Skip to content

chore(deps): bump phoenix_live_view from 1.2.8 to 1.2.10 - #191

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/phoenix_live_view-1.2.9
Open

chore(deps): bump phoenix_live_view from 1.2.8 to 1.2.10#191
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/hex/phoenix_live_view-1.2.9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 15, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps phoenix_live_view from 1.2.8 to 1.2.10.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.10

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)

v1.2.9

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)
  • Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

  • Add internal debug tooling to customize clientside rendering (#4364)
Changelog

Sourced from phoenix_live_view's changelog.

v1.2.10 (2026-08-20)

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)

v1.2.9 (2026-08-10)

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)
  • Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

  • Add internal debug tooling to customize clientside rendering (#4364)
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 15, 2026
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Aug 15, 2026

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@dependabot @github

dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Author

Dependabot can't evaluate your Elixir dependency files. Because of this, Dependabot cannot update this pull request.

@dependabot dependabot Bot changed the title chore(deps): bump phoenix_live_view from 1.2.8 to 1.2.9 chore(deps): bump phoenix_live_view from 1.2.8 to 1.2.10 Aug 24, 2026
@dependabot
chore(deps): bump phoenix_live_view from 1.2.8 to 1.2.10
5baee43 
Bumps [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) from 1.2.8 to 1.2.10.
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.2.8...v1.2.10)

---
updated-dependencies:
- dependency-name: phoenix_live_view
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/hex/phoenix_live_view-1.2.9 branch from 54dcf9f to 5baee43 Compare August 24, 2026 14:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants