chore(deps): Upgrade dependencies that can be upgraded simply - #3492
Open
joshlarson wants to merge 14 commits into
Open
chore(deps): Upgrade dependencies that can be upgraded simply#3492joshlarson wants to merge 14 commits into
joshlarson wants to merge 14 commits into
Conversation
joshlarson
force-pushed
the
jdl/chore/deps-version-upgrades-2026-sept
branch
from
September 14, 2026 18:00
b6e1ef9 to
74b8bb0
Compare
Base automatically changed from
jdl/chore/elixir-language-upgrade-2026-sept
to
main
September 14, 2026 19:54
… and `phoenix_pubsub`
joshlarson
force-pushed
the
jdl/chore/deps-version-upgrades-2026-sept
branch
from
September 14, 2026 20:07
88c4cf7 to
f968129
Compare
joshlarson
marked this pull request as ready for review
September 14, 2026 20:08
joshlarson
enabled auto-merge (squash)
September 14, 2026 20:15
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Scope
Asana Ticket: 🛠️ (2026/09) Upgrade Dotcom Dependencies
Implementation
I used
mix hex.outdatedto find the versions that were out of date, and tried upgrading them to their latest versions. Most Just Worked™. There were some exceptions...Exceptions
We already are not upgrading
maildue to a bug in later versions of the library, andnebulexrequires a complicated and sparsely-documented upgrade that we haven't had time to do yet.For each of
ecto,html_sanitize_ex,phoenix,phoenix_live_view, andreq, a naive upgrade would have either caused compilation errors, runtime warnings, or test failures, each of which is likely simple, but not trivial, to address. I created follow-up tickets to handle each of those upgrades separately. Of those,ectois stuck on its current version due to a shared dependency withpoison, a library that we're planning on removing from our dependency tree, but haven't actually removed yet. The others are likely not blocked on anything.How to test
mix hex.outdated | grep -v Up-to-dateshould show the following output:Note
This is in draft until #3486 is merged, since it builds off of the Elixir language version upgrade in that PR.Depends on: