build(deps): Bump plug from 1.19.2 to 1.20.1 in /elixir-orchestration (#166)

dependabot[bot] · web-flow · commit 9e4a21c713fe · 2026-06-28T00:15:00.000+01:00
Bumps [plug](https://github.com/elixir-plug/plug) from 1.19.2 to 1.20.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/elixir-plug/plug/blob/main/CHANGELOG.md">plug's changelog</a>.</em></p> <blockquote> <h2>v1.20.1 (2026-06-23)</h2> <h3>Bug fixes</h3> <ul> <li>[Plug.Conn] Fix <code>inform</code>/<code>inform!</code> when atoms are given as header keys</li> </ul> <h2>v1.20.0 (2026-06-23)</h2> <p>This release requires Elixir v1.15+.</p> <h3>Enhancements</h3> <ul> <li>[Plug.RequestId] Make request ID generation configurable</li> <li>[Plug.Test] Support <code>:sign</code> and <code>:encrypt</code> options in <code>put_req_cookie/4</code></li> </ul> <h3>Bug fixes</h3> <ul> <li>[Plug.Conn] Run <code>before_send</code> callbacks before <code>upgrade_adapter/3</code></li> <li>[Plug.Debugger] Raise if Elixir is compiled without source information</li> <li>[Plug.RewriteOn] Rewrite the protocol to HTTPS when <code>x-forwarded-proto</code> is <code>wss</code></li> <li>[Plug.Static] Return 416 for invalid range requests</li> <li>[Plug.Static] Fix <code>:raise_on_missing_only</code> raising on non-matching paths with colons</li> </ul> <h3>Optimizations</h3> <ul> <li>[Plug.Conn.Cookies] Optimize cookie parsing</li> <li>[Plug.Conn.Cookies] Optimize cookie encoding</li> <li>[Plug.Conn.Utils] Optimize <code>validate_utf8!/3</code></li> <li>[Plug.Conn.Utils] Optimize splitting by semicolons</li> <li>[Plug.Router] Optimize host matching</li> </ul> <h2>v1.19.3 (2026-06-23)</h2> <h3>Security</h3> <ul> <li>[Plug.Conn.Query] Force a maximum depth when decoding queries (CVE-2026-54892)</li> </ul> <h3>Bug fixes</h3> <ul> <li>[Plug.Conn] Validate headers on <code>inform</code></li> <li>[Plug.Static] Enforce size on range requests</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/elixir-plug/plug/commit/1fea083ea9a5bc1917fde321cd561debeee8f45a"><code>1fea083</code></a> Release v1.20.1</li> <li><a href="https://github.com/elixir-plug/plug/commit/9df2c0a318698ebcb31f3d3c32bd2b380afce332"><code>9df2c0a</code></a> Allow atom header keys in inform/3 (<a href="https://redirect.github.com/elixir-plug/plug/issues/1318">#1318</a>)</li> <li><a href="https://github.com/elixir-plug/plug/commit/d8d733b054d1ba9fa3777c52b96a3931a83fca54"><code>d8d733b</code></a> Release v1.20.0</li> <li><a href="https://github.com/elixir-plug/plug/commit/b4aa8a0665ce2726a6d5af44467fb4f59595b107"><code>b4aa8a0</code></a> Merge commit from fork</li> <li><a href="https://github.com/elixir-plug/plug/commit/ac94702d4301fc3a501f7b2c8344cd46648bf698"><code>ac94702</code></a> Validate headers in inform</li> <li><a href="https://github.com/elixir-plug/plug/commit/b921cf8893bdc69dcd39db1dccf2e45a043d6c7d"><code>b921cf8</code></a> Harden integer parsing around headers</li> <li><a href="https://github.com/elixir-plug/plug/commit/4bb005a8ea058cbc79d4f1bf0957221921fba9f1"><code>4bb005a</code></a> Return 416 for invalid range requests in Plug.Static (<a href="https://redirect.github.com/elixir-plug/plug/issues/1317">#1317</a>)</li> <li><a href="https://github.com/elixir-plug/plug/commit/4803d6c50ed147fed03b7735d3b771789bbae5a0"><code>4803d6c</code></a> Fix all the typos (<a href="https://redirect.github.com/elixir-plug/plug/issues/1316">#1316</a>)</li> <li><a href="https://github.com/elixir-plug/plug/commit/6ed9dc769c9cbe40839549893d532818ab013f3d"><code>6ed9dc7</code></a> Optimize Cookies.encode (<a href="https://redirect.github.com/elixir-plug/plug/issues/1315">#1315</a>)</li> <li><a href="https://github.com/elixir-plug/plug/commit/74b5cda823110b549083ba1578a735c3df823c91"><code>74b5cda</code></a> Optimize splitting by semicolons (<a href="https://redirect.github.com/elixir-plug/plug/issues/1314">#1314</a>)</li> <li>Additional commits viewable in <a href="https://github.com/elixir-plug/plug/compare/v1.19.2...v1.20.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=plug&package-manager=hex&previous-version=1.19.2&new-version=1.20.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/elixir-orchestration/mix.lock b/elixir-orchestration/mix.lock
@@ -37,7 +37,7 @@
   "nimble_parsec": {:hex, :nimble_parsec, "1.4.2", "8efba0122db06df95bfaa78f791344a89352ba04baedd3849593bfce4d0dc1c6", [:mix], [], "hexpm", "4b21398942dda052b403bbe1da991ccd03a053668d147d53fb8c4e0efe09c973"},
   "nimble_pool": {:hex, :nimble_pool, "1.1.0", "bf9c29fbdcba3564a8b800d1eeb5a3c58f36e1e11d7b7fb2e084a643f645f06b", [:mix], [], "hexpm", "af2e4e6b34197db81f7aad230c1118eac993acc0dae6bc83bac0126d4ae0813a"},
   "parse_trans": {:hex, :parse_trans, "3.4.2", "c352ddc1a0d5e54f9b1654d45f9c432eef76f9cea371c55ddff769ef688fdb74", [:rebar3], [], "hexpm", "4c25347de3b7c35732d32e69ab43d1ceee0beae3f3b3ade1b59cbd3dd224d9ca"},
-  "plug": {:hex, :plug, "1.19.2", "e4950525b22c6789dfb38a3f95d47171ba159da3fc5a33be9643b43d5e8adb98", [:mix], [{:mime, "~> 1.0 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:plug_crypto, "~> 1.1.1 or ~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.3 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "b6fce20a56af5e60fa5dfecf3f907bb98ec981be43c79a3809a499bc3d133de0"},
+  "plug": {:hex, :plug, "1.20.1", "82cdee1d7535d4f4db5c5602a7fd49512d64690be54fd62374856ee70e62eb29", [:mix], [{:mime, "~> 1.0 or ~> 2.0", [hex: :mime, repo: "hexpm", optional: false]}, {:plug_crypto, "~> 1.1.1 or ~> 1.2 or ~> 2.0", [hex: :plug_crypto, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.3 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "892d2a1a7a3f5368c5a3b9067bba1050c031495f48c430ec00b09691dbf211b7"},
   "plug_crypto": {:hex, :plug_crypto, "2.1.1", "19bda8184399cb24afa10be734f84a16ea0a2bc65054e23a62bb10f06bc89491", [:mix], [], "hexpm", "6470bce6ffe41c8bd497612ffde1a7e4af67f36a15eea5f921af71cf3e11247c"},
   "postgrex": {:hex, :postgrex, "0.22.2", "4aec14df2a72722aee92492566edbeeb44e233ecb86b1915d03136297ef1385d", [:mix], [{:db_connection, "~> 2.9", [hex: :db_connection, repo: "hexpm", optional: false]}, {:decimal, "~> 1.5 or ~> 2.0 or ~> 3.0", [hex: :decimal, repo: "hexpm", optional: false]}, {:jason, "~> 1.0", [hex: :jason, repo: "hexpm", optional: true]}, {:table, "~> 0.1.0", [hex: :table, repo: "hexpm", optional: true]}], "hexpm", "8946382ddb06294f56026ac4278b3cc212bac8a2c82ed68b4087819ed1abc53b"},
   "redix": {:hex, :redix, "1.5.3", "4eaae29c75e3285c0ff9957046b7c209aa7f72a023a17f0a9ea51c2a50ab5b0f", [:mix], [{:castore, "~> 0.1.0 or ~> 1.0", [hex: :castore, repo: "hexpm", optional: true]}, {:nimble_options, "~> 0.5.0 or ~> 1.0", [hex: :nimble_options, repo: "hexpm", optional: false]}, {:telemetry, "~> 0.4.0 or ~> 1.0", [hex: :telemetry, repo: "hexpm", optional: false]}], "hexpm", "7b06fb5246373af41f5826b03334dfa3f636347d4d5d98b4d455b699d425ae7e"},
