Skip to content

chore(deps): bump req from 0.7.3 to 0.7.4 in /elixir-orchestration - #256

Merged
hyperpolymath merged 3 commits into
mainfrom
dependabot/hex/elixir-orchestration/req-0.7.4
Sep 17, 2026
Merged

hyperpolymath merged 3 commits into
mainfrom
dependabot/hex/elixir-orchestration/req-0.7.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 29, 2026

Copy link
Copy Markdown
Contributor

Bumps req from 0.7.3 to 0.7.4.

Release notes

Sourced from req's releases.

v0.7.4

  • put_params: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
    
  • put_path_params: Do not overwrite redirect target.

Changelog

Sourced from req's changelog.

v0.7.4 (2026-08-26)

  • [put_params]: Allow explicit duplicates.

    in v0.7.0 we made this change:

    Overwrite existing query params instead of appending.

    This was a regression for legitimate use cases where some servers require duplicate params. Now we allow explicit duplicates but otherwise overwrite any previously set:

    Req.get!("?id=1&foo=bar", params: [id: 2, id: 3]) # ?id=2&id=3&foo=bar
    
  • [put_path_params]: Do not overwrite redirect target.

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [req](https://github.com/wojtekmach/req) from 0.7.3 to 0.7.4.
- [Release notes](https://github.com/wojtekmach/req/releases)
- [Changelog](https://github.com/wojtekmach/req/blob/v0.7.4/CHANGELOG.md)
- [Commits](wojtekmach/req@v0.7.3...v0.7.4)

---
updated-dependencies:
- dependency-name: req
  dependency-version: 0.7.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Aug 29, 2026
@codacy-production

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 duplication

Metric Results
Duplication 0

View in Codacy

AI Reviewer: first review requested successfully. AI can make mistakes. Always validate suggestions.

Run reviewer

TIP This summary will be updated as you push new changes.

@codacy-production codacy-production Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR targets a dependency update for the req library to version 0.7.4. The primary goal is to address specific regressions related to query parameter handling and redirect targets. While the PR is marked as up to standards by Codacy, there are no automated tests included to verify that these regression fixes are functioning correctly within the current environment. Furthermore, the provided diff does not explicitly confirm the version change in the manifest, though the lockfile is listed in the metadata.

About this PR

  • The PR diff does not clearly display the version change in the project manifest or lockfile. Please ensure the dependency update has been correctly applied and staged.

Test suggestions

  • Verify that 'put_params' allows and preserves explicit duplicate query parameters in outgoing requests.
  • Verify that 'put_path_params' does not overwrite the target of a redirect.
Prompt proposal for missing tests
Consider implementing these tests if applicable:
1. Verify that 'put_params' allows and preserves explicit duplicate query parameters in outgoing requests.
2. Verify that 'put_path_params' does not overwrite the target of a redirect.

TIP Improve review quality by adding custom instructions
TIP How was this review? Give us feedback

@hyperpolymath
hyperpolymath enabled auto-merge (rebase) August 30, 2026 10:12
@hyperpolymath
hyperpolymath disabled auto-merge August 30, 2026 13:44
@hyperpolymath
hyperpolymath enabled auto-merge (squash) August 30, 2026 13:44
@coderabbitai

coderabbitai Bot commented Sep 17, 2026

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: e2c68f9f-f03c-49b0-a3df-a000066af9ff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@hyperpolymath
hyperpolymath merged commit 16e4c1d into main Sep 17, 2026
32 of 41 checks passed
@hyperpolymath
hyperpolymath deleted the dependabot/hex/elixir-orchestration/req-0.7.4 branch September 17, 2026 16:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant