Update dependency plug to v1.19.1 #4

Open
renovate wants to merge 1 commit from renovate/plug-1.x-lockfile into main
Collaborator

This PR contains the following updates:

Package Type Update Change
plug (source) prod minor 1.16.11.19.1

Release Notes

elixir-plug/plug (plug)

v1.19.1

Bug fixes
  • [Plug.SSL] Fix cypher_suite: :strong compatibility

v1.19.0

This release requires Elixir v1.14+ and it bumps the recommended :strong and :compatible SSL/TLS ciphers suite to align with modern security standards, prioritizing TLS 1.3 and 1.2. Support for the insecure TLS 1.0 and 1.1 protocols are removed in accordance with RFC 8996.

Enhancements
  • [Plug.Router] Allow colon for named segments to be escaped
  • [Plug.SSL] Prioritize TLS 1.3 and 1.2 ciphers
  • [Plug.SSL] Allow excluding redirects based on hosts, paths, or the connection
  • [Plug.Static] Add :raise_on_missing_only
  • [Plug.Upload] Partition the uploader to improve performance
  • [Plug.Upload] Add API for deleting files
Deprecations
  • [Plug.Conn.Adapter] Deprecate :owner field

v1.18.1

Compare Source

Enhancements
  • [Plug.Debugger] Do not include code snippets in rendered markdown
  • [Plug.RewriteOn] Add support to rewrite nonstandard headers

v1.18.0

Compare Source

Enhancements
  • [Plug.Conn] Define optional get_sock_data/1 and get_ssl_data/1 callbacks
  • [Plug.RequestID] Allow metadata key to be customizable
  • [Plug.Router] Allow match to dispatch to function plugs

v1.17.0

Compare Source

Enhancements
  • [Plug.Debugger] Add dark mode and other UI improvements
  • [Plug.Debugger] Link Module.function/arity to hexdocs in exception messages
  • [Plug.Debugger] Support __RELATIVEFILE__ to PLUG_EDITOR replacements
  • [Plug.SSL] Add SSL validation support for certs_keys
Deprecations
  • [Plug.Conn.Adapter] Make push an optional callback as it is no longer supported by browsers
  • [Plug.Conn] Deprecate req_cookies, cookies, and resp_cookies fields in favor of functions
  • [Plug.Conn] Deprecate owner field. Tracking responses is now part of adapters
  • [Plug.Test] Deprecate use Plug.Test in favor of imports

v1.16.2

Compare Source

Bug fixes
  • Avoid XSS injection in the debug error page

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [plug](https://hex.pm/packages/plug) ([source](https://github.com/elixir-plug/plug)) | prod | minor | `1.16.1` → `1.19.1` | --- ### Release Notes <details> <summary>elixir-plug/plug (plug)</summary> ### [`v1.19.1`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1191-2025-12-09) ##### Bug fixes - \[Plug.SSL] Fix `cypher_suite: :strong` compatibility ### [`v1.19.0`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1190-2025-12-08) This release requires Elixir v1.14+ and it bumps the recommended :strong and :compatible SSL/TLS ciphers suite to align with modern security standards, prioritizing TLS 1.3 and 1.2. Support for the insecure TLS 1.0 and 1.1 protocols are removed in accordance with RFC 8996. ##### Enhancements - \[Plug.Router] Allow colon for named segments to be escaped - \[Plug.SSL] Prioritize TLS 1.3 and 1.2 ciphers - \[Plug.SSL] Allow excluding redirects based on hosts, paths, or the connection - \[Plug.Static] Add `:raise_on_missing_only` - \[Plug.Upload] Partition the uploader to improve performance - \[Plug.Upload] Add API for deleting files ##### Deprecations - \[Plug.Conn.Adapter] Deprecate `:owner` field ### [`v1.18.1`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1181-2025-07-01) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.18.0...v1.18.1) ##### Enhancements - \[Plug.Debugger] Do not include code snippets in rendered markdown - \[Plug.RewriteOn] Add support to rewrite nonstandard headers ### [`v1.18.0`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1180-2025-05-28) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.17.0...v1.18.0) ##### Enhancements - \[Plug.Conn] Define optional `get_sock_data/1` and `get_ssl_data/1` callbacks - \[Plug.RequestID] Allow metadata key to be customizable - \[Plug.Router] Allow match to dispatch to function plugs ### [`v1.17.0`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1170-2025-03-14) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.16.2...v1.17.0) ##### Enhancements - \[Plug.Debugger] Add dark mode and other UI improvements - \[Plug.Debugger] Link `Module.function/arity` to hexdocs in exception messages - \[Plug.Debugger] Support `__RELATIVEFILE__` to `PLUG_EDITOR` replacements - \[Plug.SSL] Add SSL validation support for `certs_keys` ##### Deprecations - \[Plug.Conn.Adapter] Make `push` an optional callback as it is no longer supported by browsers - \[Plug.Conn] Deprecate `req_cookies`, `cookies`, and `resp_cookies` fields in favor of functions - \[Plug.Conn] Deprecate `owner` field. Tracking responses is now part of adapters - \[Plug.Test] Deprecate `use Plug.Test` in favor of imports ### [`v1.16.2`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1162-2025-03-14) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.16.1...v1.16.2) ##### Bug fixes - Avoid XSS injection in the debug error page </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNTAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE1MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->
Update dependency plug to v1.17.0
Some checks failed
renovate/artifacts Artifact file update failure
1cf9164ac5
Author
Collaborator

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock
Command failed: mix deps.update plug
No version is set for command mix
Consider adding one of the following versions in your config file at /tmp/renovate/repos/forgejo/inhji/plug_indie/.tool-versions
elixir 1.18.4-otp-28
elixir 1.18

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: mix.lock ``` Command failed: mix deps.update plug No version is set for command mix Consider adding one of the following versions in your config file at /tmp/renovate/repos/forgejo/inhji/plug_indie/.tool-versions elixir 1.18.4-otp-28 elixir 1.18 ```
Some checks failed
renovate/artifacts Artifact file update failure
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/plug-1.x-lockfile:renovate/plug-1.x-lockfile
git switch renovate/plug-1.x-lockfile

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/plug-1.x-lockfile
git switch renovate/plug-1.x-lockfile
git rebase main
git switch main
git merge --ff-only renovate/plug-1.x-lockfile
git switch renovate/plug-1.x-lockfile
git rebase main
git switch main
git merge --no-ff renovate/plug-1.x-lockfile
git switch main
git merge --squash renovate/plug-1.x-lockfile
git switch main
git merge --ff-only renovate/plug-1.x-lockfile
git switch main
git merge renovate/plug-1.x-lockfile
git push origin main
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
inhji/plug_indie!4
No description provided.