BeaconCMS / beacon

Open-source content management system (CMS) built with Phoenix LiveView. Faster render times to boost SEO performance, even for the most content-heavy pages.
https://beaconcms.org
MIT License
1.04k stars 101 forks source link

Bump the production-dependencies group across 1 directory with 4 updates #585

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the production-dependencies group with 3 updates in the / directory: ecto_sql, ex_aws_s3 and image.

Updates ecto_sql from 3.11.3 to 3.12.0

Changelog

Sourced from ecto_sql's changelog.

v3.12.0 (2024-08-12)

Enhancements

  • [Ecto.Migration] Add Ecto.Migration.remove_if_exists/1
  • [Ecto.Migrator] Warn for migration files that end in .ex
  • [sql] Support for subqueries in order_bys and group_bys
  • [mysql] Add check constraints for MySQL
  • [postgres] Add native bitstring support to Postgres
  • [postgres] Add support for :duration type
  • [postgres] Add :plan explain option for Postgres
  • [tds] Allow passing %Tds.Parameter structs as params for named parameter usage in query

Bug fix

  • [mysql] Type cast of integers in MySQL should use signed integers
Commits


Updates ex_aws_s3 from 2.4.0 to 2.5.3

Changelog

Sourced from ex_aws_s3's changelog.

v2.5.3 (2024-01-11)

  • Add option to get auth from AuthCache on every request when uploading to S3 in a stream
  • Fix dialyzer warnings with Elixir 1.16
  • Allow hash types other than MD5 when generating body hash
  • Fix error handling for parse_upload_part_copy

v2.5.2 (2023-10-16)

  • Properly fix typespec for presigned_url/5, and include support for Elixir datetime types.

v2.5.1 (2023-10-12)

  • Fix typespec for presigned_url/5

v2.5.0 (2023-10-04)

  • Increase minimum Elixir version to 1.11
  • Add tests for Elixir 1.15
  • Merge fix for multipart copy (sort of BREAKING: this changes the signature of upload_part_copy, however that function could never have worked properly previously so I have to assume that nobody was actually using it).
  • Add support for optional start_datetime opt on presigned_url/5
  • Allow 0 day triggers for lifecycle rules
  • Return the full error on download failure rather than the generic "error downloading file" string
Commits


Updates image from 0.53.0 to 0.54.2

Release notes

Sourced from image's releases.

Image version 0.54.2

Bug Fixes

  • Return the updated t:Plug.Conn.t/0 when calling Image.write/2 with the destination being a plug. Thanks to @​lostkobrakai for the issue. Closes #159.

  • Fixes Image.Application to use Image.bumblebee_configured?/0. Thanks to @​mat-hek for the PR. Closes #160.

  • Fix the spec for Image.Video.with_video/2. Thanks to @​nikitosing for the report. Closes #162.

Image version 0.54.1

Bug Fixes

  • Adjust Image.Math.-/1 (unary minus) syntax to be compatible on more elixir versions. Should be ok back to Elixir 1.12 depending on vix version support requirement on OTP.
Changelog

Sourced from image's changelog.

Image 0.54.2

This is the changelog for Image version 0.54.2 released on September 1st, 2024. For older changelogs please consult the release tag on GitHub

Bug Fixes

  • Return the updated t:Plug.Conn.t/0 when calling Image.write/2 with the destination being a plug. Thanks to @​lostkobrakai for the issue. Closes #159.

  • Fixes Image.Application to use Image.bumblebee_configured?/0. Thanks to @​mat-hek for the PR. Closes #160.

  • Fix the spec for Image.Video.with_video/2. Thanks to @​nikitosing for the report. Closes #162.

Image 0.54.1

This is the changelog for Image version 0.54.1 released on August 20th, 2024. For older changelogs please consult the release tag on GitHub

Bug Fixes

  • Adjust Image.Math.-/1 (unary minus) syntax to be compatible on more elixir versions. Should be ok back to Elixir 1.12 depending on vix version support requirement on OTP.

Image 0.54.0

This is the changelog for Image version 0.54.0 released on August 18th, 2024. For older changelogs please consult the release tag on GitHub

Bug Fixes

  • Fix typespecs in Image.Draw, improve tests and clarify docs. In particular, document that the function passed to Image.mutate/2 must return either :ok or {:ok, term}.

  • Fix Image.get_pixel/3 to ensure only integer values are returned when the image band format is integer. This is required because the underlying Vix.Vips.Operation.getpoint/3 always returns floats.

  • Fix using Image.open/2 with binary HEIC files. HEIC magic numbers are now used to identify if a binary is an HEIC image (as is already done for other image types).

  • Return an error if opening a video stream returns a Evision.VideoCapture.t struct but the isOpened field is false.

Enhancements

  • Adds Image.vibrance/3 and Image.vibrance!/3 following the libvips discussion.

  • Add documentation to Image.Video.open/2 illustrating how to open RTSP video streams.

Commits


Updates postgrex from 0.18.0 to 0.19.1

Changelog

Sourced from postgrex's changelog.

v0.19.1 (2024-08-13)

  • Enhancements

    • Allow encoding/decoding of LSN
  • Bug fixes

    • Fix Dialyzer warnings on interval extension
    • Log error message if Postgrex.ReplicationConnection is reconnecting

v0.19.0 (2024-08-03)

  • Enhancements

    • Respect precision for interval, time, timestamp, and timestamptz
    • Remove restriction on year 9999 on datetime columns
    • Support decoding and encoding Elixir's v1.17 Duration as interval
    • Allow starting one stream after the other in replication
  • Bug fixes

    • Return {:stop, state} from gen_statem connection callback
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
leandrocp commented 2 months ago

@dependabot ignore ex_aws_s3 minor version

dependabot[bot] commented 2 months ago

OK, I won't notify you about version 2.5.x of ex_aws_s3 again, unless you unignore it.

dependabot[bot] commented 2 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.