Skip to content

fix(deps): bump hackney to 4.9.1 for hex audit advisories - #7

Merged
grahac merged 1 commit into
mainfrom
fix/hex-audit-deps
Oct 29, 2026
Merged

grahac merged 1 commit into
mainfrom
fix/hex-audit-deps

Conversation

@grahac

@grahac grahac commented Oct 28, 2026

Copy link
Copy Markdown
Owner

Fixes the weekly Hex audit failure (2026-10-26). Lockfile only; library version unchanged, nothing published.

  • hackney 4.8.5 -> 4.9.1: fixes 5 advisories (1 critical)
  • transitive lock updates required by hackney: certifi 2.18.0, h2 0.12.5, quic 2.1.3

Local verification:

  • mix hex.audit: No retired or security advisory packages found
  • mix compile --warnings-as-errors: clean
  • mix test: 17 passed, 7 excluded (one run of the first 10 showed 1 failure that did not reproduce in 9 subsequent runs)

🤖 Generated with Claude Code

Also updates hackney's transitive deps (certifi, h2, quic) in mix.lock.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@grahac
grahac merged commit bafa3cb into main Oct 29, 2026
1 check passed
@grahac
grahac deleted the fix/hex-audit-deps branch October 29, 2026 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant