-
Notifications
You must be signed in to change notification settings - Fork 19
Update dependency laravel/framework to v10 [SECURITY] #731
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
renovate
wants to merge
1
commit into
develop
Choose a base branch
from
renovate/packagist-laravel-framework-vulnerability
base: develop
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Open
Update dependency laravel/framework to v10 [SECURITY] #731
renovate
wants to merge
1
commit into
develop
from
renovate/packagist-laravel-framework-vulnerability
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
72c436c to
156b084
Compare
156b084 to
583dc7f
Compare
583dc7f to
cf2837c
Compare
cf2837c to
3ec3395
Compare
3ec3395 to
f395db3
Compare
f395db3 to
345d832
Compare
345d832 to
9185703
Compare
9185703 to
0dd09ad
Compare
0dd09ad to
3db7baf
Compare
3db7baf to
305573c
Compare
305573c to
63e9112
Compare
63e9112 to
c75b78d
Compare
c75b78d to
1735adf
Compare
1735adf to
5233a6c
Compare
5233a6c to
c198266
Compare
87f7186 to
cb0cae4
Compare
cb0cae4 to
45e7a1a
Compare
45e7a1a to
3cd2c88
Compare
3cd2c88 to
0f5b664
Compare
0f5b664 to
ead7b78
Compare
ead7b78 to
d782450
Compare
d782450 to
31cc922
Compare
31cc922 to
17d3ffd
Compare
17d3ffd to
8ffba76
Compare
8ffba76 to
c505d7e
Compare
c505d7e to
7cd50e3
Compare
7cd50e3 to
e25a4bf
Compare
e25a4bf to
4e92362
Compare
4e92362 to
bc7646a
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
None yet
0 participants
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^8→^10GitHub Vulnerability Alerts
CVE-2025-27515
When using wildcard validation to validate a given file or image field array (
files.*), a user-crafted malicious request could potentially bypass the validation rules.Release Notes
laravel/framework (laravel/framework)
v10.48.29Compare Source
v10.48.28Compare Source
v10.48.27Compare Source
v10.48.26Compare Source
league/commonmarkby @crynobone in #53829v10.48.25Compare Source
v10.48.24Compare Source
v10.48.23Compare Source
v10.48.22Compare Source
v10.48.21Compare Source
whereDate,whereDay,whereMonth,whereTime,whereYearandwhereJsonLengthto ignore invalid$operatorby @crynobone in #52704v10.48.20Compare Source
v10.48.19Compare Source
Model::resolveRouteBindingQueryby @sebj54 in #52339Factory::afterCreatingcallable argument type by @villfa in #52335v10.48.18Compare Source
v10.48.17Compare Source
v10.48.16Compare Source
v10.48.15Compare Source
HttpResponseExceptionby @hafezdivandari in #51986v10.48.14Compare Source
Commandclass by @crynobone in #51824shift()on an empty collection by @Treggats in #51841schema:dumpwill dump the migrations table only if it exists by @NickSdot in #51827v10.48.13Compare Source
Enumerable unless()$callback parameter optional by @faissaloux in #51701Enumerable unless()$callback parameter optional" by @taylorotwell in #51707v10.48.12Compare Source
BackedEnumby @CAAHS in #51586v10.48.11Compare Source
EmailTagsargument by @Tietew in #51352apaon non ASCII characters by @faissaloux in #51428app()Foundation helper onViewServiceProviderby @rodrigopedra in #51522v10.48.10Compare Source
v10.48.9Compare Source
v10.48.8Compare Source
orderByRaw()in query before usingcursorPaginate()by @axlon in #51023v10.48.7Compare Source
95ef230v10.48.6Compare Source
v10.48.5Compare Source
serializeAndRestore()toNotificationFakeby @dbpolito in #50935v10.48.4Compare Source
Collection::concat()return type by @axlon in #50669v10.48.3Compare Source
v10.48.2Compare Source
v10.48.1Compare Source
v10.48.0Compare Source
Expressionat more places in Query Builder by @pascalbaljet in #50402Illuminate\Mail\Mailables\Envelopedocblock by @crynobone in #50448FileSystem.phpby @gcazin in #50459v10.47.0Compare Source
Str::apa()" fix by @osbre in #503400TTL by @kayw-geek in #50359whereAllandwhereAnymethods to the query builder by @musiermoore in #50344v10.46.0Compare Source
Conditionablein enum rule by @michaelnabil230 in #50257v10.45.1Compare Source
v10.45.0Compare Source
Stringablephpdoc by @milwad-dev in #50075Collection::select()to work onArrayAccessby @axlon in #50072beforeto thePendingBatchby @xiCO2k in #50058Illuminate\Support\Str::fromBase64()return type by @SamAsEnd in #50108v10.44.0Compare Source
getPreviousUrlFromSessionmethod in UrlGenerator by @milwad-dev in #49944setAbly()method forAblyBroadcasterby @Rijoanul-Shanto in #49981toBase64()andfromBase64()methods to Stringable and Str classes by @mtownsend5512 in #49984Throwableimport and handle iforiginalExceptionHandlerororiginalDeprecationHandlerproperty isn't used by alternative TestCase by @crynobone in #50021Arr::take()helper by @ryangjchandler in #50015GeneratorCommandby @xurshudyan in #50043v10.43.0Compare Source
\Illuminate\Log\LogManagermethod definition comments with\Psr\Logger\Interfaceby @eusonlito in #49805hasIndex()and minor Schema enhancements by @hafezdivandari in #49796BelongsToManyrelation when usingwithoutTouchingby @mateusjunges in #49798insertOrIgnoreUsingfor Eloquent by @trovster in #49827hasIndex()Order-sensitive by @hafezdivandari in #49840$guardedby @eusonlito in #49851beforeStartingTransactioncallback and use it inLazilyRefreshDatabaseby @pascalbaljet in #49853FormRequest@getRules()method by @cosmastech in #49860Translatormay incorrectly report the locale of a missing translation key by @VicGUTT in #49900v10.42.0Compare Source
File::hasSameHash()by @simonhamp in #49721Carbonif accessed from Laravel or also usesilluminate/supportby @crynobone in #49772Str::unwrapby @stevebauman in #49779v10.41.0Compare Source
thresholdparameter to theNumber::spellhelper by @caendesilva in #49610php artisan model:pruneby @dbhynds in #49617ensureIntlExtensionIsInstalledinNumberclass. by @devajmeireles in #49660Numberclass. by @devajmeireles in #49681v10.40.0Compare Source
Model::preventAccessingMissingAttributes()raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in #49480Arr::dot()method to properly handle indexes array by @kayw-geek in #49507Number::clampby @jbrooksuk in #49512RedisCluster::client()call by @tillkruss in #49560PhpRedisConnectorby @tillkruss in #49559where*()methods ofIlluminate\Database\Query\Builderby @lorenzolosa in #49599InteractsWithTimetrait method by @xurshudyan in #49601assertCounttest helper by @xurshudyan in #49609v10.39.0Compare Source
maxTriesfor queued jobs by @mechelon in #49473v10.38.2Compare Source
conflictfordoctrine/dbal:^4.0toilluminate/databaseby @crynobone in #49456v10.38.1Compare Source
Illuminate\Foundation\Application::joinPaths()toIlluminate\Filesystem\join_paths()by @crynobone in #49433v10.38.0[Com
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.