Slax - Maintenance - November 2024

[nschello]

requires Slax dependabot alerts

Background

Slax currently has 0 new security vulnerabilities (0 critical, 0 high, 0 moderate, and 0 low). The purpose of this ticket is to address Slax's security vulnerabilities.

Closed last month: 0
Critical: 0
High: 0
Moderate: 0
Low: 0

Open Dependabot pull requests:
Bump phoenix_ecto from 4.4.0 to 4.6.3
Bump ecto_sql from 3.11.1 to 3.12.1
Bump credo from 1.7.7 to 1.7.8
Bump castore from 1.0.8 to 1.0.9
Bump plug_cowboy from 2.7.1 to 2.7.2
Bump mox from 1.1.0 to 1.2.0
Bump ex_machina from 2.7.0 to 2.8.0
Bump phoenix_view from 2.0.2 to 2.0.4
Bump oban from 2.15.4 to 2.17.12
Bump plug from 1.15.3 to 1.16.1

Scenario: Update security vulnerabilities

Given I am an Engineer

• When I manually address dependency conflicts listed here
• Then I test by running locally
• And I merge to master and test in production

QA / UAT Note

Remember to add a comment when passing this forward with links to:

• the review app
• the pull request itself