Skip to content

Bump postgrex from 0.21.1 to 0.22.4 - #46

Merged
rosston merged 1 commit into
mainfrom
dependabot/hex/postgrex-0.22.4
Oct 19, 2026
Merged

rosston merged 1 commit into
mainfrom
dependabot/hex/postgrex-0.22.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps postgrex from 0.21.1 to 0.22.4.

Changelog

Sourced from postgrex's changelog.

v0.22.4 (2026-08-07)

  • Security
    • Escape comments on Postgrex.stream/4 (CVE-2026-66838)

v0.22.3 (2026-07-09)

  • Security
    • Escape dollar signs in channel names in Postgrex.Notifications.listen/3 (CVE-2026-58225)

v0.22.2 (2026-05-12)

  • Security
    • Escape quotes in channel names in Postgrex.Notifications.listen/3 (CVE-2026-32687)

v0.22.1 (2026-03-05)

  • Enhancements

    • Relax decimal requirement
    • Set process labels in Postgrex processes
  • Bug fixes

    • Return proper error when getting tcp closed after fatal errors

v0.22.0 (2026-01-10)

  • Enhancements
    • Automatically retry when a connection disconnects on first read/write
    • Make timeouts for TypeServer configurable
    • Require Elixir v1.15+
Commits
  • 7a12d0b Release v0.22.4
  • 4011be8 Reject invalid comments on streams
  • 797d395 Release v0.22.3
  • f1ffdb5 Release v0.22.2
  • 7cdedbd Escape quotes, check null bytes, and name length for channel names
  • f78f401 Release v0.22.1
  • 03717e9 Add multirange to sidebar section
  • 0f92ae3 Return proper error when getting tcp closed after fatal errors (#765)
  • 3385a98 Set some process labels (#764)
  • e4f7942 Simplify decode simple handling to avoid unused clauses
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code labels Oct 19, 2026
@dependabot
dependabot Bot requested a review from joseph-lozano as a code owner October 19, 2026 12:03
@rosston

rosston commented Oct 19, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/hex/postgrex-0.22.4 branch 4 times, most recently from 83a20d7 to 1a68444 Compare October 19, 2026 14:02
@rosston

rosston commented Oct 19, 2026

Copy link
Copy Markdown
Member

@dependabot recreate

Bumps [postgrex](https://github.com/elixir-ecto/postgrex) from 0.21.1 to 0.22.4.
- [Release notes](https://github.com/elixir-ecto/postgrex/releases)
- [Changelog](https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/postgrex@v0.21.1...v0.22.4)

---
updated-dependencies:
- dependency-name: postgrex
  dependency-version: 0.22.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump postgrex from 0.19.3 to 0.22.4 Bump postgrex from 0.21.1 to 0.22.4 Oct 19, 2026
@dependabot
dependabot Bot force-pushed the dependabot/hex/postgrex-0.22.4 branch from 1a68444 to 789a286 Compare October 19, 2026 14:43
@rosston
rosston merged commit c89ffa5 into main Oct 19, 2026
7 checks passed
@dependabot
dependabot Bot deleted the dependabot/hex/postgrex-0.22.4 branch October 19, 2026 14:48
rosston added a commit that referenced this pull request Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants