chore(deps): update dependency plug to ~> 1.20.0 #8

Merged
rosa merged 1 commit from renovate/plug-1.x into main 2026-06-30 12:04:01 +00:00
Owner

This PR contains the following updates:

Package Type Update Change Pending
plug (source) prod minor ~> 1.19.0~> 1.20.0 1.20.1

Release Notes

elixir-plug/plug (plug)

v1.20.0

Compare Source

This release requires Elixir v1.15+.

Enhancements
  • [Plug.RequestId] Make request ID generation configurable
  • [Plug.Test] Support :sign and :encrypt options in put_req_cookie/4
Bug fixes
  • [Plug.Conn] Run before_send callbacks before upgrade_adapter/3
  • [Plug.Debugger] Raise if Elixir is compiled without source information
  • [Plug.RewriteOn] Rewrite the protocol to HTTPS when x-forwarded-proto is wss
  • [Plug.Static] Return 416 for invalid range requests
  • [Plug.Static] Fix :raise_on_missing_only raising on non-matching paths with colons
Optimizations
  • [Plug.Conn.Cookies] Optimize cookie parsing
  • [Plug.Conn.Cookies] Optimize cookie encoding
  • [Plug.Conn.Utils] Optimize validate_utf8!/3
  • [Plug.Conn.Utils] Optimize splitting by semicolons
  • [Plug.Router] Optimize host matching

v1.19.3

Compare Source

Security
  • [Plug.Conn.Query] Force a maximum depth when decoding queries (CVE-2026-54892)
Bug fixes
  • [Plug.Conn] Validate headers on inform
  • [Plug.Static] Enforce size on range requests

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [plug](https://hex.pm/packages/plug) ([source](https://github.com/elixir-plug/plug)) | prod | minor | `~> 1.19.0` → `~> 1.20.0` | `1.20.1` | --- ### Release Notes <details> <summary>elixir-plug/plug (plug)</summary> ### [`v1.20.0`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1200-2026-06-23) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.19.3...v1.20.0) This release requires Elixir v1.15+. ##### Enhancements - \[Plug.RequestId] Make request ID generation configurable - \[Plug.Test] Support `:sign` and `:encrypt` options in `put_req_cookie/4` ##### Bug fixes - \[Plug.Conn] Run `before_send` callbacks before `upgrade_adapter/3` - \[Plug.Debugger] Raise if Elixir is compiled without source information - \[Plug.RewriteOn] Rewrite the protocol to HTTPS when `x-forwarded-proto` is `wss` - \[Plug.Static] Return 416 for invalid range requests - \[Plug.Static] Fix `:raise_on_missing_only` raising on non-matching paths with colons ##### Optimizations - \[Plug.Conn.Cookies] Optimize cookie parsing - \[Plug.Conn.Cookies] Optimize cookie encoding - \[Plug.Conn.Utils] Optimize `validate_utf8!/3` - \[Plug.Conn.Utils] Optimize splitting by semicolons - \[Plug.Router] Optimize host matching ### [`v1.19.3`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1193-2026-06-23) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.19.2...v1.19.3) ##### Security - \[Plug.Conn.Query] Force a maximum depth when decoding queries (CVE-2026-54892) ##### Bug fixes - \[Plug.Conn] Validate headers on `inform` - \[Plug.Static] Enforce size on range requests </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDkuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0OS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
chore(deps): update dependency plug to ~> 1.20.0
Some checks failed
renovate/artifacts Artifact file update failure
renovate/stability-days Updates have met minimum release age requirement
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/push/test Pipeline was successful
bd47bdd336
rosa scheduled this pull request to auto merge when all checks succeed 2026-06-30 12:03:59 +00:00
Author
Owner

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock
Command failed: install-tool elixir v1.20.2

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: mix.lock ``` Command failed: install-tool elixir v1.20.2 ```
rosa merged commit bd47bdd336 into main 2026-06-30 12:04:01 +00:00
rosa deleted branch renovate/plug-1.x 2026-06-30 12:04:01 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rosa/hypa!8
No description provided.