Skip to content

chore(deps): bump the production-dependencies group with 2 updates - #242

Merged
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/production-dependencies-7221da2164
Aug 1, 2026
Merged

chore(deps): bump the production-dependencies group with 2 updates#242
zachdaniel merged 1 commit into
mainfrom
dependabot/hex/production-dependencies-7221da2164

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 2 updates: ash and ecto.

Updates ash from 3.29.3 to 3.31.0

Release notes

Sourced from ash's releases.

v3.31.0

Features:

Bug Fixes:

Improvements:

v3.30.1

Bug Fixes:

v3.30.0

Features:

... (truncated)

Changelog

Sourced from ash's changelog.

v3.31.0 (2026-07-28)

Features:

Bug Fixes:

Improvements:

v3.30.1 (2026-07-21)

Bug Fixes:

v3.30.0 (2026-07-21)

Features:

... (truncated)

Commits
  • 6c0357d chore: release version v3.31.0
  • 27af998 fix: order durations semantically instead of by struct field layout (#2809)
  • 1d0b599 improvement: avoid quadratic cost evaluating in-list filters at runtime (#2802)
  • eb7f5ef feat: add units constraint to Ash.Type.Duration (#2811)
  • a3c3c78 fix: compare with Comp in intersects function
  • eed63f2 feat: add mfa constraint to Ash.Type.Function for portable persistence (#2807)
  • 9159464 fix: compare a Decimal to a float instead of raising (#2805)
  • 90baa9f fix: ensure related aggregates set the proper resource
  • 4d27beb improvement: add strict? constraint to Ash.Type.UUIDv7 (#2795)
  • 023c35e feat: add all/1 builtin validation as the complement to any/1 (#2800)
  • Additional commits viewable in compare view

Updates ecto from 3.14.0 to 3.14.1

Changelog

Sourced from ecto's changelog.

v3.14.1 (2026-07-09)

Enhancements

  • [Ecto.Schema] Allow embedded_schema to have non-virtual :any fields
  • [Ecto.Schema] Add :on_writable_violation option for fields (a default can be specified with @on_writable_violation)
  • [Ecto.UUID] Add helper functions for UUIDv7

Bug fixes

  • [Ecto.Query] Warn on parentheses in query field access
  • [Ecto.Query] Expand macros in window frames
  • [Ecto.Query] Fix data-modifying CTE planner cache traversal
  • [Ecto.Query] Fix splice parameters in dynamic expressions
  • [Ecto.Query] Fix subquery order in query builders
  • [Ecto.Query] Fix wrong placeholder numbering when a from source is a {fragment, schema} tuple
  • [Ecto.Repo] Do not reflect changes ignored due to :writable in returned struct
  • [Ecto.Repo] Fix placeholder type mismatch check on insert_all with placeholders
Commits
  • e0aa6e1 Release v3.14.1
  • f1bd9d1 Fix splice params in dynamic expressions (#4750)
  • 9d7b301 Fix data-modifying CTE planner cache traversal (#4748)
  • 18c050d Add UUID v7 helper functions (#4739)
  • ca66f38 Warn on parentheses in query field access (#4746)
  • ea41949 Fix subquery order in query builders (#4745)
  • 59371b9 Match on correct tuple shape in insert_all placeholder type mismatch check (#...
  • 32d07c8 Fix wrong placeholder numbering when a from source is a `{fragment, schema}...
  • c4bb74a Improve warning/error message for writable violations (#4738)
  • 2e59540 Do not reflect changes ignored due to :writable in returned struct (#4736)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 2 updates: [ash](https://github.com/ash-project/ash) and [ecto](https://github.com/elixir-ecto/ecto).


Updates `ash` from 3.29.3 to 3.31.0
- [Release notes](https://github.com/ash-project/ash/releases)
- [Changelog](https://github.com/ash-project/ash/blob/main/CHANGELOG.md)
- [Commits](ash-project/ash@v3.29.3...v3.31.0)

Updates `ecto` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/elixir-ecto/ecto/releases)
- [Changelog](https://github.com/elixir-ecto/ecto/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/ecto@v3.14.0...v3.14.1)

---
updated-dependencies:
- dependency-name: ash
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: ecto
  dependency-version: 3.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 1, 2026
@zachdaniel
zachdaniel merged commit 81e8acf into main Aug 1, 2026
24 of 25 checks passed
@dependabot
dependabot Bot deleted the dependabot/hex/production-dependencies-7221da2164 branch August 1, 2026 17:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant