8000 chore(deps): update ash ecosystem + image; fix sign-out link by mwoods79 · Pull Request #111 · huddlz-hq/huddlz · GitHub
[go: up one dir, main page]

Skip to content

chore(deps): update ash ecosystem + image; fix sign-out link - #111

Merged
mwoods79 merged 2 commits into
mainfrom
chore/update-deps-2026-04
Apr 20, 2026
Merged

mwoods79 merged 2 commits into
mainfrom
chore/update-deps-2026-04

Conversation

@mwoods79
@mwoods79 mwoods79 commented Apr 20, 2026 •
Copy link
Copy Markdown
Contributor

Summary

  • Bumps the Ash stack (ash, ash_postgres, ash_sql, ash_phoenix, ash_authentication_phoenix, ash_oban, ash_graphql, ash_json_api) plus image, credo, igniter, and usage_rules to their latest versions.
  • Adds an Ash-generated migration that installs the new ash_required(ANYCOMPATIBLE, jsonb) Postgres function introduced in ash_postgres 2.9.0.
  • Restores one-click sign-out: ash_authentication_phoenix 2.16 turned GET /sign-out into a CSRF confirmation page, so the layout's dropdown link now uses <.link method="delete"> to POST a _method=delete (with CSRF token) and sign out directly.

Notes

  • No Oban migration needed — Oban stayed on 2.21.1 and the repo is already at migration v14.
  • image 0.64's breaking changes (removed Image.Color/Image.Video/Image.interpretation/etc.) do not affect this app; we only use Image.from_binary/thumbnail/write/shape.

Test plan

  • mix precommit (616 tests, 0 failures; credo clean)
  • Manual: sign in, open the avatar dropdown, click "Sign Out" — confirm it logs out in one click with no confirmation page.

- ash 3.23.1 -> 3.24.3
- ash_postgres 2.8.0 -> 2.9.0 (adds ash_required SQL function)
- ash_sql 0.5.5 -> 0.6.1
- ash_phoenix 2.3.20 -> 2.3.21
- ash_authentication_phoenix 2.15.0 -> 2.16.0
- ash_oban 0.8.7 -> 0.8.10
- ash_graphql 1.9.3 -> 1.9.4
- ash_json_api 1.6.4 -> 1.6.5
- image 0.63.0 -> 0.65.0
- credo, igniter, usage_rules bumps

Generates migration installing the new ash_required/2 Postgres
function introduced in ash_postgres 2.9.0.
ash_authentication_phoenix 2.16 made GET /sign-out render a
confirmation page (CSRF protection). Switch the dropdown link to
<.link method="delete"> so one-click sign-out works like before
while still passing the CSRF token.
@mwoods79
mwoods79 merged commit 7fb9f88 into main Apr 20, 2026
1 check passed
@mwoods79
mwoods79 deleted the chore/update-deps-2026-04 branch April 20, 2026 03:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant

0