build(deps): bump the production-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the production-dependencies group with 4 updates in the / directory: ash, ash_authentication, phoenix and phoenix_live_view.

Updates ash from 3.4.42 to 3.4.43

Changelog

Sourced from ash's changelog.

v3.4.43 (2024-11-20)

Bug Fixes:

• use private context of query to populate context (#1586)

• store notifications from simple results (#1591)

Commits

• c5f8efa chore: release version v3.4.43
• 8b71f71 fix: use private context of query to populate context (#1586)
• cac6397 fix: store notifications from simple results (#1591)
• 7a8d62d docs: Fix syntax highlighting for two Elixir code blocks (#1598)
• See full diff in compare view

Updates ash_authentication from 4.3.2 to 4.3.4

Changelog

Sourced from ash_authentication's changelog.

v4.3.4 (2024-12-02)

Bug Fixes:

• ensure tenant is passed through on password reset request

• invalidate magic link sign in on invalid token

• pass opts to confirm action invocations

Improvements:

• add primary read action to users resource for atomic upgrade

• auto confirm on sign in with magic link in generators

• Add opts to retrieve funs of AshAuthentication.Plug.Helpers (#847)

v4.3.3 (2024-11-14)

Bug Fixes:

• Use correct typespec for AshAuthentication.Sender.send/3 callback (#836)

Commits

• 03f050c chore: release version v4.3.4
• 9ce4f57 fix: ensure tenant is passed through on password reset request
• 3a9d303 chore: credo
• 2e90290 improvement: auto confirm on sign in with magic link in generators
• 10a4b5e fix: invalidate magic link sign in on invalid token
• a451338 improvement: Add opts to retrieve funs of AshAuthentication.Plug.Helpers (#847)
• 5616ae1 fix: pass opts to confirm action invocations
• c89d100 chore(deps): Bump the production-dependencies group across 1 directory with 3...
• ac37243 chore: release version v4.3.3
• 98f6767 fix: Use correct typespec for AshAuthentication.Sender.send/3 callback (#836)
• See full diff in compare view

Updates igniter from 0.4.7 to 0.4.8

Changelog

Sourced from igniter's changelog.

v0.4.8 (2024-11-27)

Breaking Changes:

• add expand_env? option to Igniter.Code.Common.add_code/3 (#151)

Bug Fixes:

• if alias elements are strings ensure they aren't interpreted as AST

• don't move modules back to their "proper" location

• use new ignore_missing_sub_formatters option in rewrite

Improvements:

• add :force? option to Igniter.Project.Application.add_child/3 (#156)

• handle io formatting more uniformly (#148)

• handle io formatting more uniformly

Commits

• 6d9d172 chore: release version v0.4.8
• b47670b fix: if alias elements are strings ensure they aren't interpreted as AST
• 9e638ea fix: don't move modules back to their "proper" location
• 1045aec fix: use new ignore_missing_sub_formatters option in rewrite
• 94d4a30 improvement: add :force? option to `Igniter.Project.Application.add_child/3...
• 90c7e69 build(deps-dev): bump the dev-dependencies group with 2 updates (#161)
• c46751e build(deps): bump rewrite (#160)
• ad309a9 improvement: handle io formatting more uniformly (#148)
• c55d433 feat!: add expand_env? option to Igniter.Code.Common.add_code/3 (#151)
• See full diff in compare view

Updates phoenix from 1.7.14 to 1.7.17

Changelog

Sourced from phoenix's changelog.

Changelog for v1.7

See the upgrade guide to upgrade from Phoenix 1.6.x.

Phoenix v1.7 requires Elixir v1.11+ & Erlang v22.1+.

Introduction of Verified Routes

Phoenix 1.7 includes a new Phoenix.VerifiedRoutes feature which provides ~p for route generation with compile-time verification.

Use of the sigil_p macro allows paths and URLs throughout your application to be compile-time verified against your Phoenix router(s). For example the following path and URL usages:

<.link href={~p"/sessions/new"} method="post">Log in</.link>
redirect(to: url(~p"/posts/#{post}"))

Will be verified against your standard Phoenix.Router definitions:

get "/posts/:post_id", PostController, :show
post "/sessions/new", SessionController, :create

Unmatched routes will issue compiler warnings:

warning: no route path for AppWeb.Router matches "/postz/#{post}"
  lib/app_web/controllers/post_controller.ex:100: AppWeb.PostController.show/2

Note: Elixir v1.14+ is required for comprehensive warnings. Older versions will work properly and warn on new compilations, but changes to the router file will not issue new warnings.

This feature replaces the Helpers module generated in your Phoenix router, but helpers will continue to work and be generated. You can disable router helpers by passing the helpers: false option to use Phoenix.Router.

phx.new revamp

The phx.new application generator has been improved to rely on function components for both Controller and LiveView rendering, ultimately simplifying the rendering stack of Phoenix applications and providing better reuse.

New applications come with a collection of well-documented and accessible core components, styled with Tailwind CSS by default. You can opt-out of Tailwind CSS with the --no-tailwind flag (the Tailwind CSS classes are kept in the generated components as reference for future styling).

Commits

• 051ad4e Release 1.7.17 for LiveView 1.0.0
• 4f49a6a Fix required elixir version.
• 5d23c16 Release 1.7.15
• 9b88971 Sync deps
• 9918ea6 Add --from-elixir-install
• See full diff in compare view

Updates phoenix_live_view from 0.20.17 to 1.0.0

Changelog

Sourced from phoenix_live_view's changelog.

1.0.0 (2024-12-03) 🚀

1.0.0-rc.9 (2024-12-03)

Enhancements

• Support phx-no-curly-interpolation to disable HEEx curly interpolation in a specific tag body

1.0.0-rc.8 (2024-12-02)

Backwards incompatible changes

• Require Elixir v1.14+

Bug fixes

• Fix live navigation issue where LiveView would attempt a patch on back navigation instead of navigate under certain routing conditions
• Fix live upload issue where large chunk_size could cause a chunk timeout on slower connections by properly using the configured chunk_timeout on the client
• Fix focused inputs losing focus state in some update scenarios
• Fix rare no component for cid error when rapidly updating live components under latency
• Fix browser back/forward buttons using patch instead of navigate, failing to update the page
• Fix inputs_for not using the passed id when generating inputs
• Do not throw an exception when dispatching a custom input event outside of JS.dispatch
• Fix submitter not being sent when using JS.push
• Fix form action not being inherited by to_form when passing an existing form
• Fix live_session not being enforced when patching to the same LiveView under a different route

Enhancements

• Extend HEEx {@foo} syntax for interpolating variables inside tag bodies
• Support default attribute for <.live_title> component
• Add refute_push_event to Phoenix.LiveViewTest
• Keep intentional newlines when formatting comments (#3486)
• Support hook pushEvent returning a promise
• Log a warning when a push_navigate fallbacks to a full page reload

1.0.0-rc.7 (2024-10-17)

Enhancements

• Support nested inputs in Phoenix.Component.used_input?/1
• Support custom redirect statuses on Phoenix.LiveView.redirect/2
• Export createHook from phoenix_live_view to allow CustomElement's to use hooks
• Expose programmable JS command interface to hooks for showing, hiding, addClass, etc from a hook which integrates with server DOM patching
• Support targeting inner and closest query selectors in JS commands with to: {:inner, "a"} and to: {:closest, "tr"}, etc.
• Throw a more informative error when JS.dispatch/2 is used with an input event on an invalid target
• Validate slot options (prevents typos like slot :myslot, requird: true)
• Emit :phoenix, :live_component, :update telemetry event when a LiveComponent is updated via send_update/2
• Enhance error recovery during connecting mount to trigger plug_status error pipeline

Bug fixes

• Fix phx-click-loading classes being incorrectly applied to child elements when issues from a non user click/navigation event
• Fix hooks on root LiveComponent container not being torn down and created when the DOM id changes
• Fix select focus states and selects not being updated when focused #3083, #3107
• Fix nested LiveViews inside a stream element

... (truncated)

Commits

• 637d15a Release 1.0.0 🚀
• 1df7000 Release 1.0.0-rc.9
• aae427f Allow curly interpolation to be disabled with phx-no-curly-interpolation (#3547)
• 6ecd75f Simplify handling of attributes
• 63b45bf fix tiny typo (#3540)
• e0ac219 Fix formatter
• 63c1178 Release 1.0.0-rc.8
• 34ab2ae Bump build
• 0e49760 Bump makeup_lexers
• 0a703c4 Bump changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions