{"id":4126,"name":"bandit","ecosystem":"hex","repository_url":"https://github.com/mtrudel/bandit","issues_count":230,"created_at":"2025-06-06T16:30:19.626Z","updated_at":"2025-06-06T16:30:19.626Z","purl":"pkg:hex/bandit","metadata":{"id":3493042,"name":"bandit","ecosystem":"hex","description":"A pure-Elixir HTTP server built for Plug \u0026 WebSock apps","homepage":null,"licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/mtrudel/bandit","keywords_array":[],"namespace":null,"versions_count":109,"first_release_published_at":"2020-11-05T17:11:46.452Z","latest_release_published_at":"2025-05-29T16:57:22.358Z","latest_release_number":"1.7.0","last_synced_at":"2025-06-03T20:19:04.774Z","created_at":"2022-04-10T19:14:18.300Z","updated_at":"2025-06-03T20:19:06.521Z","registry_url":"https://hex.pm/packages/bandit/","install_command":"mix hex.package fetch bandit ","documentation_url":"http://hexdocs.pm/bandit/","metadata":{},"repo_metadata":{"uuid":"220852206","full_name":"mtrudel/bandit","owner":"mtrudel","description":"Bandit is a pure Elixir HTTP server for Plug \u0026 WebSock applications","archived":false,"fork":false,"pushed_at":"2023-12-18T20:01:18.000Z","size":9261,"stargazers_count":1345,"open_issues_count":4,"forks_count":63,"subscribers_count":23,"default_branch":"main","last_synced_at":"2023-12-19T03:06:20.497Z","etag":null,"topics":["elixir","elixir-phoenix","elixir-plug","h2spec","http","http-server","http2","http2-server","https","rfc-2616","rfc-6455","rfc-7540","rfc-9110","rfc-9112","rfc-9113","websocket"],"latest_commit_sha":null,"homepage":"","language":"Elixir","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/mtrudel.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":"SECURITY.md","support":null,"governance":null}},"created_at":"2019-11-10T21:14:23.000Z","updated_at":"2023-12-18T14:11:44.000Z","dependencies_parsed_at":"2023-10-19T23:09:27.992Z","dependency_job_id":null,"html_url":"https://github.com/mtrudel/bandit","commit_stats":{"total_commits":437,"total_committers":13,"mean_commits":33.61538461538461,"dds":0.08924485125858128,"last_synced_commit":"959b6fe5a7dd376919067de415a26ccadca8014a"},"previous_names":[],"tags_count":78,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mtrudel","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":176989046,"owners_count":10478193,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"mtrudel","name":"Mat Trudel","uuid":"79646","kind":"user","description":"","email":"","website":"http://mat.geeky.net","location":"Toronto","twitter":"mattrudel","company":"@pagerduty","icon_url":"https://avatars.githubusercontent.com/u/79646?v=4","repositories_count":91,"last_synced_at":"2023-04-10T15:42:28.886Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/mtrudel","created_at":"2022-11-02T16:48:50.344Z","updated_at":"2023-04-10T15:42:29.172Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mtrudel","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/mtrudel/repositories"},"tags":[{"name":"1.0.0","sha":"124d697c3c604aca9122332a4ea789561b925f2e","kind":"commit","published_at":"2023-10-19T20:27:10.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0/manifests"},{"name":"1.0.0-pre.18","sha":"f494b5dfe44633ec15d7b080dcf3d111931e1cbe","kind":"commit","published_at":"2023-10-10T19:20:07.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.18","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.18","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.18","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.18/manifests"},{"name":"1.0.0-pre.17","sha":"d14348ee4389702f57b8263ae240a050ec720abe","kind":"commit","published_at":"2023-10-09T13:55:07.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.17","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.17","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.17","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.17/manifests"},{"name":"1.0.0-pre.16","sha":"867600632a4c3c8992caa11f20409903d41b2e94","kind":"commit","published_at":"2023-09-19T00:25:00.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.16","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.16","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.16","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.16/manifests"},{"name":"1.0.0-pre.15","sha":"de175959d5f62293b9e923f85847e1cf0e24e2dd","kind":"commit","published_at":"2023-09-09T14:58:38.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.15","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.15","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.15","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.15/manifests"},{"name":"1.0.0-pre.14","sha":"bee440562781631b68a6dfca7d80d110435768ff","kind":"commit","published_at":"2023-08-29T00:21:45.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.14","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.14","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.14","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.14/manifests"},{"name":"1.0.0-pre.13","sha":"b27d4416fe2aed37b4baff2cd95fe680f56a8427","kind":"commit","published_at":"2023-08-15T19:24:37.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.13","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.13","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.13","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.13/manifests"},{"name":"1.0.0-pre.12","sha":"b1f6d9889dc38ecea790e14929f895972e5b2935","kind":"commit","published_at":"2023-08-12T18:22:26.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.12","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.12","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.12","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.12/manifests"},{"name":"1.0.0-pre.11","sha":"6dd07138a3c987c43ab479d9160af6359730dffd","kind":"commit","published_at":"2023-08-11T15:04:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.11","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.11/manifests"},{"name":"1.0.0-pre.10","sha":"62f4702056ef0b07ef7a2d486f74ff938c478d70","kind":"commit","published_at":"2023-06-28T16:14:29.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.10","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.10/manifests"},{"name":"1.0.0-pre.9","sha":"d1629fe5a84d48b07377e6df289fc4223a28fbaf","kind":"commit","published_at":"2023-06-16T17:59:35.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.9","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.9/manifests"},{"name":"1.0.0-pre.8","sha":"80ec831cb15a911f0ae02756fb2eb2424574cdcb","kind":"commit","published_at":"2023-06-15T12:54:44.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.8","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.8/manifests"},{"name":"1.0.0-pre.7","sha":"5e21d995086568a1b32099f44e58f8fafef92724","kind":"commit","published_at":"2023-06-14T18:29:02.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.7/manifests"},{"name":"1.0.0-pre.6","sha":"898e47294912fb84a47fd0533d96c35b081c67ed","kind":"commit","published_at":"2023-06-08T14:44:26.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.6/manifests"},{"name":"1.0.0-pre.5","sha":"8204ce8cb02a2e6b9d217a92400fc50339997c79","kind":"commit","published_at":"2023-06-02T15:18:57.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.5/manifests"},{"name":"1.0.0-pre.4","sha":"b6089510f56a6812f4bf6ec2bc6eb7a483853de8","kind":"commit","published_at":"2023-05-23T21:27:10.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.4/manifests"},{"name":"1.0.0-pre.3","sha":"73c46b9c5b91153f2f1b866e60fb0eff74962ac2","kind":"commit","published_at":"2023-05-03T18:31:28.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.3/manifests"},{"name":"1.0.0-pre.2","sha":"be2eae4c2be4baae8f6bdecb4728490d6026251f","kind":"commit","published_at":"2023-04-24T19:38:13.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.2/manifests"},{"name":"1.0.0-pre.1","sha":"a25cf736989b4ab9f2c6866fffb5dc958addb6ed","kind":"commit","published_at":"2023-04-21T08:36:28.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/1.0.0-pre.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/1.0.0-pre.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/1.0.0-pre.1/manifests"},{"name":"0.7.7","sha":"edb6d0c46891b0025b1c812abe4754a259a43164","kind":"commit","published_at":"2023-04-11T14:28:46.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.7/manifests"},{"name":"0.7.6","sha":"5b9c9164d8fc6f62488298e5fb41f4098cef50b2","kind":"commit","published_at":"2023-04-09T16:33:09.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.6/manifests"},{"name":"0.7.5","sha":"585a92f26c18f119dd91599e325eea1a76057ad0","kind":"commit","published_at":"2023-04-04T16:15:23.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.5/manifests"},{"name":"0.7.4","sha":"171a42aedd8b5519e7d38b3d6fd5fe2826802e5f","kind":"commit","published_at":"2023-03-27T23:05:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.4/manifests"},{"name":"0.7.3","sha":"959b6fe5a7dd376919067de415a26ccadca8014a","kind":"commit","published_at":"2023-03-20T14:52:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.3/manifests"},{"name":"0.7.2","sha":"8c9b3cd1dff486a8826564abff17a70d44a9f653","kind":"commit","published_at":"2023-03-18T20:06:19.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.2/manifests"},{"name":"0.7.1","sha":"20f54a678ffecc0be252db7e51aabba095ed59c7","kind":"commit","published_at":"2023-03-17T18:01:49.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.1/manifests"},{"name":"0.7.0","sha":"0f28b7e0de14bf1c9f7ecbc3cb48f723abeec9a5","kind":"commit","published_at":"2023-03-17T14:37:03.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.7.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.7.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.7.0/manifests"},{"name":"0.6.11","sha":"61561b41e74921dab167bb3ccd51cd3509b957af","kind":"commit","published_at":"2023-03-17T14:08:06.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.11","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.11/manifests"},{"name":"0.6.10","sha":"34479abb1d0cf9a8e2e963155b9b5274adb03869","kind":"commit","published_at":"2023-03-10T16:59:58.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.10","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.10/manifests"},{"name":"0.6.9","sha":"daf32fd1bbde4e6239301e0cc105c114f199711d","kind":"commit","published_at":"2023-02-20T21:32:08.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.9","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.9/manifests"},{"name":"0.6.8","sha":"b141a4e1b86d20c9cd7aaf0b1dade1b5f384bb34","kind":"commit","published_at":"2023-01-31T14:18:22.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.8","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.8/manifests"},{"name":"0.6.7","sha":"7d781633bc6340da6ae883bddade8766c58e6431","kind":"commit","published_at":"2023-01-17T20:55:57.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.7/manifests"},{"name":"0.6.6","sha":"e2ef99fbbb60ef33e1d879ad6e3e138bcfdd0f6b","kind":"commit","published_at":"2023-01-11T16:21:11.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.6/manifests"},{"name":"0.6.5","sha":"09f7068ac5f598fd77a16674b6061b28fe1f58cc","kind":"commit","published_at":"2023-01-10T16:18:30.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.5/manifests"},{"name":"0.6.4","sha":"8e765e95f4bc132158e26ce0ded4b08a01e36cde","kind":"commit","published_at":"2022-12-23T18:26:00.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.4/manifests"},{"name":"0.6.3","sha":"0868798a23012df09ac54d9c7fdfb92487ea9517","kind":"commit","published_at":"2022-12-09T00:24:24.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.3/manifests"},{"name":"0.6.2","sha":"6a3bc81aa389139552d83bc9d71dd58cdb5319dc","kind":"commit","published_at":"2022-11-25T17:18:05.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.2/manifests"},{"name":"0.6.1","sha":"3bc8f468086611c61ce8dd7ff797e86b1266f73a","kind":"commit","published_at":"2022-11-21T21:58:56.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.1/manifests"},{"name":"0.6.0","sha":"e197c791f440ec3519e4d6a6f123dca8505602fd","kind":"commit","published_at":"2022-11-15T00:50:38.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.6.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.6.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.6.0/manifests"},{"name":"0.5.11","sha":"68e7f771f474d7255d301f28b8a687743ad314b6","kind":"commit","published_at":"2022-11-04T19:55:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.11","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.11","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.11","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.11/manifests"},{"name":"0.5.10","sha":"62821b28b79c03707ff8af2e92ed275f27d183a6","kind":"commit","published_at":"2022-11-04T14:09:10.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.10","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.10/manifests"},{"name":"0.5.9","sha":"81f0928ec9e92bc70354015435896f03393b1c05","kind":"commit","published_at":"2022-11-03T17:59:51.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.9","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.9/manifests"},{"name":"0.5.8","sha":"8968834cea815c31df6aaa6919e0a4f103b2418d","kind":"commit","published_at":"2022-11-02T15:21:29.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.8","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.8/manifests"},{"name":"0.5.7","sha":"852e72ca9d1f3f393fff1948a50a2ddcff8fd166","kind":"commit","published_at":"2022-11-01T19:49:46.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.7/manifests"},{"name":"0.5.6","sha":"c06b6c8f8def9ab42fa3dcbb14ec3db160d563aa","kind":"commit","published_at":"2022-09-28T21:13:21.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.6/manifests"},{"name":"0.5.5","sha":"3a7ff069898862b1829c7aad5e8672e48c845a20","kind":"commit","published_at":"2022-09-24T16:10:13.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.5/manifests"},{"name":"0.5.4","sha":"43c132a6f0bb5dd601c21a959e28cc0d3d6c68ce","kind":"commit","published_at":"2022-09-23T16:03:19.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.4/manifests"},{"name":"0.5.3","sha":"3b54616b03a17e2fc75117914e1fbf3112ed3b84","kind":"commit","published_at":"2022-09-22T16:02:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.3/manifests"},{"name":"0.5.2","sha":"a6534abc8ae95b6a420865118a450e2321372499","kind":"commit","published_at":"2022-09-21T20:41:47.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.2/manifests"},{"name":"0.5.1","sha":"8029d15762c3658b504913d39aa91ba23091171c","kind":"commit","published_at":"2022-09-20T01:45:36.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.1/manifests"},{"name":"0.5.0","sha":"102adfd56bd4aacd39469a5582104377618abc9f","kind":"commit","published_at":"2022-05-04T00:09:11.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.5.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.5.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.5.0/manifests"},{"name":"0.4.10","sha":"556fd62282fbea82d347915a23d9948c87f8d8ed","kind":"commit","published_at":"2022-04-17T14:48:50.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.10","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.10","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.10","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.10/manifests"},{"name":"0.4.9","sha":"27c912009f1308840f51337dcb57d1b50c565f59","kind":"commit","published_at":"2022-04-14T20:48:05.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.9","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.9/manifests"},{"name":"0.4.8","sha":"ad91976aebff20f2ffd2aa8bcf00f8709d6bdc25","kind":"commit","published_at":"2022-04-14T20:16:00.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.8","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.8/manifests"},{"name":"0.4.7","sha":"c04edc69bfd9b47e136e43f1606214c104cac8fc","kind":"commit","published_at":"2022-03-05T20:16:50.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.7/manifests"},{"name":"0.4.6","sha":"5160f9ab46a6d0aa43be3c4893be09a9c9e3c33c","kind":"commit","published_at":"2022-03-03T17:21:02.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.6/manifests"},{"name":"0.4.5","sha":"9b1e0f66637a16fb18921bb29b6b577938b4eb07","kind":"commit","published_at":"2021-11-17T02:37:18.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.5/manifests"},{"name":"0.4.4","sha":"7522f44397df61eff718be2383b1f53c2da22de7","kind":"commit","published_at":"2021-10-26T17:46:10.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.4/manifests"},{"name":"0.4.3","sha":"c7f58ac3a9c5f43f06a3d0d769ebf5cdf4d4bbec","kind":"commit","published_at":"2021-10-12T23:41:17.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.3/manifests"},{"name":"0.4.2","sha":"ead4c66a15abb0a9e07f4b1818eb2e88e02f8a04","kind":"commit","published_at":"2021-10-11T21:18:41.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.2/manifests"},{"name":"0.4.1","sha":"769d81cadbeaa442ab8ec46c435735cd472e0761","kind":"commit","published_at":"2021-09-27T19:13:08.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.1/manifests"},{"name":"0.4.0","sha":"e968d60a4fc30ba67d9ac0c662396ef2f3fbc4fa","kind":"commit","published_at":"2021-09-27T15:47:49.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.4.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.4.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.4.0/manifests"},{"name":"0.3.9","sha":"ba50e09d345f5fc3d910aa3e7abb9a1b266d7a37","kind":"commit","published_at":"2021-09-25T21:54:59.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.9","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.9","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.9","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.9/manifests"},{"name":"0.3.8","sha":"39be44a6b09489c6c4f1e0d04d0356298dbdcc3c","kind":"commit","published_at":"2021-09-25T00:52:35.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.8","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.8","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.8","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.8/manifests"},{"name":"0.3.7","sha":"4d7d05a2d7091adfabddc706be1f467c0372ac15","kind":"commit","published_at":"2021-09-24T13:09:18.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.7","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.7","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.7","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.7/manifests"},{"name":"0.3.6","sha":"3d4da2f7b0415f426bbb972ef0465a479043c6c2","kind":"commit","published_at":"2021-09-18T18:09:17.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.6","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.6","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.6","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.6/manifests"},{"name":"0.3.5","sha":"f1976e96be5afedb0ae7920301b7b8047b4703d1","kind":"commit","published_at":"2021-09-15T21:06:55.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.5","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.5","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.5","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.5/manifests"},{"name":"0.3.4","sha":"5a9095a093f785391dd8588cda6b5719129f1827","kind":"commit","published_at":"2021-09-13T15:05:33.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.4","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.4","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.4/manifests"},{"name":"0.3.3","sha":"2f948eba00c0fb7f35ebbe31650c66b3f0728f9c","kind":"commit","published_at":"2021-06-29T21:56:20.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.3/manifests"},{"name":"0.3.2","sha":"caf83186074af58bbc3b835d5639106f9ad8ea23","kind":"commit","published_at":"2021-06-24T20:54:58.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.2/manifests"},{"name":"0.3.1","sha":"37c7f4490cefdcb0f8909afa10f9c8dd33d0a337","kind":"commit","published_at":"2021-06-06T19:30:47.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.1/manifests"},{"name":"0.3.0","sha":"053f6adbee889c3a0cfbd35897f4fad52eb6d66a","kind":"commit","published_at":"2021-06-03T13:54:49.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.3.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.3.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.3.0/manifests"},{"name":"0.2.3","sha":"40e42f8558e637d8a5ed223435f6b7834430ea72","kind":"commit","published_at":"2021-05-09T20:43:42.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.2.3","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.3/manifests"},{"name":"0.2.2","sha":"ecbe4e5a65d3c1644c3651b78a218914547b6445","kind":"commit","published_at":"2021-04-30T13:22:42.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.2.2","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.2/manifests"},{"name":"0.2.1","sha":"c2b59267b2a6d430cdced3c349f8db51622376c7","kind":"commit","published_at":"2021-04-29T19:23:22.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.2.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.1/manifests"},{"name":"0.2.0","sha":"3309bc0384cde6f38d9eb57b3f8782c856a7d518","kind":"commit","published_at":"2021-04-26T01:13:52.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.2.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.2.0/manifests"},{"name":"0.1.1","sha":"3f1702542f3b6d139143e903c4c79be6aeeefbc2","kind":"commit","published_at":"2020-11-08T15:48:04.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.1.1","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.1.1/manifests"},{"name":"0.1.0","sha":"4c80fc838640c4dae4743a61494981c57d6eef00","kind":"commit","published_at":"2020-11-05T17:11:08.000Z","download_url":"https://codeload.github.com/mtrudel/bandit/tar.gz/0.1.0","html_url":"https://github.com/mtrudel/bandit/releases/tag/0.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/mtrudel%2Fbandit/tags/0.1.0/manifests"}]},"repo_metadata_updated_at":"2023-12-19T07:55:28.573Z","dependent_packages_count":28,"downloads":5396079,"downloads_period":"total","dependent_repos_count":67,"rankings":{"downloads":7.565613283342261,"dependent_repos_count":2.0085698982324587,"dependent_packages_count":3.307445099089448,"stargazers_count":0.6695232994108195,"forks_count":3.24871056333311,"docker_downloads_count":null,"average":3.359972428681619},"purl":"pkg:hex/bandit","advisories":[],"docker_usage_url":"https://docker.ecosyste.ms/usage/hex/bandit","docker_dependents_count":1,"docker_downloads_count":229927,"usage_url":"https://repos.ecosyste.ms/usage/hex/bandit","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/hex/bandit/dependencies","status":null,"funding_links":[],"critical":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/bandit/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/bandit/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/bandit/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages/bandit/related_packages","maintainers":[{"uuid":"mtrudel","login":"mtrudel","name":null,"email":"mat@geeky.net","url":null,"packages_count":12,"html_url":"https://hex.pm/users/mtrudel","role":null,"created_at":"2022-11-08T09:13:11.853Z","updated_at":"2022-11-08T09:13:11.853Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/maintainers/mtrudel/packages"}],"registry":{"name":"hex.pm","url":"https://hex.pm","ecosystem":"hex","default":true,"packages_count":18018,"maintainers_count":6815,"namespaces_count":0,"keywords_count":6092,"github":"hexpm","metadata":{"funded_packages_count":1266},"icon_url":"https://github.com/hexpm.png","created_at":"2022-04-04T15:19:23.014Z","updated_at":"2025-06-06T05:59:50.043Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/packages","maintainers_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/maintainers","namespaces_url":"https://packages.ecosyste.ms/api/v1/registries/hex.pm/namespaces"}},"unique_repositories_count":111,"unique_repositories_count_past_30_days":2,"recent_issues":[{"uuid":"6017589660","node_id":"PR_kwDOQsGifM8AAAABKfjXgA","number":178,"state":"closed","title":"chore(deps-dev): bump bandit from 1.12.5 to 1.13.1","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-25T16:13:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-24T21:02:56.000Z","updated_at":"2026-10-25T16:13:30.000Z","time_to_close":69030,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"bandit","old_version":"1.12.5","new_version":"1.13.1","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.5 to 1.13.1.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.13.1 (15 Oct 2026)\u003c/h2\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert the stale conn check added in 1.13.0 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/668\"\u003e#668\u003c/a\u003e), since a number of valid\ncode paths in Phoenix depend on stale conns (notably, \u003ccode\u003ePlug.Parsers\u003c/code\u003e errors rendered by \u003ccode\u003ePhoenix.Endpoint.RenderErrors\u003c/code\u003e). See \u003ca href=\"https://redirect.github.com/elixir-plug/plug/issues/1331\"\u003eelixir-plug/plug#1331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.13.0 (15 Oct 2026)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003ecompress_chunked\u003c/code\u003e option to compress chunked responses with gzip and zstd (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/707\"\u003e#707\u003c/a\u003e, thanks \u003ca href=\"https://github.com/iStefo\"\u003e\u003ccode\u003e@​iStefo\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eClarify \u003ccode\u003einet6\u003c/code\u003e option behaviour on dual-stack platforms (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/709\"\u003e#709\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/700\"\u003e#700\u003c/a\u003e, thanks \u003ca href=\"https://github.com/adelton\"\u003e\u003ccode\u003e@​adelton\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eUnroll WebSocket masking over 32-byte blocks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/674\"\u003e#674\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eDrain HTTP/2 pending sends without repeated List.delete/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/673\"\u003e#673\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eShort-circuit header token lookup on the first match (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/699\"\u003e#699\u003c/a\u003e, thanks \u003ca href=\"https://github.com/claytongentry\"\u003e\u003ccode\u003e@​claytongentry\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eScope the workflow tokens to what each job actually uses (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/702\"\u003e#702\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eAdd a Plumber check and score badge (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/712\"\u003e#712\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix recent releases changelog headings in docs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/672\"\u003e#672\u003c/a\u003e, thanks \u003ca href=\"https://github.com/dinokovac-river\"\u003e\u003ccode\u003e@​dinokovac-river\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Thousand Island 1.6, and use the peername it now captures when it accepts a connection\n(\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequire hpax 1.1 and drop the nil field value workaround (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/706\"\u003e#706\u003c/a\u003e, thanks \u003ca href=\"https://github.com/acrogenesis\"\u003e\u003ccode\u003e@​acrogenesis\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReport \u003ccode\u003econn.port\u003c/code\u003e as an integer for \u003ccode\u003eCONNECT\u003c/code\u003e requests, as \u003ccode\u003ePlug.Conn\u003c/code\u003e requires\u003c/li\u003e\n\u003cli\u003eClose idle connections which send no bytes silently instead of answering 408 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/689\"\u003e#689\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Enforce Host requirements for HTTP/1.1 targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/679\"\u003e#679\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Complete HTTP/2 field validation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/680\"\u003e#680\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate HTTP/2 content length on initial END_STREAM (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/681\"\u003e#681\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Enforce HTTP/2 trailer field section requirements (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/682\"\u003e#682\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate request transfer coding before Plug dispatch (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/683\"\u003e#683\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Fix HTTP/1.0 streaming response framing (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/684\"\u003e#684\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Accept empty non-final WebSocket continuation frames (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/685\"\u003e#685\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate WebSocket client keys (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/686\"\u003e#686\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate the authority of HTTP/1 absolute-form and authority-form request targets against the\nsame grammar as the \u003ccode\u003eHost\u003c/code\u003e header (GHSA-v53v-9hvg-37jf, thanks \u003ca href=\"https://github.com/euriconicacio\"\u003e\u003ccode\u003e@​euriconicacio\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eBound HTTP/2 sends blocked on a send window by progress, so that a trickle of window updates\ncan no longer keep a stream pinned indefinitely (GHSA-69m6-wcv4-rwcf, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReject control bytes in HTTP/1 request targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/713\"\u003e#713\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/711\"\u003e#711\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix crash when a client resets an HTTP/1 connection before Bandit reads its peer address (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/717\"\u003e#717\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mhsdef\"\u003e\u003ccode\u003e@​mhsdef\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eDrain all queued HTTP/2 DATA frames of an unread body once a response has been sent (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/710\"\u003e#710\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/697\"\u003e#697\u003c/a\u003e, thanks \u003ca href=\"https://github.com/jamilbk\"\u003e\u003ccode\u003e@​jamilbk\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003ePreserve independent error responses on HTTP/1 keep-alive and pipelined requests, and frame empty\n4xx/5xx error responses with \u003ccode\u003eContent-Length: 0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/705\"\u003e#705\u003c/a\u003e, thanks \u003ca href=\"https://github.com/jeregrine\"\u003e\u003ccode\u003e@​jeregrine\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eClose instead of draining when a plug never honors Expect: 100-continue (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/695\"\u003e#695\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix chunked read_body(length: 0) falsely completing the body (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/691\"\u003e#691\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eObserve RST_STREAM while blocked on the stream send window (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/688\"\u003e#688\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ee75d310582b4f65f9354ab81eeecb079609a492\"\u003e\u003ccode\u003eee75d31\u003c/code\u003e\u003c/a\u003e Version bump to 1.13.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/84e9d1d90cf59879a10a34695db73eacc2aad0de\"\u003e\u003ccode\u003e84e9d1d\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Guard against stale conn reuse in Bandit.Adapter (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/668\"\u003e#668\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/719\"\u003e#719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d6daa4a950604a9bc91b49da785747cff370ca66\"\u003e\u003ccode\u003ed6daa4a\u003c/code\u003e\u003c/a\u003e Version bump to 1.13.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/02a3853408dc694baed881217ed1fedd0443e02e\"\u003e\u003ccode\u003e02a3853\u003c/code\u003e\u003c/a\u003e Add a Plumber check and score badge (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/712\"\u003e#712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0c53a6eef1612b57c2adc6ccc06809891bf344c6\"\u003e\u003ccode\u003e0c53a6e\u003c/code\u003e\u003c/a\u003e Require Thousand Island 1.6 and use its cached peername (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8993dae1c780ec55b4c82fc55b1db860bb7e1298\"\u003e\u003ccode\u003e8993dae\u003c/code\u003e\u003c/a\u003e Bump finch from 0.21.0 to 0.24.0 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/6ea80210137b3f69caf65f67398934259dc365d0\"\u003e\u003ccode\u003e6ea8021\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/27589109c88222405a1f4d1ff2754974612f74c9\"\u003e\u003ccode\u003e2758910\u003c/code\u003e\u003c/a\u003e Bump req from 0.7.4 to 0.7.5 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/715\"\u003e#715\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/70014a0fc432f07cf4b3d2ef7efceda73fe57e66\"\u003e\u003ccode\u003e70014a0\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 7.0.1 to 7.0.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/714\"\u003e#714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c95938d525990d3a1b7c94c3a67c2eb0193523c4\"\u003e\u003ccode\u003ec95938d\u003c/code\u003e\u003c/a\u003e Reject control bytes in HTTP/1 request targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/713\"\u003e#713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.5...1.13.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.5\u0026new-version=1.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/beam-bots/bb_liveview/pull/178","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/beam-bots%2Fbb_liveview/issues/178","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/178/packages"},{"uuid":"5877954962","node_id":"PR_kwDOPzk3Ms8AAAABIw9SoQ","number":484,"state":"closed","title":"build(deps): bump the mix-production-dependencies group across 1 directory with 14 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-19T04:00:29.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-16T03:45:29.000Z","updated_at":"2026-10-19T04:00:31.000Z","time_to_close":260100,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"mix-production-dependencies","update_count":14,"packages":[{"name":"bandit","old_version":"1.7.0","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.1.3","new_version":"0.3.1","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"gettext","old_version":"0.26.2","new_version":"1.0.2","repository_url":"https://github.com/elixir-gettext/gettext"},{"name":"heroicons","old_version":"v2.1.1","new_version":"v2.2.0","repository_url":"https://github.com/tailwindlabs/heroicons"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"opentelemetry_exporter","old_version":"1.8.1","new_version":"1.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-erlang"},{"name":"phoenix","old_version":"1.8.0","new_version":"1.8.15","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_html","old_version":"4.2.1","new_version":"4.3.0","repository_url":"https://github.com/phoenixframework/phoenix_html"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.1","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"phoenix_live_view","old_version":"1.1.3","new_version":"1.2.12","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.15","new_version":"0.7.5","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.19.5","new_version":"1.29.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.3.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 14 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.7.0` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.1.3` | `0.3.1` |\n| [gettext](https://github.com/elixir-gettext/gettext) | `0.26.2` | `1.0.2` |\n| [heroicons](https://github.com/tailwindlabs/heroicons) | `v2.1.1` | `v2.2.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [opentelemetry_exporter](https://github.com/open-telemetry/opentelemetry-erlang) | `1.8.1` | `1.11.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.0` | `1.8.15` |\n| [phoenix_html](https://github.com/phoenixframework/phoenix_html) | `4.2.1` | `4.3.0` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.1` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.3` | `1.2.12` |\n| [req](https://github.com/wojtekmach/req) | `0.5.15` | `0.7.5` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.19.5` | `1.29.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.3.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.7.0 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.7.0...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.1.3 to 0.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.1 (2026-10-01)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eProperly look up the hostname of a {basename, query} tuple\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.2.0 (2025-03-04)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport multiple DNS queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f7375d63b782fb9be911129fea8506b9643326ac\"\u003e\u003ccode\u003ef7375d6\u003c/code\u003e\u003c/a\u003e Release v0.30.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/1c54b42c67aec318ed148d55a70f2ff4a149c15c\"\u003e\u003ccode\u003e1c54b42\u003c/code\u003e\u003c/a\u003e Look up the hostname of a {basename, query} tuple, not the tuple (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.1.3...v0.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `gettext` from 0.26.2 to 1.0.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md\"\u003egettext's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOnly skip manifest removal on Elixir v1.19.3+\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.1 (retired)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove unnecessary cleaning of Elixir manifests\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.0\u003c/h2\u003e\n\u003cp\u003eThis is the first 1.0 release of Gettext, a silly 10 years (and 6 months) after we started working on it. There are \u003cem\u003every few changes\u003c/em\u003e from the latest 0.26 release, and none of them are breaking.\u003c/p\u003e\n\u003cp\u003eHere are the new goodies:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for concatenating sigils if all parts are known at compile time (such as \u003ccode\u003e\u0026quot;Hello \u0026quot; \u0026lt;\u0026gt; ~s(world)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eSignificantly increase the timeout for \u003ccode\u003emix gettext.extract\u003c/code\u003e to two minutes.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eGettext.put_locale!/2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHappy 10+ years of Elixir translations everyone! 🎉\u003c/p\u003e\n\u003ch2\u003ePrevious versions\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/blob/v1.0.0/CHANGELOG.md\"\u003eSee the CHANGELOG for versions before v1.0\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/e3180f138bda49c7607b709ec74133c47c24c81d\"\u003e\u003ccode\u003ee3180f1\u003c/code\u003e\u003c/a\u003e Release v1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/ec2f9c1b3d7d03dbd3d8a9d21e3442f26efbeef6\"\u003e\u003ccode\u003eec2f9c1\u003c/code\u003e\u003c/a\u003e Erase manifest unless on upcoming Elixir (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/4960e492813b829f2d44c2a47723379850de2117\"\u003e\u003ccode\u003e4960e49\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Removed unnecessary cleaning of Elixir manifests (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/423\"\u003e#423\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/8844a323145936a2bff328fabb25bddc98c09987\"\u003e\u003ccode\u003e8844a32\u003c/code\u003e\u003c/a\u003e Trim CHANGELOG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/7fe2dc75a7f86b6fbb2329a14d520e7131c10c3f\"\u003e\u003ccode\u003e7fe2dc7\u003c/code\u003e\u003c/a\u003e Release v1.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/30bf87de18890cd545b25c6a9e2dc3f5f01d3e05\"\u003e\u003ccode\u003e30bf87d\u003c/code\u003e\u003c/a\u003e Removed unnecessary cleaning of Elixir manifests (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/423\"\u003e#423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/d33d7452b20281cf7b1aaba299955e5c92719669\"\u003e\u003ccode\u003ed33d745\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.2.2 to 5.0.0 (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/422\"\u003e#422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/7443953e4c40ec8eb498ec244aae967bdfc200ed\"\u003e\u003ccode\u003e7443953\u003c/code\u003e\u003c/a\u003e Use ubuntu-latest in the publish-to-hex.yml workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/d1a8c86d0bb7b1edfd01538d6bce32b5b809363f\"\u003e\u003ccode\u003ed1a8c86\u003c/code\u003e\u003c/a\u003e Release v1.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/e1df334b3bc77e21f457b38e4a76e3543814d016\"\u003e\u003ccode\u003ee1df334\u003c/code\u003e\u003c/a\u003e Update Elixir/Erlang versions in CI\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-gettext/gettext/compare/v0.26.2...v1.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `heroicons` from v2.1.1 to v2.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tailwindlabs/heroicons/releases\"\u003eheroicons's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.2.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved unnecessary clipping path from \u003ccode\u003esolid/arrow-left-circle\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.5\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd new icons (\u003ccode\u003earrow-turn-*\u003c/code\u003e, \u003ccode\u003ebold\u003c/code\u003e, \u003ccode\u003ecalendar-date-range\u003c/code\u003e, \u003ccode\u003edivide\u003c/code\u003e, \u003ccode\u003edocument-currency-*\u003c/code\u003e, \u003ccode\u003eequals\u003c/code\u003e, \u003ccode\u003eh1\u003c/code\u003e, \u003ccode\u003eh2\u003c/code\u003e, \u003ccode\u003eh3\u003c/code\u003e, \u003ccode\u003eitalic\u003c/code\u003e, \u003ccode\u003elink-slash\u003c/code\u003e, \u003ccode\u003enumbered-list\u003c/code\u003e, \u003ccode\u003epercent-badge\u003c/code\u003e, \u003ccode\u003eslash\u003c/code\u003e, \u003ccode\u003estrikethrough\u003c/code\u003e, \u003ccode\u003eunderline\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.4\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove tree-shakability of React package (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove project READMEs (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInclude license file with published packages (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tailwindlabs/heroicons/blob/master/CHANGELOG.md\"\u003eheroicons's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[2.2.0] - 2024-11-18\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved unnecessary clipping path from \u003ccode\u003esolid/arrow-left-circle\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.5] - 2024-07-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd new icons (\u003ccode\u003earrow-turn-*\u003c/code\u003e, \u003ccode\u003ebold\u003c/code\u003e, \u003ccode\u003ecalendar-date-range\u003c/code\u003e, \u003ccode\u003edivide\u003c/code\u003e, \u003ccode\u003edocument-currency-*\u003c/code\u003e, \u003ccode\u003eequals\u003c/code\u003e, \u003ccode\u003eh1\u003c/code\u003e, \u003ccode\u003eh2\u003c/code\u003e, \u003ccode\u003eh3\u003c/code\u003e, \u003ccode\u003eitalic\u003c/code\u003e, \u003ccode\u003elink-slash\u003c/code\u003e, \u003ccode\u003enumbered-list\u003c/code\u003e, \u003ccode\u003epercent-badge\u003c/code\u003e, \u003ccode\u003eslash\u003c/code\u003e, \u003ccode\u003estrikethrough\u003c/code\u003e, \u003ccode\u003eunderline\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.4] - 2024-06-17\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove tree-shakability of React package (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.3] - 2024-03-22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove project READMEs (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.2] - 2024-03-22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInclude license file with published packages (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/0435d4ca364a608cc75e2f8683d374e55abbae26\"\u003e\u003ccode\u003e0435d4c\u003c/code\u003e\u003c/a\u003e 2.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/f327cbe38385c6add89a4e7bb72e701b4e50f25a\"\u003e\u003ccode\u003ef327cbe\u003c/code\u003e\u003c/a\u003e Add React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/56c073c2c9a66d2e51adb93d8e87e2e941d5b6db\"\u003e\u003ccode\u003e56c073c\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/64e23681c1fc84cfe47778a013d6291963603ff2\"\u003e\u003ccode\u003e64e2368\u003c/code\u003e\u003c/a\u003e Remove clip-path from 20/arrow-left-circle (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/ad0ad1f6d51bd64dcd67e363d2b2833a8de25154\"\u003e\u003ccode\u003ead0ad1f\u003c/code\u003e\u003c/a\u003e 2.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/58d511e23db9c801ba9078186f54f30a6ed6c250\"\u003e\u003ccode\u003e58d511e\u003c/code\u003e\u003c/a\u003e Add new icons (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1204\"\u003e#1204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/c1b192b8cd0f1b3c569d25ba995d170f3db86039\"\u003e\u003ccode\u003ec1b192b\u003c/code\u003e\u003c/a\u003e 2.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/e2e487fed03d9f9651f3952eddc52997f7abe78d\"\u003e\u003ccode\u003ee2e487f\u003c/code\u003e\u003c/a\u003e Make sure calls to \u003ccode\u003eforwardRef\u003c/code\u003e are marked as pure (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/cafc7d6cb6c2233b07667ae1fb77a43866a333e3\"\u003e\u003ccode\u003ecafc7d6\u003c/code\u003e\u003c/a\u003e use \u003ccode\u003esize-*\u003c/code\u003e instead of \u003ccode\u003ew-* h-*\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1182\"\u003e#1182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/9a17872e685bf48b83c047572c45617b6fd345e7\"\u003e\u003ccode\u003e9a17872\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tailwindlabs/heroicons/compare/88ab3a0d790e6a47404cba02800a6b25d2afae50...0435d4ca364a608cc75e2f8683d374e55abbae26\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `opentelemetry_exporter` from 1.8.1 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/blob/main/CHANGELOG.md\"\u003eopentelemetry_exporter's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eThis changelog has been split into a changelog per application found under\n\u003ccode\u003eapps/*\u003c/code\u003e. This file remains for changelogs before 2025-07-31.\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003eThe format is based on \u003ca href=\"https://keepachangelog.com/en/1.0.0/\"\u003eKeep a Changelog\u003c/a\u003e,\nand this project adheres to \u003ca href=\"https://semver.org/spec/v2.0.0.html\"\u003eSemantic Versioning\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e[Unreleased]\u003c/h2\u003e\n\u003ch2\u003eSDK 1.6.0 - 2025-09-16\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/894\"\u003eAdd is_remote flag in exporter for spans and span links\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOTLP Exporter 1.9.0 - 2025-09-16\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/894\"\u003eAdd is_remote flag in exporter for spans and span links\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAPI 1.4.1 - 2025-07-31\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eVarious type spec fixes\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSDK 1.5.1 - 2025-07-31\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/836\"\u003efix the batch export timeout to default to 30 seconds\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.0 to 1.8.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.cert] Fix certificate not being accepted by Chromium (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6847\"\u003e#6847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Fix asynchronous transport close tearing down the replacement transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6852\"\u003e#6852\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Update Tailwind version to 4.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.14\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.15/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15 (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.cert] Fix certificate not being accepted by Chromium (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6847\"\u003e#6847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Fix asynchronous transport close tearing down the replacement transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6852\"\u003e#6852\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Update Tailwind version to 4.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.14 (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/bd1801833b4fd7ceb02497cc7ba2d05e9bd391c8\"\u003e\u003ccode\u003ebd18018\u003c/code\u003e\u003c/a\u003e fix version in package.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/762d1a1942bdb3d755a89cc1ac9b249a632f34f6\"\u003e\u003ccode\u003e762d1a1\u003c/code\u003e\u003c/a\u003e Release v1.8.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/f735b5182984b7414c9dec555c89d6aa551ad438\"\u003e\u003ccode\u003ef735b51\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/405f892d33365a3b78eeb72f9a56590ec6f5ef20\"\u003e\u003ccode\u003e405f892\u003c/code\u003e\u003c/a\u003e Fix async close leaking to replaced transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6854\"\u003e#6854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/968a940058bd1233d7aa150e7cef36f3e2865631\"\u003e\u003ccode\u003e968a940\u003c/code\u003e\u003c/a\u003e Restore NULL parameters on phx.gen.cert's public key algorithm (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6848\"\u003e#6848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1d09594b7cf90bec18b6b53225d45f213a62a246\"\u003e\u003ccode\u003e1d09594\u003c/code\u003e\u003c/a\u003e Remove stale test in Socket.TransportTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6849\"\u003e#6849\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/04e14f118b032f021ecc42ffbabf6ca6fb766f0f\"\u003e\u003ccode\u003e04e14f1\u003c/code\u003e\u003c/a\u003e Bump Tailwind CLI in phx.new templates to 4.3.3 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6845\"\u003e#6845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d676d61e5fa802e4b50e6ef520eac99c61aa687d\"\u003e\u003ccode\u003ed676d61\u003c/code\u003e\u003c/a\u003e Clarify potential resource exhaustion with long polling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d344b1084a4ba12803760ee46677ae42a0ce2740\"\u003e\u003ccode\u003ed344b10\u003c/code\u003e\u003c/a\u003e docs: remove outdated problem statement from routing guide (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6841\"\u003e#6841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/96085e9bc5d65782f2f54e980febe12a2243b728\"\u003e\u003ccode\u003e96085e9\u003c/code\u003e\u003c/a\u003e Release v1.8.14\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.0...v1.8.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_html` from 4.2.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_html/blob/main/CHANGELOG.md\"\u003ephoenix_html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0 (2025-09-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eEnhancements\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplement \u003ccode\u003ePhoenix.HTML.Safe\u003c/code\u003e for Duration\u003c/li\u003e\n\u003cli\u003eAdd function head for argument names of \u003ccode\u003enormalize_value/2\u003c/code\u003e to improve documentation\u003c/li\u003e\n\u003cli\u003eAllow custom tags in options_for_select\u003c/li\u003e\n\u003cli\u003eAllow datetime as form option values\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBug fixes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid false positive warnings on Elixir v1.19\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/8cfd3e37ff9ef0924812a78cf6c9d27cdbd4e726\"\u003e\u003ccode\u003e8cfd3e3\u003c/code\u003e\u003c/a\u003e Release v4.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/053861d1894a10c7787678ab2d86a0b5cee9686f\"\u003e\u003ccode\u003e053861d\u003c/code\u003e\u003c/a\u003e Avoid false positive in Elixir v1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/671042cd441ef001ecba00904be2e5bc39c07dfe\"\u003e\u003ccode\u003e671042c\u003c/code\u003e\u003c/a\u003e allow datetime as form option values (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/468\"\u003e#468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/0f31c955865319f6fe5ac58b5e5c4c385bd80796\"\u003e\u003ccode\u003e0f31c95\u003c/code\u003e\u003c/a\u003e feat(custom option tags): allow custom tags in options_for_select (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/467\"\u003e#467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/0229e746a22d70093473a39946c9868a585181a3\"\u003e\u003ccode\u003e0229e74\u003c/code\u003e\u003c/a\u003e Add function head for argument names of \u003ccode\u003enormalize_value/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/49bb6e545e4799c30cdad97a0b71413bbd9f7c1d\"\u003e\u003ccode\u003e49bb6e5\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003ePhoenix.HTML.Safe\u003c/code\u003e to Duration (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/ddaf11e54f38627c03aa4da937ecb95259103926\"\u003e\u003ccode\u003eddaf11e\u003c/code\u003e\u003c/a\u003e Update CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/464\"\u003e#464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/c11a9e3b87fa247b31a8ccf1265d6588e1ddaa04\"\u003e\u003ccode\u003ec11a9e3\u003c/code\u003e\u003c/a\u003e Implement Access for form fields\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/phoenix_html/compare/v4.2.1...v4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.1 (2026-08-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip Ecto repos that cannot be resolved to an extras module\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f12805a9f800d03631219f9f9d5108e49d1b2771\"\u003e\u003ccode\u003ef12805a\u003c/code\u003e\u003c/a\u003e Release v0.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/d212df68098ccfecc97dd5d8c51ecfafe53019cb\"\u003e\u003ccode\u003ed212df6\u003c/code\u003e\u003c/a\u003e Skip Ecto repos that cannot be resolved to an extras module (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c79b97691848f4f2fe24080602358f82bbc4ee0a\"\u003e\u003ccode\u003ec79b976\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c0d9b5eb38573a354a09d4ac0dd694bfe5fbd6a3\"\u003e\u003ccode\u003ec0d9b5e\u003c/code\u003e\u003c/a\u003e update assets CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.3 to 1.2.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent a hook's \u003ccode\u003edisconnected\u003c/code\u003e method from being called again when already disconnected (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4430\"\u003e#4430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid mutating JS push options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4431\"\u003e#4431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle falsy keys in assign_async validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4428\"\u003e#4428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent flaky tests due to async pid collection timeout (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4425\"\u003e#4425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve caret position for additional input types (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4436\"\u003e#4436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent crash in LiveViewTest when keyed comprehension entry is moved and changed in the same patch (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix teleported elements sometimes not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix lock handling for LiveComponents in nested LiveViews (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4444\"\u003e#4444\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved the IE11 section from the README. It was outdated since before LiveView 1.0 was released.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.2.12/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.12 (2026-09-16)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent a hook's \u003ccode\u003edisconnected\u003c/code\u003e method from being called again when already disconnected (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4430\"\u003e#4430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid mutating JS push options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4431\"\u003e#4431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle falsy keys in assign_async validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4428\"\u003e#4428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent flaky tests due to async pid collection timeout (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4425\"\u003e#4425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve caret position for additional input types (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4436\"\u003e#4436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent crash in LiveViewTest when keyed comprehension entry is moved and changed in the same patch (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix teleported elements sometimes not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix lock handling for LiveComponents in nested LiveViews (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4444\"\u003e#4444\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved the IE11 section from the README. It was outdated since before LiveView 1.0 was released.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.11 (2026-08-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/83ab190252ebb61256648e829152d21a59785155\"\u003e\u003ccode\u003e83ab190\u003c/code\u003e\u003c/a\u003e Release v1.2.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/14ab5830fffd12eda59e2cd7233c7fbd7ca76d90\"\u003e\u003ccode\u003e14ab583\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8c979bdadce7b4ee1982cf32c4ceac16c049f520\"\u003e\u003ccode\u003e8c979bd\u003c/code\u003e\u003c/a\u003e Ensure closestLock check respects view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4446\"\u003e#4446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/5ae5d2bca369d907a039e089c42b45f518bf5c31\"\u003e\u003ccode\u003e5ae5d2b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/48b5eb48248848afdfaad555516f603ef32e80f7\"\u003e\u003ccode\u003e48b5eb4\u003c/code\u003e\u003c/a\u003e Fix teleported elements in stream not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4d27da56be75b76cb127e2ec1a8d144a357bfa17\"\u003e\u003ccode\u003e4d27da5\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/e9e66c2ce03d94edf1cb873ced947334b8153e15\"\u003e\u003ccode\u003ee9e66c2\u003c/code\u003e\u003c/a\u003e Preserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/57cb09648d15cbfd5bd50d429cae9c679a3a3c09\"\u003e\u003ccode\u003e57cb096\u003c/code\u003e\u003c/a\u003e Resolve templates in moved keyed entries in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d2e183579f571829641a78f85b611dd660a63696\"\u003e\u003ccode\u003ed2e1835\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.15.0 to 3.15.2 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4443\"\u003e#4443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/7f06d34002983f30f44ef24827362a32360a736c\"\u003e\u003ccode\u003e7f06d34\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.3...v1.2.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.15 to 0.7.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_aws_sigv4/1\"\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e\u003c/a\u003e: Fix SigV4 signing on retries.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#redirect/1\"\u003e\u003ccode\u003eredirect\u003c/code\u003e\u003c/a\u003e: Change method to GET (except HEAD) on HTTP 303. Thanks to \u003ca href=\"https://github.com/euriconicacio\"\u003e\u003ccode\u003e@​euriconicacio\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.5/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.5 (2026-10-06)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix SigV4 signing on retries.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eredirect\u003c/code\u003e]: Change method to GET (except HEAD) on HTTP 303.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/2ce74f1d80810220b7a5a208423a06f0dca6f55a\"\u003e\u003ccode\u003e2ce74f1\u003c/code\u003e\u003c/a\u003e Release v0.7.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/10c74149a924fdcc770649f2151cd4c4ba27d9f8\"\u003e\u003ccode\u003e10c7414\u003c/code\u003e\u003c/a\u003e Fix connect timeout test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/331c5d9f3e3e17488486eb65813c3986c2c80351\"\u003e\u003ccode\u003e331c5d9\u003c/code\u003e\u003c/a\u003e Fix SigV4 signing on retries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd18cb26a1bdd962a1c1b1813ca029063f0ffe90\"\u003e\u003ccode\u003ebd18cb2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eredirect\u003c/code\u003e: Change method to GET (except HEAD) on HTTP 303\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.15...v0.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.19.5 to 1.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.29.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd authenticated MailChannels Email API adapter \u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1206\"\u003e#1206\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1208\"\u003e#1208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrepare Swoosh 1.29.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1209\"\u003e#1209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1206\"\u003eswoosh/swoosh#1206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.1...v1.29.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.1...v1.29.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCustomer.io adapter: send \u003ccode\u003ecc\u003c/code\u003e recipients in transactional payload \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1200\"\u003e#1200\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.29.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd authenticated MailChannels Email API adapter \u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1206\"\u003e#1206\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1208\"\u003e#1208\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd CC support to Customer.io adapter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/d00531fd4b38fcb9977429a980c2ca341e1518fd\"\u003e\u003ccode\u003ed00531f\u003c/code\u003e\u003c/a\u003e Prepare 1.29.0 minor release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6144448cad7cbcf3743d5359e67cd9b393c7ea2d\"\u003e\u003ccode\u003e6144448\u003c/code\u003e\u003c/a\u003e Align release PR with v1.28.2 draft\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gi...\n\n_Description has been truncated_","html_url":"https://github.com/AcheampongStephen/OpenTelemetry/pull/484","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AcheampongStephen%2FOpenTelemetry/issues/484","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/484/packages"},{"uuid":"5523174351","node_id":"PR_kwDORn2jFc8AAAABEXua2g","number":316,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 11 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-23T05:35:31.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-21T05:36:22.000Z","updated_at":"2026-10-23T05:35:33.000Z","time_to_close":2764749,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":11,"packages":[{"name":"bandit","old_version":"1.10.2","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"opentelemetry_exporter","old_version":"1.10.0","new_version":"1.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-erlang"},{"name":"phoenix","old_version":"1.8.3","new_version":"1.8.14","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.1","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"phoenix_live_view","old_version":"1.1.22","new_version":"1.1.33","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.17","new_version":"0.7.4","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.21.0","new_version":"1.28.1","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 11 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.2` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [opentelemetry_exporter](https://github.com/open-telemetry/opentelemetry-erlang) | `1.10.0` | `1.11.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.3` | `1.8.14` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.1` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.22` | `1.1.33` |\n| [req](https://github.com/wojtekmach/req) | `0.5.17` | `0.7.4` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.21.0` | `1.28.1` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.10.2 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.2...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `opentelemetry_exporter` from 1.10.0 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.3 to 1.8.14\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.14\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.14/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.14 (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.9 (2026-07-07)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/96085e9bc5d65782f2f54e980febe12a2243b728\"\u003e\u003ccode\u003e96085e9\u003c/code\u003e\u003c/a\u003e Release v1.8.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d02186da2d7974ca56559f241fccd4cdbbec790f\"\u003e\u003ccode\u003ed02186d\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/64fc7a3608166be90d8e4ddbc45b26d14a825f20\"\u003e\u003ccode\u003e64fc7a3\u003c/code\u003e\u003c/a\u003e unify path validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6840\"\u003e#6840\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/47b354d3bdc27357a35117677dad7b86b639474b\"\u003e\u003ccode\u003e47b354d\u003c/code\u003e\u003c/a\u003e align nil host handling in endpoint and transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6839\"\u003e#6839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7308b1005339c438a55cb2223eec1cd526a454a8\"\u003e\u003ccode\u003e7308b10\u003c/code\u003e\u003c/a\u003e chore: rename secret to salt (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6813\"\u003e#6813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/0940e49af048c26d2e6389cb1fae9351e8414986\"\u003e\u003ccode\u003e0940e49\u003c/code\u003e\u003c/a\u003e Fix timer leak in Ajax fetch requests (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b800c679e911275c036b3d0cf9fe20db8818e16f\"\u003e\u003ccode\u003eb800c67\u003c/code\u003e\u003c/a\u003e fix doc references (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6809\"\u003e#6809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/42ff8e187c2d95c78d6bcae76cded60478fc473b\"\u003e\u003ccode\u003e42ff8e1\u003c/code\u003e\u003c/a\u003e phx.gen.release: simplify Debian version parsing and usage (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6807\"\u003e#6807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/0a860a022c9cc6d05fab3c8ef149f2116894f57c\"\u003e\u003ccode\u003e0a860a0\u003c/code\u003e\u003c/a\u003e Raise when \u003ccode\u003e:router\u003c/code\u003e given to use Phoenix.VerifiedRoutes is not a literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6\"\u003e#6\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/39da0f7a86d63bfc4d137e39a3e04a871f379c41\"\u003e\u003ccode\u003e39da0f7\u003c/code\u003e\u003c/a\u003e Add filter and sort query parameters to Bob Web UI links (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6805\"\u003e#6805\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.3...v1.8.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.1 (2026-08-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip Ecto repos that cannot be resolved to an extras module\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f12805a9f800d03631219f9f9d5108e49d1b2771\"\u003e\u003ccode\u003ef12805a\u003c/code\u003e\u003c/a\u003e Release v0.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/d212df68098ccfecc97dd5d8c51ecfafe53019cb\"\u003e\u003ccode\u003ed212df6\u003c/code\u003e\u003c/a\u003e Skip Ecto repos that cannot be resolved to an extras module (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c79b97691848f4f2fe24080602358f82bbc4ee0a\"\u003e\u003ccode\u003ec79b976\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c0d9b5eb38573a354a09d4ac0dd694bfe5fbd6a3\"\u003e\u003ccode\u003ec0d9b5e\u003c/code\u003e\u003c/a\u003e update assets CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.22 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.22...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.17 to 0.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.17...v0.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.21.0 to 1.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.28.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCustomer.io adapter: send \u003ccode\u003ecc\u003c/code\u003e recipients in transactional payload \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1200\"\u003e#1200\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.28.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd CC support to Customer.io adapter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/13f10492615cbb9c29cc974f14e18e1c26a551b5\"\u003e\u003ccode\u003e13f1049\u003c/code\u003e\u003c/a\u003e Bump Swoosh to 1.28.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a01321a698d1aa0c3f580d9eb33e8ed8cf753d2\"\u003e\u003ccode\u003e7a01321\u003c/code\u003e\u003c/a\u003e Add cc field to Customer.io adapter payload\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/200187ed0f7066f3a83634c645298d514fccb70f\"\u003e\u003ccode\u003e200187e\u003c/code\u003e\u003c/a\u003e Bump release metadata and changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/eab43870b374d209c9434c2334bfd8d2ca3289d9\"\u003e\u003ccode\u003eeab4387\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/485a58a5bbbcd58d5d625acd900c45ed0554f9cc\"\u003e\u003ccode\u003e485a58a\u003c/code\u003e\u003c/a\u003e Return an error tuple for any unexpected status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/44e6e4405957ce7db605566f1e277da4d32ce263\"\u003e\u003ccode\u003e44e6e44\u003c/code\u003e\u003c/a\u003e Revert decode_json extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/8c04b500bb5352d1558ec04199ecc7cfa3f5341c\"\u003e\u003ccode\u003e8c04b50\u003c/code\u003e\u003c/a\u003e Address review feedback on TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a3d33c53ee0d4c250c56dd903c4975e1d368d51\"\u003e\u003ccode\u003e7a3d33c\u003c/code\u003e\u003c/a\u003e Reference the PR in the changelog entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/120504c73c3628f5ece0d121c7de44a59e61a8d6\"\u003e\u003ccode\u003e120504c\u003c/code\u003e\u003c/a\u003e Add TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3985f9e482401bcb9f47b326bf990d2afb38de59\"\u003e\u003ccode\u003e3985f9e\u003c/code\u003e\u003c/a\u003e build(deps): bump bandit from 1.12.0 to 1.12.4 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1179\"\u003e#1179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.21.0...v1.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/brianlangbecker/opentelemetry-demo-ld/pull/316","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/brianlangbecker%2Fopentelemetry-demo-ld/issues/316","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/316/packages"},{"uuid":"5294109039","node_id":"PR_kwDORUhh7c8AAAABBhpk6A","number":16,"state":"closed","title":"chore(deps): bump the hex-minor-and-patch group across 1 directory with 7 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-06T20:05:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-30T20:05:24.000Z","updated_at":"2026-09-06T20:05:47.000Z","time_to_close":604822,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"hex-minor-and-patch","update_count":7,"packages":[{"name":"bandit","old_version":"1.12.4","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"phoenix","old_version":"1.8.9","new_version":"1.8.13","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.7.2","new_version":"0.7.4","repository_url":"https://github.com/wojtekmach/req"}],"path":null,"ecosystem":"hex"},"body":"Bumps the hex-minor-and-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.12.4` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.9` | `1.8.13` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.7.2` | `0.7.4` |\n\n\nUpdates `bandit` from 1.12.4 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.4...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.9 to 1.8.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.13/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/dd0b4ceb18957a535af446756b4ce217d2c8cbad\"\u003e\u003ccode\u003edd0b4ce\u003c/code\u003e\u003c/a\u003e Release v1.8.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e30382cc6757c6bf280205bbd736f3b8264b1c7a\"\u003e\u003ccode\u003ee30382c\u003c/code\u003e\u003c/a\u003e handle chrome page resume (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6803\"\u003e#6803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/03308601ddbc74390fd51f97898a299dd5f57a92\"\u003e\u003ccode\u003e0330860\u003c/code\u003e\u003c/a\u003e release 1.8.12 installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a27a0320ec8bcc874a8ae93a85f15dfdd5e91e25\"\u003e\u003ccode\u003ea27a032\u003c/code\u003e\u003c/a\u003e Release v1.8.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/11e30afa21fd774a6f3a2c4c57de219a8eda766d\"\u003e\u003ccode\u003e11e30af\u003c/code\u003e\u003c/a\u003e Clear :return_to session key after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6799\"\u003e#6799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a2bda2d65161ae6a4c3feece249aea294b885829\"\u003e\u003ccode\u003ea2bda2d\u003c/code\u003e\u003c/a\u003e join_ref can be nil on non-join messages (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ce109c9a53577fe600cef9d7c0e3eee4caac5860\"\u003e\u003ccode\u003ece109c9\u003c/code\u003e\u003c/a\u003e Fix release date for v1.8.11 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6795\"\u003e#6795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7e9fb2316b8a06765af3d81e4bda4d1a9fa1a600\"\u003e\u003ccode\u003e7e9fb23\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/3765e81a7f4107a8b23acef363b3bc3ae80c35a8\"\u003e\u003ccode\u003e3765e81\u003c/code\u003e\u003c/a\u003e Add markdown formatter to docs output (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6794\"\u003e#6794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.9...v1.8.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.2.8 to 1.2.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003cli\u003eAllow dynamically updating phx-hook attribute (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4153\"\u003e#4153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow external uploads to be notified on cancel (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4395\"\u003e#4395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003etoEl\u003c/code\u003e to hook \u003ccode\u003ebeforeUpdate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/3616\"\u003e#3616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error message when attributes have been defined after an embedded template (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePhoenix.LiveView.navigation_type/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4393\"\u003e#4393\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel external uploads when navigating away (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4398\"\u003e#4398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow to opt out of phx-remove cascade on navigation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4394\"\u003e#4394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003ephx-drop-target-active\u003c/code\u003e more reliable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4399\"\u003e#4399\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.9\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix live components being wrongly destroyed in some rare cases (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4350\"\u003e#4350\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.11 (2026-08-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003cli\u003eAllow dynamically updating phx-hook attribute (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4153\"\u003e#4153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow external uploads to be notified on cancel (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4395\"\u003e#4395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003etoEl\u003c/code\u003e to hook \u003ccode\u003ebeforeUpdate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/3616\"\u003e#3616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error message when attributes have been defined after an embedded template (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePhoenix.LiveView.navigation_type/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4393\"\u003e#4393\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel external uploads when navigating away (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4398\"\u003e#4398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow to opt out of phx-remove cascade on navigation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4394\"\u003e#4394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003ephx-drop-target-active\u003c/code\u003e more reliable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4399\"\u003e#4399\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.9 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix live components being wrongly destroyed in some rare cases (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4350\"\u003e#4350\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/eba3493126fe4286df94d46d14bb3f35eed5b2f5\"\u003e\u003ccode\u003eeba3493\u003c/code\u003e\u003c/a\u003e Release v1.2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9326d2d4113fc5a027704b2d10630be15bcb0323\"\u003e\u003ccode\u003e9326d2d\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b01930c86ae64ae65e16cd9b1574540f1d3cb96f\"\u003e\u003ccode\u003eb01930c\u003c/code\u003e\u003c/a\u003e Ensure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4410\"\u003e#4410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/49132a9a687919fa9d7a86915fd60c87c48b3461\"\u003e\u003ccode\u003e49132a9\u003c/code\u003e\u003c/a\u003e Optimize live stream option lookup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4408\"\u003e#4408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0ea75c574a037dbc3e7fa3c7fe503f3a4cce4788\"\u003e\u003ccode\u003e0ea75c5\u003c/code\u003e\u003c/a\u003e Cancel async tasks of components removed from the tree\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/deee8e6b452ba2fd10283b29500439b5cbf19dfb\"\u003e\u003ccode\u003edeee8e6\u003c/code\u003e\u003c/a\u003e Streamline external upload consumption (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4406\"\u003e#4406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdfa1d26939f3286a7c9286d760f005d2ee34d27\"\u003e\u003ccode\u003efdfa1d2\u003c/code\u003e\u003c/a\u003e fix some new warnings on 1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a7dc7b65226ef42ba264c2724a6a66fdf5c113af\"\u003e\u003ccode\u003ea7dc7b6\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/170227886f2c30d26d0cbbbdf151a4e01cfdc1f3\"\u003e\u003ccode\u003e1702278\u003c/code\u003e\u003c/a\u003e Tag pending diffs and discard outdated ones (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d7f327cda0a1c2eb979357889fa612ceada70258\"\u003e\u003ccode\u003ed7f327c\u003c/code\u003e\u003c/a\u003e Release v1.2.10\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.2.8...v1.2.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.7.2 to 0.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.7.2...v0.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/hiroshiyui/baudrate/pull/16","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiroshiyui%2Fbaudrate/issues/16","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/16/packages"},{"uuid":"5283554009","node_id":"PR_kwDORFrJls8AAAABBZ0AZg","number":77,"state":"closed","title":"chore(deps): bump bandit from 1.12.1 to 1.12.5","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-09-13T09:25:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-29T00:52:28.000Z","updated_at":"2026-09-13T09:25:16.000Z","time_to_close":1326763,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bandit","old_version":"1.12.1","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.1 to 1.12.5.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.1...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.1\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/hyperpolymath/no-nonsense-nntps/pull/77","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fno-nonsense-nntps/issues/77","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/77/packages"},{"uuid":"5277945307","node_id":"PR_kwDOQi913M8AAAABBVW5EA","number":402,"state":"closed","title":"build(deps): bump the mix-production-dependencies group across 1 directory with 10 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-21T11:56:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-28T11:54:56.000Z","updated_at":"2026-09-21T11:56:17.000Z","time_to_close":2073679,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"mix-production-dependencies","update_count":10,"packages":[{"name":"bandit","old_version":"1.8.0","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.1","new_version":"1.8.13","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.5.16","new_version":"0.7.3","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.19.8","new_version":"1.28.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 9 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.8.0` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.1` | `1.8.13` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.16` | `0.7.3` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.19.8` | `1.28.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.8.0 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.8.0...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/v0.3.0/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.1 to 1.8.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.13/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/dd0b4ceb18957a535af446756b4ce217d2c8cbad\"\u003e\u003ccode\u003edd0b4ce\u003c/code\u003e\u003c/a\u003e Release v1.8.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e30382cc6757c6bf280205bbd736f3b8264b1c7a\"\u003e\u003ccode\u003ee30382c\u003c/code\u003e\u003c/a\u003e handle chrome page resume (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6803\"\u003e#6803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/03308601ddbc74390fd51f97898a299dd5f57a92\"\u003e\u003ccode\u003e0330860\u003c/code\u003e\u003c/a\u003e release 1.8.12 installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a27a0320ec8bcc874a8ae93a85f15dfdd5e91e25\"\u003e\u003ccode\u003ea27a032\u003c/code\u003e\u003c/a\u003e Release v1.8.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/11e30afa21fd774a6f3a2c4c57de219a8eda766d\"\u003e\u003ccode\u003e11e30af\u003c/code\u003e\u003c/a\u003e Clear :return_to session key after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6799\"\u003e#6799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a2bda2d65161ae6a4c3feece249aea294b885829\"\u003e\u003ccode\u003ea2bda2d\u003c/code\u003e\u003c/a\u003e join_ref can be nil on non-join messages (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ce109c9a53577fe600cef9d7c0e3eee4caac5860\"\u003e\u003ccode\u003ece109c9\u003c/code\u003e\u003c/a\u003e Fix release date for v1.8.11 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6795\"\u003e#6795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7e9fb2316b8a06765af3d81e4bda4d1a9fa1a600\"\u003e\u003ccode\u003e7e9fb23\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/3765e81a7f4107a8b23acef363b3bc3ae80c35a8\"\u003e\u003ccode\u003e3765e81\u003c/code\u003e\u003c/a\u003e Add markdown formatter to docs output (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6794\"\u003e#6794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.1...v1.8.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.18 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.18...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.16 to 0.7.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003efinch: name\u003c/code\u003e in favour of \u003ccode\u003efinch: [name: name]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_timeout: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_timeout: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_max_idle_time: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_max_idle_time: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003e:finch_request\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Handle individual response body chunks.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Support non-UTF8 request params.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Put original request private data in \u003ccode\u003econn.private\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Allow descendant processes.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/6a4f305e1f3bc053352cb66c62f6dfc164bb1d68\"\u003e\u003ccode\u003e6a4f305\u003c/code\u003e\u003c/a\u003e Release v0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/d7708301c9903c8d26c6837396350c23b4813f58\"\u003e\u003ccode\u003ed770830\u003c/code\u003e\u003c/a\u003e Hide body: fun for now\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e450b253c3e4cd7029633aabce9ff1c9486c665d\"\u003e\u003ccode\u003ee450b25\u003c/code\u003e\u003c/a\u003e Update CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/81234199614349a9ce46862fbcd92fe93287f98f\"\u003e\u003ccode\u003e8123419\u003c/code\u003e\u003c/a\u003e Fix flaky httpc into: fun test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.16...v0.7.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.19.8 to 1.28.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.26.3 🚀\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/200187ed0f7066f3a83634c645298d514fccb70f\"\u003e\u003ccode\u003e200187e\u003c/code\u003e\u003c/a\u003e Bump release metadata and changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/eab43870b374d209c9434c2334bfd8d2ca3289d9\"\u003e\u003ccode\u003eeab4387\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/485a58a5bbbcd58d5d625acd900c45ed0554f9cc\"\u003e\u003ccode\u003e485a58a\u003c/code\u003e\u003c/a\u003e Return an error tuple for any unexpected status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/44e6e4405957ce7db605566f1e277da4d32ce263\"\u003e\u003ccode\u003e44e6e44\u003c/code\u003e\u003c/a\u003e Revert decode_json extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/8c04b500bb5352d1558ec04199ecc7cfa3f5341c\"\u003e\u003ccode\u003e8c04b50\u003c/code\u003e\u003c/a\u003e Address review feedback on TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a3d33c53ee0d4c250c56dd903c4975e1d368d51\"\u003e\u003ccode\u003e7a3d33c\u003c/code\u003e\u003c/a\u003e Reference the PR in the changelog entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/120504c73c3628f5ece0d121c7de44a59e61a8d6\"\u003e\u003ccode\u003e120504c\u003c/code\u003e\u003c/a\u003e Add TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3985f9e482401bcb9f47b326bf990d2afb38de59\"\u003e\u003ccode\u003e3985f9e\u003c/code\u003e\u003c/a\u003e build(deps): bump bandit from 1.12.0 to 1.12.4 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1179\"\u003e#1179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ffa34f6b958d747e31fc0ce53328c8842ee75d4b\"\u003e\u003ccode\u003effa34f6\u003c/code\u003e\u003c/a\u003e build(deps): bump cowboy from 2.17.0 to 2.18.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/90f66ece3024a98a18c92dac3a47b1afcf81bca5\"\u003e\u003ccode\u003e90f66ec\u003c/code\u003e\u003c/a\u003e build(deps): bump hackney from 4.5.2 to 4.7.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.19.8...v1.28.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/openobserve/opentelemetry-demo-dataset/pull/402","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openobserve%2Fopentelemetry-demo-dataset/issues/402","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/402/packages"},{"uuid":"5234421228","node_id":"PR_kwDOTOsJ788AAAABAyuyyA","number":18,"state":"closed","title":"Bump bandit from 1.12.3 to 1.12.5 in the dev-and-test group","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-07T11:55:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T11:56:08.000Z","updated_at":"2026-09-07T11:55:24.000Z","time_to_close":1209554,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bandit","old_version":"1.12.3","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":"the dev-and-test group","ecosystem":"hex"},"body":"Bumps the dev-and-test group with 1 update: [bandit](https://github.com/mtrudel/bandit).\n\nUpdates `bandit` from 1.12.3 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.3...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.3\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/houllette/ex_ntfy/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/houllette%2Fex_ntfy/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"},{"uuid":"5233339291","node_id":"PR_kwDOTHhUTs8AAAABAx3MIA","number":13,"state":"closed","title":"deps(deps-dev): bump bandit from 1.12.4 to 1.12.5","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-04T19:12:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T09:46:12.000Z","updated_at":"2026-10-04T19:12:17.000Z","time_to_close":3576356,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps-dev)","packages":[{"name":"bandit","old_version":"1.12.4","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.4 to 1.12.5.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.4...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.4\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/gilbertwong96/longbridge/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gilbertwong96%2Flongbridge/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"},{"uuid":"5177865380","node_id":"PR_kwDOSli0c88AAAABAGBhCg","number":15,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-01T03:50:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-18T03:49:41.000Z","updated_at":"2026-09-01T03:50:13.000Z","time_to_close":1209627,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.4","repository_url":"https://github.com/mtrudel/bandit"},{"name":"phoenix","old_version":"1.8.7","new_version":"1.8.11","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.5.18","new_version":"0.7.2","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.25.2","new_version":"1.27.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 6 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.11.1` | `1.12.4` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.7` | `1.8.11` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.18` | `0.7.2` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.25.2` | `1.27.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n\n\nUpdates `bandit` from 1.11.1 to 1.12.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.4 (27 July 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.3 (25 July 2026)\u003c/h1\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCache connection-level data between HTTP/1 keepalives (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/603\"\u003e#603\u003c/a\u003e, thanks \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.2 (25 July 2026)\u003c/h1\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove internal HTTP/2 error handling to be better about closing stream/connection\u003c/li\u003e\n\u003cli\u003eCoalesce header and body in to single transport send (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/606\"\u003e#606\u003c/a\u003e, thanks \u003ca href=\"https://github.com/NelsonVides\"\u003e\u003ccode\u003e@​NelsonVides\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove compression behaviour when streaming an explicitly length delimited body (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/605\"\u003e#605\u003c/a\u003e, thanks \u003ca href=\"https://github.com/elibosley\"\u003e\u003ccode\u003e@​elibosley\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eQuiet WebSocket deserialization errors, add verbosity config lever (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/610\"\u003e#610\u003c/a\u003e, thanks \u003ca href=\"https://github.com/ericmj\"\u003e\u003ccode\u003e@​ericmj\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eSend connection: close when we're at max_requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/613\"\u003e#613\u003c/a\u003e, thanks \u003ca href=\"https://github.com/joshdchang\"\u003e\u003ccode\u003e@​joshdchang\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bogus check for unmasked WebSocket frames\n(\u003ca href=\"https://github.com/mtrudel/bandit/security/advisories/GHSA-rhh8-5xw9-c3gm\"\u003ehttps://github.com/mtrudel/bandit/security/advisories/GHSA-rhh8-5xw9-c3gm\u003c/a\u003e,\nthanks \u003ca href=\"https://github.com/lukaszsamson\"\u003e\u003ccode\u003e@​lukaszsamson\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eEnforce max_header_list_size if overridden\n(\u003ca href=\"https://github.com/mtrudel/bandit/security/advisories/GHSA-9q5m-g6v3-6772\"\u003ehttps://github.com/mtrudel/bandit/security/advisories/GHSA-9q5m-g6v3-6772\u003c/a\u003e,\nthanks \u003ca href=\"https://github.com/lukaszsamson\"\u003e\u003ccode\u003e@​lukaszsamson\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.1 (24 July 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix DoS issue with fragmented WebSocket frames (CVE-2026-65623, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/00d532fa0618d969cdb97590116175836a357a87\"\u003e\u003ccode\u003e00d532f\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/16632032a82c7568c8d14de9d753c141f7ecd39a\"\u003e\u003ccode\u003e1663203\u003c/code\u003e\u003c/a\u003e Handle clients sending an \u003ccode\u003eExpect: 100-continue\u003c/code\u003e header before sending a body...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3c6595290d1fc28bbfea17f5124814e96bb7ee2\"\u003e\u003ccode\u003ee3c6595\u003c/code\u003e\u003c/a\u003e Fixup linting error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c430bf5e6c95598e92d11583334e3ff297231d30\"\u003e\u003ccode\u003ec430bf5\u003c/code\u003e\u003c/a\u003e Reapply \u0026quot;Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a6fabe897e008e78ebf75fbbb322967c5729b1e0\"\u003e\u003ccode\u003ea6fabe8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e479c3bec3a1a67cd6332b67bc9efc4e6c6da038\"\u003e\u003ccode\u003ee479c3b\u003c/code\u003e\u003c/a\u003e Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eba04e484dc7e1c66f001413969dc73c1ab937b2\"\u003e\u003ccode\u003eeba04e4\u003c/code\u003e\u003c/a\u003e Tolerate a leading empty line before the request line (RFC9112§2.2) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c31e9e3c76dcbfc239a96eabed5341ced7885ae5\"\u003e\u003ccode\u003ec31e9e3\u003c/code\u003e\u003c/a\u003e Fix crash on unrecognized chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c24bc005959a7d76c5b00146c98fa4fdeddec84c\"\u003e\u003ccode\u003ec24bc00\u003c/code\u003e\u003c/a\u003e Reject header values containing CR, LF, or NUL (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a518b29553abeb5b6af35445eca0ea2a17497de1\"\u003e\u003ccode\u003ea518b29\u003c/code\u003e\u003c/a\u003e Reject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.7 to 1.8.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.11/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.11 (2028-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.9 (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-6983-jfq8-485w\"\u003eCVE-2026-56811\u003c/a\u003e: Add a \u003ccode\u003emax_channels_per_transport\u003c/code\u003e option (defaulting to 100) to prevent a single client from spawning an unbounded number of channels (processes), eventually exhausting the server's memory or process limit.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-63mc-hw7g-86rr\"\u003eCVE-2026-56812\u003c/a\u003e: Prevent presence keys from colliding with \u003ccode\u003eObject.prototype\u003c/code\u003e properties members, crashing the JS Presence client\u003c/li\u003e\n\u003cli\u003eEnforce longpoll batch size introduced in 1.8.6. This is additional hardening against \u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e. If your application sends events with a very high frequency and uses long polling, such that a single longpoll request would exceed 100 events, you should update to 1.8.7 first.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.8 (2026-06-10)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Use LiveView 1.2.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/51121f3a339d657c46d4074fb2fd8584a090d6f8\"\u003e\u003ccode\u003e51121f3\u003c/code\u003e\u003c/a\u003e fix starting phoenix with mix available but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/109aacd1bf8999058e6cc2cb9cb86d8abfa2f18d\"\u003e\u003ccode\u003e109aacd\u003c/code\u003e\u003c/a\u003e Release v1.8.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/c6c176179bcbd5f088a430db9d47d2d6a03ddea6\"\u003e\u003ccode\u003ec6c1761\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/9f9265446b415e350cd4377b6407adb17bddd55d\"\u003e\u003ccode\u003e9f92654\u003c/code\u003e\u003c/a\u003e release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/5351c74747131ea8307287d53fbaca9d2f0603d2\"\u003e\u003ccode\u003e5351c74\u003c/code\u003e\u003c/a\u003e Improve transport docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/5dca4ed202ed8d15df3fcaf8f407c207aa614d21\"\u003e\u003ccode\u003e5dca4ed\u003c/code\u003e\u003c/a\u003e Make pipe_through accepts pipelines and all plug forms (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6760\"\u003e#6760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/127f545acd2736ee2bc8a00efa53c7e163f93153\"\u003e\u003ccode\u003e127f545\u003c/code\u003e\u003c/a\u003e Include per-mount :check_origin in the origin policy cache key (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6774\"\u003e#6774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b6b77e46523703a612dbfac568defa5a2399531b\"\u003e\u003ccode\u003eb6b77e4\u003c/code\u003e\u003c/a\u003e Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8e69e9cd69aa02504dc04b53266d8576dfd33751\"\u003e\u003ccode\u003e8e69e9c\u003c/code\u003e\u003c/a\u003e Fix broken doc reference in Phoenix.Debug (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6772\"\u003e#6772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.7...v1.8.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.30 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.30...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.18 to 0.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[\u003ccode\u003eencode_body\u003c/code\u003e]: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003efinch: name\u003c/code\u003e in favour of \u003ccode\u003efinch: [name: name]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_timeout: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_timeout: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_max_idle_time: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_max_idle_time: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003e:finch_request\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Handle individual response body chunks.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Support non-UTF8 request params.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Put original request private data in \u003ccode\u003econn.private\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Allow descendant processes.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Fix concurrent plug fetches immediately after switching to shared mode.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003ecompress_body\u003c/code\u003e]: Do nothing when request content-encoding is already set.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/6a4f305e1f3bc053352cb66c62f6dfc164bb1d68\"\u003e\u003ccode\u003e6a4f305\u003c/code\u003e\u003c/a\u003e Release v0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/d7708301c9903c8d26c6837396350c23b4813f58\"\u003e\u003ccode\u003ed770830\u003c/code\u003e\u003c/a\u003e Hide body: fun for now\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e450b253c3e4cd7029633aabce9ff1c9486c665d\"\u003e\u003ccode\u003ee450b25\u003c/code\u003e\u003c/a\u003e Update CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/81234199614349a9ce46862fbcd92fe93287f98f\"\u003e\u003ccode\u003e8123419\u003c/code\u003e\u003c/a\u003e Fix flaky httpc into: fun test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/fb7bb1050f7a694edfcfc329b0224576d5a07d1f\"\u003e\u003ccode\u003efb7bb10\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;New step: \u003ccode\u003eexpect\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/493\"\u003e#493\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/ed894af513124ffcca68e0982913cf7f7bf77da4\"\u003e\u003ccode\u003eed894af\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add assigns (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/492\"\u003e#492\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.18...v0.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.2 to 1.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.26.3 🚀\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the Recipient's name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReplace deprecated xref: [exclude:] with elixirc_options: [no_warn_undefined:] \u003ca href=\"https://github.com/princemaple\"\u003e\u003ccode\u003e@​princemaple\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump bandit from 1.11.1 to 1.12.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1157\"\u003e#1157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump req from 0.5.18 to 0.6.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1158\"\u003e#1158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump multipart from 0.6.0 to 0.6.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1160\"\u003e#1160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump tailwind from 0.4.1 to 0.5.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1162\"\u003e#1162\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated expected response in \u003ccode\u003emua_test.exs\u003c/code\u003e \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.1 patch release metadata \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ae80fbe54d2697f2f19b3d8083fac27c9c2d3a25\"\u003e\u003ccode\u003eae80fbe\u003c/code\u003e\u003c/a\u003e Prepare 1.27.0 minor release files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/96345a9c1c8dbbe0a10c2c8f5ab3d89ef8ee2360\"\u003e\u003ccode\u003e96345a9\u003c/code\u003e\u003c/a\u003e docs: flag EU-exclusive and GDPR-only adapters in the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f6e1b526e9527756159cdb6988e38fe20a01c7a1\"\u003e\u003ccode\u003ef6e1b52\u003c/code\u003e\u003c/a\u003e Add AhaSend adapter (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/e937dbbdc1493245a99bddb6f10d01afc6d8bcc2\"\u003e\u003ccode\u003ee937dbb\u003c/code\u003e\u003c/a\u003e build(deps): bump plug_cowboy from 2.8.1 to 2.9.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1168\"\u003e#1168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/16e8b0f86475e20c517079c28b15c68a7f19465a\"\u003e\u003ccode\u003e16e8b0f\u003c/code\u003e\u003c/a\u003e build(deps): bump cowboy from 2.16.1 to 2.17.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1170\"\u003e#1170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ba0d5a2a1f993496fddf70c6ddbda583dad2c6b9\"\u003e\u003ccode\u003eba0d5a2\u003c/code\u003e\u003c/a\u003e build(deps): bump hackney from 4.4.5 to 4.5.2 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1172\"\u003e#1172\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/416e0b92d9eb83592fcb248d2a19e3a7f09d60e9\"\u003e\u003ccode\u003e416e0b9\u003c/code\u003e\u003c/a\u003e build(deps): bump plug from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1174\"\u003e#1174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/9b5c3b36324b65b6d181c1a4c1903fa2bb2d21aa\"\u003e\u003ccode\u003e9b5c3b3\u003c/code\u003e\u003c/a\u003e docs: document SMTP tls_options for certificate verification (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/72a874f961a2326bd29c90767a2e24070ff5e07b\"\u003e\u003ccode\u003e72a874f\u003c/code\u003e\u003c/a\u003e Prepare 1.26.3 patch release files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/e38235453e81d1727bfc8d91e69ec4cb211ccf61\"\u003e\u003ccode\u003ee382354\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.2...v1.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/Astronomy-NextGenIT/Flagd-ui-Repo-Opentelemetry/pull/15","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Astronomy-NextGenIT%2FFlagd-ui-Repo-Opentelemetry/issues/15","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/15/packages"},{"uuid":"4657161537","node_id":"PR_kwDORs4_pM7mJWJR","number":141,"state":"closed","title":"build(deps): Bump bandit from 1.11.1 to 1.12.0 in /elixir-orchestration","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-14T00:31:16.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-13T22:33:03.000Z","updated_at":"2026-06-14T00:31:18.000Z","time_to_close":7093,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"}],"path":"/elixir-orchestration","ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.11.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/hyperpolymath/verisimdb/pull/141","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fverisimdb/issues/141","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/141/packages"},{"uuid":"4649587628","node_id":"PR_kwDOR_ccsM7lxebz","number":37,"state":"closed","title":"deps(deps): bump bandit from 1.11.1 to 1.12.0","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-06-20T21:43:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-12T13:25:35.000Z","updated_at":"2026-06-20T21:43:22.000Z","time_to_close":721065,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.11.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.11.1\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/agentjido/jido_managed_agents/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/agentjido%2Fjido_managed_agents/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"},{"uuid":"4641408946","node_id":"PR_kwDORsFU6c7lW8AQ","number":216,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-08-17T14:25:43.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-11T14:27:53.000Z","updated_at":"2026-08-17T14:25:44.000Z","time_to_close":5788670,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.10.3","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.8","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.26","new_version":"1.2.0","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.17","new_version":"0.6.1","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.23.0","new_version":"1.26.1","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.0","repository_url":"https://github.com/phoenixframework/tailwind"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 7 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.3` | `1.12.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.8` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.26` | `1.2.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.17` | `0.6.1` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.23.0` | `1.26.1` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.0` |\n\n\nUpdates `bandit` from 1.10.3 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.3...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.8 (2026-06-10)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Use LiveView 1.2.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://phoenix.hexdocs.pm/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/99df0a99da13265cb8b5cd3a506a79b3de34339f\"\u003e\u003ccode\u003e99df0a9\u003c/code\u003e\u003c/a\u003e Release v1.8.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/729f7810d51285d782625378230e9d1e05c18c54\"\u003e\u003ccode\u003e729f781\u003c/code\u003e\u003c/a\u003e Generator changes for LiveView 1.2 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6696\"\u003e#6696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d453e379f047e923d96daaf79c0b45d8b4558d2d\"\u003e\u003ccode\u003ed453e37\u003c/code\u003e\u003c/a\u003e Use Elixir's builtin consolidation from v1.19, closes \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/f30fa36abb64cc66ac94f213439f903aa5a62c34\"\u003e\u003ccode\u003ef30fa36\u003c/code\u003e\u003c/a\u003e Clarify channel payloads can be any serializable value (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6695\"\u003e#6695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e1e7912418dc243faddd71d1136bd743eb84835f\"\u003e\u003ccode\u003ee1e7912\u003c/code\u003e\u003c/a\u003e Replace all hexdocs URLs with the subdomain format (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6693\"\u003e#6693\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/cf9dd26f1ab9e19abdfeb094644a6a0d8158421f\"\u003e\u003ccode\u003ecf9dd26\u003c/code\u003e\u003c/a\u003e Add README template for Phoenix umbrella (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6691\"\u003e#6691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/39eb5ddb328b0187712172bc75626c735192f62d\"\u003e\u003ccode\u003e39eb5dd\u003c/code\u003e\u003c/a\u003e Refactor template override backward compatibility test (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6684\"\u003e#6684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e1c3816c262f32b1556602d9fe717983a9b8bc5b\"\u003e\u003ccode\u003ee1c3816\u003c/code\u003e\u003c/a\u003e chore: small typo fix in controllers.md (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6689\"\u003e#6689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b6a4e31325197fae150096eadce93846dcfb58e5\"\u003e\u003ccode\u003eb6a4e31\u003c/code\u003e\u003c/a\u003e Make websocket disconnect codes explicit (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6678\"\u003e#6678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eea489597e56a92ebb54be2cb0b7828d3d2e8494\"\u003e\u003ccode\u003eeea4895\u003c/code\u003e\u003c/a\u003e Add eex suffix to phx.gen.auth template override test (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6680\"\u003e#6680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.26 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4269\"\u003e#4269\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure for comprehensions in HEEx use deterministic variables\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003econnect_params\u003c/code\u003e are kept when following redirects in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure exceptions during LiveComponent renders are emitted as \u003ccode\u003e:telemetry\u003c/code\u003e event (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix whitespace handling of EEx nodes in HEEx compiler (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.3\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://hexdocs.pm/phoenix_live_view/1.2.0-rc.3/js/\"\u003eofficial documentation for the JavaScript client\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.2\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.1\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlign \u003ccode\u003ePhoenix.Component\u003c/code\u003e global attributes list with \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Global_attributes\"\u003ereference list from MDN\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4207\"\u003e#4207\u003c/a\u003e). If you relied on one of the removed attributes, use the \u003ccode\u003einclude\u003c/code\u003e option instead. For example:\n\u003cpre lang=\"elixir\"\u003e\u003ccode\u003eattr :rest, :global, include: ~w(width height)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eAllow setting \u003ccode\u003eid\u003c/code\u003e attributes clientside for accessibility with \u003ccode\u003ethis.js().setAttribute()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport \u003ccode\u003egetFileURLForUpload\u003c/code\u003e helper (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.0 (2026-06-10) 🚀\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4269\"\u003e#4269\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure for comprehensions in HEEx use deterministic variables\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003econnect_params\u003c/code\u003e are kept when following redirects in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure exceptions during LiveComponent renders are emitted as \u003ccode\u003e:telemetry\u003c/code\u003e event (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix whitespace handling of EEx nodes in HEEx compiler (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.3 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://phoenix-live-view.hexdocs.pm/1.2.0-rc.3/js/\"\u003eofficial documentation for the JavaScript client\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.2 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.1 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlign \u003ccode\u003ePhoenix.Component\u003c/code\u003e global attributes list with \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Global_attributes\"\u003ereference list from MDN\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4207\"\u003e#4207\u003c/a\u003e). If you relied on one of the removed attributes, use the \u003ccode\u003einclude\u003c/code\u003e option instead. For example:\n\u003cpre lang=\"elixir\"\u003e\u003ccode\u003eattr :rest, :global, include: ~w(width height)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eAllow setting \u003ccode\u003eid\u003c/code\u003e attributes clientside for accessibility with \u003ccode\u003ethis.js().setAttribute()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport \u003ccode\u003egetFileURLForUpload\u003c/code\u003e helper (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.0 (2026-04-23)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/923e859d3c586bbe048a838339c516c97f470108\"\u003e\u003ccode\u003e923e859\u003c/code\u003e\u003c/a\u003e Release v1.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0f57334e2ce6c375cf0a2733d3876bb9003244bb\"\u003e\u003ccode\u003e0f57334\u003c/code\u003e\u003c/a\u003e ensure connect_params are kept when following redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4249\"\u003e#4249\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c6723f800bb0b39c9cfe112d815c18a2a6a1827\"\u003e\u003ccode\u003e1c6723f\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2d0d81aea5eb91f8f83bcc69b29def4d8ce3b72f\"\u003e\u003ccode\u003e2d0d81a\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d2981e528548f830d2a81a9731eac31007328d84\"\u003e\u003ccode\u003ed2981e5\u003c/code\u003e\u003c/a\u003e Support events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4279\"\u003e#4279\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/3c0d113a512c6d5185943bff89fc1959f2044102\"\u003e\u003ccode\u003e3c0d113\u003c/code\u003e\u003c/a\u003e Wrap renders caused by component updates in a telemetry span (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4278\"\u003e#4278\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/75dd8d17d97b384f3f767da0c39136b8e18ec1ec\"\u003e\u003ccode\u003e75dd8d1\u003c/code\u003e\u003c/a\u003e Fix whitespace handling in HEEx compiler EEx nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/e514f0271b97addd634951e1d81e433970f3576b\"\u003e\u003ccode\u003ee514f02\u003c/code\u003e\u003c/a\u003e fix tag compiler regressions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/97e4d5ed21a2a3ad0754fede10a67529bceffc35\"\u003e\u003ccode\u003e97e4d5e\u003c/code\u003e\u003c/a\u003e fix comma in README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f17f149e1981d1a4de1d40e825b2975a517a361c\"\u003e\u003ccode\u003ef17f149\u003c/code\u003e\u003c/a\u003e Document handle_event takes payload, not unsigned_params (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4268\"\u003e#4268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.26...v1.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.17 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1 (2026-06-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003ecompressed\u003c/code\u003e], [\u003ccode\u003edecompress_body\u003c/code\u003e]: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0 (2026-06-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eencode_body\u003c/code\u003e]: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003edecode_body\u003c/code\u003e]: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eCustom decoders are supported via \u003ccode\u003e{format, codec}\u003c/code\u003e tuples, where \u003ccode\u003ecodec\u003c/code\u003e is\na module exporting \u003ccode\u003edecode/1\u003c/code\u003e or a 1-arity function returning an \u003ccode\u003e:ok\u003c/code\u003e/\u003ccode\u003e:error\u003c/code\u003e\ntuple, for example:\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/36a82523e864739787340604f65ecce26699a0a9\"\u003e\u003ccode\u003e36a8252\u003c/code\u003e\u003c/a\u003e Release v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/ea5506fce1d6a44e5f47d0efed314643b3bc4904\"\u003e\u003ccode\u003eea5506f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003ecompressed\u003c/code\u003e, \u003ccode\u003edecompress_body\u003c/code\u003e: Disable automatic decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/8e7425f790d669d6996347ad0a72ba57f51138a8\"\u003e\u003ccode\u003e8e7425f\u003c/code\u003e\u003c/a\u003e Release v0.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/584a490d37c80e1f0f13b6efcfa9db7817218043\"\u003e\u003ccode\u003e584a490\u003c/code\u003e\u003c/a\u003e \u003ccode\u003edecode_body\u003c/code\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/2d77dbeb6b2a6932fe181432b1c36e9ea1d9fa23\"\u003e\u003ccode\u003e2d77dbe\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eencode_body\u003c/code\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/53c3b9912e815b22231dc2892ac2f47f0e119d9d\"\u003e\u003ccode\u003e53c3b99\u003c/code\u003e\u003c/a\u003e Release v0.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/dc1f3be250006c81a1b3d0a712ebda175942ed71\"\u003e\u003ccode\u003edc1f3be\u003c/code\u003e\u003c/a\u003e Update ex_doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/dbd145c67c737c50582cd9627cfbbf1e3ca72737\"\u003e\u003ccode\u003edbd145c\u003c/code\u003e\u003c/a\u003e Update CHANGELOG.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/75f077e7de0d4fb57b2bd70e80522ecf400399e1\"\u003e\u003ccode\u003e75f077e\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eretry\u003c/code\u003e: Automatically retry on \u003ccode\u003e:pool_not_available\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/4cfbf54fa0649092d6426a26eb74613f400bb50f\"\u003e\u003ccode\u003e4cfbf54\u003c/code\u003e\u003c/a\u003e \u003ccode\u003erun_finch\u003c/code\u003e: Normalize Finch.TransportError,HTTPError (Finch 0.22+) (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.17...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.23.0 to 1.26.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.26.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated expected response in \u003ccode\u003emua_test.exs\u003c/code\u003e \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.1 patch release metadata \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded adapter for self-hosted Mailpit \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump req from 0.5.17 to 0.5.18 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1147\"\u003e#1147\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1152\"\u003eswoosh/swoosh#1152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.25.3...v1.26.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.25.3...v1.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.3 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.25.3 patch release notes \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1135\"\u003eswoosh/swoosh#1135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1132\"\u003eswoosh/swoosh#1132\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1142\"\u003eswoosh/swoosh#1142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1150\"\u003eswoosh/swoosh#1150\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.2...1.25.3\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.2...1.25.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare 1.25.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix release comment workflow repository checkout \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/317f847eb6ea8f89f0e8da0dcef046257d07f7a3\"\u003e\u003ccode\u003e317f847\u003c/code\u003e\u003c/a\u003e Prepare 1.26.1 patch release files (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/38057bafc00652293b49c2b9e31f6f104e98cf8d\"\u003e\u003ccode\u003e38057ba\u003c/code\u003e\u003c/a\u003e fix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0c7eafcefe7b09a29c5c81eaeb9dec828e9d999\"\u003e\u003ccode\u003ef0c7eaf\u003c/code\u003e\u003c/a\u003e Prepare 1.26.0 release files (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1153\"\u003e#1153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/60532a27f1733285725e308784424ba3ef5f5e4b\"\u003e\u003ccode\u003e60532a2\u003c/code\u003e\u003c/a\u003e Added adapter for self-hosted Mailpit (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/1d6dec8c4602d14b4e7fd3b8e672e133b68db21e\"\u003e\u003ccode\u003e1d6dec8\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1147\"\u003e#1147\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3580fe875cd0f29692fa4eb8b05f609c2a32f099\"\u003e\u003ccode\u003e3580fe8\u003c/code\u003e\u003c/a\u003e Prepare 1.25.3 patch release notes (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6f6f64395e99479d1303c65cce54f4066d31ad25\"\u003e\u003ccode\u003e6f6f643\u003c/code\u003e\u003c/a\u003e Fix Elixir 1.20 compilation warnings (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6f0d01cf4e0fd5da64d38061cb9101b4f99ae583\"\u003e\u003ccode\u003e6f0d01c\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1148\"\u003e#1148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7b67e3e34c59216f03620e2a6ff90b3e556203ca\"\u003e\u003ccode\u003e7b67e3e\u003c/code\u003e\u003c/a\u003e Bump bandit from 1.11.0 to 1.11.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1146\"\u003e#1146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/936c06c0111ea0a73e9425de3c47863cd183b962\"\u003e\u003ccode\u003e936c06c\u003c/code\u003e\u003c/a\u003e Bump cowboy from 2.14.2 to 2.15.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1140\"\u003e#1140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.23.0...v1.26.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.0 (Unreleased)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/28d1de0272408465fa21cf5cb07e29f46f1e24ca\"\u003e\u003ccode\u003e28d1de0\u003c/code\u003e\u003c/a\u003e Raise on boot when \u003ccode\u003e:path\u003c/code\u003e is set and one or more profiles configure \u003ccode\u003e:version\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/1dd71d814ca30a445c3fc1fd6c134eb5fe1bc9b9\"\u003e\u003ccode\u003e1dd71d8\u003c/code\u003e\u003c/a\u003e Refactor \u003ccode\u003econfigured_target/1\u003c/code\u003e to be consistent with \u003ccode\u003econfigured_version/1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/jjyy032659/Opentelemetry/pull/216","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jjyy032659%2FOpentelemetry/issues/216","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/216/packages"},{"uuid":"4465641880","node_id":"PR_kwDONKjU8M7ceZeT","number":64,"state":"open","title":"deps(deps): bump bandit from 1.10.4 to 1.11.1","user":"dependabot[bot]","labels":[],"assignees":["mithenji"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T01:29:12.000Z","updated_at":"2026-05-18T01:29:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.10.4 to 1.11.1.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.10.4\u0026new-version=1.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mithenji/mithenji.me/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mithenji%2Fmithenji.me/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"},{"uuid":"4464957238","node_id":"PR_kwDOSZz7r87ccThz","number":5,"state":"closed","title":"Bump the minor-updates group with 3 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-24T21:14:55.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T21:14:52.000Z","updated_at":"2026-05-24T21:14:57.000Z","time_to_close":604803,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-updates","update_count":3,"packages":[{"name":"ash","old_version":"3.24.7","new_version":"3.25.0","repository_url":"https://github.com/ash-project/ash"},{"name":"bandit","old_version":"1.11.0","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"postgrex","old_version":"0.22.1","new_version":"0.22.2","repository_url":"https://github.com/elixir-ecto/postgrex"}],"path":null,"ecosystem":"hex"},"body":"Bumps the minor-updates group with 3 updates: [ash](https://github.com/ash-project/ash), [bandit](https://github.com/mtrudel/bandit) and [postgrex](https://github.com/elixir-ecto/postgrex).\n\nUpdates `ash` from 3.24.7 to 3.25.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ash-project/ash/releases\"\u003eash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.25.0\u003c/h2\u003e\n\u003ch3\u003eFeatures:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eadd filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2704\"\u003eash-project/ash#2704\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2703\"\u003eash-project/ash#2703\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emanifest: pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2706\"\u003eash-project/ash#2706\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eManual relationships select missing (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e) by Kenneth Kostrešević [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2700\"\u003eash-project/ash#2700\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd query context to bulk destroy (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e) by danielatdpg [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2699\"\u003eash-project/ash#2699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd code interface validation hint for options (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e) by febarnett3 [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2697\"\u003eash-project/ash#2697\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve all errors in Required dedupe accumulator (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e) by sevenseacat [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2692\"\u003eash-project/ash#2692\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport filter checks on create actions by \u003ca href=\"https://github.com/zachdaniel\"\u003e\u003ccode\u003e@​zachdaniel\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ash-project/ash/blob/main/CHANGELOG.md\"\u003eash's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ash-project/ash/compare/v3.24.7...v3.25.0\"\u003ev3.25.0\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eFeatures:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eadd filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2704\"\u003eash-project/ash#2704\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2703\"\u003eash-project/ash#2703\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emanifest: pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2706\"\u003eash-project/ash#2706\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eManual relationships select missing (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e) by Kenneth Kostrešević [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2700\"\u003eash-project/ash#2700\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd query context to bulk destroy (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e) by danielatdpg [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2699\"\u003eash-project/ash#2699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd code interface validation hint for options (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e) by febarnett3 [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2697\"\u003eash-project/ash#2697\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve all errors in Required dedupe accumulator (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e) by sevenseacat [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2692\"\u003eash-project/ash#2692\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport filter checks on create actions by \u003ca href=\"https://github.com/zachdaniel\"\u003e\u003ccode\u003e@​zachdaniel\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/57ade2b48c9aea324cd6397bae4b823d0f74308c\"\u003e\u003ccode\u003e57ade2b\u003c/code\u003e\u003c/a\u003e chore: release version v3.25.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/1434071ef9d2d774e9eb4b0fc5b0de5b08710a98\"\u003e\u003ccode\u003e1434071\u003c/code\u003e\u003c/a\u003e docs: add example output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/c99338101838b3977cea42e4a9980a36bf54a5b5\"\u003e\u003ccode\u003ec993381\u003c/code\u003e\u003c/a\u003e docs: add guide for code generation with the manifest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/34647d45d454015dda6153b7bbf5aa101e7166af\"\u003e\u003ccode\u003e34647d4\u003c/code\u003e\u003c/a\u003e chore: add private actions options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/2ac20ee010eaf686e4973883403045c74b474215\"\u003e\u003ccode\u003e2ac20ee\u003c/code\u003e\u003c/a\u003e fix(manifest): pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/cfd2a4772b7be58a02891211800fa49aba351055\"\u003e\u003ccode\u003ecfd2a47\u003c/code\u003e\u003c/a\u003e chore: cleanups for new Manifest structures\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/fbaf9ebde7a6021316c5074f0411a2e1ad7a24f7\"\u003e\u003ccode\u003efbaf9eb\u003c/code\u003e\u003c/a\u003e improvement: support filter checks on create actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/ae55d1459ddd299efdf1bfea8478cb4bafd539b0\"\u003e\u003ccode\u003eae55d14\u003c/code\u003e\u003c/a\u003e Feat: add filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/26d5eaf8c1ce0dac7c86a1e145c0c24726f09299\"\u003e\u003ccode\u003e26d5eaf\u003c/code\u003e\u003c/a\u003e chore: a few nits on manifest code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/5aa736de6033da098f8c91973b4a0cf81a4aec9f\"\u003e\u003ccode\u003e5aa736d\u003c/code\u003e\u003c/a\u003e feat: \u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ash-project/ash/compare/v3.24.7...v3.25.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bandit` from 1.11.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.0...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postgrex` from 0.22.1 to 0.22.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md\"\u003epostgrex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.22.2 (2026-05-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity\n\u003cul\u003e\n\u003cli\u003eEscape quotes in channel names in \u003ccode\u003ePostgrex.Notifications.listen/3\u003c/code\u003e (CVE-2026-32687)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-ecto/postgrex/commit/f1ffdb5e1894165ce95feb4e678cb91e5d76d6e1\"\u003e\u003ccode\u003ef1ffdb5\u003c/code\u003e\u003c/a\u003e Release v0.22.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-ecto/postgrex/commit/7cdedbd4316bb65f82e6a9a4f922c0ac491cb770\"\u003e\u003ccode\u003e7cdedbd\u003c/code\u003e\u003c/a\u003e Escape quotes, check null bytes, and name length for channel names\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/elixir-ecto/postgrex/compare/v0.22.1...v0.22.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/onnenon/receipts/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/onnenon%2Freceipts/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"},{"uuid":"4463481151","node_id":"PR_kwDORLKw3s7cX6rH","number":17,"state":"closed","title":"chore(deps): bump the prod-dependencies group with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-17T22:53:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T12:34:49.000Z","updated_at":"2026-05-17T22:53:36.000Z","time_to_close":37125,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"prod-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.11.0","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"bb","old_version":"0.15.2","new_version":"0.16.0","repository_url":"https://github.com/beam-bots/bb"},{"name":"bb_ik_dls","old_version":"0.3.1","new_version":"0.3.3","repository_url":"https://github.com/beam-bots/bb_ik_dls"},{"name":"bb_liveview","old_version":"0.2.4","new_version":"0.2.7","repository_url":"https://github.com/beam-bots/bb_liveview"},{"name":"bb_reactor","old_version":"0.2.1","new_version":"0.2.3","repository_url":"https://github.com/beam-bots/bb_reactor"},{"name":"bb_servo_feetech","old_version":"0.2.2","new_version":"0.2.4","repository_url":"https://github.com/beam-bots/bb_servo_feetech"},{"name":"nx","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/elixir-nx/nx"}],"path":null,"ecosystem":"hex"},"body":"Bumps the prod-dependencies group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.11.0` | `1.11.1` |\n| [bb](https://github.com/beam-bots/bb) | `0.15.2` | `0.16.0` |\n| [bb_ik_dls](https://github.com/beam-bots/bb_ik_dls) | `0.3.1` | `0.3.3` |\n| [bb_liveview](https://github.com/beam-bots/bb_liveview) | `0.2.4` | `0.2.7` |\n| [bb_reactor](https://github.com/beam-bots/bb_reactor) | `0.2.1` | `0.2.3` |\n| [bb_servo_feetech](https://github.com/beam-bots/bb_servo_feetech) | `0.2.2` | `0.2.4` |\n| [nx](https://github.com/elixir-nx/nx) | `0.11.0` | `0.12.0` |\n\nUpdates `bandit` from 1.11.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.0...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb` from 0.15.2 to 0.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb/releases\"\u003ebb's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.16.0\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emigrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eforce-disarm via topology supervisor instead of \u003ccode\u003eauto_disarm_on_error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/95\"\u003e#95\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003estore wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/94\"\u003e#94\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eidentify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ecoerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.15.4\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for writing into the topology section (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/87\"\u003e#87\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.15.3\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for add-on installers (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/86\"\u003e#86\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb/blob/main/CHANGELOG.md\"\u003ebb's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.4...v0.16.0\"\u003ev0.16.0\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emigrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eforce-disarm via topology supervisor instead of \u003ccode\u003eauto_disarm_on_error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/95\"\u003e#95\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003estore wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/94\"\u003e#94\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eidentify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ecoerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.3...v0.15.4\"\u003ev0.15.4\u003c/a\u003e (2026-05-16)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for writing into the topology section (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/87\"\u003e#87\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.2...v0.15.3\"\u003ev0.15.3\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for add-on installers (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/86\"\u003e#86\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/084ab8561ddd62a6604d40e4d886cac7527176ac\"\u003e\u003ccode\u003e084ab85\u003c/code\u003e\u003c/a\u003e chore: release version v0.16.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/31384291211a5239982a63ce65405009b863af92\"\u003e\u003ccode\u003e3138429\u003c/code\u003e\u003c/a\u003e improvement!: migrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/a7462b455330168d801efe55f5c043525e24977c\"\u003e\u003ccode\u003ea7462b4\u003c/code\u003e\u003c/a\u003e improvement!: force-disarm via topology supervisor instead of `auto_disarm_on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/81d268f399ac65d6a54559d84ece981713b575aa\"\u003e\u003ccode\u003e81d268f\u003c/code\u003e\u003c/a\u003e improvement!: store wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/6109c343a64f368b2688bf575110945869c0f4c0\"\u003e\u003ccode\u003e6109c34\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/89\"\u003e#89\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/fa8cf62452f03419c3fc751e26df952cf2cbb8de\"\u003e\u003ccode\u003efa8cf62\u003c/code\u003e\u003c/a\u003e chore(deps): bump the prod-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/90\"\u003e#90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/896764f1963a738fa3081579e2ad6b442b6db645\"\u003e\u003ccode\u003e896764f\u003c/code\u003e\u003c/a\u003e fix: cover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/ac117893ce1a22ac04225beff6892f6bb9e72849\"\u003e\u003ccode\u003eac11789\u003c/code\u003e\u003c/a\u003e improvement: identify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/ca3c8b0e314b34d1e43021be6fdcce16ca8484c4\"\u003e\u003ccode\u003eca3c8b0\u003c/code\u003e\u003c/a\u003e improvement: coerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/253c315a04b03c4862fa5e61ace8dfae9b465334\"\u003e\u003ccode\u003e253c315\u003c/code\u003e\u003c/a\u003e chore: release version v0.15.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.2...v0.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_ik_dls` from 0.3.1 to 0.3.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/releases\"\u003ebb_ik_dls's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.3.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.3.2\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erespect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/blob/main/CHANGELOG.md\"\u003ebb_ik_dls's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.2...v0.3.3\"\u003ev0.3.3\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.1...v0.3.2\"\u003ev0.3.2\u003c/a\u003e (2026-05-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erespect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/454684982d18330066d88f42552020aa1a26a6b2\"\u003e\u003ccode\u003e4546849\u003c/code\u003e\u003c/a\u003e chore: release version v0.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/6d675c14ef515e3c328175c46df3f3507379ad44\"\u003e\u003ccode\u003e6d675c1\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/70b2e2a9a7f314e16b25a32eda62ce6b0584128e\"\u003e\u003ccode\u003e70b2e2a\u003c/code\u003e\u003c/a\u003e chore: release version v0.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/c1fd4965a89ef3a9276d17896cb579cd9c04a8e3\"\u003e\u003ccode\u003ec1fd496\u003c/code\u003e\u003c/a\u003e chore(deps): Update bb to 0.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/290000c9d95e25958a5bf34acdd4502a0595d808\"\u003e\u003ccode\u003e290000c\u003c/code\u003e\u003c/a\u003e fix: respect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/b8f38724539d4aa786bbe97d8ec9ca547daec095\"\u003e\u003ccode\u003eb8f3872\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump ex_doc in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/4e65f950a8155f4516f900759ba62893eb3a0d6c\"\u003e\u003ccode\u003e4e65f95\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.9 to 0.8.0 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/23\"\u003e#23\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/9d5463cfa2ce5fad7130b733f429aed5c3e4e988\"\u003e\u003ccode\u003e9d5463c\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/20\"\u003e#20\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/7fd4ed9d0cec9c62cb2ae56664d0e4932a6d2984\"\u003e\u003ccode\u003e7fd4ed9\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/c33342ed1b176500af627bf883e0615ae6b839f3\"\u003e\u003ccode\u003ec33342e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/19\"\u003e#19\u003c/a\u003e from beam-bots/dependabot/hex/igniter-0.7.7\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.1...v0.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_liveview` from 0.2.4 to 0.2.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_liveview/releases\"\u003ebb_liveview's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.7\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erender :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edisplay event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.2.6\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ephoenix bootstrap + endpoint plug injection in \u003ccode\u003ebb_liveview.install\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/43\"\u003e#43\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.2.5\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_liveview/blob/main/CHANGELOG.md\"\u003ebb_liveview's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.6...v0.2.7\"\u003ev0.2.7\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erender :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edisplay event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.5...v0.2.6\"\u003ev0.2.6\u003c/a\u003e (2026-05-16)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ephoenix bootstrap + endpoint plug injection in \u003ccode\u003ebb_liveview.install\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/43\"\u003e#43\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.4...v0.2.5\"\u003ev0.2.5\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/02b2fb8cc560b3aca5d9856af59aec07f7736c79\"\u003e\u003ccode\u003e02b2fb8\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/8df9afbc046aadf4ac2591f4b0c6e6ab242a07f5\"\u003e\u003ccode\u003e8df9afb\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/798881b82b8dbc68bb1d18702bfa07747e11943e\"\u003e\u003ccode\u003e798881b\u003c/code\u003e\u003c/a\u003e fix: render :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/022a6d4a204f2e6832ce666668ca2749148b3962\"\u003e\u003ccode\u003e022a6d4\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump bandit from 1.11.0 to 1.11.1 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/47\"\u003e#47\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/d7156583d8e34f174219958bb9f6af29fbba9df8\"\u003e\u003ccode\u003ed715658\u003c/code\u003e\u003c/a\u003e improvement: display event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/65cc8f6a44e2364e98c854ccef794c25ead2f818\"\u003e\u003ccode\u003e65cc8f6\u003c/code\u003e\u003c/a\u003e fix: preserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/4836a7b16f25ea8faed29d1fb2f10aae7e7749ed\"\u003e\u003ccode\u003e4836a7b\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/a0abebcbc433c0fbf9490bfff21cfbef13838bf7\"\u003e\u003ccode\u003ea0abebc\u003c/code\u003e\u003c/a\u003e improvement: phoenix bootstrap + endpoint plug injection in `bb_liveview.inst...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/6fbbe24cc15ee3709dcd4a518f14101a9def1e3a\"\u003e\u003ccode\u003e6fbbe24\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/b915b27bd8f9fca5cdc2a0f6b25beb2762d0a492\"\u003e\u003ccode\u003eb915b27\u003c/code\u003e\u003c/a\u003e improvement: add \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.4...v0.2.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_reactor` from 0.2.1 to 0.2.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_reactor/releases\"\u003ebb_reactor's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.2.2\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd basic igniter installer by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_reactor/blob/main/CHANGELOG.md\"\u003ebb_reactor's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.2...v0.2.3\"\u003ev0.2.3\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.1...v0.2.2\"\u003ev0.2.2\u003c/a\u003e (2026-05-15)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd basic igniter installer by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/0476fff39379325c252e6be6657bf34fba6cc9e1\"\u003e\u003ccode\u003e0476fff\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/6c65e4cfbf513171c223d5297451901f67b6181b\"\u003e\u003ccode\u003e6c65e4c\u003c/code\u003e\u003c/a\u003e chore: align with bb 0.16 safety semantics (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/68e7323c7d5db8d04176800d878dbba63010636d\"\u003e\u003ccode\u003e68e7323\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/0b44cba9e035248355b33dfc7884eacf066cc9ff\"\u003e\u003ccode\u003e0b44cba\u003c/code\u003e\u003c/a\u003e improvement: Add basic igniter installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/20c597571fedd6485903dded1218ed366953e96a\"\u003e\u003ccode\u003e20c5975\u003c/code\u003e\u003c/a\u003e chore(deps): update bb to 0.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/684e7e2b203da0259d6cf8d5002e93e0593a3ab8\"\u003e\u003ccode\u003e684e7e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump reactor from 1.0.0 to 1.0.1 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/20\"\u003e#20\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/9b3b7746298d5b8d28efa7c27cdeafe7562cb8ee\"\u003e\u003ccode\u003e9b3b774\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/4074a1851b494a2151c7cca098aa8e95ae1f2f4c\"\u003e\u003ccode\u003e4074a18\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/030271ed3d750c64547f3ae2074c44df17346a4a\"\u003e\u003ccode\u003e030271e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/17\"\u003e#17\u003c/a\u003e from beam-bots/dependabot/hex/dev-dependencies-c15e7130e8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/b833bdca836717468c3fe34067a02ca83cf9d30d\"\u003e\u003ccode\u003eb833bdc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/18\"\u003e#18\u003c/a\u003e from beam-bots/dependabot/hex/igniter-0.7.7\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.1...v0.2.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_servo_feetech` from 0.2.2 to 0.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/releases\"\u003ebb_servo_feetech's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.2.3\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/blob/main/CHANGELOG.md\"\u003ebb_servo_feetech's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_pca9685/compare/v0.2.3...v0.2.4\"\u003ev0.2.4\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_pca9685/compare/v0.2.2...v0.2.3\"\u003ev0.2.3\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/50f64f662e51f85169075aa26ceea8f5b27469e9\"\u003e\u003ccode\u003e50f64f6\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/20605bfe1e09cf1a4b0ff8ab9a59338551729920\"\u003e\u003ccode\u003e20605bf\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/26\"\u003e#26\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/5e5788e1581d437264e4eb4e107417f9747aad1d\"\u003e\u003ccode\u003e5e5788e\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/1761292cd4cde8ab57e52e8499770f6ed7001607\"\u003e\u003ccode\u003e1761292\u003c/code\u003e\u003c/a\u003e improvement: add \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/bdbb53146f57463de6694b08c166e30e8bf8d586\"\u003e\u003ccode\u003ebdbb531\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump ex_doc in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/44dcabaebdd96c74eddc43927a7dc8b25cbe65db\"\u003e\u003ccode\u003e44dcaba\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/c78833cbe363859b6a9a709ea6f9177c5738bef6\"\u003e\u003ccode\u003ec78833c\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/23\"\u003e#23\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/3164bfd90ee28dce60f89848a7379a45d8c53052\"\u003e\u003ccode\u003e3164bfd\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump git_ops in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/compare/v0.2.2...v0.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nx` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-nx/nx/releases\"\u003enx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0 - 2026-05-15\u003c/h2\u003e\n\u003cp\u003eSee the changelogs for individual libraries for a semantic set of changes\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blasphemetheus\"\u003e\u003ccode\u003e@​blasphemetheus\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/elixir-nx/nx/pull/1676\"\u003eelixir-nx/nx#1676\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jeffreyksmithjr\"\u003e\u003ccode\u003e@​jeffreyksmithjr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/elixir-nx/nx/pull/1715\"\u003eelixir-nx/nx#1715\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/b0f75edd23fe201a3e9f10e42f2c2451514a65c7\"\u003e\u003ccode\u003eb0f75ed\u003c/code\u003e\u003c/a\u003e update nx/complex lock in exla and torchx\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/b22078978457ff2fb6e7a8b14672c3d44f92607f\"\u003e\u003ccode\u003eb220789\u003c/code\u003e\u003c/a\u003e chore: update to complex 0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/c5871f31c64f9934124d91f276782f12b2424861\"\u003e\u003ccode\u003ec5871f3\u003c/code\u003e\u003c/a\u003e bump to 0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/cdcf58da8199d86f3e1097d5fd2326017344989b\"\u003e\u003ccode\u003ecdcf58d\u003c/code\u003e\u003c/a\u003e fix: torchx visibility hidden and exla write_to_pointer no-op definition in p...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/48d7b0de48ed411278db641a47e24e4d77f8ea0e\"\u003e\u003ccode\u003e48d7b0d\u003c/code\u003e\u003c/a\u003e docs: don't leak internal EXLA details in CustomCall docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/5febc3fbc2c28ff05704fcda80226f1bad0688a0\"\u003e\u003ccode\u003e5febc3f\u003c/code\u003e\u003c/a\u003e Refactor EXLA block lowering through EXLA.CustomCall protocol (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1739\"\u003e#1739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/1c3d86eb635e136eab7d5a1a12a57794c200d204\"\u003e\u003ccode\u003e1c3d86e\u003c/code\u003e\u003c/a\u003e fix: Nx.block with EXLA JIT (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1750\"\u003e#1750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/fb89cf4f998728007d3b02f92ea118e0a13fe60b\"\u003e\u003ccode\u003efb89cf4\u003c/code\u003e\u003c/a\u003e Silence type system warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/84a2ef16e671fa0a59c76d4c752d1274df2a78a3\"\u003e\u003ccode\u003e84a2ef1\u003c/code\u003e\u003c/a\u003e Group all Nx.Block in docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/a53bbaed938257e62b0df84131e2d0573c616e63\"\u003e\u003ccode\u003ea53bbae\u003c/code\u003e\u003c/a\u003e chore: rename linalg blocks (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1738\"\u003e#1738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/beam-bots/bb_example_so101/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/beam-bots%2Fbb_example_so101/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"},{"uuid":"4442131453","node_id":"PR_kwDOSJ-KK87bVPNI","number":54,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T01:42:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-14T00:37:47.000Z","updated_at":"2026-05-21T01:42:26.000Z","time_to_close":608677,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":5,"packages":[{"name":"bandit","old_version":"1.10.3","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.7","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.26","new_version":"1.1.30","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.23.0","new_version":"1.25.2","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 5 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.3` | `1.11.1` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.7` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.26` | `1.1.30` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.23.0` | `1.25.2` |\n\n\nUpdates `bandit` from 1.10.3 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.10.4 (25 Mar 2026)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport \u003ccode\u003e{:shutdown, :disconnected}\u003c/code\u003e as a normal WebSocket result code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/576\"\u003e#576\u003c/a\u003e, thanks \u003ca href=\"https://github.com/wwitek-whatnot\"\u003e\u003ccode\u003e@​wwitek-whatnot\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.3...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://hexdocs.pm/phoenix/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ba3a131552add5758c021ff4c6e9b6947bb5a205\"\u003e\u003ccode\u003eba3a131\u003c/code\u003e\u003c/a\u003e Release v1.8.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e74eaccb8e909826a50c9e8095cd1694dace289c\"\u003e\u003ccode\u003ee74eacc\u003c/code\u003e\u003c/a\u003e fix invalid status on longpoll window timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/035fde9ac29920d4c040be91fdb7508295579036\"\u003e\u003ccode\u003e035fde9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eb5f52f683b148f30aa528d365b301d2c51a4b59\"\u003e\u003ccode\u003eeb5f52f\u003c/code\u003e\u003c/a\u003e Correctly serialize non ASCII metadata (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6664\"\u003e#6664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a99c5e8974f98c57aa4c883da51f57b582c0225c\"\u003e\u003ccode\u003ea99c5e8\u003c/code\u003e\u003c/a\u003e Filter token parameters by default (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6665\"\u003e#6665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/21901113ec7aa5158ad7748170bb9c3b3254861b\"\u003e\u003ccode\u003e2190111\u003c/code\u003e\u003c/a\u003e update installer version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ddcdadb7de1132d630bbbe56f975e66f85f36416\"\u003e\u003ccode\u003eddcdadb\u003c/code\u003e\u003c/a\u003e Release v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1a67c61ff9ce0a7711662ac7354861917a7c80f7\"\u003e\u003ccode\u003e1a67c61\u003c/code\u003e\u003c/a\u003e prevent unexpected memory usage on nd-json body splitting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8ca76a2c57fb189733e67c3fb72098d1092ef60c\"\u003e\u003ccode\u003e8ca76a2\u003c/code\u003e\u003c/a\u003e fix a couple of typos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6672\"\u003e#6672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/6214d83ac87fe87170bf2a8525b3404af1517705\"\u003e\u003ccode\u003e6214d83\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.6 to 8.5.13 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6671\"\u003e#6671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.26 to 1.1.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround Chrome bug when patching \u003ccode\u003e\\\u0026lt;template\u0026gt;\u003c/code\u003e elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4163\"\u003e#4163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix more type warnings on Elixir 1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.30/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround Chrome bug when patching \u003ccode\u003e\\\u0026lt;template\u0026gt;\u003c/code\u003e elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4163\"\u003e#4163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix more type warnings on Elixir 1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdbbe52011812943d90dc4a3d46f4c0740d86bd2\"\u003e\u003ccode\u003efdbbe52\u003c/code\u003e\u003c/a\u003e Release v1.1.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/970932be5fa7b4313994ba3b68f0a55ff74f9a2c\"\u003e\u003ccode\u003e970932b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/ff31d012fbeeedd38f13c9836d5d4fbfc22750b8\"\u003e\u003ccode\u003eff31d01\u003c/code\u003e\u003c/a\u003e Ensure phx-viewport hook does not fail if there's no scrollContainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.26...v1.1.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.23.0 to 1.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare 1.25.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix release comment workflow repository checkout \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump jason from 1.4.4 to 1.4.5 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1130\"\u003e#1130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump bandit from 1.10.4 to 1.11.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1129\"\u003e#1129\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.0 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare minor release 1.25.0 \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1122\"\u003e#1122\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Add Swoosh.Adapters.Sandbox \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release-published workflow to comment on released PRs \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1118\"\u003e#1118\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump bandit from 1.10.3 to 1.10.4 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.24.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release-published workflow to comment on released PRs \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1118\"\u003e#1118\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.24.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd Azure Communication Services adapter \u003ca href=\"https://github.com/jamilbk\"\u003e\u003ccode\u003e@​jamilbk\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1116\"\u003e#1116\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.23.1\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tracking options to the mailjet adapter \u003ca href=\"https://github.com/wkirschbaum\"\u003e\u003ccode\u003e@​wkirschbaum\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1114\"\u003e#1114\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove unused require Logger compilation warning \u003ca href=\"https://github.com/wkirschbaum\"\u003e\u003ccode\u003e@​wkirschbaum\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1115\"\u003e#1115\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7baea5c965c441164ffb524855002f454e2da026\"\u003e\u003ccode\u003e7baea5c\u003c/code\u003e\u003c/a\u003e Bump jason from 1.4.4 to 1.4.5 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1130\"\u003e#1130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/37342caa1d5d5485fb17ff5df2575e77be8a8a3c\"\u003e\u003ccode\u003e37342ca\u003c/code\u003e\u003c/a\u003e chore: prepare 1.25.2 patch release (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f6eedb4b9a2905c2ec8df0a106664bd274c4588d\"\u003e\u003ccode\u003ef6eedb4\u003c/code\u003e\u003c/a\u003e fix(config): prioritize runtime config for Mailer (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/5596e9789ef92893cbfb5f11630b247d6f877e6b\"\u003e\u003ccode\u003e5596e97\u003c/code\u003e\u003c/a\u003e Bump bandit from 1.10.4 to 1.11.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1129\"\u003e#1129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f656c6b55277f8c1b76f2429f3621d5a6aed333c\"\u003e\u003ccode\u003ef656c6b\u003c/code\u003e\u003c/a\u003e Fix release comment workflow checkout (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.23.0...v1.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/honeycombio/ced-opentelemetry-demo-app-academy-courses/pull/54","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/honeycombio%2Fced-opentelemetry-demo-app-academy-courses/issues/54","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/54/packages"},{"uuid":"4425584652","node_id":"PR_kwDOQF4m787afaFR","number":173,"state":"open","title":"deps(elixir): bump the elixir-query-service group across 1 directory with 8 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-12T01:54:07.000Z","updated_at":"2026-05-12T01:55:47.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(elixir): bump","group_name":"elixir-query-service","update_count":8,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"broadway","old_version":"1.2.1","new_version":"1.3.0","repository_url":"https://github.com/dashbitco/broadway"},{"name":"ex_doc","old_version":"0.40.1","new_version":"0.40.2","repository_url":"https://github.com/elixir-lang/ex_doc"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"mint","old_version":"1.7.1","new_version":"1.8.0","repository_url":"https://github.com/elixir-mint/mint"},{"name":"open_api_spex","old_version":"3.22.2","new_version":"3.22.3","repository_url":"https://github.com/open-api-spex/open_api_spex"},{"name":"tesla","old_version":"1.16.0","new_version":"1.17.0","repository_url":"https://github.com/elixir-tesla/tesla"}],"path":null,"ecosystem":"hex"},"body":"Bumps the elixir-query-service group with 7 updates in the /apps/query-service directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.4` | `1.11.0` |\n| [broadway](https://github.com/dashbitco/broadway) | `1.2.1` | `1.3.0` |\n| [ex_doc](https://github.com/elixir-lang/ex_doc) | `0.40.1` | `0.40.2` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [mint](https://github.com/elixir-mint/mint) | `1.7.1` | `1.8.0` |\n| [open_api_spex](https://github.com/open-api-spex/open_api_spex) | `3.22.2` | `3.22.3` |\n| [tesla](https://github.com/elixir-tesla/tesla) | `1.16.0` | `1.17.0` |\n\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `broadway` from 1.2.1 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dashbitco/broadway/blob/main/CHANGELOG.md\"\u003ebroadway's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.0 (2026-04-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd telemetry events around \u003ccode\u003ehandle_failed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eInclude producer metadata in telemetry events\u003c/li\u003e\n\u003cli\u003eAdd labels to Broadway stages\u003c/li\u003e\n\u003cli\u003eFix race condition during graceful shutdown\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d3a668c885342ae223b5ebcd9571efe4a0f18c41\"\u003e\u003ccode\u003ed3a668c\u003c/code\u003e\u003c/a\u003e Release v1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/dd2f40571ac463bbc56f949b6c1f8d33fd6cc665\"\u003e\u003ccode\u003edd2f405\u003c/code\u003e\u003c/a\u003e Include producer metadata in per-message events (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/370\"\u003e#370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/966c59ad95ddb6aa75c91e71848cfc617bef3a8e\"\u003e\u003ccode\u003e966c59a\u003c/code\u003e\u003c/a\u003e Add :telemetry.span for handle_failed/2 callback (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/370f180e853a33978f1822432c66bea61f9d98ef\"\u003e\u003ccode\u003e370f180\u003c/code\u003e\u003c/a\u003e Clarify some docs related to GenStage demand (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/69d90526dc7c1003d1b9fff5092645eb4fbe9e48\"\u003e\u003ccode\u003e69d9052\u003c/code\u003e\u003c/a\u003e Bump Elixir/Erlang CI matrix and GitHub actions (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/8c6616475acc874f185ffabaffc92554eefefbfc\"\u003e\u003ccode\u003e8c66164\u003c/code\u003e\u003c/a\u003e Add Process.set_label/1 to Broadway stages (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d32d30deb64dc4481f2743f6a0d8606299690046\"\u003e\u003ccode\u003ed32d30d\u003c/code\u003e\u003c/a\u003e Catch exits if already down when trapping exits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/f52f2f793e16e1c976f5e52adc372457d1445b73\"\u003e\u003ccode\u003ef52f2f7\u003c/code\u003e\u003c/a\u003e Fix graceful shutdown race condition (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/136bea6786ae1526721a98a93ca9d752543c3a7d\"\u003e\u003ccode\u003e136bea6\u003c/code\u003e\u003c/a\u003e Add batch_size/0 and batch_size_fun/0 types (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/7977502abbf3c0b06ea1fbbae415dff3932fb796\"\u003e\u003ccode\u003e7977502\u003c/code\u003e\u003c/a\u003e Add new unofficial producer off_broadway_emqtt (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dashbitco/broadway/compare/v1.2.1...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ex_doc` from 0.40.1 to 0.40.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-lang/ex_doc/blob/main/CHANGELOG.md\"\u003eex_doc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.40.2 (2026-05-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBug fixes\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erel=\u0026quot;nofollow\u0026quot;\u003c/code\u003e to external links in HTML output\u003c/li\u003e\n\u003cli\u003eUse blockquote in \u003ccode\u003ellms.txt\u003c/code\u003e description\u003c/li\u003e\n\u003cli\u003eVoid elements in \u003ccode\u003eepub\u003c/code\u003e, such \u003ccode\u003ewbr\u003c/code\u003e, must be terminated by the matching end-tag\u003c/li\u003e\n\u003cli\u003eFix content container scrolling in older versions of Safari\u003c/li\u003e\n\u003cli\u003eSkip HTML comments when computing synopsis\u003c/li\u003e\n\u003cli\u003eFix markdown backend code fence language and opaque type display\u003c/li\u003e\n\u003cli\u003eFix false positive warning when linking to asset files\u003c/li\u003e\n\u003cli\u003ePrevent \u003ccode\u003e#search\u003c/code\u003e selector from impacting user content\u003c/li\u003e\n\u003cli\u003eRaise on extras that conflict with reserved filenames\u003c/li\u003e\n\u003cli\u003eFix styling of admonition blocks\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/c868c6a9dfb4da78ebaf31b153a16a5bc169b6ff\"\u003e\u003ccode\u003ec868c6a\u003c/code\u003e\u003c/a\u003e Release v0.40.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/b9cc3723816cffeab5d4a5acc89d02e910efcb8b\"\u003e\u003ccode\u003eb9cc372\u003c/code\u003e\u003c/a\u003e Update makeup_erlang version (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2236\"\u003e#2236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/b389d1733af711a52cd0bf27e5f27797d629bca7\"\u003e\u003ccode\u003eb389d17\u003c/code\u003e\u003c/a\u003e Fix dead code and overriden clauses found by the type system\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/25523c9d377158e98b0a2f1c2815456988049f3b\"\u003e\u003ccode\u003e25523c9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/dbed340cf31fd5421dd79e2c625efc8b4f3cd21b\"\u003e\u003ccode\u003edbed340\u003c/code\u003e\u003c/a\u003e Raise on extras that conflict with reserved filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/2808e459dbb5047befe5d51fbe9a9d1d8d0469f5\"\u003e\u003ccode\u003e2808e45\u003c/code\u003e\u003c/a\u003e Prevent #search selector from impacting user content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/bc909685fd41f0e16f6714403bf520301ef3f28f\"\u003e\u003ccode\u003ebc90968\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/93339793797f0e40058e5400fbf1c9bd6cdd9109\"\u003e\u003ccode\u003e9333979\u003c/code\u003e\u003c/a\u003e Fix inline code font size in headings (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2220\"\u003e#2220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/974b26305a1bd008f84e81526130fe01995f75ac\"\u003e\u003ccode\u003e974b263\u003c/code\u003e\u003c/a\u003e Raise on duplicate entries in files in :extras (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2226\"\u003e#2226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/af07dd786a9e6a09b7681ce99cc48d5c219ead20\"\u003e\u003ccode\u003eaf07dd7\u003c/code\u003e\u003c/a\u003e Fix false positive warning when linking to asset files (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2225\"\u003e#2225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-lang/ex_doc/compare/v0.40.1...v0.40.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mint` from 1.7.1 to 1.8.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-mint/mint/blob/main/CHANGELOG.md\"\u003emint's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.0\u003c/h2\u003e\n\u003ch3\u003eNew features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise the default HTTP/2 receive windows to 16 MB (connection) and 4 MB (stream), and batch HTTP/2 receive-window refills. The larger windows lift the per-stream throughput cap (\u003ccode\u003ewindow / RTT\u003c/code\u003e), giving substantially higher throughput on higher-latency connections, in exchange for higher peak memory use per connection. The connection-level window is now configurable via the new \u003ccode\u003e:connection_window_size\u003c/code\u003e option to \u003ccode\u003eMint.HTTP.connect/4\u003c/code\u003e, and refill batching is configurable via the new \u003ccode\u003e:receive_window_update_threshold\u003c/code\u003e option.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMint.HTTP2.set_window_size/3\u003c/code\u003e for advertising a larger receive window to the server after a connection has been established.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMint.HTTP.request_body_window/2\u003c/code\u003e for querying the available send-window when streaming a request body.\u003c/li\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003e:optional_responses\u003c/code\u003e option for \u003ccode\u003eMint.HTTP1.connect/4\u003c/code\u003e, with a \u003ccode\u003e:status_reason\u003c/code\u003e value that surfaces the HTTP/1.1 status reason-phrase as a new \u003ccode\u003e{:status_reason, request_ref, reason_phrase}\u003c/code\u003e response.\u003c/li\u003e\n\u003cli\u003eChange \u003ccode\u003et:Mint.HTTP.t/0\u003c/code\u003e from an opaque to an open type.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003et:Mint.HTTPError.reason/0\u003c/code\u003e and \u003ccode\u003et:Mint.TransportError.reason/0\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes and Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix HTTP/1 handling of \u003ccode\u003e1xx\u003c/code\u003e informational responses.\u003c/li\u003e\n\u003cli\u003eForbid or replace empty targets in HTTP/1.1 requests.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/ef8f3a1160ee579d1a0db6311eb02ea63e7cc151\"\u003e\u003ccode\u003eef8f3a1\u003c/code\u003e\u003c/a\u003e Release v1.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/ddf2e1d09116ae996c1c887213142b91945bfb68\"\u003e\u003ccode\u003eddf2e1d\u003c/code\u003e\u003c/a\u003e Document since-version for new HTTP/2 receive-window options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4c4bf9139db8923c9045baa6d0da947b31aaf4ba\"\u003e\u003ccode\u003e4c4bf91\u003c/code\u003e\u003c/a\u003e feat: polymorphic helper for request body streaming (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/485\"\u003e#485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4fca8832e8fad34b90d29ef80df1dc29ccd925bd\"\u003e\u003ccode\u003e4fca883\u003c/code\u003e\u003c/a\u003e Raise default HTTP/2 receive windows and batch HTTP/2 receive-window refills ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4a195ffb5536719985d1bc3d22b7eadc21ee1651\"\u003e\u003ccode\u003e4a195ff\u003c/code\u003e\u003c/a\u003e Add Mint.HTTP2.set_window_size/3 (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/480\"\u003e#480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/d3fee6e3d3cedc63ba4eae01d17bc5236b0b623f\"\u003e\u003ccode\u003ed3fee6e\u003c/code\u003e\u003c/a\u003e Change Mint.HTTP.t() from opaque to open type (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/483\"\u003e#483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/e3c291c11130936c9ebeed0d12f67646630679b7\"\u003e\u003ccode\u003ee3c291c\u003c/code\u003e\u003c/a\u003e Fix HTTP/1 handling of 1xx informational responses (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/479\"\u003e#479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/1a82c1d0f7869719f719a1fa5817c80d430ddbaa\"\u003e\u003ccode\u003e1a82c1d\u003c/code\u003e\u003c/a\u003e Support Elixir ~\u0026gt; 1.12 (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/478\"\u003e#478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/2a78a5b99e515e15bee164c2bf221671d8be718f\"\u003e\u003ccode\u003e2a78a5b\u003c/code\u003e\u003c/a\u003e Run HTTP/2 integration tests against local Caddy instead of nghttp2.org (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/482\"\u003e#482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/0bfcc869b53b83989c24ba681d66d0a447b5a1c3\"\u003e\u003ccode\u003e0bfcc86\u003c/code\u003e\u003c/a\u003e Add a couple of \u003ca href=\"https://github.com/typedocs\"\u003e\u003ccode\u003e@​typedocs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-mint/mint/compare/v1.7.1...v1.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `open_api_spex` from 3.22.2 to 3.22.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-api-spex/open_api_spex/releases\"\u003eopen_api_spex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.22.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: removed unused require(s) by \u003ca href=\"https://github.com/David-Klemenc\"\u003e\u003ccode\u003e@​David-Klemenc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/700\"\u003eopen-api-spex/open_api_spex#700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelax decimal requirement by \u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\"\u003ehttps://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-api-spex/open_api_spex/blob/master/CHANGELOG.md\"\u003eopen_api_spex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.22.3 - 2026-05-05\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: removed unused require(s) by \u003ca href=\"https://github.com/David-Klemenc\"\u003e\u003ccode\u003e@​David-Klemenc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/700\"\u003eopen-api-spex/open_api_spex#700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelax decimal requirement by \u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/8850f32e72f978a40043d7fdeec604da2df49b00\"\u003e\u003ccode\u003e8850f32\u003c/code\u003e\u003c/a\u003e Release version 3.22.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/1377df0177133a0177f901e9ff5e859d878374a7\"\u003e\u003ccode\u003e1377df0\u003c/code\u003e\u003c/a\u003e Relax decimal requirement (\u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/issues/702\"\u003e#702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/224d1e1c3454c88aca57fdfd567983d113d9826a\"\u003e\u003ccode\u003e224d1e1\u003c/code\u003e\u003c/a\u003e chore: removed unused require(s) (\u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/issues/700\"\u003e#700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry` from 1.4.1 to 1.4.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry/blob/main/CHANGELOG.md\"\u003etelemetry's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-telemetry/telemetry/tree/v1.4.2\"\u003e1.4.2\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize persistent term operations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse structured logging consistently\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/7baf8085e406d5ae9e43b284d7c866742ae04b28\"\u003e\u003ccode\u003e7baf808\u003c/code\u003e\u003c/a\u003e Release v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/a382cd144aa3a34e807a0aa245aa7e8629acf399\"\u003e\u003ccode\u003ea382cd1\u003c/code\u003e\u003c/a\u003e Use structured logging all the way (\u003ca href=\"https://redirect.github.com/beam-telemetry/telemetry/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/87c134544c0430b073f0d246c80cc15cc9f4fbe3\"\u003e\u003ccode\u003e87c1345\u003c/code\u003e\u003c/a\u003e Persistent term optimisations (\u003ca href=\"https://redirect.github.com/beam-telemetry/telemetry/issues/148\"\u003e#148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry/compare/v1.4.1...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tesla` from 1.16.0 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/releases\"\u003etesla's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md\"\u003etesla's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/de2eaaf881077a84ffd00f76806afaf80c0e4c88\"\u003e\u003ccode\u003ede2eaaf\u003c/code\u003e\u003c/a\u003e chore(master): release 1.17.0 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/830\"\u003e#830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003e\u003ccode\u003ea672177\u003c/code\u003e\u003c/a\u003e fix: enhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/daec639e7e25eaf54b37fc87004b7fbbf576357a\"\u003e\u003ccode\u003edaec639\u003c/code\u003e\u003c/a\u003e chore(mint): strengthen mode regression coverage (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003e\u003ccode\u003ed812f54\u003c/code\u003e\u003c/a\u003e fix(mint): avoid active-mode message races without breaking reused connection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003e\u003ccode\u003efa755c9\u003c/code\u003e\u003c/a\u003e feat(client): add put_middleware/2, replace_middleware!/3, update_middleware!...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e\u003ccode\u003e0689e64\u003c/code\u003e\u003c/a\u003e feat(client): add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e\u003ccode\u003e544e1d7\u003c/code\u003e\u003c/a\u003e feat(logger): emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003e\u003ccode\u003eaae0866\u003c/code\u003e\u003c/a\u003e feat(logger): semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003e\u003ccode\u003eb8b622c\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/1c03570b13a807e3300b386e93fe87ec5b48fe0c\"\u003e\u003ccode\u003e1c03570\u003c/code\u003e\u003c/a\u003e chore: ci housekeeping (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/all-source-os/all-source/pull/173","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/all-source-os%2Fall-source/issues/173","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/173/packages"},{"uuid":"4394568467","node_id":"PR_kwDOSQq6Wc7Y7jAn","number":24,"state":"closed","title":"chore(deps): bump the mix-production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-20T23:53:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-06T21:30:32.000Z","updated_at":"2026-05-20T23:53:24.000Z","time_to_close":1218170,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"mix-production-dependencies","update_count":5,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.7","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.28","new_version":"1.1.30","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.25.0","new_version":"1.25.1","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 5 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.4` | `1.11.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.7` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.28` | `1.1.30` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.25.0` | `1.25.1` |\n\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://hexdocs.pm/phoenix/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ba3a131552add5758c021ff4c6e9b6947bb5a205\"\u003e\u003ccode\u003eba3a131\u003c/code\u003e\u003c/a\u003e Release v1.8.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e74eaccb8e909826a50c9e8095cd1694dace289c\"\u003e\u003ccode\u003ee74eacc\u003c/code\u003e\u003c/a\u003e fix invalid status on longpoll window timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/035fde9ac29920d4c040be91fdb7508295579036\"\u003e\u003ccode\u003e035fde9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eb5f52f683b148f30aa528d365b301d2c51a4b59\"\u003e\u003ccode\u003eeb5f52f\u003c/code\u003e\u003c/a\u003e Correctly serialize non ASCII metadata (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6664\"\u003e#6664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a99c5e8974f98c57aa4c883da51f57b582c0225c\"\u003e\u003ccode\u003ea99c5e8\u003c/code\u003e\u003c/a\u003e Filter token parameters by default (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6665\"\u003e#6665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/21901113ec7aa5158ad7748170bb9c3b3254861b\"\u003e\u003ccode\u003e2190111\u003c/code\u003e\u003c/a\u003e update installer version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ddcdadb7de1132d630bbbe56f975e66f85f36416\"\u003e\u003ccode\u003eddcdadb\u003c/code\u003e\u003c/a\u003e Release v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1a67c61ff9ce0a7711662ac7354861917a7c80f7\"\u003e\u003ccode\u003e1a67c61\u003c/code\u003e\u003c/a\u003e prevent unexpected memory usage on nd-json body splitting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8ca76a2c57fb189733e67c3fb72098d1092ef60c\"\u003e\u003ccode\u003e8ca76a2\u003c/code\u003e\u003c/a\u003e fix a couple of typos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6672\"\u003e#6672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/6214d83ac87fe87170bf2a8525b3404af1517705\"\u003e\u003ccode\u003e6214d83\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.6 to 8.5.13 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6671\"\u003e#6671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.28 to 1.1.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.30/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdbbe52011812943d90dc4a3d46f4c0740d86bd2\"\u003e\u003ccode\u003efdbbe52\u003c/code\u003e\u003c/a\u003e Release v1.1.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/970932be5fa7b4313994ba3b68f0a55ff74f9a2c\"\u003e\u003ccode\u003e970932b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/ff31d012fbeeedd38f13c9836d5d4fbfc22750b8\"\u003e\u003ccode\u003eff31d01\u003c/code\u003e\u003c/a\u003e Ensure phx-viewport hook does not fail if there's no scrollContainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.28...v1.1.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.0 to 1.25.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/0b5c091085bd76681826b486a47cf9aeb12185d4\"\u003e\u003ccode\u003e0b5c091\u003c/code\u003e\u003c/a\u003e fix: assert_no_email_sent and refute_email_sent now catch deliver_many (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/422d062231336e98eba7a61fae172fcc8ea53702\"\u003e\u003ccode\u003e422d062\u003c/code\u003e\u003c/a\u003e Bump release comment action to v0.5.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/coralogix-se/opentelemetry-demo/pull/24","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/coralogix-se%2Fopentelemetry-demo/issues/24","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/24/packages"},{"uuid":"4380311161","node_id":"PR_kwDOQF4m787YM2bg","number":169,"state":"open","title":"deps(elixir): bump the elixir-query-service group across 1 directory with 3 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T23:17:30.000Z","updated_at":"2026-05-12T03:09:03.386Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(elixir): bump","group_name":"elixir-query-service","update_count":3,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"broadway","old_version":"1.2.1","new_version":"1.3.0","repository_url":"https://github.com/dashbitco/broadway"},{"name":"tesla","old_version":"1.16.0","new_version":"1.17.0","repository_url":"https://github.com/elixir-tesla/tesla"}],"path":null,"ecosystem":"hex"},"body":"Bumps the elixir-query-service group with 3 updates in the /apps/query-service directory: [bandit](https://github.com/mtrudel/bandit), [broadway](https://github.com/dashbitco/broadway) and [tesla](https://github.com/elixir-tesla/tesla).\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `broadway` from 1.2.1 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dashbitco/broadway/blob/main/CHANGELOG.md\"\u003ebroadway's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.0 (2026-04-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd telemetry events around \u003ccode\u003ehandle_failed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eInclude producer metadata in telemetry events\u003c/li\u003e\n\u003cli\u003eAdd labels to Broadway stages\u003c/li\u003e\n\u003cli\u003eFix race condition during graceful shutdown\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d3a668c885342ae223b5ebcd9571efe4a0f18c41\"\u003e\u003ccode\u003ed3a668c\u003c/code\u003e\u003c/a\u003e Release v1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/dd2f40571ac463bbc56f949b6c1f8d33fd6cc665\"\u003e\u003ccode\u003edd2f405\u003c/code\u003e\u003c/a\u003e Include producer metadata in per-message events (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/370\"\u003e#370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/966c59ad95ddb6aa75c91e71848cfc617bef3a8e\"\u003e\u003ccode\u003e966c59a\u003c/code\u003e\u003c/a\u003e Add :telemetry.span for handle_failed/2 callback (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/370f180e853a33978f1822432c66bea61f9d98ef\"\u003e\u003ccode\u003e370f180\u003c/code\u003e\u003c/a\u003e Clarify some docs related to GenStage demand (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/69d90526dc7c1003d1b9fff5092645eb4fbe9e48\"\u003e\u003ccode\u003e69d9052\u003c/code\u003e\u003c/a\u003e Bump Elixir/Erlang CI matrix and GitHub actions (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/8c6616475acc874f185ffabaffc92554eefefbfc\"\u003e\u003ccode\u003e8c66164\u003c/code\u003e\u003c/a\u003e Add Process.set_label/1 to Broadway stages (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d32d30deb64dc4481f2743f6a0d8606299690046\"\u003e\u003ccode\u003ed32d30d\u003c/code\u003e\u003c/a\u003e Catch exits if already down when trapping exits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/f52f2f793e16e1c976f5e52adc372457d1445b73\"\u003e\u003ccode\u003ef52f2f7\u003c/code\u003e\u003c/a\u003e Fix graceful shutdown race condition (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/136bea6786ae1526721a98a93ca9d752543c3a7d\"\u003e\u003ccode\u003e136bea6\u003c/code\u003e\u003c/a\u003e Add batch_size/0 and batch_size_fun/0 types (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/7977502abbf3c0b06ea1fbbae415dff3932fb796\"\u003e\u003ccode\u003e7977502\u003c/code\u003e\u003c/a\u003e Add new unofficial producer off_broadway_emqtt (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dashbitco/broadway/compare/v1.2.1...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tesla` from 1.16.0 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/releases\"\u003etesla's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md\"\u003etesla's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/de2eaaf881077a84ffd00f76806afaf80c0e4c88\"\u003e\u003ccode\u003ede2eaaf\u003c/code\u003e\u003c/a\u003e chore(master): release 1.17.0 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/830\"\u003e#830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003e\u003ccode\u003ea672177\u003c/code\u003e\u003c/a\u003e fix: enhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/daec639e7e25eaf54b37fc87004b7fbbf576357a\"\u003e\u003ccode\u003edaec639\u003c/code\u003e\u003c/a\u003e chore(mint): strengthen mode regression coverage (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003e\u003ccode\u003ed812f54\u003c/code\u003e\u003c/a\u003e fix(mint): avoid active-mode message races without breaking reused connection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003e\u003ccode\u003efa755c9\u003c/code\u003e\u003c/a\u003e feat(client): add put_middleware/2, replace_middleware!/3, update_middleware!...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e\u003ccode\u003e0689e64\u003c/code\u003e\u003c/a\u003e feat(client): add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e\u003ccode\u003e544e1d7\u003c/code\u003e\u003c/a\u003e feat(logger): emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003e\u003ccode\u003eaae0866\u003c/code\u003e\u003c/a\u003e feat(logger): semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003e\u003ccode\u003eb8b622c\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/1c03570b13a807e3300b386e93fe87ec5b48fe0c\"\u003e\u003ccode\u003e1c03570\u003c/code\u003e\u003c/a\u003e chore: ci housekeeping (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/all-source-os/all-source/pull/169","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/all-source-os%2Fall-source/issues/169","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/169/packages"},{"uuid":"4377075420","node_id":"PR_kwDOSLyUUs7YCKWz","number":33,"state":"open","title":"chore(deps): bump the mix-production-dependencies group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T13:46:41.000Z","updated_at":"2026-05-04T14:10:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"mix-production-dependencies","update_count":3,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"phoenix_live_view","old_version":"1.1.28","new_version":"1.1.29","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.25.0","new_version":"1.25.1","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 3 updates in the /src/flagd-ui directory: [bandit](https://github.com/mtrudel/bandit), [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) and [swoosh](https://github.com/swoosh/swoosh).\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.28 to 1.1.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.29/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/3b3844fabde644b974ca4f7d4d5d745c4e8806bf\"\u003e\u003ccode\u003e3b3844f\u003c/code\u003e\u003c/a\u003e Remove horizontal checks in viewport functions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4200\"\u003e#4200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1f4e986c992beb65a0f7de958587f7ad08dfeeb3\"\u003e\u003ccode\u003e1f4e986\u003c/code\u003e\u003c/a\u003e add blame ignore revs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/bcdade40fc475875616bf58f101586176c667158\"\u003e\u003ccode\u003ebcdade4\u003c/code\u003e\u003c/a\u003e Recompute scroll container if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4185\"\u003e#4185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.28...v1.1.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.0 to 1.25.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/0b5c091085bd76681826b486a47cf9aeb12185d4\"\u003e\u003ccode\u003e0b5c091\u003c/code\u003e\u003c/a\u003e fix: assert_no_email_sent and refute_email_sent now catch deliver_many (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/422d062231336e98eba7a61fae172fcc8ea53702\"\u003e\u003ccode\u003e422d062\u003c/code\u003e\u003c/a\u003e Bump release comment action to v0.5.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpgrade production deps in src/flagd-ui to pull in security patches and UI stability fixes: `bandit` 1.11.0, `phoenix_live_view` 1.1.29, and `swoosh` 1.25.1.\n\n- **Dependencies**\n  - `bandit` → 1.11.0: fixes multiple WebSocket/HTTP CVEs; adds `max_inflate_ratio` and `max_fragmented_message_size`; default WebSocket `max_frame_size` is now 8MB.\n  - `phoenix_live_view` → 1.1.29: fixes duplicate hook ID crash; improves `phx-viewport` handling and stream reordering.\n  - `swoosh` → 1.25.1: escapes mailbox preview HTML; test helpers catch `deliver_many`.\n\n- **Migration**\n  - If you rely on very large WebSocket/LiveView payloads, configure Bandit `max_frame_size`/`max_fragmented_message_size` to suit your needs.\n\n\u003csup\u003eWritten for commit 3e012c96fd6f8d27d796b92e2c82b5253979aef5. Summary will update on new commits.\u003c/sup\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/Vacbo/northstar-commerce/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vacbo%2Fnorthstar-commerce/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"}],"issue_packages":[{"old_version":"1.12.5","new_version":"1.13.1","update_type":"minor","path":null,"pr_created_at":"2026-10-24T21:02:56.000Z","version_change":"1.12.5 → 1.13.1","issue":{"uuid":"6017589660","node_id":"PR_kwDOQsGifM8AAAABKfjXgA","number":178,"state":"closed","title":"chore(deps-dev): bump bandit from 1.12.5 to 1.13.1","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-25T16:13:26.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-24T21:02:56.000Z","updated_at":"2026-10-25T16:13:30.000Z","time_to_close":69030,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps-dev)","packages":[{"name":"bandit","old_version":"1.12.5","new_version":"1.13.1","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.5 to 1.13.1.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.13.1 (15 Oct 2026)\u003c/h2\u003e\n\u003ch3\u003eReverts\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRevert the stale conn check added in 1.13.0 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/668\"\u003e#668\u003c/a\u003e), since a number of valid\ncode paths in Phoenix depend on stale conns (notably, \u003ccode\u003ePlug.Parsers\u003c/code\u003e errors rendered by \u003ccode\u003ePhoenix.Endpoint.RenderErrors\u003c/code\u003e). See \u003ca href=\"https://redirect.github.com/elixir-plug/plug/issues/1331\"\u003eelixir-plug/plug#1331\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.13.0 (15 Oct 2026)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd a \u003ccode\u003ecompress_chunked\u003c/code\u003e option to compress chunked responses with gzip and zstd (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/707\"\u003e#707\u003c/a\u003e, thanks \u003ca href=\"https://github.com/iStefo\"\u003e\u003ccode\u003e@​iStefo\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eClarify \u003ccode\u003einet6\u003c/code\u003e option behaviour on dual-stack platforms (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/709\"\u003e#709\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/700\"\u003e#700\u003c/a\u003e, thanks \u003ca href=\"https://github.com/adelton\"\u003e\u003ccode\u003e@​adelton\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eUnroll WebSocket masking over 32-byte blocks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/674\"\u003e#674\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eDrain HTTP/2 pending sends without repeated List.delete/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/673\"\u003e#673\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eShort-circuit header token lookup on the first match (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/699\"\u003e#699\u003c/a\u003e, thanks \u003ca href=\"https://github.com/claytongentry\"\u003e\u003ccode\u003e@​claytongentry\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eScope the workflow tokens to what each job actually uses (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/702\"\u003e#702\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eAdd a Plumber check and score badge (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/712\"\u003e#712\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix recent releases changelog headings in docs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/672\"\u003e#672\u003c/a\u003e, thanks \u003ca href=\"https://github.com/dinokovac-river\"\u003e\u003ccode\u003e@​dinokovac-river\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Thousand Island 1.6, and use the peername it now captures when it accepts a connection\n(\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRequire hpax 1.1 and drop the nil field value workaround (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/706\"\u003e#706\u003c/a\u003e, thanks \u003ca href=\"https://github.com/acrogenesis\"\u003e\u003ccode\u003e@​acrogenesis\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReport \u003ccode\u003econn.port\u003c/code\u003e as an integer for \u003ccode\u003eCONNECT\u003c/code\u003e requests, as \u003ccode\u003ePlug.Conn\u003c/code\u003e requires\u003c/li\u003e\n\u003cli\u003eClose idle connections which send no bytes silently instead of answering 408 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/689\"\u003e#689\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Enforce Host requirements for HTTP/1.1 targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/679\"\u003e#679\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Complete HTTP/2 field validation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/680\"\u003e#680\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate HTTP/2 content length on initial END_STREAM (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/681\"\u003e#681\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Enforce HTTP/2 trailer field section requirements (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/682\"\u003e#682\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate request transfer coding before Plug dispatch (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/683\"\u003e#683\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Fix HTTP/1.0 streaming response framing (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/684\"\u003e#684\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Accept empty non-final WebSocket continuation frames (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/685\"\u003e#685\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eRFC Conformance: Validate WebSocket client keys (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/686\"\u003e#686\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mpettibone\"\u003e\u003ccode\u003e@​mpettibone\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate the authority of HTTP/1 absolute-form and authority-form request targets against the\nsame grammar as the \u003ccode\u003eHost\u003c/code\u003e header (GHSA-v53v-9hvg-37jf, thanks \u003ca href=\"https://github.com/euriconicacio\"\u003e\u003ccode\u003e@​euriconicacio\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eBound HTTP/2 sends blocked on a send window by progress, so that a trickle of window updates\ncan no longer keep a stream pinned indefinitely (GHSA-69m6-wcv4-rwcf, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReject control bytes in HTTP/1 request targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/713\"\u003e#713\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/711\"\u003e#711\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix crash when a client resets an HTTP/1 connection before Bandit reads its peer address (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/717\"\u003e#717\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mhsdef\"\u003e\u003ccode\u003e@​mhsdef\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eDrain all queued HTTP/2 DATA frames of an unread body once a response has been sent (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/710\"\u003e#710\u003c/a\u003e, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/697\"\u003e#697\u003c/a\u003e, thanks \u003ca href=\"https://github.com/jamilbk\"\u003e\u003ccode\u003e@​jamilbk\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003ePreserve independent error responses on HTTP/1 keep-alive and pipelined requests, and frame empty\n4xx/5xx error responses with \u003ccode\u003eContent-Length: 0\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/705\"\u003e#705\u003c/a\u003e, thanks \u003ca href=\"https://github.com/jeregrine\"\u003e\u003ccode\u003e@​jeregrine\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eClose instead of draining when a plug never honors Expect: 100-continue (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/695\"\u003e#695\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix chunked read_body(length: 0) falsely completing the body (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/691\"\u003e#691\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eObserve RST_STREAM while blocked on the stream send window (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/688\"\u003e#688\u003c/a\u003e, thanks \u003ca href=\"https://github.com/tomciopp\"\u003e\u003ccode\u003e@​tomciopp\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ee75d310582b4f65f9354ab81eeecb079609a492\"\u003e\u003ccode\u003eee75d31\u003c/code\u003e\u003c/a\u003e Version bump to 1.13.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/84e9d1d90cf59879a10a34695db73eacc2aad0de\"\u003e\u003ccode\u003e84e9d1d\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Guard against stale conn reuse in Bandit.Adapter (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/668\"\u003e#668\u003c/a\u003e)\u0026quot; (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/719\"\u003e#719\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d6daa4a950604a9bc91b49da785747cff370ca66\"\u003e\u003ccode\u003ed6daa4a\u003c/code\u003e\u003c/a\u003e Version bump to 1.13.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/02a3853408dc694baed881217ed1fedd0443e02e\"\u003e\u003ccode\u003e02a3853\u003c/code\u003e\u003c/a\u003e Add a Plumber check and score badge (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/712\"\u003e#712\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0c53a6eef1612b57c2adc6ccc06809891bf344c6\"\u003e\u003ccode\u003e0c53a6e\u003c/code\u003e\u003c/a\u003e Require Thousand Island 1.6 and use its cached peername (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/718\"\u003e#718\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8993dae1c780ec55b4c82fc55b1db860bb7e1298\"\u003e\u003ccode\u003e8993dae\u003c/code\u003e\u003c/a\u003e Bump finch from 0.21.0 to 0.24.0 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/716\"\u003e#716\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/6ea80210137b3f69caf65f67398934259dc365d0\"\u003e\u003ccode\u003e6ea8021\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/27589109c88222405a1f4d1ff2754974612f74c9\"\u003e\u003ccode\u003e2758910\u003c/code\u003e\u003c/a\u003e Bump req from 0.7.4 to 0.7.5 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/715\"\u003e#715\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/70014a0fc432f07cf4b3d2ef7efceda73fe57e66\"\u003e\u003ccode\u003e70014a0\u003c/code\u003e\u003c/a\u003e Bump actions/upload-artifact from 7.0.1 to 7.0.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/714\"\u003e#714\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c95938d525990d3a1b7c94c3a67c2eb0193523c4\"\u003e\u003ccode\u003ec95938d\u003c/code\u003e\u003c/a\u003e Reject control bytes in HTTP/1 request targets (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/713\"\u003e#713\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.5...1.13.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.5\u0026new-version=1.13.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/beam-bots/bb_liveview/pull/178","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/beam-bots%2Fbb_liveview/issues/178","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/178/packages"}},{"old_version":"1.7.0","new_version":"1.12.5","update_type":"minor","path":null,"pr_created_at":"2026-10-16T03:45:29.000Z","version_change":"1.7.0 → 1.12.5","issue":{"uuid":"5877954962","node_id":"PR_kwDOPzk3Ms8AAAABIw9SoQ","number":484,"state":"closed","title":"build(deps): bump the mix-production-dependencies group across 1 directory with 14 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-19T04:00:29.000Z","author_association":null,"state_reason":null,"created_at":"2026-10-16T03:45:29.000Z","updated_at":"2026-10-19T04:00:31.000Z","time_to_close":260100,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"mix-production-dependencies","update_count":14,"packages":[{"name":"bandit","old_version":"1.7.0","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.1.3","new_version":"0.3.1","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"gettext","old_version":"0.26.2","new_version":"1.0.2","repository_url":"https://github.com/elixir-gettext/gettext"},{"name":"heroicons","old_version":"v2.1.1","new_version":"v2.2.0","repository_url":"https://github.com/tailwindlabs/heroicons"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"opentelemetry_exporter","old_version":"1.8.1","new_version":"1.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-erlang"},{"name":"phoenix","old_version":"1.8.0","new_version":"1.8.15","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_html","old_version":"4.2.1","new_version":"4.3.0","repository_url":"https://github.com/phoenixframework/phoenix_html"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.1","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"phoenix_live_view","old_version":"1.1.3","new_version":"1.2.12","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.15","new_version":"0.7.5","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.19.5","new_version":"1.29.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.3.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 14 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.7.0` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.1.3` | `0.3.1` |\n| [gettext](https://github.com/elixir-gettext/gettext) | `0.26.2` | `1.0.2` |\n| [heroicons](https://github.com/tailwindlabs/heroicons) | `v2.1.1` | `v2.2.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [opentelemetry_exporter](https://github.com/open-telemetry/opentelemetry-erlang) | `1.8.1` | `1.11.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.0` | `1.8.15` |\n| [phoenix_html](https://github.com/phoenixframework/phoenix_html) | `4.2.1` | `4.3.0` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.1` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.3` | `1.2.12` |\n| [req](https://github.com/wojtekmach/req) | `0.5.15` | `0.7.5` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.19.5` | `1.29.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.3.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.7.0 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.7.0...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.1.3 to 0.3.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.1 (2026-10-01)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eProperly look up the hostname of a {basename, query} tuple\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e0.2.0 (2025-03-04)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport multiple DNS queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f7375d63b782fb9be911129fea8506b9643326ac\"\u003e\u003ccode\u003ef7375d6\u003c/code\u003e\u003c/a\u003e Release v0.30.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/1c54b42c67aec318ed148d55a70f2ff4a149c15c\"\u003e\u003ccode\u003e1c54b42\u003c/code\u003e\u003c/a\u003e Look up the hostname of a {basename, query} tuple, not the tuple (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.1.3...v0.3.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `gettext` from 0.26.2 to 1.0.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md\"\u003egettext's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.0.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eOnly skip manifest removal on Elixir v1.19.3+\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.1 (retired)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRemove unnecessary cleaning of Elixir manifests\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.0.0\u003c/h2\u003e\n\u003cp\u003eThis is the first 1.0 release of Gettext, a silly 10 years (and 6 months) after we started working on it. There are \u003cem\u003every few changes\u003c/em\u003e from the latest 0.26 release, and none of them are breaking.\u003c/p\u003e\n\u003cp\u003eHere are the new goodies:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for concatenating sigils if all parts are known at compile time (such as \u003ccode\u003e\u0026quot;Hello \u0026quot; \u0026lt;\u0026gt; ~s(world)\u003c/code\u003e).\u003c/li\u003e\n\u003cli\u003eSignificantly increase the timeout for \u003ccode\u003emix gettext.extract\u003c/code\u003e to two minutes.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eGettext.put_locale!/2\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003eHappy 10+ years of Elixir translations everyone! 🎉\u003c/p\u003e\n\u003ch2\u003ePrevious versions\u003c/h2\u003e\n\u003cp\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/blob/v1.0.0/CHANGELOG.md\"\u003eSee the CHANGELOG for versions before v1.0\u003c/a\u003e.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/e3180f138bda49c7607b709ec74133c47c24c81d\"\u003e\u003ccode\u003ee3180f1\u003c/code\u003e\u003c/a\u003e Release v1.0.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/ec2f9c1b3d7d03dbd3d8a9d21e3442f26efbeef6\"\u003e\u003ccode\u003eec2f9c1\u003c/code\u003e\u003c/a\u003e Erase manifest unless on upcoming Elixir (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/425\"\u003e#425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/4960e492813b829f2d44c2a47723379850de2117\"\u003e\u003ccode\u003e4960e49\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Removed unnecessary cleaning of Elixir manifests (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/423\"\u003e#423\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/8844a323145936a2bff328fabb25bddc98c09987\"\u003e\u003ccode\u003e8844a32\u003c/code\u003e\u003c/a\u003e Trim CHANGELOG\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/7fe2dc75a7f86b6fbb2329a14d520e7131c10c3f\"\u003e\u003ccode\u003e7fe2dc7\u003c/code\u003e\u003c/a\u003e Release v1.0.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/30bf87de18890cd545b25c6a9e2dc3f5f01d3e05\"\u003e\u003ccode\u003e30bf87d\u003c/code\u003e\u003c/a\u003e Removed unnecessary cleaning of Elixir manifests (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/423\"\u003e#423\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/d33d7452b20281cf7b1aaba299955e5c92719669\"\u003e\u003ccode\u003ed33d745\u003c/code\u003e\u003c/a\u003e Bump actions/checkout from 4.2.2 to 5.0.0 (\u003ca href=\"https://redirect.github.com/elixir-gettext/gettext/issues/422\"\u003e#422\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/7443953e4c40ec8eb498ec244aae967bdfc200ed\"\u003e\u003ccode\u003e7443953\u003c/code\u003e\u003c/a\u003e Use ubuntu-latest in the publish-to-hex.yml workflow\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/d1a8c86d0bb7b1edfd01538d6bce32b5b809363f\"\u003e\u003ccode\u003ed1a8c86\u003c/code\u003e\u003c/a\u003e Release v1.0.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-gettext/gettext/commit/e1df334b3bc77e21f457b38e4a76e3543814d016\"\u003e\u003ccode\u003ee1df334\u003c/code\u003e\u003c/a\u003e Update Elixir/Erlang versions in CI\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-gettext/gettext/compare/v0.26.2...v1.0.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `heroicons` from v2.1.1 to v2.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tailwindlabs/heroicons/releases\"\u003eheroicons's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev2.2.0\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved unnecessary clipping path from \u003ccode\u003esolid/arrow-left-circle\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.5\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd new icons (\u003ccode\u003earrow-turn-*\u003c/code\u003e, \u003ccode\u003ebold\u003c/code\u003e, \u003ccode\u003ecalendar-date-range\u003c/code\u003e, \u003ccode\u003edivide\u003c/code\u003e, \u003ccode\u003edocument-currency-*\u003c/code\u003e, \u003ccode\u003eequals\u003c/code\u003e, \u003ccode\u003eh1\u003c/code\u003e, \u003ccode\u003eh2\u003c/code\u003e, \u003ccode\u003eh3\u003c/code\u003e, \u003ccode\u003eitalic\u003c/code\u003e, \u003ccode\u003elink-slash\u003c/code\u003e, \u003ccode\u003enumbered-list\u003c/code\u003e, \u003ccode\u003epercent-badge\u003c/code\u003e, \u003ccode\u003eslash\u003c/code\u003e, \u003ccode\u003estrikethrough\u003c/code\u003e, \u003ccode\u003eunderline\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.4\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove tree-shakability of React package (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove project READMEs (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev2.1.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInclude license file with published packages (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/tailwindlabs/heroicons/blob/master/CHANGELOG.md\"\u003eheroicons's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e[2.2.0] - 2024-11-18\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved unnecessary clipping path from \u003ccode\u003esolid/arrow-left-circle\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.5] - 2024-07-10\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd new icons (\u003ccode\u003earrow-turn-*\u003c/code\u003e, \u003ccode\u003ebold\u003c/code\u003e, \u003ccode\u003ecalendar-date-range\u003c/code\u003e, \u003ccode\u003edivide\u003c/code\u003e, \u003ccode\u003edocument-currency-*\u003c/code\u003e, \u003ccode\u003eequals\u003c/code\u003e, \u003ccode\u003eh1\u003c/code\u003e, \u003ccode\u003eh2\u003c/code\u003e, \u003ccode\u003eh3\u003c/code\u003e, \u003ccode\u003eitalic\u003c/code\u003e, \u003ccode\u003elink-slash\u003c/code\u003e, \u003ccode\u003enumbered-list\u003c/code\u003e, \u003ccode\u003epercent-badge\u003c/code\u003e, \u003ccode\u003eslash\u003c/code\u003e, \u003ccode\u003estrikethrough\u003c/code\u003e, \u003ccode\u003eunderline\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.4] - 2024-06-17\u003c/h2\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove tree-shakability of React package (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.3] - 2024-03-22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove project READMEs (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e[2.1.2] - 2024-03-22\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInclude license file with published packages (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/pull/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/0435d4ca364a608cc75e2f8683d374e55abbae26\"\u003e\u003ccode\u003e0435d4c\u003c/code\u003e\u003c/a\u003e 2.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/f327cbe38385c6add89a4e7bb72e701b4e50f25a\"\u003e\u003ccode\u003ef327cbe\u003c/code\u003e\u003c/a\u003e Add React 19 support (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1247\"\u003e#1247\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/56c073c2c9a66d2e51adb93d8e87e2e941d5b6db\"\u003e\u003ccode\u003e56c073c\u003c/code\u003e\u003c/a\u003e Update changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/64e23681c1fc84cfe47778a013d6291963603ff2\"\u003e\u003ccode\u003e64e2368\u003c/code\u003e\u003c/a\u003e Remove clip-path from 20/arrow-left-circle (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1211\"\u003e#1211\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/ad0ad1f6d51bd64dcd67e363d2b2833a8de25154\"\u003e\u003ccode\u003ead0ad1f\u003c/code\u003e\u003c/a\u003e 2.1.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/58d511e23db9c801ba9078186f54f30a6ed6c250\"\u003e\u003ccode\u003e58d511e\u003c/code\u003e\u003c/a\u003e Add new icons (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1204\"\u003e#1204\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/c1b192b8cd0f1b3c569d25ba995d170f3db86039\"\u003e\u003ccode\u003ec1b192b\u003c/code\u003e\u003c/a\u003e 2.1.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/e2e487fed03d9f9651f3952eddc52997f7abe78d\"\u003e\u003ccode\u003ee2e487f\u003c/code\u003e\u003c/a\u003e Make sure calls to \u003ccode\u003eforwardRef\u003c/code\u003e are marked as pure (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/cafc7d6cb6c2233b07667ae1fb77a43866a333e3\"\u003e\u003ccode\u003ecafc7d6\u003c/code\u003e\u003c/a\u003e use \u003ccode\u003esize-*\u003c/code\u003e instead of \u003ccode\u003ew-* h-*\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1182\"\u003e#1182\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/tailwindlabs/heroicons/commit/9a17872e685bf48b83c047572c45617b6fd345e7\"\u003e\u003ccode\u003e9a17872\u003c/code\u003e\u003c/a\u003e Update README.md (\u003ca href=\"https://redirect.github.com/tailwindlabs/heroicons/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/tailwindlabs/heroicons/compare/88ab3a0d790e6a47404cba02800a6b25d2afae50...0435d4ca364a608cc75e2f8683d374e55abbae26\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `opentelemetry_exporter` from 1.8.1 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/blob/main/CHANGELOG.md\"\u003eopentelemetry_exporter's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003e\u003cstrong\u003eThis changelog has been split into a changelog per application found under\n\u003ccode\u003eapps/*\u003c/code\u003e. This file remains for changelogs before 2025-07-31.\u003c/strong\u003e\u003c/p\u003e\n\u003ch1\u003eChangelog\u003c/h1\u003e\n\u003cp\u003eThe format is based on \u003ca href=\"https://keepachangelog.com/en/1.0.0/\"\u003eKeep a Changelog\u003c/a\u003e,\nand this project adheres to \u003ca href=\"https://semver.org/spec/v2.0.0.html\"\u003eSemantic Versioning\u003c/a\u003e.\u003c/p\u003e\n\u003ch2\u003e[Unreleased]\u003c/h2\u003e\n\u003ch2\u003eSDK 1.6.0 - 2025-09-16\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/894\"\u003eAdd is_remote flag in exporter for spans and span links\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eOTLP Exporter 1.9.0 - 2025-09-16\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/894\"\u003eAdd is_remote flag in exporter for spans and span links\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eAPI 1.4.1 - 2025-07-31\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eVarious type spec fixes\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eSDK 1.5.1 - 2025-07-31\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://redirect.github.com/open-telemetry/opentelemetry-erlang/pull/836\"\u003efix the batch export timeout to default to 30 seconds\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.0 to 1.8.15\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.cert] Fix certificate not being accepted by Chromium (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6847\"\u003e#6847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Fix asynchronous transport close tearing down the replacement transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6852\"\u003e#6852\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Update Tailwind version to 4.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.14\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.15/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.15 (2026-09-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.cert] Fix certificate not being accepted by Chromium (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6847\"\u003e#6847\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Fix asynchronous transport close tearing down the replacement transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6852\"\u003e#6852\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Update Tailwind version to 4.3.3\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.14 (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/bd1801833b4fd7ceb02497cc7ba2d05e9bd391c8\"\u003e\u003ccode\u003ebd18018\u003c/code\u003e\u003c/a\u003e fix version in package.json\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/762d1a1942bdb3d755a89cc1ac9b249a632f34f6\"\u003e\u003ccode\u003e762d1a1\u003c/code\u003e\u003c/a\u003e Release v1.8.15\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/f735b5182984b7414c9dec555c89d6aa551ad438\"\u003e\u003ccode\u003ef735b51\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/405f892d33365a3b78eeb72f9a56590ec6f5ef20\"\u003e\u003ccode\u003e405f892\u003c/code\u003e\u003c/a\u003e Fix async close leaking to replaced transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6854\"\u003e#6854\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/968a940058bd1233d7aa150e7cef36f3e2865631\"\u003e\u003ccode\u003e968a940\u003c/code\u003e\u003c/a\u003e Restore NULL parameters on phx.gen.cert's public key algorithm (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6848\"\u003e#6848\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1d09594b7cf90bec18b6b53225d45f213a62a246\"\u003e\u003ccode\u003e1d09594\u003c/code\u003e\u003c/a\u003e Remove stale test in Socket.TransportTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6849\"\u003e#6849\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/04e14f118b032f021ecc42ffbabf6ca6fb766f0f\"\u003e\u003ccode\u003e04e14f1\u003c/code\u003e\u003c/a\u003e Bump Tailwind CLI in phx.new templates to 4.3.3 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6845\"\u003e#6845\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d676d61e5fa802e4b50e6ef520eac99c61aa687d\"\u003e\u003ccode\u003ed676d61\u003c/code\u003e\u003c/a\u003e Clarify potential resource exhaustion with long polling\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d344b1084a4ba12803760ee46677ae42a0ce2740\"\u003e\u003ccode\u003ed344b10\u003c/code\u003e\u003c/a\u003e docs: remove outdated problem statement from routing guide (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6841\"\u003e#6841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/96085e9bc5d65782f2f54e980febe12a2243b728\"\u003e\u003ccode\u003e96085e9\u003c/code\u003e\u003c/a\u003e Release v1.8.14\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.0...v1.8.15\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_html` from 4.2.1 to 4.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_html/blob/main/CHANGELOG.md\"\u003ephoenix_html's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e4.3.0 (2025-09-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eEnhancements\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eImplement \u003ccode\u003ePhoenix.HTML.Safe\u003c/code\u003e for Duration\u003c/li\u003e\n\u003cli\u003eAdd function head for argument names of \u003ccode\u003enormalize_value/2\u003c/code\u003e to improve documentation\u003c/li\u003e\n\u003cli\u003eAllow custom tags in options_for_select\u003c/li\u003e\n\u003cli\u003eAllow datetime as form option values\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eBug fixes\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eAvoid false positive warnings on Elixir v1.19\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/8cfd3e37ff9ef0924812a78cf6c9d27cdbd4e726\"\u003e\u003ccode\u003e8cfd3e3\u003c/code\u003e\u003c/a\u003e Release v4.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/053861d1894a10c7787678ab2d86a0b5cee9686f\"\u003e\u003ccode\u003e053861d\u003c/code\u003e\u003c/a\u003e Avoid false positive in Elixir v1.19\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/671042cd441ef001ecba00904be2e5bc39c07dfe\"\u003e\u003ccode\u003e671042c\u003c/code\u003e\u003c/a\u003e allow datetime as form option values (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/468\"\u003e#468\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/0f31c955865319f6fe5ac58b5e5c4c385bd80796\"\u003e\u003ccode\u003e0f31c95\u003c/code\u003e\u003c/a\u003e feat(custom option tags): allow custom tags in options_for_select (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/467\"\u003e#467\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/0229e746a22d70093473a39946c9868a585181a3\"\u003e\u003ccode\u003e0229e74\u003c/code\u003e\u003c/a\u003e Add function head for argument names of \u003ccode\u003enormalize_value/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/466\"\u003e#466\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/49bb6e545e4799c30cdad97a0b71413bbd9f7c1d\"\u003e\u003ccode\u003e49bb6e5\u003c/code\u003e\u003c/a\u003e Add \u003ccode\u003ePhoenix.HTML.Safe\u003c/code\u003e to Duration (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/463\"\u003e#463\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/ddaf11e54f38627c03aa4da937ecb95259103926\"\u003e\u003ccode\u003eddaf11e\u003c/code\u003e\u003c/a\u003e Update CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_html/issues/464\"\u003e#464\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_html/commit/c11a9e3b87fa247b31a8ccf1265d6588e1ddaa04\"\u003e\u003ccode\u003ec11a9e3\u003c/code\u003e\u003c/a\u003e Implement Access for form fields\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/phoenix_html/compare/v4.2.1...v4.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.1 (2026-08-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip Ecto repos that cannot be resolved to an extras module\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f12805a9f800d03631219f9f9d5108e49d1b2771\"\u003e\u003ccode\u003ef12805a\u003c/code\u003e\u003c/a\u003e Release v0.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/d212df68098ccfecc97dd5d8c51ecfafe53019cb\"\u003e\u003ccode\u003ed212df6\u003c/code\u003e\u003c/a\u003e Skip Ecto repos that cannot be resolved to an extras module (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c79b97691848f4f2fe24080602358f82bbc4ee0a\"\u003e\u003ccode\u003ec79b976\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c0d9b5eb38573a354a09d4ac0dd694bfe5fbd6a3\"\u003e\u003ccode\u003ec0d9b5e\u003c/code\u003e\u003c/a\u003e update assets CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.3 to 1.2.12\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent a hook's \u003ccode\u003edisconnected\u003c/code\u003e method from being called again when already disconnected (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4430\"\u003e#4430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid mutating JS push options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4431\"\u003e#4431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle falsy keys in assign_async validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4428\"\u003e#4428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent flaky tests due to async pid collection timeout (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4425\"\u003e#4425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve caret position for additional input types (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4436\"\u003e#4436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent crash in LiveViewTest when keyed comprehension entry is moved and changed in the same patch (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix teleported elements sometimes not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix lock handling for LiveComponents in nested LiveViews (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4444\"\u003e#4444\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved the IE11 section from the README. It was outdated since before LiveView 1.0 was released.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.2.12/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.12 (2026-09-16)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent a hook's \u003ccode\u003edisconnected\u003c/code\u003e method from being called again when already disconnected (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4430\"\u003e#4430\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid mutating JS push options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4431\"\u003e#4431\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle falsy keys in assign_async validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4428\"\u003e#4428\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent flaky tests due to async pid collection timeout (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4425\"\u003e#4425\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve caret position for additional input types (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4436\"\u003e#4436\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrevent crash in LiveViewTest when keyed comprehension entry is moved and changed in the same patch (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix teleported elements sometimes not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix lock handling for LiveComponents in nested LiveViews (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4444\"\u003e#4444\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemoved the IE11 section from the README. It was outdated since before LiveView 1.0 was released.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.11 (2026-08-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/83ab190252ebb61256648e829152d21a59785155\"\u003e\u003ccode\u003e83ab190\u003c/code\u003e\u003c/a\u003e Release v1.2.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/14ab5830fffd12eda59e2cd7233c7fbd7ca76d90\"\u003e\u003ccode\u003e14ab583\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8c979bdadce7b4ee1982cf32c4ceac16c049f520\"\u003e\u003ccode\u003e8c979bd\u003c/code\u003e\u003c/a\u003e Ensure closestLock check respects view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4446\"\u003e#4446\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/5ae5d2bca369d907a039e089c42b45f518bf5c31\"\u003e\u003ccode\u003e5ae5d2b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/48b5eb48248848afdfaad555516f603ef32e80f7\"\u003e\u003ccode\u003e48b5eb4\u003c/code\u003e\u003c/a\u003e Fix teleported elements in stream not rendering on reset (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4445\"\u003e#4445\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4d27da56be75b76cb127e2ec1a8d144a357bfa17\"\u003e\u003ccode\u003e4d27da5\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/e9e66c2ce03d94edf1cb873ced947334b8153e15\"\u003e\u003ccode\u003ee9e66c2\u003c/code\u003e\u003c/a\u003e Preserve namespace for portal targets (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4437\"\u003e#4437\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/57cb09648d15cbfd5bd50d429cae9c679a3a3c09\"\u003e\u003ccode\u003e57cb096\u003c/code\u003e\u003c/a\u003e Resolve templates in moved keyed entries in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4440\"\u003e#4440\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d2e183579f571829641a78f85b611dd660a63696\"\u003e\u003ccode\u003ed2e1835\u003c/code\u003e\u003c/a\u003e Bump js-yaml from 3.15.0 to 3.15.2 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4443\"\u003e#4443\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/7f06d34002983f30f44ef24827362a32360a736c\"\u003e\u003ccode\u003e7f06d34\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.3...v1.2.12\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.15 to 0.7.5\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.5\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_aws_sigv4/1\"\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e\u003c/a\u003e: Fix SigV4 signing on retries.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#redirect/1\"\u003e\u003ccode\u003eredirect\u003c/code\u003e\u003c/a\u003e: Change method to GET (except HEAD) on HTTP 303. Thanks to \u003ca href=\"https://github.com/euriconicacio\"\u003e\u003ccode\u003e@​euriconicacio\u003c/code\u003e\u003c/a\u003e for reporting this.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.5/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.5 (2026-10-06)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix SigV4 signing on retries.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eredirect\u003c/code\u003e]: Change method to GET (except HEAD) on HTTP 303.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/2ce74f1d80810220b7a5a208423a06f0dca6f55a\"\u003e\u003ccode\u003e2ce74f1\u003c/code\u003e\u003c/a\u003e Release v0.7.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/10c74149a924fdcc770649f2151cd4c4ba27d9f8\"\u003e\u003ccode\u003e10c7414\u003c/code\u003e\u003c/a\u003e Fix connect timeout test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/331c5d9f3e3e17488486eb65813c3986c2c80351\"\u003e\u003ccode\u003e331c5d9\u003c/code\u003e\u003c/a\u003e Fix SigV4 signing on retries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd18cb26a1bdd962a1c1b1813ca029063f0ffe90\"\u003e\u003ccode\u003ebd18cb2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eredirect\u003c/code\u003e: Change method to GET (except HEAD) on HTTP 303\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.15...v0.7.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.19.5 to 1.29.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.29.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd authenticated MailChannels Email API adapter \u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1206\"\u003e#1206\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1208\"\u003e#1208\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePrepare Swoosh 1.29.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1209\"\u003e#1209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1206\"\u003eswoosh/swoosh#1206\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.1...v1.29.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.1...v1.29.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCustomer.io adapter: send \u003ccode\u003ecc\u003c/code\u003e recipients in transactional payload \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1200\"\u003e#1200\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.29.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd authenticated MailChannels Email API adapter \u003ca href=\"https://github.com/ttulttul\"\u003e\u003ccode\u003e@​ttulttul\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1206\"\u003e#1206\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1208\"\u003e#1208\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd CC support to Customer.io adapter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/d00531fd4b38fcb9977429a980c2ca341e1518fd\"\u003e\u003ccode\u003ed00531f\u003c/code\u003e\u003c/a\u003e Prepare 1.29.0 minor release\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6144448cad7cbcf3743d5359e67cd9b393c7ea2d\"\u003e\u003ccode\u003e6144448\u003c/code\u003e\u003c/a\u003e Align release PR with v1.28.2 draft\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://gi...\n\n_Description has been truncated_","html_url":"https://github.com/AcheampongStephen/OpenTelemetry/pull/484","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/AcheampongStephen%2FOpenTelemetry/issues/484","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/484/packages"}},{"old_version":"1.10.2","new_version":"1.12.5","update_type":"minor","path":null,"pr_created_at":"2026-09-21T05:36:22.000Z","version_change":"1.10.2 → 1.12.5","issue":{"uuid":"5523174351","node_id":"PR_kwDORn2jFc8AAAABEXua2g","number":316,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 11 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-10-23T05:35:31.000Z","author_association":null,"state_reason":null,"created_at":"2026-09-21T05:36:22.000Z","updated_at":"2026-10-23T05:35:33.000Z","time_to_close":2764749,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":11,"packages":[{"name":"bandit","old_version":"1.10.2","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"opentelemetry_exporter","old_version":"1.10.0","new_version":"1.11.0","repository_url":"https://github.com/open-telemetry/opentelemetry-erlang"},{"name":"phoenix","old_version":"1.8.3","new_version":"1.8.14","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.1","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"phoenix_live_view","old_version":"1.1.22","new_version":"1.1.33","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.17","new_version":"0.7.4","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.21.0","new_version":"1.28.1","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 11 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.2` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [opentelemetry_exporter](https://github.com/open-telemetry/opentelemetry-erlang) | `1.10.0` | `1.11.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.3` | `1.8.14` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.1` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.22` | `1.1.33` |\n| [req](https://github.com/wojtekmach/req) | `0.5.17` | `0.7.4` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.21.0` | `1.28.1` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.10.2 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.2...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `opentelemetry_exporter` from 1.10.0 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-telemetry/opentelemetry-erlang/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.3 to 1.8.14\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.14\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.14/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.14 (2026-09-14)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix timer leak in LongPoll fetch requests (only used in service or web workers) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise when \u003ccode\u003e:router\u003c/code\u003e given to \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is not a compile time literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6806\"\u003e#6806\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAlign \u003ccode\u003enil\u003c/code\u003e host handling in endpoint configuration and transport\u003c/li\u003e\n\u003cli\u003eUnify path validation for static paths, verified routes and redirects\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.9 (2026-07-07)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/96085e9bc5d65782f2f54e980febe12a2243b728\"\u003e\u003ccode\u003e96085e9\u003c/code\u003e\u003c/a\u003e Release v1.8.14\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d02186da2d7974ca56559f241fccd4cdbbec790f\"\u003e\u003ccode\u003ed02186d\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/64fc7a3608166be90d8e4ddbc45b26d14a825f20\"\u003e\u003ccode\u003e64fc7a3\u003c/code\u003e\u003c/a\u003e unify path validation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6840\"\u003e#6840\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/47b354d3bdc27357a35117677dad7b86b639474b\"\u003e\u003ccode\u003e47b354d\u003c/code\u003e\u003c/a\u003e align nil host handling in endpoint and transport (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6839\"\u003e#6839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7308b1005339c438a55cb2223eec1cd526a454a8\"\u003e\u003ccode\u003e7308b10\u003c/code\u003e\u003c/a\u003e chore: rename secret to salt (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6813\"\u003e#6813\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/0940e49af048c26d2e6389cb1fae9351e8414986\"\u003e\u003ccode\u003e0940e49\u003c/code\u003e\u003c/a\u003e Fix timer leak in Ajax fetch requests (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6811\"\u003e#6811\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b800c679e911275c036b3d0cf9fe20db8818e16f\"\u003e\u003ccode\u003eb800c67\u003c/code\u003e\u003c/a\u003e fix doc references (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6809\"\u003e#6809\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/42ff8e187c2d95c78d6bcae76cded60478fc473b\"\u003e\u003ccode\u003e42ff8e1\u003c/code\u003e\u003c/a\u003e phx.gen.release: simplify Debian version parsing and usage (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6807\"\u003e#6807\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/0a860a022c9cc6d05fab3c8ef149f2116894f57c\"\u003e\u003ccode\u003e0a860a0\u003c/code\u003e\u003c/a\u003e Raise when \u003ccode\u003e:router\u003c/code\u003e given to use Phoenix.VerifiedRoutes is not a literal (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6\"\u003e#6\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/39da0f7a86d63bfc4d137e39a3e04a871f379c41\"\u003e\u003ccode\u003e39da0f7\u003c/code\u003e\u003c/a\u003e Add filter and sort query parameters to Bob Web UI links (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6805\"\u003e#6805\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.3...v1.8.14\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.1 (2026-08-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSkip Ecto repos that cannot be resolved to an extras module\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f12805a9f800d03631219f9f9d5108e49d1b2771\"\u003e\u003ccode\u003ef12805a\u003c/code\u003e\u003c/a\u003e Release v0.9.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/d212df68098ccfecc97dd5d8c51ecfafe53019cb\"\u003e\u003ccode\u003ed212df6\u003c/code\u003e\u003c/a\u003e Skip Ecto repos that cannot be resolved to an extras module (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/493\"\u003e#493\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c79b97691848f4f2fe24080602358f82bbc4ee0a\"\u003e\u003ccode\u003ec79b976\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/c0d9b5eb38573a354a09d4ac0dd694bfe5fbd6a3\"\u003e\u003ccode\u003ec0d9b5e\u003c/code\u003e\u003c/a\u003e update assets CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.22 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.22...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.17 to 0.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.17...v0.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.21.0 to 1.28.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.28.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eCustomer.io adapter: send \u003ccode\u003ecc\u003c/code\u003e recipients in transactional payload \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1200\"\u003e#1200\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.28.0...v1.28.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.28.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd CC support to Customer.io adapter\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/13f10492615cbb9c29cc974f14e18e1c26a551b5\"\u003e\u003ccode\u003e13f1049\u003c/code\u003e\u003c/a\u003e Bump Swoosh to 1.28.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a01321a698d1aa0c3f580d9eb33e8ed8cf753d2\"\u003e\u003ccode\u003e7a01321\u003c/code\u003e\u003c/a\u003e Add cc field to Customer.io adapter payload\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/200187ed0f7066f3a83634c645298d514fccb70f\"\u003e\u003ccode\u003e200187e\u003c/code\u003e\u003c/a\u003e Bump release metadata and changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/eab43870b374d209c9434c2334bfd8d2ca3289d9\"\u003e\u003ccode\u003eeab4387\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/485a58a5bbbcd58d5d625acd900c45ed0554f9cc\"\u003e\u003ccode\u003e485a58a\u003c/code\u003e\u003c/a\u003e Return an error tuple for any unexpected status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/44e6e4405957ce7db605566f1e277da4d32ce263\"\u003e\u003ccode\u003e44e6e44\u003c/code\u003e\u003c/a\u003e Revert decode_json extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/8c04b500bb5352d1558ec04199ecc7cfa3f5341c\"\u003e\u003ccode\u003e8c04b50\u003c/code\u003e\u003c/a\u003e Address review feedback on TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a3d33c53ee0d4c250c56dd903c4975e1d368d51\"\u003e\u003ccode\u003e7a3d33c\u003c/code\u003e\u003c/a\u003e Reference the PR in the changelog entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/120504c73c3628f5ece0d121c7de44a59e61a8d6\"\u003e\u003ccode\u003e120504c\u003c/code\u003e\u003c/a\u003e Add TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3985f9e482401bcb9f47b326bf990d2afb38de59\"\u003e\u003ccode\u003e3985f9e\u003c/code\u003e\u003c/a\u003e build(deps): bump bandit from 1.12.0 to 1.12.4 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1179\"\u003e#1179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.21.0...v1.28.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/brianlangbecker/opentelemetry-demo-ld/pull/316","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/brianlangbecker%2Fopentelemetry-demo-ld/issues/316","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/316/packages"}},{"old_version":"1.12.4","new_version":"1.12.5","update_type":"patch","path":null,"pr_created_at":"2026-08-30T20:05:24.000Z","version_change":"1.12.4 → 1.12.5","issue":{"uuid":"5294109039","node_id":"PR_kwDORUhh7c8AAAABBhpk6A","number":16,"state":"closed","title":"chore(deps): bump the hex-minor-and-patch group across 1 directory with 7 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-09-06T20:05:46.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-30T20:05:24.000Z","updated_at":"2026-09-06T20:05:47.000Z","time_to_close":604822,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"hex-minor-and-patch","update_count":7,"packages":[{"name":"bandit","old_version":"1.12.4","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"phoenix","old_version":"1.8.9","new_version":"1.8.13","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.7.2","new_version":"0.7.4","repository_url":"https://github.com/wojtekmach/req"}],"path":null,"ecosystem":"hex"},"body":"Bumps the hex-minor-and-patch group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.12.4` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.9` | `1.8.13` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.7.2` | `0.7.4` |\n\n\nUpdates `bandit` from 1.12.4 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.4...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.9 to 1.8.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.13/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13 (2026-08-25)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11 (2026-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/dd0b4ceb18957a535af446756b4ce217d2c8cbad\"\u003e\u003ccode\u003edd0b4ce\u003c/code\u003e\u003c/a\u003e Release v1.8.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e30382cc6757c6bf280205bbd736f3b8264b1c7a\"\u003e\u003ccode\u003ee30382c\u003c/code\u003e\u003c/a\u003e handle chrome page resume (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6803\"\u003e#6803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/03308601ddbc74390fd51f97898a299dd5f57a92\"\u003e\u003ccode\u003e0330860\u003c/code\u003e\u003c/a\u003e release 1.8.12 installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a27a0320ec8bcc874a8ae93a85f15dfdd5e91e25\"\u003e\u003ccode\u003ea27a032\u003c/code\u003e\u003c/a\u003e Release v1.8.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/11e30afa21fd774a6f3a2c4c57de219a8eda766d\"\u003e\u003ccode\u003e11e30af\u003c/code\u003e\u003c/a\u003e Clear :return_to session key after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6799\"\u003e#6799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a2bda2d65161ae6a4c3feece249aea294b885829\"\u003e\u003ccode\u003ea2bda2d\u003c/code\u003e\u003c/a\u003e join_ref can be nil on non-join messages (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ce109c9a53577fe600cef9d7c0e3eee4caac5860\"\u003e\u003ccode\u003ece109c9\u003c/code\u003e\u003c/a\u003e Fix release date for v1.8.11 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6795\"\u003e#6795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7e9fb2316b8a06765af3d81e4bda4d1a9fa1a600\"\u003e\u003ccode\u003e7e9fb23\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/3765e81a7f4107a8b23acef363b3bc3ae80c35a8\"\u003e\u003ccode\u003e3765e81\u003c/code\u003e\u003c/a\u003e Add markdown formatter to docs output (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6794\"\u003e#6794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.9...v1.8.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.2.8 to 1.2.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003cli\u003eAllow dynamically updating phx-hook attribute (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4153\"\u003e#4153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow external uploads to be notified on cancel (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4395\"\u003e#4395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003etoEl\u003c/code\u003e to hook \u003ccode\u003ebeforeUpdate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/3616\"\u003e#3616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error message when attributes have been defined after an embedded template (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePhoenix.LiveView.navigation_type/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4393\"\u003e#4393\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel external uploads when navigating away (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4398\"\u003e#4398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow to opt out of phx-remove cascade on navigation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4394\"\u003e#4394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003ephx-drop-target-active\u003c/code\u003e more reliable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4399\"\u003e#4399\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.9\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix live components being wrongly destroyed in some rare cases (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4350\"\u003e#4350\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.11 (2026-08-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure stale diffs are discarded when view rejoins before the initial join succeeds (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure a LiveComponent's async tasks are cancelled when it is removed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4401\"\u003e#4401\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4409\"\u003e#4409\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.10 (2026-08-20)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePreserve \u003ccode\u003eonReply\u003c/code\u003e exceptions in hook \u003ccode\u003epushEvent\u003c/code\u003e / \u003ccode\u003epushEventTo\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4381\"\u003e#4381\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle writer errors like other upload entry errors (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4370\"\u003e#4370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel scheduled submit when auto upload is invalid (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3391\"\u003e#3391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix max_entries not working properly with auto uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/2835\"\u003e#2835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix testing file uploads with multiple entries (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3480\"\u003e#3480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRemove native input required attribute when LiveView tracks uploads (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4377\"\u003e#4377\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAccept new drops afrer too_many_files with max_entries 1 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3368\"\u003e#3368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix runtime hook added node tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4387\"\u003e#4387\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePreserve zero-duration JS transitions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4385\"\u003e#4385\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel submit in \u003ccode\u003eEntryUploader.error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4382\"\u003e#4382\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel infinite scroll throttle timers on destroy (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4384\"\u003e#4384\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eClear focus stack entries on view teardown (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4386\"\u003e#4386\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix join completion for empty recovery markup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4390\"\u003e#4390\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix missing return after child join failure (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4391\"\u003e#4391\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eStop page loading when pushes fail (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4392\"\u003e#4392\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure external metadata failures are reported consistently (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4397\"\u003e#4397\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMark morphdom as dev dependency, as it is already included in the bundle\u003c/li\u003e\n\u003cli\u003eAllow dynamically updating phx-hook attribute (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4153\"\u003e#4153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow external uploads to be notified on cancel (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4395\"\u003e#4395\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ePass \u003ccode\u003etoEl\u003c/code\u003e to hook \u003ccode\u003ebeforeUpdate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/3616\"\u003e#3616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eImprove error message when attributes have been defined after an embedded template (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4396\"\u003e#4396\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003ePhoenix.LiveView.navigation_type/2\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4393\"\u003e#4393\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eCancel external uploads when navigating away (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4398\"\u003e#4398\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow to opt out of phx-remove cascade on navigation (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4394\"\u003e#4394\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMake \u003ccode\u003ephx-drop-target-active\u003c/code\u003e more reliable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4399\"\u003e#4399\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.9 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix live components being wrongly destroyed in some rare cases (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4350\"\u003e#4350\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/eba3493126fe4286df94d46d14bb3f35eed5b2f5\"\u003e\u003ccode\u003eeba3493\u003c/code\u003e\u003c/a\u003e Release v1.2.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9326d2d4113fc5a027704b2d10630be15bcb0323\"\u003e\u003ccode\u003e9326d2d\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b01930c86ae64ae65e16cd9b1574540f1d3cb96f\"\u003e\u003ccode\u003eb01930c\u003c/code\u003e\u003c/a\u003e Ensure formatter does not migrate expressions that close early (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4410\"\u003e#4410\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/49132a9a687919fa9d7a86915fd60c87c48b3461\"\u003e\u003ccode\u003e49132a9\u003c/code\u003e\u003c/a\u003e Optimize live stream option lookup (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4408\"\u003e#4408\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0ea75c574a037dbc3e7fa3c7fe503f3a4cce4788\"\u003e\u003ccode\u003e0ea75c5\u003c/code\u003e\u003c/a\u003e Cancel async tasks of components removed from the tree\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/deee8e6b452ba2fd10283b29500439b5cbf19dfb\"\u003e\u003ccode\u003edeee8e6\u003c/code\u003e\u003c/a\u003e Streamline external upload consumption (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4406\"\u003e#4406\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdfa1d26939f3286a7c9286d760f005d2ee34d27\"\u003e\u003ccode\u003efdfa1d2\u003c/code\u003e\u003c/a\u003e fix some new warnings on 1.21\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a7dc7b65226ef42ba264c2724a6a66fdf5c113af\"\u003e\u003ccode\u003ea7dc7b6\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/170227886f2c30d26d0cbbbdf151a4e01cfdc1f3\"\u003e\u003ccode\u003e1702278\u003c/code\u003e\u003c/a\u003e Tag pending diffs and discard outdated ones (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4405\"\u003e#4405\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d7f327cda0a1c2eb979357889fa612ceada70258\"\u003e\u003ccode\u003ed7f327c\u003c/code\u003e\u003c/a\u003e Release v1.2.10\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.2.8...v1.2.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.7.2 to 0.7.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_params/1\"\u003e\u003ccode\u003eput_params\u003c/code\u003e\u003c/a\u003e: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#put_path_params/1\"\u003e\u003ccode\u003eput_path_params\u003c/code\u003e\u003c/a\u003e: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.4 (2026-08-26)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_params\u003c/code\u003e]: Allow explicit duplicates.\u003c/p\u003e\n\u003cp\u003ein v0.7.0 we made this change:\u003c/p\u003e\n\u003cblockquote\u003e\n\u003cp\u003eOverwrite existing query params instead of appending.\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003cp\u003eThis was a regression for legitimate use cases where some servers require duplicate params.\nNow we allow explicit duplicates but otherwise overwrite any previously set:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003eReq.get!(\u0026quot;?id=1\u0026amp;foo=bar\u0026quot;, params: [id: 2, id: 3]) # ?id=2\u0026amp;id=3\u0026amp;foo=bar\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eput_path_params\u003c/code\u003e]: Do not overwrite redirect target.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/3678dc46efc4bf40545fb6f456d36956a6f2f0c2\"\u003e\u003ccode\u003e3678dc4\u003c/code\u003e\u003c/a\u003e Release v0.7.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/bd160b2c647cfc95cdcd54e80b9dd4d26870c0bc\"\u003e\u003ccode\u003ebd160b2\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_path_params\u003c/code\u003e: Do not overwrite redirect target, closes \u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/562\"\u003e#562\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/9b7330fb63970011dacbedc2afa658f02c35b814\"\u003e\u003ccode\u003e9b7330f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Preserve order\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/b099a125dc97c5d90765bbd371e86aec30187700\"\u003e\u003ccode\u003eb099a12\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eput_params\u003c/code\u003e: Allow explicit duplicate param names\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.7.2...v0.7.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/hiroshiyui/baudrate/pull/16","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hiroshiyui%2Fbaudrate/issues/16","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/16/packages"}},{"old_version":"1.12.1","new_version":"1.12.5","update_type":"patch","path":null,"pr_created_at":"2026-08-29T00:52:28.000Z","version_change":"1.12.1 → 1.12.5","issue":{"uuid":"5283554009","node_id":"PR_kwDORFrJls8AAAABBZ0AZg","number":77,"state":"closed","title":"chore(deps): bump bandit from 1.12.1 to 1.12.5","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-09-13T09:25:11.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-29T00:52:28.000Z","updated_at":"2026-09-13T09:25:16.000Z","time_to_close":1326763,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps)","packages":[{"name":"bandit","old_version":"1.12.1","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.1 to 1.12.5.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.1...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.1\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/hyperpolymath/no-nonsense-nntps/pull/77","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fno-nonsense-nntps/issues/77","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/77/packages"}},{"old_version":"1.8.0","new_version":"1.12.5","update_type":"minor","path":null,"pr_created_at":"2026-08-28T11:54:56.000Z","version_change":"1.8.0 → 1.12.5","issue":{"uuid":"5277945307","node_id":"PR_kwDOQi913M8AAAABBVW5EA","number":402,"state":"closed","title":"build(deps): bump the mix-production-dependencies group across 1 directory with 10 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-21T11:56:15.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-28T11:54:56.000Z","updated_at":"2026-09-21T11:56:17.000Z","time_to_close":2073679,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): bump","group_name":"mix-production-dependencies","update_count":10,"packages":[{"name":"bandit","old_version":"1.8.0","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"},{"name":"dns_cluster","old_version":"0.2.0","new_version":"0.3.0","repository_url":"https://github.com/phoenixframework/dns_cluster"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.1","new_version":"1.8.13","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.5.16","new_version":"0.7.3","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.19.8","new_version":"1.28.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"},{"name":"telemetry_metrics","old_version":"1.1.0","new_version":"1.2.0","repository_url":"https://github.com/beam-telemetry/telemetry_metrics"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 9 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.8.0` | `1.12.5` |\n| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.1` | `1.8.13` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.16` | `0.7.3` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.19.8` | `1.28.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n| [telemetry_metrics](https://github.com/beam-telemetry/telemetry_metrics) | `1.1.0` | `1.2.0` |\n\n\nUpdates `bandit` from 1.8.0 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.3 (25 July 2026)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.8.0...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `dns_cluster` from 0.2.0 to 0.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/dns_cluster/blob/v0.3.0/CHANGELOG.md\"\u003edns_cluster's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e0.3.0 (2026-08-25)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSupport srv cluster queries\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/3311e2c0952bcf500e3bfc92ec04087e942defe4\"\u003e\u003ccode\u003e3311e2c\u003c/code\u003e\u003c/a\u003e Release v0.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/790203e8c3ee1444aff94dce8a6b0651d756e1e3\"\u003e\u003ccode\u003e790203e\u003c/code\u003e\u003c/a\u003e Remove redundant clause\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/8a92211541ce897765872ab9ff907035bc73be67\"\u003e\u003ccode\u003e8a92211\u003c/code\u003e\u003c/a\u003e Add missing alias for \u003ccode\u003eDNSCluster.Resolver\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/19\"\u003e#19\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/cc5bfcf1b7c4979cd30630f298c9355ce764076b\"\u003e\u003ccode\u003ecc5bfcf\u003c/code\u003e\u003c/a\u003e Housekeeping for less complexity and more readability (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/18\"\u003e#18\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/a3fcedf7d0bbe926842eaa47fc66d06e63711c43\"\u003e\u003ccode\u003ea3fcedf\u003c/code\u003e\u003c/a\u003e Clarify RELEASE_NODE example in README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/d36d83e2f72723c009d9da29454a085b0bd8ee20\"\u003e\u003ccode\u003ed36d83e\u003c/code\u003e\u003c/a\u003e Update documentation for node discovery process\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/f6c0f58b331c091f4dbdad0542941ea7b6f61399\"\u003e\u003ccode\u003ef6c0f58\u003c/code\u003e\u003c/a\u003e support srv cluster queries (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/16\"\u003e#16\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/420c0bc7e568effc4d3a83b19630db0b1f005eea\"\u003e\u003ccode\u003e420c0bc\u003c/code\u003e\u003c/a\u003e Update README.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/dns_cluster/commit/9116c07c3491ce2e36b21b2bcf4eec0e00d5d227\"\u003e\u003ccode\u003e9116c07\u003c/code\u003e\u003c/a\u003e Include the changelog in the docs (\u003ca href=\"https://redirect.github.com/phoenixframework/dns_cluster/issues/15\"\u003e#15\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/phoenixframework/dns_cluster/compare/v0.2.0...v0.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.1 to 1.8.13\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.13\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6804\"\u003e#6804\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.12\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.auth] Fix return_to session key not being cleared after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6798\"\u003e#6798\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.13/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/dd0b4ceb18957a535af446756b4ce217d2c8cbad\"\u003e\u003ccode\u003edd0b4ce\u003c/code\u003e\u003c/a\u003e Release v1.8.13\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e30382cc6757c6bf280205bbd736f3b8264b1c7a\"\u003e\u003ccode\u003ee30382c\u003c/code\u003e\u003c/a\u003e handle chrome page resume (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6803\"\u003e#6803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/03308601ddbc74390fd51f97898a299dd5f57a92\"\u003e\u003ccode\u003e0330860\u003c/code\u003e\u003c/a\u003e release 1.8.12 installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a27a0320ec8bcc874a8ae93a85f15dfdd5e91e25\"\u003e\u003ccode\u003ea27a032\u003c/code\u003e\u003c/a\u003e Release v1.8.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/11e30afa21fd774a6f3a2c4c57de219a8eda766d\"\u003e\u003ccode\u003e11e30af\u003c/code\u003e\u003c/a\u003e Clear :return_to session key after logging in (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6799\"\u003e#6799\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a2bda2d65161ae6a4c3feece249aea294b885829\"\u003e\u003ccode\u003ea2bda2d\u003c/code\u003e\u003c/a\u003e join_ref can be nil on non-join messages (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6800\"\u003e#6800\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ce109c9a53577fe600cef9d7c0e3eee4caac5860\"\u003e\u003ccode\u003ece109c9\u003c/code\u003e\u003c/a\u003e Fix release date for v1.8.11 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6795\"\u003e#6795\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/7e9fb2316b8a06765af3d81e4bda4d1a9fa1a600\"\u003e\u003ccode\u003e7e9fb23\u003c/code\u003e\u003c/a\u003e update deps\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/3765e81a7f4107a8b23acef363b3bc3ae80c35a8\"\u003e\u003ccode\u003e3765e81\u003c/code\u003e\u003c/a\u003e Add markdown formatter to docs output (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6794\"\u003e#6794\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.1...v1.8.13\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.18 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.18...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.16 to 0.7.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.3\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Revert \u0026quot;Automatically change GET to POST when request body is set.\u0026quot;\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eencode_body\u003c/code\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e\u003ccode\u003eput_aws_sigv4\u003c/code\u003e: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.3 (2026-08-19)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.2 (2026-07-31)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"Revert\" title=\"Automatically change GET to POST when request body is set.\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003efinch: name\u003c/code\u003e in favour of \u003ccode\u003efinch: [name: name]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_timeout: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_timeout: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_max_idle_time: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_max_idle_time: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003e:finch_request\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Handle individual response body chunks.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Support non-UTF8 request params.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Put original request private data in \u003ccode\u003econn.private\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Allow descendant processes.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/290118154f7183f67e49dba1f6755113e38bf4be\"\u003e\u003ccode\u003e2901181\u003c/code\u003e\u003c/a\u003e Release v0.7.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e857078561a02ee4aa037edaca51103f6f52f04e\"\u003e\u003ccode\u003ee857078\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;\u003ccode\u003eencode_body\u003c/code\u003e: Automatically change GET to POST when request body is ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/6a4f305e1f3bc053352cb66c62f6dfc164bb1d68\"\u003e\u003ccode\u003e6a4f305\u003c/code\u003e\u003c/a\u003e Release v0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/d7708301c9903c8d26c6837396350c23b4813f58\"\u003e\u003ccode\u003ed770830\u003c/code\u003e\u003c/a\u003e Hide body: fun for now\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e450b253c3e4cd7029633aabce9ff1c9486c665d\"\u003e\u003ccode\u003ee450b25\u003c/code\u003e\u003c/a\u003e Update CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/81234199614349a9ce46862fbcd92fe93287f98f\"\u003e\u003ccode\u003e8123419\u003c/code\u003e\u003c/a\u003e Fix flaky httpc into: fun test\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.16...v0.7.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.19.8 to 1.28.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.28.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare Swoosh 1.28.0 minor release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1192\"\u003e#1192\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRegenerate styles with Tailwind CSS \u003ca href=\"https://github.com/github-actions\"\u003e\u003ccode\u003e@​github-actions\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1191\"\u003e#1191\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1190\"\u003eswoosh/swoosh#1190\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.27.1...v1.28.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReturn empty text for a missing XML node instead of crashing (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1185\"\u003e#1185\u003c/a\u003e) \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ebuild(deps): bump cowboy from 2.17.0 to 2.18.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump hackney from 4.5.2 to 4.7.3 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003ebuild(deps): bump req from 0.6.2 to 0.7.2 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1183\"\u003e#1183\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1186\"\u003eswoosh/swoosh#1186\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.27.0...1.27.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.26.3 🚀\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.28.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd TurboSMTP adapter \u003ca href=\"https://github.com/NewtTheWolf\"\u003e\u003ccode\u003e@​NewtTheWolf\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1190\"\u003e#1190\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix \u003ccode\u003eSwoosh.Adapters.AmazonSES\u003c/code\u003e crashing when the SES error response XML is missing an expected node \u003ca href=\"https://github.com/youdie006\"\u003e\u003ccode\u003e@​youdie006\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1186\"\u003e#1186\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/200187ed0f7066f3a83634c645298d514fccb70f\"\u003e\u003ccode\u003e200187e\u003c/code\u003e\u003c/a\u003e Bump release metadata and changelog\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/eab43870b374d209c9434c2334bfd8d2ca3289d9\"\u003e\u003ccode\u003eeab4387\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/485a58a5bbbcd58d5d625acd900c45ed0554f9cc\"\u003e\u003ccode\u003e485a58a\u003c/code\u003e\u003c/a\u003e Return an error tuple for any unexpected status\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/44e6e4405957ce7db605566f1e277da4d32ce263\"\u003e\u003ccode\u003e44e6e44\u003c/code\u003e\u003c/a\u003e Revert decode_json extraction\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/8c04b500bb5352d1558ec04199ecc7cfa3f5341c\"\u003e\u003ccode\u003e8c04b50\u003c/code\u003e\u003c/a\u003e Address review feedback on TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7a3d33c53ee0d4c250c56dd903c4975e1d368d51\"\u003e\u003ccode\u003e7a3d33c\u003c/code\u003e\u003c/a\u003e Reference the PR in the changelog entry\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/120504c73c3628f5ece0d121c7de44a59e61a8d6\"\u003e\u003ccode\u003e120504c\u003c/code\u003e\u003c/a\u003e Add TurboSMTP adapter\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3985f9e482401bcb9f47b326bf990d2afb38de59\"\u003e\u003ccode\u003e3985f9e\u003c/code\u003e\u003c/a\u003e build(deps): bump bandit from 1.12.0 to 1.12.4 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1179\"\u003e#1179\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ffa34f6b958d747e31fc0ce53328c8842ee75d4b\"\u003e\u003ccode\u003effa34f6\u003c/code\u003e\u003c/a\u003e build(deps): bump cowboy from 2.17.0 to 2.18.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1180\"\u003e#1180\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/90f66ece3024a98a18c92dac3a47b1afcf81bca5\"\u003e\u003ccode\u003e90f66ec\u003c/code\u003e\u003c/a\u003e build(deps): bump hackney from 4.5.2 to 4.7.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1187\"\u003e#1187\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.19.8...v1.28.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry_metrics` from 1.1.0 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md\"\u003etelemetry_metrics's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/tree/v1.2.0\"\u003e1.2.0\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for functions in \u003ccode\u003etags\u003c/code\u003e (this supersedes \u003ccode\u003etag_values\u003c/code\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAssorted optimizations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanged\u003c/h3\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry_metrics/commits\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/openobserve/opentelemetry-demo-dataset/pull/402","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/openobserve%2Fopentelemetry-demo-dataset/issues/402","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/402/packages"}},{"old_version":"1.12.3","new_version":"1.12.5","update_type":"patch","path":"the dev-and-test group","pr_created_at":"2026-08-24T11:56:08.000Z","version_change":"1.12.3 → 1.12.5","issue":{"uuid":"5234421228","node_id":"PR_kwDOTOsJ788AAAABAyuyyA","number":18,"state":"closed","title":"Bump bandit from 1.12.3 to 1.12.5 in the dev-and-test group","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-07T11:55:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T11:56:08.000Z","updated_at":"2026-09-07T11:55:24.000Z","time_to_close":1209554,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","packages":[{"name":"bandit","old_version":"1.12.3","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":"the dev-and-test group","ecosystem":"hex"},"body":"Bumps the dev-and-test group with 1 update: [bandit](https://github.com/mtrudel/bandit).\n\nUpdates `bandit` from 1.12.3 to 1.12.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.12.4 (27 July 2026)\u003c/h2\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.3...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.3\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/houllette/ex_ntfy/pull/18","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/houllette%2Fex_ntfy/issues/18","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/18/packages"}},{"old_version":"1.12.4","new_version":"1.12.5","update_type":"patch","path":null,"pr_created_at":"2026-08-24T09:46:12.000Z","version_change":"1.12.4 → 1.12.5","issue":{"uuid":"5233339291","node_id":"PR_kwDOTHhUTs8AAAABAx3MIA","number":13,"state":"closed","title":"deps(deps-dev): bump bandit from 1.12.4 to 1.12.5","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":"2026-10-04T19:12:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-24T09:46:12.000Z","updated_at":"2026-10-04T19:12:17.000Z","time_to_close":3576356,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps-dev)","packages":[{"name":"bandit","old_version":"1.12.4","new_version":"1.12.5","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.12.4 to 1.12.5.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.12.5 (20 Aug 2026)\u003c/h2\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eBound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/671\"\u003e#671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor Accept-Encoding q-values, the wildcard, and case-insensitive codings (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/665\"\u003e#665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat proxy-connection as a connection-specific header in HTTP/2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/632\"\u003e#632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReturn FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/652\"\u003e#652\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTreat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/656\"\u003e#656\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject send_file ranges past EOF instead of emitting a negative Content-Length (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/653\"\u003e#653\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject compressed WebSocket control frames regardless of the fin bit (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/651\"\u003e#651\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/631\"\u003e#631\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix typos (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/627\"\u003e#627\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix non-deterministic compile-time code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/646\"\u003e#646\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eLazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdd tests for untested configuration options (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/659\"\u003e#659\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eMatch the weak-etag prefix W/ explicitly (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/657\"\u003e#657\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDo not duplicate an existing vary: accept-encoding header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/658\"\u003e#658\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHonor the close/keep-alive token inside a comma-separated Connection header (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/655\"\u003e#655\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eInitialize the per-stream receive window from the advertised initial_window_size (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/654\"\u003e#654\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eKeep track of body_length to avoid list iterations (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/645\"\u003e#645\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAvoid per-header length/1 and option lookups in do_read_headers! (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/614\"\u003e#614\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/626\"\u003e#626\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/9571499ad29fbfbc465288764e2d91bece0eaff7\"\u003e\u003ccode\u003e9571499\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f6914aad14bb1365dd6f306aa592cfb0819bed3e\"\u003e\u003ccode\u003ef6914aa\u003c/code\u003e\u003c/a\u003e Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d38cf046c9a3cae4d0f88001c2ceb4143f86366b\"\u003e\u003ccode\u003ed38cf04\u003c/code\u003e\u003c/a\u003e Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/670\"\u003e#670\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/cce7c5fd9cc47476f949f138a46752fb286da56b\"\u003e\u003ccode\u003ecce7c5f\u003c/code\u003e\u003c/a\u003e Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eca17134cf2a03cd0f8dad2350876bce81954cdc\"\u003e\u003ccode\u003eeca1713\u003c/code\u003e\u003c/a\u003e Fixup recent test noise\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b65c23576941f99c7d54ec9019efcd200fafda67\"\u003e\u003ccode\u003eb65c235\u003c/code\u003e\u003c/a\u003e Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/667\"\u003e#667\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/4ccc008db5bcbea3a277e08f9f8be05753064cd8\"\u003e\u003ccode\u003e4ccc008\u003c/code\u003e\u003c/a\u003e Treat abortive-close posix reasons as client closures in logging (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/663\"\u003e#663\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/274eb554109af8f3bea0817532a8a4b38cf9bdd6\"\u003e\u003ccode\u003e274eb55\u003c/code\u003e\u003c/a\u003e Lazily precompile the invalid-field-value match pattern (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/662\"\u003e#662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/10710de40367e4a3a1027d9b0be7de7a8ecbfad7\"\u003e\u003ccode\u003e10710de\u003c/code\u003e\u003c/a\u003e Enforce the chunk-size grammar in a single pass (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/661\"\u003e#661\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/d69202e6df7901a3a09a8f5ea4808d0ae98ab00f\"\u003e\u003ccode\u003ed69202e\u003c/code\u003e\u003c/a\u003e Unify case-insensitive comma-separated header token checks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/660\"\u003e#660\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.12.4...1.12.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.12.4\u0026new-version=1.12.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nYou can trigger a rebase of this PR by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e\n\n\u003e **Note**\n\u003e Automatic rebases have been disabled on this pull request as it has been open for over 30 days.\n","html_url":"https://github.com/gilbertwong96/longbridge/pull/13","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/gilbertwong96%2Flongbridge/issues/13","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/13/packages"}},{"old_version":"1.11.1","new_version":"1.12.4","update_type":"minor","path":null,"pr_created_at":"2026-08-18T03:49:41.000Z","version_change":"1.11.1 → 1.12.4","issue":{"uuid":"5177865380","node_id":"PR_kwDOSli0c88AAAABAGBhCg","number":15,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-09-01T03:50:08.000Z","author_association":null,"state_reason":null,"created_at":"2026-08-18T03:49:41.000Z","updated_at":"2026-09-01T03:50:13.000Z","time_to_close":1209627,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.4","repository_url":"https://github.com/mtrudel/bandit"},{"name":"phoenix","old_version":"1.8.7","new_version":"1.8.11","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_dashboard","old_version":"0.8.7","new_version":"0.9.0","repository_url":"https://github.com/phoenixframework/phoenix_live_dashboard"},{"name":"req","old_version":"0.5.18","new_version":"0.7.2","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.25.2","new_version":"1.27.0","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.1","repository_url":"https://github.com/phoenixframework/tailwind"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 6 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.11.1` | `1.12.4` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.7` | `1.8.11` |\n| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.18` | `0.7.2` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.25.2` | `1.27.0` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |\n\n\nUpdates `bandit` from 1.11.1 to 1.12.4\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.4 (27 July 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly send Connection: close header when client requests closure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/617\"\u003e#617\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eDisallow transfer-encoding on HTTP/1.0 connections (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/618\"\u003e#618\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eReject malformed header lines (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix handling of chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eTighten up CI against supply chain attacks (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e, thanks \u003ca href=\"https://github.com/Totara-thib\"\u003e\u003ccode\u003e@​Totara-thib\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eReorganize and increase coverage of HTTP/1 tests to better match RFC structure (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/616\"\u003e#616\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eTolerate a leading newline on HTTP/1 requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSend \u0026quot;100 Continue\u0026quot; interim response before reading body if client requests it (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/624\"\u003e#624\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.3 (25 July 2026)\u003c/h1\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eCache connection-level data between HTTP/1 keepalives (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/603\"\u003e#603\u003c/a\u003e, thanks \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.2 (25 July 2026)\u003c/h1\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove internal HTTP/2 error handling to be better about closing stream/connection\u003c/li\u003e\n\u003cli\u003eCoalesce header and body in to single transport send (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/606\"\u003e#606\u003c/a\u003e, thanks \u003ca href=\"https://github.com/NelsonVides\"\u003e\u003ccode\u003e@​NelsonVides\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove compression behaviour when streaming an explicitly length delimited body (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/605\"\u003e#605\u003c/a\u003e, thanks \u003ca href=\"https://github.com/elibosley\"\u003e\u003ccode\u003e@​elibosley\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eQuiet WebSocket deserialization errors, add verbosity config lever (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/610\"\u003e#610\u003c/a\u003e, thanks \u003ca href=\"https://github.com/ericmj\"\u003e\u003ccode\u003e@​ericmj\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eSend connection: close when we're at max_requests (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/613\"\u003e#613\u003c/a\u003e, thanks \u003ca href=\"https://github.com/joshdchang\"\u003e\u003ccode\u003e@​joshdchang\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix bogus check for unmasked WebSocket frames\n(\u003ca href=\"https://github.com/mtrudel/bandit/security/advisories/GHSA-rhh8-5xw9-c3gm\"\u003ehttps://github.com/mtrudel/bandit/security/advisories/GHSA-rhh8-5xw9-c3gm\u003c/a\u003e,\nthanks \u003ca href=\"https://github.com/lukaszsamson\"\u003e\u003ccode\u003e@​lukaszsamson\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eEnforce max_header_list_size if overridden\n(\u003ca href=\"https://github.com/mtrudel/bandit/security/advisories/GHSA-9q5m-g6v3-6772\"\u003ehttps://github.com/mtrudel/bandit/security/advisories/GHSA-9q5m-g6v3-6772\u003c/a\u003e,\nthanks \u003ca href=\"https://github.com/lukaszsamson\"\u003e\u003ccode\u003e@​lukaszsamson\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.1 (24 July 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix DoS issue with fragmented WebSocket frames (CVE-2026-65623, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/00d532fa0618d969cdb97590116175836a357a87\"\u003e\u003ccode\u003e00d532f\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/16632032a82c7568c8d14de9d753c141f7ecd39a\"\u003e\u003ccode\u003e1663203\u003c/code\u003e\u003c/a\u003e Handle clients sending an \u003ccode\u003eExpect: 100-continue\u003c/code\u003e header before sending a body...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3c6595290d1fc28bbfea17f5124814e96bb7ee2\"\u003e\u003ccode\u003ee3c6595\u003c/code\u003e\u003c/a\u003e Fixup linting error\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c430bf5e6c95598e92d11583334e3ff297231d30\"\u003e\u003ccode\u003ec430bf5\u003c/code\u003e\u003c/a\u003e Reapply \u0026quot;Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a6fabe897e008e78ebf75fbbb322967c5729b1e0\"\u003e\u003ccode\u003ea6fabe8\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e479c3bec3a1a67cd6332b67bc9efc4e6c6da038\"\u003e\u003ccode\u003ee479c3b\u003c/code\u003e\u003c/a\u003e Pin GitHub Actions to commit SHAs (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/623\"\u003e#623\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/eba04e484dc7e1c66f001413969dc73c1ab937b2\"\u003e\u003ccode\u003eeba04e4\u003c/code\u003e\u003c/a\u003e Tolerate a leading empty line before the request line (RFC9112§2.2) (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/622\"\u003e#622\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c31e9e3c76dcbfc239a96eabed5341ced7885ae5\"\u003e\u003ccode\u003ec31e9e3\u003c/code\u003e\u003c/a\u003e Fix crash on unrecognized chunk extensions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/621\"\u003e#621\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c24bc005959a7d76c5b00146c98fa4fdeddec84c\"\u003e\u003ccode\u003ec24bc00\u003c/code\u003e\u003c/a\u003e Reject header values containing CR, LF, or NUL (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/620\"\u003e#620\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a518b29553abeb5b6af35445eca0ea2a17497de1\"\u003e\u003ccode\u003ea518b29\u003c/code\u003e\u003c/a\u003e Reject requests with multiple Host headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/619\"\u003e#619\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.7 to 1.8.11\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/releases\"\u003ephoenix's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.11\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/v1.8.11/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.11 (2028-08-12)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Phoenix crashing on boot if Mix is available, but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6789\"\u003e#6789\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.10 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[Phoenix.CodeReloader] Fix \u0026quot;must restart your server\u0026quot; messages from code reloader when compile.lock mtime changes without a content change (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6753\"\u003e#6753\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Endpoint] add missing websocket options (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6758\"\u003e#6758\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.release] Use Bob API to find Docker images in \u003ccode\u003ephx.gen.release --docker\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e[Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Router] Support plugs with options in \u003ccode\u003epipe_throught\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6755\"\u003e#6755\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[Phoenix.Token] document encode options (see \u003ca href=\"https://github.com/elixir-plug/plug_crypto/commit/35dd3d3da1b8b2e0009e3efc40bc67d3822f7210\"\u003ethe change in plug_crypto\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix.js] Ensure transport errors are identifiable (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6763\"\u003e#6763\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.9 (2026-07-07)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-6983-jfq8-485w\"\u003eCVE-2026-56811\u003c/a\u003e: Add a \u003ccode\u003emax_channels_per_transport\u003c/code\u003e option (defaulting to 100) to prevent a single client from spawning an unbounded number of channels (processes), eventually exhausting the server's memory or process limit.\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-63mc-hw7g-86rr\"\u003eCVE-2026-56812\u003c/a\u003e: Prevent presence keys from colliding with \u003ccode\u003eObject.prototype\u003c/code\u003e properties members, crashing the JS Presence client\u003c/li\u003e\n\u003cli\u003eEnforce longpoll batch size introduced in 1.8.6. This is additional hardening against \u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e. If your application sends events with a very high frequency and uses long polling, such that a single longpoll request would exceed 100 events, you should update to 1.8.7 first.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.8.8 (2026-06-10)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Use LiveView 1.2.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a9866540bb79587b03abdd2c3e6d3d2eb386afaf\"\u003e\u003ccode\u003ea986654\u003c/code\u003e\u003c/a\u003e Release v1.8.11\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/51121f3a339d657c46d4074fb2fd8584a090d6f8\"\u003e\u003ccode\u003e51121f3\u003c/code\u003e\u003c/a\u003e fix starting phoenix with mix available but not started (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6790\"\u003e#6790\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/109aacd1bf8999058e6cc2cb9cb86d8abfa2f18d\"\u003e\u003ccode\u003e109aacd\u003c/code\u003e\u003c/a\u003e Release v1.8.10\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/c6c176179bcbd5f088a430db9d47d2d6a03ddea6\"\u003e\u003ccode\u003ec6c1761\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/9f9265446b415e350cd4377b6407adb17bddd55d\"\u003e\u003ccode\u003e9f92654\u003c/code\u003e\u003c/a\u003e release the stale reply binding of a buffered push (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6788\"\u003e#6788\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/5351c74747131ea8307287d53fbaca9d2f0603d2\"\u003e\u003ccode\u003e5351c74\u003c/code\u003e\u003c/a\u003e Improve transport docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/5dca4ed202ed8d15df3fcaf8f407c207aa614d21\"\u003e\u003ccode\u003e5dca4ed\u003c/code\u003e\u003c/a\u003e Make pipe_through accepts pipelines and all plug forms (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6760\"\u003e#6760\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/127f545acd2736ee2bc8a00efa53c7e163f93153\"\u003e\u003ccode\u003e127f545\u003c/code\u003e\u003c/a\u003e Include per-mount :check_origin in the origin policy cache key (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6774\"\u003e#6774\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b6b77e46523703a612dbfac568defa5a2399531b\"\u003e\u003ccode\u003eb6b77e4\u003c/code\u003e\u003c/a\u003e Close and retry the longpoll transport when a batch POST times out (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6769\"\u003e#6769\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8e69e9cd69aa02504dc04b53266d8576dfd33751\"\u003e\u003ccode\u003e8e69e9c\u003c/code\u003e\u003c/a\u003e Fix broken doc reference in Phoenix.Debug (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6772\"\u003e#6772\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.7...v1.8.11\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_dashboard` from 0.8.7 to 0.9.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md\"\u003ephoenix_live_dashboard's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.9.0 (2026-08-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eRequire Phoenix LiveView 1.0+\u003c/li\u003e\n\u003cli\u003eRequire Elixir 1.15+\u003c/li\u003e\n\u003cli\u003eAdd a compact nested list view for application supervision trees\u003c/li\u003e\n\u003cli\u003eAllow overriding the Ecto Stats info module per repository by passing \u003ccode\u003e{repo, info_module}\u003c/code\u003e tuples in \u003ccode\u003e:ecto_repos\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdd refresh_interval as a reporting option for chart components\u003c/li\u003e\n\u003cli\u003eDisplay process label in application and process views\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/6ef6963e44bdd7ae18b0d470a090d1beca344f31\"\u003e\u003ccode\u003e6ef6963\u003c/code\u003e\u003c/a\u003e Release v0.9.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/f110b3d86dce7062bc27770254108f8133ca8d9c\"\u003e\u003ccode\u003ef110b3d\u003c/code\u003e\u003c/a\u003e Allow custom info module for Ecto repos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/491\"\u003e#491\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4be4a33d36b9ea0e377193519403f7da79f7911b\"\u003e\u003ccode\u003e4be4a33\u003c/code\u003e\u003c/a\u003e Bump and pin GHA workflows (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/490\"\u003e#490\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ed1ee7f13fb48ad8f0dfbb53ce0c277f9c8ee4a4\"\u003e\u003ccode\u003eed1ee7f\u003c/code\u003e\u003c/a\u003e Include more recent OTP versions in CI (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/489\"\u003e#489\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/64cad40615882cf240d7c9f682d575e0d6b1d9c0\"\u003e\u003ccode\u003e64cad40\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/ae6ed8927cb2fa73bff07943ca2261e357b6b3e5\"\u003e\u003ccode\u003eae6ed89\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/487\"\u003e#487\u003c/a\u003e from nathanl/list_view\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/8f7b6ab91aff8998ee522ba3a628c1ec795c3614\"\u003e\u003ccode\u003e8f7b6ab\u003c/code\u003e\u003c/a\u003e Add a nested list view of application processes\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/4468d1344412c81aacb89a39684296856c87cffc\"\u003e\u003ccode\u003e4468d13\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_dashboard/issues/485\"\u003e#485\u003c/a\u003e from phoenixframework/sd-runtime-hook\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fed9e58bc1e21da98ad88f46e84706e506d236b8\"\u003e\u003ccode\u003efed9e58\u003c/code\u003e\u003c/a\u003e document runtime colocated hook usage\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/commit/fab5e4f5c1c5d7aa5a3960878e2aa5e06f6753d9\"\u003e\u003ccode\u003efab5e4f\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_dashboard/compare/v0.8.7...v0.9.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.30 to 1.1.33\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.33/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.33 (2026-08-10)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/security/advisories/GHSA-36m4-rm57-3prf\"\u003eCVE-2026-64941\u003c/a\u003e: Fix open redirect in \u003ccode\u003eredirect/2\u003c/code\u003e via ASCII tab, LF and CR\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.32 (2026-06-11)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix stale events from the previous LiveView being sent to the new LiveView after a live redirect (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.31 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/de84c71f75069e0f18d57551814e468353294008\"\u003e\u003ccode\u003ede84c71\u003c/code\u003e\u003c/a\u003e update nodejs for npm publish\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/b309669c347ee74157279f031a37d4409d809fd4\"\u003e\u003ccode\u003eb309669\u003c/code\u003e\u003c/a\u003e Release v1.1.33\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c164f83df0bb922dfff9c60d125da5b0cfd6619\"\u003e\u003ccode\u003e1c164f8\u003c/code\u003e\u003c/a\u003e expand invalid local url chars\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2714408d495fc282ea0f71d2a4f2697826d89578\"\u003e\u003ccode\u003e2714408\u003c/code\u003e\u003c/a\u003e Release v1.1.32\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/a9c01bdf660e49829819860bcb2a1f9f50371568\"\u003e\u003ccode\u003ea9c01bd\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0710c825e3f31ae433e0b8c1b6f44906f02a97b2\"\u003e\u003ccode\u003e0710c82\u003c/code\u003e\u003c/a\u003e format\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/948e6f8581e0b880b9f6b20514d537edb7f1f2cf\"\u003e\u003ccode\u003e948e6f8\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/9457c4888ffd31211b245135fddb08eb91d995d1\"\u003e\u003ccode\u003e9457c48\u003c/code\u003e\u003c/a\u003e fix test from backport\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cb5d43cc9e164207473180a37723844ca272c31a\"\u003e\u003ccode\u003ecb5d43c\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f5e055bbdb4df337ad2b5acd3167ccf1d604d04d\"\u003e\u003ccode\u003ef5e055b\u003c/code\u003e\u003c/a\u003e When navigating, prevent outdated events from reaching the new view (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4291\"\u003e#4291\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.30...v1.1.33\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.18 to 0.7.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.7.2\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e[\u003ccode\u003eencode_body\u003c/code\u003e]: Bring back \u003ccode\u003eform_multipart: [{string_name, value}]\u003c/code\u003e.\u003c/li\u003e\n\u003cli\u003e[\u003ccode\u003eput_aws_sigv4\u003c/code\u003e]: Fix AWS SigV4 compatibility with Supabase Storage S3.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.1 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDeprecate \u003ccode\u003ecache: true\u003c/code\u003e/[\u003ccode\u003ecache\u003c/code\u003e] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.7.0 (2026-07-28)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Add \u003ccode\u003eReq.new(req, options)\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e]: Treat URL userinfo as Basic Authentication.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq\u003c/code\u003e], [\u003ccode\u003eReq.Request\u003c/code\u003e]: Deprecate \u003ccode\u003eadapter: fun\u003c/code\u003e in favour of \u003ccode\u003eadapter: mod\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: \u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Remove \u003ccode\u003ecurrent_request_steps\u003c/code\u003e field.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Request\u003c/code\u003e]: Fix redacting remaining auth values.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003erun_finch\u003c/code\u003e step with [\u003ccode\u003eReq.Finch\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003cstrong\u003e(BREAKING CHANGE)\u003c/strong\u003e Replace \u003ccode\u003eput_plug\u003c/code\u003e and \u003ccode\u003erun_plug\u003c/code\u003e steps with [\u003ccode\u003eReq.Plug\u003c/code\u003e] adapter module.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003efinch: options\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Support \u003ccode\u003e:request_timeout\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Fix handling duplicate response headers.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003efinch: name\u003c/code\u003e in favour of \u003ccode\u003efinch: [name: name]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_timeout: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_timeout: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003epool_max_idle_time: value\u003c/code\u003e in favour of \u003ccode\u003efinch: [pool_max_idle_time: value]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Finch\u003c/code\u003e]: Deprecate \u003ccode\u003e:finch_request\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Handle individual response body chunks.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Support non-UTF8 request params.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Plug\u003c/code\u003e]: Put original request private data in \u003ccode\u003econn.private\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Allow descendant processes.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eReq.Test\u003c/code\u003e]: Fix concurrent plug fetches immediately after switching to shared mode.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003ecompress_body\u003c/code\u003e]: Do nothing when request content-encoding is already set.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/c1363574e857ef58335b57be38814fd105045d19\"\u003e\u003ccode\u003ec136357\u003c/code\u003e\u003c/a\u003e Release v0.7.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e9d4ebc0a0ec6b4809af5a2f572f2e88cb57490d\"\u003e\u003ccode\u003ee9d4ebc\u003c/code\u003e\u003c/a\u003e Fix AWS SigV4 compatibility with Supabase Storage S3 (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/498\"\u003e#498\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/168a11e7af96b7001023ffa0da74941034c11ad0\"\u003e\u003ccode\u003e168a11e\u003c/code\u003e\u003c/a\u003e Release v0.7.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/a9c24a11955c9213dc31c61c29740f40b9751020\"\u003e\u003ccode\u003ea9c24a1\u003c/code\u003e\u003c/a\u003e Deprecate \u003ccode\u003ecache: true\u003c/code\u003e/\u003ccode\u003ecache\u003c/code\u003e step\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/6a4f305e1f3bc053352cb66c62f6dfc164bb1d68\"\u003e\u003ccode\u003e6a4f305\u003c/code\u003e\u003c/a\u003e Release v0.7.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/d7708301c9903c8d26c6837396350c23b4813f58\"\u003e\u003ccode\u003ed770830\u003c/code\u003e\u003c/a\u003e Hide body: fun for now\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/e450b253c3e4cd7029633aabce9ff1c9486c665d\"\u003e\u003ccode\u003ee450b25\u003c/code\u003e\u003c/a\u003e Update CI\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/81234199614349a9ce46862fbcd92fe93287f98f\"\u003e\u003ccode\u003e8123419\u003c/code\u003e\u003c/a\u003e Fix flaky httpc into: fun test\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/fb7bb1050f7a694edfcfc329b0224576d5a07d1f\"\u003e\u003ccode\u003efb7bb10\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;New step: \u003ccode\u003eexpect\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/493\"\u003e#493\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/ed894af513124ffcca68e0982913cf7f7bf77da4\"\u003e\u003ccode\u003eed894af\u003c/code\u003e\u003c/a\u003e Revert \u0026quot;Add assigns (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/492\"\u003e#492\u003c/a\u003e)\u0026quot;\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.18...v0.7.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.2 to 1.27.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.27.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003edocs: document SMTP tls_options for certificate verification \u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mvanhorn\"\u003e\u003ccode\u003e@​mvanhorn\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1173\"\u003eswoosh/swoosh#1173\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1177\"\u003eswoosh/swoosh#1177\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.26.3...v1.27.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.26.3 🚀\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1167\"\u003e#1167\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the Recipient's name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eReplace deprecated xref: [exclude:] with elixirc_options: [no_warn_undefined:] \u003ca href=\"https://github.com/princemaple\"\u003e\u003ccode\u003e@​princemaple\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1165\"\u003e#1165\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump bandit from 1.11.1 to 1.12.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1157\"\u003e#1157\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump req from 0.5.18 to 0.6.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1158\"\u003e#1158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump multipart from 0.6.0 to 0.6.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1160\"\u003e#1160\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump tailwind from 0.4.1 to 0.5.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1162\"\u003e#1162\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated expected response in \u003ccode\u003emua_test.exs\u003c/code\u003e \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.1 patch release metadata \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.27.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd AhaSend adapter \u003ca href=\"https://github.com/Sameer1122\"\u003e\u003ccode\u003e@​Sameer1122\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.3\u003c/h2\u003e\n\u003ch3\u003e🔒 Security\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix Postmark adapter not adding the recipient name to the Reply-To header \u003ca href=\"https://github.com/vickz84259\"\u003e\u003ccode\u003e@​vickz84259\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1166\"\u003e#1166\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ae80fbe54d2697f2f19b3d8083fac27c9c2d3a25\"\u003e\u003ccode\u003eae80fbe\u003c/code\u003e\u003c/a\u003e Prepare 1.27.0 minor release files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/96345a9c1c8dbbe0a10c2c8f5ab3d89ef8ee2360\"\u003e\u003ccode\u003e96345a9\u003c/code\u003e\u003c/a\u003e docs: flag EU-exclusive and GDPR-only adapters in the README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f6e1b526e9527756159cdb6988e38fe20a01c7a1\"\u003e\u003ccode\u003ef6e1b52\u003c/code\u003e\u003c/a\u003e Add AhaSend adapter (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1177\"\u003e#1177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/e937dbbdc1493245a99bddb6f10d01afc6d8bcc2\"\u003e\u003ccode\u003ee937dbb\u003c/code\u003e\u003c/a\u003e build(deps): bump plug_cowboy from 2.8.1 to 2.9.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1168\"\u003e#1168\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/16e8b0f86475e20c517079c28b15c68a7f19465a\"\u003e\u003ccode\u003e16e8b0f\u003c/code\u003e\u003c/a\u003e build(deps): bump cowboy from 2.16.1 to 2.17.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1170\"\u003e#1170\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/ba0d5a2a1f993496fddf70c6ddbda583dad2c6b9\"\u003e\u003ccode\u003eba0d5a2\u003c/code\u003e\u003c/a\u003e build(deps): bump hackney from 4.4.5 to 4.5.2 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1172\"\u003e#1172\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/416e0b92d9eb83592fcb248d2a19e3a7f09d60e9\"\u003e\u003ccode\u003e416e0b9\u003c/code\u003e\u003c/a\u003e build(deps): bump plug from 1.20.1 to 1.20.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1174\"\u003e#1174\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/9b5c3b36324b65b6d181c1a4c1903fa2bb2d21aa\"\u003e\u003ccode\u003e9b5c3b3\u003c/code\u003e\u003c/a\u003e docs: document SMTP tls_options for certificate verification (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1173\"\u003e#1173\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/72a874f961a2326bd29c90767a2e24070ff5e07b\"\u003e\u003ccode\u003e72a874f\u003c/code\u003e\u003c/a\u003e Prepare 1.26.3 patch release files\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/e38235453e81d1727bfc8d91e69ec4cb211ccf61\"\u003e\u003ccode\u003ee382354\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.2...v1.27.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.1 (2026-06-16)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix executable name on Windows\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.5.0 (2026-06-11)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/80ca6abd27e4b3e21f1046035b9656ca445a50c4\"\u003e\u003ccode\u003e80ca6ab\u003c/code\u003e\u003c/a\u003e Release v0.5.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/8bc0041ee1c10d0f75869d923bf845a4fa1c9124\"\u003e\u003ccode\u003e8bc0041\u003c/code\u003e\u003c/a\u003e Fix executable name for windows\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/Astronomy-NextGenIT/Flagd-ui-Repo-Opentelemetry/pull/15","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Astronomy-NextGenIT%2FFlagd-ui-Repo-Opentelemetry/issues/15","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/15/packages"}},{"old_version":"1.11.1","new_version":"1.12.0","update_type":"minor","path":"/elixir-orchestration","pr_created_at":"2026-06-13T22:33:03.000Z","version_change":"1.11.1 → 1.12.0","issue":{"uuid":"4657161537","node_id":"PR_kwDORs4_pM7mJWJR","number":141,"state":"closed","title":"build(deps): Bump bandit from 1.11.1 to 1.12.0 in /elixir-orchestration","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":"2026-06-14T00:31:16.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-13T22:33:03.000Z","updated_at":"2026-06-14T00:31:18.000Z","time_to_close":7093,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"build(deps): Bump","packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"}],"path":"/elixir-orchestration","ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.11.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n","html_url":"https://github.com/hyperpolymath/verisimdb/pull/141","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/hyperpolymath%2Fverisimdb/issues/141","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/141/packages"}},{"old_version":"1.11.1","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-06-12T13:25:35.000Z","version_change":"1.11.1 → 1.12.0","issue":{"uuid":"4649587628","node_id":"PR_kwDOR_ccsM7lxebz","number":37,"state":"closed","title":"deps(deps): bump bandit from 1.11.1 to 1.12.0","user":"dependabot[bot]","labels":["dependencies"],"assignees":[],"locked":false,"comments_count":4,"pull_request":true,"closed_at":"2026-06-20T21:43:20.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-12T13:25:35.000Z","updated_at":"2026-06-20T21:43:22.000Z","time_to_close":721065,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bandit","old_version":"1.11.1","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.11.1 to 1.12.0.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.1...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.11.1\u0026new-version=1.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/agentjido/jido_managed_agents/pull/37","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/agentjido%2Fjido_managed_agents/issues/37","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/37/packages"}},{"old_version":"1.10.3","new_version":"1.12.0","update_type":"minor","path":null,"pr_created_at":"2026-06-11T14:27:53.000Z","version_change":"1.10.3 → 1.12.0","issue":{"uuid":"4641408946","node_id":"PR_kwDORsFU6c7lW8AQ","number":216,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-08-17T14:25:43.000Z","author_association":null,"state_reason":null,"created_at":"2026-06-11T14:27:53.000Z","updated_at":"2026-08-17T14:25:44.000Z","time_to_close":5788670,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.10.3","new_version":"1.12.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.8","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.26","new_version":"1.2.0","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"req","old_version":"0.5.17","new_version":"0.6.1","repository_url":"https://github.com/wojtekmach/req"},{"name":"swoosh","old_version":"1.23.0","new_version":"1.26.1","repository_url":"https://github.com/swoosh/swoosh"},{"name":"tailwind","old_version":"0.4.1","new_version":"0.5.0","repository_url":"https://github.com/phoenixframework/tailwind"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 7 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.3` | `1.12.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.8` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.26` | `1.2.0` |\n| [req](https://github.com/wojtekmach/req) | `0.5.17` | `0.6.1` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.23.0` | `1.26.1` |\n| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.0` |\n\n\nUpdates `bandit` from 1.10.3 to 1.12.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.12.0 (5 June 2026)\u003c/h1\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eIncorporate changes from Thousand Island 1.5, improving the separation of\nlocal GenServer timeouts and network facing timeouts (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e \u0026amp;\n\u003ca href=\"https://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\"\u003ehttps://thousand-island.hexdocs.pm/changelog.html#1-5-0-1-jun-2026\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eProperly handle mixed-case Transfer-Encoding headers (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e, thanks \u003ca href=\"https://github.com/mize85\"\u003e\u003ccode\u003e@​mize85\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eInternal improvements to HTTP/1 body read functions (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/33e100b5a76d8481f20af036ef4dca66e4b68ea1\"\u003e\u003ccode\u003e33e100b\u003c/code\u003e\u003c/a\u003e Version bump to 1.12.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/b5f0971f8188ec4663a6865b2a2d77e85b25a44e\"\u003e\u003ccode\u003eb5f0971\u003c/code\u003e\u003c/a\u003e Remove now counter-productive network timeout propogation (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/597\"\u003e#597\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/dedeb28c300e374b58c64824410bb466425c5471\"\u003e\u003ccode\u003ededeb28\u003c/code\u003e\u003c/a\u003e Temporarily pin finch test dep until upstream issue fixed\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/3b840f23534b9bfc43b9469ebbb58ea35c9f84ce\"\u003e\u003ccode\u003e3b840f2\u003c/code\u003e\u003c/a\u003e Repoint hexdocs links\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ab0d93324ee32e69da93da4113b688232a5c136d\"\u003e\u003ccode\u003eab0d933\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/594\"\u003e#594\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e3ca313cab77d7b5b864fed6c4ee775954921710\"\u003e\u003ccode\u003ee3ca313\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/593\"\u003e#593\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/2f6cd3aa50ff9495fd5ebc213b294b06d1562020\"\u003e\u003ccode\u003e2f6cd3a\u003c/code\u003e\u003c/a\u003e Bump plug from 1.19.1 to 1.19.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/592\"\u003e#592\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/7e70c8827bc2d0843013c819dd9097c6a3f5a7d0\"\u003e\u003ccode\u003e7e70c88\u003c/code\u003e\u003c/a\u003e fix transfer-encoding (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/590\"\u003e#590\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/32de5e989894442c7b5697284ba21986a2aff2c5\"\u003e\u003ccode\u003e32de5e9\u003c/code\u003e\u003c/a\u003e Update security policy\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/a792f97baf1a2ec363ba5693ae7c43de9365d25f\"\u003e\u003ccode\u003ea792f97\u003c/code\u003e\u003c/a\u003e Improve content length reading (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/588\"\u003e#588\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.3...1.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.8\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.8 (2026-06-10)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.new] Use LiveView 1.2.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://phoenix.hexdocs.pm/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/99df0a99da13265cb8b5cd3a506a79b3de34339f\"\u003e\u003ccode\u003e99df0a9\u003c/code\u003e\u003c/a\u003e Release v1.8.8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/729f7810d51285d782625378230e9d1e05c18c54\"\u003e\u003ccode\u003e729f781\u003c/code\u003e\u003c/a\u003e Generator changes for LiveView 1.2 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6696\"\u003e#6696\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/d453e379f047e923d96daaf79c0b45d8b4558d2d\"\u003e\u003ccode\u003ed453e37\u003c/code\u003e\u003c/a\u003e Use Elixir's builtin consolidation from v1.19, closes \u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/4951\"\u003e#4951\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/f30fa36abb64cc66ac94f213439f903aa5a62c34\"\u003e\u003ccode\u003ef30fa36\u003c/code\u003e\u003c/a\u003e Clarify channel payloads can be any serializable value (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6695\"\u003e#6695\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e1e7912418dc243faddd71d1136bd743eb84835f\"\u003e\u003ccode\u003ee1e7912\u003c/code\u003e\u003c/a\u003e Replace all hexdocs URLs with the subdomain format (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6693\"\u003e#6693\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/cf9dd26f1ab9e19abdfeb094644a6a0d8158421f\"\u003e\u003ccode\u003ecf9dd26\u003c/code\u003e\u003c/a\u003e Add README template for Phoenix umbrella (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6691\"\u003e#6691\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/39eb5ddb328b0187712172bc75626c735192f62d\"\u003e\u003ccode\u003e39eb5dd\u003c/code\u003e\u003c/a\u003e Refactor template override backward compatibility test (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6684\"\u003e#6684\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e1c3816c262f32b1556602d9fe717983a9b8bc5b\"\u003e\u003ccode\u003ee1c3816\u003c/code\u003e\u003c/a\u003e chore: small typo fix in controllers.md (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6689\"\u003e#6689\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/b6a4e31325197fae150096eadce93846dcfb58e5\"\u003e\u003ccode\u003eb6a4e31\u003c/code\u003e\u003c/a\u003e Make websocket disconnect codes explicit (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6678\"\u003e#6678\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eea489597e56a92ebb54be2cb0b7828d3d2e8494\"\u003e\u003ccode\u003eeea4895\u003c/code\u003e\u003c/a\u003e Add eex suffix to phx.gen.auth template override test (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6680\"\u003e#6680\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.8\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.26 to 1.2.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4269\"\u003e#4269\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure for comprehensions in HEEx use deterministic variables\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003econnect_params\u003c/code\u003e are kept when following redirects in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure exceptions during LiveComponent renders are emitted as \u003ccode\u003e:telemetry\u003c/code\u003e event (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix whitespace handling of EEx nodes in HEEx compiler (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.3\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://hexdocs.pm/phoenix_live_view/1.2.0-rc.3/js/\"\u003eofficial documentation for the JavaScript client\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.2\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.1\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlign \u003ccode\u003ePhoenix.Component\u003c/code\u003e global attributes list with \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Global_attributes\"\u003ereference list from MDN\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4207\"\u003e#4207\u003c/a\u003e). If you relied on one of the removed attributes, use the \u003ccode\u003einclude\u003c/code\u003e option instead. For example:\n\u003cpre lang=\"elixir\"\u003e\u003ccode\u003eattr :rest, :global, include: ~w(width height)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eAllow setting \u003ccode\u003eid\u003c/code\u003e attributes clientside for accessibility with \u003ccode\u003ethis.js().setAttribute()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport \u003ccode\u003egetFileURLForUpload\u003c/code\u003e helper (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.0\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.2.0 (2026-06-10) 🚀\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4269\"\u003e#4269\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure for comprehensions in HEEx use deterministic variables\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003econnect_params\u003c/code\u003e are kept when following redirects in LiveViewTest (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4005\"\u003e#4005\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure exceptions during LiveComponent renders are emitted as \u003ccode\u003e:telemetry\u003c/code\u003e event (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4258\"\u003e#4258\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix whitespace handling of EEx nodes in HEEx compiler (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.3 (2026-05-29)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ca href=\"https://phoenix-live-view.hexdocs.pm/1.2.0-rc.3/js/\"\u003eofficial documentation for the JavaScript client\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eValidate URL scheme in \u003ccode\u003epush_patch\u003c/code\u003e / \u003ccode\u003epush_navigate\u003c/code\u003e, \u003ccode\u003eJS.patch\u003c/code\u003e / \u003ccode\u003eJS.navigate\u003c/code\u003e, and clientside \u003ccode\u003ejs().patch\u003c/code\u003e / \u003ccode\u003ejs().navigate\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4250\"\u003e#4250\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix nested assign change tracking (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4225\"\u003e#4225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEnsure \u003ccode\u003ePhoenix.LiveViewTest.live_redirect/2\u003c/code\u003e properly passes the URI as a string in \u003ccode\u003ehandle_params\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4247\"\u003e#4247\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.2 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.1 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAlign \u003ccode\u003ePhoenix.Component\u003c/code\u003e global attributes list with \u003ca href=\"https://developer.mozilla.org/en-US/docs/Web/HTML/Reference/Global_attributes\"\u003ereference list from MDN\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4207\"\u003e#4207\u003c/a\u003e). If you relied on one of the removed attributes, use the \u003ccode\u003einclude\u003c/code\u003e option instead. For example:\n\u003cpre lang=\"elixir\"\u003e\u003ccode\u003eattr :rest, :global, include: ~w(width height)\n\u003c/code\u003e\u003c/pre\u003e\n\u003c/li\u003e\n\u003cli\u003eAllow setting \u003ccode\u003eid\u003c/code\u003e attributes clientside for accessibility with \u003ccode\u003ethis.js().setAttribute()\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4146\"\u003e#4146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eExport \u003ccode\u003egetFileURLForUpload\u003c/code\u003e helper (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4206\"\u003e#4206\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.2.0-rc.0 (2026-04-23)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/923e859d3c586bbe048a838339c516c97f470108\"\u003e\u003ccode\u003e923e859\u003c/code\u003e\u003c/a\u003e Release v1.2.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0f57334e2ce6c375cf0a2733d3876bb9003244bb\"\u003e\u003ccode\u003e0f57334\u003c/code\u003e\u003c/a\u003e ensure connect_params are kept when following redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4249\"\u003e#4249\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1c6723f800bb0b39c9cfe112d815c18a2a6a1827\"\u003e\u003ccode\u003e1c6723f\u003c/code\u003e\u003c/a\u003e Run CI on Elixir 1.20 + OTP 29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/2d0d81aea5eb91f8f83bcc69b29def4d8ce3b72f\"\u003e\u003ccode\u003e2d0d81a\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/d2981e528548f830d2a81a9731eac31007328d84\"\u003e\u003ccode\u003ed2981e5\u003c/code\u003e\u003c/a\u003e Support events pushed when connected mount redirects (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4279\"\u003e#4279\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/3c0d113a512c6d5185943bff89fc1959f2044102\"\u003e\u003ccode\u003e3c0d113\u003c/code\u003e\u003c/a\u003e Wrap renders caused by component updates in a telemetry span (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4278\"\u003e#4278\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/75dd8d17d97b384f3f767da0c39136b8e18ec1ec\"\u003e\u003ccode\u003e75dd8d1\u003c/code\u003e\u003c/a\u003e Fix whitespace handling in HEEx compiler EEx nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4277\"\u003e#4277\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/e514f0271b97addd634951e1d81e433970f3576b\"\u003e\u003ccode\u003ee514f02\u003c/code\u003e\u003c/a\u003e fix tag compiler regressions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/97e4d5ed21a2a3ad0754fede10a67529bceffc35\"\u003e\u003ccode\u003e97e4d5e\u003c/code\u003e\u003c/a\u003e fix comma in README\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/f17f149e1981d1a4de1d40e825b2975a517a361c\"\u003e\u003ccode\u003ef17f149\u003c/code\u003e\u003c/a\u003e Document handle_event takes payload, not unsigned_params (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4268\"\u003e#4268\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.26...v1.2.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `req` from 0.5.17 to 0.6.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/releases\"\u003ereq's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#compressed/1\"\u003e\u003ccode\u003ecompressed\u003c/code\u003e\u003c/a\u003e, \u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decompress_body/1\"\u003e\u003ccode\u003edecompress_body\u003c/code\u003e\u003c/a\u003e: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#encode_body/1\"\u003e\u003ccode\u003eencode_body\u003c/code\u003e\u003c/a\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ca href=\"https://hexdocs.pm/req/Req.Steps.html#decode_body/1\"\u003e\u003ccode\u003edecode_body\u003c/code\u003e\u003c/a\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\r\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/wojtekmach/req/blob/main/CHANGELOG.md\"\u003ereq's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.6.1 (2026-06-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003ecompressed\u003c/code\u003e], [\u003ccode\u003edecompress_body\u003c/code\u003e]: Disable automatic decompression\u003c/p\u003e\n\u003cp\u003eDecompression is now opt-in by setting \u003ccode\u003ecompressed: true\u003c/code\u003e.\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.6.0 (2026-06-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003eencode_body\u003c/code\u003e]: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-px9f-whj3-246m\"\u003eGHSA-px9f-whj3-246m\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eThe multipart encoder interpolated the per-part \u003ccode\u003ename\u003c/code\u003e, \u003ccode\u003efilename\u003c/code\u003e, and\n\u003ccode\u003econtent_type\u003c/code\u003e into the part headers without escaping, so an\nattacker-controlled value could inject extra headers or smuggle additional\nparts into the request. These values are now escaped per RFC 7578 / WHATWG\nform-data (\u003ccode\u003e\u0026quot;\u003c/code\u003e, CR, and LF are percent-encoded).\u003c/p\u003e\n\u003cp\u003eThanks to \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e for reporting it.\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e[\u003ccode\u003edecode_body\u003c/code\u003e]: Drop automatic zip/tar/tgz/gz/zst/csv decoding,\n(\u003ca href=\"https://github.com/wojtekmach/req/security/advisories/GHSA-655f-mp8p-96gv\"\u003eGHSA-655f-mp8p-96gv\u003c/a\u003e).\u003c/p\u003e\n\u003cp\u003eReq previously auto-decoded archive and compressed response bodies (\u003ccode\u003ezip\u003c/code\u003e,\n\u003ccode\u003etar\u003c/code\u003e, \u003ccode\u003etgz\u003c/code\u003e, \u003ccode\u003egz\u003c/code\u003e, \u003ccode\u003ezst\u003c/code\u003e, and \u003ccode\u003ecsv\u003c/code\u003e) based on the server-supplied\n\u003ccode\u003econtent-type\u003c/code\u003e, materialising the full decompressed contents in memory with\nno size cap. An attacker-controlled (or redirect-reachable) endpoint could\nreturn a tiny \u0026quot;decompression bomb\u0026quot; that expanded to gigabytes and exhausted\nthe node's memory.\u003c/p\u003e\n\u003cp\u003eNow only JSON is decoded by default. Other formats are opt-in via the new\n\u003ccode\u003e:decoders\u003c/code\u003e option, which defaults to \u003ccode\u003e[:json, :json_api]\u003c/code\u003e. Setting it\nreplaces the default (include \u003ccode\u003e:json\u003c/code\u003e to keep JSON decoding), and \u003ccode\u003efalse\u003c/code\u003e\ndisables all decoding:\u003c/p\u003e\n\u003cpre\u003e\u003ccode\u003e# opt into archives (only for endpoints you trust):\nReq.get!(url, decoders: [:json, :zip])\n\u003c/code\u003e\u003c/pre\u003e\n\u003cp\u003e\u003cstrong\u003eNote\u003c/strong\u003e: The decoded zip/tar is still list of\n\u003ccode\u003e{filename :: charlist(), contents :: binary}\u003c/code\u003e tuples.\nIn the future release, this will be list of\n\u003ccode\u003e{filename :: binary(), contents :: binary()}\u003c/code\u003e tuples.\u003c/p\u003e\n\u003cp\u003eWhile automatic CSV decoding wasn't a security issue, the behaviour based\non presence/absence of \u003ccode\u003enimble_csv\u003c/code\u003e dependency was suprising. CSV support\nis still built-in but need to be enabled with \u003ccode\u003edecoders: [:csv]\u003c/code\u003e.\u003c/p\u003e\n\u003cp\u003eCustom decoders are supported via \u003ccode\u003e{format, codec}\u003c/code\u003e tuples, where \u003ccode\u003ecodec\u003c/code\u003e is\na module exporting \u003ccode\u003edecode/1\u003c/code\u003e or a 1-arity function returning an \u003ccode\u003e:ok\u003c/code\u003e/\u003ccode\u003e:error\u003c/code\u003e\ntuple, for example:\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/36a82523e864739787340604f65ecce26699a0a9\"\u003e\u003ccode\u003e36a8252\u003c/code\u003e\u003c/a\u003e Release v0.6.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/ea5506fce1d6a44e5f47d0efed314643b3bc4904\"\u003e\u003ccode\u003eea5506f\u003c/code\u003e\u003c/a\u003e \u003ccode\u003ecompressed\u003c/code\u003e, \u003ccode\u003edecompress_body\u003c/code\u003e: Disable automatic decompression\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/8e7425f790d669d6996347ad0a72ba57f51138a8\"\u003e\u003ccode\u003e8e7425f\u003c/code\u003e\u003c/a\u003e Release v0.6.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/584a490d37c80e1f0f13b6efcfa9db7817218043\"\u003e\u003ccode\u003e584a490\u003c/code\u003e\u003c/a\u003e \u003ccode\u003edecode_body\u003c/code\u003e: Drop automatic zip/tar/tgz/gz/zst/csv decoding\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/2d77dbeb6b2a6932fe181432b1c36e9ea1d9fa23\"\u003e\u003ccode\u003e2d77dbe\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eencode_body\u003c/code\u003e: Security fix for \u003ccode\u003e:form_multipart\u003c/code\u003e header injection\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/53c3b9912e815b22231dc2892ac2f47f0e119d9d\"\u003e\u003ccode\u003e53c3b99\u003c/code\u003e\u003c/a\u003e Release v0.5.18\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/dc1f3be250006c81a1b3d0a712ebda175942ed71\"\u003e\u003ccode\u003edc1f3be\u003c/code\u003e\u003c/a\u003e Update ex_doc\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/dbd145c67c737c50582cd9627cfbbf1e3ca72737\"\u003e\u003ccode\u003edbd145c\u003c/code\u003e\u003c/a\u003e Update CHANGELOG.md\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/75f077e7de0d4fb57b2bd70e80522ecf400399e1\"\u003e\u003ccode\u003e75f077e\u003c/code\u003e\u003c/a\u003e \u003ccode\u003eretry\u003c/code\u003e: Automatically retry on \u003ccode\u003e:pool_not_available\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/wojtekmach/req/commit/4cfbf54fa0649092d6426a26eb74613f400bb50f\"\u003e\u003ccode\u003e4cfbf54\u003c/code\u003e\u003c/a\u003e \u003ccode\u003erun_finch\u003c/code\u003e: Normalize Finch.TransportError,HTTPError (Finch 0.22+) (\u003ca href=\"https://redirect.github.com/wojtekmach/req/issues/544\"\u003e#544\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/wojtekmach/req/compare/v0.5.17...v0.6.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.23.0 to 1.26.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.26.1 🚀\u003c/h2\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated expected response in \u003ccode\u003emua_test.exs\u003c/code\u003e \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.26.1 patch release metadata \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.26.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdded adapter for self-hosted Mailpit \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump req from 0.5.17 to 0.5.18 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1147\"\u003e#1147\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1152\"\u003eswoosh/swoosh#1152\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/1.25.3...v1.26.0\"\u003ehttps://github.com/swoosh/swoosh/compare/1.25.3...v1.26.0\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.3 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare 1.25.3 patch release notes \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1135\"\u003eswoosh/swoosh#1135\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1132\"\u003eswoosh/swoosh#1132\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1142\"\u003eswoosh/swoosh#1142\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1150\"\u003eswoosh/swoosh#1150\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.2...1.25.3\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.2...1.25.3\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare 1.25.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix release comment workflow repository checkout \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.26.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix inline attachment \u003ccode\u003ecid\u003c/code\u003e handling for Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1155\"\u003e#1155\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.26.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd self-hosted Mailpit adapter \u003ca href=\"https://github.com/waseigo\"\u003e\u003ccode\u003e@​waseigo\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument the new Mailpit adapter in the README\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.3\u003c/h2\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDocument runtime Postmark server keys \u003ca href=\"https://github.com/dl-alexandre\"\u003e\u003ccode\u003e@​dl-alexandre\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1135\"\u003e#1135\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eupdate to support hackney less than 5.0 \u003ca href=\"https://github.com/allenwyma\"\u003e\u003ccode\u003e@​allenwyma\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1132\"\u003e#1132\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAllow usage of idna 7.x \u003ca href=\"https://github.com/sax\"\u003e\u003ccode\u003e@​sax\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1142\"\u003e#1142\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix Elixir 1.20 compilation warnings \u003ca href=\"https://github.com/gilbertwong96\"\u003e\u003ccode\u003e@​gilbertwong96\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/317f847eb6ea8f89f0e8da0dcef046257d07f7a3\"\u003e\u003ccode\u003e317f847\u003c/code\u003e\u003c/a\u003e Prepare 1.26.1 patch release files (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1156\"\u003e#1156\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/38057bafc00652293b49c2b9e31f6f104e98cf8d\"\u003e\u003ccode\u003e38057ba\u003c/code\u003e\u003c/a\u003e fix fat-fingering \u003ccode\u003econtent_id\u003c/code\u003e instead of \u003ccode\u003ecid\u003c/code\u003e, added tests, fixed outdated ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0c7eafcefe7b09a29c5c81eaeb9dec828e9d999\"\u003e\u003ccode\u003ef0c7eaf\u003c/code\u003e\u003c/a\u003e Prepare 1.26.0 release files (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1153\"\u003e#1153\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/60532a27f1733285725e308784424ba3ef5f5e4b\"\u003e\u003ccode\u003e60532a2\u003c/code\u003e\u003c/a\u003e Added adapter for self-hosted Mailpit (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1152\"\u003e#1152\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/1d6dec8c4602d14b4e7fd3b8e672e133b68db21e\"\u003e\u003ccode\u003e1d6dec8\u003c/code\u003e\u003c/a\u003e Bump req from 0.5.17 to 0.5.18 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1147\"\u003e#1147\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3580fe875cd0f29692fa4eb8b05f609c2a32f099\"\u003e\u003ccode\u003e3580fe8\u003c/code\u003e\u003c/a\u003e Prepare 1.25.3 patch release notes (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1151\"\u003e#1151\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6f6f64395e99479d1303c65cce54f4066d31ad25\"\u003e\u003ccode\u003e6f6f643\u003c/code\u003e\u003c/a\u003e Fix Elixir 1.20 compilation warnings (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1150\"\u003e#1150\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/6f0d01cf4e0fd5da64d38061cb9101b4f99ae583\"\u003e\u003ccode\u003e6f0d01c\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.2 to 0.40.3 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1148\"\u003e#1148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7b67e3e34c59216f03620e2a6ff90b3e556203ca\"\u003e\u003ccode\u003e7b67e3e\u003c/code\u003e\u003c/a\u003e Bump bandit from 1.11.0 to 1.11.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1146\"\u003e#1146\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/936c06c0111ea0a73e9425de3c47863cd183b962\"\u003e\u003ccode\u003e936c06c\u003c/code\u003e\u003c/a\u003e Bump cowboy from 2.14.2 to 2.15.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1140\"\u003e#1140\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.23.0...v1.26.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tailwind` from 0.4.1 to 0.5.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md\"\u003etailwind's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.5.0 (Unreleased)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAllow configuring \u003ccode\u003e:version\u003c/code\u003e per profile\u003c/li\u003e\n\u003cli\u003eAllow \u003ccode\u003eenv\u003c/code\u003e values to be lists, joined by the OS path separator\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a4569fb035bb9899be7d2377abc50b68497556bc\"\u003e\u003ccode\u003ea4569fb\u003c/code\u003e\u003c/a\u003e Release v0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/a6e2d511c78f708d0692b44a65315b176778e00f\"\u003e\u003ccode\u003ea6e2d51\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/139\"\u003e#139\u003c/a\u003e from phoenixframework/sd-node-path\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/bbc9d45beeb7eff49c58142f7b0c56d4c136c331\"\u003e\u003ccode\u003ebbc9d45\u003c/code\u003e\u003c/a\u003e allow lists in env\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/27388df3d8233784d79058142057346f83f1a48a\"\u003e\u003ccode\u003e27388df\u003c/code\u003e\u003c/a\u003e bump latest version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/c0cefa158858a9079c89ec6fbb992505a5882946\"\u003e\u003ccode\u003ec0cefa1\u003c/code\u003e\u003c/a\u003e prepare 0.5.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/ed088d986069ba9b423b67f922daa947dd350b17\"\u003e\u003ccode\u003eed088d9\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/phoenixframework/tailwind/issues/123\"\u003e#123\u003c/a\u003e from RobinBoers/main\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/7a4b934c9745ef1394642006579a74016e84708c\"\u003e\u003ccode\u003e7a4b934\u003c/code\u003e\u003c/a\u003e Apply suggestion from \u003ca href=\"https://github.com/SteffenDE\"\u003e\u003ccode\u003e@​SteffenDE\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/170bb6c4b203ba7f5c0cdc3c5dcb08338114e9cf\"\u003e\u003ccode\u003e170bb6c\u003c/code\u003e\u003c/a\u003e Update lib/tailwind.ex\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/28d1de0272408465fa21cf5cb07e29f46f1e24ca\"\u003e\u003ccode\u003e28d1de0\u003c/code\u003e\u003c/a\u003e Raise on boot when \u003ccode\u003e:path\u003c/code\u003e is set and one or more profiles configure \u003ccode\u003e:version\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/tailwind/commit/1dd71d814ca30a445c3fc1fd6c134eb5fe1bc9b9\"\u003e\u003ccode\u003e1dd71d8\u003c/code\u003e\u003c/a\u003e Refactor \u003ccode\u003econfigured_target/1\u003c/code\u003e to be consistent with \u003ccode\u003econfigured_version/1\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/tailwind/compare/v0.4.1...v0.5.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/jjyy032659/Opentelemetry/pull/216","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/jjyy032659%2FOpentelemetry/issues/216","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/216/packages"}},{"old_version":"1.10.4","new_version":"1.11.1","update_type":"minor","path":null,"pr_created_at":"2026-05-18T01:29:12.000Z","version_change":"1.10.4 → 1.11.1","issue":{"uuid":"4465641880","node_id":"PR_kwDONKjU8M7ceZeT","number":64,"state":"open","title":"deps(deps): bump bandit from 1.10.4 to 1.11.1","user":"dependabot[bot]","labels":[],"assignees":["mithenji"],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-18T01:29:12.000Z","updated_at":"2026-05-18T01:29:13.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(deps)","packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"}],"path":null,"ecosystem":"hex"},"body":"Bumps [bandit](https://github.com/mtrudel/bandit) from 1.10.4 to 1.11.1.\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\n[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=bandit\u0026package-manager=hex\u0026previous-version=1.10.4\u0026new-version=1.11.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n\u003c/details\u003e","html_url":"https://github.com/mithenji/mithenji.me/pull/64","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/mithenji%2Fmithenji.me/issues/64","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/64/packages"}},{"old_version":"1.11.0","new_version":"1.11.1","update_type":"patch","path":null,"pr_created_at":"2026-05-17T21:14:52.000Z","version_change":"1.11.0 → 1.11.1","issue":{"uuid":"4464957238","node_id":"PR_kwDOSZz7r87ccThz","number":5,"state":"closed","title":"Bump the minor-updates group with 3 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-24T21:14:55.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T21:14:52.000Z","updated_at":"2026-05-24T21:14:57.000Z","time_to_close":604803,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"minor-updates","update_count":3,"packages":[{"name":"ash","old_version":"3.24.7","new_version":"3.25.0","repository_url":"https://github.com/ash-project/ash"},{"name":"bandit","old_version":"1.11.0","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"postgrex","old_version":"0.22.1","new_version":"0.22.2","repository_url":"https://github.com/elixir-ecto/postgrex"}],"path":null,"ecosystem":"hex"},"body":"Bumps the minor-updates group with 3 updates: [ash](https://github.com/ash-project/ash), [bandit](https://github.com/mtrudel/bandit) and [postgrex](https://github.com/elixir-ecto/postgrex).\n\nUpdates `ash` from 3.24.7 to 3.25.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ash-project/ash/releases\"\u003eash's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.25.0\u003c/h2\u003e\n\u003ch3\u003eFeatures:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eadd filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2704\"\u003eash-project/ash#2704\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2703\"\u003eash-project/ash#2703\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emanifest: pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2706\"\u003eash-project/ash#2706\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eManual relationships select missing (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e) by Kenneth Kostrešević [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2700\"\u003eash-project/ash#2700\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd query context to bulk destroy (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e) by danielatdpg [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2699\"\u003eash-project/ash#2699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd code interface validation hint for options (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e) by febarnett3 [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2697\"\u003eash-project/ash#2697\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve all errors in Required dedupe accumulator (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e) by sevenseacat [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2692\"\u003eash-project/ash#2692\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport filter checks on create actions by \u003ca href=\"https://github.com/zachdaniel\"\u003e\u003ccode\u003e@​zachdaniel\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/ash-project/ash/blob/main/CHANGELOG.md\"\u003eash's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/ash-project/ash/compare/v3.24.7...v3.25.0\"\u003ev3.25.0\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eFeatures:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eadd filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2704\"\u003eash-project/ash#2704\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003e\u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2703\"\u003eash-project/ash#2703\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emanifest: pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e) by \u003ca href=\"https://github.com/Torkan\"\u003e\u003ccode\u003e@​Torkan\u003c/code\u003e\u003c/a\u003e [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2706\"\u003eash-project/ash#2706\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eManual relationships select missing (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e) by Kenneth Kostrešević [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2700\"\u003e#2700\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2700\"\u003eash-project/ash#2700\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd query context to bulk destroy (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e) by danielatdpg [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2699\"\u003e#2699\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2699\"\u003eash-project/ash#2699\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eadd code interface validation hint for options (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e) by febarnett3 [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2697\"\u003e#2697\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2697\"\u003eash-project/ash#2697\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve all errors in Required dedupe accumulator (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e) by sevenseacat [(\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2692\"\u003e#2692\u003c/a\u003e)](\u003ca href=\"https://redirect.github.com/ash-project/ash/pull/2692\"\u003eash-project/ash#2692\u003c/a\u003e)\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003esupport filter checks on create actions by \u003ca href=\"https://github.com/zachdaniel\"\u003e\u003ccode\u003e@​zachdaniel\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/57ade2b48c9aea324cd6397bae4b823d0f74308c\"\u003e\u003ccode\u003e57ade2b\u003c/code\u003e\u003c/a\u003e chore: release version v3.25.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/1434071ef9d2d774e9eb4b0fc5b0de5b08710a98\"\u003e\u003ccode\u003e1434071\u003c/code\u003e\u003c/a\u003e docs: add example output\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/c99338101838b3977cea42e4a9980a36bf54a5b5\"\u003e\u003ccode\u003ec993381\u003c/code\u003e\u003c/a\u003e docs: add guide for code generation with the manifest\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/34647d45d454015dda6153b7bbf5aa101e7166af\"\u003e\u003ccode\u003e34647d4\u003c/code\u003e\u003c/a\u003e chore: add private actions options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/2ac20ee010eaf686e4973883403045c74b474215\"\u003e\u003ccode\u003e2ac20ee\u003c/code\u003e\u003c/a\u003e fix(manifest): pass real resource to data_layer.functions/1 (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2706\"\u003e#2706\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/cfd2a4772b7be58a02891211800fa49aba351055\"\u003e\u003ccode\u003ecfd2a47\u003c/code\u003e\u003c/a\u003e chore: cleanups for new Manifest structures\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/fbaf9ebde7a6021316c5074f0411a2e1ad7a24f7\"\u003e\u003ccode\u003efbaf9eb\u003c/code\u003e\u003c/a\u003e improvement: support filter checks on create actions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/ae55d1459ddd299efdf1bfea8478cb4bafd539b0\"\u003e\u003ccode\u003eae55d14\u003c/code\u003e\u003c/a\u003e Feat: add filtering and sorting to manifest (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2704\"\u003e#2704\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/26d5eaf8c1ce0dac7c86a1e145c0c24726f09299\"\u003e\u003ccode\u003e26d5eaf\u003c/code\u003e\u003c/a\u003e chore: a few nits on manifest code\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/ash-project/ash/commit/5aa736de6033da098f8c91973b4a0cf81a4aec9f\"\u003e\u003ccode\u003e5aa736d\u003c/code\u003e\u003c/a\u003e feat: \u003ccode\u003eAsh.Info.manifest\u003c/code\u003e for code generation basis (\u003ca href=\"https://redirect.github.com/ash-project/ash/issues/2703\"\u003e#2703\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/ash-project/ash/compare/v3.24.7...v3.25.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bandit` from 1.11.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.0...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `postgrex` from 0.22.1 to 0.22.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md\"\u003epostgrex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.22.2 (2026-05-12)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eSecurity\n\u003cul\u003e\n\u003cli\u003eEscape quotes in channel names in \u003ccode\u003ePostgrex.Notifications.listen/3\u003c/code\u003e (CVE-2026-32687)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-ecto/postgrex/commit/f1ffdb5e1894165ce95feb4e678cb91e5d76d6e1\"\u003e\u003ccode\u003ef1ffdb5\u003c/code\u003e\u003c/a\u003e Release v0.22.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-ecto/postgrex/commit/7cdedbd4316bb65f82e6a9a4f922c0ac491cb770\"\u003e\u003ccode\u003e7cdedbd\u003c/code\u003e\u003c/a\u003e Escape quotes, check null bytes, and name length for channel names\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/elixir-ecto/postgrex/compare/v0.22.1...v0.22.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/onnenon/receipts/pull/5","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/onnenon%2Freceipts/issues/5","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/5/packages"}},{"old_version":"1.11.0","new_version":"1.11.1","update_type":"patch","path":null,"pr_created_at":"2026-05-17T12:34:49.000Z","version_change":"1.11.0 → 1.11.1","issue":{"uuid":"4463481151","node_id":"PR_kwDORLKw3s7cX6rH","number":17,"state":"closed","title":"chore(deps): bump the prod-dependencies group with 7 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-17T22:53:34.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-17T12:34:49.000Z","updated_at":"2026-05-17T22:53:36.000Z","time_to_close":37125,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"prod-dependencies","update_count":7,"packages":[{"name":"bandit","old_version":"1.11.0","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"bb","old_version":"0.15.2","new_version":"0.16.0","repository_url":"https://github.com/beam-bots/bb"},{"name":"bb_ik_dls","old_version":"0.3.1","new_version":"0.3.3","repository_url":"https://github.com/beam-bots/bb_ik_dls"},{"name":"bb_liveview","old_version":"0.2.4","new_version":"0.2.7","repository_url":"https://github.com/beam-bots/bb_liveview"},{"name":"bb_reactor","old_version":"0.2.1","new_version":"0.2.3","repository_url":"https://github.com/beam-bots/bb_reactor"},{"name":"bb_servo_feetech","old_version":"0.2.2","new_version":"0.2.4","repository_url":"https://github.com/beam-bots/bb_servo_feetech"},{"name":"nx","old_version":"0.11.0","new_version":"0.12.0","repository_url":"https://github.com/elixir-nx/nx"}],"path":null,"ecosystem":"hex"},"body":"Bumps the prod-dependencies group with 7 updates:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.11.0` | `1.11.1` |\n| [bb](https://github.com/beam-bots/bb) | `0.15.2` | `0.16.0` |\n| [bb_ik_dls](https://github.com/beam-bots/bb_ik_dls) | `0.3.1` | `0.3.3` |\n| [bb_liveview](https://github.com/beam-bots/bb_liveview) | `0.2.4` | `0.2.7` |\n| [bb_reactor](https://github.com/beam-bots/bb_reactor) | `0.2.1` | `0.2.3` |\n| [bb_servo_feetech](https://github.com/beam-bots/bb_servo_feetech) | `0.2.2` | `0.2.4` |\n| [nx](https://github.com/elixir-nx/nx) | `0.11.0` | `0.12.0` |\n\nUpdates `bandit` from 1.11.0 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.11.0...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb` from 0.15.2 to 0.16.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb/releases\"\u003ebb's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.16.0\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emigrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eforce-disarm via topology supervisor instead of \u003ccode\u003eauto_disarm_on_error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/95\"\u003e#95\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003estore wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/94\"\u003e#94\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eidentify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ecoerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.15.4\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for writing into the topology section (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/87\"\u003e#87\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.15.3\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for add-on installers (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/86\"\u003e#86\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb/blob/main/CHANGELOG.md\"\u003ebb's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.4...v0.16.0\"\u003ev0.16.0\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eBreaking Changes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003emigrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003eforce-disarm via topology supervisor instead of \u003ccode\u003eauto_disarm_on_error\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/95\"\u003e#95\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003estore wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/94\"\u003e#94\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ecover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003eidentify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003ecoerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.3...v0.15.4\"\u003ev0.15.4\u003c/a\u003e (2026-05-16)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for writing into the topology section (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/87\"\u003e#87\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.2...v0.15.3\"\u003ev0.15.3\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003eBB.Igniter\u003c/code\u003e helpers for add-on installers (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/86\"\u003e#86\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/084ab8561ddd62a6604d40e4d886cac7527176ac\"\u003e\u003ccode\u003e084ab85\u003c/code\u003e\u003c/a\u003e chore: release version v0.16.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/31384291211a5239982a63ce65405009b863af92\"\u003e\u003ccode\u003e3138429\u003c/code\u003e\u003c/a\u003e improvement!: migrate from \u003ccode\u003eex_cldr_units\u003c/code\u003e to \u003ccode\u003elocalize\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/96\"\u003e#96\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/a7462b455330168d801efe55f5c043525e24977c\"\u003e\u003ccode\u003ea7462b4\u003c/code\u003e\u003c/a\u003e improvement!: force-disarm via topology supervisor instead of `auto_disarm_on...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/81d268f399ac65d6a54559d84ece981713b575aa\"\u003e\u003ccode\u003e81d268f\u003c/code\u003e\u003c/a\u003e improvement!: store wall-clock time and originating node on \u003ccode\u003eBB.Message\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/37\"\u003e#37\u003c/a\u003e...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/6109c343a64f368b2688bf575110945869c0f4c0\"\u003e\u003ccode\u003e6109c34\u003c/code\u003e\u003c/a\u003e chore(deps): bump github/codeql-action from 4.35.4 to 4.35.5 (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/89\"\u003e#89\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/fa8cf62452f03419c3fc751e26df952cf2cbb8de\"\u003e\u003ccode\u003efa8cf62\u003c/code\u003e\u003c/a\u003e chore(deps): bump the prod-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/90\"\u003e#90\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/896764f1963a738fa3081579e2ad6b442b6db645\"\u003e\u003ccode\u003e896764f\u003c/code\u003e\u003c/a\u003e fix: cover tuple argument types in typespec and \u003ccode\u003e:map\u003c/code\u003e example (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/93\"\u003e#93\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/ac117893ce1a22ac04225beff6892f6bb9e72849\"\u003e\u003ccode\u003eac11789\u003c/code\u003e\u003c/a\u003e improvement: identify the publishing robot in pubsub deliveries (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/91\"\u003e#91\u003c/a\u003e) (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/92\"\u003e#92\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/ca3c8b0e314b34d1e43021be6fdcce16ca8484c4\"\u003e\u003ccode\u003eca3c8b0\u003c/code\u003e\u003c/a\u003e improvement: coerce command goal values to declared argument types (\u003ca href=\"https://redirect.github.com/beam-bots/bb/issues/88\"\u003e#88\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb/commit/253c315a04b03c4862fa5e61ace8dfae9b465334\"\u003e\u003ccode\u003e253c315\u003c/code\u003e\u003c/a\u003e chore: release version v0.15.4\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb/compare/v0.15.2...v0.16.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_ik_dls` from 0.3.1 to 0.3.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/releases\"\u003ebb_ik_dls's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.3.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.3.2\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erespect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/blob/main/CHANGELOG.md\"\u003ebb_ik_dls's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.2...v0.3.3\"\u003ev0.3.3\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.1...v0.3.2\"\u003ev0.3.2\u003c/a\u003e (2026-05-14)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003erespect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/454684982d18330066d88f42552020aa1a26a6b2\"\u003e\u003ccode\u003e4546849\u003c/code\u003e\u003c/a\u003e chore: release version v0.3.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/6d675c14ef515e3c328175c46df3f3507379ad44\"\u003e\u003ccode\u003e6d675c1\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/70b2e2a9a7f314e16b25a32eda62ce6b0584128e\"\u003e\u003ccode\u003e70b2e2a\u003c/code\u003e\u003c/a\u003e chore: release version v0.3.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/c1fd4965a89ef3a9276d17896cb579cd9c04a8e3\"\u003e\u003ccode\u003ec1fd496\u003c/code\u003e\u003c/a\u003e chore(deps): Update bb to 0.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/290000c9d95e25958a5bf34acdd4502a0595d808\"\u003e\u003ccode\u003e290000c\u003c/code\u003e\u003c/a\u003e fix: respect joint limits during DLS iteration (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/b8f38724539d4aa786bbe97d8ec9ca547daec095\"\u003e\u003ccode\u003eb8f3872\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump ex_doc in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/4e65f950a8155f4516f900759ba62893eb3a0d6c\"\u003e\u003ccode\u003e4e65f95\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.9 to 0.8.0 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/23\"\u003e#23\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/9d5463cfa2ce5fad7130b733f429aed5c3e4e988\"\u003e\u003ccode\u003e9d5463c\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/20\"\u003e#20\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/7fd4ed9d0cec9c62cb2ae56664d0e4932a6d2984\"\u003e\u003ccode\u003e7fd4ed9\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_ik_dls/commit/c33342ed1b176500af627bf883e0615ae6b839f3\"\u003e\u003ccode\u003ec33342e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_ik_dls/issues/19\"\u003e#19\u003c/a\u003e from beam-bots/dependabot/hex/igniter-0.7.7\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_ik_dls/compare/v0.3.1...v0.3.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_liveview` from 0.2.4 to 0.2.7\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_liveview/releases\"\u003ebb_liveview's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.7\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erender :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edisplay event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.2.6\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ephoenix bootstrap + endpoint plug injection in \u003ccode\u003ebb_liveview.install\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/43\"\u003e#43\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev0.2.5\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_liveview/blob/main/CHANGELOG.md\"\u003ebb_liveview's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.6...v0.2.7\"\u003ev0.2.7\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch3\u003eBug Fixes:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\n\u003cp\u003erender :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003cli\u003e\n\u003cp\u003epreserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e) by James Harton\u003c/p\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003edisplay event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.5...v0.2.6\"\u003ev0.2.6\u003c/a\u003e (2026-05-16)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ephoenix bootstrap + endpoint plug injection in \u003ccode\u003ebb_liveview.install\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/43\"\u003e#43\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.4...v0.2.5\"\u003ev0.2.5\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/02b2fb8cc560b3aca5d9856af59aec07f7736c79\"\u003e\u003ccode\u003e02b2fb8\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/8df9afbc046aadf4ac2591f4b0c6e6ab242a07f5\"\u003e\u003ccode\u003e8df9afb\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/49\"\u003e#49\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/798881b82b8dbc68bb1d18702bfa07747e11943e\"\u003e\u003ccode\u003e798881b\u003c/code\u003e\u003c/a\u003e fix: render :atom-typed argument values with their leading colon (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/45\"\u003e#45\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/022a6d4a204f2e6832ce666668ca2749148b3962\"\u003e\u003ccode\u003e022a6d4\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump bandit from 1.11.0 to 1.11.1 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/47\"\u003e#47\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/d7156583d8e34f174219958bb9f6af29fbba9df8\"\u003e\u003ccode\u003ed715658\u003c/code\u003e\u003c/a\u003e improvement: display event-stream timestamps from \u003ccode\u003eBB.Message.wall_time\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/48\"\u003e#48\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/65cc8f6a44e2364e98c854ccef794c25ead2f818\"\u003e\u003ccode\u003e65cc8f6\u003c/code\u003e\u003c/a\u003e fix: preserve command form input values after execute (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/44\"\u003e#44\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/4836a7b16f25ea8faed29d1fb2f10aae7e7749ed\"\u003e\u003ccode\u003e4836a7b\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/a0abebcbc433c0fbf9490bfff21cfbef13838bf7\"\u003e\u003ccode\u003ea0abebc\u003c/code\u003e\u003c/a\u003e improvement: phoenix bootstrap + endpoint plug injection in `bb_liveview.inst...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/6fbbe24cc15ee3709dcd4a518f14101a9def1e3a\"\u003e\u003ccode\u003e6fbbe24\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_liveview/commit/b915b27bd8f9fca5cdc2a0f6b25beb2762d0a492\"\u003e\u003ccode\u003eb915b27\u003c/code\u003e\u003c/a\u003e improvement: add \u003ccode\u003ebb_liveview.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_liveview/issues/42\"\u003e#42\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_liveview/compare/v0.2.4...v0.2.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_reactor` from 0.2.1 to 0.2.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_reactor/releases\"\u003ebb_reactor's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.3\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.2.2\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd basic igniter installer by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_reactor/blob/main/CHANGELOG.md\"\u003ebb_reactor's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.2...v0.2.3\"\u003ev0.2.3\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.1...v0.2.2\"\u003ev0.2.2\u003c/a\u003e (2026-05-15)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd basic igniter installer by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/0476fff39379325c252e6be6657bf34fba6cc9e1\"\u003e\u003ccode\u003e0476fff\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/6c65e4cfbf513171c223d5297451901f67b6181b\"\u003e\u003ccode\u003e6c65e4c\u003c/code\u003e\u003c/a\u003e chore: align with bb 0.16 safety semantics (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/68e7323c7d5db8d04176800d878dbba63010636d\"\u003e\u003ccode\u003e68e7323\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/0b44cba9e035248355b33dfc7884eacf066cc9ff\"\u003e\u003ccode\u003e0b44cba\u003c/code\u003e\u003c/a\u003e improvement: Add basic igniter installer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/20c597571fedd6485903dded1218ed366953e96a\"\u003e\u003ccode\u003e20c5975\u003c/code\u003e\u003c/a\u003e chore(deps): update bb to 0.15.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/684e7e2b203da0259d6cf8d5002e93e0593a3ab8\"\u003e\u003ccode\u003e684e7e2\u003c/code\u003e\u003c/a\u003e chore(deps): bump reactor from 1.0.0 to 1.0.1 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/20\"\u003e#20\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/9b3b7746298d5b8d28efa7c27cdeafe7562cb8ee\"\u003e\u003ccode\u003e9b3b774\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/4074a1851b494a2151c7cca098aa8e95ae1f2f4c\"\u003e\u003ccode\u003e4074a18\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/030271ed3d750c64547f3ae2074c44df17346a4a\"\u003e\u003ccode\u003e030271e\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/17\"\u003e#17\u003c/a\u003e from beam-bots/dependabot/hex/dev-dependencies-c15e7130e8\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_reactor/commit/b833bdca836717468c3fe34067a02ca83cf9d30d\"\u003e\u003ccode\u003eb833bdc\u003c/code\u003e\u003c/a\u003e Merge pull request \u003ca href=\"https://redirect.github.com/beam-bots/bb_reactor/issues/18\"\u003e#18\u003c/a\u003e from beam-bots/dependabot/hex/igniter-0.7.7\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/beam-bots/bb_reactor/compare/v0.2.1...v0.2.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `bb_servo_feetech` from 0.2.2 to 0.2.4\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/releases\"\u003ebb_servo_feetech's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.2.4\u003c/h2\u003e\n\u003cp\u003eNo release notes provided.\u003c/p\u003e\n\u003ch2\u003ev0.2.3\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/blob/main/CHANGELOG.md\"\u003ebb_servo_feetech's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_pca9685/compare/v0.2.3...v0.2.4\"\u003ev0.2.4\u003c/a\u003e (2026-05-17)\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_pca9685/compare/v0.2.2...v0.2.3\"\u003ev0.2.3\u003c/a\u003e (2026-05-13)\u003c/h2\u003e\n\u003ch3\u003eImprovements:\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eadd \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e) by James Harton\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/50f64f662e51f85169075aa26ceea8f5b27469e9\"\u003e\u003ccode\u003e50f64f6\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.4\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/20605bfe1e09cf1a4b0ff8ab9a59338551729920\"\u003e\u003ccode\u003e20605bf\u003c/code\u003e\u003c/a\u003e chore(deps): bump bb to ~\u0026gt; 0.16 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/26\"\u003e#26\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/5e5788e1581d437264e4eb4e107417f9747aad1d\"\u003e\u003ccode\u003e5e5788e\u003c/code\u003e\u003c/a\u003e chore: release version v0.2.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/1761292cd4cde8ab57e52e8499770f6ed7001607\"\u003e\u003ccode\u003e1761292\u003c/code\u003e\u003c/a\u003e improvement: add \u003ccode\u003ebb_servo_feetech.install\u003c/code\u003e igniter task (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/25\"\u003e#25\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/bdbb53146f57463de6694b08c166e30e8bf8d586\"\u003e\u003ccode\u003ebdbb531\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump ex_doc in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/24\"\u003e#24\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/44dcabaebdd96c74eddc43927a7dc8b25cbe65db\"\u003e\u003ccode\u003e44dcaba\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump the dev-dependencies group with 2 updates (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/22\"\u003e#22\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/c78833cbe363859b6a9a709ea6f9177c5738bef6\"\u003e\u003ccode\u003ec78833c\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump igniter from 0.7.7 to 0.7.9 (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/23\"\u003e#23\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/commit/3164bfd90ee28dce60f89848a7379a45d8c53052\"\u003e\u003ccode\u003e3164bfd\u003c/code\u003e\u003c/a\u003e chore(deps-dev): bump git_ops in the dev-dependencies group (\u003ca href=\"https://redirect.github.com/beam-bots/bb_servo_feetech/issues/21\"\u003e#21\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-bots/bb_servo_feetech/compare/v0.2.2...v0.2.4\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `nx` from 0.11.0 to 0.12.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-nx/nx/releases\"\u003enx's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.12.0 - 2026-05-15\u003c/h2\u003e\n\u003cp\u003eSee the changelogs for individual libraries for a semantic set of changes\u003c/p\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/blasphemetheus\"\u003e\u003ccode\u003e@​blasphemetheus\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/elixir-nx/nx/pull/1676\"\u003eelixir-nx/nx#1676\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/jeffreyksmithjr\"\u003e\u003ccode\u003e@​jeffreyksmithjr\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/elixir-nx/nx/pull/1715\"\u003eelixir-nx/nx#1715\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\"\u003ehttps://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/b0f75edd23fe201a3e9f10e42f2c2451514a65c7\"\u003e\u003ccode\u003eb0f75ed\u003c/code\u003e\u003c/a\u003e update nx/complex lock in exla and torchx\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/b22078978457ff2fb6e7a8b14672c3d44f92607f\"\u003e\u003ccode\u003eb220789\u003c/code\u003e\u003c/a\u003e chore: update to complex 0.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/c5871f31c64f9934124d91f276782f12b2424861\"\u003e\u003ccode\u003ec5871f3\u003c/code\u003e\u003c/a\u003e bump to 0.12\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/cdcf58da8199d86f3e1097d5fd2326017344989b\"\u003e\u003ccode\u003ecdcf58d\u003c/code\u003e\u003c/a\u003e fix: torchx visibility hidden and exla write_to_pointer no-op definition in p...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/48d7b0de48ed411278db641a47e24e4d77f8ea0e\"\u003e\u003ccode\u003e48d7b0d\u003c/code\u003e\u003c/a\u003e docs: don't leak internal EXLA details in CustomCall docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/5febc3fbc2c28ff05704fcda80226f1bad0688a0\"\u003e\u003ccode\u003e5febc3f\u003c/code\u003e\u003c/a\u003e Refactor EXLA block lowering through EXLA.CustomCall protocol (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1739\"\u003e#1739\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/1c3d86eb635e136eab7d5a1a12a57794c200d204\"\u003e\u003ccode\u003e1c3d86e\u003c/code\u003e\u003c/a\u003e fix: Nx.block with EXLA JIT (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1750\"\u003e#1750\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/fb89cf4f998728007d3b02f92ea118e0a13fe60b\"\u003e\u003ccode\u003efb89cf4\u003c/code\u003e\u003c/a\u003e Silence type system warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/84a2ef16e671fa0a59c76d4c752d1274df2a78a3\"\u003e\u003ccode\u003e84a2ef1\u003c/code\u003e\u003c/a\u003e Group all Nx.Block in docs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-nx/nx/commit/a53bbaed938257e62b0df84131e2d0573c616e63\"\u003e\u003ccode\u003ea53bbae\u003c/code\u003e\u003c/a\u003e chore: rename linalg blocks (\u003ca href=\"https://redirect.github.com/elixir-nx/nx/issues/1738\"\u003e#1738\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-nx/nx/compare/v0.11.0...v0.12.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/beam-bots/bb_example_so101/pull/17","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/beam-bots%2Fbb_example_so101/issues/17","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/17/packages"}},{"old_version":"1.10.3","new_version":"1.11.1","update_type":"minor","path":null,"pr_created_at":"2026-05-14T00:37:47.000Z","version_change":"1.10.3 → 1.11.1","issue":{"uuid":"4442131453","node_id":"PR_kwDOSJ-KK87bVPNI","number":54,"state":"closed","title":"Bump the mix-production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-21T01:42:24.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-14T00:37:47.000Z","updated_at":"2026-05-21T01:42:26.000Z","time_to_close":608677,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"Bump","group_name":"mix-production-dependencies","update_count":5,"packages":[{"name":"bandit","old_version":"1.10.3","new_version":"1.11.1","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.7","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.26","new_version":"1.1.30","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.23.0","new_version":"1.25.2","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 5 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.3` | `1.11.1` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.7` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.26` | `1.1.30` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.23.0` | `1.25.2` |\n\n\nUpdates `bandit` from 1.10.3 to 1.11.1\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.1 (13 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove handling of large chunked request bodies (CVE-2026-39803, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of request trailers (CVE-2026-39806, \u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eChanges\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWe no longer disallow \u003ccode\u003e.\u003c/code\u003e and \u003ccode\u003e..\u003c/code\u003e path components in HTTP/2 absolute paths (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.10.4 (25 Mar 2026)\u003c/h2\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eSupport \u003ccode\u003e{:shutdown, :disconnected}\u003c/code\u003e as a normal WebSocket result code (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/576\"\u003e#576\u003c/a\u003e, thanks \u003ca href=\"https://github.com/wwitek-whatnot\"\u003e\u003ccode\u003e@​wwitek-whatnot\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/40a1b8fc924694a0125bbaa7fee101fa43feeb52\"\u003e\u003ccode\u003e40a1b8f\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/37b84cfd7f26dd3b9043d2c2d31be47d86ffa8e0\"\u003e\u003ccode\u003e37b84cf\u003c/code\u003e\u003c/a\u003e Bump ex_doc from 0.40.1 to 0.40.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/583\"\u003e#583\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8ff60784addd623c0a752b700d52edbaba107dd6\"\u003e\u003ccode\u003e8ff6078\u003c/code\u003e\u003c/a\u003e Bump telemetry from 1.4.1 to 1.4.2 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/584\"\u003e#584\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/ae3520dfdbfab115c638f8c7f6f6b805db34e1ab\"\u003e\u003ccode\u003eae3520d\u003c/code\u003e\u003c/a\u003e Improve chunk handling (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/585\"\u003e#585\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/0f56e10ed194faad75abcbc8b221988568ccbf15\"\u003e\u003ccode\u003e0f56e10\u003c/code\u003e\u003c/a\u003e Stop handling . and .. paths specially (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/581\"\u003e#581\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.3...1.11.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://hexdocs.pm/phoenix/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ba3a131552add5758c021ff4c6e9b6947bb5a205\"\u003e\u003ccode\u003eba3a131\u003c/code\u003e\u003c/a\u003e Release v1.8.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e74eaccb8e909826a50c9e8095cd1694dace289c\"\u003e\u003ccode\u003ee74eacc\u003c/code\u003e\u003c/a\u003e fix invalid status on longpoll window timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/035fde9ac29920d4c040be91fdb7508295579036\"\u003e\u003ccode\u003e035fde9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eb5f52f683b148f30aa528d365b301d2c51a4b59\"\u003e\u003ccode\u003eeb5f52f\u003c/code\u003e\u003c/a\u003e Correctly serialize non ASCII metadata (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6664\"\u003e#6664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a99c5e8974f98c57aa4c883da51f57b582c0225c\"\u003e\u003ccode\u003ea99c5e8\u003c/code\u003e\u003c/a\u003e Filter token parameters by default (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6665\"\u003e#6665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/21901113ec7aa5158ad7748170bb9c3b3254861b\"\u003e\u003ccode\u003e2190111\u003c/code\u003e\u003c/a\u003e update installer version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ddcdadb7de1132d630bbbe56f975e66f85f36416\"\u003e\u003ccode\u003eddcdadb\u003c/code\u003e\u003c/a\u003e Release v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1a67c61ff9ce0a7711662ac7354861917a7c80f7\"\u003e\u003ccode\u003e1a67c61\u003c/code\u003e\u003c/a\u003e prevent unexpected memory usage on nd-json body splitting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8ca76a2c57fb189733e67c3fb72098d1092ef60c\"\u003e\u003ccode\u003e8ca76a2\u003c/code\u003e\u003c/a\u003e fix a couple of typos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6672\"\u003e#6672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/6214d83ac87fe87170bf2a8525b3404af1517705\"\u003e\u003ccode\u003e6214d83\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.6 to 8.5.13 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6671\"\u003e#6671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.26 to 1.1.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround Chrome bug when patching \u003ccode\u003e\\\u0026lt;template\u0026gt;\u003c/code\u003e elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4163\"\u003e#4163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix more type warnings on Elixir 1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.30/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.28 (2026-03-27)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix race condition that could lead to a JS exception when nested LiveView is removed while it is joining (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4177\"\u003e#4177\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eA bunch of small performance and documentation improvements (thank you \u003ca href=\"https://github.com/preciz\"\u003e\u003ccode\u003e@​preciz\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.27 (2026-03-10)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eWorkaround Chrome bug when patching \u003ccode\u003e\\\u0026lt;template\u0026gt;\u003c/code\u003e elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/pull/4163\"\u003e#4163\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix more type warnings on Elixir 1.20\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdbbe52011812943d90dc4a3d46f4c0740d86bd2\"\u003e\u003ccode\u003efdbbe52\u003c/code\u003e\u003c/a\u003e Release v1.1.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/970932be5fa7b4313994ba3b68f0a55ff74f9a2c\"\u003e\u003ccode\u003e970932b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/ff31d012fbeeedd38f13c9836d5d4fbfc22750b8\"\u003e\u003ccode\u003eff31d01\u003c/code\u003e\u003c/a\u003e Ensure phx-viewport hook does not fail if there's no scrollContainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.26...v1.1.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.23.0 to 1.25.2\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.2 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: prepare 1.25.2 patch release \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix release comment workflow repository checkout \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🐛 Bug Fixes\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump jason from 1.4.4 to 1.4.5 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1130\"\u003e#1130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eBump bandit from 1.10.4 to 1.11.0 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1129\"\u003e#1129\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003ch2\u003ev1.25.0 🚀\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003ePrepare minor release 1.25.0 \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1122\"\u003e#1122\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efeat: Add Swoosh.Adapters.Sandbox \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e📝 Documentation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e🧰 Maintenance\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release-published workflow to comment on released PRs \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1118\"\u003e#1118\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump bandit from 1.10.3 to 1.10.4 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1119\"\u003e#1119\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.24.0 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003c!-- raw HTML omitted --\u003e\n\u003c/blockquote\u003e\n\u003cp\u003e... (truncated)\u003c/p\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.2\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003efix(config): prioritize runtime config for Mailer \u003ca href=\"https://github.com/ukashazia\"\u003e\u003ccode\u003e@​ukashazia\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.25.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/aidalgol\"\u003e\u003ccode\u003e@​aidalgol\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1120\"\u003e#1120\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e📝 Documentation\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eImprove discoverability and HexDocs coverage for \u003ccode\u003eSwoosh.Adapters.Sandbox\u003c/code\u003e \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1121\"\u003e#1121\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd release-published workflow to comment on released PRs \u003ca href=\"https://github.com/copilot-swe-agent\"\u003e\u003ccode\u003e@​copilot-swe-agent\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1118\"\u003e#1118\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.24.0\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd Azure Communication Services adapter \u003ca href=\"https://github.com/jamilbk\"\u003e\u003ccode\u003e@​jamilbk\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1116\"\u003e#1116\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.23.1\u003c/h2\u003e\n\u003ch3\u003e✨ Features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd tracking options to the mailjet adapter \u003ca href=\"https://github.com/wkirschbaum\"\u003e\u003ccode\u003e@​wkirschbaum\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1114\"\u003e#1114\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003e🧰 Maintenance\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRemove unused require Logger compilation warning \u003ca href=\"https://github.com/wkirschbaum\"\u003e\u003ccode\u003e@​wkirschbaum\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1115\"\u003e#1115\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/7baea5c965c441164ffb524855002f454e2da026\"\u003e\u003ccode\u003e7baea5c\u003c/code\u003e\u003c/a\u003e Bump jason from 1.4.4 to 1.4.5 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1130\"\u003e#1130\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/37342caa1d5d5485fb17ff5df2575e77be8a8a3c\"\u003e\u003ccode\u003e37342ca\u003c/code\u003e\u003c/a\u003e chore: prepare 1.25.2 patch release (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1136\"\u003e#1136\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f6eedb4b9a2905c2ec8df0a106664bd274c4588d\"\u003e\u003ccode\u003ef6eedb4\u003c/code\u003e\u003c/a\u003e fix(config): prioritize runtime config for Mailer (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1134\"\u003e#1134\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/5596e9789ef92893cbfb5f11630b247d6f877e6b\"\u003e\u003ccode\u003e5596e97\u003c/code\u003e\u003c/a\u003e Bump bandit from 1.10.4 to 1.11.0 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1129\"\u003e#1129\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f656c6b55277f8c1b76f2429f3621d5a6aed333c\"\u003e\u003ccode\u003ef656c6b\u003c/code\u003e\u003c/a\u003e Fix release comment workflow checkout (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1128\"\u003e#1128\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.23.0...v1.25.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/honeycombio/ced-opentelemetry-demo-app-academy-courses/pull/54","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/honeycombio%2Fced-opentelemetry-demo-app-academy-courses/issues/54","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/54/packages"}},{"old_version":"1.10.4","new_version":"1.11.0","update_type":"minor","path":null,"pr_created_at":"2026-05-12T01:54:07.000Z","version_change":"1.10.4 → 1.11.0","issue":{"uuid":"4425584652","node_id":"PR_kwDOQF4m787afaFR","number":173,"state":"open","title":"deps(elixir): bump the elixir-query-service group across 1 directory with 8 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":2,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-12T01:54:07.000Z","updated_at":"2026-05-12T01:55:47.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(elixir): bump","group_name":"elixir-query-service","update_count":8,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"broadway","old_version":"1.2.1","new_version":"1.3.0","repository_url":"https://github.com/dashbitco/broadway"},{"name":"ex_doc","old_version":"0.40.1","new_version":"0.40.2","repository_url":"https://github.com/elixir-lang/ex_doc"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"mint","old_version":"1.7.1","new_version":"1.8.0","repository_url":"https://github.com/elixir-mint/mint"},{"name":"open_api_spex","old_version":"3.22.2","new_version":"3.22.3","repository_url":"https://github.com/open-api-spex/open_api_spex"},{"name":"tesla","old_version":"1.16.0","new_version":"1.17.0","repository_url":"https://github.com/elixir-tesla/tesla"}],"path":null,"ecosystem":"hex"},"body":"Bumps the elixir-query-service group with 7 updates in the /apps/query-service directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.4` | `1.11.0` |\n| [broadway](https://github.com/dashbitco/broadway) | `1.2.1` | `1.3.0` |\n| [ex_doc](https://github.com/elixir-lang/ex_doc) | `0.40.1` | `0.40.2` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [mint](https://github.com/elixir-mint/mint) | `1.7.1` | `1.8.0` |\n| [open_api_spex](https://github.com/open-api-spex/open_api_spex) | `3.22.2` | `3.22.3` |\n| [tesla](https://github.com/elixir-tesla/tesla) | `1.16.0` | `1.17.0` |\n\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `broadway` from 1.2.1 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dashbitco/broadway/blob/main/CHANGELOG.md\"\u003ebroadway's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.0 (2026-04-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd telemetry events around \u003ccode\u003ehandle_failed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eInclude producer metadata in telemetry events\u003c/li\u003e\n\u003cli\u003eAdd labels to Broadway stages\u003c/li\u003e\n\u003cli\u003eFix race condition during graceful shutdown\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d3a668c885342ae223b5ebcd9571efe4a0f18c41\"\u003e\u003ccode\u003ed3a668c\u003c/code\u003e\u003c/a\u003e Release v1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/dd2f40571ac463bbc56f949b6c1f8d33fd6cc665\"\u003e\u003ccode\u003edd2f405\u003c/code\u003e\u003c/a\u003e Include producer metadata in per-message events (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/370\"\u003e#370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/966c59ad95ddb6aa75c91e71848cfc617bef3a8e\"\u003e\u003ccode\u003e966c59a\u003c/code\u003e\u003c/a\u003e Add :telemetry.span for handle_failed/2 callback (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/370f180e853a33978f1822432c66bea61f9d98ef\"\u003e\u003ccode\u003e370f180\u003c/code\u003e\u003c/a\u003e Clarify some docs related to GenStage demand (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/69d90526dc7c1003d1b9fff5092645eb4fbe9e48\"\u003e\u003ccode\u003e69d9052\u003c/code\u003e\u003c/a\u003e Bump Elixir/Erlang CI matrix and GitHub actions (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/8c6616475acc874f185ffabaffc92554eefefbfc\"\u003e\u003ccode\u003e8c66164\u003c/code\u003e\u003c/a\u003e Add Process.set_label/1 to Broadway stages (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d32d30deb64dc4481f2743f6a0d8606299690046\"\u003e\u003ccode\u003ed32d30d\u003c/code\u003e\u003c/a\u003e Catch exits if already down when trapping exits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/f52f2f793e16e1c976f5e52adc372457d1445b73\"\u003e\u003ccode\u003ef52f2f7\u003c/code\u003e\u003c/a\u003e Fix graceful shutdown race condition (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/136bea6786ae1526721a98a93ca9d752543c3a7d\"\u003e\u003ccode\u003e136bea6\u003c/code\u003e\u003c/a\u003e Add batch_size/0 and batch_size_fun/0 types (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/7977502abbf3c0b06ea1fbbae415dff3932fb796\"\u003e\u003ccode\u003e7977502\u003c/code\u003e\u003c/a\u003e Add new unofficial producer off_broadway_emqtt (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dashbitco/broadway/compare/v1.2.1...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `ex_doc` from 0.40.1 to 0.40.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-lang/ex_doc/blob/main/CHANGELOG.md\"\u003eex_doc's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev0.40.2 (2026-05-08)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBug fixes\n\u003cul\u003e\n\u003cli\u003eAdd \u003ccode\u003erel=\u0026quot;nofollow\u0026quot;\u003c/code\u003e to external links in HTML output\u003c/li\u003e\n\u003cli\u003eUse blockquote in \u003ccode\u003ellms.txt\u003c/code\u003e description\u003c/li\u003e\n\u003cli\u003eVoid elements in \u003ccode\u003eepub\u003c/code\u003e, such \u003ccode\u003ewbr\u003c/code\u003e, must be terminated by the matching end-tag\u003c/li\u003e\n\u003cli\u003eFix content container scrolling in older versions of Safari\u003c/li\u003e\n\u003cli\u003eSkip HTML comments when computing synopsis\u003c/li\u003e\n\u003cli\u003eFix markdown backend code fence language and opaque type display\u003c/li\u003e\n\u003cli\u003eFix false positive warning when linking to asset files\u003c/li\u003e\n\u003cli\u003ePrevent \u003ccode\u003e#search\u003c/code\u003e selector from impacting user content\u003c/li\u003e\n\u003cli\u003eRaise on extras that conflict with reserved filenames\u003c/li\u003e\n\u003cli\u003eFix styling of admonition blocks\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/c868c6a9dfb4da78ebaf31b153a16a5bc169b6ff\"\u003e\u003ccode\u003ec868c6a\u003c/code\u003e\u003c/a\u003e Release v0.40.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/b9cc3723816cffeab5d4a5acc89d02e910efcb8b\"\u003e\u003ccode\u003eb9cc372\u003c/code\u003e\u003c/a\u003e Update makeup_erlang version (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2236\"\u003e#2236\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/b389d1733af711a52cd0bf27e5f27797d629bca7\"\u003e\u003ccode\u003eb389d17\u003c/code\u003e\u003c/a\u003e Fix dead code and overriden clauses found by the type system\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/25523c9d377158e98b0a2f1c2815456988049f3b\"\u003e\u003ccode\u003e25523c9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/dbed340cf31fd5421dd79e2c625efc8b4f3cd21b\"\u003e\u003ccode\u003edbed340\u003c/code\u003e\u003c/a\u003e Raise on extras that conflict with reserved filenames\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/2808e459dbb5047befe5d51fbe9a9d1d8d0469f5\"\u003e\u003ccode\u003e2808e45\u003c/code\u003e\u003c/a\u003e Prevent #search selector from impacting user content\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/bc909685fd41f0e16f6714403bf520301ef3f28f\"\u003e\u003ccode\u003ebc90968\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/93339793797f0e40058e5400fbf1c9bd6cdd9109\"\u003e\u003ccode\u003e9333979\u003c/code\u003e\u003c/a\u003e Fix inline code font size in headings (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2220\"\u003e#2220\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/974b26305a1bd008f84e81526130fe01995f75ac\"\u003e\u003ccode\u003e974b263\u003c/code\u003e\u003c/a\u003e Raise on duplicate entries in files in :extras (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2226\"\u003e#2226\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-lang/ex_doc/commit/af07dd786a9e6a09b7681ce99cc48d5c219ead20\"\u003e\u003ccode\u003eaf07dd7\u003c/code\u003e\u003c/a\u003e Fix false positive warning when linking to asset files (\u003ca href=\"https://redirect.github.com/elixir-lang/ex_doc/issues/2225\"\u003e#2225\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-lang/ex_doc/compare/v0.40.1...v0.40.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `mint` from 1.7.1 to 1.8.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-mint/mint/blob/main/CHANGELOG.md\"\u003emint's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.8.0\u003c/h2\u003e\n\u003ch3\u003eNew features\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eRaise the default HTTP/2 receive windows to 16 MB (connection) and 4 MB (stream), and batch HTTP/2 receive-window refills. The larger windows lift the per-stream throughput cap (\u003ccode\u003ewindow / RTT\u003c/code\u003e), giving substantially higher throughput on higher-latency connections, in exchange for higher peak memory use per connection. The connection-level window is now configurable via the new \u003ccode\u003e:connection_window_size\u003c/code\u003e option to \u003ccode\u003eMint.HTTP.connect/4\u003c/code\u003e, and refill batching is configurable via the new \u003ccode\u003e:receive_window_update_threshold\u003c/code\u003e option.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMint.HTTP2.set_window_size/3\u003c/code\u003e for advertising a larger receive window to the server after a connection has been established.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003eMint.HTTP.request_body_window/2\u003c/code\u003e for querying the available send-window when streaming a request body.\u003c/li\u003e\n\u003cli\u003eIntroduce the \u003ccode\u003e:optional_responses\u003c/code\u003e option for \u003ccode\u003eMint.HTTP1.connect/4\u003c/code\u003e, with a \u003ccode\u003e:status_reason\u003c/code\u003e value that surfaces the HTTP/1.1 status reason-phrase as a new \u003ccode\u003e{:status_reason, request_ref, reason_phrase}\u003c/code\u003e response.\u003c/li\u003e\n\u003cli\u003eChange \u003ccode\u003et:Mint.HTTP.t/0\u003c/code\u003e from an opaque to an open type.\u003c/li\u003e\n\u003cli\u003eAdd \u003ccode\u003et:Mint.HTTPError.reason/0\u003c/code\u003e and \u003ccode\u003et:Mint.TransportError.reason/0\u003c/code\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes and Improvements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix HTTP/1 handling of \u003ccode\u003e1xx\u003c/code\u003e informational responses.\u003c/li\u003e\n\u003cli\u003eForbid or replace empty targets in HTTP/1.1 requests.\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/ef8f3a1160ee579d1a0db6311eb02ea63e7cc151\"\u003e\u003ccode\u003eef8f3a1\u003c/code\u003e\u003c/a\u003e Release v1.8.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/ddf2e1d09116ae996c1c887213142b91945bfb68\"\u003e\u003ccode\u003eddf2e1d\u003c/code\u003e\u003c/a\u003e Document since-version for new HTTP/2 receive-window options\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4c4bf9139db8923c9045baa6d0da947b31aaf4ba\"\u003e\u003ccode\u003e4c4bf91\u003c/code\u003e\u003c/a\u003e feat: polymorphic helper for request body streaming (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/485\"\u003e#485\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4fca8832e8fad34b90d29ef80df1dc29ccd925bd\"\u003e\u003ccode\u003e4fca883\u003c/code\u003e\u003c/a\u003e Raise default HTTP/2 receive windows and batch HTTP/2 receive-window refills ...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/4a195ffb5536719985d1bc3d22b7eadc21ee1651\"\u003e\u003ccode\u003e4a195ff\u003c/code\u003e\u003c/a\u003e Add Mint.HTTP2.set_window_size/3 (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/480\"\u003e#480\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/d3fee6e3d3cedc63ba4eae01d17bc5236b0b623f\"\u003e\u003ccode\u003ed3fee6e\u003c/code\u003e\u003c/a\u003e Change Mint.HTTP.t() from opaque to open type (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/483\"\u003e#483\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/e3c291c11130936c9ebeed0d12f67646630679b7\"\u003e\u003ccode\u003ee3c291c\u003c/code\u003e\u003c/a\u003e Fix HTTP/1 handling of 1xx informational responses (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/479\"\u003e#479\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/1a82c1d0f7869719f719a1fa5817c80d430ddbaa\"\u003e\u003ccode\u003e1a82c1d\u003c/code\u003e\u003c/a\u003e Support Elixir ~\u0026gt; 1.12 (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/478\"\u003e#478\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/2a78a5b99e515e15bee164c2bf221671d8be718f\"\u003e\u003ccode\u003e2a78a5b\u003c/code\u003e\u003c/a\u003e Run HTTP/2 integration tests against local Caddy instead of nghttp2.org (\u003ca href=\"https://redirect.github.com/elixir-mint/mint/issues/482\"\u003e#482\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-mint/mint/commit/0bfcc869b53b83989c24ba681d66d0a447b5a1c3\"\u003e\u003ccode\u003e0bfcc86\u003c/code\u003e\u003c/a\u003e Add a couple of \u003ca href=\"https://github.com/typedocs\"\u003e\u003ccode\u003e@​typedocs\u003c/code\u003e\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-mint/mint/compare/v1.7.1...v1.8.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `open_api_spex` from 3.22.2 to 3.22.3\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-api-spex/open_api_spex/releases\"\u003eopen_api_spex's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.22.3\u003c/h2\u003e\n\u003ch2\u003eWhat's Changed\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: removed unused require(s) by \u003ca href=\"https://github.com/David-Klemenc\"\u003e\u003ccode\u003e@​David-Klemenc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/700\"\u003eopen-api-spex/open_api_spex#700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelax decimal requirement by \u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\"\u003ehttps://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/open-api-spex/open_api_spex/blob/master/CHANGELOG.md\"\u003eopen_api_spex's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev3.22.3 - 2026-05-05\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003echore: removed unused require(s) by \u003ca href=\"https://github.com/David-Klemenc\"\u003e\u003ccode\u003e@​David-Klemenc\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/700\"\u003eopen-api-spex/open_api_spex#700\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003eRelax decimal requirement by \u003ca href=\"https://github.com/josevalim\"\u003e\u003ccode\u003e@​josevalim\u003c/code\u003e\u003c/a\u003e in \u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/pull/702\"\u003eopen-api-spex/open_api_spex#702\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/8850f32e72f978a40043d7fdeec604da2df49b00\"\u003e\u003ccode\u003e8850f32\u003c/code\u003e\u003c/a\u003e Release version 3.22.3\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/1377df0177133a0177f901e9ff5e859d878374a7\"\u003e\u003ccode\u003e1377df0\u003c/code\u003e\u003c/a\u003e Relax decimal requirement (\u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/issues/702\"\u003e#702\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/open-api-spex/open_api_spex/commit/224d1e1c3454c88aca57fdfd567983d113d9826a\"\u003e\u003ccode\u003e224d1e1\u003c/code\u003e\u003c/a\u003e chore: removed unused require(s) (\u003ca href=\"https://redirect.github.com/open-api-spex/open_api_spex/issues/700\"\u003e#700\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/open-api-spex/open_api_spex/compare/v3.22.2...v3.22.3\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `telemetry` from 1.4.1 to 1.4.2\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/beam-telemetry/telemetry/blob/main/CHANGELOG.md\"\u003etelemetry's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-telemetry/telemetry/tree/v1.4.2\"\u003e1.4.2\u003c/a\u003e\u003c/h2\u003e\n\u003ch3\u003eAdded\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eOptimize persistent term operations\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eFixed\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eUse structured logging consistently\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/7baf8085e406d5ae9e43b284d7c866742ae04b28\"\u003e\u003ccode\u003e7baf808\u003c/code\u003e\u003c/a\u003e Release v1.4.2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/a382cd144aa3a34e807a0aa245aa7e8629acf399\"\u003e\u003ccode\u003ea382cd1\u003c/code\u003e\u003c/a\u003e Use structured logging all the way (\u003ca href=\"https://redirect.github.com/beam-telemetry/telemetry/issues/149\"\u003e#149\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/beam-telemetry/telemetry/commit/87c134544c0430b073f0d246c80cc15cc9f4fbe3\"\u003e\u003ccode\u003e87c1345\u003c/code\u003e\u003c/a\u003e Persistent term optimisations (\u003ca href=\"https://redirect.github.com/beam-telemetry/telemetry/issues/148\"\u003e#148\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/beam-telemetry/telemetry/compare/v1.4.1...v1.4.2\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tesla` from 1.16.0 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/releases\"\u003etesla's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md\"\u003etesla's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/de2eaaf881077a84ffd00f76806afaf80c0e4c88\"\u003e\u003ccode\u003ede2eaaf\u003c/code\u003e\u003c/a\u003e chore(master): release 1.17.0 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/830\"\u003e#830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003e\u003ccode\u003ea672177\u003c/code\u003e\u003c/a\u003e fix: enhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/daec639e7e25eaf54b37fc87004b7fbbf576357a\"\u003e\u003ccode\u003edaec639\u003c/code\u003e\u003c/a\u003e chore(mint): strengthen mode regression coverage (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003e\u003ccode\u003ed812f54\u003c/code\u003e\u003c/a\u003e fix(mint): avoid active-mode message races without breaking reused connection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003e\u003ccode\u003efa755c9\u003c/code\u003e\u003c/a\u003e feat(client): add put_middleware/2, replace_middleware!/3, update_middleware!...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e\u003ccode\u003e0689e64\u003c/code\u003e\u003c/a\u003e feat(client): add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e\u003ccode\u003e544e1d7\u003c/code\u003e\u003c/a\u003e feat(logger): emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003e\u003ccode\u003eaae0866\u003c/code\u003e\u003c/a\u003e feat(logger): semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003e\u003ccode\u003eb8b622c\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/1c03570b13a807e3300b386e93fe87ec5b48fe0c\"\u003e\u003ccode\u003e1c03570\u003c/code\u003e\u003c/a\u003e chore: ci housekeeping (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/all-source-os/all-source/pull/173","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/all-source-os%2Fall-source/issues/173","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/173/packages"}},{"old_version":"1.10.4","new_version":"1.11.0","update_type":"minor","path":null,"pr_created_at":"2026-05-06T21:30:32.000Z","version_change":"1.10.4 → 1.11.0","issue":{"uuid":"4394568467","node_id":"PR_kwDOSQq6Wc7Y7jAn","number":24,"state":"closed","title":"chore(deps): bump the mix-production-dependencies group across 1 directory with 5 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":"2026-05-20T23:53:22.000Z","author_association":null,"state_reason":null,"created_at":"2026-05-06T21:30:32.000Z","updated_at":"2026-05-20T23:53:24.000Z","time_to_close":1218170,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"mix-production-dependencies","update_count":5,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"jason","old_version":"1.4.4","new_version":"1.4.5","repository_url":"https://github.com/michalmuskala/jason"},{"name":"phoenix","old_version":"1.8.5","new_version":"1.8.7","repository_url":"https://github.com/phoenixframework/phoenix"},{"name":"phoenix_live_view","old_version":"1.1.28","new_version":"1.1.30","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.25.0","new_version":"1.25.1","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 5 updates in the /src/flagd-ui directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [bandit](https://github.com/mtrudel/bandit) | `1.10.4` | `1.11.0` |\n| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |\n| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.5` | `1.8.7` |\n| [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) | `1.1.28` | `1.1.30` |\n| [swoosh](https://github.com/swoosh/swoosh) | `1.25.0` | `1.25.1` |\n\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `jason` from 1.4.4 to 1.4.5\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md\"\u003ejason's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.4.5 (05.05.2026)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd support for Decimal 3.0\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/4ede42858eb19f80ec9e863aab52df466eab8608\"\u003e\u003ccode\u003e4ede428\u003c/code\u003e\u003c/a\u003e Bump v1.4.5\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/b8c2185aaecc9839c0d13e69f7baab9c6e5e60f6\"\u003e\u003ccode\u003eb8c2185\u003c/code\u003e\u003c/a\u003e Fix dialyzer job\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/a363975dc873c4bde43dd6978685adaa41e2f2d5\"\u003e\u003ccode\u003ea363975\u003c/code\u003e\u003c/a\u003e Modernise CI to currently supported versions\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/243c8a8ba8452a720462222ab6d80367cd9235cf\"\u003e\u003ccode\u003e243c8a8\u003c/code\u003e\u003c/a\u003e Allow decimal 3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/c8e8d0501723d0855691a89ee66ee51b429b8d56\"\u003e\u003ccode\u003ec8e8d05\u003c/code\u003e\u003c/a\u003e Revert the experimental 1.5 branch and jason_native experiment\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/0e7a3e2cebcb3af550382416b19125d81d8d1824\"\u003e\u003ccode\u003e0e7a3e2\u003c/code\u003e\u003c/a\u003e Add example/doctest for Jason.OrderedObject.new/1\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/984bc078eb4b2084104751c7f1c5290b8338e06b\"\u003e\u003ccode\u003e984bc07\u003c/code\u003e\u003c/a\u003e fix broken link\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/f775592c90472e8debe989081883de6ba282e037\"\u003e\u003ccode\u003ef775592\u003c/code\u003e\u003c/a\u003e Raise if trying to decode decimals without decimal\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/79d59df70177242d288974923504880bf65a51c8\"\u003e\u003ccode\u003e79d59df\u003c/code\u003e\u003c/a\u003e Remove unneeded workarounds for xref warnings\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/michalmuskala/jason/commit/baac78e5dbd487e30f7f6f93b319c3cfbd3982e2\"\u003e\u003ccode\u003ebaac78e\u003c/code\u003e\u003c/a\u003e Fix warnings by conditionally compiling Decimal support\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/michalmuskala/jason/compare/v1.4.4...v1.4.5\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix` from 1.8.5 to 1.8.7\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix/blob/main/CHANGELOG.md\"\u003ephoenix's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.8.7 (2026-05-06)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix invalid status when longpoll request times out\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eMask \u003ccode\u003etoken\u003c/code\u003e parameter \u003ca href=\"https://hexdocs.pm/phoenix/Phoenix.Logger.html#module-parameter-filtering\"\u003ein logs\u003c/a\u003e by default (in addition to \u0026quot;password\u0026quot;)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eJavaScript Client Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix encoding of non-ASCII metadata in binary channel messages\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e1.8.6 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eSecurity fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/security/advisories/GHSA-628h-q48j-jr6q\"\u003eCVE-2026-32689\u003c/a\u003e: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phoenix] Raise if \u003ccode\u003euse Phoenix.VerifiedRoutes\u003c/code\u003e is called multiple times in the same module\u003c/li\u003e\n\u003cli\u003e[phoenix] Fix more deprecation and type checker warnings on Elixir 1.20\u003c/li\u003e\n\u003cli\u003e[phoenix] Raise when interpolating a list in \u003ccode\u003ePhoenix.VerifiedRoutes\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6632\"\u003e#6632\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phoenix] Gracefully handle non-binary \u003ccode\u003evsn\u003c/code\u003e socket parameter (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6662\"\u003e#6662\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.gen.*] Use \u003ccode\u003e.eex\u003c/code\u003e filename suffix in generator files\u003c/li\u003e\n\u003cli\u003e[phx.new] Add interactive mode: \u003ccode\u003emix phx.new --interactive\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6630\"\u003e#6630\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Add \u003ccode\u003ephx-no-format\u003c/code\u003e to generated \u003ccode\u003e\u0026lt;.live_title\u0026gt;\u003c/code\u003e tag (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6667\"\u003e#6667\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003e[phx.gen.*] Fix generated migrations for myxql when using scopes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6635\"\u003e#6635\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e[phx.new] Fix crash when parent directory contains a colon (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/pull/6633\"\u003e#6633\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ba3a131552add5758c021ff4c6e9b6947bb5a205\"\u003e\u003ccode\u003eba3a131\u003c/code\u003e\u003c/a\u003e Release v1.8.7\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/e74eaccb8e909826a50c9e8095cd1694dace289c\"\u003e\u003ccode\u003ee74eacc\u003c/code\u003e\u003c/a\u003e fix invalid status on longpoll window timeout\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/035fde9ac29920d4c040be91fdb7508295579036\"\u003e\u003ccode\u003e035fde9\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/eb5f52f683b148f30aa528d365b301d2c51a4b59\"\u003e\u003ccode\u003eeb5f52f\u003c/code\u003e\u003c/a\u003e Correctly serialize non ASCII metadata (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6664\"\u003e#6664\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/a99c5e8974f98c57aa4c883da51f57b582c0225c\"\u003e\u003ccode\u003ea99c5e8\u003c/code\u003e\u003c/a\u003e Filter token parameters by default (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6665\"\u003e#6665\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/21901113ec7aa5158ad7748170bb9c3b3254861b\"\u003e\u003ccode\u003e2190111\u003c/code\u003e\u003c/a\u003e update installer version\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/ddcdadb7de1132d630bbbe56f975e66f85f36416\"\u003e\u003ccode\u003eddcdadb\u003c/code\u003e\u003c/a\u003e Release v1.8.6\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/1a67c61ff9ce0a7711662ac7354861917a7c80f7\"\u003e\u003ccode\u003e1a67c61\u003c/code\u003e\u003c/a\u003e prevent unexpected memory usage on nd-json body splitting\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/8ca76a2c57fb189733e67c3fb72098d1092ef60c\"\u003e\u003ccode\u003e8ca76a2\u003c/code\u003e\u003c/a\u003e fix a couple of typos (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6672\"\u003e#6672\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix/commit/6214d83ac87fe87170bf2a8525b3404af1517705\"\u003e\u003ccode\u003e6214d83\u003c/code\u003e\u003c/a\u003e Bump postcss from 8.5.6 to 8.5.13 (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix/issues/6671\"\u003e#6671\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix/compare/v1.8.5...v1.8.7\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.28 to 1.1.30\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.30/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.30 (2026-05-05)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEnsure internal phx-viewport hook does not crash on update if no scroll container is used (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4214\"\u003e#4214\u003c/a\u003e), introduced in v1.1.29.\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/fdbbe52011812943d90dc4a3d46f4c0740d86bd2\"\u003e\u003ccode\u003efdbbe52\u003c/code\u003e\u003c/a\u003e Release v1.1.30\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/970932be5fa7b4313994ba3b68f0a55ff74f9a2c\"\u003e\u003ccode\u003e970932b\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/ff31d012fbeeedd38f13c9836d5d4fbfc22750b8\"\u003e\u003ccode\u003eff31d01\u003c/code\u003e\u003c/a\u003e Ensure phx-viewport hook does not fail if there's no scrollContainer\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.28...v1.1.30\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.0 to 1.25.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/0b5c091085bd76681826b486a47cf9aeb12185d4\"\u003e\u003ccode\u003e0b5c091\u003c/code\u003e\u003c/a\u003e fix: assert_no_email_sent and refute_email_sent now catch deliver_many (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/422d062231336e98eba7a61fae172fcc8ea53702\"\u003e\u003ccode\u003e422d062\u003c/code\u003e\u003c/a\u003e Bump release comment action to v0.5.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/coralogix-se/opentelemetry-demo/pull/24","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/coralogix-se%2Fopentelemetry-demo/issues/24","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/24/packages"}},{"old_version":"1.10.4","new_version":"1.11.0","update_type":"minor","path":null,"pr_created_at":"2026-05-04T23:17:30.000Z","version_change":"1.10.4 → 1.11.0","issue":{"uuid":"4380311161","node_id":"PR_kwDOQF4m787YM2bg","number":169,"state":"open","title":"deps(elixir): bump the elixir-query-service group across 1 directory with 3 updates","user":"dependabot[bot]","labels":[],"assignees":[],"locked":false,"comments_count":3,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T23:17:30.000Z","updated_at":"2026-05-12T03:09:03.386Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"deps(elixir): bump","group_name":"elixir-query-service","update_count":3,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"broadway","old_version":"1.2.1","new_version":"1.3.0","repository_url":"https://github.com/dashbitco/broadway"},{"name":"tesla","old_version":"1.16.0","new_version":"1.17.0","repository_url":"https://github.com/elixir-tesla/tesla"}],"path":null,"ecosystem":"hex"},"body":"Bumps the elixir-query-service group with 3 updates in the /apps/query-service directory: [bandit](https://github.com/mtrudel/bandit), [broadway](https://github.com/dashbitco/broadway) and [tesla](https://github.com/elixir-tesla/tesla).\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `broadway` from 1.2.1 to 1.3.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/dashbitco/broadway/blob/main/CHANGELOG.md\"\u003ebroadway's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.3.0 (2026-04-17)\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eAdd telemetry events around \u003ccode\u003ehandle_failed\u003c/code\u003e\u003c/li\u003e\n\u003cli\u003eInclude producer metadata in telemetry events\u003c/li\u003e\n\u003cli\u003eAdd labels to Broadway stages\u003c/li\u003e\n\u003cli\u003eFix race condition during graceful shutdown\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d3a668c885342ae223b5ebcd9571efe4a0f18c41\"\u003e\u003ccode\u003ed3a668c\u003c/code\u003e\u003c/a\u003e Release v1.3.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/dd2f40571ac463bbc56f949b6c1f8d33fd6cc665\"\u003e\u003ccode\u003edd2f405\u003c/code\u003e\u003c/a\u003e Include producer metadata in per-message events (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/370\"\u003e#370\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/966c59ad95ddb6aa75c91e71848cfc617bef3a8e\"\u003e\u003ccode\u003e966c59a\u003c/code\u003e\u003c/a\u003e Add :telemetry.span for handle_failed/2 callback (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/369\"\u003e#369\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/370f180e853a33978f1822432c66bea61f9d98ef\"\u003e\u003ccode\u003e370f180\u003c/code\u003e\u003c/a\u003e Clarify some docs related to GenStage demand (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/368\"\u003e#368\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/69d90526dc7c1003d1b9fff5092645eb4fbe9e48\"\u003e\u003ccode\u003e69d9052\u003c/code\u003e\u003c/a\u003e Bump Elixir/Erlang CI matrix and GitHub actions (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/365\"\u003e#365\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/8c6616475acc874f185ffabaffc92554eefefbfc\"\u003e\u003ccode\u003e8c66164\u003c/code\u003e\u003c/a\u003e Add Process.set_label/1 to Broadway stages (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/363\"\u003e#363\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/d32d30deb64dc4481f2743f6a0d8606299690046\"\u003e\u003ccode\u003ed32d30d\u003c/code\u003e\u003c/a\u003e Catch exits if already down when trapping exits\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/f52f2f793e16e1c976f5e52adc372457d1445b73\"\u003e\u003ccode\u003ef52f2f7\u003c/code\u003e\u003c/a\u003e Fix graceful shutdown race condition (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/362\"\u003e#362\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/136bea6786ae1526721a98a93ca9d752543c3a7d\"\u003e\u003ccode\u003e136bea6\u003c/code\u003e\u003c/a\u003e Add batch_size/0 and batch_size_fun/0 types (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/361\"\u003e#361\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/dashbitco/broadway/commit/7977502abbf3c0b06ea1fbbae415dff3932fb796\"\u003e\u003ccode\u003e7977502\u003c/code\u003e\u003c/a\u003e Add new unofficial producer off_broadway_emqtt (\u003ca href=\"https://redirect.github.com/dashbitco/broadway/issues/360\"\u003e#360\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/dashbitco/broadway/compare/v1.2.1...v1.3.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `tesla` from 1.16.0 to 1.17.0\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/releases\"\u003etesla's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.17.0\u003c/h2\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/elixir-tesla/tesla/blob/master/CHANGELOG.md\"\u003etesla's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003e1.17.0\u003c/a\u003e (2026-04-18)\u003c/h2\u003e\n\u003ch3\u003eFeatures\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eAdd :metadata option to Logger middleware (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/829\"\u003e#829\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/38e209a5a370160a723eb7a69665befdf9978b1a\"\u003e38e209a\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eadd \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003eb8b622c\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/840\"\u003e#840\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003efa755c9\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003eclient:\u003c/strong\u003e add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e0689e64\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e544e1d7\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003elogger:\u003c/strong\u003e semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003eaae0866\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eBug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eavoid soft-deprecated warning logs when compiling tesla itself (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/834\"\u003e#834\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/ab822644006666702e1820625c96c60023a2a3e1\"\u003eab82264\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003edialyzer spec for mock opts (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/831\"\u003e#831\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/440ec4e442db3541b10f63a3da6235a5239fdab8\"\u003e440ec4e\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eenhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003ea672177\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003einclude caller module name in \u003ccode\u003euse Tesla\u003c/code\u003e deprecation warning (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/832\"\u003e#832\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8fb158f1ef5e2bebad7fd3b207738b1f4a3b9f6\"\u003eb8fb158\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003cstrong\u003emint:\u003c/strong\u003e avoid active-mode message races without breaking reused connections (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/812\"\u003e#812\u003c/a\u003e) (\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003ed812f54\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/de2eaaf881077a84ffd00f76806afaf80c0e4c88\"\u003e\u003ccode\u003ede2eaaf\u003c/code\u003e\u003c/a\u003e chore(master): release 1.17.0 (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/830\"\u003e#830\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/a6721774e226ae48a9e3fc10f6592b595d5cde2f\"\u003e\u003ccode\u003ea672177\u003c/code\u003e\u003c/a\u003e fix: enhance response handling in Mint adapter (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/803\"\u003e#803\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/daec639e7e25eaf54b37fc87004b7fbbf576357a\"\u003e\u003ccode\u003edaec639\u003c/code\u003e\u003c/a\u003e chore(mint): strengthen mode regression coverage (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/841\"\u003e#841\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/d812f543c905f53326899f38f687153f77551c44\"\u003e\u003ccode\u003ed812f54\u003c/code\u003e\u003c/a\u003e fix(mint): avoid active-mode message races without breaking reused connection...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/fa755c97a24dbb4d542cffdad1bba8222053dbe1\"\u003e\u003ccode\u003efa755c9\u003c/code\u003e\u003c/a\u003e feat(client): add put_middleware/2, replace_middleware!/3, update_middleware!...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/0689e64a3689bdbcb2a5921c1f3a1b32fb7f64c8\"\u003e\u003ccode\u003e0689e64\u003c/code\u003e\u003c/a\u003e feat(client): add update_middleware/2 to transform middleware list (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/523\"\u003e#523\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/544e1d7473e54030315553a6534d7e291250009d\"\u003e\u003ccode\u003e544e1d7\u003c/code\u003e\u003c/a\u003e feat(logger): emit url.template from KeepRequest preserved URL (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/839\"\u003e#839\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/aae0866c4e200858eb29789056bc90824c580be9\"\u003e\u003ccode\u003eaae0866\u003c/code\u003e\u003c/a\u003e feat(logger): semantic OTel metadata and legacy mode (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/838\"\u003e#838\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/b8b622ca1cd3104fd5d437bb3245d865d6af0b37\"\u003e\u003ccode\u003eb8b622c\u003c/code\u003e\u003c/a\u003e feat: add \u003ccode\u003eassigns\u003c/code\u003e and \u003ccode\u003eprivate\u003c/code\u003e fields to \u003ccode\u003eTesla.Env\u003c/code\u003e (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/836\"\u003e#836\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/elixir-tesla/tesla/commit/1c03570b13a807e3300b386e93fe87ec5b48fe0c\"\u003e\u003ccode\u003e1c03570\u003c/code\u003e\u003c/a\u003e chore: ci housekeeping (\u003ca href=\"https://redirect.github.com/elixir-tesla/tesla/issues/835\"\u003e#835\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/elixir-tesla/tesla/compare/v1.16.0...v1.17.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e","html_url":"https://github.com/all-source-os/all-source/pull/169","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/all-source-os%2Fall-source/issues/169","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/169/packages"}},{"old_version":"1.10.4","new_version":"1.11.0","update_type":"minor","path":null,"pr_created_at":"2026-05-04T13:46:41.000Z","version_change":"1.10.4 → 1.11.0","issue":{"uuid":"4377075420","node_id":"PR_kwDOSLyUUs7YCKWz","number":33,"state":"open","title":"chore(deps): bump the mix-production-dependencies group across 1 directory with 3 updates","user":"dependabot[bot]","labels":["dependencies","elixir"],"assignees":[],"locked":false,"comments_count":1,"pull_request":true,"closed_at":null,"author_association":null,"state_reason":null,"created_at":"2026-05-04T13:46:41.000Z","updated_at":"2026-05-04T14:10:18.000Z","time_to_close":null,"merged_at":null,"merged_by":null,"closed_by":null,"dependency_metadata":{"prefix":"chore(deps): bump","group_name":"mix-production-dependencies","update_count":3,"packages":[{"name":"bandit","old_version":"1.10.4","new_version":"1.11.0","repository_url":"https://github.com/mtrudel/bandit"},{"name":"phoenix_live_view","old_version":"1.1.28","new_version":"1.1.29","repository_url":"https://github.com/phoenixframework/phoenix_live_view"},{"name":"swoosh","old_version":"1.25.0","new_version":"1.25.1","repository_url":"https://github.com/swoosh/swoosh"}],"path":null,"ecosystem":"hex"},"body":"Bumps the mix-production-dependencies group with 3 updates in the /src/flagd-ui directory: [bandit](https://github.com/mtrudel/bandit), [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) and [swoosh](https://github.com/swoosh/swoosh).\n\nUpdates `bandit` from 1.10.4 to 1.11.0\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md\"\u003ebandit's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch1\u003e1.11.0 (1 May 2026)\u003c/h1\u003e\n\u003ch3\u003eFixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eFix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eFix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eImprove handling of zero/negative length \u0026amp; offset parameters to send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch3\u003eEnhancements\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_inflate_ratio\u003c/code\u003e WebSocket configuration option that defines a\nmaximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1\u003c/li\u003e\n\u003cli\u003eDefine a new \u003ccode\u003emax_fragmented_message_size\u003c/code\u003e WebSocket configuration option\nwhich defines the maximum allowed WebSocket frame size (inclusive of\ncontinuation frames). Defaults to 8MB\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch1\u003eChanges\u003c/h1\u003e\n\u003cul\u003e\n\u003cli\u003eThe default value of the \u003ccode\u003emax_frame_size\u003c/code\u003e WebSocket option has changed from \u003ccode\u003e:infinity\u003c/code\u003e to 8MB\u003c/li\u003e\n\u003cli\u003eZero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)\u003c/li\u003e\n\u003cli\u003eMultiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003cli\u003eWe now \u003cem\u003eonly\u003c/em\u003e use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks \u003ca href=\"https://github.com/PJUllrich\"\u003e\u003ccode\u003e@​PJUllrich\u003c/code\u003e\u003c/a\u003e \u0026amp; \u003ca href=\"https://github.com/maennchen\"\u003e\u003ccode\u003e@​maennchen\u003c/code\u003e\u003c/a\u003e!)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/e62619895d0d2584d7ffa57d43ef6f72437dfaff\"\u003e\u003ccode\u003ee626198\u003c/code\u003e\u003c/a\u003e Version bump to 1.11.0\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/014c1579f9f73d32cf10f4813396218d0fb9d609\"\u003e\u003ccode\u003e014c157\u003c/code\u003e\u003c/a\u003e Tweaks to Autobahn test suite\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1e8e55966da9129016b73d32f0e1df4630e3b463\"\u003e\u003ccode\u003e1e8e559\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/45feea20dea8af7ffd7245271107b695c040e667\"\u003e\u003ccode\u003e45feea2\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/f2ca636eb6df385219957e8934e9fc6efa1630d1\"\u003e\u003ccode\u003ef2ca636\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/21612c7c7b1ce43eccd36d3af3a2299d23513667\"\u003e\u003ccode\u003e21612c7\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/8156921a51e684a951221da7bc30a70a022f722e\"\u003e\u003ccode\u003e8156921\u003c/code\u003e\u003c/a\u003e Merge commit from fork\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/fc3cf61f636f1f2acd708783a260dd494c3444fe\"\u003e\u003ccode\u003efc3cf61\u003c/code\u003e\u003c/a\u003e Improve handling of edge cases in send_file (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/580\"\u003e#580\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/1085ad071204ab135cc8ffc4120c2f6656b8548f\"\u003e\u003ccode\u003e1085ad0\u003c/code\u003e\u003c/a\u003e Bump machete from 0.3.11 to 0.3.12 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/579\"\u003e#579\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mtrudel/bandit/commit/c70e175b68e372bdbd7eb2bf81d236de0ef831b0\"\u003e\u003ccode\u003ec70e175\u003c/code\u003e\u003c/a\u003e Bump credo from 1.7.17 to 1.7.18 (\u003ca href=\"https://redirect.github.com/mtrudel/bandit/issues/578\"\u003e#578\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/mtrudel/bandit/compare/1.10.4...1.11.0\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `phoenix_live_view` from 1.1.28 to 1.1.29\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/releases\"\u003ephoenix_live_view's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.29\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/blob/v1.1.29/CHANGELOG.md\"\u003ephoenix_live_view's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.1.29 (2026-05-04)\u003c/h2\u003e\n\u003ch3\u003eBug fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003ePrevent JS crash when hook has a duplicate ID (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4196\"\u003e#4196\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eRecompute scroll container for phx-viewport bindings if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4169\"\u003e#4169\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eFix phx-viewport events not firing when container has horizontal overflow (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/3897\"\u003e#3897\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eHandle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4209\"\u003e#4209\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eUse \u003ccode\u003emoveBefore\u003c/code\u003e if available when reordering stream elements (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4212\"\u003e#4212\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/24090b52e5f8aa392b23d9a1bf53974ecc66662a\"\u003e\u003ccode\u003e24090b5\u003c/code\u003e\u003c/a\u003e Release v1.1.29\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/cc836431208b3ad28a4cfcc2ae412ba24dc98b7c\"\u003e\u003ccode\u003ecc83643\u003c/code\u003e\u003c/a\u003e Update assets\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/8deb3e5e5a4b002bcab1250e1a14768bd7a9d5e8\"\u003e\u003ccode\u003e8deb3e5\u003c/code\u003e\u003c/a\u003e Use moveBefore if supported when reordering stream items (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4213\"\u003e#4213\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/174dad576cbff77e817091b6c7652cb3c21daffa\"\u003e\u003ccode\u003e174dad5\u003c/code\u003e\u003c/a\u003e DOM patching: Fall back to PHX_MAGIC_ID if node ID was touched by client hook...\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/4e18a20652bbaca961146f73d9b1ec87295861f9\"\u003e\u003ccode\u003e4e18a20\u003c/code\u003e\u003c/a\u003e handle locks on skipped nodes (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4210\"\u003e#4210\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/031f00ccc6b0e95eaa14222312514744a5a5a923\"\u003e\u003ccode\u003e031f00c\u003c/code\u003e\u003c/a\u003e Remove unreachable error clause in UploadTmpFileWriter.write_chunk/2\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/0b4005ba0631fc03ac5e46551e540d04c95dbefe\"\u003e\u003ccode\u003e0b4005b\u003c/code\u003e\u003c/a\u003e Optimize traverse_dynamic for nil and binary entries\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/3b3844fabde644b974ca4f7d4d5d745c4e8806bf\"\u003e\u003ccode\u003e3b3844f\u003c/code\u003e\u003c/a\u003e Remove horizontal checks in viewport functions (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4200\"\u003e#4200\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/1f4e986c992beb65a0f7de958587f7ad08dfeeb3\"\u003e\u003ccode\u003e1f4e986\u003c/code\u003e\u003c/a\u003e add blame ignore revs\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/commit/bcdade40fc475875616bf58f101586176c667158\"\u003e\u003ccode\u003ebcdade4\u003c/code\u003e\u003c/a\u003e Recompute scroll container if it is no longer available (\u003ca href=\"https://redirect.github.com/phoenixframework/phoenix_live_view/issues/4185\"\u003e#4185\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eAdditional commits viewable in \u003ca href=\"https://github.com/phoenixframework/phoenix_live_view/compare/v1.1.28...v1.1.29\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\nUpdates `swoosh` from 1.25.0 to 1.25.1\n\u003cdetails\u003e\n\u003csummary\u003eRelease notes\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/releases\"\u003eswoosh's releases\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003ev1.25.1 🚀\u003c/h2\u003e\n\u003ch2\u003e✨ Features\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003e⛓️ Dependency\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eBump plug_cowboy from 2.8.0 to 2.8.1 \u003ca href=\"https://github.com/dependabot\"\u003e\u003ccode\u003e@​dependabot\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003ch2\u003eNew Contributors\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1123\"\u003eswoosh/swoosh#1123\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e made their first contribution in \u003ca href=\"https://redirect.github.com/swoosh/swoosh/pull/1124\"\u003eswoosh/swoosh#1124\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003cp\u003e\u003cstrong\u003eFull Changelog\u003c/strong\u003e: \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ehttps://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\u003c/a\u003e\u003c/p\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eChangelog\u003c/summary\u003e\n\u003cp\u003e\u003cem\u003eSourced from \u003ca href=\"https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md\"\u003eswoosh's changelog\u003c/a\u003e.\u003c/em\u003e\u003c/p\u003e\n\u003cblockquote\u003e\n\u003ch2\u003e1.25.1\u003c/h2\u003e\n\u003ch3\u003e🐛 Bug Fixes\u003c/h3\u003e\n\u003cul\u003e\n\u003cli\u003eEscape email content in mailbox preview UI \u003ca href=\"https://github.com/mogest\"\u003e\u003ccode\u003e@​mogest\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003efix: assert_no_email_sent and refute_email_sent now catch deliver_many \u003ca href=\"https://github.com/donleandro\"\u003e\u003ccode\u003e@​donleandro\u003c/code\u003e\u003c/a\u003e (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/blockquote\u003e\n\u003c/details\u003e\n\u003cdetails\u003e\n\u003csummary\u003eCommits\u003c/summary\u003e\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/2aa9af499fa9b5250dba0a2d42cccc47a1f701c4\"\u003e\u003ccode\u003e2aa9af4\u003c/code\u003e\u003c/a\u003e Bump version to 1.25.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1127\"\u003e#1127\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/df97f1c6b86c4e40ce31d5393b7cb97cc5e84bd2\"\u003e\u003ccode\u003edf97f1c\u003c/code\u003e\u003c/a\u003e Bump plug_cowboy from 2.8.0 to 2.8.1 (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1126\"\u003e#1126\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/397562e99adb780d829cf4a6dc63e76c6d263e6f\"\u003e\u003ccode\u003e397562e\u003c/code\u003e\u003c/a\u003e Regenerate styles with Tailwind CSS\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/3e4ff5f800448c9446f5e4b7ea48b2f3b550d164\"\u003e\u003ccode\u003e3e4ff5f\u003c/code\u003e\u003c/a\u003e fix: use github.ref_name instead of github.ref for tailwind branch name\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/f0b12c02ebc13ebc621821a93ffc20c05033e5d6\"\u003e\u003ccode\u003ef0b12c0\u003c/code\u003e\u003c/a\u003e Escape email content in mailbox preview UI (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1124\"\u003e#1124\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/0b5c091085bd76681826b486a47cf9aeb12185d4\"\u003e\u003ccode\u003e0b5c091\u003c/code\u003e\u003c/a\u003e fix: assert_no_email_sent and refute_email_sent now catch deliver_many (\u003ca href=\"https://redirect.github.com/swoosh/swoosh/issues/1123\"\u003e#1123\u003c/a\u003e)\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://github.com/swoosh/swoosh/commit/422d062231336e98eba7a61fae172fcc8ea53702\"\u003e\u003ccode\u003e422d062\u003c/code\u003e\u003c/a\u003e Bump release comment action to v0.5.1\u003c/li\u003e\n\u003cli\u003eSee full diff in \u003ca href=\"https://github.com/swoosh/swoosh/compare/v1.25.0...v1.25.1\"\u003ecompare view\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/details\u003e\n\u003cbr /\u003e\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n\u003cdetails\u003e\n\u003csummary\u003eDependabot commands and options\u003c/summary\u003e\n\u003cbr /\u003e\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot show \u003cdependency name\u003e ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore \u003cdependency name\u003e major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)\n- `@dependabot ignore \u003cdependency name\u003e` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)\n- `@dependabot unignore \u003cdependency name\u003e` will remove all of the ignore conditions of the specified dependency\n- `@dependabot unignore \u003cdependency name\u003e \u003cignore condition\u003e` will remove the ignore condition of the specified dependency and ignore conditions\n\n\n\u003c/details\u003e\n\n\u003c!-- This is an auto-generated description by cubic. --\u003e\n---\n## Summary by cubic\nUpgrade production deps in src/flagd-ui to pull in security patches and UI stability fixes: `bandit` 1.11.0, `phoenix_live_view` 1.1.29, and `swoosh` 1.25.1.\n\n- **Dependencies**\n  - `bandit` → 1.11.0: fixes multiple WebSocket/HTTP CVEs; adds `max_inflate_ratio` and `max_fragmented_message_size`; default WebSocket `max_frame_size` is now 8MB.\n  - `phoenix_live_view` → 1.1.29: fixes duplicate hook ID crash; improves `phx-viewport` handling and stream reordering.\n  - `swoosh` → 1.25.1: escapes mailbox preview HTML; test helpers catch `deliver_many`.\n\n- **Migration**\n  - If you rely on very large WebSocket/LiveView payloads, configure Bandit `max_frame_size`/`max_fragmented_message_size` to suit your needs.\n\n\u003csup\u003eWritten for commit 3e012c96fd6f8d27d796b92e2c82b5253979aef5. Summary will update on new commits.\u003c/sup\u003e\n\n\u003c!-- End of auto-generated description by cubic. --\u003e\n\n","html_url":"https://github.com/Vacbo/northstar-commerce/pull/33","url":"https://dependabot.ecosyste.ms/api/v1/hosts/GitHub/repositories/Vacbo%2Fnorthstar-commerce/issues/33","packages_url":"https://dependabot.ecosyste.ms/api/v1/issues/33/packages"}}]}