Skip to content

Bump solid from 0.18.0 to 1.3.3 in /worker - #472

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/worker/solid-1.3.3
Open

Bump solid from 0.18.0 to 1.3.3 in /worker#472
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/hex/worker/solid-1.3.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 4, 2026

Copy link
Copy Markdown
Contributor

Bumps solid from 0.18.0 to 1.3.3.

Release notes

Sourced from solid's releases.

Solid 1.3.3

What's Changed

New Contributors

Full Changelog: edgurgel/solid@v1.3.2...v1.3.3

Solid 1.3.2

What's Changed

Full Changelog: edgurgel/solid@v1.3.1...v1.3.2

Solid 1.3.1

What's Changed

New Contributors

Full Changelog: edgurgel/solid@v1.3.0...v1.3.1

Solid 1.3.0

What's Changed

New Contributors

Full Changelog: edgurgel/solid@v1.2.4...v1.3.0

Solid 1.2.4

What's Changed

Full Changelog: edgurgel/solid@v1.2.3...v1.2.4

Solid 1.2.3

What's Changed

Full Changelog: edgurgel/solid@v1.2.2...v1.2.3

... (truncated)

Changelog

Sourced from solid's changelog.

1.3.3

Features

  • Add squish filter

Bug fixes

  • Fix custom filters being silently skipped when their module has not been loaded yet

Security

  • Fix denial-of-service where for/tablerow loops over a range literal (e.g. (1..1000000000)) eagerly materialized the whole range into a list before applying limit/offset, allowing a short attacker-controlled template to exhaust memory. Ranges are now kept lazy so limit/offset are applied in constant time.

1.3.2 (2026-06-14)

Bug fixes

  • Fix empty and blank comparison cases

1.3.1 (2026-06-10)

Bug fixes

  • Update decimal

1.3.0 (2026-04-25)

Features

  • Add support to filters_in_conditional_tags option during parsing to account for a feature that Solid pre-1.0.0 supported that diverged from Liquid. It enables teampltes like:
{% if items | size > 0 %}...{% endif %}
{% if name | upcase == "JOHN" %}...{% endif %}
{% unless items | size > 0 %}...{% endunless %}

1.2.4 (2026-04-18)

Bug fixes

  • Fix identifier with the prefix contains

1.2.3 (2026-03-22)

Bug fixes

  • Fix custom tags rendering on partial templates

... (truncated)

Commits
  • 468e3b8 fix: range materialization (#208)
  • 1084861 fix: resolve custom filters before their module is loaded (#205)
  • ab7956a feat: add squish filter (#207)
  • 916c0e3 fix: fix empty and blank missing conditions (#202)
  • ead5d45 chore: bump version and update CHANGELOG.md
  • aac8c98 fix: bump decimal to 3.1.1 (#201)
  • d480e6d chore: bump version and update CHANGELOG.md
  • 7ee8348 feat: support filters in conditional tags (#195)
  • 6b54d0e fix: identifier that contains contains (#200)
  • b820926 chore: bump version and update CHANGELOG
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [solid](https://github.com/edgurgel/solid) from 0.18.0 to 1.3.3.
- [Release notes](https://github.com/edgurgel/solid/releases)
- [Changelog](https://github.com/edgurgel/solid/blob/main/CHANGELOG.md)
- [Commits](edgurgel/solid@v0.18.0...v1.3.3)

---
updated-dependencies:
- dependency-name: solid
  dependency-version: 1.3.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code labels Aug 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file elixir Pull requests that update Elixir code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants