chore(deps): bump the production-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the production-dependencies group with 3 updates in the / directory: ash, open_api_spex and phoenix.

Updates ash from 3.5.31 to 3.5.34

Release notes

Sourced from ash's releases.

v3.5.34

Bug Fixes:

• Accept nil input for maps and TypedStructs (#2257) by @​FugiTech

• pass actor: nil to ash.get in get_and_lock_for_update (#2256) by Jesse Williams

• add default impl for rewrite/3 & get_rewrites/4 for Ash.Type. (#2251) by @​Torkan

• filter out invalid changeset, before running the bulk before transactions (#2249) by @​barnabasJ

• minor tweaks to usage rules (#2246) by albinkc

• handle updates on union types containing arrays (#2237) by Rutgerdj

Improvements:

• Support through for many to many relationship gen (#2233) by Kenneth Kostrešević

• Update usage-rules.md to include Polymorphic Relationships (#2211) by Gonzalo Muñoz

• filter expression verifier (#2243) by Kenneth Kostrešević

• Introduce extension introspection functions on Ash.*.Info (#2239) by @​maennchen

v3.5.33

Bug Fixes:

• handle nil values properly in atomic changing validations by @​zachdaniel

• Application ER Mermaid Diagram (#2231) by @​maennchen

• clear nil options in typed struct to constraints process by @​zachdaniel

• allow Ash @​global_opts authorize? to accept boolean or nil (#2225) by @​chazwatkins

• Don't require permissions to read actor on non-atomic relate_actor (#2223) by @​chazwatkins

• call underlying stream run instead of public interface by @​zachdaniel

Improvements:

... (truncated)

Changelog

Sourced from ash's changelog.

v3.5.34 (2025-08-07)

Bug Fixes:

• avoid String.to_atom by pre-computing mixed argument name MapSet (#2262) by James Harton

• Accept nil input for maps and TypedStructs (#2257) by @​FugiTech

• pass actor: nil to ash.get in get_and_lock_for_update (#2256) by Jesse Williams

• add default impl for rewrite/3 & get_rewrites/4 for Ash.Type. (#2251) by @​Torkan

• filter out invalid changeset, before running the bulk before transactions (#2249) by @​barnabasJ

• minor tweaks to usage rules (#2246) by albinkc

• handle updates on union types containing arrays (#2237) by Rutgerdj

Improvements:

• Support through for many to many relationship gen (#2233) by Kenneth Kostrešević

• Update usage-rules.md to include Polymorphic Relationships (#2211) by Gonzalo Muñoz

• filter expression verifier (#2243) by Kenneth Kostrešević

• Introduce extension introspection functions on Ash.*.Info (#2239) by Jonatan Männchen

v3.5.33 (2025-07-29)

Bug Fixes:

• handle nil values properly in atomic changing validations by @​zachdaniel

• Application ER Mermaid Diagram (#2231) by @​maennchen

• clear nil options in typed struct to constraints process by @​zachdaniel

• allow Ash @​global_opts authorize? to accept boolean or nil (#2225) by @​chazwatkins

• Don't require permissions to read actor on non-atomic relate_actor (#2223) by @​chazwatkins

• call underlying stream run instead of public interface by @​zachdaniel

... (truncated)

Commits

• c61774d chore: release version v3.5.34
• 839eb7a fix: Accept nil input for maps and TypedStructs (#2257)
• 1c8fe3e docs: Update before_action docs to use force_change_attribute/2 (#2258)
• 591ece5 fix: pass actor: nil to ash.get in get_and_lock_for_update (#2256)
• 8e7eabf fix: add default impl for rewrite/3 & get_rewrites/4 for Ash.Type. (#2251)
• a3cab9e fix: filter out invalid changeset, before running the bulk before transaction...
• e8e7240 fix: minor tweaks to usage rules (#2246)
• caa26df improvement: Support through for many to many relationship gen (#2233)
• f008f68 improvement: Update usage-rules.md to include Polymorphic Relationships (#2211)
• e35d396 improvement: filter expression verifier (#2243)
• Additional commits viewable in compare view

Updates igniter from 0.6.22 to 0.6.27

Release notes

Sourced from igniter's releases.

v0.6.25

Bug Fixes:

• remove another enumeration of the rewrite by Zach Daniel

v0.6.24

Bug Fixes:

• iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23

Bug Fixes:

• remove case where we iterate a rewrite by Zach Daniel

Changelog

Sourced from igniter's changelog.

v0.6.27 (2025-08-14)

• releasing a new version to handle locally published version with IO.inspects left in 🤦‍♂️

v0.6.26 (2025-07-29)

Bug Fixes:

• improve Phoenix web module detection in list_routers (#325) by James Harton

v0.6.25 (2025-07-23)

Bug Fixes:

• remove another enumeration of the rewrite by Zach Daniel

v0.6.24 (2025-07-23)

Bug Fixes:

• iterate over sources, not rewrite, in one more place by Zach Daniel

v0.6.23 (2025-07-23)

Bug Fixes:

• remove case where we iterate a rewrite by Zach Daniel

Commits

• 33f2191 chore: release version v0.6.27
• a803b22 chore: release version v0.6.26
• d023d3e chore: don't require a web module
• 956bd4e fix: improve Phoenix web module detection in list_routers (#325)
• bf9c097 chore: release version v0.6.25
• a0c4689 fix: remove another enumeration of the rewrite
• 3d747cf chore: release version v0.6.24
• 1353a33 fix: iterate over sources, not rewrite, in one more place
• 68764e4 chore: release version v0.6.23
• a6833c2 fix: remove case where we iterate a rewrite
• Additional commits viewable in compare view

Updates open_api_spex from 3.21.5 to 3.22.0

Release notes

Sourced from open_api_spex's releases.

v3.22.0

What's Changed

• Support multiple apps in Plug.SwaggerUI by @​zorbash in open-api-spex/open_api_spex#676
• Validate keys given to operation/2 macro by @​xxdavid in open-api-spex/open_api_spex#675

New Contributors

• @​xxdavid made their first contribution in open-api-spex/open_api_spex#675

Full Changelog: open-api-spex/open_api_spex@v3.21.5...v3.22.0

Changelog

Sourced from open_api_spex's changelog.

v3.22.0 - 2025-08-05

• Support multiple apps in Plug.SwaggerUI by @​zorbash in open-api-spex/open_api_spex#676
• Validate keys given to operation/2 macro by @​xxdavid in open-api-spex/open_api_spex#675

Commits

• be4f59a Release version 3.22.0
• 7de53cb Validate keys given to operation/2 macro (#675)
• 9967e2f Support multiple apps in Plug.SwaggerUI (#676)
• See full diff in compare view

Updates phoenix from 1.7.21 to 1.8.0

Changelog

Sourced from phoenix's changelog.

1.8.0 (2025-08-05)

Bug fixes

• [phx.new] Don't include node_modules override in generated tsconfig.json

Enhancements

• [phx.gen.live|html|json] - Make context argument optional. Defaults to the plural name.
• [phx.new] Add mix precommit alias
• [phx.new] Add AGENTS.md generation compatible with usage_rules
• [phx.new] Add usage_rules folder to installer, allowing to sync generic Phoenix rules into new projects
• [phx.new] Use LiveView 1.1 release in generated code
• [phx.new] Ensure theme selector and flash closing works without LiveView

1.8.0-rc.4 (2025-07-14)

Bug Fixes

• Fix phx.gen.presence PubSub server name for umbrella apps
• Fix phx.gen.live subscribing to pubsub in disconnected mounts

Enhancements

• [phx.new] Initialize initial git repo when git is installed
• [phx.new] Opt-in to HEEx :debug_tags_location in development
• [phx.gen.live|html|json|context] Make context name optional and inflect based on schema when missing
• [phx.gen.*] Use new Ecto 3.13 Repo.transact/2 in generators
• [phx.gen.auth] Warn when using phx.gen.auth without esbuild as features assume phoenix_html.js in bundle
• Add security.md guide for security best practices
• [phoenix.js] - Add fetch() support to LongPoll when XMLHTTPRequest is not available
• Optimize parameter scrubbing by precompiling patterns

1.8.0-rc.3 (2025-05-07)

Enhancements

• [phx.gen.auth] Allow configuring the scope's assign key in phx.gen.auth
• [phx.new] Do not override theme in root layout if explicitly set

1.8.0-rc.2 (2025-04-29)

Bug Fixes

• [phx.gen.live] Only subscribe to pubsub if connected
• [phx.gen.auth] Remove unused current_password field
• [phx.gen.auth] Use context_app for scopes to fix generated scopes in umbrella apps

1.8.0-rc.1 (2025-04-16)

Enhancements

• [phx.new] Support PORT in dev
• [phx.gen.auth] Replace utc_now/0 + truncate/1 with utc_now/1
• [phx.gen.auth] Make dev mailbox link more obvious

Bug Fixes

... (truncated)

Commits

• f9d3c8b Release 1.8.0 🚀
• e42b6dd add note to tsconfig.json
• 414c7b4 update changelog
• da83d96 Do not rely on Phoenix.LiveView.JS when using --no-live (#6373)
• 85bfd3a don't include node_modules in tsconfig path mapping (#6392)
• df1daa9 Adds validate_unique: false option to the changeset (#6384)
• 937b6f8 add refute_patched to locals_without_parens (#6374)
• 1425646 split AGENTS.md into small parts (#6385)
• 54e7b17 Add guide for live_view generator customization (#6387)
• 905ec45 final changes for LiveView 1.1 (#6388)
• Additional commits viewable in compare view

Updates spark from 2.2.67 to 2.2.68

Release notes

Sourced from spark's releases.

v2.2.68

Bug Fixes:

• add after_define option, and use pdict for inline info generation by Zach Daniel

Changelog

Sourced from spark's changelog.

v2.2.68 (2025-08-11)

Bug Fixes:

• add after_define option, and use pdict for inline info generation by Zach Daniel

Commits

• b105fa7 chore: release version v2.2.68
• d985a38 fix: add after_define option, and use pdict for inline info generation
• 67f8224 Update dependabot schedule to monthly
• d657bd6 chore(deps): bump igniter from 0.6.18 to 0.6.19 (#205)
• 387da41 chore(deps): bump igniter from 0.6.16 to 0.6.18 (#204)
• 1841e61 chore(deps): bump igniter from 0.6.14 to 0.6.16 (#203)
• 0360053 chore(deps): bump igniter from 0.6.13 to 0.6.14 (#202)
• 4430768 chore(deps): bump igniter from 0.6.11 to 0.6.13 (#201)
• cfc6119 chore(deps): bump igniter from 0.6.10 to 0.6.11 (#200)
• c0a4adc chore(deps): bump igniter from 0.6.9 to 0.6.10 (#199)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions