[zorn]

Summary

This updates every dependency that can move, with no major bumps and no code changes. It takes the CA bundle fixes for the eMudhra CA compromise in castore 1.0.22 and tls_certificate_check 1.36.0. Production's OS trust store is tracked separately in #317.

Closes #318

Direct Dependencies

phoenix 1.8.15 → 1.8.16
diff · changelog

• [phoenix.js] Fix a lot of connection handling races (Address connection races phoenixframework/phoenix#6867)
• [phoenix.js] Don't treat WebSocket close code 1000 as special (Don't treat code 1000 as special phoenixframework/phoenix#6880)
• Allow setting max_channels_per_transport in Phoenix.Endpoint.socket/3

phoenix_live_view 1.2.12 → 1.2.13
diff · changelog

• Several upload fixes: handle file reader errors (Handle file reader upload errors phoenixframework/phoenix_live_view#4449), chunk push timeouts (Handle chunk push timeouts in uploads phoenixframework/phoenix_live_view#4452), and complete errored uploads and release form loading refs (Complete errored uploads and release form loading refs phoenixframework/phoenix_live_view#4468)
• Fix form recovery completion ordering (Fix form recovery completion ordering phoenixframework/phoenix_live_view#4451)
• Fix updates inside a hooked <svg> element (Updates inside a hooked <svg> are reverted when the hook's event is acknowledged phoenixframework/phoenix_live_view#4456)
• Clear reload status cookie on next request (clear reload status on next request phoenixframework/phoenix_live_view#4475)
• Forward LiveView socket options to use Phoenix.Socket (forward options to use Phoenix.Socket phoenixframework/phoenix_live_view#4470)
• Only mark global attributes as changed when they change (Only mark global attributes as changed when they change phoenixframework/phoenix_live_view#4478)

esbuild 0.10.0 → 0.10.1
diff · changelog

• Don't try to compute the target if a :path is configured

Transitive Dependencies

castore 1.0.21 → 1.0.22 — diff · compare — no changelog found. The release pulls certdata.txt from NSS master to pick up the emSign root removals sooner (elixir-mint/castore#90).

tls_certificate_check 1.35.0 → 1.36.0 — diff · changelog — Updates the bundled CAs as of 2026-10-20 and removes emSign ECC Root CA - C3, emSign ECC Root CA - G3, and emSign Root CA - C1.

mdex_native 0.2.11 → 0.2.12 — diff · changelog — Bumps MSRV and Rustler (leandrocp/mdex_native#101) and updates Comrak to 0.56.0 (leandrocp/mdex_native#94).

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.