nerves_system_trellis

1Resolving Hex dependencies...2Resolution completed in 0.143s3Unchanged:4  basho_hamcrest 0.4.15  circular_buffer 1.1.06  decimal 2.4.1 VULNERABLE!7    EEF-CVE-2026-32686 (MEDIUM)8    aka: CVE-2026-32686, GHSA-rhv4-8758-jx7v9    Unbounded exponent in decimal enables unauthenticated DoS10    https://osv.dev/vulnerability/EEF-CVE-2026-3268611  ecto 3.13.612  elixir_make 0.10.013  interactive_cmd 0.1.414  nerves 2.0.0-pre.215  nerves_discovery 0.1.516  nerves_logging 0.2.417  nerves_runtime 0.13.1318  nerves_system_bbb 2.30.219  nerves_system_br 1.34.420  nerves_system_mangopi_mq_pro 0.17.221  nerves_system_qemu_aarch64 0.4.222  nerves_system_rpi0 2.1.223  nerves_system_rpi4 2.1.224  nerves_system_rpi5 2.1.225  nerves_system_trellis 0.5.026  nerves_system_x86_64 1.34.227  nerves_toolchain_aarch64_nerves_linux_gnu 15.3.128  nerves_toolchain_armv6_nerves_linux_gnueabihf 15.3.129  nerves_toolchain_armv7_nerves_linux_gnueabihf 15.3.130  nerves_toolchain_riscv64_nerves_linux_gnu 15.3.131  nerves_toolchain_x86_64_nerves_linux_musl 15.3.132  nerves_uevent 0.1.733  pooler 1.5.334  progress_bar 2.0.235  property_table 0.3.436  riak 1.1.637  riak_ecto3 0.5.038  riak_pb 2.3.239  riakc 2.5.340  ring_logger 0.11.741  tablet 0.3.342  telemetry 1.4.243  toolshed 0.5.044  uboot_env 1.0.245* Getting riak_ecto3 (Hex package)46* Getting nerves (Hex package)47* Getting ring_logger (Hex package)48* Getting toolshed (Hex package)49* Getting nerves_runtime (Hex package)50* Getting nerves_system_bbb (Hex package)51* Getting nerves_system_mangopi_mq_pro (Hex package)52* Getting nerves_system_qemu_aarch64 (Hex package)53* Getting nerves_system_rpi0 (Hex package)54* Getting nerves_system_rpi4 (Hex package)55* Getting nerves_system_rpi5 (Hex package)56* Getting nerves_system_trellis (Hex package)57* Getting nerves_system_x86_64 (Hex package)58* Getting nerves_system_br (Hex package)59* Getting nerves_toolchain_x86_64_nerves_linux_musl (Hex package)60* Getting nerves_toolchain_armv7_nerves_linux_gnueabihf (Hex package)61* Getting nerves_toolchain_aarch64_nerves_linux_gnu (Hex package)62* Getting nerves_toolchain_armv6_nerves_linux_gnueabihf (Hex package)63* Getting nerves_toolchain_riscv64_nerves_linux_gnu (Hex package)64* Getting nerves_logging (Hex package)65* Getting nerves_uevent (Hex package)66* Getting uboot_env (Hex package)67* Getting elixir_make (Hex package)68* Getting property_table (Hex package)69* Getting circular_buffer (Hex package)70* Getting interactive_cmd (Hex package)71* Getting nerves_discovery (Hex package)72* Getting tablet (Hex package)73* Getting ecto (Hex package)74* Getting progress_bar (Hex package)75* Getting riak (Hex package)76* Getting pooler (Hex package)77* Getting riakc (Hex package)78* Getting riak_pb (Hex package)79* Getting hamcrest (Hex package)80* Getting decimal (Hex package)81* Getting telemetry (Hex package)82Found packages with security advisories, see above for details83    warning: String.strip/1 is deprecated. Use String.trim/1 instead84    │85  4 │   @version File.read!("VERSION") |> String.strip86    │                                            ~87    │88    └─ /work/proj/deps_trellis/hamcrest/mix.exs:4:44: Hamcrest.Mixfile (module)8990    warning: String.strip/1 is deprecated. Use String.trim/1 instead91    │92  4 │   @version File.read!("VERSION") |> String.strip93    │                                            ~94    │95    └─ /work/proj/deps_trellis/riakc/mix.exs:4:44: Riakc.Mixfile (module)9697    warning: String.strip/1 is deprecated. Use String.trim/1 instead98    │99  4 │   @version File.read!("VERSION") |> String.strip100    │                                            ~101    │102    └─ /work/proj/deps_trellis/riak_pb/mix.exs:4:44: RiakPb.Mixfile (module)103104==> nerves_system_br105Generated nerves_system_br app106==> circular_buffer107Compiling 1 file (.ex)108Generated circular_buffer app109==> hamcrest110Compiling 3 files (.erl)111compile: warnings being treated as errors112src/hamcrest.erl:70:4: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.113Compile directive 'nowarn_deprecated_catch' can be used to suppress114warnings in selected modules.115%   70|   (catch assert_that(Value, MatchSpec, RunAfter)) == true.116%     |    ^117118compile: warnings being treated as errors119src/hamcrest_matchers.erl:263:33: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.120Compile directive 'nowarn_deprecated_catch' can be used to suppress121warnings in selected modules.122%  263|         matcher     = fun(X) -> catch(apply(Mod, Func, Args ++ [X])) == true end,123%     |                                 ^124125src/hamcrest_matchers.erl:278:33: 'catch ...' is deprecated; please use 'try ... catch ... end' instead.126Compile directive 'nowarn_deprecated_catch' can be used to suppress127warnings in selected modules.128%  278|         matcher     = fun(X) -> catch(apply(Mod, Func, [X|Args])) == true end,129%     |                                 ^130131could not compile dependency :hamcrest, "mix compile" failed. Errors may have been logged above. You can recompile this dependency with "mix deps.compile hamcrest --force", update it with "mix deps.update hamcrest" or clean it with "mix deps.clean hamcrest"