Skip to content

chore: Bump phoenix_live_view from 1.1.30 to 1.2.7#1054

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/phoenix_live_view-1.2.7
Open

chore: Bump phoenix_live_view from 1.1.30 to 1.2.7#1054
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/phoenix_live_view-1.2.7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 21, 2026

Copy link
Copy Markdown
Contributor

Bumps phoenix_live_view from 1.1.30 to 1.2.7.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.7

Security fixes

  • CVE-2026-58228: Fix scheme validation bypass in Phoenix.LiveView.Utils

v1.2.6

Bug fixes

  • Fix HTMLFormatter inserting extra characters in template with multi-codepoint emojis (#4321)

v1.2.5

Enhancements

  • Ensure Phoenix.LiveView.TagEngine's EEx.Engine deprecation warning includes file and line information
  • Ensure a failing custom UploadWriter does not crash the LiveView process (#4320)

v1.2.4

Bug fixes

  • Only warn about missing form ID when recovery actually applies (#4315)
  • Add common img attributes to live_img_preview/1 that were missing after cleaning the global attribute list in 1.2.0 (#4316)
  • Fix colocated CSS attributes being dropped if using colocated JS in the same component (#4319)

v1.2.3

This is a followup release to v1.2.2 that fixes the TypeScript declaration files being in the wrong subfolder. Again, it does not contain any changes to the Elixir or JavaScript code itself.

v1.2.2

This release fixes the npm package missing the TypeScript declaration files. It does not contain any changes to the Elixir or JavaScript code itself, except small documentation improvements.

v1.2.1

Bug fixes

  • Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0

Enhancements

  • Support events pushed when connected mount redirects (#4269)

Bug fixes

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.7 (2026-07-13)

Security fixes

  • CVE-2026-58228: Fix scheme validation bypass in Phoenix.LiveView.Utils

v1.2.6 (2026-07-07)

Bug fixes

  • Fix HTMLFormatter inserting extra characters in template with multi-codepoint emojis (#4321)

v1.2.5 (2026-06-30)

Enhancements

  • Ensure Phoenix.LiveView.TagEngine's EEx.Engine deprecation warning includes file and line information
  • Ensure a failing custom UploadWriter does not crash the LiveView process (#4320)

v1.2.4 (2026-06-29)

Bug fixes

  • Only warn about missing form ID when recovery actually applies (#4315)
  • Add common img attributes to live_img_preview/1 that were missing after cleaning the global attribute list in 1.2.0 (#4316)
  • Fix colocated CSS attributes being dropped if using colocated JS in the same component (#4319)

v1.2.3 (2026-06-12)

This is a followup release to v1.2.2 that fixes the TypeScript declaration files being in the wrong subfolder. Again, it does not contain any changes to the Elixir or JavaScript code itself.

v1.2.2 (2026-06-12)

This release fixes the npm package missing the TypeScript declaration files. It does not contain any changes to the Elixir or JavaScript code itself, except small documentation improvements.

v1.2.1 (2026-06-11)

Bug fixes

  • Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0 (2026-06-10) 🚀

Enhancements

  • Support events pushed when connected mount redirects (#4269)

Bug fixes

... (truncated)

Commits
  • 2570f65 update node
  • 0aa35cd Release v1.2.7
  • 8616553 revert 4b63216, add test
  • dacbd15 Update support information for LV version 1.2
  • b0946d5 Update assets
  • 716dab9 Don't set clientsideIdAttribute if ID is the same (#4327)
  • 521b4ef Release v1.2.6
  • f820721 Fix HTMLFormatter inserting extra characters in templates with multi-codepoin...
  • 2c33b9e Release v1.2.5
  • d4a019e Stop upload channel with {:shutdown, :closed} on writer error so the LiveView...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) from 1.1.30 to 1.2.7.
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.30...v1.2.7)

---
updated-dependencies:
- dependency-name: phoenix_live_view
  dependency-version: 1.2.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Jul 21, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 21, 2026 13:23
@dependabot
dependabot Bot requested review from jzimbel-mbta and removed request for a team July 21, 2026 13:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Jul 21, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Dependabot can't resolve your Elixir dependency files. Because of this, Dependabot cannot update this pull request.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants