chore(deps): bump the production-dependencies group with 2 updates

[dependabot]

Bumps the production-dependencies group with 2 updates: phoenix and phoenix_live_view.

Updates phoenix from 1.7.14 to 1.7.17

Changelog

Sourced from phoenix's changelog.

Changelog for v1.7

See the upgrade guide to upgrade from Phoenix 1.6.x.

Phoenix v1.7 requires Elixir v1.11+ & Erlang v22.1+.

Introduction of Verified Routes

Phoenix 1.7 includes a new Phoenix.VerifiedRoutes feature which provides ~p for route generation with compile-time verification.

Use of the sigil_p macro allows paths and URLs throughout your application to be compile-time verified against your Phoenix router(s). For example the following path and URL usages:

<.link href={~p"/sessions/new"} method="post">Log in</.link>
redirect(to: url(~p"/posts/#{post}"))

Will be verified against your standard Phoenix.Router definitions:

get "/posts/:post_id", PostController, :show
post "/sessions/new", SessionController, :create

Unmatched routes will issue compiler warnings:

warning: no route path for AppWeb.Router matches "/postz/#{post}"
  lib/app_web/controllers/post_controller.ex:100: AppWeb.PostController.show/2

Note: Elixir v1.14+ is required for comprehensive warnings. Older versions will work properly and warn on new compilations, but changes to the router file will not issue new warnings.

This feature replaces the Helpers module generated in your Phoenix router, but helpers will continue to work and be generated. You can disable router helpers by passing the helpers: false option to use Phoenix.Router.

phx.new revamp

The phx.new application generator has been improved to rely on function components for both Controller and LiveView rendering, ultimately simplifying the rendering stack of Phoenix applications and providing better reuse.

New applications come with a collection of well-documented and accessible core components, styled with Tailwind CSS by default. You can opt-out of Tailwind CSS with the --no-tailwind flag (the Tailwind CSS classes are kept in the generated components as reference for future styling).

Commits

• 051ad4e Release 1.7.17 for LiveView 1.0.0
• 4f49a6a Fix required elixir version.
• 5d23c16 Release 1.7.15
• 9b88971 Sync deps
• 9918ea6 Add --from-elixir-install
• See full diff in compare view

Updates phoenix_live_view from 0.20.17 to 1.0.0

Changelog

Sourced from phoenix_live_view's changelog.

1.0.0 (2024-12-03) 🚀

1.0.0-rc.9 (2024-12-03)

Enhancements

• Support phx-no-curly-interpolation to disable HEEx curly interpolation in a specific tag body

1.0.0-rc.8 (2024-12-02)

Backwards incompatible changes

• Require Elixir v1.14+

Bug fixes

• Fix live navigation issue where LiveView would attempt a patch on back navigation instead of navigate under certain routing conditions
• Fix live upload issue where large chunk_size could cause a chunk timeout on slower connections by properly using the configured chunk_timeout on the client
• Fix focused inputs losing focus state in some update scenarios
• Fix rare no component for cid error when rapidly updating live components under latency
• Fix browser back/forward buttons using patch instead of navigate, failing to update the page
• Fix inputs_for not using the passed id when generating inputs
• Do not throw an exception when dispatching a custom input event outside of JS.dispatch
• Fix submitter not being sent when using JS.push
• Fix form action not being inherited by to_form when passing an existing form
• Fix live_session not being enforced when patching to the same LiveView under a different route

Enhancements

• Extend HEEx {@foo} syntax for interpolating variables inside tag bodies
• Support default attribute for <.live_title> component
• Add refute_push_event to Phoenix.LiveViewTest
• Keep intentional newlines when formatting comments (#3486)
• Support hook pushEvent returning a promise
• Log a warning when a push_navigate fallbacks to a full page reload

1.0.0-rc.7 (2024-10-17)

Enhancements

• Support nested inputs in Phoenix.Component.used_input?/1
• Support custom redirect statuses on Phoenix.LiveView.redirect/2
• Export createHook from phoenix_live_view to allow CustomElement's to use hooks
• Expose programmable JS command interface to hooks for showing, hiding, addClass, etc from a hook which integrates with server DOM patching
• Support targeting inner and closest query selectors in JS commands with to: {:inner, "a"} and to: {:closest, "tr"}, etc.
• Throw a more informative error when JS.dispatch/2 is used with an input event on an invalid target
• Validate slot options (prevents typos like slot :myslot, requird: true)
• Emit :phoenix, :live_component, :update telemetry event when a LiveComponent is updated via send_update/2
• Enhance error recovery during connecting mount to trigger plug_status error pipeline

Bug fixes

• Fix phx-click-loading classes being incorrectly applied to child elements when issues from a non user click/navigation event
• Fix hooks on root LiveComponent container not being torn down and created when the DOM id changes
• Fix select focus states and selects not being updated when focused #3083, #3107
• Fix nested LiveViews inside a stream element

... (truncated)

Commits

• 637d15a Release 1.0.0 🚀
• 1df7000 Release 1.0.0-rc.9
• aae427f Allow curly interpolation to be disabled with phx-no-curly-interpolation (#3547)
• 6ecd75f Simplify handling of attributes
• 63b45bf fix tiny typo (#3540)
• e0ac219 Fix formatter
• 63c1178 Release 1.0.0-rc.8
• 34ab2ae Bump build
• 0e49760 Bump makeup_lexers
• 0a703c4 Bump changelog
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions