[WIP] Mise en place scanner vulnérabilités + fixes

[thbar]

TODO:

• créer un ticket pour la mise à jour de hackney (v4)
• idem pour earmark à remplacer complètement
• créer des tickets pour chaque advisory bypassé
• test sur prochainement

(initially generated with elixir generate_deps_changelogs.exs)

Mises à jour de librairies Elixir

• https://diff.hex.pm/diff/castore/1.0.17..1.0.19
• https://diff.hex.pm/diff/cowboy/2.14.2..2.17.0
• https://diff.hex.pm/diff/cowlib/2.16.0..2.18.0
• https://diff.hex.pm/diff/credo/1.7.14..1.7.19
• https://diff.hex.pm/diff/db_connection/2.8.1..2.10.2
• https://diff.hex.pm/diff/decimal/2.3.0..2.4.1
• https://diff.hex.pm/diff/finch/0.20.0..0.23.0
• https://diff.hex.pm/diff/fine/0.1.4..0.1.6
• https://diff.hex.pm/diff/hpax/1.0.3..1.0.4
• https://diff.hex.pm/diff/jason/1.4.4..1.4.5
• https://diff.hex.pm/diff/lazy_html/0.1.8..0.1.11
• https://diff.hex.pm/diff/mimerl/1.4.0..1.5.0
• https://diff.hex.pm/diff/mint/1.7.1..1.9.1
• https://diff.hex.pm/diff/phoenix/1.8.3..1.8.9
• https://diff.hex.pm/diff/plug/1.19.1..1.20.3
• https://diff.hex.pm/diff/plug_cowboy/2.7.5..2.9.0
• https://diff.hex.pm/diff/postgrex/0.21.1..0.22.3
• https://diff.hex.pm/diff/req/0.5.16..0.6.2
• https://diff.hex.pm/diff/swoosh/1.19.9..1.26.3
• https://diff.hex.pm/diff/telemetry/1.3.0..1.4.2
• https://diff.hex.pm/diff/tesla/1.15.3..1.20.0
• https://diff.hex.pm/diff/websock_adapter/0.5.9..0.6.0

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	phoenix@​1.8.3 ⏵ 1.8.9	+1			+2

View full report