chore(deps): bump phoenix_live_view from 1.2.7 to 1.2.10

[dependabot]

Bumps phoenix_live_view from 1.2.7 to 1.2.10.

Release notes

Sourced from phoenix_live_view's releases.

v1.2.10

Bug fixes

• Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
• Handle writer errors like other upload entry errors (#4370)
• Cancel scheduled submit when auto upload is invalid (#3391)
• Fix max_entries not working properly with auto uploads (#2835)
• Fix testing file uploads with multiple entries (#3480)
• Remove native input required attribute when LiveView tracks uploads (#4377)
• Accept new drops afrer too_many_files with max_entries 1 (#3368)
• Fix runtime hook added node tracking (#4387)
• Preserve zero-duration JS transitions (#4385)
• Cancel submit in EntryUploader.error (#4382)
• Cancel infinite scroll throttle timers on destroy (#4384)
• Clear focus stack entries on view teardown (#4386)
• Fix join completion for empty recovery markup (#4390)
• Fix missing return after child join failure (#4391)
• Stop page loading when pushes fail (#4392)
• Ensure external metadata failures are reported consistently (#4397)

Enhancements

• Mark morphdom as dev dependency, as it is already included in the bundle
• Allow dynamically updating phx-hook attribute (#4153)
• Allow external uploads to be notified on cancel (#4395)
• Pass toEl to hook beforeUpdate (#3616)
• Improve error message when attributes have been defined after an embedded template (#4396)
• Add Phoenix.LiveView.navigation_type/2 (#4393)
• Cancel external uploads when navigating away (#4398)
• Allow to opt out of phx-remove cascade on navigation (#4394)
• Make phx-drop-target-active more reliable (#4399)

v1.2.9

Security fixes

• CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

• Fix live components being wrongly destroyed in some rare cases (#4350)
• Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

• Add internal debug tooling to customize clientside rendering (#4364)

v1.2.8

... (truncated)

Changelog

Sourced from phoenix_live_view's changelog.

v1.2.10 (2026-08-20)

Bug fixes

• Preserve onReply exceptions in hook pushEvent / pushEventTo (#4381)
• Handle writer errors like other upload entry errors (#4370)
• Cancel scheduled submit when auto upload is invalid (#3391)
• Fix max_entries not working properly with auto uploads (#2835)
• Fix testing file uploads with multiple entries (#3480)
• Remove native input required attribute when LiveView tracks uploads (#4377)
• Accept new drops afrer too_many_files with max_entries 1 (#3368)
• Fix runtime hook added node tracking (#4387)
• Preserve zero-duration JS transitions (#4385)
• Cancel submit in EntryUploader.error (#4382)
• Cancel infinite scroll throttle timers on destroy (#4384)
• Clear focus stack entries on view teardown (#4386)
• Fix join completion for empty recovery markup (#4390)
• Fix missing return after child join failure (#4391)
• Stop page loading when pushes fail (#4392)
• Ensure external metadata failures are reported consistently (#4397)

Enhancements

• Mark morphdom as dev dependency, as it is already included in the bundle
• Allow dynamically updating phx-hook attribute (#4153)
• Allow external uploads to be notified on cancel (#4395)
• Pass toEl to hook beforeUpdate (#3616)
• Improve error message when attributes have been defined after an embedded template (#4396)
• Add Phoenix.LiveView.navigation_type/2 (#4393)
• Cancel external uploads when navigating away (#4398)
• Allow to opt out of phx-remove cascade on navigation (#4394)
• Make phx-drop-target-active more reliable (#4399)

v1.2.9 (2026-08-10)

Security fixes

• CVE-2026-64941: Fix open redirect in redirect/2 via ASCII tab, LF and CR

Bug fixes

• Fix live components being wrongly destroyed in some rare cases (#4350)
• Ensure parent navigation succeeds with a blocked child (#4359)

Enhancements

• Add internal debug tooling to customize clientside rendering (#4364)

v1.2.8 (2026-07-27)

... (truncated)

Commits

• d7f327c Release v1.2.10
• 6478d74 Update assets
• 9b17baa Make phx-drop-target-active more reliable (#4399)
• ab146f5 Clarify extrnal upload testing
• 4bbf786 Update assets
• 2f898ad Allow to opt out of phx-remove cascade on navigation (#4394)
• 3c3c21d Update assets
• 0502158 Cancel external uploads when navigating away (#4398)
• e20f64a Clarify LiveViewTest.form merging behaviour
• f9c0942 Mention the need to delete node_modules symlink
• Additional commits viewable in compare view

[ftes]

@dependabot rebase