chore(deps): bump the dev group with 4 updates

[dependabot]

Bumps the dev group with 4 updates: cowlib, dialyxir, ex_doc and ranch.

Updates cowlib from 2.19.0 to 2.20.0

Commits

• c768a80 Cowlib 2.20.0
• 834c198 Accept 20-digit integers in header parsing
• 2a64d3a HPACK: never-index fields outside an allowlist
• 7c795d4 Fix table_find_name_dyn/3 dynamic table matching
• 4284baf Remove a wrong todo
• 68f66e6 Require Erlang/OTP-27+
• 89da27e Link: escape and validate values when building
• 63abbff Fix parsing/building decimals in cow_http_struct_hd
• 3ec5c50 Parse digits better
• See full diff in compare view

Updates dialyxir from 1.4.7 to 1.4.8

Release notes

Sourced from dialyxir's releases.

1.4.8

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Changelog

Sourced from dialyxir's changelog.

Unreleased changes post [1.4.8]

[1.4.8] - 2026-09-05

Added

• Add support for the OTP 28 warnings :exact_compare, :opaque_compare, and :opaque_union.

Fixed

• Handle line-and-column locations when matching line-specific warning ignores.

Changed

• Update ExDoc to 0.40.3 to generate Markdown documentation and llms.txt.

Docs

• Clarify the output and intended use of the ignore_file and ignore_file_strict formatters.

Commits

• 13bcb7d Release 1.4.8
• 4a2b6d7 Merge pull request #584 from lud-wj/fix/ignoring-by-line
• a2a4361 Merge branch 'master' into fix/ignoring-by-line
• 31a4cd8 Merge pull request #601 from BobbieBarker/docs/exdoc-0.40
• 6ba7b38 Update ExDoc to 0.40.3
• 3553678 Add OTP 28 warning support: exact_compare, opaque_compare, opaque_union (#591)
• 19dd690 Merge pull request #597 from dl-alexandre/codex/clarify-ignore-file-format
• f12db01 clarify ignore file formatter docs
• cdcea96 fix: Fixed dialyzer ignore by line for warnings with line/col
• 9fbbaf5 update changelog
• See full diff in compare view

Updates ex_doc from 0.40.3 to 0.40.4

Changelog

Sourced from ex_doc's changelog.

v0.40.4 (2026-09-03)

• Enhancements

  • Add :api_reference_noindex option to keep search engines from indexing api-reference.html
  • Generate reproducible HTML and EPUB output
  • Link HexDocs packages through their per-package subdomains

• Bug fixes

  • Preserve in-page anchors during Swup navigation and fully reload navigation between ExDoc builds
  • Format Elixir specs consistently regardless of their source line numbers
  • Autolink the Erlang/OTP 29 built-in record/0 type
  • Fix focus outline positioning for top-content heading action icons

Commits

• 80270f3 Release v0.40.4
• 934cf54 Reference to missing section (#2264)
• b5679af Add license information for remixicon font (#2263)
• 850f709 Bump brace-expansion from 1.1.12 to 1.1.18 in /assets (#2261)
• 873e03e Bump postcss from 8.5.15 to 8.5.26 in /assets (#2259)
• 27660d3 Bump js-yaml from 4.2.0 to 4.3.1 in /assets (#2260)
• ffec214 Bump postcss from 8.5.6 to 8.5.15 in /assets (#2241)
• 23cbd23 epub: Honor SOURCE_DATE_EPOCH for dcterms:modified and dc:identifier (#2256)
• a37128a Use a fixed makeup group_prefix for reproducible HTML output (#2255)
• 01f4763 Update earmark_parser dependency version -> 1.4.46 (#2254)
• Additional commits viewable in compare view

Updates ranch from 2.2.1 to 2.3.0

Commits

• 9e6257c Ranch 2.3.0
• 38c9e7d Set proc_lib labels on listener processes
• 4008042 Drop Windows ssl internal_active_n test workaround
• 7673420 Simplify socket backend test detection
• 0781ab6 Drop OTP-22 SNI workaround in handshake_protocol
• d9612a8 Drop TLS 1.2 pin in ssl_sni_fail test
• c10ebd8 Expect only OTP-26+ ssl option errors in tests
• 27ea514 Enable remaining tcp_socket tests
• c6e0e17 Require Erlang/OTP 27+
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[cursor]

PR Summary

Medium Risk
cowlib 2.20 and ranch 2.3 require OTP 27+, which can break CI or local :test runs on older Erlang even though runtime releases are unchanged.

Overview
Updates mix.lock only for a grouped Dependabot bump—no application or mix.exs changes.

Dev/test tooling: dialyxir 1.4.7 → 1.4.8 (pulls erlex 0.2.9), and ex_doc 0.40.3 → 0.40.4 for docs generation in dev.

Test HTTP stack overrides: cowlib 2.19.0 → 2.20.0 and ranch 2.2.1 → 2.3.0, pinned for httparrot/Cowboy in :test (and :cowlib in dev)—these are transitive bumps from existing version ranges, not new direct deps.

^{Reviewed by Cursor Bugbot for commit 83bdfef. Bugbot is set up for automated code reviews on this repo. Configure here.}