional commits viewable in compare view

Updates ash_graphql from 1.7.12 to 1.7.14

Changelog

Sourced from ash_graphql's changelog.

v1.7.14 (2025-06-10)

Bug Fixes:

  • handling of attribute with array type in middleware for field function (#327) by @​jichon

v1.7.13 (2025-05-30)

Bug Fixes:

  • properly unwrap constraints & type for list newtypes

Improvements:

  • add limit to pagination metadata (#323)

  • support new codegen patterns

  • make pagination metadata more robust for offeset pagination (#320)

Commits
  • 6c82b10 chore: release version v1.7.14
  • df435dc chore: update deps & config
  • 0c548c3 fix: handling of attribute with array type in middleware for field function (...
  • dd84021 chore: cleanup community files
  • 1297415 chore: cleanup community files
  • 73e576d chore: update ash requirement
  • b0d6626 chore(deps-dev): bump mix_test_watch in the dev-dependencies group (#326)
  • fc283dd chore(deps): bump the production-dependencies group with 2 updates (#325)
  • 2abb94e docs: Add missing end in getting started (#324)
  • 68eb54f chore: release version v1.7.13
  • Additional commits viewable in compare view

Updates ash_json_api from 1.4.32 to 1.4.34

Changelog

Sourced from ash_json_api's changelog.

v1.4.34 (2025-06-10)

Bug Fixes:

  • properly include source pointers for generic actions by @​zachdaniel

v1.4.33 (2025-05-30)

Improvements:

  • add support for decimal serialization
Commits
  • 06bec3e chore: release version v1.4.34
  • 9bd9876 chore: update deps & config
  • b12b77e fix: properly include source pointers for generic actions
  • 7293d08 chore: cleanup community files
  • 087ba6a chore(deps-dev): bump git_ops in the dev-dependencies group (#351)
  • d4e65ea chore(deps): bump the production-dependencies group with 2 updates (#350)
  • 58537dd chore: update community files
  • 8f16e32 chore: release version v1.4.33
  • 490f719 chore: update deps
  • d7f3f85 docs: Update what-is-ash-json-api.md (#347)
  • Additional commits viewable in compare view

Updates ash_oban from 0.4.7 to 0.4.9

Changelog

Sourced from ash_oban's changelog.

v0.4.9 (2025-06-02)

Bug Fixes:

  • solve dialyzer error for on_error_fails_job

v0.4.8 (2025-05-30)

Improvements:

  • Add :on_error_fails_job? option for triggers (#159)
Commits
  • 423c491 chore: release version v0.4.9
  • d3a7b28 fix: solve dialyzer error for on_error_fails_job
  • 3e9aef9 chore: release version v0.4.8
  • b10b299 chore: update deps
  • b414943 chore: get build passing and update deps
  • 3e21904 chore: rename to remove oban from new option name
  • aa10442 improvement: Add :on_error_fails_job? option for triggers (#159)
  • See full diff in compare view

Updates ash_phoenix from 2.3.2 to 2.3.6

Changelog

Sourced from ash_phoenix's changelog.

v2.3.6 (2025-06-10)

Bug Fixes:

  • merge overridden params with original params in code interfaces by @​zachdaniel

v2.3.5 (2025-05-31)

Bug Fixes:

  • live route instructions (#371)

v2.3.4 (2025-05-30)

Bug Fixes:

  • reenable migrate task

v2.3.3 (2025-05-30)

Bug Fixes:

  • new generators, use actor when getting resource

  • new generators, close Layouts.app tag

  • new generators, remove handle_params and apply_action, since this no longer handles create/update

  • new generators, remove handle params + title, since this no longer handles update

Improvements:

  • implement new codegen status plug

  • support Ash.Scope

  • resolve igniter task deprecation warning

... (truncated)

Commits
  • 070de27 chore: release version v2.3.6
  • bb57565 chore: update deps & config
  • 4c76949 fix: merge overridden params with original params in code interfaces
  • 4716b0f chore: update community files
  • 71873f3 chore: cleanup community files
  • 2f7fa7b chore(deps-dev): bump mix_test_watch in the dev-dependencies group (#374)
  • a146f76 chore(deps): bump the production-dependencies group with 3 updates (#373)
  • 0fca885 docs: fix handle event function in nested forms guide (#372)
  • ac6bff1 chore: release version v2.3.5
  • a7f21e9 fix: live route instructions (#371)
  • Additional commits viewable in compare view

Updates ash_postgres from 2.5.22 to 2.6.6

Changelog

Sourced from ash_postgres's changelog.

v2.6.6 (2025-06-10)

Bug Fixes:

  • simply storage of size/scale/precision information

v2.6.5 (2025-06-10)

Bug Fixes:

  • remove spurios debug logging

  • properly detect nested array decimals

v2.6.4 (2025-06-09)

Bug Fixes:

  • reenable migrate task

  • use force: true, not force?: true calling mix.generator

  • casting integers to string in expressions works as intended (#564)

  • use better wrappers around string/ci_string

Improvements:

  • add c:AshPostgres.Repo.create_schemas_in_migrations? callback

v2.6.3 (2025-06-04)

Bug Fixes:

  • undo change for timestamptz usec, retaining precision

v2.6.2 (2025-06-04)

... (truncated)

Commits
  • c653161 chore: release version v2.6.6
  • 8d99e9a fix: simply storage of size/scale/precision information
  • 17c66b9 chore: release version v2.6.5
  • e2c0621 fix: remove spurios debug logging
  • 2afe964 fix: properly detect nested array decimals
  • dc81e68 chore: release version v2.6.4
  • f3465d2 fix: reenable migrate task
  • 1c29ac9 fix: use force: true, not force?: true calling mix.generator
  • 2c6466d improvement: add c:AshPostgres.Repo.create_schemas_in_migrations? callback
  • cf3da36 chore: update deps
  • Additional commits viewable in compare view

Updates bandit from 1.6.11 to 1.7.0

Changelog

Sourced from bandit's changelog.

1.7.0 (29 May 2025)

Enhancements

  • Add support for new get_sock_data/1 and get_ssl_data/1 callbacks from Plug 1.18 (#497)
  • Honour server-sent Connection: close headers (#495, thanks @​ruslandoga!)

Fixes

  • Don't overwrite non-default HTTP/2 settings when receiving HTTP/2 settings (#494, thanks @​ns-blee!)
  • Fix handling of early-connection error handling in HTTP/2 (#486)
Commits
  • 7e8609a Version bump to 1.7.0
  • 8444026 Automate the publishing of hex packages
  • a6aca4e Add support for Plug.Conn.Adapter.sock_data and `Plug.Conn.Adapter.ssl_data...
  • 7fcb133 Bump thousand_island from 1.3.13 to 1.3.14 (#498)
  • 2af82bd Streamline keepalive logic, respect server-sent connection: close headers (#495)
  • 0ac9859 Merge received HTTP/2 settings with existing ones (#494)
  • 5092d59 Bump ex_doc from 0.37.3 to 0.38.1 (#491)
  • 1810aa9 Bump thousand_island from 1.3.12 to 1.3.13 (#488)
  • 43bf872 Bump credo from 1.7.11 to 1.7.12 (#487)
  • b31059d Look up connection in a safe manner
  • Additional commits viewable in compare view

Updates phoenix_live_view from 1.0.13 to 1.0.17

Changelog

Sourced from phoenix_live_view's changelog.

1.0.17 (2025-06-04)

Bug fixes

  • Fix <select> elements not being included in form recovery (regression in 1.0.14; #3831)
  • Fix events from destroyed child LiveViews being accidentally sent to the parent LiveView instead

1.0.16 (2025-06-04)

Bug fixes

  • Fix Phoenix.Component.focus_wrap/1 running into an infinite JavaScript recursion (#3828)

1.0.15 (2025-06-02)

Bug fixes

  • Fix accumulation of empty text nodes inside phx-update="stream" containers (#3784). This could lead to exponential memory growth when the stream container was part of a form with concurrent updates.

1.0.14 (2025-05-30)

Bug fixes

  • Ensure _unused parameters are sent correctly during form recovery (#3809)
  • Fix form recovery failing and blocking updates when a form does not have any inputs (#3818)
Commits

Updates swoosh from 1.19.1 to 1.19.2

Release notes

Sourced from swoosh's releases.

v1.19.2 🚀

✨ Features

🧰 Maintenance

⛓️ Dependency

New Contributors

Full Changelog: swoosh/swoosh@v1.19.1...v1.19.2

Changelog

Sourced from swoosh's changelog.

1.19.2

✨ Features

🧰 Maintenance

Commits

Updates timex from 3.7.11 to 3.7.12

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [ash](https://github.com/ash-project/ash) | `3.5.12` | `3.5.18` |
| [ash_admin](https://github.com/ash-project/ash_admin) | `0.13.5` | `0.13.9` |
| [ash_ai](https://github.com/ash-project/ash_ai) | `0.1.9` | `0.2.2` |
| [ash_graphql](https://github.com/ash-project/ash_graphql) | `1.7.12` | `1.7.14` |
| [ash_json_api](https://github.com/ash-project/ash_json_api) | `1.4.32` | `1.4.34` |
| [ash_oban](https://github.com/ash-project/ash_oban) | `0.4.7` | `0.4.9` |
| [ash_phoenix](https://github.com/ash-project/ash_phoenix) | `2.3.2` | `2.3.6` |
| [ash_postgres](https://github.com/ash-project/ash_postgres) | `2.5.22` | `2.6.6` |
| [bandit](https://github.com/mtrudel/bandit) | `1.6.11` | `1.7.0` |
| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.0.13` | `1.0.17` |
| [swoosh](https://github.com/swoosh/swoosh) | `1.19.1` | `1.19.2` |
| [timex](https://github.com/bitwalker/timex) | `3.7.11` | `3.7.12` |


Updates `ash` from 3.5.12 to 3.5.18
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash@v3.5.12...v3.5.18)

Updates `ash_admin` from 0.13.5 to 0.13.9
- [Changelog](https://github.com/ash-project/ash_admin/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_admin@v0.13.5...v0.13.9)

Updates `ash_ai` from 0.1.9 to 0.2.2
- [Changelog](https://github.com/ash-project/ash_ai/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_ai@v0.1.9...v0.2.2)

Updates `ash_graphql` from 1.7.12 to 1.7.14
- [Changelog](https://github.com/ash-project/ash_graphql/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_graphql@v1.7.12...v1.7.14)

Updates `ash_json_api` from 1.4.32 to 1.4.34
- [Changelog](https://github.com/ash-project/ash_json_api/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_json_api@v1.4.32...v1.4.34)

Updates `ash_oban` from 0.4.7 to 0.4.9
- [Changelog](https://github.com/ash-project/ash_oban/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_oban@v0.4.7...v0.4.9)

Updates `ash_phoenix` from 2.3.2 to 2.3.6
- [Changelog](https://github.com/ash-project/ash_phoenix/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_phoenix@v2.3.2...v2.3.6)

Updates `ash_postgres` from 2.5.22 to 2.6.6
- [Changelog](https://github.com/ash-project/ash_postgres/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash_postgres@v2.5.22...v2.6.6)

Updates `bandit` from 1.6.11 to 1.7.0
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.6.11...1.7.0)

Updates `phoenix_live_view` from 1.0.13 to 1.0.17
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/v1.0.17/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.0.13...v1.0.17)

Updates `swoosh` from 1.19.1 to 1.19.2
- [Release notes](https://github.com/swoosh/swoosh/releases)
- [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md)
- [Commits](swoosh/swoosh@v1.19.1...v1.19.2)

Updates `timex` from 3.7.11 to 3.7.12
- [Release notes](https://github.com/bitwalker/timex/releases)
- [Changelog](https://github.com/bitwalker/timex/blob/main/CHANGELOG.md)
- [Commits](https://github.com/bitwalker/timex/commits)

---
updated-dependencies:
- dependency-name: ash
  dependency-version: 3.5.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_admin
  dependency-version: 0.13.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_ai
  dependency-version: 0.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ash_graphql
  dependency-version: 1.7.14
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_json_api
  dependency-version: 1.4.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_oban
  dependency-version: 0.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_phoenix
  dependency-version: 2.3.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: ash_postgres
  dependency-version: 2.6.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: bandit
  dependency-version: 1.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.0.17
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: swoosh
  dependency-version: 1.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: timex
  dependency-version: 3.7.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Jun 12, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 19, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 19, 2025
@dependabot dependabot bot deleted the dependabot/hex/production-dependencies-7084d2ac97 branch June 19, 2025 08:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants