[dependabot]

Bumps the phoenix group with 2 updates: phoenix and phoenix_live_view.

Updates phoenix from 1.8.15 to 1.8.16

Release notes

Sourced from phoenix's releases.

v1.8.16

Bug fixes

• [phoenix.js] Fix a lot of connection handling races (#6867)
• [phoenix.js] Don't treat WebSocket close code 1000 as special (#6880)

Enhancements

• Allow setting max_channels_per_transport in Phoenix.Endpoint.socket/3

Changelog

Sourced from phoenix's changelog.

Changelog for v1.9

Bug fixes

• [Phoenix.ChannelTest] Fix test sockets violating the Phoenix.Socket.t typespec, which made Dialyzer treat every test join as never returning (#5509)
• [Phoenix.Socket] Type topic and channel_pid as possibly nil in Phoenix.Socket.t, as they are before a channel is joined

Enhancements

• The longpoll session token is now sent in a x-phoenix-longpoll-token header instead of the query string. If you do rolling deploys where both old and new nodes are active at the same time, ensure that you deploy Phoenix v1.8.10 or a later v1.8 release first.
• Channels now use the Phoenix.PubSub.Sender behaviour for fastlaning, which requires phoenix_pubsub v2.4. If you do rolling deploys where both old and new nodes are active at the same time, ensure that you deploy Phoenix v1.8.16 or a later v1.8 release first.

v1.8

The CHANGELOG for v1.8 releases can be found in the v1.8 branch.

Commits

• b502666 Release v1.8.16
• cd67060 Update assets
• 673192b Don't treat code 1000 as special (#6880)
• d74649e Fix Route.build/14 spec for hosts and helper (#6879)
• 29e4caf Remove redundant text in @​deprecated messages (#6876)
• c0787d6 Update assets
• 3909a22 Address connection races (#6867)
• f94b39c Fix broken asset management anchors in directory structure guide (#6872)
• 512c502 allow setting max_channels_per_transport on the socket in endpoint (#6871)
• 58d534e Ensure all socket options are validated
• Additional commits viewable in compare view

Updates phoenix_live_view from 1.2.12 to 1.2.13

Release notes

Sourced from phoenix_live_view's releases.

v1.2.13

Bug fixes

• Handle file reader upload error (#4449)
• Fix updates inside a hooked <svg> element (#4456)
• Fix unload for submitter formtarget (#4453)
• Wait for all ancestor looks before auto upload (#4454)
• Fix form recovery completion ordering (#4451)
• Handle chunk push timeouts in uploads (#4452)
• Respect live link target and download attributes on child clicks (#4466)
• Complete errored uploads and release form loading refs (#4468)
• Clear pending disconnected timer before scheduling another (#4464)
• Clear reload status cookie on next request (#4475)
• Only retry focus if it did not move (#4480)

Enhancements

• Handle outdated or dangling symlinks for colocated assets (#4450)
• Forward LiveView socket options to use Phoenix.Socket (#4470)
• Add diagnostic for blocked upload submits (#4472)
• Document that onDocumentPatch must call start in order (#4462)
• Only mark global attributes as changed when they change (#4478)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.13 (2026-10-20)

Bug fixes

• Handle file reader upload error (#4449)
• Fix updates inside a hooked <svg> element (#4456)
• Fix unload for submitter formtarget (#4453)
• Wait for all ancestor looks before auto upload (#4454)
• Fix form recovery completion ordering (#4451)
• Handle chunk push timeouts in uploads (#4452)
• Respect live link target and download attributes on child clicks (#4466)
• Complete errored uploads and release form loading refs (#4468)
• Clear pending disconnected timer before scheduling another (#4464)
• Clear reload status cookie on next request (#4475)
• Only retry focus if it did not move (#4480)

Enhancements

• Handle outdated or dangling symlinks for colocated assets (#4450)
• Forward LiveView socket options to use Phoenix.Socket (#4470)
• Add diagnostic for blocked upload submits (#4472)
• Document that onDocumentPatch must call start in order (#4462)
• Only mark global attributes as changed when they change (#4478)

Commits

• d8252e1 Release v1.2.13
• 71d337e Update assets
• 3105889 update deps
• 047758c fix test
• 91b6cbd Retry focus if it did not move (#4480)
• 3621eb7 Only mark global attributes as changed when they change (#4478)
• 2447c5c clear reload status on next request (#4475)
• 60b34f2 Document that onDocumentPatch must call start in order (#4462)
• e2dfcd2 Clear pending disconnected timer before scheduling another (#4464)
• 8ee880d Add diagnostic log for blocked upload submits (#4472)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!