chore(deps): bump the production-dependencies group across 1 directory with 4 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: ash, open_api_spex and phoenix.

Updates ash from 3.5.31 to 3.5.33

Release notes

Sourced from ash's releases.

v3.5.33

Bug Fixes:

• handle nil values properly in atomic changing validations by @​zachdaniel

• Application ER Mermaid Diagram (#2231) by @​maennchen

• clear nil options in typed struct to constraints process by @​zachdaniel

• allow Ash @​global_opts authorize? to accept boolean or nil (#2225) by @​chazwatkins

• Don't require permissions to read actor on non-atomic relate_actor (#2223) by @​chazwatkins

• call underlying stream run instead of public interface by @​zachdaniel

Improvements:

• get_by_id typo fix in usage rules (#2230) by albinkc

• Add array modifier to ash.gen.resource (#2228) by Kenneth Kostrešević

• Add prepend? opt to hooks and Ash.Subject transaction hooks (#2221) by @​chazwatkins

• hooks: Add transaction hooks to Ash.Subject by @​chazwatkins

• Ash.Subject delegation and improvements by @​chazwatkins

• add log? option to can functions by @​zachdaniel

• add transaction hooks for read actions (#2219) by ChristianAlexander

v3.5.32

Bug Fixes:

• ensure that exists "at_path" is returned as a relationship path by @​zachdaniel

Improvements:

• add before/after/around transaction hooks to generic actions (#2218) by ChristianAlexander

Changelog

Sourced from ash's changelog.

v3.5.33 (2025-07-29)

Bug Fixes:

• handle nil values properly in atomic changing validations by @​zachdaniel

• Application ER Mermaid Diagram (#2231) by @​maennchen

• clear nil options in typed struct to constraints process by @​zachdaniel

• allow Ash @​global_opts authorize? to accept boolean or nil (#2225) by @​chazwatkins

• Don't require permissions to read actor on non-atomic relate_actor (#2223) by @​chazwatkins

• call underlying stream run instead of public interface by @​zachdaniel

Improvements:

• get_by_id typo fix in usage rules (#2230) by albinkc

• Add array modifier to ash.gen.resource (#2228) by Kenneth Kostrešević

• Add prepend? opt to hooks and Ash.Subject transaction hooks (#2221) by @​chazwatkins

• hooks: Add transaction hooks to Ash.Subject by @​chazwatkins

• Ash.Subject delegation and improvements by @​chazwatkins

• add log? option to can functions by @​zachdaniel

• add transaction hooks for read actions (#2219) by ChristianAlexander

v3.5.32 (2025-07-23)

Bug Fixes:

• ensure that exists "at_path" is returned as a relationship path by @​zachdaniel

Improvements:

• add before/after/around transaction hooks to generic actions (#2218) by ChristianAlexander

Commits

• 6b237ba chore: release version v3.5.33
• 9aa8442 fix: handle nil values properly in atomic changing validations
• bf31c46 fix: Application ER Mermaid Diagram (#2231)
• 72b8a92 chore: reproduce w/ a test
• 2f6382b fix: clear nil options in typed struct to constraints process
• b3da249 Improvement: get_by_id typo fix in usage rules (#2230)
• 6eefeea docs: Update docs on default pagination behavior. (#2226)
• 02147e0 improvement: Add array modifier to ash.gen.resource (#2228)
• a56d447 chore: undo stream change
• e66487c chore(enum): remove gettext example from Enum docs (#2222)
• Additional commits viewable in compare view

Updates igniter from 0.6.22 to 0.6.25

Release notes

Sourced from igniter's releases.

v0.6.25

Bug Fixes:

• remove another enumeration of the rewrite by Zach Daniel

v0.6.24

Bug Fixes:

• iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23

Bug Fixes:

• remove case where we iterate a rewrite by Zach Daniel

Changelog

Sourced from igniter's changelog.

v0.6.25 (2025-07-23)

Bug Fixes:

• remove another enumeration of the rewrite by Zach Daniel

v0.6.24 (2025-07-23)

Bug Fixes:

• iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23 (2025-07-23)

Bug Fixes:

• remove case where we iterate a rewrite by Zach Daniel

Commits

• bf9c097 chore: release version v0.6.25
• a0c4689 fix: remove another enumeration of the rewrite
• 3d747cf chore: release version v0.6.24
• 1353a33 fix: iterate over sources, not rewrite, in one more place
• 68764e4 chore: release version v0.6.23
• a6833c2 fix: remove case where we iterate a rewrite
• 347f2bd build(deps-dev): bump mimic in the dev-dependencies group (#320)
• b7aa95d Update dependabot schedule to monthly
• See full diff in compare view

Updates open_api_spex from 3.21.5 to 3.22.0

Release notes

Sourced from open_api_spex's releases.

v3.22.0

What's Changed

• Support multiple apps in Plug.SwaggerUI by @​zorbash in open-api-spex/open_api_spex#676
• Validate keys given to operation/2 macro by @​xxdavid in open-api-spex/open_api_spex#675

New Contributors

• @​xxdavid made their first contribution in open-api-spex/open_api_spex#675

Full Changelog: open-api-spex/open_api_spex@v3.21.5...v3.22.0

Changelog

Sourced from open_api_spex's changelog.

v3.22.0 - 2025-08-05

• Support multiple apps in Plug.SwaggerUI by @​zorbash in open-api-spex/open_api_spex#676
• Validate keys given to operation/2 macro by @​xxdavid in open-api-spex/open_api_spex#675

Commits

• be4f59a Release version 3.22.0
• 7de53cb Validate keys given to operation/2 macro (#675)
• 9967e2f Support multiple apps in Plug.SwaggerUI (#676)
• See full diff in compare view

Updates phoenix from 1.7.21 to 1.8.0

Changelog

Sourced from phoenix's changelog.

1.8.0 (2025-08-05)

Bug fixes

• [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

• [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
• [phx.new] Add mix precommit alias
• [phx.new] Add AGENTS.md generation compatible with usage_rules
• [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
• [phx.new] Use LiveView 1.1 release in generated code
• [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

• Fix phx.gen.presence PubSub server name for umbrella apps
• Fix phx.gen.live subscribing to pubsub in disconnected mounts

Enhancements

• [phx.new] Initialize initial git repo when git is installed
• [phx.new] Opt-in to HEEx :debug_tags_location in development
• [phx.gen.live|html|json|context] Make context name optional and inflect based on schema when missing
• [phx.gen.*] Use new Ecto 3.13 Repo.transact/2 in generators
• [phx.gen.auth] Warn when using phx.gen.auth without esbuild as features assume phoenix_html.js in bundle
• Add security.md guide for security best practices
• [phoenix.js] - Add fetch() support to LongPoll when XMLHTTPRequest is not available
• Optimize parameter scrubbing by precompiling patterns

1.8.0-rc.3 (2025-05-07)

Enhancements

• [phx.gen.auth] Allow configuring the scope's assign key in phx.gen.auth
• [phx.new] Do not override theme in root layout if explicitly set

1.8.0-rc.2 (2025-04-29)

Bug Fixes

• [phx.gen.live] Only subscribe to pubsub if connected
• [phx.gen.auth] Remove unused current_password field
• [phx.gen.auth] Use context_app for scopes to fix generated scopes in umbrella apps

1.8.0-rc.1 (2025-04-16)

Enhancements

• [phx.new] Support PORT in dev
• [phx.gen.auth] Replace utc_now/0 + truncate/1 with utc_now/1
• [phx.gen.auth] Make dev mailbox link more obvious

Bug Fixes

... (truncated)

Commits

• f9d3c8b Release 1.8.0 🚀
• e42b6dd add note to tsconfig.json
• 414c7b4 update changelog
• da83d96 Do not rely on Phoenix.LiveView.JS when using --no-live (#6373)
• 85bfd3a don't include node_modules in tsconfig path mapping (#6392)
• df1daa9 Adds validate_unique: false option to the changeset (#6384)
• 937b6f8 add refute_patched to locals_without_parens (#6374)
• 1425646 split AGENTS.md into small parts (#6385)
• 54e7b17 Add guide for live_view generator customization (#6387)
• 905ec45 final changes for LiveView 1.1 (#6388)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.