Debugging a False-Positive Hex Advisory in an Elixir CI Pipeline

Introduction Recently, while working on a personal project in Elixir/Phoenix, I was performing what looked like a routine dependency update in an Elixir/Phoenix project: mix deps.update mint The comm