chore(deps): update dependency laravel/framework to v10.48.29 [security] #21
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot]
.This notice will be removed on 2025-10-07.
This PR contains the following updates:
10.31.0
->10.48.29
GitHub Vulnerability Alerts
CVE-2024-52301
Description
When the
register_argc_argv php
directive is set toon
, and users call any URL with a special crafted query string, they are able to change the environment used by the framework when handling the request.Resolution
The framework now ignores argv values for environment detection on non-cli SAPIs.
CVE-2025-27515
When using wildcard validation to validate a given file or image field array (
files.*
), a user-crafted malicious request could potentially bypass the validation rules.Release Notes
laravel/framework (laravel/framework)
v10.48.29
Compare Source
v10.48.28
Compare Source
v10.48.27
Compare Source
v10.48.26
Compare Source
league/commonmark
by @crynobone in #53829v10.48.25
Compare Source
v10.48.24
Compare Source
v10.48.23
Compare Source
v10.48.22
Compare Source
v10.48.21
Compare Source
whereDate
,whereDay
,whereMonth
,whereTime
,whereYear
andwhereJsonLength
to ignore invalid$operator
by @crynobone in #52704v10.48.20
Compare Source
v10.48.19
Compare Source
Model::resolveRouteBindingQuery
by @sebj54 in #52339Factory::afterCreating
callable argument type by @villfa in #52335v10.48.18
Compare Source
v10.48.17
Compare Source
v10.48.16
Compare Source
v10.48.15
Compare Source
HttpResponseException
by @hafezdivandari in #51986v10.48.14
Compare Source
Command
class by @crynobone in #51824shift()
on an empty collection by @Treggats in #51841schema:dump
will dump the migrations table only if it exists by @NickSdot in #51827v10.48.13
Compare Source
Enumerable unless()
$callback parameter optional by @faissaloux in #51701Enumerable unless()
$callback parameter optional" by @taylorotwell in #51707v10.48.12
Compare Source
BackedEnum
by @CAAHS in #51586v10.48.11
Compare Source
EmailTags
argument by @Tietew in #51352apa
on non ASCII characters by @faissaloux in #51428app()
Foundation helper onViewServiceProvider
by @rodrigopedra in #51522v10.48.10
Compare Source
v10.48.9
Compare Source
v10.48.8
Compare Source
orderByRaw()
in query before usingcursorPaginate()
by @axlon in #51023v10.48.7
Compare Source
95ef230
v10.48.6
Compare Source
v10.48.5
Compare Source
serializeAndRestore()
toNotificationFake
by @dbpolito in #50935v10.48.4
Compare Source
Collection::concat()
return type by @axlon in #50669v10.48.3
Compare Source
v10.48.2
Compare Source
v10.48.1
Compare Source
v10.48.0
Compare Source
Expression
at more places in Query Builder by @pascalbaljet in #50402Illuminate\Mail\Mailables\Envelope
docblock by @crynobone in #50448FileSystem.php
by @gcazin in #50459v10.47.0
Compare Source
Str::apa()
" fix by @osbre in #503400
TTL by @kayw-geek in #50359whereAll
andwhereAny
methods to the query builder by @musiermoore in #50344v10.46.0
Compare Source
Conditionable
in enum rule by @michaelnabil230 in #50257v10.45.1
Compare Source
v10.45.0
Compare Source
Stringable
phpdoc by @milwad-dev in #50075Collection::select()
to work onArrayAccess
by @axlon in #50072before
to thePendingBatch
by @xiCO2k in #50058Illuminate\Support\Str::fromBase64()
return type by @SamAsEnd in #50108v10.44.0
Compare Source
getPreviousUrlFromSession
method in UrlGenerator by @milwad-dev in #49944setAbly()
method forAblyBroadcaster
by @Rijoanul-Shanto in #49981toBase64()
andfromBase64()
methods to Stringable and Str classes by @mtownsend5512 in #49984Throwable
import and handle iforiginalExceptionHandler
ororiginalDeprecationHandler
property isn't used by alternative TestCase by @crynobone in #50021Arr::take()
helper by @ryangjchandler in #50015GeneratorCommand
by @xurshudyan in #50043v10.43.0
Compare Source
\Illuminate\Log\LogManager
method definition comments with\Psr\Logger\Interface
by @eusonlito in #49805hasIndex()
and minor Schema enhancements by @hafezdivandari in #49796BelongsToMany
relation when usingwithoutTouching
by @mateusjunges in #49798insertOrIgnoreUsing
for Eloquent by @trovster in #49827hasIndex()
Order-sensitive by @hafezdivandari in #49840$guarded
by @eusonlito in #49851beforeStartingTransaction
callback and use it inLazilyRefreshDatabase
by @pascalbaljet in #49853FormRequest@getRules()
method by @cosmastech in #49860Translator
may incorrectly report the locale of a missing translation key by @VicGUTT in #49900v10.42.0
Compare Source
File::hasSameHash()
by @simonhamp in #49721Carbon
if accessed from Laravel or also usesilluminate/support
by @crynobone in #49772Str::unwrap
by @stevebauman in #49779v10.41.0
Compare Source
threshold
parameter to theNumber::spell
helper by @caendesilva in #49610php artisan model:prune
by @dbhynds in #49617ensureIntlExtensionIsInstalled
inNumber
class. by @devajmeireles in #49660Number
class. by @devajmeireles in #49681v10.40.0
Compare Source
Model::preventAccessingMissingAttributes()
raises exception for enums & primitive castable attributes that were not retrieved by @cosmastech in #49480Arr::dot()
method to properly handle indexes array by @kayw-geek in #49507Number::clamp
by @jbrooksuk in #49512RedisCluster::client()
call by @tillkruss in #49560PhpRedisConnector
by @tillkruss in #49559where*()
methods ofIlluminate\Database\Query\Builder
by @lorenzolosa in #49599InteractsWithTime
trait method by @xurshudyan in #49601assertCount
test helper by @xurshudyan in #49609v10.39.0
Compare Source
maxTries
for queued jobs by @mechelon in #49473v10.38.2
Compare Source
conflict
fordoctrine/dbal:^4.0
toilluminate/database
by @crynobone in #49456v10.38.1
Compare Source
Configuration
📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.