Bump finch from 0.21.0 to 0.23.0

[dependabot]

Bumps finch from 0.21.0 to 0.23.0.

Changelog

Sourced from finch's changelog.

v0.23.0 (2026-06-17)

Fixed

• Reject http and https request and pool URLs without hosts before attempting requests #371, fixes #186
• Drop :certs_keys, :certfile, and :keyfile from TCP transport options for HTTP requests to avoid :badarg errors #377
• Fix a race condition when dynamically starting pool supervisors that could return :pool_not_available while workers were still registering #379
• Make the HTTP/2 ALPN negotiation failure assertion compatible with OTP 29 TLS alert capitalization #378

Other

• Update development and test dependencies, including Mint 1.9 #378
• CI: update to Elixir 1.20.1 and Erlang/OTP 29.0.2 and fix Credo issues #378

v0.22.0 (2026-05-12)

Added

• Add a new :http2 configuration section with :wait_for_server_settings?, :ping_interval, :max_connection_age, and :max_connection_age_jitter support #354 #355 #364
• Add http+unix:// and https+unix:// URL scheme support for cleaner Unix socket pool configuration #351
• Add pool tagging support for connection pool isolation #342
• Add dynamic and user-managed pool APIs with Finch.start_pool/3, Finch.find_pool/2, and Finch.Pool.child_spec/1 #352
• Add Finch.is_request_ref/1 for matching async request refs in guards #350
• Add configurable pool worker selection strategies via :pool_strategy #359
• Add runtime pool resizing with Finch.get_pool_count/2 and Finch.set_pool_count/3 #362
• Add pid, max_concurrent_streams, and available_connections to pool metrics #362 #368
• Support {:stream, req_body_fun} request bodies in Finch.stream_while/5 on HTTP/1 #357 #360
• Encapsulate pool identity using a Finch.Pool struct #338
• Add Elixir 1.20 support #346

Changed

• Require Elixir v1.15 #358
• Refactor pool management to use per-pool supervisors and registry-backed tracking #344
• Pool metrics now return Finch.Pool.t() structs as keys and use ordered-set ETS tables for prefix lookups #342 #368
• Register only ready HTTP/2 connections, returning :pool_not_available when no connected pool is available #356
• Standardize error handling with Finch.error(), Finch.HTTPError, and Finch.TransportError #341
• Validate keyword options in Finch.build/5 and Finch.request/3 #365
• Use Mint 1.8 #341

Deprecated

• Deprecate {scheme, {:local, path}} tuple form in :pools, use URL strings (e.g. "http+unix:///path") instead #351

Removed

• Remove deprecated Finch.request/6 function, pool configuration options, and :max_idle_time_exceeded telemetry event #348

Fixed

... (truncated)

Commits

• 5841aa5 prepare release 0.23.0
• 0bd54bb mix format
• 9a514a7 refactor: extract Finch.URI.fetch_host!/1
• 1abf5a9 validate URL hosts before requests
• 5a454b7 Fix race condition when dynamically starting pool supervisors
• aba10e0 Bump CI to Elixir 1.20.1/OTP 29.0.2 and fix all credo issues
• a028a5e Update deps to latest and fix OTP 29 TLS test
• 9a6bdd1 Add certs_keys, certfile, keyfile to dropped TLS options
• 41def29 fix warning during mix docs
• 3191809 Merge pull request #372 from sneako/codex/prepare-0.22.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)