Bump the mix-minor-and-patch group with 2 updates

[dependabot]

Bumps the mix-minor-and-patch group with 2 updates: phoenix and tzdata.

Updates phoenix from 1.8.13 to 1.8.14

Release notes

Sourced from phoenix's releases.

v1.8.14

Bug fixes

• Fix timer leak in LongPoll fetch requests (only used in service or web workers) (#6811)

Enhancements

• Raise when :router given to use Phoenix.VerifiedRoutes is not a compile time literal (#6806)
• Align nil host handling in endpoint configuration and transport
• Unify path validation for static paths, verified routes and redirects

Changelog

Sourced from phoenix's changelog.

v1.8.14 (2026-09-14)

Bug fixes

• Fix timer leak in LongPoll fetch requests (only used in service or web workers) (#6811)

Enhancements

• Raise when :router given to use Phoenix.VerifiedRoutes is not a compile time literal (#6806)
• Align nil host handling in endpoint configuration and transport
• Unify path validation for static paths, verified routes and redirects

Commits

• 96085e9 Release v1.8.14
• d02186d Update assets
• 64fc7a3 unify path validation (#6840)
• 47b354d align nil host handling in endpoint and transport (#6839)
• 7308b10 chore: rename secret to salt (#6813)
• 0940e49 Fix timer leak in Ajax fetch requests (#6811)
• b800c67 fix doc references (#6809)
• 42ff8e1 phx.gen.release: simplify Debian version parsing and usage (#6807)
• 0a860a0 Raise when :router given to use Phoenix.VerifiedRoutes is not a literal (#6...
• 39da0f7 Add filter and sort query parameters to Bob Web UI links (#6805)
• Additional commits viewable in compare view

Updates tzdata from 1.1.5 to 1.2.0

Changelog

Sourced from tzdata's changelog.

[1.2.0] - 2026-09-13

Added

• Parse the IANA factory source file, adding the placeholder Factory zone (previously omitted) to the zone list.

Changed

• Now requires Elixir 1.12 or greater instead of 1.9 or greater.
• Hackney is no longer a mandatory dependency. When :http_client isn't configured explicitly, Tzdata now automatically picks the best available HTTP client: the built-in :httpc, verifying certificates via :public_key.cacerts_get/0 (the OS-trusted CA bundle), when that's usable (Erlang/OTP 25+); otherwise Hackney, if it's present as a dependency; otherwise :httpc is still used but automatic updates are skipped with a warning rather than downloading without verification. See the README's "HTTP client and security" section for details.
• Debug log messages for downloading new data now include the name of the HTTP client in use (e.g. httpc or hackney).
• tzdata release version shipped with this library is now 2026d instead of 2026c.

Deprecated

• Hackney support is deprecated and will be removed in a future release. Using Tzdata.HTTPClient.Hackney now logs a warning. It is strongly recommended to use Erlang/OTP 25 or higher, where the built-in :httpc client is used by default and no HTTP client dependency is needed.

Fixed

• Fix incorrect or spurious historical time zone periods (wrong or blank abbreviations before a zone's earliest rule, and redundant zero-effect periods at zone-line boundaries) affecting many zones, including America/Regina, America/Chicago, America/Edmonton, America/Inuvik, Antarctica/Troll, America/Chihuahua, America/Argentina/Buenos_Aires, Europe/Dublin, Europe/Vienna, Europe/Istanbul, and most former Soviet zones.

Commits

• 13a96b8 Changes for release 1.2.0 (#187)
• 8a13e8e Update 2026d.v2.ets to include factory
• fa9451b Apply Elixir formatting
• 6a49478 Make .formatter.exs normal
• 0b1ffd0 Add Factory zone (#186)
• 0568984 Formatting
• f1c60e6 Bump ets file to 2026d (#185)
• a9cfad6 Update test/tzdata_fixtures/source_data to 2026d versions and tests
• 519a1c8 Fix test
• b9a2afc Show HTTP client name in logs
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions