chore(deps): update dependency laravel/framework to v11.31.0 [security] #19
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
11.21.0->11.31.0GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv phpdirective is set toon, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
Release Notes
laravel/framework (laravel/framework)
v11.31.0Compare Source
useCascadeTruncatemethod forPostgresGrammarby @korkoshko in https://github.com/laravel/framework/pull/53343URL::forceHttps()to enforce HTTPS scheme for URLs by @dasundev in https://github.com/laravel/framework/pull/53381whereFullTextcase consistency by @parth391 in https://github.com/laravel/framework/pull/53395HasFactorytrait tomake:modelgeneration command using--alloptions by @adel007gh in https://github.com/laravel/framework/pull/53391Mail::buildby @stevebauman in https://github.com/laravel/framework/pull/53411AddLinkHeadersForPreloadedAssetsmiddleware by @jnoordsij in https://github.com/laravel/framework/pull/53463DB::buildmethod by @stevebauman in https://github.com/laravel/framework/pull/53464Cache::buildby @stevebauman in https://github.com/laravel/framework/pull/53454v11.30.0Compare Source
$bindparameter toBlade::directiveby @hossein-zare in https://github.com/laravel/framework/pull/53279trans_choice()when translation replacement include|separator by @crynobone in https://github.com/laravel/framework/pull/53331exists()instead ofcount()by @browner12 in https://github.com/laravel/framework/pull/53328vectorColumn Type by @akr4m in https://github.com/laravel/framework/pull/53316dropColumnsIfExists,dropColumnIfExistsanddropForeignIfExistsby @eusonlito in https://github.com/laravel/framework/pull/53305dropColumnsIfExists,dropColumnIfExistsanddropForeignIfExists" by @taylorotwell in https://github.com/laravel/framework/pull/53338HasUniqueStringIdsby @cosmastech in https://github.com/laravel/framework/pull/53280v11.29.0Compare Source
Js::from(collect());by @crynobone in https://github.com/laravel/framework/pull/53206castAsJson()on non default db connection during test by @crynobone in https://github.com/laravel/framework/pull/53256waitUntilmethod toProcessby @xurshudyan in https://github.com/laravel/framework/pull/53236$previousLCurrencyto$previousCurrencyfor clarity and consistency by @mdariftiens in https://github.com/laravel/framework/pull/53261v11.28.1Compare Source
ViewMakeCommandby @GrahamCampbell in https://github.com/laravel/framework/pull/53174PHP_CLI_SERVER_WORKERSon Windows environment by @crynobone in https://github.com/laravel/framework/pull/53178enum_value()function instead of only empty string by @crynobone in https://github.com/laravel/framework/pull/53181v11.28.0Compare Source
nullas default cursor value for PHP Redis by @jayan-blutui in https://github.com/laravel/framework/pull/53095Illuminate\Support\enum_valueto resolveBackedEnumorUnitEnumto scalar by @crynobone in https://github.com/laravel/framework/pull/53096throw_ifandthrow_unlessto reflect actual behavior with "falsey" values by @crishoj in https://github.com/laravel/framework/pull/53154wherewith array respects boolean by @timacdonald in https://github.com/laravel/framework/pull/53147throw_*helpers by @crishoj in https://github.com/laravel/framework/pull/53164ProcessPoolResultsby @Riley19280 in https://github.com/laravel/framework/pull/53160v11.27.2Compare Source
queue:workCommand by @crynobone in https://github.com/laravel/framework/pull/53076ServiceProvider::optimizes()by @crynobone in https://github.com/laravel/framework/pull/53074v11.27.1Compare Source
v11.27.0Compare Source
Illuminate\Support\php_binary()by @crynobone in https://github.com/laravel/framework/pull/53008Schema::hasTable()performance by @hafezdivandari in https://github.com/laravel/framework/pull/53006Str::inlineMarkdown()by @ryangjchandler in https://github.com/laravel/framework/pull/53033make:modelfor Form Requests by @joshmanders in https://github.com/laravel/framework/pull/53052shouldConvertToBooleanwhen parameter uses dot notation by @bytestream in https://github.com/laravel/framework/pull/53048--jsonflag toqueue:workcommand for structured logging by @josecl in https://github.com/laravel/framework/pull/52887v11.26.0Compare Source
Enumerable::implode()by @devfrey in https://github.com/laravel/framework/pull/52937RateLimiter&RateLimitedmiddleware by @sethsandaru in https://github.com/laravel/framework/pull/52935REMOTE_ADDRnot working in Swoole by @chuoke in https://github.com/laravel/framework/pull/52889[@include](https://redirect.github.com/include)('vendor/autoload.php')via Laravel Envoy by @s-damian in https://github.com/laravel/framework/pull/52974make:job-middlewareartisan command by @dshafik in https://github.com/laravel/framework/pull/52965v11.25.0Compare Source
ResponseType to \Symfony\Component\HttpFoundation\Response by @kayw-geek in https://github.com/laravel/framework/pull/52915routes/console.phpas this will cause breaking change with the defaultwithRouting($console)by @crynobone in https://github.com/laravel/framework/pull/52942v11.24.1Compare Source
defer()function return type by @staudenmeir in https://github.com/laravel/framework/pull/52910ExecutableFinderimport by @InfinityXTech in https://github.com/laravel/framework/pull/52912v11.24.0Compare Source
$namevariable in non base config file becomes it's key by @rojtjo in https://github.com/laravel/framework/pull/52738BackedEnumto be passed toRoute::can()by @Omegadela in https://github.com/laravel/framework/pull/52792ConcurrencyConfiguration Index Name by @devajmeireles in https://github.com/laravel/framework/pull/52788withoutPretendingmethod properly resets state after callback execution by @xurshudyan in https://github.com/laravel/framework/pull/52794ProcessDriver[@​defer](https://redirect.github.com/defer)()toProcessDriver[@​run](https://redirect.github.com/run)()method by @rodrigopedra in https://github.com/laravel/framework/pull/52807Concurrency\ProcessDriverby @rodrigopedra in https://github.com/laravel/framework/pull/52813Illuminate\Support\deferfunction by @crynobone in https://github.com/laravel/framework/pull/52801laravel/serializable-closureon Database component by @crynobone in https://github.com/laravel/framework/pull/52835Processfakes by @jasonmccreary in https://github.com/laravel/framework/pull/52840laravel/promptsv0.2 by @crynobone in https://github.com/laravel/framework/pull/52849[@throws](https://redirect.github.com/throws)section to Concurrency manager doc block by @rnambaale in https://github.com/laravel/framework/pull/52856routes/console.phpby @SamuelNitsche in https://github.com/laravel/framework/pull/52867touchesParents()for chaperoned models by @samlev in https://github.com/laravel/framework/pull/52883Cache::flexibleimprovements by @timacdonald in https://github.com/laravel/framework/pull/52891\DateTimeInterfaceand\DateIntervalto type forCache::flexible()by @bram-pkg in https://github.com/laravel/framework/pull/52888v11.23.5Compare Source
route:cachewith ServeFile by @crynobone in https://github.com/laravel/framework/pull/52781v11.23.4Compare Source
whereDate,whereDay,whereMonth,whereTime,whereYearandwhereJsonLengthto ignore invalid$operatorby @crynobone in https://github.com/laravel/framework/pull/52704v11.23.3Compare Source
Application::routesAreCached()when application doesn't implementsCachesRoutescontract. by @crynobone in https://github.com/laravel/framework/pull/52761v11.23.2Compare Source
v11.23.1Compare Source
v11.23.0Compare Source
everyThirtyMinutescron expression by @SamuelNitsche in https://github.com/laravel/framework/pull/52662Skipmiddleware for Queue Jobs by @KennedyTedesco in https://github.com/laravel/framework/pull/52645withoutDelay()to PendingDispatch by @KennedyTedesco in https://github.com/laravel/framework/pull/52696Container::getInstance()to use null coalescing assignment by @xurshudyan in https://github.com/laravel/framework/pull/52693Eloquent\Collection::findOrFailby @stevebauman in https://github.com/laravel/framework/pull/52690confirmedvalidator rule by @jwpage in https://github.com/laravel/framework/pull/52722$guardsfrom array to string by @kayw-geek in https://github.com/laravel/framework/pull/52719Tagattribute by @TijmenWierenga in https://github.com/laravel/framework/pull/52743Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.