Skip to content

build(deps): bump the mix-production-dependencies group across 1 directory with 11 updates - #406

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/src/flagd-ui/mix-production-dependencies-18f4eca455
Closed

build(deps): bump the mix-production-dependencies group across 1 directory with 11 updates#406
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/src/flagd-ui/mix-production-dependencies-18f4eca455

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the mix-production-dependencies group with 9 updates in the /src/flagd-ui directory:

Package From To
bandit 1.8.0 1.12.5
dns_cluster 0.2.0 0.3.0
gettext 1.0.0 1.0.2
jason 1.4.4 1.4.5
phoenix 1.8.1 1.8.13
phoenix_live_dashboard 0.8.7 0.9.0
req 0.5.15 0.7.4
swoosh 1.19.8 1.28.0
tailwind 0.4.1 0.5.1

Updates bandit from 1.8.0 to 1.12.5

Changelog

Sourced from bandit's changelog.

1.12.5 (20 Aug 2026)

Changes

  • Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532w-jv94) (#671)
  • Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#665)
  • Treat proxy-connection as a connection-specific header in HTTP/2 (#632)
  • Return FRAME_SIZE_ERROR for HEADERS/DATA frames too short for their flags (#652)
  • Treat abortive-close posix reasons as client closures in logging (#663)

Fixes

  • Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (#670)
  • Use PROTOCOL_ERROR for a zero WINDOW_UPDATE increment (#656)
  • Reject send_file ranges past EOF instead of emitting a negative Content-Length (#653)
  • Reject compressed WebSocket control frames regardless of the fin bit (#651)
  • Enforce the RFC9112 chunk-size grammar and reject repeated transfer-encoding (#631)
  • Fix typos (#627)
  • Fix non-deterministic compile-time code (#646)

Enhancements

  • Lazily precompile the invalid-field-value match pattern (#662)
  • Add tests for untested configuration options (#659)
  • Match the weak-etag prefix W/ explicitly (#657)
  • Do not duplicate an existing vary: accept-encoding header (#658)
  • Honor the close/keep-alive token inside a comma-separated Connection header (#655)
  • Initialize the per-stream receive window from the advertised initial_window_size (#654)
  • Keep track of body_length to avoid list iterations (#645)
  • Avoid per-header length/1 and option lookups in do_read_headers! (#614) (#626)

1.12.4 (27 July 2026)

Fixes

  • Properly send Connection: close header when client requests closure (#617)
  • Disallow transfer-encoding on HTTP/1.0 connections (#618)
  • Reject requests with multiple Host headers (#619)
  • Reject malformed header lines (#620)
  • Fix handling of chunk extensions (#621)

Enhancements

  • Tighten up CI against supply chain attacks (#623, thanks @​Totara-thib!)
  • Reorganize and increase coverage of HTTP/1 tests to better match RFC structure (#616)
  • Tolerate a leading newline on HTTP/1 requests (#622)
  • Send "100 Continue" interim response before reading body if client requests it (#624)

1.12.3 (25 July 2026)

... (truncated)

Commits
  • 9571499 Version bump to 1.12.5
  • f6914aa Bound and cancel HTTP/2 sends blocked on the connection window (GHSA-xj8g-532...
  • d38cf04 Validate HTTP/2 header field values for CR/LF/NUL (GHSA-x3gh-xhj4-3vq8) (#670)
  • cce7c5f Honor Accept-Encoding q-values, the wildcard, and case-insensitive codings (#...
  • eca1713 Fixup recent test noise
  • b65c235 Consolidate Plug.Conn.Adapter calling-process tests into adapter_test.exs (#667)
  • 4ccc008 Treat abortive-close posix reasons as client closures in logging (#663)
  • 274eb55 Lazily precompile the invalid-field-value match pattern (#662)
  • 10710de Enforce the chunk-size grammar in a single pass (#661)
  • d69202e Unify case-insensitive comma-separated header token checks (#660)
  • Additional commits viewable in compare view

Updates dns_cluster from 0.2.0 to 0.3.0

Changelog

Sourced from dns_cluster's changelog.

0.3.0 (2026-08-25)

  • Support srv cluster queries
Commits

Updates gettext from 1.0.0 to 1.0.2

Changelog

Sourced from gettext's changelog.

v1.0.2

  • Only skip manifest removal on Elixir v1.19.3+

v1.0.1 (retired)

  • Remove unnecessary cleaning of Elixir manifests
Commits

Updates jason from 1.4.4 to 1.4.5

Changelog

Sourced from jason's changelog.

1.4.5 (05.05.2026)

  • Add support for Decimal 3.0
Commits
  • 4ede428 Bump v1.4.5
  • b8c2185 Fix dialyzer job
  • a363975 Modernise CI to currently supported versions
  • 243c8a8 Allow decimal 3.0
  • c8e8d05 Revert the experimental 1.5 branch and jason_native experiment
  • 0e7a3e2 Add example/doctest for Jason.OrderedObject.new/1
  • 984bc07 fix broken link
  • f775592 Raise if trying to decode decimals without decimal
  • 79d59df Remove unneeded workarounds for xref warnings
  • baac78e Fix warnings by conditionally compiling Decimal support
  • Additional commits viewable in compare view

Updates phoenix from 1.8.1 to 1.8.13

Release notes

Sourced from phoenix's releases.

v1.8.13

Bug fixes

  • Workaround issue where Mobile Chrome 149+ would not reconnect after tab is resumed (#6804)

v1.8.12

Bug fixes

  • [phx.gen.auth] Fix return_to session key not being cleared after logging in (#6798)
  • [Channels] Fix channel messages being invalidly dropped when receiving messages without a join_ref (introduced in 1.8.3) (#6800)

v1.8.11

Bug fixes

  • Fix Phoenix crashing on boot if Mix is available, but not started (#6789)

v1.8.10

Bug fixes

  • [Phoenix.CodeReloader] Fix "must restart your server" messages from code reloader when compile.lock mtime changes without a content change (#6753)
  • [Phoenix.Endpoint] add missing websocket options (#6758)
  • [phoenix.js] Close and retry the longpoll transport when a batch POST times out (#6769)
  • [phoenix.js] Release the stale reply binding of a buffered push (#6788)

Enhancements

  • [phx.gen.release] Use Bob API to find Docker images in phx.gen.release --docker
  • [Channels] Allow LongPoll transport token to be sent in header (this will change in 1.9)
  • [Phoenix.Router] Support plugs with options in pipe_throught (#6755)
  • [Phoenix.Token] document encode options (see the change in plug_crypto)
  • [phoenix.js] Ensure transport errors are identifiable (#6763)
Changelog

Sourced from phoenix's changelog.

Commits

Updates phoenix_live_dashboard from 0.8.7 to 0.9.0

Changelog

Sourced from phoenix_live_dashboard's changelog.

v0.9.0 (2026-08-12)

  • Require Phoenix LiveView 1.0+
  • Require Elixir 1.15+
  • Add a compact nested list view for application supervision trees
  • Allow overriding the Ecto Stats info module per repository by passing {repo, info_module} tuples in :ecto_repos
  • Add refresh_interval as a reporting option for chart components
  • Display process label in application and process views
Commits

Updates phoenix_live_view from 1.1.16 to 1.2.11

Release notes

Sourced from phoenix_live_view's releases.

v1.2.11

Bug fixes

  • Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
  • Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
  • Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)

v1.2.9

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.11 (2026-08-27)

Bug fixes

  • Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
  • Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
  • Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10 (2026-08-20)

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)

v1.2.9 (2026-08-10)

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)

... (truncated)

Commits

Updates req from 0.5.15 to 0.7.4

Release notes

Sourced from req's releases.

v0.7.4

  • put_params: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar

  • put_path_params: Do not overwrite redirect target.

v0.7.3

  • encode_body: Revert "Automatically change GET to POST when request body is set."

v0.7.2

  • encode_body: Bring back form_multipart: [{string_name, value}].
  • put_aws_sigv4: Fix AWS SigV4 compatibility with Supabase Storage S3.

v0.6.1

v0.6.0

  • encode_body: Security fix for :form_multipart header injection (GHSA-px9f-whj3-246m).

    The multipart encoder interpolated the per-part name, filename, and content_type into the part headers without escaping, so an attacker-controlled value could inject extra headers or smuggle additional parts into the request. These values are now escaped per RFC 7578 / WHATWG form-data (", CR, and LF are percent-encoded).

    Thanks to @​PJUllrich for reporting it.

  • decode_body: Drop automatic zip/tar/tgz/gz/zst/csv decoding, (GHSA-655f-mp8p-96gv).

... (truncated)

Changelog

Sourced from req's changelog.

v0.7.4 (2026-08-26)

  • [put_params]: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar

  • [put_path_params]: Do not overwrite redirect target.

v0.7.3 (2026-08-19)

v0.7.2 (2026-07-31)

  • encode_body: Bring back form_multipart: [{string_name, value}].
  • [put_aws_sigv4]: Fix AWS SigV4 compatibility with Supabase Storage S3.

v0.7.1 (2026-07-28)

  • Deprecate cache: true/[cache] step. It will be removed in Req v0.8. I plan a comprehensive cache solution for Req v1.0+.

v0.7.0 (2026-07-28)

  • [Req]: Add Req.new(req, options).

  • [Req]: Treat URL userinfo as Basic Authentication.

  • [Req], [Req.Request]: Deprecate adapter: fun in favour of adapter: mod.

  • [Req.Request]: (BREAKING CHANGE) Remove current_request_steps field.

  • [Req.Request]: Fix redacting remaining auth values.

  • (BREAKING CHANGE) Replace run_finch step with [Req.Finch] adapter module.

  • (BREAKING CHANGE) Replace put_plug and run_plug steps with [Req.Plug] adapter module.

  • [Req.Finch]: Support finch: options.

  • [Req.Finch]: Support :request_timeout.

  • [Req.Finch]: Fix handling duplicate response headers.

... (truncated)

Commits
  • 3678dc4 Release v0.7.4
  • bd160b2 put_path_params: Do not overwrite redirect target, closes #562
  • 9b7330f put_params: Preserve order
  • b099a12 put_params: Allow explicit duplicate param names
  • 2901181 Release v0.7.3
  • e857078 Revert "encode_body: Automatically change GET to POST when request body is ...
  • c136357 Release v0.7.2
  • e9d4ebc Fix AWS SigV4 compatibility with Supabase Storage S3 (#498)
  • 168a11e Release v0.7.1
  • a9c24a1 Deprecate cache: true/cache step
  • Additional commits viewable in compare view

Updates swoosh from 1.19.8 to 1.28.0

Release notes

Sourced from swoosh's releases.

v1.28.0 🚀

✨ Features

🧰 Maintenance

New Contributors

Full Changelog: swoosh/swoosh@1.27.1...v1.28.0

v1.27.1 🚀

🐛 Bug Fixes

⛓️ Dependency

New Contributors

Full Changelog: swoosh/swoosh@v1.27.0...1.27.1

v1.27.0 🚀

✨ Features

📝 Documentation

New Contributors

Full Changelog: swoosh/swoosh@v1.26.3...v1.27.0

v1.26.3 🚀

🔒 Security

  • Fix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)

... (truncated)

Changelog

Sourced from swoosh's changelog.

1.28.0

✨ Features

1.27.1

🐛 Bug Fixes

  • Fix Swoosh.Adapters.AmazonSES crashing when the SES error response XML is missing an expected node @​youdie006 (#1186)

1.27.0

✨ Features

1.26.3

🔒 Security

  • Fix URL path injection via unencoded sender address in MsGraph adapter (GHSA-754j-98wh-57rf / CVE-2026-54893)

1.26.2

🐛 Bug Fixes

  • Fix Postmark adapter not adding the recipient name to the Reply-To header @​vickz84259 (#1166)

1.26.1

🐛 Bug Fixes

1.26.0

✨ Features

📝 Documentation

  • Document the new Mailpit adapter in the README

1.25.3

📝 Documentation

... (truncated)

Commits
  • 200187e Bump release metadata and changelog
  • eab4387 Regenerate styles with Tailwind CSS
  • 485a58a Return an error tuple for any unexpected status
  • 44e6e44 Revert decode_json extraction
  • 8c04b50 Address review feedback on TurboSMTP adapter
  • 7a3d33c Reference the PR in the changelog entry
  • 120504c Add TurboSMTP adapter
  • 3985f9e build(deps): bump bandit from 1.12.0 to 1.12.4 (#1179)
  • ffa34f6 build(deps): bump cowboy from 2.17.0 to 2.18.0 (#1180)
  • 90f66ec build(deps): bump hackney from 4.5.2 to 4.7.3 (#1187)
  • Additional commits viewable in compare view

Updates tailwind from 0.4.1 to 0.5.1

Changelog

Sourced from tailwind's changelog.

v0.5.1 (2026-06-16)

  • Fix executable name on Windows

v0.5.0 (2026-06-11)

  • Allow configuring :version per profile
  • Allow env values to be lists, joined by the OS path separator
Commits

Updates telemetry_metrics from 1.1.0 to 1.2.0

Changelog

Sourced from telemetry_metrics's changelog.

1.2.0

Added

  • Add support for functions in tags (this supersedes tag_values)

Changed

  • Assorted optimizations

Changed

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the mix-production-dependencies group across 1 dire…
349be6e 
…ctory with 11 updates

Bumps the mix-production-dependencies group with 9 updates in the /src/flagd-ui directory:

| Package | From | To |
| --- | --- | --- |
| [bandit](https://github.com/mtrudel/bandit) | `1.8.0` | `1.12.5` |
| [dns_cluster](https://github.com/phoenixframework/dns_cluster) | `0.2.0` | `0.3.0` |
| [gettext](https://github.com/elixir-gettext/gettext) | `1.0.0` | `1.0.2` |
| [jason](https://github.com/michalmuskala/jason) | `1.4.4` | `1.4.5` |
| [phoenix](https://github.com/phoenixframework/phoenix) | `1.8.1` | `1.8.13` |
| [phoenix_live_dashboard](https://github.com/phoenixframework/phoenix_live_dashboard) | `0.8.7` | `0.9.0` |
| [req](https://github.com/wojtekmach/req) | `0.5.15` | `0.7.4` |
| [swoosh](https://github.com/swoosh/swoosh) | `1.19.8` | `1.28.0` |
| [tailwind](https://github.com/phoenixframework/tailwind) | `0.4.1` | `0.5.1` |



Updates `bandit` from 1.8.0 to 1.12.5
- [Changelog](https://github.com/mtrudel/bandit/blob/main/CHANGELOG.md)
- [Commits](mtrudel/bandit@1.8.0...1.12.5)

Updates `dns_cluster` from 0.2.0 to 0.3.0
- [Changelog](https://github.com/phoenixframework/dns_cluster/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/dns_cluster@v0.2.0...v0.3.0)

Updates `gettext` from 1.0.0 to 1.0.2
- [Changelog](https://github.com/elixir-gettext/gettext/blob/main/CHANGELOG.md)
- [Commits](elixir-gettext/gettext@v1.0.0...v1.0.2)

Updates `jason` from 1.4.4 to 1.4.5
- [Release notes](https://github.com/michalmuskala/jason/releases)
- [Changelog](https://github.com/michalmuskala/jason/blob/master/CHANGELOG.md)
- [Commits](michalmuskala/jason@v1.4.4...v1.4.5)

Updates `phoenix` from 1.8.1 to 1.8.13
- [Release notes](https://github.com/phoenixframework/phoenix/releases)
- [Changelog](https://github.com/phoenixframework/phoenix/blob/v1.8.13/CHANGELOG.md)
- [Commits](phoenixframework/phoenix@v1.8.1...v1.8.13)

Updates `phoenix_live_dashboard` from 0.8.7 to 0.9.0
- [Release notes](https://github.com/phoenixframework/phoenix_live_dashboard/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_dashboard/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_dashboard@v0.8.7...v0.9.0)

Updates `phoenix_live_view` from 1.1.16 to 1.2.11
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.16...v1.2.11)

Updates `req` from 0.5.15 to 0.7.4
- [Release notes](https://github.com/wojtekmach/req/releases)
- [Changelog](https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md)
- [Commits](wojtekmach/req@v0.5.15...v0.7.4)

Updates `swoosh` from 1.19.8 to 1.28.0
- [Release notes](https://github.com/swoosh/swoosh/releases)
- [Changelog](https://github.com/swoosh/swoosh/blob/main/CHANGELOG.md)
- [Commits](swoosh/swoosh@v1.19.8...v1.28.0)

Updates `tailwind` from 0.4.1 to 0.5.1
- [Changelog](https://github.com/phoenixframework/tailwind/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/tailwind@v0.4.1...v0.5.1)

Updates `telemetry_metrics` from 1.1.0 to 1.2.0
- [Changelog](https://github.com/beam-telemetry/telemetry_metrics/blob/main/CHANGELOG.md)
- [Commits](https://github.com/beam-telemetry/telemetry_metrics/commits)

---
updated-dependencies:
- dependency-name: bandit
  dependency-version: 1.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: dns_cluster
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: gettext
  dependency-version: 1.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-production-dependencies
- dependency-name: jason
  dependency-version: 1.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-production-dependencies
- dependency-name: phoenix
  dependency-version: 1.8.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-production-dependencies
- dependency-name: phoenix_live_dashboard
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: phoenix_live_view
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: req
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: swoosh
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: tailwind
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
- dependency-name: telemetry_metrics
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 31, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 21, 2026
@dependabot
dependabot Bot deleted the dependabot/hex/src/flagd-ui/mix-production-dependencies-18f4eca455 branch September 21, 2026 07:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants