Skip to content

chore(deps): Bump postgrex from 0.22.0 to 0.22.4 - #243

Merged
nelsonic merged 1 commit into
mainfrom
dependabot/hex/postgrex-0.22.4
Oct 9, 2026
Merged

nelsonic merged 1 commit into
mainfrom
dependabot/hex/postgrex-0.22.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 1, 2026 •

Copy link
Copy Markdown
Contributor

Bumps postgrex from 0.22.0 to 0.22.4.

Changelog

Sourced from postgrex's changelog.

v0.22.4 (2026-08-07)

  • Security
    • Escape comments on Postgrex.stream/4 (CVE-2026-66838)

v0.22.3 (2026-07-09)

  • Security
    • Escape dollar signs in channel names in Postgrex.Notifications.listen/3 (CVE-2026-58225)

v0.22.2 (2026-05-12)

  • Security
    • Escape quotes in channel names in Postgrex.Notifications.listen/3 (CVE-2026-32687)

v0.22.1 (2026-03-05)

  • Enhancements

    • Relax decimal requirement
    • Set process labels in Postgrex processes
  • Bug fixes

    • Return proper error when getting tcp closed after fatal errors
Commits
  • 7a12d0b Release v0.22.4
  • 4011be8 Reject invalid comments on streams
  • 797d395 Release v0.22.3
  • f1ffdb5 Release v0.22.2
  • 7cdedbd Escape quotes, check null bytes, and name length for channel names
  • f78f401 Release v0.22.1
  • 03717e9 Add multirange to sidebar section
  • 0f92ae3 Return proper error when getting tcp closed after fatal errors (#765)
  • 3385a98 Set some process labels (#764)
  • e4f7942 Simplify decode simple handling to avoid unused clauses
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Oct 1, 2026
Bumps [postgrex](https://github.com/elixir-ecto/postgrex) from 0.22.0 to 0.22.4.
- [Release notes](https://github.com/elixir-ecto/postgrex/releases)
- [Changelog](https://github.com/elixir-ecto/postgrex/blob/master/CHANGELOG.md)
- [Commits](elixir-ecto/postgrex@v0.22.0...v0.22.4)

---
updated-dependencies:
- dependency-name: postgrex
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/hex/postgrex-0.22.4 branch from 13c1ad6 to bdd9b83 Compare October 9, 2026 12:48

@nelsonic nelsonic left a comment •

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @dependabot 🤖📕👌

@nelsonic
nelsonic merged commit ea4998e into main Oct 9, 2026
1 check passed
@dependabot
dependabot Bot deleted the dependabot/hex/postgrex-0.22.4 branch October 9, 2026 12:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant