Skip to content

chore(deps): bump phoenix_live_view from 1.1.30 to 1.2.7 - #1403

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/phoenix_live_view-1.2.5
Open

chore(deps): bump phoenix_live_view from 1.1.30 to 1.2.7#1403
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/phoenix_live_view-1.2.5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 8, 2026

Copy link
Copy Markdown
Contributor

Bumps phoenix_live_view from 1.1.30 to 1.2.7.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.7

Security fixes

  • CVE-2026-58228: Fix scheme validation bypass in Phoenix.LiveView.Utils

v1.2.6

Bug fixes

  • Fix HTMLFormatter inserting extra characters in template with multi-codepoint emojis (#4321)

v1.2.5

Enhancements

  • Ensure Phoenix.LiveView.TagEngine's EEx.Engine deprecation warning includes file and line information
  • Ensure a failing custom UploadWriter does not crash the LiveView process (#4320)

v1.2.4

Bug fixes

  • Only warn about missing form ID when recovery actually applies (#4315)
  • Add common img attributes to live_img_preview/1 that were missing after cleaning the global attribute list in 1.2.0 (#4316)
  • Fix colocated CSS attributes being dropped if using colocated JS in the same component (#4319)

v1.2.3

This is a followup release to v1.2.2 that fixes the TypeScript declaration files being in the wrong subfolder. Again, it does not contain any changes to the Elixir or JavaScript code itself.

v1.2.2

This release fixes the npm package missing the TypeScript declaration files. It does not contain any changes to the Elixir or JavaScript code itself, except small documentation improvements.

v1.2.1

Bug fixes

  • Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0

Enhancements

  • Support events pushed when connected mount redirects (#4269)

Bug fixes

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.7 (2026-07-13)

Security fixes

  • CVE-2026-58228: Fix scheme validation bypass in Phoenix.LiveView.Utils

v1.2.6 (2026-07-07)

Bug fixes

  • Fix HTMLFormatter inserting extra characters in template with multi-codepoint emojis (#4321)

v1.2.5 (2026-06-30)

Enhancements

  • Ensure Phoenix.LiveView.TagEngine's EEx.Engine deprecation warning includes file and line information
  • Ensure a failing custom UploadWriter does not crash the LiveView process (#4320)

v1.2.4 (2026-06-29)

Bug fixes

  • Only warn about missing form ID when recovery actually applies (#4315)
  • Add common img attributes to live_img_preview/1 that were missing after cleaning the global attribute list in 1.2.0 (#4316)
  • Fix colocated CSS attributes being dropped if using colocated JS in the same component (#4319)

v1.2.3 (2026-06-12)

This is a followup release to v1.2.2 that fixes the TypeScript declaration files being in the wrong subfolder. Again, it does not contain any changes to the Elixir or JavaScript code itself.

v1.2.2 (2026-06-12)

This release fixes the npm package missing the TypeScript declaration files. It does not contain any changes to the Elixir or JavaScript code itself, except small documentation improvements.

v1.2.1 (2026-06-11)

Bug fixes

  • Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0 (2026-06-10) 🚀

Enhancements

  • Support events pushed when connected mount redirects (#4269)

Bug fixes

... (truncated)

Commits
  • 2570f65 update node
  • 0aa35cd Release v1.2.7
  • 8616553 revert 4b63216, add test
  • dacbd15 Update support information for LV version 1.2
  • b0946d5 Update assets
  • 716dab9 Don't set clientsideIdAttribute if ID is the same (#4327)
  • 521b4ef Release v1.2.6
  • f820721 Fix HTMLFormatter inserting extra characters in templates with multi-codepoin...
  • 2c33b9e Release v1.2.5
  • d4a019e Stop upload channel with {:shutdown, :closed} on writer error so the LiveView...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Jul 8, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 8, 2026 16:26
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 8, 2026
@dependabot
dependabot Bot requested review from khansen-mbta and removed request for a team July 8, 2026 16:26
@dependabot dependabot Bot added the elixir Pull requests that update Elixir code label Jul 8, 2026
@dependabot dependabot Bot changed the title chore(deps): bump phoenix_live_view from 1.1.30 to 1.2.5 chore(deps): bump phoenix_live_view from 1.1.30 to 1.2.7 Jul 23, 2026
@dependabot
dependabot Bot force-pushed the dependabot/hex/phoenix_live_view-1.2.5 branch from f91d50d to 4d65126 Compare July 23, 2026 15:46
Bumps [phoenix_live_view](https://github.com/phoenixframework/phoenix_live_view) from 1.1.30 to 1.2.7.
- [Release notes](https://github.com/phoenixframework/phoenix_live_view/releases)
- [Changelog](https://github.com/phoenixframework/phoenix_live_view/blob/main/CHANGELOG.md)
- [Commits](phoenixframework/phoenix_live_view@v1.1.30...v1.2.7)

---
updated-dependencies:
- dependency-name: phoenix_live_view
  dependency-version: 1.2.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/hex/phoenix_live_view-1.2.5 branch from 4d65126 to da2c66e Compare July 29, 2026 13:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants