Update dependency laravel/framework to v10.48.23 [SECURITY] #1433
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.33.0
->10.48.23
GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv php
directive is set toon
, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
Release Notes
laravel/framework (laravel/framework)
v10.48.23
Compare Source
v10.48.22
Compare Source
v10.48.21
Compare Source
whereDate
,whereDay
,whereMonth
,whereTime
,whereYear
andwhereJsonLength
to ignore invalid$operator
by @crynobone in https://github.com/laravel/framework/pull/52704v10.48.20
Compare Source
v10.48.19
Compare Source
Model::resolveRouteBindingQuery
by @sebj54 in https://github.com/laravel/framework/pull/52339Factory::afterCreating
callable argument type by @villfa in https://github.com/laravel/framework/pull/52335v10.48.18
Compare Source
v10.48.17
Compare Source
v10.48.16
Compare Source
v10.48.15
Compare Source
HttpResponseException
by @hafezdivandari in https://github.com/laravel/framework/pull/51986v10.48.14
Compare Source
Command
class by @crynobone in https://github.com/laravel/framework/pull/51824shift()
on an empty collection by @Treggats in https://github.com/laravel/framework/pull/51841schema:dump
will dump the migrations table only if it exists by @NickSdot in https://github.com/laravel/framework/pull/51827v10.48.13
Compare Source
Enumerable unless()
$callback parameter optional by @faissaloux in https://github.com/laravel/framework/pull/51701Enumerable unless()
$callback parameter optional" by @taylorotwell in https://github.com/laravel/framework/pull/51707v10.48.12
Compare Source
BackedEnum
by @CAAHS in https://github.com/laravel/framework/pull/51586v10.48.11
Compare Source
EmailTags
argument by @Tietew in https://github.com/laravel/framework/pull/51352apa
on non ASCII characters by @faissaloux in https://github.com/laravel/framework/pull/51428app()
Foundation helper onViewServiceProvider
by @rodrigopedra in https://github.com/laravel/framework/pull/51522v10.48.10
Compare Source
v10.48.9
Compare Source
v10.48.8
Compare Source
v10.48.7
Compare Source
v10.48.6
Compare Source
v10.48.5
Compare Source
serializeAndRestore()
toNotificationFake
by @dbpolito in https://github.com/laravel/framework/pull/50935v10.48.4
Compare Source
Collection::concat()
return type by @axlon in https://github.com/laravel/framework/pull/50669v10.48.3
Compare Source
v10.48.2
Compare Source
v10.48.1
Compare Source
v10.48.0
Compare Source
Expression
at more places in Query Builder by @pascalbaljet in https://github.com/laravel/framework/pull/50402Illuminate\Mail\Mailables\Envelope
docblock by @crynobone in https://github.com/laravel/framework/pull/50448FileSystem.php
by @gcazin in https://github.com/laravel/framework/pull/50459v10.47.0
Compare Source
Str::apa()
" fix by @osbre in https://github.com/laravel/framework/pull/503400
TTL by @kayw-geek in https://github.com/laravel/framework/pull/50359whereAll
andwhereAny
methods to the query builder by @musiermoore in https://github.com/laravel/framework/pull/50344v10.46.0
Compare Source
Conditionable
in enum rule by @michaelnabil230 in https://github.com/laravel/framework/pull/50257v10.45.1
Compare Source
v10.45.0
Compare Source
Stringable
phpdoc by @milwad-dev in https://github.com/laravel/framework/pull/50075Collection::select()
to work onArrayAccess
by @axlon in https://github.com/laravel/framework/pull/50072before
to thePendingBatch
by @xiCO2k in https://github.com/laravel/framework/pull/50058Illuminate\Support\Str::fromBase64()
return type by @SamAsEnd in https://github.com/laravel/framework/pull/50108v10.44.0
Compare Source
getPreviousUrlFromSession
method in UrlGenerator by @milwad-dev in https://github.com/laravel/framework/pull/49944setAbly()
method forAblyBroadcaster
by @Rijoanul-Shanto in https://github.com/laravel/framework/pull/49981toBase64()
andfromBase64()
methods to Stringable and Str classes by @mtownsend5512 in https://github.com/laravel/framework/pull/49984Throwable
import and handle iforiginalExceptionHandler
ororiginalDeprecationHandler
property isn't used by alternative TestCase by @crynobone in https://github.com/laravel/framework/pull/50021Arr::take()
helper by @ryangjchandler in https://github.com/laravel/framework/pull/50015GeneratorCommand
by @xurshudyan in https://github.com/laravel/framework/pull/50043v10.43.0
Compare Source
\Illuminate\Log\LogManager
method definition comments with\Psr\Logger\Interface
by @eusonlito in https://github.com/laravel/framework/pull/49805hasIndex()
and minor Schema enhancements by @hafezdivandari in https://github.com/laravel/framework/pull/49796BelongsToMany
relation when usingwithoutTouching
by @mateusjunges in https://github.com/laravel/framework/pull/49798insertOrIgnoreUsing
for Eloquent by @trovster in https://github.com/laravel/framework/pull/49827hasIndex()
Order-sensitive by @hafezdivandari in https://github.com/laravel/framework/pull/49840$guarded
by @eusonlito in https://github.com/laravel/framework/pull/49851beforeStartingTransaction
callback and use it inLazilyRefreshDatabase
by @pascalbaljet in https://github.com/laravel/framework/pull/49853FormRequest[@​getRules](https://redirect.github.com/getRules)()
method by @cosmastech in https://github.com/laravel/framework/pull/49860Translator
may incorrectly report the locale of a missing translation key by @VicGUTT in https://github.com/laravel/framework/pull/49900v10.42.0
Compare Source
File::hasSameHash()
by @simonhamp in https://github.com/laravel/framework/pull/49721Carbon
if accessed from Laravel or also usesilluminate/support
by @crynobone in https://github.com/laravel/framework/pull/49772Str::unwrap
by @stevebauman in https://github.com/laravel/framework/pull/49779v10.41.0
Compare Source
threshold
parameter to theNumber::spell
helper by @caendesilva in https://github.com/laravel/framework/pull/49610php artisan model:prune
by @dbhynds in https://github.com/laravel/framework/pull/49617ensureIntlExtensionIsInstalled
inNumber
class. by @devajmeireles in https://github.com/laravel/framework/pull/49660Number
class. by @devajmeireles in https://github.com/laravel/framework/pull/49681v10.40.0
Compare Source
Model::preventAccessingMissingAttributes()
raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in https://github.com/laravel/framework/pull/49480Arr::dot()
method to properly handle indexes array by @kayw-geek in https://github.com/laravel/framework/pull/49507Number::clamp
by @jbrooksuk in https://github.com/laravel/framework/pull/49512RedisCluster::client()
call by @tillkruss in https://github.com/laravel/framework/pull/49560PhpRedisConnector
by @tillkruss in https://github.com/laravel/framework/pull/49559where*()
methods ofIlluminate\Database\Query\Builder
by @lorenzolosa in https://github.com/laravel/framework/pull/49599InteractsWithTime
trait method by @xurshudyan in https://github.com/laravel/framework/pull/49601assertCount
test helper by @xurshudyan in https://github.com/laravel/framework/pull/49609v10.39.0
Compare Source
maxTries
for queued jobs by @mechelon in [https://github.com/[Proposal] Add log event laravel/framework#494Configuration
📅 Schedule: Branch creation - "" in timezone Asia/Tokyo, Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.