Skip to content

build(deps): Bump csv from 2.4.1 to 3.2.2#385

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/csv-3.2.2
Open

build(deps): Bump csv from 2.4.1 to 3.2.2#385
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/csv-3.2.2

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Oct 10, 2025

Bumps csv from 2.4.1 to 3.2.2.

Changelog

Sourced from csv's changelog.

Changelog

3.2.1 (2025-01-02)

3.2.1 (2023-11-26)

3.2.0 (2023-09-24)

  • Strict mode: Exception messages of thrown exceptions are now redacted by default to avoid data unintentionally leaking into logs. This behaviour change is not considered to be breaking backwards compatibility since source data presented in exception messages is not considered part of the CSV public API.
  • Strict mode: Exception messages can be unredacted using the unredact_exceptions option
  • Normal mode: Error messages can be redacted using the redact_errors option
  • Option to (un)redact exception messages [contributed in #122 by @​taylor-redden-papa

3.0.5 (2022-12-03)

  • Exclude dialyzer files from library package [contributed in #121 by @​milmazz

3.0.4 (2022-11-19)

3.0.3 (2022-11-04)

3.0.2 (2022-11-03)

3.0.1 (2022-10-25)

  • Ensure that stray escape quotes and unterminated escape sequences on a last line without a newline produce errors

3.0.0 (2022-10-25)

  • The parallel parser/lexer with a binary matching parser with better performance.
  • A new :field_transform option allows specifying functionality applied when decoding any field through a function
  • Escape characters can now be specified using the :escape_character option, this [Closes #59](beatrichartz/csv#59)
  • The library will now reparse lines that follow e.g. an unterminated escape sequence. This ensures that all possible valid rows will be returned in normal mode
  • Encoding checks have been removed because they can either be done using :field_transform or outside the library
  • Better docs

Upgrading from 2.x

  • Parallelism has been removed, alongside its options :num_workers and :worker_work_ratio. You can safely remove them.
  • StrayQuoteError is now StrayEscapeCharacterError. If you catch this error in your code, you need to rename it.
  • The :strip_fields option needs to be replaced with the :field_transform option:
    File.stream!("data.csv") |> CSV.decode(field_transform: &String.trim/1)

... (truncated)

Commits

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Oct 10, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 10, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

1 similar comment
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 10, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 20, 2025

Dependabot can't resolve your Elixir dependency files. Because of this, Dependabot cannot update this pull request.

1 similar comment
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Oct 29, 2025

Dependabot can't resolve your Elixir dependency files. Because of this, Dependabot cannot update this pull request.

@dependabot dependabot Bot force-pushed the dependabot/hex/csv-3.2.2 branch from 72f1348 to 7cada1c Compare October 31, 2025 10:02
@jadrian
Copy link
Copy Markdown
Contributor

jadrian commented May 1, 2026

@dependabot rebase

Bumps [csv](https://github.com/beatrichartz/csv) from 2.4.1 to 3.2.2.
- [Changelog](https://github.com/beatrichartz/csv/blob/main/CHANGELOG.md)
- [Commits](beatrichartz/csv@v2.4.1...v3.2.2)

---
updated-dependencies:
- dependency-name: csv
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/hex/csv-3.2.2 branch from 7cada1c to e947afd Compare May 1, 2026 23:42
@dependabot dependabot Bot requested a review from a team as a code owner May 1, 2026 23:42
@dependabot dependabot Bot requested review from npatel-mbta and removed request for a team May 1, 2026 23:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant