Slax - Maintenance - July 2026

[quinnmccourt]

requires Slax dependabot alerts

Background

Slax currently has 0 new security vulnerabilities (0 critical, 0 high, 0 moderate, and 0 low). The purpose of this ticket is to address Slax's security vulnerabilities.

Closed last month: 0
Critical: 0
High: 0
Moderate: 0
Low: 0

Open Dependabot pull requests:
Bump plug_cowboy from 2.8.1 to 2.9.0
Bump plug from 1.19.2 to 1.20.1
Bump actions/checkout from 4.3.1 to 7.0.0
Bump phoenix from 1.8.7 to 1.8.8
Bump credo from 1.7.18 to 1.7.19
Bump oban from 2.21.1 to 2.23.0
Bump ecto_sql from 3.13.5 to 3.14.0
Bump octokit/request-action from 2.1.9 to 3.0.0
Bump actions/setup-node from 4.4.0 to 6.4.0
Bump leonsteinhaeuser/project-beta-automations from 2.1.0 to 2.2.1

Scenario: Update security vulnerabilities

Given I am an Engineer

• When I manually address dependency conflicts listed here
• Then I test by running locally
• And I merge to master and test in production

QA / UAT Note

Remember to add a comment when passing this forward with links to:

• the review app
• the pull request itself