chore(deps): bump mint from 1.9.3 to 1.10.0 in /elixir-orchestration

[dependabot]

Bumps mint from 1.9.3 to 1.10.0.

Changelog

Sourced from mint's changelog.

v1.10.0

This is a minor version bump with no breaking changes. Please do upgrade from 1.9.x versions as it contains fixes for two recently-published CVEs.

Security fixes:

• Set bounds for a HTTP/1 server's returned status line and chunk-extension line. Previous, Mint.HTTP1 would parse these without any size cap, allowing a malicious actor to stream bytes indefinitely, exhausting the client's host memory. This is a fix for CVE-2026-82728 (GitHub advisory GHSA-g83f-2j6r-q6m4).
• Set a bound for chunked responses chunk-size field in Mint.HTTP1, which prevents an attack where the malicious actor could send a chunk size made of a huge run of hex digits and burn CPU on the client host. This is a fix for CVE-2026-82729 (GitHub advisory GHSA-7p8w-j234-7qc8).

New features:

• Support processing HTTP/1.1 headers as they arrive.
• Add support for HTTPS proxies for HTTPS connections.

Bug fixes:

• Send origin Host header for plain-HTTP proxied requests.
• Fix CONNECT response framing and IPv6 authority in tunnel proxies.
• Fix a bug where we would "leak" target options into the proxy connection in forward-proxy mode.
• Return a tunnel timeout error when the CONNECT deadline elapses.
• Fix hostname/address handling in tunnel proxiesFix hostname/address handling in tunnel proxies.
• Use the request target as the CONNECT :authority in Mint.HTTP2.

Commits

• 75c8be1 Release v1.10.0
• bd2a4e7 Merge commit from fork
• 19be555 Merge commit from fork
• d996244 Support processing HTTP/1.1 headers as they arrive (#499)
• 312574b Sort generated functions for deterministic builds (#500)s
• 99ebaca Fix typo in Mint.HTTP docs (#498)
• 7719dd2 Use the request target as the CONNECT :authority in Mint.HTTP2 (#497)
• d9e1824 Fix hostname/address handling in tunnel proxies (#496)
• bc24618 Return a tunnel timeout error when the CONNECT deadline elapses (#495)
• 16d6b56 Add support for HTTPS proxies for HTTPS connections (#492)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 598e0818-5b5a-4e2c-b889-93bc8ec164d3

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}