chore(deps): bump the dev group with 4 updates by dependabot[bot] · Pull Request #942 · elixir-tesla/tesla

dependabot · 2026-09-20T01:23:54Z

Bumps the dev group with 4 updates: cowlib, dialyxir, ex_doc and ranch.

Updates cowlib from 2.19.0 to 2.20.0

Commits

c768a80 Cowlib 2.20.0
834c198 Accept 20-digit integers in header parsing
2a64d3a HPACK: never-index fields outside an allowlist
7c795d4 Fix table_find_name_dyn/3 dynamic table matching
4284baf Remove a wrong todo
68f66e6 Require Erlang/OTP-27+
89da27e Link: escape and validate values when building
63abbff Fix parsing/building decimals in cow_http_struct_hd
3ec5c50 Parse digits better
See full diff in compare view

Updates dialyxir from 1.4.7 to 1.4.8

Release notes

1.4.8

Added

Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

Handle line-and-column locations when matching line-specific warning ignores.

Changed

Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Changelog

Sourced from dialyxir's changelog.

Unreleased changes post [1.4.8]

[1.4.8] - 2026-09-05

Added

Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

Handle line-and-column locations when matching line-specific warning ignores.

Changed

Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Commits

13bcb7d Release 1.4.8
4a2b6d7 Merge pull request #584 from lud-wj/fix/ignoring-by-line
a2a4361 Merge branch 'master' into fix/ignoring-by-line
31a4cd8 Merge pull request #601 from BobbieBarker/docs/exdoc-0.40
6ba7b38 Update ExDoc to 0.40.3
3553678 Add OTP 28 warning support: exact_compare, opaque_compare, opaque_union (#591)
19dd690 Merge pull request #597 from dl-alexandre/codex/clarify-ignore-file-format
f12db01 clarify ignore file formatter docs
cdcea96 fix: Fixed dialyzer ignore by line for warnings with line/col
9fbbaf5 update changelog
See full diff in compare view

Updates ex_doc from 0.40.3 to 0.40.4

Changelog

Sourced from ex_doc's changelog.

v0.40.4 (2026-09-03)

Enhancements

Add :api_reference_noindex option to keep search engines from indexing api-reference.html

Generate reproducible HTML and EPUB output

Link HexDocs packages through their per-package subdomains

Bug fixes

Preserve in-page anchors during Swup navigation and fully reload navigation between ExDoc builds

Format Elixir specs consistently regardless of their source line numbers

Autolink the Erlang/OTP 29 built-in record/0 type

Fix focus outline positioning for top-content heading action icons

Commits

80270f3 Release v0.40.4
934cf54 Reference to missing section (#2264)
b5679af Add license information for remixicon font (#2263)
850f709 Bump brace-expansion from 1.1.12 to 1.1.18 in /assets (#2261)
873e03e Bump postcss from 8.5.15 to 8.5.26 in /assets (#2259)
27660d3 Bump js-yaml from 4.2.0 to 4.3.1 in /assets (#2260)
ffec214 Bump postcss from 8.5.6 to 8.5.15 in /assets (#2241)
23cbd23 epub: Honor SOURCE_DATE_EPOCH for dcterms:modified and dc:identifier (#2256)
a37128a Use a fixed makeup group_prefix for reproducible HTML output (#2255)
01f4763 Update earmark_parser dependency version -> 1.4.46 (#2254)
Additional commits viewable in compare view

Updates ranch from 2.2.1 to 2.3.0

Commits

9e6257c Ranch 2.3.0
38c9e7d Set proc_lib labels on listener processes
4008042 Drop Windows ssl internal_active_n test workaround
7673420 Simplify socket backend test detection
0781ab6 Drop OTP-22 SNI workaround in handshake_protocol
d9612a8 Drop TLS 1.2 pin in ssl_sni_fail test
c10ebd8 Expect only OTP-26+ ssl option errors in tests
27ea514 Enable remaining tcp_socket tests
c6e0e17 Require Erlang/OTP 27+
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dev group with 4 updates: [cowlib](https://github.com/ninenines/cowlib), [dialyxir](https://github.com/jeremyjh/dialyxir), [ex_doc](https://github.com/elixir-lang/ex_doc) and [ranch](https://github.com/ninenines/ranch). Updates `cowlib` from 2.19.0 to 2.20.0 - [Commits](ninenines/cowlib@2.19.0...2.20.0) Updates `dialyxir` from 1.4.7 to 1.4.8 - [Release notes](https://github.com/jeremyjh/dialyxir/releases) - [Changelog](https://github.com/jeremyjh/dialyxir/blob/master/CHANGELOG.md) - [Commits](jeremyjh/dialyxir@1.4.7...1.4.8) Updates `ex_doc` from 0.40.3 to 0.40.4 - [Release notes](https://github.com/elixir-lang/ex_doc/releases) - [Changelog](https://github.com/elixir-lang/ex_doc/blob/main/CHANGELOG.md) - [Commits](elixir-lang/ex_doc@v0.40.3...v0.40.4) Updates `ranch` from 2.2.1 to 2.3.0 - [Commits](ninenines/ranch@2.2.1...2.3.0) --- updated-dependencies: - dependency-name: cowlib dependency-version: 2.20.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev - dependency-name: dialyxir dependency-version: 1.4.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev - dependency-name: ex_doc dependency-version: 0.40.4 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dev - dependency-name: ranch dependency-version: 2.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dev ... Signed-off-by: dependabot[bot] <support@github.com>

cursor · 2026-09-20T01:24:00Z

PR Summary

Medium Risk
cowlib 2.20 and ranch 2.3 require OTP 27+, which can break CI or local :test runs on older Erlang even though runtime releases are unchanged.

Overview
Updates mix.lock only for a grouped Dependabot bump—no application or mix.exs changes.

Dev/test tooling: dialyxir 1.4.7 → 1.4.8 (pulls erlex 0.2.9), and ex_doc 0.40.3 → 0.40.4 for docs generation in dev.

Test HTTP stack overrides: cowlib 2.19.0 → 2.20.0 and ranch 2.2.1 → 2.3.0, pinned for httparrot/Cowboy in :test (and :cowlib in dev)—these are transitive bumps from existing version ranges, not new direct deps.

^{Reviewed by Cursor Bugbot for commit 83bdfef. Bugbot is set up for automated code reviews on this repo. Configure here.}

dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Sep 20, 2026

dependabot Bot requested a review from a team as a code owner September 20, 2026 01:23

dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Sep 20, 2026

github-actions Bot added the chore label Sep 20, 2026

github-actions Bot enabled auto-merge (squash) September 20, 2026 01:24

yordis approved these changes Sep 20, 2026

View reviewed changes

yordis disabled auto-merge September 20, 2026 02:29

yordis merged commit 9f10322 into master Sep 20, 2026
12 checks passed

yordis deleted the dependabot/hex/dev-47ab46e4b5 branch September 20, 2026 02:30

Navigation Menu

Repository navigation

chore(deps): bump the dev group with 4 updates - #942

chore(deps): bump the dev group with 4 updates#942
yordis merged 1 commit into
masterfrom
dependabot/hex/dev-47ab46e4b5

dependabot Bot commented on behalf of github Sep 20, 2026

Uh oh!

cursor Bot commented Sep 20, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 20, 2026

1.4.8

Added

Fixed

Changed

Docs

Unreleased changes post [1.4.8]

[1.4.8] - 2026-09-05

Added

Fixed

Changed

Docs

v0.40.4 (2026-09-03)

Uh oh!

cursor Bot commented Sep 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

cursor Bot commented Sep 20, 2026 •

edited

Loading