Release v1.20.5

Author: josevalim

CHANGELOG.md

@@ -192,28 +192,42 @@ It also introduces a new compiler option called `:module_definition`, which if t
 
 You can enable it by setting `elixirc_options: [module_definition: :interpreted]` in your `mix.exs`.
 
-## v1.20.5-dev
+## v1.20.5 (2026-10-29)
 
-### 1. Enhancements
+### 1. Security
+
+#### Elixir
+
+* [URI] Bind port limits during `URI.parse` (CVE-2026-109821)
+* [JSON] Raise when decoding integers in JSON beyond float64 ranges (CVE-2026-115274)
+
+#### Mix
+
+* [mix deps.partition] Validate `deps.partition` configuration with checksum on multi-user systems (CVE-2026-97209)
+
+### 2. Enhancements
 
 #### Elixir
 
   * [Calendar.ISO] Optimize `Calendar.ISO.parse_duration/1`
   * [Kernel] Improve boot time by parsing the Erlang/OTP release with `list_to_integer/1`
 
-### 2. Bug fixes
+### 3. Bug fixes
 
 #### Elixir
 
   * [Date] Fix `Date.from_gregorian_days/2` passing an invalid day fraction to non-ISO calendars
   * [Duration] Fix `Duration.from_iso8601/1` accepting a fractional seconds component after whole seconds, such as `PT1S2.5S`
   * [Duration] Reject inputs longer than 192 bytes in `Duration.from_iso8601/1`
   * [Regex] Raise `SystemLimitError` when a match reaches the regex engine match limit, instead of returning no match
+  * [Registry] Do not crash on timeouts on `Registry.lock/3`
   * [String] Skip U+055F (Armenian abbreviation mark) when applying the Greek final sigma rule in `String.downcase/2` and `String.capitalize/2`
+  * [Task] Do not leak timeout messages on `Task.async_stream/3`
 
 #### IEx
 
   * [IEx] Do not halt the remote node when the remote shell receives EOF with `--remsh`
+  * [IEx] Fix crash on tab completion when shell is not found
 
 #### Mix
 

VERSION

@@ -1 +1 @@
-1.20.4
+1.20.5

bin/elixir

@@ -6,7 +6,7 @@
 
 set -e
 
-ELIXIR_VERSION=1.20.4
+ELIXIR_VERSION=1.20.5
 
 if [ $# -eq 0 ] || { [ $# -eq 1 ] && { [ "$1" = "--help" ] || [ "$1" = "-h" ]; }; }; then
   cat <<USAGE >&2

bin/elixir.bat

@@ -4,7 +4,7 @@
 :: SPDX-FileCopyrightText: 2021 The Elixir Team
 :: SPDX-FileCopyrightText: 2012 Plataformatec
 
-set ELIXIR_VERSION=1.20.4
+set ELIXIR_VERSION=1.20.5
 
 if    ""%1""==""""                if ""%2""=="""" goto documentation
 if /I ""%1""==""--help""          if ""%2""=="""" goto documentation