Skip to content

Bump the mix-minor-and-patch group with 4 updates - #44

Merged
andreogle merged 1 commit into
mainfrom
dependabot/hex/mix-minor-and-patch-bfd28b511f
Aug 13, 2026
Merged

Bump the mix-minor-and-patch group with 4 updates#44
andreogle merged 1 commit into
mainfrom
dependabot/hex/mix-minor-and-patch-bfd28b511f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the mix-minor-and-patch group with 4 updates: oban, phoenix_live_view, postgrex and sentry.

Updates oban from 2.23.0 to 2.23.1

Changelog

Sourced from oban's changelog.

v2.23.1 - 2026-08-02

Bug Fixes

  • [Peer] Scope lease renewal to the owning node

    Leadership renewal matched the peers row by name alone, so a node that lost its lease renewed whichever row it found and concluded it was still the leader. The belief never corrected, letting a second node run Cron and insert duplicate jobs until restart.

    Renewal is now scoped to the row's owner, so a peer that lost the lease demotes at the next election. Failed elections concede leadership rather than retaining it, and no longer crash the peer.

  • [Producer] Dispatch on refresh for missed notifications

    When an insert notification is dropped a queue could sit idle until it was manually paused and resumed. Producers now attempt a dispatch on each refresh, so a stuck queue self-heals on the next cycle. The default refresh_interval is now 60s (was 30s), since it purely controls recovery time.

  • [Job] Set successful state as default unique options

    Use the complete successful group as the unique default so it includes the suspended state.

  • [Reindexer] Reindex every configured index even when one fails

    A single missing or invalid index previously halted the entire reindex run, silently skipping every index after it. Each reindex is now independent, and failures are aggregated into the run's telemetry error metadata, identifying exactly which queries failed.

  • [Migration] Fix custom migrator resolution

    Use the repo selected from opts[:repo] when resolving a configured custom migrator.

Commits
  • f86cc92 Release v2.23.1
  • 7d96854 Scope peer lease renewal to the owning node
  • f92c53e Dispatch on refresh for missed notifications
  • 581bdcb Expand unique state groups for unique: true
  • 52cd08e Fix custom migrator resolution (#1483)
  • a772915 Set successful state in default unique options (#1463)
  • 4e06067 Reindex every configured index even when one fails
  • See full diff in compare view

Updates phoenix_live_view from 1.2.8 to 1.2.9

Release notes

Sourced from phoenix_live_view's releases.

v1.2.9

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)
  • Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

  • Add internal debug tooling to customize clientside rendering (#4364)
Changelog

Sourced from phoenix_live_view's changelog.

v1.2.9 (2026-08-10)

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)
  • Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

  • Add internal debug tooling to customize clientside rendering (#4364)
Commits

Updates postgrex from 0.22.3 to 0.22.4

Changelog

Sourced from postgrex's changelog.

v0.22.4 (2026-08-07)

  • Security
    • Escape comments on Postgrex.stream/4 (CVE-2026-66838)
Commits

Updates sentry from 13.3.0 to 13.4.2

Release notes

Sourced from sentry's releases.

13.4.2

Bug Fixes 🐛

Rate Limiting

Other

  • (client-reports) Report every buffered attachment a rate limit discards by @​solnic in #1152
  • (deps) Make igniter test only + locked dependencies cleanup by @​lobo-tuerto in #1146

13.4.1

Bug Fixes 🐛

13.4.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

  • (igniter) Use latest igniter and drop jason when it's not needed by @​solnic in #1113
Changelog

Sourced from sentry's changelog.

13.4.2

Bug Fixes 🐛

Rate Limiting

Other

  • (client-reports) Report every buffered attachment a rate limit discards by @​solnic in #1152
  • (deps) Make igniter test only + locked dependencies cleanup by @​lobo-tuerto in #1146

13.4.1

Bug Fixes 🐛

13.4.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

  • (igniter) Use latest igniter and drop jason when it's not needed by @​solnic in #1113
Commits
  • b23f303 release: 13.4.2
  • 08f5cb0 fix(rate-limiting): keep the longest expiry for a rate-limited category (#1150)
  • 8290650 fix(rate-limiting): honor fractional retry delays (#1156)
  • 02ee595 fix(client-reports): report every buffered attachment a rate limit discards (...
  • ac00c8f fix(rate-limiting): drop only the rate-limited attachments from an envelope (...
  • 05b4262 refactor(test): encapsulate rate limiter setup (#1141)
  • 86147ce fix(deps): drop obsolete ex_ast pin for Elixir 1.18 (#1148)
  • 3ceb1eb fix(deps): make igniter test only + locked dependencies cleanup (#1146)
  • cec1ea3 Merge branch 'release/13.4.1'
  • 966addb release: 13.4.1
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the mix-minor-and-patch group with 4 updates: [oban](https://github.com/oban-bg/oban), [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view), [postgrex](https://github.com/elixir-ecto/postgrex) and [sentry](https://github.com/getsentry/sentry-elixir).


Updates `oban` from 2.23.0 to 2.23.1
- [Release notes](https://github.com/oban-bg/oban/releases)
- [Changelog](https://github.com/oban-bg/oban/blob/v2.23.1/CHANGELOG.md)
- [Commits](oban-bg/oban@v2.23.0...v2.23.1)

Updates `phoenix_live_view` from 1.2.8 to 1.2.9
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.2.8...v1.2.9)

Updates `postgrex` from 0.22.3 to 0.22.4
- [Release notes](https://github.com/elixir-ecto/postgrex/releases)
- [Changelog](https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/postgrex@v0.22.3...v0.22.4)

Updates `sentry` from 13.3.0 to 13.4.2
- [Release notes](https://github.com/getsentry/sentry-elixir/releases)
- [Changelog](https://github.com/getsentry/sentry-elixir/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-elixir@13.3.0...13.4.2)

---
updated-dependencies:
- dependency-name: oban
  dependency-version: 2.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: phoenix_live_view
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: postgrex
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: mix-minor-and-patch
- dependency-name: sentry
  dependency-version: 13.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: mix-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 13, 2026
@dependabot
dependabot Bot requested a review from andreogle as a code owner August 13, 2026 11:55
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 13, 2026
@andreogle
andreogle merged commit e652263 into main Aug 13, 2026
5 checks passed
@andreogle
andreogle deleted the dependabot/hex/mix-minor-and-patch-bfd28b511f branch August 13, 2026 15:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant