Update ecto_sql 3.1.5 → 3.13.2 (minor)

Depfu Botrequested to merge
depfu/update/elixir/ecto_sql-3.13.2 into master

Welcome to Depfu 👋

This is one of the first three pull requests with dependency updates we've sent your way. We tried to start with a few easy patch-level updates. Hopefully your tests will pass and you can merge this pull request without too much risk. This should give you an idea how Depfu works in general.

After you merge your first pull request, we'll send you a few more. We'll never open more than seven PRs at the same time so you're not getting overwhelmed with updates.

Let us know if you have any questions. Thanks so much for giving Depfu a try!

Here is everything you need to know about this update. Please take a good look at what changed and the test results before merging this pull request.

What changed?

✳️ ecto_sql (3.1.5 → 3.13.2) · Repo · Changelog
Release Notes

Too many releases to show here. View the full release notes.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

✳️ jason (1.1.2 → 1.4.4) · Repo · Changelog
Release Notes

1.4.1 (from changelog)

  • Add limit to decoded integer sizes of 1024 digits. This can be changed with the decoding_integer_digit_limit app env config.

1.4.0

Enhancements

  • Use the :erlang.float_to_binary(_, [:short]) function, instead of io_lib_format.fwrite_g/1
    where available (OTP 24.1+). This provides equivalent output with much less memory used
    and significantly improved performance.

1.3.0

Enhancements

  • Add the Jason.OrderedObject struct
  • Support decoding objects preserving all the keys with objects: :ordered_objects option
  • Support decoding floats to Decimal with floats: :decimals option
  • Add ~j and ~J sigils in module Jason.Sigil to support writing JSON literals in code

Fixes

  • Fix error reporting when decoding strings (it was possible to mis-attribute the offending byte)
  • Verify fields given to @derive

1.2.2

1.2.2 (08.09.2020)

Enhancements

  • Support Decimal 2.

1.2.1 (from changelog)

Security

  • Fix html_safe escaping in Jason.encode

The <!-- sequence of characters would not be escaped in Jason.encode withhtml_escape mode, which could lead to DoS attacks when used for embedding of arbitrary, user controlled strings into HTML through JSON (e.g. inside of <script> tags).

If you were not using the html_safe option, you are not affected.

Affected versions: < 1.2.1 Patched versions: >= 1.2.1

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

✳️ postgrex (0.14.3 → 0.20.0) · Repo · Changelog
Release Notes

Too many releases to show here. View the full release notes.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ db_connection (indirect, 2.1.0 → 2.8.0) · Repo · Changelog
Release Notes

2.8.0 (from changelog)

  • Enhancement
    • Allow unallow_existing as an opt to ownership_allow/4
    • Improve ETS performance by enabling descentralized counters
    • Increase default queue interval to 2000s

2.7.0 (from changelog)

  • Enhancements

    • Add API for retrieving pool metrics
    • Include a built-in listener that emits telemetry events

  • Bug fixes

    • Discard EXIT messages from trapped exits

2.6.0 (from changelog)

  • Enhancements
    • Call disconnect on terminate
    • Allow handle_begin callbacks to return query for logging purposes
    • Add :connection_listeners_tag
    • Add DBConnection.available_connection_options/0
    • Add DBConnection.available_start_options/0

2.5.0 (from changelog)

  • Internal changes
    • No longer depend on connection

2.4.3 (from changelog)

  • Bug fixes
    • Fix bug where disconnect_all/2 interval would be disabled above 4294ms
    • Add :idle_limit to limit the amount of disconnections on a ping

2.4.2 (from changelog)

  • Enhancements
    • Add DBConnection.connection_module/1

2.4.1 (from changelog)

  • Enhancements
    • Add DBConnection.disconnect_all/2

2.4.0 (from changelog)

  • Enhancements
    • Add telemetry events for connection errors
    • Use :rand default algorithm
    • Allow decentralized lookups on DBConnection.Ownership

2.3.1 (from changelog)

  • Enhancements
    • Add :connection_listeners to DBConnection.start_link/2
    • Allow connection ~> 1.0

2.3.0 (from changelog)

This release requires Elixir v1.7+.

  • Bug fixes
    • Fix deprecation warnings related to the use of System.stacktrace()

2.2.2 (from changelog)

  • Bug fixes
    • Make sure all idle connections in the pool are pinged on each idle interval

Does any of this look wrong? Please let us know.

↗️ decimal (indirect, 1.8.1 → 2.3.0) · Repo · Changelog
Release Notes

2.3.0 (from changelog)

2.2.0 (from changelog)

  • Add Decimal.gte?/2 and Decimal.lte?/2
  • Add Decimal.compare/3 and Decimal.eq?/3 with threshold as parameter

2.1.1 (from changelog)

Decimal v2.1 requires Elixir v1.8+.

Bug fixes

  • Fix Decimal.compare/2 when comparing against 0

2.1.0 (from changelog)

Decimal v2.1 requires Elixir v1.8+.

Enhancements

  • Improve error message from Decimal.to_integer/1 during precision loss
  • Inspect protocol implementation returns strings in the Decimal.new(...) format
  • Add Decimal.scale/1
  • Optimize Decimal.compare/2 for numbers with large exponents

Bug fixes

  • Fix Decimal.integer?/1 spec
  • Fix Decimal.integer?/1 check on 0 with >1 significant digits

2.0.0

Decimal v2.0 requires Elixir v1.2+.

Enhancements

  • Add Decimal.integer?/1

Breaking changes

  • Change Decimal.compare/2 to return :lt | :eq | :gt
  • Change Decimal.cast/1 to return {:ok, t} | :error
  • Change Decimal.parse/1 to return {t, binary} | :error
  • Remove :message and :result fields from Decimal.Error
  • Remove sNaN
  • Rename qNaN to NaN
  • Remove deprecated support for floats in Decimal.new/1
  • Remove deprecated Decimal.minus/1
  • Remove deprecated Decimal.plus/1
  • Remove deprecated Decimal.reduce/1
  • Remove deprecated Decimal.with_context/2, Decimal.get_context/1, Decimal.set_context/1,
    and Decimal.update_context/1
  • Remove deprecated Decimal.decimal?/1

1.9.0

Enhancements

  • Add Decimal.negate/1
  • Add Decimal.apply_context/1
  • Add Decimal.normalize/1
  • Add Decimal.Context.with/2, Decimal.Context.get/1, Decimal.Context.set/2,
    and Decimal.Context.update/1
  • Add Decimal.is_decimal/1

Deprecations

  • Deprecate Decimal.minus/1 in favour of the new Decimal.negate/1
  • Deprecate Decimal.plus/1 in favour of the new Decimal.apply_context/1
  • Deprecate Decimal.reduce/1 in favour of the new Decimal.normalize/1
  • Deprecate Decimal.with_context/2, Decimal.get_context/1, Decimal.set_context/2,
    and Decimal.update_context/1 in favour of new functions on the Decimal.Context module
  • Deprecate Decimal.decimal?/1 in favour of the new Decimal.is_decimal/1

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 73 commits:

↗️ ecto (indirect, 3.1.6 → 3.13.2) · Repo · Changelog
Release Notes

Too many releases to show here. View the full release notes.

Commits

See the full diff on Github. The new version differs by more commits than we can show here.

↗️ telemetry (indirect, 0.4.1 → 0.4.3) · Repo · Changelog
Release Notes

0.4.3 (from changelog)

This release improves the telemetry:span/3 function by adding the telemetry_span_context metadata to all span events. The new metadata enables correlating span events that belong to the same span.

Added

  • Added telemetry_span_context metadata to all events emitted by telemetry:span/3.

0.4.2 (from changelog)

Added

  • Added the telemetry:span/3 function.

Does any of this look wrong? Please let us know.

Commits

See the full diff on Github. The new version differs by 12 commits:

Depfu Status

Depfu will automatically keep this PR conflict-free, as long as you don't add any commits to this branch yourself. You can also trigger a rebase manually by commenting with @depfu rebase.

All Depfu comment commands
@​depfu rebase
Rebases against your default branch and redoes this update
@​depfu recreate
Recreates this PR, overwriting any edits that you've made to it
@​depfu merge
Merges this PR once your tests are passing and conflicts are resolved
@​depfu cancel merge
Cancels automatic merging of this PR
@​depfu close
Closes this PR and deletes the branch
@​depfu reopen
Restores the branch and reopens this PR (if it's closed)
@​depfu pause
Ignores all future updates for this dependency and closes this PR
@​depfu pause [minor|major]
Ignores all future minor/major updates for this dependency and closes this PR
@​depfu resume
Future versions of this dependency will create PRs again (leaves this PR as is)

Merge request reports