Bump the non-security group across 1 directory with 2 updates

[dependabot]

Bumps the non-security group with 2 updates in the / directory: dialyxir and ex_doc.

Updates dialyxir from 1.4.7 to 1.4.8

Release notes

Sourced from dialyxir's releases.

1.4.8

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Changelog

Sourced from dialyxir's changelog.

Unreleased changes post [1.4.8]

[1.4.8] - 2026-09-05

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Commits

• 13bcb7d Release 1.4.8
• 4a2b6d7 Merge pull request #584 from lud-wj/fix/ignoring-by-line
• a2a4361 Merge branch 'master' into fix/ignoring-by-line
• 31a4cd8 Merge pull request #601 from BobbieBarker/docs/exdoc-0.40
• 6ba7b38 Update ExDoc to 0.40.3
• 3553678 Add OTP 28 warning support: exact_compare, opaque_compare, opaque_union (#591)
• 19dd690 Merge pull request #597 from dl-alexandre/codex/clarify-ignore-file-format
• f12db01 clarify ignore file formatter docs
• cdcea96 fix: Fixed dialyzer ignore by line for warnings with line/col
• 9fbbaf5 update changelog
• See full diff in compare view

Updates ex_doc from 0.40.3 to 0.40.4

Changelog

Sourced from ex_doc's changelog.

v0.40.4 (2026-09-03)

• Enhancements

  • Add :api_reference_noindex option to keep search engines from indexing api-reference.html
  • Generate reproducible HTML and EPUB output
  • Link HexDocs packages through their per-package subdomains

• Bug fixes

  • Preserve in-page anchors during Swup navigation and fully reload navigation between ExDoc builds
  • Format Elixir specs consistently regardless of their source line numbers
  • Autolink the Erlang/OTP 29 built-in record/0 type
  • Fix focus outline positioning for top-content heading action icons

Commits

• 80270f3 Release v0.40.4
• 934cf54 Reference to missing section (#2264)
• b5679af Add license information for remixicon font (#2263)
• 850f709 Bump brace-expansion from 1.1.12 to 1.1.18 in /assets (#2261)
• 873e03e Bump postcss from 8.5.15 to 8.5.26 in /assets (#2259)
• 27660d3 Bump js-yaml from 4.2.0 to 4.3.1 in /assets (#2260)
• ffec214 Bump postcss from 8.5.6 to 8.5.15 in /assets (#2241)
• 23cbd23 epub: Honor SOURCE_DATE_EPOCH for dcterms:modified and dc:identifier (#2256)
• a37128a Use a fixed makeup group_prefix for reproducible HTML output (#2255)
• 01f4763 Update earmark_parser dependency version -> 1.4.46 (#2254)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[broly-code-security-scanner]

Broly Security Scan

Note

✅ Clean scan
No vulnerabilities detected in this PR.

Note

Re-scan this PR anytime with /broly scan — useful after /broly undismiss, or to refresh findings without a new push.

Broly — SAST (zai-org/GLM-5.3) · Secrets · SCA · IaC · GH Actions · Base Images · Supply Chain Threats · Exploit Chains · Adversarial Verification

We're continuously improving Broly's accuracy and finding quality — your feedback is valuable. False positives, missed findings, bugs, and feature requests all welcome.