Bump the elixir-deps group with 28 updates

[dependabot]

Bumps the elixir-deps group with 28 updates:

Package	From	To
bandit	1.7.0	1.11.0
claude	0.2.4	0.5.3
credo	1.7.12	1.7.18
dialyxir	1.4.5	1.4.7
ecto_sql	3.13.2	3.13.5
ex_aws	2.5.10	2.6.1
ex_aws_s3	2.5.7	2.5.9
finch	0.20.0	0.21.0
gettext	0.26.2	1.0.2
heroicons	v2.1.1	v2.2.0
igniter	0.6.28	0.8.0
jason	1.4.4	1.4.5
lazy_html	0.1.5	0.1.11
nebulex	2.6.5	3.0.4
phoenix	1.8.0	1.8.7
phoenix_ecto	4.6.5	4.7.0
phoenix_html	4.2.1	4.3.0
phoenix_live_reload	1.6.0	1.6.2
phoenix_live_view	1.1.3	1.1.30
postgrex	0.20.0	0.22.1
sobelow	0.14.0	0.14.1
styler	1.5.1	1.11.0
swoosh	1.19.5	1.25.1
tailwind	0.3.1	0.4.1
tidewave	0.4.1	0.5.6
tls_certificate_check	1.28.0	1.32.4
usage_rules	0.1.23	1.2.6
waffle	1.1.9	1.1.10

Updates bandit from 1.7.0 to 1.11.0

Changelog

Sourced from bandit's changelog.

1.11.0 (1 May 2026)

Fixes

• Fix WebSocket inflate vulnerability (CVE-2026-39804, commit 8156921, thanks @​PJUllrich & @​maennchen!)
• Fix WebSocket continuation frame handling vulnerability (CVE-2026-42786, commit 21612c7, thanks @​PJUllrich & @​maennchen!)
• Fix HTTP/2 frame size parsing vulnerability (CVE-2026-42788, commit 1e8e559, thanks @​PJUllrich & @​maennchen!)
• Improve handling of zero/negative length & offset parameters to send_file (#580, thanks @​PJUllrich & @​maennchen!)

Enhancements

• Define a new max_inflate_ratio WebSocket configuration option that defines a maximum allowable decompression ratio to help mitigate inflate bombing. Defaults to 25:1
• Define a new max_fragmented_message_size WebSocket configuration option which defines the maximum allowed WebSocket frame size (inclusive of continuation frames). Defaults to 8MB

Changes

• The default value of the max_frame_size WebSocket option has changed from :infinity to 8MB
• Zero length non-fin continuation frames are now disallowed (we now skip Autobahn 6.1.2 as a result)
• Multiple content-length fields in an HTTP/1 request are now disallowed (CVE-2026-39805, commit f2ca636, thanks @​PJUllrich & @​maennchen!)
• We now only use the underlying transport when determining scheme (CVE-2026-39807, commit 45feea2, thanks @​PJUllrich & @​maennchen!)

1.10.4 (25 Mar 2026)

Enhancements

• Support {:shutdown, :disconnected} as a normal WebSocket result code (#576, thanks @​wwitek-whatnot!)

1.10.3 (22 Feb 2026)

Enhancements

• Support authority form requests for CONNECT requests (#571)
• Narrow acceptance of asterisk form requests to OPTIONS requests (#571)
• Detect client disconnect on timeout in ensure_completed (#566, thanks @​pepicrft!)
• Improve http2 sendfile streaming (#565, thanks @​elibosley!)

1.10.2 (22 Jan 2026)

Enhancements

• Distinguish client disconnects from genuine body read timeouts (#564, thanks @​pepicrft!)

1.10.1 (5 Jan 2026)

Changes

• Change default preference order for compression methods to be 'zstd (if present), gzip, deflate' (#562)

... (truncated)

Commits

• e626198 Version bump to 1.11.0
• 014c157 Tweaks to Autobahn test suite
• 1e8e559 Merge commit from fork
• 45feea2 Merge commit from fork
• f2ca636 Merge commit from fork
• 21612c7 Merge commit from fork
• 8156921 Merge commit from fork
• fc3cf61 Improve handling of edge cases in send_file (#580)
• 1085ad0 Bump machete from 0.3.11 to 0.3.12 (#579)
• c70e175 Bump credo from 1.7.17 to 1.7.18 (#578)
• Additional commits viewable in compare view

Updates claude from 0.2.4 to 0.5.3

Changelog

Sourced from claude's changelog.

[0.5.3] - 2025-09-10

Removed

• Deprecated RelatedFiles hook removed to resolve compilation errors (#141)

[0.5.2] - 2025-08-27

Fixed

• Updated Tidewave MCP configuration to use HTTP streaming transport ("http") instead of SSE for compatibility with Tidewave 0.4+ (#106)
• Updated Tidewave dependency requirement from "> 0.2" to "> 0.4" to ensure compatibility with HTTP streaming transport

[0.5.1] - 2025-08-22

Added

• @​reference system with URL caching for documentation references in nested memories

Changed

• Stop and subagent_stop hooks now use blocking?: false by default to prevent infinite loops
• When compilation or formatting fails in stop hooks, they now provide informational feedback without blocking Claude
• This prevents situations where Claude gets stuck trying to fix issues repeatedly

Why This Change

Stop hooks with blocking errors (exit code 2) could cause Claude to loop infinitely when trying to fix compilation errors. The new defaults keep users informed while preventing loops. Users can still override with blocking?: true if needed, but should be aware of the loop risk.

[0.5.0] - 2025-08-19

Changed

BREAKING CHANGE: Root CLAUDE.md now uses reference links to usage rules instead of inlining content

• Previously was a little overzealous pulling in all context into CLAUDE.md which resulted in this error: ⚠ Large CLAUDE.md will impact performance (...k chars > 40.0k)
• Root CLAUDE.md now contains links to usage rules in deps/ instead of inlining full content
• Nested memory CLAUDE.md files continue to inline usage rules for focused context-specific guidance
• Existing projects will get the optimized format on next mix claude.install

[0.4.0] - 2025-08-18

Added

• New :output option for hooks to control output verbosity (defaults to :none)
• Nested memories support for distributing CLAUDE.md files across different directories (#98)
• Webhook reporter (experimental) for hook events with configurable HTTP endpoints (#97)
• Bundled slash commands for common Elixir development tasks (#101)
• GitHub Actions CI workflow for automated testing across Elixir/OTP versions (#95)
• Hook wrapper system for improved dependency management during hook execution
• Auto-installation of dependencies when auto_install_deps? is configured (false by default)

Changed

• Usage rules documentation now embedded directly in CLAUDE.md for better LLM context (#96)

Fixed

... (truncated)

Commits

• 912e7a7 Release v0.5.3
• ee1c51c Fix Tidewave 0.4+ compatibility
• 7ae6879 Release v0.5.1
• 76c01fb Fix stop hooks infinite loop by using blocking?: false (#107)
• bc81006 Prevent impacting performance by overloading the root CLAUDE.md (#104)
• 555fbc8 Update CHANGELOG.md
• 6a20789 Release v0.4.0 (#100)
• eebb0d4 Improve test coverage support for subagents (#103)
• 8c6bb8a Add bundled slash commands (#101)
• 1f57286 Fix startup issues with missing dependencies (#99)
• Additional commits viewable in compare view

Updates credo from 1.7.12 to 1.7.18

Release notes

Sourced from credo's releases.

v1.7.18

Check it out on Hex: https://hex.pm/packages/credo/1.7.18

• Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
• Fix problem with transitive deps in umbrella apps
• Credo.Check.Warning.UnusedMapOperation fix false positives

v1.7.17

Check it out on Hex: https://hex.pm/packages/credo/1.7.17

• Credo.Check.Readability.ModuleDoc add new param :ignore_modules_using (defaults to [Credo.Check, Ecto.Schema, Phoenix.LiveView, ~r/\.Web$/])
• Credo.Check.Warning.UnusedOperation update :modules param: instead of a list of functions to check, :all can be given to check all functions in a module
• New Check: Credo.Check.Refactor.CondInsteadOfIfElse
• New Check: Credo.Check.Warning.WrongTestFilename

v1.7.16

Check it out on Hex: https://hex.pm/packages/credo/1.7.16

• Fix compatibility & compiler warnings with Elixir 1.20.0-rc.1
• Credo.Check.Refactor.PassAsyncInTestCases add new param :force_comment_on_explicit_false (defaults to false)
• Credo.Check.Warning.Dbg add new param :allow_captures (defaults to false)
• New Check: Credo.Check.Warning.UnusedMapOperation
• New Check: Credo.Check.Warning.UnusedOperation

v1.7.15

Check it out on Hex: https://hex.pm/packages/credo/1.7.15

• Improve performance on large projects
• Parse token_metadata for source files
• Credo.Check.Warning.ExpensiveEmptyEnumCheck have better issue messages
• Credo.Check.Refactor.MatchInCondition add new param :allow_operators
• Credo.Check.Refactor.MatchInCondition fix false positive
• Credo.Check.Readability.AliasOrder fix false positive
• Credo.Check.Readability.FunctionNames fix false positive
• Credo.Check.Readability.SinglePipe add new param :allow_blocks (defaults to true)
• Credo.Check.Refactor.ModuleDependencies fix false positive

v1.7.14

Check it out on Hex: https://hex.pm/packages/credo/1.7.14

• Fixed regression for DuplicatedCode
• Expanded Credo.Check.Warning.ExpensiveEmptyEnumCheck to cover less obvious cases
• New Check: Credo.Check.Warning.StructFieldAmount

1.7.13

Check it out on Hex: https://hex.pm/packages/credo/1.7.13

• Fix compatibility & compiler warnings with Elixir 1.19
• Credo.Check.Refactor.ABCSize fixed false positive

Changelog

Sourced from credo's changelog.

1.7.18

• Fix compatibility & compiler warnings with Elixir 1.20.0-rc.4
• Fix problem with transitive deps in umbrella apps
• Credo.Check.Warning.UnusedMapOperation fix false positives

1.7.17

• Credo.Check.Readability.ModuleDoc add new param :ignore_modules_using (defaults to [Credo.Check, Ecto.Schema, Phoenix.LiveView, ~r/\.Web$/])
• Credo.Check.Warning.UnusedOperation update :modules param: instead of a list of functions to check, :all can be given to check all functions in a module
• New Check: Credo.Check.Refactor.CondInsteadOfIfElse
• New Check: Credo.Check.Warning.WrongTestFilename

1.7.16

• Fix compatibility & compiler warnings with Elixir 1.20.0-rc.1
• Credo.Check.Refactor.PassAsyncInTestCases add new param :force_comment_on_explicit_false (defaults to false)
• Credo.Check.Warning.Dbg add new param :allow_captures (defaults to false)
• New Check: Credo.Check.Warning.UnusedMapOperation
• New Check: Credo.Check.Warning.UnusedOperation

1.7.15

• Improve performance on large projects
• Parse token_metadata for source files
• Credo.Check.Warning.ExpensiveEmptyEnumCheck have better issue messages
• Credo.Check.Refactor.MatchInCondition add new param :allow_operators
• Credo.Check.Refactor.MatchInCondition fix false positive
• Credo.Check.Readability.AliasOrder fix false positive
• Credo.Check.Readability.FunctionNames fix false positive
• Credo.Check.Readability.SinglePipe add new param :allow_blocks (defaults to true)
• Credo.Check.Refactor.ModuleDependencies fix false positive

1.7.14

• Fix regression for DuplicatedCode
• Expand Credo.Check.Warning.ExpensiveEmptyEnumCheck to cover less obvious cases
• New Check: Credo.Check.Warning.StructFieldAmount

1.7.13

• Fix compatibility & compiler warnings with Elixir 1.19
• Credo.Check.Refactor.ABCSize fixed false positive

Commits

• 63d9bf4 Bump version to 1.7.18
• e5f7956 Update CHANGELOG
• da4f401 Fix false positives for UnusedMapOperation
• 288a1b1 Update Elixir to 1.20.0-rc.4
• 474b769 Fix errors due to new token format
• a03f6bd Fix error raised by new sigil token format
• aea4b77 Fix compiler warnings for 1.20.0-rc.2
• 1169b69 Add requirements "loadpaths" to Mix task.
• f0d654f Add experimental JSONL output to suggest command
• 068fcc7 Bump version to 1.7.17
• Additional commits viewable in compare view

Updates dialyxir from 1.4.5 to 1.4.7

Release notes

Sourced from dialyxir's releases.

1.4.7

[1.4.7] - 2025-11-05

Changed

• Bump Erlex to 0.2.8, fixes #574.

1.4.6

Fixed

• CallWithoutOpaque function clause error on OTP-28
• invalid_contract warning showed spec twice instead of success typing

Changed

• Update ex_doc to the latest version for an improved UI

Docs

• Add a note about the :unknown flag to the "Default Flags" section in the README
• Fix dead hex doc links by including CI config docs in mix.exs's :docs
• Fix a typo in the README

CI

• Update the Ubuntu version used in CI to 24.04

Changelog

Sourced from dialyxir's changelog.

Unreleased changes post [1.4.7]

[1.4.7] - 2025-11-05

Changed

• Bump Erlex to 0.2.8, fixes #574.

[1.4.6] - 2025-08-09

Fixed

• CallWithoutOpaque function clause error on OTP-28
• invalid_contract warning showed spec twice instead of success typing

Changed

• Update ex_doc to the latest version for an improved UI

Docs

• Add a note about the :unknown flag to the "Default Flags" section in the README
• Fix dead hex doc links by including CI config docs in mix.exs's :docs
• Fix a typo in the README

CI

• Update the Ubuntu version used in CI to 24.04

Commits

• b57d69f Release version 1.4.7
• 608b355 Bump Erlex (#583)
• ab9bd59 Fix issue template.
• 9e73fa8 Fixup changelog.
• a0e4cf9 Bump version to 1.4.6
• 51266a5 Merge pull request #569 from dvic/fix/call-without-opaque-otp28-issue-561
• c564806 Merge branch 'master' into fix/call-without-opaque-otp28-issue-561
• bf06a92 Merge pull request #570 from pwcsquared/ci-fix-ubuntu-ver
• d3776d2 Update ubuntu version used in CI to 24.04 (currently supported)
• 431f6c9 Merge branch 'master' into fix/call-without-opaque-otp28-issue-561
• Additional commits viewable in compare view

Updates ecto_sql from 3.13.2 to 3.13.5

Changelog

Sourced from ecto_sql's changelog.

v3.13.5 (2026-03-03)

• [postgrex] Map :restrict_violation to :foreign_key constraint (required by PostgreSQL 18)

v3.13.4 (2025-12-27)

Bug fixes

• [mysql] Do not crash mix ecto.load with large dumped databases

v3.13.3 (2025-12-08)

Enhancements

• [sql] Tag generated functions as :generated
• [sql] Add :wrap_in_transaction option to explain

Bug fixes

• [mysql] Fix structure_load/2 for MySQL 9.4+

Commits

• 14108f6 Release v3.13.5
• 95fda5a Map postgres :restrict_violation to :foreign_key constraint (#713)
• ed07cf2 Release v3.13.4
• 1883163 Use input redirection for mysql structure_load (#706)
• 2c0aacb Document passing Repo.get_dynamic_repo(), closes #701
• 912cb34 Release v3.13.3
• 5d6d82b Add generated option to quote in SQL adapter (#700)
• bddc7bc chore(docs): Update Safe Ecto Migrations link (#689)
• 074a271 Improve sandbox docs (#687)
• e223a37 Fix structure_load/2 for MySQL 9.4+ (#685)
• Additional commits viewable in compare view

Updates ex_aws from 2.5.10 to 2.6.1

Changelog

Sourced from ex_aws's changelog.

v2.6.1 (2025-12-09)

• Endpoint updates
• Document security_token configuration requirement for instance roles

v2.6.0 (2025-10-03)

• Endpoint updates
• Update to support OTP 28
• Fix geo operations for geo-places and geo-routes services
• Hide warning while running tests
• Fix bucket_as_host with virtual_host causing double bucket in URLs
• Add HTTP method to debug log for requests
• Add EKS pod identity credential provider

v2.5.11 (2025-08-12)

• Endpoint updates

Commits

• 06f3d50 Bump version and update CHANGELOG v2.6.1
• 496d810 Merge pull request #1186 from ex-aws/dependabot/hex/ex_doc-0.39.2
• f8d38a0 Merge pull request #1183 from SageDigital/k1bs/add-transfer-endpoints
• c3d7a59 Bump ex_doc from 0.38.4 to 0.39.2
• 605d2bc Merge pull request #1178 from patrickriemer/add-ap-southeast-4-5-regions
• 6788710 Merge pull request #1182 from st3llaris/patch-1
• fa15774 Merge pull request #1184 from EddyLane/add-eu-central-2-to-eks-endpoints
• f8841f7 Merge pull request #1181 from ex-aws/dependabot/hex/req-0.5.16
• 334b2a7 Merge pull request #1179 from ex-aws/dependabot/hex/dialyxir-1.4.7
• 895546e Added 'eu-central-2' to eks endpoints
• Additional commits viewable in compare view

Updates ex_aws_s3 from 2.5.7 to 2.5.9

Changelog

Sourced from ex_aws_s3's changelog.

v2.5.9 (2025-12-09)

• Implement bucket configuration operations put_bucket_logging/2, put_bucket_notification/2, put_bucket_request_payment/2, and put_bucket_website/2.
• Fix put_object typespec
• Remove deprecated Owner DisplayName field. This was removed by AWS on November 21, 2025.
• Add integration tests for MinIO
• Add streaming support for list_object_versions/3

v2.5.8 (2025-08-12)

• Rename get_bucket_object_versions to list_object_versions

Commits

• dbe09dd Update version and changelog. v2.5.9
• 654d97a Merge pull request #323 from velimir/stream-get-bucket-object-versions
• 39c2129 Merge pull request #325 from ex-aws/dependabot/hex/ex_doc-0.39.2
• c83c055 Bump ex_doc from 0.39.1 to 0.39.2
• fd1c852 Merge pull request #322 from ex-aws/dependabot/hex/dialyxir-1.4.7
• 2efb3d2 Merge pull request #321 from ex-aws/dependabot/hex/ex_doc-0.39.1
• b76739d make syntax formatter happy
• 712ec50 add tests for list_object_versions streaming functionality
• 85080c1 add streaming support for list_object_versions
• 722964c Bump dialyxir from 1.4.6 to 1.4.7
• Additional commits viewable in compare view

Updates finch from 0.20.0 to 0.21.0

Changelog

Sourced from finch's changelog.

v0.21.0 (2026-01-22)

Enhancements

• Add support for querying default pool metrics via Finch.get_pool_status/2 #329
• Add more details on Finch.request/3 docs #327

Bug Fixes

• Prevent idle HTTP/1 pools from being terminated while connections are in use #292
• Disable unsupported HTTP/2 server push responses to avoid crashes #333
• Drop :cacerts from defaults for HTTP connections to avoid breaking plain HTTP pools #333
• Only track default pool metrics when start_pool_metrics? is enabled #329

Other

• Elixir 1.19 compatibility updates for HTTP/1 pool state handling #331
• CI: update test matrix and x509/deps for Elixir 1.19 #330
• Add ALPN large-body regression test coverage (issue #265) #332

Commits

• f95c2e1 Merge pull request #339 from sneako/release-0.21.0
• 20941ba prepare v0.21.0
• 3053a16 Merge pull request #337 from oliveigah/main
• 685e4ef feat: ets based default shp tracking
• 6d1d6f1 Merge pull request #332 from neilberkman/main
• 3c60899 Merge pull request #333 from TheOneric/fix-config-defaults
• 173f88a Drop :cacerts from defaults for HTTP connections
• ad478de Always disable unsupported server push responses
• 75d06a8 Fix Credo readability warning for large number formatting
• a38a401 Add test case for issue #265 (ALPN + large body bug)
• Additional commits viewable in compare view

Updates gettext from 0.26.2 to 1.0.2

Changelog

Sourced from gettext's changelog.

v1.0.2

• Only skip manifest removal on Elixir v1.19.3+

v1.0.1 (retired)

• Remove unnecessary cleaning of Elixir manifests

v1.0.0

This is the first 1.0 release of Gettext, a silly 10 years (and 6 months) after we started working on it. There are very few changes from the latest 0.26 release, and none of them are breaking.

Here are the new goodies:

• Add support for concatenating sigils if all parts are known at compile time (such as "Hello " <> ~s(world)).
• Significantly increase the timeout for mix gettext.extract to two minutes.
• Add Gettext.put_locale!/2.

Happy 10+ years of Elixir translations everyone! 🎉

Previous versions

See the CHANGELOG for versions before v1.0.

Commits

• e3180f1 Release v1.0.2
• ec2f9c1 Erase manifest unless on upcoming Elixir (#425)
• 4960e49 Revert "Removed unnecessary cleaning of Elixir manifests (#423)"
• 8844a32 Trim CHANGELOG
• 7fe2dc7 Release v1.0.1
• 30bf87d Removed unnecessary cleaning of Elixir manifests (#423)
• d33d745 Bump actions/checkout from 4.2.2 to 5.0.0 (#422)
• 7443953 Use ubuntu-latest in the publish-to-hex.yml workflow
• d1a8c86 Release v1.0.0
• e1df334 Update Elixir/Erlang versions in CI
• Additional commits viewable in compare view

Updates heroicons from v2.1.1 to v2.2.0

Release notes

Sourced from heroicons's releases.

v2.2.0

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

v2.1.5

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

v2.1.4

Fixed

• Improve tree-shakability of React package (#1192)

v2.1.3

• Improve project READMEs (#1152)

v2.1.2

• Include license file with published packages (#1151)

Changelog

Sourced from heroicons's changelog.

[2.2.0] - 2024-11-18

Added

• Add React 19 support (#1247)

Fixed

• Removed unnecessary clipping path from solid/arrow-left-circle (#1211)

[2.1.5] - 2024-07-10

Added

• Add new icons (arrow-turn-*, bold, calendar-date-range, divide, document-currency-*, equals, h1, h2, h3, italic, link-slash, numbered-list, percent-badge, slash, strikethrough, underline)

[2.1.4] - 2024-06-17

Fixed

• Improve tree-shakability of React package (#1192)

[2.1.3] - 2024-03-22

• Improve project READMEs (#1152)

[2.1.2] - 2024-03-22

• Include license file with published packages (#1151)

Commits

• 0435d4c 2.2.0
• f327cbe Add React 19 support (#1247)
• 56c073c Update changelog
• 64e2368 Remove clip-path from 20/arrow-left-circle (#1211)
• ad0ad1f 2.1.5
• 58d511e Add new icons (#1204)
• c1b192b 2.1.4
• e2e487f Make sure calls to forwardRef are marked as pure (#1192)
• cafc7d6 use size-* instead of w-* h-* (#1182)
• 9a17872 Update README.md (#1167)
• Additional commits viewable in compare view

Updates igniter from 0.6.28 to 0.8.0

Release notes

Sourced from igniter's releases.

v0.8.0

Features:

• add Igniter.Code.Pattern for ExAST-powered pattern matching (#375) by Danila Poyarkov

Bug Fixes:

• tolerate 3-tuple dep entries in recursively_compose_schema (#372) by Matt Pruitt

v0.7.9

Bug Fixes:

• use beam index not private manifest to initialize module index by Zach Daniel

v0.7.8

Improvements:

• check compiled manifest and simple defmodule patterns early by Zach Daniel

• add and manage a module index cache by Zach Daniel

v0.7.7

Bug Fixes:

• handle children = [...] ++ expr in add_new_child (#368) by James Harton

v0.7.6

Bug Fixes:

• run tasks with Mix.shell().cmd/1 to avoid state issues by Zach Daniel

... (truncated)

Changelog

Sourced from igniter's changelog.

v0.8.0 (2026-05-09)

Features:

• add Igniter.Code.Pattern for ExAST-powered pattern matching (#375) by Danila Poyarkov

Bug Fixes:

• tolerate 3-tuple dep entries in recursively_compose_schema (#372) by Matt Pruitt

v0.7.9 (2026-04-11)

Bug Fixes:

• use beam index not private manifest to initialize module index by Zach Daniel

v0.7.8 (2026-04-11)

Improvements:

• check compiled manifest and simple defmodule patterns early by Zach Daniel

• add and manage a module index cache by Zach Daniel

v0.7.7 (2026-03-24)

Bug Fixes:

• handle children = [...] ++ expr in add_new_child (#368) by James Harton

v0.7.6 (2026-03-15)

Bug Fixes:

• run tasks with Mix.shell().cmd/1 to avoid state issues by Zach Daniel

... (truncated)

Commits

• 8c9c4be chore: release version v0.8.0
• 4bbdb82 fix: don't drop --key=value flags when value contains a dot (#377)
• 427b2da build(deps): bump the production-dependencies group with 2 updates (#376)
• 0e433e6 feat: add Igniter.Code.Pattern for ExAST-powered pattern matching (#375)
• 3ca42d6 improvement: add rename_module/4 and mix igniter.refactor.rename_modu… (#374)
• 601d010 fix: tolerate 3-tuple dep entries in recursively_compose_schema (#372)
• 5b7a312 chore: release version v0.7.9
• 37ef106 fix: use beam index not private manifest to initialize module index
• 96daddd chore: release version v0.7.8
• c8089e6 chore: format
• Additional commits viewable in compare view

Updates jason from 1.4.4 to 1.4.5

Changelog

Sourced from jason's changelog.

1.4.5 (05.05.2026)

• Add support for Decimal 3.0

Commits

• 4ede428 Bump v1.4.5
• b8c2185 Fix dialyzer job
• a363975 Modernise CI to currently supported versions
• 243c8a8 Allow decimal 3.0
• c8e8d05 Revert the experimental 1.5 branch and jason_native experiment
• 0e7a3e2 Add example/doctest for Jason.OrderedObject.new/1
• 984bc07 fix broken link
• f775592 Raise if trying to decode decimals without decimal
• 79d59df Remove unneeded workarounds for xref warnings
• baac78e Fix warnings by conditionally compiling Decimal support
• Additional commits viewable in compare view

Updates lazy_html from 0.1.5 to 0.1.11

Release notes

Sourced from lazy_html's releases.

v0.1.11

Added

• Added :separator option to LazyHTML.text/1 (#33)

v0.1.10

Fixed

• LazyHTML.query/2 and LazyHTML.query_by_id/2 returning duplicate nodes (#31)

v0.1.9

Added

• LazyHTML.parent_node/1 and LazyHTML.nth_child/1 (#25)

Fixed

• Segmentation fault when calling LazyHTML.from_tree/1 with highly nested trees (#30)

v0.1.8

Added

• Precompiled artifacts for musl

v0.1.7

Updated

• Updated Lexbor version (#21)

v0.1.6

Fixed

• Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

Changelog

Sourced from lazy_html's changelog.

v0.1.11 (2026-04-02)

Added

• Added :separator option to LazyHTML.text/1 (#33)

v0.1.10 (2026-02-09)

Fixed

• LazyHTML.query/2 and LazyHTML.query_by_id/2 returning duplicate nodes (#31)

v0.1.9 (2026-02-09)

Added

• LazyHTML.parent_node/1 and LazyHTML.nth_child/1 (#25)

Fixed

• Segmentation fault when calling LazyHTML.from_tree/1 with highly nested trees (#30)

v0.1.8 (2025-09-15)

Added

• Precompiled artifacts for musl

v0.1.7 (2025-08-29)

Updated

• Updated Lexbor version (#21)

v0.1.6 (2025-08-07)

Fixed

• Fixed regression in LazyHTML.Tree.to_html/1 memory usage (#19)

Commits

• 610a1bc Release v1.1.11
• 01fc562 Add :separator option to LazyHTML.text/1 (#33)
• 4d946f2 Update version
• 7440172 Release v0.1.10
• 6b32061 Ensure unique nodes in query and query_by_id (#31)
• 66a9947 Update version
• 4b596f4 Fix changelog links
• 585314c Release v0.1.9
• ce4ce17 Rewrite recursions into explicit stack (#30)
• ff538ee Update CI (#28)
• Additional commits viewable in compare view

Updates nebulex from 2.6.5 to 3.0.4

Release notes

Sourced from nebulex's releases.

v3.0.4

To see what's new, check the CHANGELOG

v3.0.3

To see what's new, check the CHANGELOG

v3.0.2

To see what's new, check the CHANGELOG

v3.0.1

To see what's new, check the CHANGELOG

v3.0.0

To see what's new, check the CHANGELOG

v3.0.0-rc.2

To see what's new, check the CHANGELOG

v3.0.0-rc.1

To see what's new, check the CHANGELOG

v2.6.6

To see what's new, check the CHANGELOG

Changelog

Sourced from nebulex's changelog.

v3.0.4 (2026-05-03)

Full Changelog

Documentation

• Added usage-rules/architecture.md covering Nebulex's layer boundaries, key design decisions, and non-negotiable contribution rules. Used to bootstrap agent-assisted development sessions.
• Tightened and reconciled the agent rule files: unified Rule Index and Rule Precedence in workflow.md, aligned CHANGELOG policy with CONTRIBUTING.md, clarified validation commands, and fixed a number of consistency issues surfaced by cold-session simulations.

v3.0.3 (2026-03-27)

Full Changelog

Adapter changes

• [nebulex_distributed] Added new Nebulex....

  Description has been truncated