[bbangert]

Summary

Stacked on #227 (plug_crypto advisory fix). The rest of mix deps.update --all, with no mix.exs changes:

Package	From	To
argus_beam	0.24.0	0.25.0
bluez	0.3.0	0.4.0
nerves	1.15.0	1.15.1
nerves_ssh	1.3.2	1.3.3
nerves_time	0.4.13	0.4.14
phoenix	1.8.15	1.8.16
phoenix_live_view	1.2.12	1.2.13
tailwind	0.5.1	0.5.2

bluez 0.4.0 only adds things. The new opt-in mgmt: and advert_receiver: options are off by default and bring Bluez.Radio, Bluez.Mgmt, Bluez.AdvertReceiver, Bluez.AdData and Bluez.Hci. It also adds DevicePath.resolved_adapter_path/0. The one behaviour change is that Bluez.Client now clears that resolved-adapter key each time it starts. The app does not use any of these new APIs, so no code changes are needed.

argus_beam 0.25.0 renames Datalog relations and columns. The report, its JSON, finding titles and the configuration stay the same, and the baseline check still gives 27 findings, 27 baselined, 0 new, 0 stale.

Held back

• nerves_system_bbb 2.31.1, nerves_system_mangopi_mq_pro 0.18.1 and nerves_system_qemu_aarch64 0.5.1. deps.update --all would take them, but they are built on nerves_system_br 1.35.3. mix.exs pins br 1.34.3 to match the custom systems v0.1.11 (@up_systems_tag, still the latest tag). They are held back as on Update dependencies within existing requirements #219 and should move together with a custom-systems release on br 1.35.
• nerves_system_br 1.35.3 stays pinned on purpose. It is not a requirement bump, so there is no major PR this week.
• mdns_lite is a vendored path dep and is left alone.

Verification (host, mirroring ci.yml; local toolchain OTP 29.1.2 / Elixir 1.20.4 / Hex 2.6.0)

• deps.get --check-locked passes for host, rpi3, rpi0, bbb, mangopi_mq_pro, qemu_aarch64 and x86_64.
• These pass: deps.unlock --check-unused, compile --warnings-as-errors, format --check-formatted, credo --strict, and sobelow with the CI flags.
• hex.audit reports only the allow-listed cowlib EEF-CVE-2026-43966.
• dialyzer passes: 7 errors, all skipped by .dialyzer_ignore.exs.
• argus baseline --self-test passes (22/22), and the baseline check gives 27 findings, 27 baselined, 0 new, 0 stale.
• mix test --warnings-as-errors: 1678/1679. The one failure is IdentifyTest "failed trigger restore", which fails only because the sandbox runs as root.
• Not run: firmware builds and on-device Bluetooth checks, which need cross toolchains and hardware.

---

Generated by Claude Code

[Copilot]

Copilot wasn't able to review any files in this pull request. Check if the Files changed in this pull request are included in default exclusions.