chore(deps-dev): bump the dev-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the dev-dependencies group with 2 updates in the / directory: git_ops and sobelow.

Updates git_ops from 2.10.0 to 2.12.2

Changelog

Sourced from git_ops's changelog.

v2.12.2 (2026-08-23)

Bug Fixes:

• don't fail on prefix stripping when prefix is empty by @​zachdaniel

v2.12.1 (2026-08-14)

Improvements:

• support solo_pr option on packages by @​zachdaniel

• restrict character names in groups by @​zachdaniel

v2.12.0 (2026-08-13)

Features:

• close release pull requests for packages with no releasable changes (#84) by craig-wertz [(#84)](zachdaniel/git_ops#84)

v2.11.4 (2026-08-13)

Bug Fixes:

• handle utf8 in messages by @​zachdaniel

v2.11.3 (2026-08-11)

Improvements:

• even faster branch comparison by @​zachdaniel

v2.11.2 (2026-08-10)

... (truncated)

Commits

• 52e3853 chore: release version v2.12.2
• 50afc26 fix: don't fail on prefix stripping when prefix is empty
• d8b13ae chore: release version v2.12.1
• e588b16 improvement: support solo_pr option on packages
• 34a9ac0 chore: release version v2.12.0
• 78477c7 feat: close release pull requests for packages with no releasable changes (#84)
• 8fd7d36 chore: release version v2.11.4
• b80061e fix: handle utf8 in messages
• 0a23dfd chore: release version v2.11.3
• 1b6b37f improvement: even faster branch comparison
• Additional commits viewable in compare view

Updates sobelow from 0.14.1 to 0.15.0

Release notes

Sourced from sobelow's releases.

v0.15.0

What's Changed

• Fix nine crash-class bugs, add end-to-end test coverage, support Elixir 1.20 by @​houllette in sobelow/sobelow#34
• feat: Support inline # sobelow_skip comments on Phoenix router pipelines by @​houllette in sobelow/sobelow#35
• perf: only re-walk files that actually carry a sobelow_skip attribute by @​houllette in sobelow/sobelow#36
• fix: tolerate empty .sobelow-conf files instead of failing the scan by @​houllette in sobelow/sobelow#37
• perf: Run check tasks in parallel by @​s3cur3 in sobelow/sobelow#23
• Reduce churn: Sort lines in .sobelow-skips file by their value instead of the findings’ fingerprints by @​sesamzoo in sobelow/sobelow#24
• Allow possibility to remove missing router warning (issue #25) by @​a-maze-d in sobelow/sobelow#26
• fix: Stop discarding # sobelow_skip comments over whitespace, and warn when one cannot be read by @​houllette in sobelow/sobelow#39
• Fix for Workflow does not contain permissions issue by @​houllette in sobelow/sobelow#41
• fix: Only match unqualified query/query! where Ecto is in scope by @​houllette in sobelow/sobelow#38
• fix: Stop .sobelow-conf from being able to disable the scan by @​houllette in sobelow/sobelow#42
• version bump - 0.15.0 by @​houllette in sobelow/sobelow#43

New Contributors

• @​s3cur3 made their first contribution in sobelow/sobelow#23
• @​sesamzoo made their first contribution in sobelow/sobelow#24
• @​a-maze-d made their first contribution in sobelow/sobelow#26

Full Changelog: sobelow/sobelow@v0.14.1...v0.15.0

Changelog

Sourced from sobelow's changelog.

v0.15.0

• Bug fixes
  • Config.Secrets no longer crashes the scan when a secret is written as anything other than a plain double-quoted string. Heredoc values and values containing escaped quotes previously raised a MatchError and aborted the entire run. These secrets are now reported, using the line of the enclosing config call.
  • A corrupt or unreadable version-check cache file no longer aborts the scan. Sobelow previously printed "This does not appear to be a Phoenix application" and exited 0 — a CI gate could pass having scanned nothing.
  • --strict now reports syntax errors instead of raising. It has been broken since Elixir 1.13 changed the error shape returned by Code.string_to_quoted/2. Errors are now reported as file:line:column:.
  • A template that cannot be parsed is now skipped (or reported under --strict) rather than aborting the scan with an EEx.SyntaxError. The error now names the offending template instead of nofile.
  • A malformed .sobelow-conf now produces an actionable message instead of a raw MatchError stacktrace. This mattered more since v0.14.1 began reading the file automatically.
  • An empty, whitespace-only, or comment-only .sobelow-conf is now read as no options rather than aborting the scan. Such a file parses to an empty block instead of a keyword list, so it originally crashed with a FunctionClauseError and then, once that was fixed, exited 1 with a configuration error. Since the file is read automatically, a stray touch .sobelow-conf or a truncated write was enough to break every scan in a project. Contents that cannot be interpreted are still an error.
  • --save-config now stores ignore_files relative to the project root. Absolute paths were previously baked into .sobelow-conf, breaking the committed file on every other machine and in CI.
  • Config.Secrets now reports the line of the secret itself when a config call spans multiple lines. The line search compared a tuple against an integer, so it never worked as intended.
  • An unwritable ~/.sobelow no longer fails a scan.
  • Fixed a string-interpolation typo that rendered dot-access variables as conn.${atom_to_string(field)}.
  • .sobelow-conf keys are now genuinely sorted alphabetically.
  • A .sobelow-conf can no longer stop Sobelow from scanning. --save-config wrote version into every file it generated, so mix sobelow --version --save-config produced a committed file that made every later run print the version and exit 0 — a CI gate reading that as a clean scan. version, details, all-details, save-config, and diff choose what Sobelow does rather than configure a scan, and are now accepted on the command line only. One in the file is ignored, with a warning when it would have changed anything. version is no longer written to the file in the first place.
  • # sobelow_skip comments are no longer thrown away over whitespace. The pattern demanded exactly one space after the # and exactly one before the list, so # sobelow_skip["XSS.Raw"], # sobelow_skip ["XSS.Raw"], and # sobelow_skip [ "XSS.Raw" ] were all ignored — silently, and indistinguishably from a skip that had simply not applied. Spacing around

... (truncated)

Commits

• 4eb7d16 version bump - 0.15.0
• 1a9e9ff fix: Stop .sobelow-conf from being able to disable the scan
• c5e71f7 fix: Only match unqualified query/query! where Ecto is in scope
• d112cc5 Potential fix for code scanning alert no. 1: Workflow does not contain permis...
• cc5721a fix: Stop discarding # sobelow_skip comments over whitespace, and warn
• 23a6ce5 test: Cover pipeline skip scoping across multiple pipelines
• 7578758 fix: handle a disabled router on every resolution path
• eb28ed4 Allow possibility to remove missing router warning (issue #25)
• f7a2aed fix: sort the whole skips file, and by parsed location
• 9a543aa Reduce churn: Sort lines in .sobelow-skips file...
• Additional commits viewable in compare view