phoenix - npm Package Versions

1.7.14 (2024-06-18)

Bug fixes

• Revert "Add follow_redirect/2 to Phoenix.ConnTest" (#5797) as this conflicts with follow_redirect/2 in LiveView, which is imported with ConnTest by default

1.7.13 (2024-06-18)

Bug fixes

• Fix Elixir 1.17 warning in Cowboy2Adapter
• Fix verified routes emitting diagnostics without file and position

JavaScript Client Bug Fixes

• Fix error when sessionStorage is not available on global namespace

Enhancements

• Add follow_redirect/2 to Phoenix.ConnTest
• Use LiveView 1.0.0-rc for newly generated applications
• Use new Phoenix.Component.used_input? for form errors in generated core_components.ex
• Allow mix ecto.setup from the umbrella root
• Bump Endpoint static cache manifest on config_change callback

1.7.12 (2024-04-11)

JavaScript Client Bug Fixes

• Fix all unjoined channels from being removed from the socket when channel leave is called on any single unjoined channel instance

Enhancements

• [phx.gen.auth] Add enhanced session fixation protection. For applications which previously used phx.gen.auth, the following line can be added to the renew_session function in the auth module:

    defp renew_session(conn) do
  +   delete_csrf_token()
  
      conn
      |> configure_session(renew: true)
      |> clear_session()
  

  Note: because the session id is in a http-only cookie by default, the only way to perform this attack prior to this change is if your application was already vulnerable to an XSS attack, which itself grants more escalated "privileges” than the CSRF fixation.

JavaScript Client Enhancements

• Only memorize longpoll fallback for browser session if WebSocket never had a successful connection

1.7.11 (2024-02-01)

Enhancements

• [phx.new] Default to the Bandit webserver for newly generated applications
• [phx.new] Enable longpoll transport by default and auto fallback when websocket fails for newly generated applications

JavaScript Client Enhancements

• Support new longPollFallbackMs option to auto fallback when websocket fails to connect
• Support new debug option to enable verbose logging

Deprecations

• Deprecate the c:init/2 callback in endpoints in favor of config/runtime.exs or in favor of {Phoenix.Endpoint, options}

1.7.10 (2023-11-03)

Bug fixes

• [phx.new] Fix CoreComponents.flash generating incorrect id's causing flash messages to fail to be closed when clicked

Enhancements

• [Phoenix.Endpoint] Support dynamic port for Endpoint.url/0

1.7.9 (2023-10-11)

Bug fixes

• [Phoenix.CodeReloader] - Fix error in code reloader causing compilation errors
• [phx.new] – fix LiveView debug heex configuration being generated when --no-html pas passed