fix(deps): update dependency laravel/framework to v10 [security]#75
Open
renovate[bot] wants to merge 1 commit intomainfrom
Open
fix(deps): update dependency laravel/framework to v10 [security]#75renovate[bot] wants to merge 1 commit intomainfrom
renovate[bot] wants to merge 1 commit intomainfrom
Conversation
Contributor
Author
|
6f38682 to
0a92e75
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
^9.0→^10.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv phpdirective is set toon, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
CVE-2025-27515
When using wildcard validation to validate a given file or image field array (
files.*), a user-crafted malicious request could potentially bypass the validation rules.Release Notes
laravel/framework (laravel/framework)
v10.48.29Compare Source
v10.48.28Compare Source
v10.48.27Compare Source
v10.48.26Compare Source
league/commonmarkby @crynobone in #53829v10.48.25Compare Source
v10.48.24Compare Source
v10.48.23Compare Source
v10.48.22Compare Source
v10.48.21Compare Source
whereDate,whereDay,whereMonth,whereTime,whereYearandwhereJsonLengthto ignore invalid$operatorby @crynobone in #52704v10.48.20Compare Source
v10.48.19Compare Source
Model::resolveRouteBindingQueryby @sebj54 in #52339Factory::afterCreatingcallable argument type by @villfa in #52335v10.48.18Compare Source
v10.48.17Compare Source
v10.48.16Compare Source
v10.48.15Compare Source
HttpResponseExceptionby @hafezdivandari in #51986v10.48.14Compare Source
Commandclass by @crynobone in #51824shift()on an empty collection by @Treggats in #51841schema:dumpwill dump the migrations table only if it exists by @NickSdot in #51827v10.48.13Compare Source
Enumerable unless()$callback parameter optional by @faissaloux in #51701Enumerable unless()$callback parameter optional" by @taylorotwell in #51707v10.48.12Compare Source
BackedEnumby @CAAHS in #51586v10.48.11Compare Source
EmailTagsargument by @Tietew in #51352apaon non ASCII characters by @faissaloux in #51428app()Foundation helper onViewServiceProviderby @rodrigopedra in #51522v10.48.10Compare Source
v10.48.9Compare Source
v10.48.8Compare Source
orderByRaw()in query before usingcursorPaginate()by @axlon in #51023v10.48.7Compare Source
95ef230v10.48.6Compare Source
v10.48.5Compare Source
serializeAndRestore()toNotificationFakeby @dbpolito in #50935v10.48.4Compare Source
Collection::concat()return type by @axlon in #50669v10.48.3Compare Source
v10.48.2Compare Source
v10.48.1Compare Source
v10.48.0Compare Source
Expressionat more places in Query Builder by @pascalbaljet in #50402Illuminate\Mail\Mailables\Envelopedocblock by @crynobone in #50448FileSystem.phpby @gcazin in #50459v10.47.0Compare Source
Str::apa()" fix by @osbre in #503400TTL by @kayw-geek in #50359whereAllandwhereAnymethods to the query builder by @musiermoore in #50344v10.46.0Compare Source
Conditionablein enum rule by @michaelnabil230 in #50257v10.45.1Compare Source
v10.45.0Compare Source
Stringablephpdoc by @milwad-dev in #50075Collection::select()to work onArrayAccessby @axlon in #50072beforeto thePendingBatchby @xiCO2k in #50058Illuminate\Support\Str::fromBase64()return type by @SamAsEnd in #50108v10.44.0Compare Source
getPreviousUrlFromSessionmethod in UrlGenerator by @milwad-dev in #49944setAbly()method forAblyBroadcasterby @Rijoanul-Shanto in #49981toBase64()andfromBase64()methods to Stringable and Str classes by @mtownsend5512 in #49984Throwableimport and handle iforiginalExceptionHandlerororiginalDeprecationHandlerproperty isn't used by alternative TestCase by @crynobone in #50021Arr::take()helper by @ryangjchandler in #50015GeneratorCommandby @xurshudyan in #50043v10.43.0Compare Source
\Illuminate\Log\LogManagermethod definition comments with\Psr\Logger\Interfaceby @eusonlito in #49805hasIndex()and minor Schema enhancements by @hafezdivandari in #49796BelongsToManyrelation when usingwithoutTouchingby @mateusjunges in #49798insertOrIgnoreUsingfor Eloquent by @trovster in #49827hasIndex()Order-sensitive by @hafezdivandari in #49840$guardedby @eusonlito in #49851beforeStartingTransactioncallback and use it inLazilyRefreshDatabaseby @pascalbaljet in #49853FormRequest@getRules()method by @cosmastech in #49860Translatormay incorrectly report the locale of a missing translation key by @VicGUTT in #49900v10.42.0Compare Source
File::hasSameHash()by @simonhamp in #49721Carbonif accessed from Laravel or also usesilluminate/supportby @crynobone in #49772Str::unwrapby @stevebauman in #49779v10.41.0Compare Source
thresholdparameter to theNumber::spellhelper by @caendesilva in #49610php artisan model:pruneby @dbhynds in #49617ensureIntlExtensionIsInstalledinNumberclass. by @devajmeireles in #49660Numberclass. by @devajmeireles in #49681v10.40.0Compare Source
Model::preventAccessingMissingAttributes()raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in #49480Arr::dot()method to properly handle indexes array by @kayw-geek in #49507Number::clampby @jbrooksuk in #49512RedisCluster::client()call by @tillkruss in #49560PhpRedisConnectorby @tillkruss in #49559where*()methods ofIlluminate\Database\Query\Builderby @lorenzolosa in #49599InteractsWithTimetrait method by @xurshudyan in #49601assertCounttest helper by @xurshudyan in #49609v10.39.0Compare Source
maxTriesfor queued jobs by @mechelon in #49473v10.38.2Compare Source
conflictfordoctrine/dbal:^4.0toilluminate/databaseby @crynobone in #49456v10.38.1Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.