Bump phoenix_live_view from 1.1.31 to 1.2.1

[dependabot]

Bumps phoenix_live_view from 1.1.31 to 1.2.1.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.1

Bug fixes

• Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0

Enhancements

• Support events pushed when connected mount redirects (#4269)

Bug fixes

• Ensure for comprehensions in HEEx use deterministic variables
• Ensure connect_params are kept when following redirects in LiveViewTest (#4005)
• Ensure exceptions during LiveComponent renders are emitted as :telemetry event (#4258)
• Fix whitespace handling of EEx nodes in HEEx compiler (#4277)

v1.2.0-rc.3

Enhancements

• Add official documentation for the JavaScript client
• Validate URL scheme in push_patch / push_navigate, JS.patch / JS.navigate, and clientside js().patch / js().navigate (#4250)

Bug fixes

• Fix nested assign change tracking (#4225)
• Ensure Phoenix.LiveViewTest.live_redirect/2 properly passes the URI as a string in handle_params (#4247)

v1.2.0-rc.2

Bug fixes

• Ensure internal phx-viewport hook does not crash on update if no scroll container is used (#4214)

v1.2.0-rc.1

Enhancements

• Align Phoenix.Component global attributes list with reference list from MDN (#4207). If you relied on one of the removed attributes, use the include option instead. For example:

  attr :rest, :global, include: ~w(width height)

• Allow setting id attributes clientside for accessibility with this.js().setAttribute() (#4146)
• Export getFileURLForUpload helper (#4206)
• Use moveBefore if available when reordering stream items (#4212)

Bug fixes

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.1 (2026-06-11)

Bug fixes

• Fix stale events from the previous LiveView being sent to the new LiveView after a live redirect (#4291)

v1.2.0 (2026-06-10) 🚀

Enhancements

• Support events pushed when connected mount redirects (#4269)

Bug fixes

• Ensure for comprehensions in HEEx use deterministic variables
• Ensure connect_params are kept when following redirects in LiveViewTest (#4005)
• Ensure exceptions during LiveComponent renders are emitted as :telemetry event (#4258)
• Fix whitespace handling of EEx nodes in HEEx compiler (#4277)

v1.2.0-rc.3 (2026-05-29)

Enhancements

• Add official documentation for the JavaScript client
• Validate URL scheme in push_patch / push_navigate, JS.patch / JS.navigate, and clientside js().patch / js().navigate (#4250)

Bug fixes

• Fix nested assign change tracking (#4225)
• Ensure Phoenix.LiveViewTest.live_redirect/2 properly passes the URI as a string in handle_params (#4247)

v1.2.0-rc.2 (2026-05-05)

Bug fixes

• Ensure internal phx-viewport hook does not crash on update if no scroll container is used (#4214)

v1.2.0-rc.1 (2026-05-04)

Enhancements

• Align Phoenix.Component global attributes list with reference list from MDN (#4207). If you relied on one of the removed attributes, use the include option instead. For example:

  attr :rest, :global, include: ~w(width height)

• Allow setting id attributes clientside for accessibility with this.js().setAttribute() (#4146)
• Export getFileURLForUpload helper (#4206)
• Use moveBefore if available when reordering stream items (#4212)

Bug fixes

... (truncated)

Commits

• f0da401 Release v1.2.1
• 1a83ece Update assets
• e38e6fb When navigating, prevent outdated events from reaching the new view (#4291)
• 92c9d8d Improve security guide regarding user input (#4285)
• c543641 Use elixirc_options: [no_warn_undefined: ...] instead of xref: [exclude: ...]...
• 189f22a Replace internal docs references .html -> .md (#4286)
• cdfff45 Add security notes for mount, handle_params, and handle_event (#4284)
• f2759d3 Fix missing parenthesis in Security Model example (#4283)
• 923e859 Release v1.2.0
• 0f57334 ensure connect_params are kept when following redirects (#4249)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)