Skip to content

chore(deps): Upgrade dependencies that can be upgraded simply - #3492

Open
joshlarson wants to merge 14 commits into
mainfrom
jdl/chore/deps-version-upgrades-2026-sept
Open

chore(deps): Upgrade dependencies that can be upgraded simply#3492
joshlarson wants to merge 14 commits into
mainfrom
jdl/chore/deps-version-upgrades-2026-sept

Conversation

@joshlarson

@joshlarson joshlarson commented Sep 14, 2026

Copy link
Copy Markdown
Contributor

Scope

Asana Ticket: 🛠️ (2026/09) Upgrade Dotcom Dependencies

Implementation

I used mix hex.outdated to find the versions that were out of date, and tried upgrading them to their latest versions. Most Just Worked™. There were some exceptions...

Exceptions

We already are not upgrading mail due to a bug in later versions of the library, and nebulex requires a complicated and sparsely-documented upgrade that we haven't had time to do yet.

For each of ecto, html_sanitize_ex, phoenix, phoenix_live_view, and req, a naive upgrade would have either caused compilation errors, runtime warnings, or test failures, each of which is likely simple, but not trivial, to address. I created follow-up tickets to handle each of those upgrades separately. Of those, ecto is stuck on its current version due to a shared dependency with poison, a library that we're planning on removing from our dependency tree, but haven't actually removed yet. The others are likely not blocked on anything.

How to test

mix hex.outdated | grep -v Up-to-date should show the following output:

Dependency                Only      Current      Latest       Status
ecto                                3.13.6       3.14.2       Update not possible
html_sanitize_ex                    1.4.4        1.5.5        Update not possible
mail                                0.3.1        0.5.2        Update not possible
nebulex                             2.6.5        3.0.4        Update not possible
nebulex_redis_adapter               2.4.2        3.0.0        Update not possible
phoenix                             1.8.6        1.8.14       Update not possible
phoenix_live_view                   1.1.26       1.2.11       Update not possible
req                                 0.5.17       0.7.4        Update not possible

Note

This is in draft until #3486 is merged, since it builds off of the Elixir language version upgrade in that PR.

Depends on:

@joshlarson joshlarson added the dev-blue Deploy to dev-blue label Sep 14, 2026
@joshlarson
joshlarson force-pushed the jdl/chore/deps-version-upgrades-2026-sept branch from b6e1ef9 to 74b8bb0 Compare September 14, 2026 18:00
Base automatically changed from jdl/chore/elixir-language-upgrade-2026-sept to main September 14, 2026 19:54
@joshlarson
joshlarson force-pushed the jdl/chore/deps-version-upgrades-2026-sept branch from 88c4cf7 to f968129 Compare September 14, 2026 20:07
@joshlarson
joshlarson marked this pull request as ready for review September 14, 2026 20:08
@joshlarson
joshlarson requested a review from a team as a code owner September 14, 2026 20:08
@joshlarson
joshlarson enabled auto-merge (squash) September 14, 2026 20:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dev-blue Deploy to dev-blue

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant