Bump phoenix from 1.7.14 to 1.8.7

[dependabot]

Bumps phoenix from 1.7.14 to 1.8.7.

Changelog

Sourced from phoenix's changelog.

1.8.7 (2026-05-06)

Bug fixes

• Fix invalid status when longpoll request times out

Enhancements

• Mask token parameter in logs by default (in addition to "password")

JavaScript Client Bug Fixes

• Fix encoding of non-ASCII metadata in binary channel messages

1.8.6 (2026-05-05)

Security fixes

• CVE-2026-32689: Fix Phoenix.Socket Longpoll transport memory exhaustion in nd-JSON body splitting

Enhancements

• [phoenix] Raise if use Phoenix.VerifiedRoutes is called multiple times in the same module
• [phoenix] Fix more deprecation and type checker warnings on Elixir 1.20
• [phoenix] Raise when interpolating a list in Phoenix.VerifiedRoutes (#6632)
• [phoenix] Gracefully handle non-binary vsn socket parameter (#6662)
• [phx.gen.*] Use .eex filename suffix in generator files
• [phx.new] Add interactive mode: mix phx.new --interactive (#6630)
• [phx.new] Add phx-no-format to generated <.live_title> tag (#6667)

Bug fixes

• [phx.gen.*] Fix generated migrations for myxql when using scopes (#6635)
• [phx.new] Fix crash when parent directory contains a colon (#6633)

1.8.5 (2026-03-05)

JavaScript Client Bug Fixes

• Fix socket connecting on visibility change when never established

Enhancements

• Fix warnings on Elixir 1.20

1.8.4 (2026-02-23)

JavaScript Client Bug Fixes

• Fix bug reconnecting connections when close was gracefully initiated by server
• Fix LongPoll transport name in sessionStorage and logs

Enhancements

• Adds guards support in assert_push, assert_broadcast, and assert_reply
• Enable purging in Phoenix code server for Elixir 1.20

1.8.3 (2025-12-08)

Enhancements

... (truncated)

Commits

• ba3a131 Release v1.8.7
• e74eacc fix invalid status on longpoll window timeout
• 035fde9 Update assets
• eb5f52f Correctly serialize non ASCII metadata (#6664)
• a99c5e8 Filter token parameters by default (#6665)
• 2190111 update installer version
• ddcdadb Release v1.8.6
• 1a67c61 prevent unexpected memory usage on nd-json body splitting
• 8ca76a2 fix a couple of typos (#6672)
• 6214d83 Bump postcss from 8.5.6 to 8.5.13 (#6671)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #229.