Use :public_key.cacerts_get, closes #6066 (#6067)

* Use :public_key.cacerts_get, closes #6066

* Bump OTP

.github/workflows/ci.yml

@@ -15,7 +15,7 @@ jobs:
       matrix:
         include:
           - elixir: 1.15.8
-            otp: 24.3.4.17
+            otp: 25.3.2.9
 
           - elixir: 1.17.3
             otp: 27.2
@@ -107,7 +107,7 @@ jobs:
         include:
           # look for correct alpine image here: https://hub.docker.com/r/hexpm/elixir/tags
           - elixir: 1.15.8
-            otp: 24.3.4.17
+            otp: 25.3.2.9
             suffix: "alpine-3.20.3"
 
           - elixir: 1.17.3

CHANGELOG.md

@@ -1,5 +1,7 @@
 # Changelog for v1.8
 
+This release requires Erlang/OTP 25+.
+
 ## v1.7
 
 The CHANGELOG for v1.7 releases can be found in the [v1.7 branch](https://github.com/phoenixframework/phoenix/blob/v1.7/CHANGELOG.md).

lib/mix/tasks/phx.gen.release.ex

@@ -294,7 +294,7 @@ defmodule Mix.Tasks.Phx.Gen.Release do
     http_options = [
       ssl: [
         verify: :verify_peer,
-        cacertfile: String.to_charlist(CAStore.file_path()),
+        cacerts: :public_key.cacerts_get(),
         depth: 3,
         customize_hostname_check: [
           match_fun: :public_key.pkix_verify_hostname_match_fun(:https)

mix.exs

@@ -88,8 +88,6 @@ defmodule Phoenix.MixProject do
 
       # TODO Drop phoenix_view as an optional dependency in Phoenix v2.0
       {:phoenix_view, "~> 2.0", optional: true},
-      # TODO Drop castore when we require OTP 25+ / Elixir v1.17+
-      {:castore, ">= 0.0.0"},
 
       # Optional deps
       {:plug_cowboy, "~> 2.7", optional: true},