fix(deps): update dependencies with security advisories #21

Merged

jlxq0 merged 1 commit from fix/deps-advisories-20261110 into main

2026-11-10 05:50:33 +00:00

jlxq0 commented

2026-11-10 05:35:06 +00:00

Owner

Security update of locked Hex dependencies, checked against OSV (GHSA and EEF CNA advisories).

Advisories in mix.lock (critical/high/medium/low): before C=0 H=11 M=7 L=0, after C=0 H=0 M=2 L=0.

Updated packages:

bandit 1.14.1
hpax 1.1.0
phoenix_html 4.4.0
plug_crypto 2.2.1
thousand_island 1.6.0

Still open (no fixed release, or held by another dependency):

earmark 1.4.49: MEDIUM EEF-CVE-2026-48591 (fixed: none)
earmark 1.4.49: MEDIUM GHSA-52mm-h59v-f3c7 (fixed: none)

Local check: MIX_ENV=test mix compile --warnings-as-errors and mix test.

🤖 Generated with Claude Code

https://claude.ai/code/session_01E2xQRZnoBbY9SEC5nF6J4U

Security update of locked Hex dependencies, checked against OSV (GHSA and EEF CNA advisories). Advisories in `mix.lock` (critical/high/medium/low): before C=0 H=11 M=7 L=0, after C=0 H=0 M=2 L=0. Updated packages: ``` bandit 1.14.1 hpax 1.1.0 phoenix_html 4.4.0 plug_crypto 2.2.1 thousand_island 1.6.0 ``` Still open (no fixed release, or held by another dependency): - earmark 1.4.49: MEDIUM EEF-CVE-2026-48591 (fixed: none) - earmark 1.4.49: MEDIUM GHSA-52mm-h59v-f3c7 (fixed: none) Local check: `MIX_ENV=test mix compile --warnings-as-errors` and `mix test`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01E2xQRZnoBbY9SEC5nF6J4U

jlxq0 added 1 commit

2026-11-10 05:35:06 +00:00

fix(deps): update dependencies with security advisories

CI / Quality gate (pull_request) Successful in 15s

Details

CI / Build and push image (pull_request) Has been skipped

Details

0903f8438e

OSV/GHSA/EEF advisories in mix.lock before: C=0 H=11 M=7 L=0, after: C=0 H=0 M=2 L=0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E2xQRZnoBbY9SEC5nF6J4U

jlxq0 merged commit 7dc1a53060 into main

2026-11-10 05:50:33 +00:00

jlxq0 deleted branch fix/deps-advisories-20261110

2026-11-10 05:50:33 +00:00

jlxq0 referenced this pull request from a commit

2026-11-10 05:50:34 +00:00

fix(deps): update dependencies with security advisories (#21)