[elias-ba]

Description

This PR bumps plug_crypto from 2.2.0 to 2.2.1. The advisory is EEF-CVE-2026-105963, where passing a wrong-typed argument to Plug.Crypto puts the secret key base in the stack trace. mix hex.audit started failing on main this morning because of it, which takes the lint job down on main and on every open branch.

Nothing else moves. plug_crypto is a transitive dependency of plug and phoenix and both accept ~> 2.0, so only the one line in mix.lock changes.

Validation steps

1. mix deps.get && mix hex.audit. It exits clean, with only the three advisories we already ignore (cloak, cloak_ecto, cowlib).

Additional notes for the reviewer

1. Once this lands, open PRs need main merged in before their lint goes green.
2. The three ignored advisories are still sitting there, cloak at HIGH among them. Worth a separate look rather than carrying them forever.

AI Usage

Please disclose whether you've used AI anywhere in this PR (it's cool, we just
want to know!):

• I have used Claude Code
• I have used another model
• I have not used AI

You can read more details in our
Responsible AI Policy

Pre-submission checklist

• I have performed an AI review of my code (we recommend using /review
  with Claude Code)
• I have implemented and tested all related authorization policies.
  (e.g., :owner, :admin, :editor, :viewer)
• I have updated the changelog.
• I have ticked a box in "AI usage" in this PR

[github-actions]

Security Review ✅

• S0 (project scoping): N/A — no code changes; only a plug_crypto version bump in mix.lock:112 and a CHANGELOG entry.
• S1 (authorization): N/A — no web-layer or policy changes.
• S2 (audit trail): N/A — no new writes to config resources.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 91.5%. Comparing base (5341485) to head (0cecfee).

Additional details and impacted files

@@          Coverage Diff          @@
##            main   #5259   +/-   ##
=====================================
  Coverage   91.5%   91.5%           
=====================================
  Files        465     465           
  Lines      23787   23787           
=====================================
+ Hits       21764   21766    +2     
+ Misses      2023    2021    -2     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.