Bump the misc group with 6 updates

[dependabot]

Bumps the misc group with 6 updates:

Package	From	To
mox	1.2.0	1.3.0
phoenix_live_dashboard	0.8.6	0.9.0
phoenix_live_view	1.2.1	1.2.11
phoenix_pubsub	2.2.0	2.3.0
swoosh	1.27.0	1.28.0
telemetry_metrics	1.1.0	1.2.0

Updates mox from 1.2.0 to 1.3.0

Changelog

Sourced from mox's changelog.

v1.3.0 (2026-08-25)

• Bump Elixir requirement to v1.15
• Use Process.info(pid, :parent) to discover allowances
• Improve error messages

Commits

• 0aa8871 Release v1.3.0
• 11c5e93 Better "no expectation found" error (#174)
• f8234d0 Fix undefined protocol error (#172)
• 53f7908 Require Elixir 1.15+ and update CI (#173)
• 758623e Add warning to stub/3 (#169)
• 89e22d7 Clarify Mox.allow/3 usage with deferred functions (#166)
• 20e3ac9 Use Process.info(pid, :parent) when available (#164)
• 9daacd7 Refactor one (1) private function (#163)
• 3d8199e Update CI test matrix to Elixir 1.18
• eff4af7 Support Elixir 17/Erlang OTP 27 in CI (#161)
• Additional commits viewable in compare view

Updates phoenix_live_dashboard from 0.8.6 to 0.9.0

Changelog

Sourced from phoenix_live_dashboard's changelog.

v0.9.0 (2026-08-12)

• Require Phoenix LiveView 1.0+
• Require Elixir 1.15+
• Add a compact nested list view for application supervision trees
• Allow overriding the Ecto Stats info module per repository by passing {repo, info_module} tuples in :ecto_repos
• Add refresh_interval as a reporting option for chart components
• Display process label in application and process views

v0.8.7 (2025-04-28)

• Fix warnings on Erlang/OTP 28
• Fix metrics history not rendering on LiveView 1.0.2+
• Fix colored logging in request logger

Commits

• 6ef6963 Release v0.9.0
• f110b3d Allow custom info module for Ecto repos (#491)
• 4be4a33 Bump and pin GHA workflows (#490)
• ed1ee7f Include more recent OTP versions in CI (#489)
• 64cad40 Update assets
• ae6ed89 Merge pull request #487 from nathanl/list_view
• 8f7b6ab Add a nested list view of application processes
• 4468d13 Merge pull request #485 from phoenixframework/sd-runtime-hook
• fed9e58 document runtime colocated hook usage
• fab5e4f Update assets
• Additional commits viewable in compare view

Updates phoenix_live_view from 1.2.1 to 1.2.11

Release notes

Sourced from phoenix_live_view's releases.

v1.2.11

Bug fixes

• Ensure stale diffs are discarded when view rejoins before the initial join succeeds (#4405)
• Ensure a LiveComponent's async tasks are cancelled when it is removed (#4401)
• Ensure formatter does not migrate expressions that close early (#4409)

v1.2.10

Bug fixes

• Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
• Handle writer errors like other upload entry errors (#4370)
• Cancel scheduled submit when auto upload is invalid (#3391)
• Fix max_entries not working properly with auto uploads (#2835)
• Fix testing file uploads with multiple entries (#3480)
• Remove native input required attribute when LiveView tracks uploads (#4377)
• Accept new drops afrer too_many_files with max_entries 1 (#3368)
• Fix runtime hook added node tracking (#4387)
• Preserve zero-duration JS transitions (#4385)
• Cancel submit in EntryUploader.error (#4382)
• Cancel infinite scroll throttle timers on destroy (#4384)
• Clear focus stack entries on view teardown (#4386)
• Fix join completion for empty recovery markup (#4390)
• Fix missing return after child join failure (#4391)
• Stop page loading when pushes fail (#4392)
• Ensure external metadata failures are reported consistently (#4397)

Enhancements

• Mark morphdom as dev dependency, as it is already included in the bundle
• Allow dynamically updating phx-hook attribute (#4153)
• Allow external uploads to be notified on cancel (#4395)
• Pass toEl to hook beforeUpdate (#3616)
• Improve error message when attributes have been defined after an embedded template (#4396)
• Add Phoenix.LiveView.navigation_type/2 (#4393)
• Cancel external uploads when navigating away (#4398)
• Allow to opt out of phx-remove cascade on navigation (#4394)
• Make phx-drop-target-active more reliable (#4399)

v1.2.9

Security fixes

• CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

• Fix live components being wrongly destroyed in some rare cases (#4350)

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

Commits

• eba3493 Release v1.2.11
• 9326d2d update deps
• b01930c Ensure formatter does not migrate expressions that close early (#4410)
• 49132a9 Optimize live stream option lookup (#4408)
• 0ea75c5 Cancel async tasks of components removed from the tree
• deee8e6 Streamline external upload consumption (#4406)
• fdfa1d2 fix some new warnings on 1.21
• a7dc7b6 Update assets
• 1702278 Tag pending diffs and discard outdated ones (#4405)
• d7f327c Release v1.2.10
• Additional commits viewable in compare view

Updates phoenix_pubsub from 2.2.0 to 2.3.0

Changelog

Sourced from phoenix_pubsub's changelog.

2.3.0 (2026-08-25)

Enhancements

• Add :group_by option to choose Registry sharding strategy
• Add configurable default dispatcher
• Add unsubscribe function that matches on metadata

Bug fixes

• Properly delete objects in tracker state

Commits

• 01cf8ed Release v2.3.0
• 8ebb24e fix: s/match_delete/delete_object on Tracker.State (#211)
• c1ae9f7 Add :group_by option to choose Registry sharding strategy (#210)
• 228b82e Add configurable default dispatcher (#209)
• 0b63dce Use :peer for cluster tests and bump Elixir version (#207)
• 00c9d20 Add unsubscribe function that matches on metadata (#206)
• 6ff3cd4 Fix the misattributed root cause of broken tests (#204)
• 2a2e861 CI housekeeping (#203)
• See full diff in compare view

Updates swoosh from 1.27.0 to 1.28.0

Release notes

Sourced from swoosh's releases.

v1.28.0 🚀

✨ Features

• Add TurboSMTP adapter @​NewtTheWolf (#1190)

🧰 Maintenance

• Prepare Swoosh 1.28.0 minor release @​copilot-swe-agent (#1192)
• Regenerate styles with Tailwind CSS @​github-actions (#1191)

New Contributors

• @​NewtTheWolf made their first contribution in swoosh/swoosh#1190

Full Changelog: swoosh/swoosh@1.27.1...v1.28.0

v1.27.1 🚀

🐛 Bug Fixes

• Return empty text for a missing XML node instead of crashing (#1185) @​youdie006 (#1186)

⛓️ Dependency

• build(deps): bump cowboy from 2.17.0 to 2.18.0 @​dependabot (#1180)
• build(deps): bump hackney from 4.5.2 to 4.7.3 @​dependabot (#1187)
• build(deps): bump req from 0.6.2 to 0.7.2 @​dependabot (#1183)

New Contributors

• @​youdie006 made their first contribution in swoosh/swoosh#1186

Full Changelog: swoosh/swoosh@v1.27.0...1.27.1

Changelog

Sourced from swoosh's changelog.

1.28.0

✨ Features

• Add TurboSMTP adapter @​NewtTheWolf (#1190)

1.27.1

🐛 Bug Fixes

• Fix Swoosh.Adapters.AmazonSES crashing when the SES error response XML is missing an expected node @​youdie006 (#1186)

Commits

• 200187e Bump release metadata and changelog
• eab4387 Regenerate styles with Tailwind CSS
• 485a58a Return an error tuple for any unexpected status
• 44e6e44 Revert decode_json extraction
• 8c04b50 Address review feedback on TurboSMTP adapter
• 7a3d33c Reference the PR in the changelog entry
• 120504c Add TurboSMTP adapter
• 3985f9e build(deps): bump bandit from 1.12.0 to 1.12.4 (#1179)
• ffa34f6 build(deps): bump cowboy from 2.17.0 to 2.18.0 (#1180)
• 90f66ec build(deps): bump hackney from 4.5.2 to 4.7.3 (#1187)
• Additional commits viewable in compare view

Updates telemetry_metrics from 1.1.0 to 1.2.0

Changelog

Sourced from telemetry_metrics's changelog.

1.2.0

Added

• Add support for functions in tags (this supersedes tag_values)

Changed

• Assorted optimizations

Changed

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions