Update dependency laravel/framework to v10.48.23 [SECURITY] #69
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
10.12.0->10.48.23GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv phpdirective is set toon, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
Release Notes
laravel/framework (laravel/framework)
v10.48.23Compare Source
v10.48.22Compare Source
v10.48.21Compare Source
whereDate,whereDay,whereMonth,whereTime,whereYearandwhereJsonLengthto ignore invalid$operatorby @crynobone in https://github.com/laravel/framework/pull/52704v10.48.20Compare Source
v10.48.19Compare Source
Model::resolveRouteBindingQueryby @sebj54 in https://github.com/laravel/framework/pull/52339Factory::afterCreatingcallable argument type by @villfa in https://github.com/laravel/framework/pull/52335v10.48.18Compare Source
v10.48.17Compare Source
v10.48.16Compare Source
v10.48.15Compare Source
HttpResponseExceptionby @hafezdivandari in https://github.com/laravel/framework/pull/51986v10.48.14Compare Source
Commandclass by @crynobone in https://github.com/laravel/framework/pull/51824shift()on an empty collection by @Treggats in https://github.com/laravel/framework/pull/51841schema:dumpwill dump the migrations table only if it exists by @NickSdot in https://github.com/laravel/framework/pull/51827v10.48.13Compare Source
Enumerable unless()$callback parameter optional by @faissaloux in https://github.com/laravel/framework/pull/51701Enumerable unless()$callback parameter optional" by @taylorotwell in https://github.com/laravel/framework/pull/51707v10.48.12Compare Source
BackedEnumby @CAAHS in https://github.com/laravel/framework/pull/51586v10.48.11Compare Source
EmailTagsargument by @Tietew in https://github.com/laravel/framework/pull/51352apaon non ASCII characters by @faissaloux in https://github.com/laravel/framework/pull/51428app()Foundation helper onViewServiceProviderby @rodrigopedra in https://github.com/laravel/framework/pull/51522v10.48.10Compare Source
v10.48.9Compare Source
v10.48.8Compare Source
v10.48.7Compare Source
v10.48.6Compare Source
v10.48.5Compare Source
serializeAndRestore()toNotificationFakeby @dbpolito in https://github.com/laravel/framework/pull/50935v10.48.4Compare Source
Collection::concat()return type by @axlon in https://github.com/laravel/framework/pull/50669v10.48.3Compare Source
v10.48.2Compare Source
v10.48.1Compare Source
v10.48.0Compare Source
Expressionat more places in Query Builder by @pascalbaljet in https://github.com/laravel/framework/pull/50402Illuminate\Mail\Mailables\Envelopedocblock by @crynobone in https://github.com/laravel/framework/pull/50448FileSystem.phpby @gcazin in https://github.com/laravel/framework/pull/50459v10.47.0Compare Source
Str::apa()" fix by @osbre in https://github.com/laravel/framework/pull/503400TTL by @kayw-geek in https://github.com/laravel/framework/pull/50359whereAllandwhereAnymethods to the query builder by @musiermoore in https://github.com/laravel/framework/pull/50344v10.46.0Compare Source
Conditionablein enum rule by @michaelnabil230 in https://github.com/laravel/framework/pull/50257v10.45.1Compare Source
v10.45.0Compare Source
Stringablephpdoc by @milwad-dev in https://github.com/laravel/framework/pull/50075Collection::select()to work onArrayAccessby @axlon in https://github.com/laravel/framework/pull/50072beforeto thePendingBatchby @xiCO2k in https://github.com/laravel/framework/pull/50058Illuminate\Support\Str::fromBase64()return type by @SamAsEnd in https://github.com/laravel/framework/pull/50108v10.44.0Compare Source
getPreviousUrlFromSessionmethod in UrlGenerator by @milwad-dev in https://github.com/laravel/framework/pull/49944setAbly()method forAblyBroadcasterby @Rijoanul-Shanto in https://github.com/laravel/framework/pull/49981toBase64()andfromBase64()methods to Stringable and Str classes by @mtownsend5512 in https://github.com/laravel/framework/pull/49984Throwableimport and handle iforiginalExceptionHandlerororiginalDeprecationHandlerproperty isn't used by alternative TestCase by @crynobone in https://github.com/laravel/framework/pull/50021Arr::take()helper by @ryangjchandler in https://github.com/laravel/framework/pull/50015GeneratorCommandby @xurshudyan in https://github.com/laravel/framework/pull/50043v10.43.0Compare Source
\Illuminate\Log\LogManagermethod definition comments with\Psr\Logger\Interfaceby @eusonlito in https://github.com/laravel/framework/pull/49805hasIndex()and minor Schema enhancements by @hafezdivandari in https://github.com/laravel/framework/pull/49796BelongsToManyrelation when usingwithoutTouchingby @mateusjunges in https://github.com/laravel/framework/pull/49798insertOrIgnoreUsingfor Eloquent by @trovster in https://github.com/laravel/framework/pull/49827hasIndex()Order-sensitive by @hafezdivandari in https://github.com/laravel/framework/pull/49840$guardedby @eusonlito in https://github.com/laravel/framework/pull/49851beforeStartingTransactioncallback and use it inLazilyRefreshDatabaseby @pascalbaljet in https://github.com/laravel/framework/pull/49853FormRequest[@​getRules](https://redirect.github.com/getRules)()method by @cosmastech in https://github.com/laravel/framework/pull/49860Translatormay incorrectly report the locale of a missing translation key by @VicGUTT in https://github.com/laravel/framework/pull/49900v10.42.0Compare Source
File::hasSameHash()by @simonhamp in https://github.com/laravel/framework/pull/49721Carbonif accessed from Laravel or also usesilluminate/supportby @crynobone in https://github.com/laravel/framework/pull/49772Str::unwrapby @stevebauman in https://github.com/laravel/framework/pull/49779v10.41.0Compare Source
thresholdparameter to theNumber::spellhelper by @caendesilva in https://github.com/laravel/framework/pull/49610php artisan model:pruneby @dbhynds in https://github.com/laravel/framework/pull/49617ensureIntlExtensionIsInstalledinNumberclass. by @devajmeireles in https://github.com/laravel/framework/pull/49660Numberclass. by @devajmeireles in https://github.com/laravel/framework/pull/49681v10.40.0Compare Source
Model::preventAccessingMissingAttributes()raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in https://github.com/laravel/framework/pull/49480Arr::dot()method to properly handle indexes array by @kayw-geek in https://github.com/laravel/framework/pull/49507Number::clampby @jbrooksuk in https://github.com/laravel/framework/pull/49512RedisCluster::client()call by @tillkruss in https://github.com/laravel/framework/pull/49560PhpRedisConnectorby @tillkruss in https://github.com/laravel/framework/pull/49559where*()methods ofIlluminate\Database\Query\Builderby @lorenzolosa in https://github.com/laravel/framework/pull/49599InteractsWithTimetrait method by @xurshudyan in https://github.com/laravel/framework/pull/49601assertCounttest helper by @xurshudyan in https://github.com/laravel/framework/pull/49609v10.39.0Compare Source
maxTriesfor queued jobs by [@mechelon](https://redirect.github.com/mecConfiguration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.