chore(deps): update dependency tesla to v1.20.0

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change
tesla (source)	prod	minor	1.8.0 → 1.20.0

---

Release Notes

elixir-tesla/tesla (tesla)

v1.20.0

Compare Source

Features

• support {:form,data} tagged body tuples (#​886) (b1b3b80)

v1.18.3

Compare Source

Important {: .error}

Please be careful using :hackney it is recommended to actually test the
application before assuming we did not introduce any breaking changes.
Also, be aware of the security vulnerabilities we have fixed in this release.
Some of them may cause some unexpected behavior from the middleware depending
on the assumptions made by the caller.

Features

• hackney: support hackney 4.x (#​880) (c91639b)

Security CVE

• CVE-2026-48598 - Multipart part smuggling via unescaped content-disposition values
• CVE-2026-48597 - Atom exhaustion via untrusted URL scheme
• CVE-2026-48596 - CRLF injection in request Content-Type header via add_content_type_param
• CVE-2026-48595 - Authorization header leaks on cross-origin redirect via case-sensitive filtering
• CVE-2026-48594 - Decompression bomb on response body

v1.18.2

Compare Source

Bug Fixes

• builder: include :assigns and :private in request option type (#​876) (f5834c1)

v1.18.1

Compare Source

Bug Fixes

• path-params: raise on missing required path parameter values (#​874) (a1dd44b)

v1.18.0

Compare Source

Features

• openapi: add response wrapper macro (#​872) (f824d67)
• openapi: split header and cookie params (#​865) (898bd1a)
• path-params: separate definitions from values (#​860) (3639c9a)
• path-params: support precompiled path templates (#​859) (a8878a0)
• query-params: separate definitions from values (#​862) (08f4d87)
• query: support API-specific query serialization (#​843) (9b95efb)
• support OpenAPI-friendly cookie params (#​857) (25bcf3c)
• support OpenAPI-friendly header params (#​853) (2ec5539)
• support OpenAPI-friendly path params (#​851) (0837672)
• support OpenAPI-friendly query params (#​852) (7a1b582)
• support OpenAPI-friendly query strings (#​858) (a979142)

Bug Fixes

• gun: keep timeout-wrapped streams readable (#​847) (8a8ba74)
• mint: avoid crashes on HTTP/2 request resets (#​846) (6a42469)

v1.17.0

Compare Source

Features

• Add :metadata option to Logger middleware (#​829) (38e209a)
• add assigns and private fields to Tesla.Env (#​836) (b8b622c)
• client: add put_middleware/2, replace_middleware!/3, update_middleware!/3, and insert_middleware!/4 (#​840) (fa755c9)
• client: add update_middleware/2 to transform middleware list (#​523) (0689e64)
• logger: emit url.template from KeepRequest preserved URL (#​839) (544e1d7)
• logger: semantic OTel metadata and legacy mode (#​838) (aae0866)

Bug Fixes

• avoid soft-deprecated warning logs when compiling tesla itself (#​834) (ab82264)
• dialyzer spec for mock opts (#​831) (440ec4e)
• enhance response handling in Mint adapter (#​803) (a672177)
• include caller module name in use Tesla deprecation warning (#​832) (b8fb158)
• mint: avoid active-mode message races without breaking reused connections (#​812) (d812f54)

v1.16.0

Compare Source

Features

• add strict policy option for enforcing base URL (#​817) (e476093)
• support function streams in multipart handling (#​801) (dd8b206), closes #​648

Bug Fixes

• DecompressResponse middleware for multiple encodings and keep updated content-length header (#​809) (288699e)
• Handle breaking change in Finch.stream API (#​813) (ce5ea80)
• Handle errors in streaming responses (#​819) (e7806bf)
• Use Version module to check finch version (#​814) (56f9568)

v1.15.3

Compare Source

Bug Fixes

• Avoid crash then gzip-decompressing empty body (#​796) (5bc9b82)

v1.15.2

Compare Source

Bug Fixes

• suppress deprecation warning for :log_level option (#​794) (478c16e)
• suppress deprecation warning for :log_level option based on configuration (478c16e)

v1.15.1

Compare Source

Bug Fixes

• legacy log level handling to support atom values for backward compatibility (5029174)

v1.15.0

Compare Source

Features

• add logging options to use :level instead of deprecated :log_level (#​779) (ffc3609)

Bug Fixes

• Handle non-list term being emitted from Stream.chunk_while in SSE (#​788) (0e9cf8d)

v1.14.3

Compare Source

Bug Fixes

• Handle carriage return \r line terminators in SSE (1efe6e3)
• handle carriage return \r line terminators in SSE (#​772) (1efe6e3)
• Handle named ancestors in Tesla.Mock (#​774) (6cf380e)

v1.14.2

Compare Source

Bug Fixes

• bring back searching for mocks in ancestors (#​771) (601e7b6)
• fix race condition in Tesla.Mock.agent_set (8cf7745)
• handle HTTP response trailers when use Finch + stream (#​767) (727cb0f)
• move regexes out of module attributes to fix compatibility with OTP 28 (#​763) (1196bc6)

v1.14.1

Compare Source

Bug Fixes

• add basic Hackney 1.22 support: {:connect_error, _} (#​754) (127db9f), closes #​753

v1.14.0

Compare Source

Features

• release-please and conventional commit (#​719) (c9f6a1c)
• support retry-after header in retry middleware (#​639) (86ad37d)
• Tesla.Middleware.JSON: Add support for Elixir 1.18's JSON module (#​747) (1413167)

Bug Fixes

• mocks for supervised tasks (#​750) (2f6b2a6)

v1.13.2

Compare Source

What's Changed

• fix: dialyzer typespec issue with partial env by @​yordis in #​727

Full Changelog: elixir-tesla/tesla@v1.13.1...v1.13.2

v1.13.1

Compare Source

What's Changed

• chore: improve docs about telemetry middleware by @​yordis in #​720
• chore: improve middleware docs by @​yordis in #​721
• chore: improve adapters docs by @​yordis in #​722
• chore: fixing example and removing reminder use Tesla showcasing by @​yordis in #​723
• feat: allow to specify encoding strategy for query params by @​RudolfMan in #​558
• fix: typespec for test module by @​yordis in #​726

New Contributors

• @​RudolfMan made their first contribution in #​558

Full Changelog: elixir-tesla/tesla@v1.13.0...v1.13.1

v1.13.0

Compare Source

Feature

• Added Tesla.Test module, please check the How-To Guides, and module documentation

What's Changed

• feat: add mox integration test support by @​yordis in #​718

Full Changelog: elixir-tesla/tesla@v1.12.3...v1.13.0

v1.12.3

Compare Source

What's Changed

• fix: ensure adapter is set by @​yordis in #​717

Full Changelog: elixir-tesla/tesla@v1.12.2...v1.12.3

v1.12.2

Compare Source

What's Changed

• Fix typos and improve language by @​preciz in #​705
• docs: fix typos again by @​kianmeng in #​706
• chore: update ci badge by @​kianmeng in #​707
• fix broken link by @​lbellomo in #​711
• chore(deps-dev): bump the dev group with 2 updates by @​dependabot in #​712
• chore(deps): bump the prod group across 1 directory with 3 updates by @​dependabot in #​713
• chore: improve readme and docs by @​yordis in #​716

New Contributors

• @​preciz made their first contribution in #​705
• @​lbellomo made their first contribution in #​711

Full Changelog: elixir-tesla/tesla@v1.12.1...v1.12.2

v1.12.1

Compare Source

Important

• This is reverting the changes from https://github.com/elixir-tesla/tesla/releases/tag/v1.12.0 please check #​700

What's Changed

• Revert "feat: add ssl opt to httpc by default" by @​yordis in #​702

Full Changelog: elixir-tesla/tesla@v1.12.0...v1.12.1

v1.12.0

Compare Source

Important

• :httpc enables SSL by default in OTP 25+ Please keep the eye on around the topic

What's Changed

• chore(deps-dev): bump the dev group with 2 updates by @​dependabot in #​698
• chore(deps): bump the prod group across 1 directory with 2 updates by @​dependabot in #​699
• feat: add ssl opt to httpc by default by @​yordis in #​626

Full Changelog: elixir-tesla/tesla@v1.11.2...v1.12.0

v1.11.2

Compare Source

What's Changed

• chore(deps): bump actions/cache from 2 to 4 by @​dependabot in #​693
• chore(deps): bump jason from 1.4.1 to 1.4.3 by @​dependabot in #​692
• chore(deps): bump mint from 1.6.0 to 1.6.1 by @​dependabot in #​689
• chore(deps-dev): bump ex_doc from 0.34.0 to 0.34.1 by @​dependabot in #​691
• chore(deps): bump poison from 5.0.0 to 6.0.0 by @​dependabot in #​690
• fix: bump elixir version compatibility by @​yordis in #​695

Full Changelog: elixir-tesla/tesla@v1.11.1...v1.11.2

v1.11.1

Compare Source

What's Changed

• Upgrade httparrot to 1.4.0 by @​nathany-copia in #​687
• chore: add explanation to keep request middleware by @​yordis in #​688

Full Changelog: elixir-tesla/tesla@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

• feat: add retry_count opt in the retry middleware by @​yordis in #​686

Full Changelog: elixir-tesla/tesla@v1.10.3...v1.11.0

v1.10.3

Compare Source

What's Changed

• Resolve Dialyzer errors on Elixir 1.16 by @​nathany-copia in #​643

Full Changelog: elixir-tesla/tesla@v1.10.2...v1.10.3

v1.10.2

Compare Source

What's Changed

• fix: json decoder middleware for uppercase content type by @​yordis in #​685

Full Changelog: elixir-tesla/tesla@v1.10.1...v1.10.2

v1.10.1

Compare Source

What's Changed

• fix: Support registered names in mock by @​Raphexion in #​683
• Update CI with current Elixir and Erlang/OTP versions by @​nathany-copia in #​682

New Contributors

• @​Raphexion made their first contribution in #​683
• @​nathany-copia made their first contribution in #​682

Full Changelog: elixir-tesla/tesla@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

• Update README to use newest versions of dependencies by @​arcanemachine in #​670
• Improve Mock module to work properly with Timeout middleware by @​carrascoacd in #​668
• Support profile for httpc adapter by @​tanguilp in #​655
• remove seemingly unnecessary step by @​byronanderson in #​675
• Fix a compiler warning in Elixir 1.17 by @​peaceful-james in #​679

New Contributors

• @​tanguilp made their first contribution in #​655
• @​byronanderson made their first contribution in #​675
• @​peaceful-james made their first contribution in #​679

Full Changelog: elixir-tesla/tesla@v1.9.0...v1.10.0

v1.9.0

Compare Source

What's Changed

New

• Middleware.PathParams: add OpenAPI params by @​halostatue in #​628
• Request/Response streaming for Finch adapter, SSE middleware by @​teamon in #​540

Fixed

• Fix broken link in README by @​arcanemachine in #​641
• Fix warning in tesla.ex by @​bradhanks in #​649
• Fix MessagePack middleware location in docs by @​kaharlichenko in #​662

New Contributors

• @​arcanemachine made their first contribution in #​641
• @​bradhanks made their first contribution in #​649
• @​kaharlichenko made their first contribution in #​662

Full Changelog: elixir-tesla/tesla@v1.8.0...v1.8.1

v1.8.1

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: mix.lock

Command failed: install-tool elixir v1.20.1

File name: mix.lock

Command failed: install-tool elixir v1.20.1

[codyoss]

Thank you for your contribution to elixir-google-api. This repository is currently in the process of being archived and as such all existing pull requests are being closed.

[forking-renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (~> 1.8). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.