RepoJournal
Elixir & Phoenix

Elixir & Phoenix

Elixir, Phoenix, LiveView, and Ecto - the BEAM web stack

Keep up with Elixir & Phoenix in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

  1. Tue 16 jun
  2. Wed 17 jun
  3. Thu 18 jun
  4. Sat 27 jun
  5. Mon 29 jun
  6. Tue 30 jun
  7. Wed 1 jul
  8. Thu 2 jul
  9. Fri 3 jul
  10. Sat 4 jul
  11. Sun 5 jul
  12. Mon 6 jul
  13. Tue 7 jul
  14. Wed 8 jul
  15. Thu 9 jul
  16. Fri 10 jul
  17. Sat 11 jul
  18. Sun 12 jul
  19. Mon 13 jul
  20. Tue 14 jul
  21. Wed 15 jul
  22. Thu 16 jul
  23. Sat 18 jul
  24. Sun 19 jul
  25. Mon 20 jul
  26. Tue 21 jul
  27. Wed 22 jul
  28. Thu 23 jul
  29. Fri 24 jul
  30. Today 25 jul
Topics: Elixir & Phoenix Full archive →

The Wire · Showcase

ELIXIR TOOLCHAIN GETS QUIET MAINTENANCE ACROSS CI/CD

By RepoJournal · Filed · About Elixir & Phoenix

dependabot[bot]
1 person shipped this
dependabot[bot] @dependabot[bot] 3 cited

Three routine dependency bumps landed in Elixir core overnight, touching your security scanning, code signing, and security analysis pipeline.

The Elixir team updated zizmor-action to 0.5.6 [1], bringing zizmor itself to version 1.25.2 as the default for supply chain security scanning in CI workflows. Separately, CodeQL Action bumped to 4.35.5 [2] with a significant optimization: the JavaScript bundles now shed around 70% repository bloat through better generation logic, which means faster action checkout times in your workflows. The bigger move came with Azure's trusted-signing-action jumping to 2.0.0 [3], a major version bump that migrates to the new artifactsigning module. None of these changes break existing workflows, but the major version bump on Azure's action warrants a quick check if you're signing release artifacts in CI.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6 ↗ elixir-lang/elixir
  2. [2] Bump github/codeql-action from 4.35.4 to 4.35.5 ↗ elixir-lang/elixir
  3. [3] Bump azure/trusted-signing-action from 1.2.0 to 2.0.0 ↗ elixir-lang/elixir

Quick answers

What shipped in Elixir & Phoenix on May 29, 2026?
Three routine dependency bumps landed in Elixir core overnight, touching your security scanning, code signing, and security analysis pipeline. In total, 3 pull requests landed.
Who contributed to Elixir & Phoenix on May 29, 2026?
1 developer shipped this update, including dependabot[bot].
What were the notable Elixir & Phoenix updates?
Bump zizmorcore/zizmor-action from 0.5.3 to 0.5.6, Bump github/codeql-action from 4.35.4 to 4.35.5, and Bump azure/trusted-signing-action from 1.2.0 to 2.0.0.

More from Elixir & Phoenix

Elixir & Phoenix Elixir & Phoenix

LIVEVIEW ASYNC CLEANUP FIX SHIPS ALONGSIDE RANGE OPTIMIZATIONS

Phoenix LiveView closes a critical async task test failure while Elixir cuts unnecessary abs calls from Range operations.

Barna Kovacs Alexander Gubarev SteffenDE José Valim +1
elixir 19 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

PHOENIX LIVE VIEW SEALS CRITICAL NODE NAME LEAK IN UPLOAD TOKENS

A reverted encryption fix exposes how Phoenix was leaking BEAM node identities through unencrypted upload tokens, and the core team is pivoting to a cleaner solution using term_to_binary.

AlexGx Eurico Nicacio SteffenDE lukaszsamson +1
elixir 23 shipped 2-min read
Elixir & Phoenix Elixir & Phoenix

ELIXIR FIXES CALENDAR AND COMPILER EDGE CASES ACROSS FIVE PATCHES

Alexander Gubarev landed five targeted fixes to Calendar.ISO and ParallelCompiler that close gaps in time parsing, validation guards, and documentation.

Alexander Gubarev
elixir 15 shipped 1-min read
Elixir & Phoenix Elixir & Phoenix

ELIXIR TOOLING FIXES LAND AHEAD OF SYSTEM COMPATIBILITY PUSH

The compiler stops misinterpreting profile flags, string reversal handles invalid UTF8 correctly, and Ecto gains fragment column selection in a wave of fixes that shores up core library reliability.

Alexander Gubarev Frank Hunleth greg-rychlewski
elixir 11 shipped 1-min read

Daily updates, in your inbox

Follow Elixir & Phoenix

Keep up with Elixir & Phoenix in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

AI Agents AI Agents

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

github-actions[bot] hntrl dependabot ak684 +6
ai-agents 28 shipped 1-min read
Local LLMs Local LLMs

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.

dhiltgen ParthSareen Xuan-Son Nguyen Johannes Gäßler +11
llms 210 shipped 2-min read
CachyOS @CachyOS

HYPRLAND V0.56 FIXES LAND, PACKAGE ECOSYSTEM ROLLS FORWARD

Hyprland configuration updated for v0.56 compatibility across multiple desks, while the AUR-derived ecosystem locked in four automated package bumps.

cantosun99 Jinra Aarrayy Valeri +7
infra 85 shipped 1-min read
Mobile platforms Mobile platforms

FLUTTER PATCHES WEB GESTURE BUG, SWIFT SIMPLIFIES CODEGEN PATHS

Flutter 3.50 shipped a critical fix for iOS 27 WebKit that was silently dropping tap events, while Swift consolidated scattered CodeGen configuration into a single control point across three major repos.

jesswrd engine-flutter-autoroll flutter-zl LouiseHsu +11
mobile 147 shipped 2-min read
Want every project, not just this one?