chore(deps): update phoenix_storybook and mint (security)

[zorn]

Summary

Routine dependency update. Bumps phoenix_storybook 1.3.0 → 1.4.0 and, while
verifying, mint surfaced a HIGH/MEDIUM security advisory, so this also takes
the transitive mint 1.9.3 → 1.10.0 fix. No application code changes were
required; mix precommit passes.

Direct Dependencies

phoenix_storybook 1.3.0 → 1.4.0
diff · changelog

• feature: storybook's layout has been updated and can be themed
• feature: open the displayed source file in an editor
• improvement: updated generated core component stories for Phoenix 1.8
• bugfix: fixed compile warnings surfaced by Elixir's gradual type checker
• bugfix: compute host asset hashes at runtime instead of compile time
• bugfix: relative :content_path values are resolved from the Mix project cwd at runtime
• bugfix: prevent the event logs tab from collapsing

Transitive Dependencies

mint 1.9.3 → 1.10.0 — diff · changelog — security fix (no breaking changes)

• security: bound HTTP/1 status-line and chunk-extension line sizes, fixing unbounded buffering memory-exhaustion DoS — CVE-2026-82728 (GHSA-g83f-2j6r-q6m4)
• security: bound the chunked-response chunk-size field, fixing quadratic chunk-size parsing CPU-exhaustion DoS — CVE-2026-82729 (GHSA-7p8w-j234-7qc8)
• feature: support processing HTTP/1.1 headers as they arrive; add HTTPS-proxy support for HTTPS connections