Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependency laravel/framework to v8.83.28 #18

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

@mend-for-github-com mend-for-github-com bot commented Oct 31, 2024

This PR contains the following updates:

Package Type Update Change
laravel/framework (source) require minor 8.1.0 -> 8.83.28

By merging this PR, the issue #8 will be automatically resolved and closed:

Severity CVSS Score CVE
Critical Critical 9.8 CVE-2021-43617
High High 7.2 CVE-2021-21263
Medium Medium 5.3 CVE-2021-43808
Low Low 0.0 CVE-2024-52301

Release Notes

laravel/framework (laravel/framework)

v8.83.28

Compare Source

v8.83.27

Compare Source

Fixed
  • Fixed email verification request (#​45227)

v8.83.26

Compare Source

Fixed
  • Fixes controller computed middleware (#​44454)

v8.83.25

Compare Source

Added
  • Added Illuminate/Routing/Route::flushController() (#​44393)

v8.83.24

Compare Source

Fixed
  • Avoid Passing null to parameter exception on PHP 8.1 (#​43951)
Changed
  • Patch for timeless timing attack vulnerability in user login (#​44069)

v8.83.23

Compare Source

Fixed
  • Fix DynamoDB locks with 0 seconds duration (#​43365)

v8.83.22

Compare Source

Revert

v8.83.21

Compare Source

Revert

v8.83.20

Compare Source

Fixed
  • Fixed transaction attempts counter for sqlsrv (#​43176)
Changed
  • Clear Facade resolvedInstances in queue worker resetScope callback (#​43215)
  • Protect against ambiguous columns (#​43278)

v8.83.19

Compare Source

Fixed
  • Fixed forceCreate on MorphMany not returning newly created object (#​42996)
  • Prevent double throwing chained exception on sync queue (#​42950)
Changed
  • Disable Column Statistics for php artisan schema:dump on MariaDB (#​43027)

v8.83.18

Compare Source

Fixed
  • Fixed bug on forceCreate on a MorphMay relationship not including morph type (#​42929)
  • Handle cursor paginator when no items are found (#​42963)
  • Fixed Str::Mask() for repeating chars (#​42956)

v8.83.17

Compare Source

Added
  • Apply where's from union query builder in cursor pagination (#​42651)
  • Handle collection creation around a single enum (#​42839)
Fixed
  • Fixed Request offsetExists without routeResolver (#​42754)
  • Fixed: Loose comparison causes the value not to be saved (#​42793)

v8.83.16

Compare Source

Fixed
  • Free reserved memory before handling fatal errors (#​42630, #​42646)
  • Prevent $mailer being reset when testing mailables that implement ShouldQueue (#​42695)

v8.83.15

Compare Source

Reverted
Changed
  • Retain the original attribute value during validation of an array key with a dot for correct failure message (#​42395)

v8.83.14

Compare Source

Fixed
  • Add flush handler to output buffer for streamed test response (bugfix) (#​42481)
Changed
  • Use duplicate instead of createFromBase to clone request when routes are cached (#​42420)

v8.83.13

Compare Source

Fixed
  • Fix PruneCommand finding its usage within other traits (#​42350)
Changed
  • Consistency between digits and digits_between validation rules (#​42358)
  • Corrects the use of "failed_jobs" instead of "job_batches" in BatchedTableCommand (#​42389)

v8.83.12

Compare Source

Fixed
  • Fixed multiple dots for digits_between rule (#​42330)
Changed
  • Enable to modify HTTP Client request headers when using beforeSending() callback (#​42244)
  • Set relation parent key when using forceCreate on HasOne and HasMany relations (#​42281)

v8.83.11

Compare Source

Fixed
  • Fix refresh during down in the stub (#​42217)
  • Fix deprecation issue with translator (#​42216)

v8.83.10

Compare Source

Fixed
  • Fix schedule:work command Artisan binary name (#​42083)
  • Fix array keys from cached routes in Illuminate/Routing/CompiledRouteCollection::getRoutesByMethod() (#​42078)
  • Fix json_last_error issue with Illuminate/Http/JsonResponse::setData (#​42125)

v8.83.9

Compare Source

Fixed
  • Backport Fix PHP warnings when rendering long blade string (#​41970)

v8.83.8

Compare Source

Added
  • Added multibyte support to string padding helper functions (#​41899)
Fixed
  • Fixed seeder property for in-memory tests (#​41869)

v8.83.7

Compare Source

Fixed
  • Backport - Fix trashed implicitBinding with child with no softdelete (#​41814)
  • Fix assertListening check with auto discovery (#​41820)

v8.83.6

Compare Source

Fixed
  • Stop throwing LazyLoadingViolationException for recently created model instances (#​41549)
  • Close doctrineConnection on disconnect (#​41584)
  • Fix require fails if is_file cached by opcache (#​41614)
  • Fix collection nth where step <= offset (#​41645)

v8.83.5

Compare Source

Fixed
  • Backport dynamically access batch options (#​41361)
  • Fixed get and head options in Illuminate/Http/Client/PendingRequest.php (23ff879)

v8.83.4

Compare Source

Added
  • Added Illuminate/Bus/Batch::__get() (#​41361)
Fixed
  • Fixed get and head options in Illuminate/Http/Client/PendingRequest (23ff879)

v8.83.3

Compare Source

Fixed

v8.83.2

Compare Source

Added
  • Added support of Bitwise opperators in query (#​41112)
Fixed
  • Fixes attempt to log deprecations on mocks (#​41057)
  • Fixed loadAggregate not correctly applying casts (#​41108)
  • Fixed updated with provided qualified updated_at (#​41133)
  • Fixed database migrations $connection property (#​41161)

v8.83.1

Compare Source

Added
  • Add firstOr() function to BelongsToMany relation (#​40828)
  • Catch suppressed deprecation logs (#​40942)
  • Add doesntContain to higher order proxies (#​41034)
Fixed

v8.83.0

Compare Source

Added
Changed
Fixed

v8.82.0

Compare Source

Added
  • Added class and method to create cross joined sequences for factories (#​40542)
  • Added Transliterate shortcut to the Str helper (#​40681)
  • Added array_keys validation rule (#​40720)
Fixed
Changed
  • Server command: Allow xdebug auto-connect to listener feature (#​40673)
  • respect null driver in QueueServiceProvider (9435827, 56d433a)
  • Allow to push and prepend config values on new keys (#​40723)

v8.81.0

Compare Source

Added
  • Added Illuminate/Support/Stringable::scan() (#​40472)
  • Allow caching to be disabled for virtual attributes accessors that return an object (#​40519)
  • Added better bitwise operators support (#​40529, def671d)
  • Added getOrPut on Collection (#​40535)
  • Improve PhpRedis flushing (#​40544)
  • Added Illuminate/Support/Str::flushCache() (#​40620)
Fixed
  • Fixed Str::headline/Str::studly with unicode and add Str::ucsplit method (#​40499)
  • Fixed forgetMailers with MailFake (#​40495)
  • Pruning Models: Get the default path for the models from a method instead (#​40539)
  • Fix flushdb for predis cluste (#​40446)
  • Avoid undefined array key 0 error (#​40571)
Changed
  • Allow whitespace in PDO dbname for PostgreSQL (#​40483)
  • Allows authorizeResource method to receive arrays of models and parameters (#​40516)
  • Inverse morphable type and id filter statements to prevent SQL errors (#​40523)
  • Bump voku/portable-ascii to v1.6.1 (#​40588, #​40610)

v8.80.0

Compare Source

Added
  • Allow enums as entity_type in morphs (#​40375)
  • Added support for specifying a route group controller (#​40276)
  • Added phpredis serialization and compression config support (#​40282)
  • Added a BladeCompiler::render() method to render a string with Blade (#​40425)
  • Added a method to sort keys in a collection using a callback (#​40458)
Changed
  • Convert "/" in -e parameter to "" in Illuminate/Foundation/Console/ListenerMakeCommand (#​40383)
Fixed
  • Throws an error upon make:policy if no model class is configured (#​40348)
  • Fix forwarded call with named arguments in Illuminate/Filesystem/FilesystemAdapter (#​40421)
  • Fix 'strstr' function usage based on its signature (#​40457)

v8.79.0

Compare Source

Added
  • Added onLastPage method to the Paginator (#​40265)
  • Allow method typed variadics dependencies (#​40255)
  • Added ably/ably-php to composer.json to suggest (#​40277)
  • Implement Full-Text Search for MySQL & PostgreSQL (#​40129)
  • Added whenContains and whenContainsAll to Stringable (#​40285)
  • Support action_level configuration in LogManager (#​40305)
  • Added whenEndsWith(), whenExactly(), whenStartsWith(), etc to Stringable (#​40320)
  • Makes it easy to add additional options to PendingBatch (#​40333)
  • Added method to MigrationsStarted/MigrationEnded events (#​40334)
Fixed
  • Fixed failover mailer when used with Mailgun & SES mailers (#​40254)
  • Fixed digits_between with fractions (#​40278)
  • Fixed cursor pagination with HasManyThrough (#​40300)
  • Fixed virtual attributes (29a6692)
  • Fixed timezone option in schedule:list command (#​40304)
  • Fixed Doctrine type mappings creating too many connections (#​40303)
  • Fixed of resolving Blueprint class out of the container (#​40307)
  • Handle type mismatch in the enum validation rule (#​40362)
Changed
  • Automatically add event description when scheduling a command (#​40286)
  • Update the Pluralizer Inflector instanciator (#​40336)

v8.78.1

Compare Source

Added
  • Added pipeThrough collection method (#​40253)
Changed
  • Run clearstatcache after deleting file and asserting Storage using exists/missing (#​40257)
  • Avoid constructor call when fetching resource JSON options (#​40261)

v8.78.0

Compare Source

Added
  • Added schedule:clear-mutex command (#​40135)
  • Added ability to define extra default password rules (#​40137)
  • Added a mergeIfMissing method to the Illuminate Http Request class (#​40116)
  • Added Illuminate/Support/MultipleInstanceManager (40913ac)
  • Added SimpleMessage::lines() (#​40147)
  • Added Illuminate/Support/Testing/Fakes/BusFake::assertBatchCount() (#​40217)
  • Enable only-to-others functionality when using Ably broadcast driver (#​40234)
  • Added ability to customize json options on JsonResource response (#​40208)
  • Added Illuminate/Support/Stringable::toHtmlString() (#​40247)
Changed
  • Improve support for custom Doctrine column types (#​40119)
  • Remove an useless check in Console Application class (#​40145)
  • Sort collections by key when first element of sort operation is string (even if callable) (#​40212)
  • Use first host if multiple in Illuminate/Database/Console/DbCommand::getConnection() (#​40226)
  • Improvement in the Reflector class (#​40241)
Fixed

v8.77.1

Compare Source

Fixed
  • Fixed prune command with default options (#​40127)

v8.77.0

Compare Source

Added
  • Attribute Cast / Accessor Improvements (#​40022)
  • Added Illuminate/View/Factory::renderUnless() (#​40077)
  • Added datetime parsing to Request instance (#​39945)
  • Make it possible to use prefixes on Predis per Connection (#​40083)
  • Added rule to validate MAC address (#​40098)
  • Added ability to define temporary URL macro for storage (#​40100)
Fixed
  • Fixed possible out of memory error when deleting values by reference key from cache in Redis driver (#​40039)
  • Added Illuminate/Filesystem/FilesystemManager::setApplication() (#​40058)
  • Fixed arg passing in doesntContain (739d847)
  • Translate Enum rule message (#​40089)
  • Fixed date validation (#​40088)
  • Dont allow models and except together in PruneCommand.php (f62fe66)
Changed
  • Passthru Eloquent\Query::explain function to Query\Builder:explain for the ability to use database-specific explain commands (#​40075)

v8.76.2

Compare Source

Added
  • Added doesntContain method to Collection and LazyCollection (#​40044, 3e3cbcf)
Reverted

v8.76.1

Compare Source

Reverted

v8.76.0

Compare Source

Added
  • Added possibility to customize child model route binding resolution (#​39929)
  • Added Illuminate/Http/Client/Response::reason() (#​39972)
  • Added an afterRefreshingDatabase test method (#​39978)
  • Added unauthorized() and forbidden() to Illuminate/Http/Client/Response (#​39979)
  • Publish view-component.stub in stub:publish command (#​40007)
  • Added invisible modifier for MySQL columns (#​40002)
  • Added Str::substrReplace() and Str::of($string)->substrReplace() methods (#​39988)
Fixed
  • Fixed parent call in view (#​39909)
  • Fixed request dump and dd methods (#​39931)
  • Fixed php 8.1 deprecation in ValidatesAttributes::checkDateTimeOrder (#​39937)
  • Fixed withTrashed on routes check if SoftDeletes is used in Model (#​39958)
  • Fixes model:prune --pretend command for models with SoftDeletes (#​39991)
  • Fixed SoftDeletes force deletion sets "exists" property to false only when deletion succeeded (#​39987)
  • Fixed possible out of memory error when deleting values by reference key from cache in Redis driver (#​39939)
  • Fixed Password validation failure to allow errors after min rule (#​40030)
Changed
  • Fail enum validation with pure enums (#​39926)
  • Remove redundant description & localize template (#​39928)
  • Fixes reporting deprecations when logger is not ready yet (#​39938)
  • Replace escaped dot with place holder in dependent rules parameters (#​39935)
  • passthru from property to underlying query object (127334a)

v8.75.0

Compare Source

Added
  • Added Illuminate/Support/Testing/Fakes/NotificationFake::assertSentTimes() (667cca8)
  • Added Conditionable trait to ComponentAttributeBag (#​39861)
  • Added scheduler integration tests (#​39862)
  • Added on-demand gate authorization (#​39789)
  • Added countable interface to eloquent factory sequence (#​39907, 1638472a, #​39915)
  • Added Fulltext index for PostgreSQL (#​39875)
  • Added method filterNulls() to Arr (#​39921)
Fixed
  • Fixes AsEncrypted traits not respecting nullable columns (#​39848, 4c32bf8)
  • Fixed http client factory class exists bugfix (#​39851)
  • Fixed calls to Connection::rollBack() with incorrect case (#​39874)
  • Fixed bug where columns would be guarded while filling Eloquent models during unit tests (#​39880)
  • Fixed for dropping columns when using MSSQL as database (#​39905)
Changed
  • Add proper paging offset when possible to sql server (#​39863)
  • Correct pagination message in src/Illuminate/Pagination/resources/views/tailwind.blade.php (#​39894)

v8.74.0

Compare Source

Added
  • Added optional except parameter to the PruneCommand (#​39749, be4afcc)
  • Added Illuminate/Foundation/Application::hasDebugModeEnabled() (#​39755)
  • Added Illuminate/Support/Facades/Event::fakeExcept() and Illuminate/Support/Facades/Event::fakeExceptFor() (#​39752)
  • Added aggregate method to Eloquent passthru (#​39772)
  • Added undot() method to Arr helpers and Collections (#​39729)
  • Added reverse method to Str (#​39816)
  • Added possibility to customize type column in database notifications using databaseType method (#​39811)
  • Added Fulltext Index (#​39821)
Fixed
  • Fixed bus service provider when loaded outside of the framework (#​39740)
  • Fixes logging deprecations when null driver do not exist (#​39809)
Changed
  • Validate connection name before resolve queue connection (#​39751)
  • Bump Symfony to 5.4 (#​39827)
  • Optimize the execution time of the unique method (#​39822)

v8.73.2

Compare Source

Added
  • Added Illuminate/Foundation/Testing/Concerns/InteractsWithContainer::forgetMock() (#​39713)
  • Added custom pagination information in resource (#​39600)

v8.73.1

Compare Source

Revert

v8.73.0

Compare Source

Added
  • Added .phar to blocked PHP extensions in validator (#​39666)
  • Allow a Closure to be passed as a ttl in Cache remember() method (#​39678)
  • Added Prohibits validation rule to dependentRules property (#​39677)
  • Implement lazyById in descending order (#​39646)
Fixed
  • Fixed Illuminate/Auth/Notifications/ResetPassword::toMail() (969f101)
  • Fixed assertSoftDeleted & assertNotSoftDeleted (#​39673)

v8.72.0

Compare Source

Added
  • Added extra method in PasswortReset for reset URL to match the structure of VerifyEmail (#​39652)
  • Added support for countables to the Illuminate/Support/Pluralizer::plural() (#​39641)
  • Allow users to specify options for migrate:fresh for DatabaseMigration trait (#​39637)
Fixed
  • Casts $value to the int only when not null in Illuminate/Database/Query/Builder::limit() (#​39644)
Changed
  • Use parents to resolve middleware priority in SortedMiddleware (#​39647)

v8.71.0

Compare Source

Added
  • Added declined and declined_if validation rules (#​39579)
  • Arrayable/collection support for Collection::splice() replacement param (#​39592)
  • Introduce @js() directive (#​39522)
  • Enum casts accept backed values (#​39608)
  • Added a method to the Macroable trait that removes all configured macros. (#​39633)
Fixed
  • Fixed auto-generated Markdown views (#​39565)
  • DB command: Cope with missing driver parameters for mysql (#​39582)
  • Fixed typo in Connection property name in Illuminate/Database/Connection (#​39590)
  • Fixed: prevent re-casting of enum values (#​39597)
  • Casts value to the int in Illuminate/Database/Query/Builder::limit() (62273d2)
  • Fix $component not being reverted if component doesn't render (#​39595)
Changed
  • make:model --all flag would auto-fire make:controller with --requests (#​39578)
  • Allow assertion of multiple JSON validation errors. (#​39568)
  • Ensure cache directory permissions (#​39591)
  • Update placeholders for stubs (#​39527)

v8.70.2

Compare Source

Changed
  • Use all in Illuminate/Database/Query/Builder::cleanBindings() (74dcc02)

v8.70.1

Compare Source

Fixed
  • Fixed problem with fallback in Router (5fda5a3)

v8.70.0

Compare Source

Added
  • New flag --requests -R to make:controller and make:model Commands (#​39120, 8fbfc9f)
  • Allows Stringable objects as middleware. (#​39439, #​39449)
  • Introduce Js for encoding data to use in JavaScript (#​39389, #​39460, bbf47d5)
  • Added new lost connection error message for sqlsrv (#​39466)
  • Allow can method to be chained onto route for quick authorization (#​39464)
  • Publish provider.stub in stub:publish command (#​39491)
  • Added Illuminate/Support/NamespacedItemResolver::flushParsedKeys() (#​39490)
  • Accept enums for insert update and where (#​39492)
  • Fifo support for queue name suffix (#​39497, 12e47bb)
Changed
  • Dont cache ondemand loggers (5afa0f1, bc50a9b)
  • Enforce implicit Route Model scoping (#​39440)
  • Ensure event mutex is always removed (#​39498)
  • Added missing "flags" to redis zadd options list... (#​39538)

v8.69.0

Compare Source

Added
  • Improve content negotiation for exception handling (#​39385)
  • Added support for SKIP LOCKED to MariaDB (#​39396)
  • Custom cast string into Stringable (#​39410)
  • Added Illuminate/Support/Str::mask() (#​39393)
  • Allow model attributes to be casted to/from an Enum (#​39315)
  • Added an Enum validation rule (#​39437)
  • Auth: Allows to use a callback in credentials array (#​39420)
  • Added success and failure command assertions (#​39435)
Fixed
  • Fixed CURRENT_TIMESTAMP as default when changing column (#​39377)
  • Make accept header comparison case-insensitive (#​39413)
  • Fixed regression with capitalizing translation params (#​39424)
Changed
  • Added bound check to env resolving in Illuminate/Foundation/Application::runningUnitTests() (#​39434)

v8.68.1

Compare Source

Reverted
Fixed
  • Fixed code to address different connection strings for MariaDB in the database queue driver (#​39374)
  • Fixed rate limiting unicode issue (#​39375)
  • Fixed bug with closure formatting in Illuminate/Testing/Fluent/Concerns/Matching::whereContains() (37217d5)
Refactoring
  • Change whereStartsWith, DocBlock to reflect that array is supported (#​39370)

v8.68.0

Compare Source

Added
  • Added ThrottleRequestsWithRedis to $middlewarePriority (#​39316)
  • Added Illuminate/Database/Schema/ForeignKeyDefinition::restrictOnUpdate() (#​39350)
  • Added ext-bcmath as an extension suggestion to the composer.json (#​39360)
  • Added TestResponse::dd (#​39359)
Fixed
  • TaggedCache flush should also remove tags from cache (#​39299)
  • Fixed model serialization on anonymous components (#​39319)
Changed
  • Changed to Guess database factory model by default (#​39310)

v8.67.0

Compare Source

Added
  • Added support for MariaDB to skip locked rows with the database queue driver (#​39311)
  • Added PHP 8.1 Support (#​39034)
Fixed
  • Fixed translation bug (#​39298)
  • Fixed Illuminate/Database/DetectsConcurrencyErrors::causedByConcurrencyError() when code is intager (#​39280)
  • Fixed unique bug in Bus (#​39302)
Changed
  • Only select related columns by default in CanBeOneOfMany::ofMany (#​39307)

v8.66.0

Compare Source

Added
  • Added withoutDeprecationHandling to testing (#​39261)
  • Added method for on-demand log creation (#​39273)
  • Added dateTime to columns that don't need character options (#​39269)
  • Added AssertableJson::hasAny (#​39265)
  • Added Arr::isList() method (#​39277)
  • Apply withoutGlobalScope in CanBeOneOfMany subqueries (#​39295)
  • Added Illuminate/Support/Testing/Fakes/BusFake::assertNothingDispatched() (#​39286)
Reverted

v8.65.0

Compare Source

Added
  • Allow queueing application and service provider callbacks while callbacks are already being processed (#​39175, 63dab48)
  • Added ability to validate one of multiple date formats (#​39170)
  • Re-add update from support for PostgreSQL (#​39151)
  • Added Illuminate/Collections/Traits/EnumeratesValues::reduceSpread() (a01e9ed)
  • Added Illuminate/Testing/TestResponse::assertRedirectContains() (#​39233, ff340a6)
  • Added gate policy callback (#​39185)
  • Allow Remember Me cookie time to be overriden (#​39186)
  • Adds --test and --pest options to various make commands (#​38997)
  • Added new lost connection message to DetectsLostConnections for Vapor (#​39209)
  • Added Illuminate/Support/Testing/Fakes/NotificationFake::assertSentOnDemand() (#​39203)
  • Added Subset in request's collect (#​39191)
  • Added Conditional trait to Eloquent Factory (#​39228)
  • Added a way to skip count check but check $callback at the same time for AssertableJson->has() (#​39224)
  • Added Illuminate/Support/Str::headline() (#​39174)
Deprecated
  • Deprecate reduceMany in favor of reduceSpread in Illuminate/Collections/Traits/EnumeratesValues (#​39201)
Fixed
  • Fixed HasOneOfMany with callback issue (#​39187)
Changed
  • Logs deprecations instead of treating them as exceptions (#​39219)

v8.64.0

Compare Source

Added
  • Added reduceMany to Collections (#​39078)
  • Added Illuminate/Support/Stringable::stripTags() (#​39098)
  • Added Illuminate/Console/OutputStyle::getOutput() (#​39099)
  • Added lang_path helper function (#​39103)
  • Added @aware blade directive ([#​39100](https://redir

@mend-for-github-com mend-for-github-com bot added the security fix Security fix generated by Mend label Oct 31, 2024
@mend-for-github-com mend-for-github-com bot changed the title Update dependency laravel/framework to v8.75.0 Update dependency laravel/framework to v8.83.28 Nov 13, 2024
@mend-for-github-com mend-for-github-com bot force-pushed the whitesource-remediate/laravel-framework-8.x-lockfile branch from 55d2bc2 to bd5977b Compare November 14, 2024 07:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security fix Security fix generated by Mend
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants