[dependabot]

Bumps the elixir-minor group with 1 update: phoenix.

Updates phoenix from 1.8.15 to 1.8.16

Release notes

Sourced from phoenix's releases.

v1.8.16

Bug fixes

• [phoenix.js] Fix a lot of connection handling races (#6867)
• [phoenix.js] Don't treat WebSocket close code 1000 as special (#6880)

Enhancements

• Allow setting max_channels_per_transport in Phoenix.Endpoint.socket/3

Changelog

Sourced from phoenix's changelog.

Changelog for v1.9

Bug fixes

• [Phoenix.ChannelTest] Fix test sockets violating the Phoenix.Socket.t typespec, which made Dialyzer treat every test join as never returning (#5509)
• [Phoenix.Socket] Type topic and channel_pid as possibly nil in Phoenix.Socket.t, as they are before a channel is joined

Enhancements

• The longpoll session token is now sent in a x-phoenix-longpoll-token header instead of the query string. If you do rolling deploys where both old and new nodes are active at the same time, ensure that you deploy Phoenix v1.8.10 or a later v1.8 release first.
• Channels now use the Phoenix.PubSub.Sender behaviour for fastlaning, which requires phoenix_pubsub v2.4. If you do rolling deploys where both old and new nodes are active at the same time, ensure that you deploy Phoenix v1.8.16 or a later v1.8 release first.

v1.8

The CHANGELOG for v1.8 releases can be found in the v1.8 branch.

Commits

• b502666 Release v1.8.16
• cd67060 Update assets
• 673192b Don't treat code 1000 as special (#6880)
• d74649e Fix Route.build/14 spec for hosts and helper (#6879)
• 29e4caf Remove redundant text in @​deprecated messages (#6876)
• c0787d6 Update assets
• 3909a22 Address connection races (#6867)
• f94b39c Fix broken asset management anchors in directory structure guide (#6872)
• 512c502 allow setting max_channels_per_transport on the socket in endpoint (#6871)
• 58d534e Ensure all socket options are validated
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 555446f2-6d43-4cd5-b3d9-40e89bb19f38

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-28T21:06:45.110318Z	6b23f61	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud