chore: upgrade Elixir/OTP to match Console and switch to Mix releases - #1511
Conversation
Replace Distillery with Mix releases and align Phoenix/Ecto with the Console toolchain (Elixir 1.19.4 / OTP 28.5).
c69b786 to
d2d3d17
Compare
Greptile SummaryThe PR upgrades the umbrella to Elixir 1.19.4/OTP 28.5, refreshes Phoenix/Ecto and related dependencies, and replaces Distillery packaging with role-specific Mix releases.
Confidence Score: 3/5The PR should not be merged until the local RabbitMQ management endpoint is restricted to localhost or otherwise protected from network access. The release conversion is internally aligned, but the newly documented local stack exposes a message-broker administrator interface with publicly known credentials, allowing network users to manipulate local queues and messages. Files Needing Attention: docker-compose.stack.yml
|
| Filename | Overview |
|---|---|
| mix.exs | Defines four role-specific Mix releases with matching runtime configuration paths and application sets. |
| Dockerfile | Replaces Distillery extraction with named Mix-release builds and copies the selected release into the runtime image. |
| rel/runtime/plural.exs | Supplies environment-driven runtime configuration for the main API release while preserving the compiled endpoint server settings. |
| apps/core/lib/core/influx.ex | Replaces the Instream connection process with a Req-based compatibility client; no concrete caller-visible regression was established. |
| apps/api/lib/api_web/plugs/remote_ip.ex | Adapts forwarding-header parsing to RemoteIp 1.2 while retaining the pre-existing trust model and downstream IP behavior. |
| docker-compose.stack.yml | Adds a useful local release stack, but exposes RabbitMQ administration beyond localhost using static administrator credentials. |
| plural/helm/plural/templates/migration.yaml | Updates the database migration job to invoke the overlay command included in the plural Mix-release image. |
Reviews (1): Last reviewed commit: "chore: upgrade Elixir/OTP to match Conso..." | Re-trigger Greptile
michaeljguarino
left a comment
There was a problem hiding this comment.
I suspect this is mostly correct, we need to test it in dev for sure though, I'll handle that with the test images built.
…xirerlang-to-match-the-console Keep the Elixir/OTP 1.19/28 Mix-release stack and take master's Trivy, www, and Docker tools-stage updates. Drop master's Elixir 1.13 CVE pins and old Alpine package versions, which this upgrade already supersedes. Co-authored-by: Cursor <cursoragent@cursor.com>
Replace Distillery with Mix releases and align Phoenix/Ecto with the Console toolchain (Elixir 1.19.4 / OTP 28.5).
Test Plan
Checklist