chore(deps): bump ash from 3.27.7 to 3.29.3 in the production-dependencies group across 1 directory

[dependabot]

Bumps the production-dependencies group with 1 update in the / directory: ash.

Updates ash from 3.27.7 to 3.29.3

Release notes

Sourced from ash's releases.

v3.29.3

Bug Fixes:

• scrub private arguments w/ string values by @​zachdaniel

v3.29.0

Features:

• add Ash.update_many/4 by Zach Daniel

Bug Fixes:

• look up field policies by calc_name when authorizing calculation sorts (#2754) by Jesse Williams [(#2754)](ash-project/ash#2754)

• ensure modules are loaded before optional callback checks (#2753) by Vasilis Spilka

• relate_actor with field: raises BadMapError for belongs_to (#2751) by diogomrts [(#2751)](ash-project/ash#2751)

Improvements:

• set upsert_action metadata in ETS and Mnesia by Zach Daniel

• allow partial identity join sorting (#2746) by Jechol Lee [(#2746)](ash-project/ash#2746)

• Make attribute_in delegate to one_of (#1713) (#2748) by nashjar000 [(#2748)](ash-project/ash#2748)

• Prompt to add use Ash.Domain when module exists but is not a domain (#2744) by gixtrem [(#2744)](ash-project/ash#2744)

Changelog

Sourced from ash's changelog.

v3.29.3 (2026-06-23)

Bug Fixes:

• scrub private arguments w/ string values by @​zachdaniel

Fixes CVE-2026-55736

v3.29.2 (2026-06-22)

Bug Fixes:

• properly retain override messages on list of errors by @​zachdaniel

• narrow input/2 spec to no_return for resources without actions (#2758) by diogomrts [(#2758)](ash-project/ash#2758)

• respect actor from scope: in bulk actions under require_actor? (#2757) by @​emadshaaban92 [(#2757)](ash-project/ash#2757)

• support uuidv7 generation when Ecto isn't started by @​zachdaniel

• ensure calc context is added to m2m through query by @​zachdaniel

Improvements:

• add explanatory comment on backwards compat config by @​zachdaniel

v3.29.1 (2026-06-14)

Bug Fixes:

• handle all hook types in update_many by @​zachdaniel

• require primary keys explicitly as update_many targets by @​zachdaniel

v3.29.0 (2026-06-14)

Features:

... (truncated)

Commits

• 1ae2cad chore: release version v3.29.3
• d9b3100 fix: scrub private arguments w/ string values
• d83c2e2 chore: update docs
• 451d648 chore: release version v3.29.2
• e52296e fix: properly retain override messages on list of errors
• 1cb230b fix: narrow input/2 spec to no_return for resources without actions (#2758)
• c2fb4f9 fix: respect actor from scope: in bulk actions under require_actor? (#2757)
• 6b2e8a5 fix: support uuidv7 generation when Ecto isn't started
• aaf10db fix: ensure calc context is added to m2m through query
• 2d5e9ed improvement: add explanatory comment on backwards compat config
• Additional commits viewable in compare view

[zachdaniel]

@dependabot rebase