Dropping Laravel 10 support - When?

[specialtactics]

Following the discussion here: #286

We should at some point stop supporting Laravel 10. This will not require any major bump, and existing users yet to upgrade will simply be able to use any version up to the one where we drop that support in composer.json deps. Dropping support for Laravel 10 will allow us to also drop support for Carbon 2, and I guess in general make these dependencies simpler.

Laravel 12 was just released, and that will likely give a kick in the bum for anyone still lagging behind on their Laravel upgrades. My question is, when do you think we should drop support for Laravel 10.

[mfn]

I voted immediately.

L10 is officially unsupported, also no security fixes, so it's the right signal to everyone we don't support outdated stuff. And it also reduces maintenance burden.

Existing users just won't get new updates, nothing breaks for them and it's their decision to be on older versions. As painful as this sounds, and I've experienced this myself often enough, with PHP, with Laravel, etc., the only constant is change.

Edit: to add, auth is on the forefront of security so we should lead by example