chore(deps): update dependency laravel/framework to v10.48.29 [security] #21
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.31.0->10.48.29GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv phpdirective is set toon, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
CVE-2025-27515
When using wildcard validation to validate a given file or image field array (
files.*), a user-crafted malicious request could potentially bypass the validation rules.Release Notes
laravel/framework (laravel/framework)
v10.48.29Compare Source
v10.48.28Compare Source
v10.48.27Compare Source
v10.48.26Compare Source
league/commonmarkby @crynobone in #53829v10.48.25Compare Source
v10.48.24Compare Source
v10.48.23Compare Source
v10.48.22Compare Source
v10.48.21Compare Source
whereDate,whereDay,whereMonth,whereTime,whereYearandwhereJsonLengthto ignore invalid$operatorby @crynobone in #52704v10.48.20Compare Source
v10.48.19Compare Source
Model::resolveRouteBindingQueryby @sebj54 in #52339Factory::afterCreatingcallable argument type by @villfa in #52335v10.48.18Compare Source
v10.48.17Compare Source
v10.48.16Compare Source
v10.48.15Compare Source
HttpResponseExceptionby @hafezdivandari in #51986v10.48.14Compare Source
Commandclass by @crynobone in #51824shift()on an empty collection by @Treggats in #51841schema:dumpwill dump the migrations table only if it exists by @NickSdot in #51827v10.48.13Compare Source
Enumerable unless()$callback parameter optional by @faissaloux in #51701Enumerable unless()$callback parameter optional" by @taylorotwell in #51707v10.48.12Compare Source
BackedEnumby @CAAHS in #51586v10.48.11Compare Source
EmailTagsargument by @Tietew in #51352apaon non ASCII characters by @faissaloux in #51428app()Foundation helper onViewServiceProviderby @rodrigopedra in #51522v10.48.10Compare Source
v10.48.9Compare Source
v10.48.8Compare Source
orderByRaw()in query before usingcursorPaginate()by @axlon in #51023v10.48.7Compare Source
95ef230v10.48.6Compare Source
v10.48.5Compare Source
serializeAndRestore()toNotificationFakeby @dbpolito in #50935v10.48.4Compare Source
Collection::concat()return type by @axlon in #50669v10.48.3Compare Source
v10.48.2Compare Source
v10.48.1Compare Source
v10.48.0Compare Source
Expressionat more places in Query Builder by @pascalbaljet in #50402Illuminate\Mail\Mailables\Envelopedocblock by @crynobone in #50448FileSystem.phpby @gcazin in #50459v10.47.0Compare Source
Str::apa()" fix by @osbre in #503400TTL by @kayw-geek in #50359whereAllandwhereAnymethods to the query builder by @musiermoore in #50344v10.46.0Compare Source
Conditionablein enum rule by @michaelnabil230 in #50257v10.45.1Compare Source
v10.45.0Compare Source
Stringablephpdoc by @milwad-dev in #50075Collection::select()to work onArrayAccessby @axlon in #50072beforeto thePendingBatchby @xiCO2k in #50058Illuminate\Support\Str::fromBase64()return type by @SamAsEnd in #50108v10.44.0Compare Source
getPreviousUrlFromSessionmethod in UrlGenerator by @milwad-dev in #49944setAbly()method forAblyBroadcasterby @Rijoanul-Shanto in #49981toBase64()andfromBase64()methods to Stringable and Str classes by @mtownsend5512 in #49984Throwableimport and handle iforiginalExceptionHandlerororiginalDeprecationHandlerproperty isn't used by alternative TestCase by @crynobone in #50021Arr::take()helper by @ryangjchandler in #50015GeneratorCommandby @xurshudyan in #50043v10.43.0Compare Source
\Illuminate\Log\LogManagermethod definition comments with\Psr\Logger\Interfaceby @eusonlito in #49805hasIndex()and minor Schema enhancements by @hafezdivandari in #49796BelongsToManyrelation when usingwithoutTouchingby @mateusjunges in #49798insertOrIgnoreUsingfor Eloquent by @trovster in #49827hasIndex()Order-sensitive by @hafezdivandari in #49840$guardedby @eusonlito in #49851beforeStartingTransactioncallback and use it inLazilyRefreshDatabaseby @pascalbaljet in #49853FormRequest@getRules()method by @cosmastech in #49860Translatormay incorrectly report the locale of a missing translation key by @VicGUTT in #49900v10.42.0Compare Source
File::hasSameHash()by @simonhamp in #49721Carbonif accessed from Laravel or also usesilluminate/supportby @crynobone in #49772Str::unwrapby @stevebauman in #49779v10.41.0Compare Source
thresholdparameter to theNumber::spellhelper by @caendesilva in #49610php artisan model:pruneby @dbhynds in #49617ensureIntlExtensionIsInstalledinNumberclass. by @devajmeireles in #49660Numberclass. by @devajmeireles in #49681v10.40.0Compare Source
Model::preventAccessingMissingAttributes()raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in #49480Arr::dot()method to properly handle indexes array by @kayw-geek in #49507Number::clampby @jbrooksuk in #49512RedisCluster::client()call by @tillkruss in #49560PhpRedisConnectorby @tillkruss in #49559where*()methods ofIlluminate\Database\Query\Builderby @lorenzolosa in #49599InteractsWithTimetrait method by @xurshudyan in #49601assertCounttest helper by @xurshudyan in #49609v10.39.0Compare Source
maxTriesfor queued jobs by @mechelon in #49473v10.38.2Compare Source
conflictfordoctrine/dbal:^4.0toilluminate/databaseby @crynobone in #49456v10.38.1Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.