[midigofrank]

Description

mix deps.audit flagged hackney 4.6.0, jose 1.11.12 and tidewave 0.8.0.

hackney was held at 4.6.0 because 4.6.1+ needed h2 ~> 0.11 while its webtransport dep needed h2 ~> 0.10.4. Newer webtransport releases fix that conflict, so hackney 4.9.1 resolves (h2 0.12.5, quic 2.1.3).

tzdata 1.2.2 on Hex now includes lau/tzdata#170 (hackney ~> 4.0 support), so the git pin is gone and mix deps.audit covers tzdata again.

jose goes to 1.11.13 and tidewave to 0.9.2. Transitive updates: certifi, cowboy, mime 2.0, phoenix_live_reload, phoenix_pubsub, phoenix_template.

AI Usage

Please disclose whether you've used AI anywhere in this PR (it's cool, we just
want to know!):

• I have used Claude Code
• I have used another model
• I have not used AI

You can read more details in our
Responsible AI Policy

Pre-submission checklist

• I have performed an AI review of my code (we recommend using /review
  with Claude Code)
• I have implemented and tested all related authorization policies.
  (e.g., :owner, :admin, :editor, :viewer)
• I have updated the changelog.
• I have ticked a box in "AI usage" in this PR

[github-actions]

Security Review ✅

• S0 (project scoping): N/A, PR only bumps dependency versions in mix.exs and mix.lock and updates CHANGELOG.md; no application queries or web-layer entrypoints were touched.
• S1 (authorization): N/A, no policy modules, controllers, or LiveView handlers are changed.
• S2 (audit trail): N/A, no configuration-resource writes or Ecto.Multi pipelines are introduced.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.5%. Comparing base (68a177d) to head (1e91df0).

Additional details and impacted files

@@           Coverage Diff           @@
##            main   #5261     +/-   ##
=======================================
- Coverage   91.5%   91.5%   -0.0%     
=======================================
  Files        466     466             
  Lines      23841   23841             
=======================================
- Hits       21819   21818      -1     
- Misses      2022    2023      +1     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.