Skip to content

build(deps): Bump phoenix_live_view from 1.2.1 to 1.2.11 - #341

Merged
nelsonic merged 1 commit into
mainfrom
dependabot/hex/phoenix_live_view-1.2.11
Sep 3, 2026
Merged

nelsonic merged 1 commit into
mainfrom
dependabot/hex/phoenix_live_view-1.2.11

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps phoenix_live_view from 1.2.1 to 1.2.11.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.11

Bug fixes

  • Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
  • Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
  • Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10

Bug fixes

  • Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
  • Handle writer errors like other upload entry errors (#4370)
  • Cancel scheduled submit when auto upload is invalid (#3391)
  • Fix max_entries not working properly with auto uploads (#2835)
  • Fix testing file uploads with multiple entries (#3480)
  • Remove native input required attribute when LiveView tracks uploads (#4377)
  • Accept new drops afrer too_many_files with max_entries 1 (#3368)
  • Fix runtime hook added node tracking (#4387)
  • Preserve zero-duration JS transitions (#4385)
  • Cancel submit in EntryUploader.error (#4382)
  • Cancel infinite scroll throttle timers on destroy (#4384)
  • Clear focus stack entries on view teardown (#4386)
  • Fix join completion for empty recovery markup (#4390)
  • Fix missing return after child join failure (#4391)
  • Stop page loading when pushes fail (#4392)
  • Ensure external metadata failures are reported consistently (#4397)

Enhancements

  • Mark morphdom as dev dependency, as it is already included in the bundle
  • Allow dynamically updating phx-hook attribute (#4153)
  • Allow external uploads to be notified on cancel (#4395)
  • Pass toEl to hook beforeUpdate (#3616)
  • Improve error message when attributes have been defined after an embedded template (#4396)
  • Add Phoenix.LiveView.navigation_type/2 (#4393)
  • Cancel external uploads when navigating away (#4398)
  • Allow to opt out of phx-remove cascade on navigation (#4394)
  • Make phx-drop-target-active more reliable (#4399)

v1.2.9

Security fixes

  • CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

  • Fix live components being wrongly destroyed in some rare cases (#4350)

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Sep 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/hex/phoenix_live_view-1.2.11 branch from 6c7683c to 80623e4 Compare September 2, 2026 19:02
Bumps [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) from 1.2.1 to 1.2.11.
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.2.1...v1.2.11)

---
updated-dependencies:
- dependency-name: phoenix_live_view
  dependency-version: 1.2.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/hex/phoenix_live_view-1.2.11 branch from 80623e4 to ea3cb86 Compare September 3, 2026 00:17

@nelsonic nelsonic left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

馃憤

@nelsonic
nelsonic merged commit 80028a7 into main Sep 3, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/hex/phoenix_live_view-1.2.11 branch September 3, 2026 00:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant