Slax - Maintenance - December 2025

[quinnmccourt]

requires Slax dependabot alerts

Background

Slax currently has 0 new security vulnerabilities (0 critical, 0 high, 0 moderate, and 0 low). The purpose of this ticket is to address Slax's security vulnerabilities.

Closed last month: 0
Critical: 0
High: 0
Moderate: 0
Low: 0

Open Dependabot pull requests:
Bump phoenix from 1.8.1 to 1.8.2
Bump plug_cowboy from 2.7.4 to 2.7.5
Bump phoenix_ecto from 4.6.5 to 4.7.0
Bump castore from 1.0.15 to 1.0.16

Scenario: Update security vulnerabilities

Given I am an Engineer

• When I manually address dependency conflicts listed here
• Then I test by running locally
• And I merge to master and test in production

QA / UAT Note

Remember to add a comment when passing this forward with links to:

• the review app
• the pull request itself

[BenBarahona]

Closing as covered on #566