chore(deps): update dependency plug to ~> 1.19.0 #9

Merged
rosa merged 1 commit from renovate/plug-1.x into main 2026-06-30 16:03:53 +00:00
Owner

This PR contains the following updates:

Package Type Update Change Pending
plug (source) prod patch ~> 1.20.0~> 1.19.0 1.20.2 (+1)

Release Notes

elixir-plug/plug (plug)

v1.19.3

Compare Source

Security
  • [Plug.Conn.Query] Force a maximum depth when decoding queries (CVE-2026-54892)
Bug fixes
  • [Plug.Conn] Validate headers on inform
  • [Plug.Static] Enforce size on range requests

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | Pending | |---|---|---|---|---| | [plug](https://hex.pm/packages/plug) ([source](https://github.com/elixir-plug/plug)) | prod | patch | `~> 1.20.0` → `~> 1.19.0` | `1.20.2` (+1) | --- ### Release Notes <details> <summary>elixir-plug/plug (plug)</summary> ### [`v1.19.3`](https://github.com/elixir-plug/plug/blob/HEAD/CHANGELOG.md#v1193-2026-06-23) [Compare Source](https://github.com/elixir-plug/plug/compare/v1.19.2...v1.19.3) ##### Security - \[Plug.Conn.Query] Force a maximum depth when decoding queries (CVE-2026-54892) ##### Bug fixes - \[Plug.Conn] Validate headers on `inform` - \[Plug.Static] Enforce size on range requests </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNDkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
chore(deps): update dependency plug to ~> 1.19.0
Some checks failed
renovate/artifacts Artifact file update failure
renovate/stability-days Updates have met minimum release age requirement
ci/woodpecker/pr/test Pipeline was successful
ci/woodpecker/push/test Pipeline was successful
8c168a9832
rosa scheduled this pull request to auto merge when all checks succeed 2026-06-30 16:03:51 +00:00
Author
Owner

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock
Command failed: install-tool elixir v1.20.2

### ⚠️ Artifact update problem Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is. ♻ Renovate will retry this branch, including artifacts, only when one of the following happens: - any of the package files in this branch needs updating, or - the branch becomes conflicted, or - you click the rebase/retry checkbox if found above, or - you rename this PR's title to start with "rebase!" to trigger it manually The artifact failure details are included below: ##### File name: mix.lock ``` Command failed: install-tool elixir v1.20.2 ```
rosa merged commit 8c168a9832 into main 2026-06-30 16:03:53 +00:00
rosa deleted branch renovate/plug-1.x 2026-06-30 16:03:53 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
rosa/hypa!9
No description provided.