- Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed #143

blumilk-renovate · 2025-03-06T10:09:42Z

This PR contains the following updates:

Package	Type	Update	Change
laravel/framework (source)	require	minor	`11.35.1` -> `11.44.1`

GitHub Vulnerability Alerts

CVE-2025-27515

When using wildcard validation to validate a given file or image field array (files.*), a user-crafted malicious request could potentially bypass the validation rules.

Release Notes

laravel/framework (laravel/framework)

`v11.44.1`

Compare Source

[11.x] Add valid values to ensure method by @lancepioch in https://github.com/laravel/framework/pull/54840
Fix attribute name used on Validator instance within certain rule classes by @crynobone in https://github.com/laravel/framework/pull/54845
[11.x] Fix Application::interBasePath() fails to resolve application when project name is "vendor" by @crynobone in https://github.com/laravel/framework/pull/54871
[11.x] Test improvements by @crynobone in https://github.com/laravel/framework/pull/54879

`v11.44.0`

Compare Source

[11.x] Fix parsing PHP_CLI_SERVER_WORKERS as string instead of int by @crynobone in https://github.com/laravel/framework/pull/54724
[11.x] Rename Redis parse connection for cluster test method to follow naming conventions by @jackbayliss in https://github.com/laravel/framework/pull/54721
[11.x] Allow readAt method to use in database channel by @utsavsomaiya in https://github.com/laravel/framework/pull/54729
[11.x] Fix: Custom Exceptions with Multiple Arguments does not properly rein… by @pandiselvamm in https://github.com/laravel/framework/pull/54705
[11.x] Update ConcurrencyTest exception reference to use namespace by @jackbayliss in https://github.com/laravel/framework/pull/54732
[11.x] Deprecate Factory::$modelNameResolver by @samlev in https://github.com/laravel/framework/pull/54736
[11x.] Improved typehints for InteractsWithDatabase by @cosmastech in https://github.com/laravel/framework/pull/54748
[11.x] Improved typehints for InteractsWithExceptionHandling && ExceptionHandlerFake by @cosmastech in https://github.com/laravel/framework/pull/54747

`v11.43.2`

Compare Source

[11.x] Add missing test for implode() by @nuernbergerA in https://github.com/laravel/framework/pull/54704
[11.x] Enhance eventStream to Support Custom Events and Start Messages by @devhammed in https://github.com/laravel/framework/pull/54695
Revert "[11.x] Enhance eventStream to Support Custom Events and Start Messages" by @taylorotwell in https://github.com/laravel/framework/pull/54714
[11.x] Replace MD5 with xxh128 in File::hasSameHash() by @vlakoff in https://github.com/laravel/framework/pull/54690
[11.x] Add parameter typing for closure to addGlobalScope method by @jnoordsij in https://github.com/laravel/framework/pull/54677
[11.x] assertOnlyJsonValidationErrors / assertOnlyInvalid by @gdebrauwer in https://github.com/laravel/framework/pull/54678
[11.x] Allow for assertions against QueueFake::pushRaw() by @cosmastech in https://github.com/laravel/framework/pull/54703
[11.x] Fix: Handles non nested explode of multiple Date and Numeric rules in ValidationRuleParser by @AlexandreMeledandri in https://github.com/laravel/framework/pull/54718

`v11.43.1`

Compare Source

[11.x] Fix "Divide by Zero" regression bug introduced in #54650 by @crynobone in https://github.com/laravel/framework/pull/54685
Revert "Fix Collection::implode with \Stringable objects" by @crynobone in https://github.com/laravel/framework/pull/54691

`v11.43.0`

Compare Source

Remove Incorrect @mixin Annotation in BuildsQueries Trait by @daniel-de-wit in https://github.com/laravel/framework/pull/54596
make withoutScopedBindings usable on RouteRegistrar by @ssninnni in https://github.com/laravel/framework/pull/54592
[11.x] Update Broadcasting Install Command For Bun Version 1.1.39^ by @realpoke in https://github.com/laravel/framework/pull/54605
[11.x] Add isTtySupported to Process facade by @Riley19280 in https://github.com/laravel/framework/pull/54604
[11.x] fix: pagination generics by @calebdw in https://github.com/laravel/framework/pull/54601
Convert closures to arrow functions in the Model class by @alikhosravidev in https://github.com/laravel/framework/pull/54599
[11.x] Document hashedValue as non-nullable by @JurianArie in https://github.com/laravel/framework/pull/54615
[11.x] Prohibited If Declined and Prohibited If Accepted validation rules by @osama-98 in https://github.com/laravel/framework/pull/54608
[11.x] Fix param types for orWhereHasMorph method by @simonellensohn in https://github.com/laravel/framework/pull/54659
[11.x] Add pascal alias for studly string helper by @da-mask in https://github.com/laravel/framework/pull/54655
[11.x] make the Eloquent missing attribute handler more accurate by changing offsetExists by @koenvu in https://github.com/laravel/framework/pull/54654
[11.x] use exec function if the symlink function is unavailable by @aisuvro in https://github.com/laravel/framework/pull/54651
[11.x] use value helper for $perPage as used for $total by @rodrigopedra in https://github.com/laravel/framework/pull/54650
[11.x] [cleanup] used illuminate str contains by @daison12006013 in https://github.com/laravel/framework/pull/54647
[11.x] Allow can attribute on group by @utsavsomaiya in https://github.com/laravel/framework/pull/54648
Test Improvements by @crynobone in https://github.com/laravel/framework/pull/54645
Fixes Factory Using Wrong Model Name by @SameOldNick in https://github.com/laravel/framework/pull/54644
[11.x] fix 'parsePipeString' in pipeline helper by @igzard in https://github.com/laravel/framework/pull/54643
Update old() docblock by @AJenbo in https://github.com/laravel/framework/pull/54641
[11.x] Feature: Array reject by @liamduckett in https://github.com/laravel/framework/pull/54638
[11.x] Blade @include performance by @AlliBalliBaba in https://github.com/laravel/framework/pull/54633
Fix Collection::implode with \Stringable objects by @timkelty in https://github.com/laravel/framework/pull/54630
[11.x] Fix serve command with PHP_CLI_SERVER_WORKERS by @crynobone in https://github.com/laravel/framework/pull/54606
[11.x] new: ddJson method on TestResponse class by @chester-sykes in https://github.com/laravel/framework/pull/54673
[11.x] Add find sole query builder method by @zepfietje in https://github.com/laravel/framework/pull/54667
[11.x] Fix regression bug with global Factory::guessModelNamesUsing() by @crynobone in https://github.com/laravel/framework/pull/54665
[11.x] Fix routeCollection get method return value when searching by dot not… by @abdel-aouby in https://github.com/laravel/framework/pull/54672
[11.x] Add withWhereRelation method to builder by @utsavsomaiya in https://github.com/laravel/framework/pull/54668

`v11.42.1`

Compare Source

Add Taylor's inspiring quote - We must ship by @1weiho in https://github.com/laravel/framework/pull/54579
Type the callback for Relation::noConstraints by @simon-tma in https://github.com/laravel/framework/pull/54572
[11.x] fix: getQualified{Created,Updated}AtColumn never returning null by @calebdw in https://github.com/laravel/framework/pull/54568
[11.x] assertStreamed and assertNotStreamed by @gdebrauwer in https://github.com/laravel/framework/pull/54566
[11.x] Add assertJsonFragments assertion by @lioneaglesolutions in https://github.com/laravel/framework/pull/54576
[11.x] doesntContain on eloquent collection by @gdebrauwer in https://github.com/laravel/framework/pull/54567
[11.x] Allow batching a Closure by @cosmastech in https://github.com/laravel/framework/pull/54587

`v11.42.0`

Compare Source

docs: clarify use of hasOption() by @jezmck in https://github.com/laravel/framework/pull/54415
Test Improvements by @crynobone in https://github.com/laravel/framework/pull/54427
[11.x] add Generics to Paginator's ArrayAccess methods by @taka-oyama in https://github.com/laravel/framework/pull/54428
[11.x] Fix docblocks for code that calls enum_value() by @cosmastech in https://github.com/laravel/framework/pull/54432
[11.x] Fix assertContent on laravel test that respond with Symfony Response Object by @tben in https://github.com/laravel/framework/pull/54467
[11.x] Add Higher Order Messaging support for last by @fernandokbs in https://github.com/laravel/framework/pull/54459
[11.x] Database testing traits has impact to artisan calls by @nivseb in https://github.com/laravel/framework/pull/54458
[11.x] Add precision to Number::currency() by @benjibee in https://github.com/laravel/framework/pull/54456
[11.x] Add generics to lazy queries by @axlon in https://github.com/laravel/framework/pull/54453
[11.x] Merge in eager loads from nested where queries by @ollieread in https://github.com/laravel/framework/pull/54455
[11.x] Fluent numeric validation by @xoesae in https://github.com/laravel/framework/pull/54425
[11.x] Fix casts + withAttributes by @tontonsb in https://github.com/laravel/framework/pull/54422
[11.x] Ensure batched jobs are actually batchable by @josepostiga in https://github.com/laravel/framework/pull/54442
[11.x] Update PHPStan to 2.x by @tamiroh in https://github.com/laravel/framework/pull/53716
Test Improvements by @crynobone in https://github.com/laravel/framework/pull/54475
Add relative date shorthands to Query Builder by @jasonmccreary in https://github.com/laravel/framework/pull/54408
[11.x] feat: add better closure typing in QueriesRelationships by @calebdw in https://github.com/laravel/framework/pull/54452
[11.x] Fix the method explodeExplicitRule to support Numeric Validation by @mrvipchien in https://github.com/laravel/framework/pull/54478
Add Builder On Clone callback support by @ralphjsmit in https://github.com/laravel/framework/pull/54477
Support relative paths to SQLite databases by @LukeTowers in https://github.com/laravel/framework/pull/54480
[11.x] Where doesnt have nullable morph by @liamduckett in https://github.com/laravel/framework/pull/54363
[11.x] Add the ability to skip migrations within tests by @cosmastech in https://github.com/laravel/framework/pull/54441
Queue Integration Tests with Redis Cluster by @vadimonus in https://github.com/laravel/framework/pull/54218
[11.x] Optimize PendingBatch@ensureJobIsBatchable by @cosmastech in https://github.com/laravel/framework/pull/54485
[11.x] Supports PHPUnit 12.0 by @crynobone in https://github.com/laravel/framework/pull/54316
[11.x] Fix spelling in comment by @lorenzolosa in https://github.com/laravel/framework/pull/54503
[11.x] Add Context "missing" method by @vbergerondev in https://github.com/laravel/framework/pull/54499
[11.x] feat: add generics to Container methods by @MrMeshok in https://github.com/laravel/framework/pull/54543
[11.x] Add a setAssetRoot method to the UrlGenerator class by @ollieread in https://github.com/laravel/framework/pull/54530
[11.x] Handle Null Check in Str::startsWith and Str::endsWith by @onairmarc in https://github.com/laravel/framework/pull/54520
[11.x] Improve check for relative sqlite databases by @LukeTowers in https://github.com/laravel/framework/pull/54513
Revert "[11.x] Use Str::wrap() instead of nesting Str::start() inside Str::finish()" by @shaedrich in https://github.com/laravel/framework/pull/54528
[11.x] Job Batches with Redis Cluster by @vadimonus in https://github.com/laravel/framework/pull/54522
[11.x] fix: specify type of TClass generic in Container by @MrMeshok in https://github.com/laravel/framework/pull/54545
[11.x] Improve docblocks for morph maps in Relation by @cosmastech in https://github.com/laravel/framework/pull/54560
docs: fix return type documentation for initializeSignal method by @nzsys in https://github.com/laravel/framework/pull/54553
[11.x] Add support for middlewares & failed handler on broadcastable events by @Jacobs63 in https://github.com/laravel/framework/pull/54562
[11.x] json assertions on streamed content by @gdebrauwer in https://github.com/laravel/framework/pull/54565

[11.x] Allow secret key Updates Without Bringing the Site Up by @rashidlaasri in https://github.com/laravel/framework/pull/54389
[11.x] use Auth::userResolver when resolving the authenticated user by @rodrigopedra in https://github.com/laravel/framework/pull/54382
[11.x] Add Macroable and fill() to Support\Fluent by @stevebauman in https://github.com/laravel/framework/pull/54404
[11.x] Optimize pluck() to avoid redundant column selection by @zsocakave in https://github.com/laravel/framework/pull/54396
[11.x] Optimize loadTranslationsFrom function for simplicity and clarity by @selcukcukur in https://github.com/laravel/framework/pull/54407
feat: gracefully handle command not found exception - avoid creds exposure by @chinmaypurav in https://github.com/laravel/framework/pull/54406
Handle pooled Postgres connections for Laravel Cloud by @taylorotwell in https://github.com/laravel/framework/pull/54346

`v11.41.0`

Compare Source

[11.x] more pint rules by @browner12 in https://github.com/laravel/framework/pull/54332
[11.x] Allow TestComponent to be macroable by @ziadoz in https://github.com/laravel/framework/pull/54359
[11.x] Fix validator return fails if using different date formats by @mrvipchien in https://github.com/laravel/framework/pull/54350
[11.x] fix the method explodeExplicitRule to support Customizable Date Validation by @mrvipchien in https://github.com/laravel/framework/pull/54353
[11.x] Adds the addPath() method to the Lang facade and the Translator class. by @selcukcukur in https://github.com/laravel/framework/pull/54347
Improve: add fire failed event at once by @cesarMtorres in https://github.com/laravel/framework/pull/54376
[11.x] feat: Create missing pgsql database when running migrations by @mathiasgrimm in https://github.com/laravel/framework/pull/54314
[11.x] Proper rate limiter fix with phpredis serialization/compression enabled by @TheLevti in https://github.com/laravel/framework/pull/54372
Update Stringable Rule testcases by @mrvipchien in https://github.com/laravel/framework/pull/54387
[11.x] Use Date facade for storing the password confirmation timestamp by @crynobone in https://github.com/laravel/framework/pull/54383

`v11.40.0`

Compare Source

draft: fix: Don't release lock for ShouldBeUniqueUntilProcessing Job that gets released by @mathiasgrimm in https://github.com/laravel/framework/pull/54261
[11.x] Add Laravel Pint by @browner12 in https://github.com/laravel/framework/pull/53835
Add self to HasCollection type param in Model by @thena-seer-sfg in https://github.com/laravel/framework/pull/54311
[11.x] Add pending attributes by @tontonsb in https://github.com/laravel/framework/pull/53720
fix: schedule:test on commands using runInBackground by @dallyger in https://github.com/laravel/framework/pull/54321
[11.x] Helper methods to dump responses of the Laravel HTTP client by @morrislaptop in https://github.com/laravel/framework/pull/54317
Add support for cursor editor in ResolvesDumpSource by @tuxfamily in https://github.com/laravel/framework/pull/54318
[11.x] Add Customizable Date Validation Rule with Flexible Date Constraints by @michaelnabil230 in https://github.com/laravel/framework/pull/53465
[11.x] start syncing StyleCI rules to Pint by @browner12 in https://github.com/laravel/framework/pull/54326
[11.x] apply our new Pint rule to the /tests directory by @browner12 in https://github.com/laravel/framework/pull/54325
fix(Collection::pop()): count < 1 by @artumi-richard in https://github.com/laravel/framework/pull/54340
Patch CVE-2025-22145 in nesbot/carbon package by @dennis-koster in https://github.com/laravel/framework/pull/54335
[11.x] Prevent unintended serialization and compression by @JeppeKnockaert in https://github.com/laravel/framework/pull/54337
[11.x] Pass collection of models to whereMorphedTo / whereNotMorphedTo by @gdebrauwer in https://github.com/laravel/framework/pull/54324

`v11.39.1`

Compare Source

fix: collapseWithKeys on empty collection by @benatoff in https://github.com/laravel/framework/pull/54290
fix(broadcaster): incorrect channel matching because of dot in pattern by @021-projects in https://github.com/laravel/framework/pull/54303
[11.x] Use constructor property promotion for database query condition expression by @shaedrich in https://github.com/laravel/framework/pull/54302
[11.x] Add IncrementOrCreate method to Eloquent by @carloeusebi in https://github.com/laravel/framework/pull/54300
[11.x] Add additional test cases for Arr helper to enhance coverage by @mrvipchien in https://github.com/laravel/framework/pull/54298
Bump vite from 5.2.14 to 5.4.12 in /src/Illuminate/Foundation/resources/exceptions/renderer by @dependabot in https://github.com/laravel/framework/pull/54296
[11.x] Fix unique jobs that have a uniqueVia method by @DougSisk in https://github.com/laravel/framework/pull/54294

`v11.39.0`

Compare Source

[11.x] Replace duplicate ValidatedInput functions with InteractsWithData trait by @stevebauman in https://github.com/laravel/framework/pull/54208
[11.x] Improve Email validation rule custom translation messages by @SanderMuller in https://github.com/laravel/framework/pull/54202
[11.x] Fix deprecation warnings in optimize:clear and optimize by @cosmastech in https://github.com/laravel/framework/pull/54197
[11.x] Add support for phpredis backoff and max retry config options by @TheLevti in https://github.com/laravel/framework/pull/54191
Introduces UseFactory attribute by @christopherarter in https://github.com/laravel/framework/pull/54065
[11.x] Set class-string generic on UseFactory by @cosmastech in https://github.com/laravel/framework/pull/54215
[11.x] switch LazyCollection::make() for new LazyCollection() by @AhmedAlaa4611 in https://github.com/laravel/framework/pull/54216
support style file name hashes with query strings in manifest by @newapx in https://github.com/laravel/framework/pull/54219
[11.x] Solidify Rule::email() tests by @SanderMuller in https://github.com/laravel/framework/pull/54226
[11.x] Fix line-ending mismatch in CliDumperTest::testArray and CliDumperTest::testObject by @AhmedAlaa4611 in https://github.com/laravel/framework/pull/54222
Add a report/log option to filesystem exceptions without throwing by @lotharthesavior in https://github.com/laravel/framework/pull/54212
[11.x] Fix Cache component to be aware of phpredis serialization and compression settings by @TheLevti in https://github.com/laravel/framework/pull/54221
[11.x] fix: Forcing DB Session driver to always use the write connection by @mathiasgrimm in https://github.com/laravel/framework/pull/54231
[11.x] Fix line-ending mismatch in BladeComponentTagCompilerTest under Illuminate\Tests\View\Blade by @AhmedAlaa4611 in https://github.com/laravel/framework/pull/54233
[11.x] Fix job not logged in failed_jobs table if timeout occurs within database transaction by @decaylala in https://github.com/laravel/framework/pull/54173
[11.x] Fix unique job lock is not released on model not found exception, lock gets stuck. by @zackAJ in https://github.com/laravel/framework/pull/54000
[11.x] Fix line-ending mismatch on Windows test by @AhmedAlaa4611 in https://github.com/laravel/framework/pull/54236
Added support in DB::prohibitDestructiveCommands to preventing destructive Rollback… by @hexathos in https://github.com/laravel/framework/pull/54238
[11.x] Add applyAfterQueryCallbacks Support to Non-Mutator Cases in pluck Method by @batinmustu in https://github.com/laravel/framework/pull/54268
[11.x] addPath() Allow adding new path for translation loader. by @selcukcukur in https://github.com/laravel/framework/pull/54277

`v11.38.2`

Compare Source

[11.x] Simplify Codebase by Using qualifyColumn Helper Method by @SanderMuller in https://github.com/laravel/framework/pull/54187
Revert "Add support for missing Postgres connection options" by @crynobone in https://github.com/laravel/framework/pull/54195
Revert "[11.x] Support DB aggregate by group (new methods)" by @crynobone in https://github.com/laravel/framework/pull/54196

`v11.38.1`

Compare Source

Fix breaking change - Revert "[11.x] Replace string class names with ::class constants" by @SanderMuller in https://github.com/laravel/framework/pull/54185
Add failing test for #54185 by @SanderMuller in https://github.com/laravel/framework/pull/54186

`v11.38.0`

Compare Source

Fix offset range in docblock by @simon-tma in https://github.com/laravel/framework/pull/54062
[11.x] Fix breaking change in RefreshDatabase by @SjorsO in https://github.com/laravel/framework/pull/54075
[11.x] Fallback to parent methods on HasUniqueStringIds trait by @hafezdivandari in https://github.com/laravel/framework/pull/54096
[11.x] Adds finally method to pipeline helper by @nunomaduro in https://github.com/laravel/framework/pull/54110
Add support for missing Postgres connection options by @Maniload in https://github.com/laravel/framework/pull/54101
fix: Don't set newLineWritten to true unless verbosity allows output by @ConnySjoblom in https://github.com/laravel/framework/pull/54127
[11.x] Adds support for Attribute return mutators to the Eloquent/Builder pluck method by @MattBradleyDev in https://github.com/laravel/framework/pull/54130
[11.x] Fixes wrong @mixin on SoftDeletes trait by @nunomaduro in https://github.com/laravel/framework/pull/54140
[11.x] Replace string class names with ::class constants by @panakour in https://github.com/laravel/framework/pull/54134
[11.x] fix times() calls by @browner12 in https://github.com/laravel/framework/pull/54141
[11.x] minor readability by @browner12 in https://github.com/laravel/framework/pull/54117
Handles factory=null in ConnectException while recording request-response in PendingRequest by @StSarc in https://github.com/laravel/framework/pull/54121
[11.x] Refine error messages for detecting lost connections (Debian bookworm compatibility) by @mfn in https://github.com/laravel/framework/pull/54111
[11.x] fix: filter vendor paths from registered loaders in Application::inferBasePath by @calebdw in https://github.com/laravel/framework/pull/54119
[11.x] Allow exceptions to the optimize and optimize:clear commands by @jonerickson in https://github.com/laravel/framework/pull/54070
Add action filter to route:list by @miccehedin in https://github.com/laravel/framework/pull/54135
No explicit USE database statement by @TheLevti in https://github.com/laravel/framework/pull/54132
Add support for custom payloads and channels in broadcasting by @JanneDeVos in https://github.com/laravel/framework/pull/54099
[11.x] Add fluent Email validation rule by @SanderMuller in https://github.com/laravel/framework/pull/54067
[11.x] middleware support for specific method in resource routes by @MrPunyapal in https://github.com/laravel/framework/pull/53313
[11.x] Support DB aggregate by group (new methods) by @GromNaN in https://github.com/laravel/framework/pull/53679
Correct return type to match functionality by @willpower232 in https://github.com/laravel/framework/pull/54148
[11.x] Renaming Traveler to Passable and Stops to Pipes by @mathiasgrimm in https://github.com/laravel/framework/pull/54142
[11.x] Add Dispatchable::newPendingDispatch() by @cosmastech in https://github.com/laravel/framework/pull/54153
[11.x] Add FormRequest::array($key) and Fluent::array($key) by @stevebauman in https://github.com/laravel/framework/pull/54177
[11.x] Make methods of HasRelationships generic by @SanderMuller in https://github.com/laravel/framework/pull/54174
[11.x] Make tests pass on Herd by @SanderMuller in https://github.com/laravel/framework/pull/54171
Revert "Fix: Handle mixed-type values in compileInsert" by @crynobone in https://github.com/laravel/framework/pull/54169
[11.x] Fix docblock for PendingDispatch@getJob() by @cosmastech in https://github.com/laravel/framework/pull/54158
pass options to migration events by @willpower232 in https://github.com/laravel/framework/pull/54151
Encode cache values for SQLite with base64 to prevent failing on \0 characters by @adamkiss in https://github.com/laravel/framework/pull/54178
[11.x] Fix invokable validation rule return type by @axlon in https://github.com/laravel/framework/pull/54179

`v11.37.0`

Compare Source

[11.x] Update Collection::hasAny by @JeftaAtSiip in https://github.com/laravel/framework/pull/53963
[11.x] Update DetectsLostConnections trait by @holgerk in https://github.com/laravel/framework/pull/53966
Fix: (Queue Worker) firing the JobPopped event when $popCallbacks returns null by @rudenav in https://github.com/laravel/framework/pull/53962
[11.x] Add Dumpable trait to Uri by @nuernbergerA in https://github.com/laravel/framework/pull/53960
Fix: Handle mixed-type values in compileInsert by @alipadron in https://github.com/laravel/framework/pull/53948
[11.x] Add $ignoreCase option to Str::is by @stevebauman in https://github.com/laravel/framework/pull/53981
[11.x] Updates component dependencies by @crynobone in https://github.com/laravel/framework/pull/53975
[11.x] Update Uri withoutQuery method to accept string or array input by @1weiho in https://github.com/laravel/framework/pull/53973
[11.x] Fix cached health endpoint not working when in maintenance mode by @crynobone in https://github.com/laravel/framework/pull/53974
Add PHPDoc type hints by @shaedrich in https://github.com/laravel/framework/pull/53984
[11.x] Allow passing bool to facade Http@preventStrayRequests() by @cosmastech in https://github.com/laravel/framework/pull/53992
[11.x] Use Str::wrap() instead of nesting Str::start() inside Str::finish() by @shaedrich in https://github.com/laravel/framework/pull/53987
Fix day range in docblock by @timacdonald in https://github.com/laravel/framework/pull/53985
[11.x] Fixes Illuminate\Http\Response to output empty string if $content is set to null by @crynobone in https://github.com/laravel/framework/pull/53872
[11.x] Fix/Improve Resend transport response handling by @markovic-nikola in https://github.com/laravel/framework/pull/54004
[11.x] Update View::withErrors() docblock to reflect string parameter support by @cheack in https://github.com/laravel/framework/pull/54009
11.x improve resend transport response handling - fix by @markovic-nikola in https://github.com/laravel/framework/pull/54006
[11.x] Added new Eloquent methods: whereDoesntHaveRelation, whereMorphDoesntHaveRelation and their variants with OR by @andrey-helldar in https://github.com/laravel/framework/pull/53996
[11.x] Re-refresh the database if the RefreshDatabase transaction was committed by @SjorsO in https://github.com/laravel/framework/pull/53997
[11.x] add assertFailedWith to InteractsWithQueue trait by @teddy-francfort in https://github.com/laravel/framework/pull/53980
Quick doc fix by @mathiasgrimm in https://github.com/laravel/framework/pull/54040
[11.x] Allow using Illuminate\Support\Uri on testing HTTP Requests by @crynobone in https://github.com/laravel/framework/pull/54038
[11.x] Adding tests for Overlapping Routes by @mathiasgrimm in https://github.com/laravel/framework/pull/54050
[11.x] adding tests for null & * key given in data_get by @jwjenkin in https://github.com/laravel/framework/pull/54059

`v11.36.1`

Compare Source

Once Remember Null Values by @dbpolito in https://github.com/laravel/framework/pull/53949
[11.x] Add wildcard directory discovery to the EventServiceProvider by @jared-cannon in https://github.com/laravel/framework/pull/53932
[11.x] Add getJob() method to PendingDispatch class + Introduced tests by @pascalbaljet in https://github.com/laravel/framework/pull/53951
Avoid writing multiple keys when using redis in cluster mode by @bentleyo in https://github.com/laravel/framework/pull/53940
Revert "[11.x] fix: allows injection using multiple interfaces with the same concrete implementation" by @taylorotwell in https://github.com/laravel/framework/pull/53955
Revert "[11.x] No need to redeclare variables" by @crynobone in https://github.com/laravel/framework/pull/53954

`v11.36.0`

Compare Source

[11.x] Update config/mail.php with supported configuration by @crynobone in https://github.com/laravel/framework/pull/53874
[11.x] Allows enum_value() to be use in standalone illuminate/collections by @crynobone in https://github.com/laravel/framework/pull/53871
[11.x] Uri and UriQueryString implement Stringable by @cosmastech in https://github.com/laravel/framework/pull/53873
[11.x] Prefer new Stringable over Str::of and str() by @lucasmichot in https://github.com/laravel/framework/pull/53883
[11.x] No need to redeclare variables by @lucasmichot in https://github.com/laravel/framework/pull/53887
[11.x] Add PHP 8.4 with herd to passthrough variables by @lucasmichot in https://github.com/laravel/framework/pull/53885
Add new Uri class to default, global aliases by @jasonmccreary in https://github.com/laravel/framework/pull/53884
[11.x] Fix attribute mutator access in loadMissing by @SychO9 in https://github.com/laravel/framework/pull/53879
[11.x] Fix numericAggregate on eloquent builder by @AmirRezaM75 in https://github.com/laravel/framework/pull/53880
[11.x] Prefer new Fluent over fluent() helper by @lucasmichot in https://github.com/laravel/framework/pull/53890
Patch by @angelej in [https://

Configuration

📅 Schedule: Branch creation - "" in timezone Europe/Warsaw, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

- Update dependency laravel/framework to v11.44.1 [SECURITY]

d0264d6

blumilk-renovate bot added dependencies renovate bot dependencies update renovate renovate bot update security renovate bot security update labels Mar 6, 2025

blumilk-renovate bot requested a review from Blusia March 6, 2025 10:09

blumilk-renovate bot changed the title ~~- Update dependency laravel/framework to v11.44.1 [SECURITY]~~ - Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed Mar 11, 2025

blumilk-renovate bot closed this Mar 11, 2025

blumilk-renovate bot deleted the renovate/packagist-laravel-framework-vulnerability branch March 11, 2025 07:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

- Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed #143

- Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed #143

Uh oh!

blumilk-renovate bot commented Mar 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

- Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed #143

- Update dependency laravel/framework to v11.44.1 [SECURITY] - autoclosed #143

Uh oh!

Conversation

blumilk-renovate bot commented Mar 6, 2025

GitHub Vulnerability Alerts

Release Notes

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant