laravel

Security Release: Laravel 6.18.34, 7.23.2


Today we released a security patch for Laravel 6.x and 7.x.

In previous releases of Laravel, it was possible to mass assign Eloquent attributes that included the model's table name:

```
$model->fill(['users.name' => 'Taylor']);
```

...

Forge: Load Balancer Methods


Load balancers in Forge are used to distribute web traffic amongst two or more servers and are often used for websites which receive high volumes of traffic.Starting today, you may now choose one of three load balancing methods:Round R...

Forge: Password Protected Paths


We are excited to announce that you can now configure and manage password protected paths within the Forge dashboard.Previously, this had to be done manually by logging into the server and configuring the protection by hand within Ngin...

Laravel Cookie Security Releases


Today we released several fixes to address a security vulnerability in the framework that we were notified of during the weekend.

Application's using the "cookie" session driver were the primary applications affected by this vulnerabi...

Security Release: Laravel 6.18.29, 7.22.2


Today we have released a security patch for Laravel versions 6.x and 7.x. These releases have been released as Laravel 6.18.29 and 7.22.2. All Laravel users are encouraged to upgrade to these versions as soon as possible.

Upgrading to...

Laravel v7.19.0 released


Laravel v7.19.0 is released in 2020/07/07, here are the changes we`ve merged into this release.

## [v7.19.0 (2020-07-07)](https://github.com/laravel/framework/compare/v7.18.0...v7.19.0)

### Added
- Added `everyTwoHours()` | `everyThr...

Forge: Multiple PHP Installations


Today we're pleased to announce that Laravel Forge now supports managing multiple versions of PHP on a single server! This new feature is available to all Forge subscription plans.Once installed, you may assign a specific PHP version t...

Forge: Custom Backup Providers


Forge now supports using a custom S3 compatible provider for your database backups. When using a custom provider, such as MinIO, you must provide the endpoint and bucket for your S3 compatible host:Configuring a custom MinIO host.Once ...

Forge: Automatic Bitbucket Deployment Keys


Beginning today, Forge will automatically add its deployment key to Bitbucket repositories.Previously, due to lack of support in Bitbucket's v2 API, we've asked that you manually add the deployment key to your Bitbucket repository befo...

Laravel v7.16.0 released


Laravel v7.16.0 is released in 2020/06/16, here are the changes we`ve merged into this release.

## [v7.16.0 (2020-06-16)](https://github.com/laravel/framework/compare/v7.15.0...v7.16.0)

### Added
- Added `makeVisibleIf` and `makeHidd...

Forge: Deploy Script Environment Variables


We've super-charged custom deployment scripts in Laravel Forge with the addition of dynamic environment variables. When Forge deploys your website, we will now automatically inject several environment variables within the context of yo...

Laravel v7.15.0 released


Laravel v7.15.0 is released in 2020/06/09, here are the changes we`ve merged into this release.

## [v7.15.0 (2020-06-09)](https://github.com/laravel/framework/compare/v7.14.1...v7.15.0)

### Added
- Added extendable relations for mode...

Vapor Tinker Command


Today we released version v1.7.0 of `laravel/vapor-cli`. This release includes a new `tinker` command. Using the new command, you can execute code on Vapor using Laravel Tinker:

```
vapor tinker --code="dump(App\User::find(1))"
```

I...

Laravel v7.14.0 released


Laravel v7.14.0 is released in 2020/06/02, here are the changes we`ve merged into this release.v7.14.0 (2020-06-02)AddedViews: make attributes available within render method (#32978)Added forceDeleted method to SoftDelet...

Laravel v7.13.0 released


v7.13.0 (2020-05-26)AddedAdded Illuminate\Pagination\AbstractPaginator::useTailwind() (2279b73, bf1eef4, 13a9ec3)FixedFixed route list command for excluded middleware (7ebd211)Fixed behavior of oneachside = 1 with p...

Envoyer: Healthchecker Upgrades


On Tuesday 26th May, we upgraded Envoyer's "health check" servers in NYC, London, and Singapore.Due to the upgrades, the service now operates from three new IP addresses. We have documented the new server IPs here: https://envoyer.io/d...

Vapor: Adding Imagick As Separate Lambda Layer


Starting today, you can add Imagick support to your projects by importing an external Lambda layer. This change decreases the size of the default Vapor runtime layer and allows customers that don't use Imagick to upload larger applicat...

Forge: Ubuntu 20.04 & New AWS Regions


Beginning today, Forge will provision all new servers with Ubuntu 20.04, the latest Ubuntu LTS release. If you would like to provision a new server using Forge's "Custom VPS" option, you should now ensure your server Ubuntu 20.04 insta...

Forge: Removing "beanstalkd"


Beginning today, Forge will no longer install beanstalkd on new servers. We have noted an increase in provisioning failures due to the beanstalkd service failing. In addition, beanstalkd usage among Laravel users has declined sharply w...

Laravel v7.12.0 released


Laravel v7.12.0 is released in 2020/05/19, here are the changes we`ve merged into this release. v7.12.0 (2020-05-19)AddedAdded Illuminate\Http\Middleware\TrustHosts (9229264)Added ability to skip middleware from resource rout...

Passport v9.1.0 Breaking Changes


After the v9.0.0 release for Passport on Tuesday, we discovered an incompatibility with Personal Access Clients and the new client secret hashing feature. The fix that required for this introduces a breaking change for anyone who has a...

Forge: Telegram Notifications


Forge can now send deployment notifications to your Telegram group chat.You can configure Telegram within the Notifications tab of your site. Check the documentation here.Like with Slack notifications, Forge will notify you on the succ...

Laravel v7.10.0 released


Laravel v7.10.0 is released in 2020/05/05, here are the changes we`ve merged into this release.v7.10.0 (2020-05-05)AddedAdded artisan make:cast command (#32594)Added Illuminate\Foundation\Testing\Concerns\InteractsWithDa...

Forge: Composer Update Times


At the beginning of April, we deployed a change to all new and existing Forge servers to randomize the composer self-update cron task.Previously, all Forge servers would attempt to update Composer at midnight which was unintentionally ...

Laracon Online 2020


Hey everyone!As many of you know, we had to cancel Laracon US 2020 due to the ongoing pandemic and travel restrictions. While unfortunate, it led me to step back and rethink the current Laracon landscape. Typically, I make the year's m...

Laravel 7.9.0 – Blade Component Improvements


Today I released Laravel 7.9.0. This release includes two improvements for Blade components.Blade Echo Within AttributesFirst, the release fixes a developer experience issue when using Blade components in combination with Laravel Livew...

Laravel v7.7.0 released


Laravel v7.7.0 is released in 2020/04/21, here are the changes we`ve merged into this release.AddedAdded ArrayAccess support for Http client get requests (#32401)Added Illuminate\Http\Client\Factory::assertSentCount() (#32407...

Forge: Metric Monitoring


Today we are launching an exciting new feature for Laravel Forge: metric monitoring! Laravel team member James Brooks has been working hard on this feature for two months.This feature allows you to monitor your server's CPU load, RAM, ...

Laravel v7.6.0 released


Laravel v7.6.0 is released in 2020/04/14, here are the changes we`ve merged into this release.AddedAdded Collection::until() method (#32262)Added HtmlString::isEmpty() method (#32289, #32300)Added Illumina...

Vapor: HTTP APIs / API Gateway 2.0


When you launch an application on Laravel Vapor, we use AWS API Gateway to point web traffic to the AWS Lambda function that is powering your application. Normally, this is all magic that happens behind the scenes when using Vapor.A fe...

Cashier v11


We're very excited to announce the immediate availability of Cashier v11. This release of Cashier introduces support for Multiplan Subscriptions as well as Stripe's new Tax Rates feature.Multiplan SubscriptionsMultiplan subscriptions a...

Laravel v7.5.0 released


Laravel v7.5.0 is released in 2020/04/07, here are the changes we`ve merged into this release.AddedAdded assertNotSent() and assertNothingSent() methods to Illuminate\Http\Client\Factory (#32197)Added enum...

Laravel v7.4.0 released


Laravel v7.4.0 is released in 2020/03/31, here are the changes we`ve merged into this release.AddedMakes the stubs used for make:policy customizable (#32040, 9d36a36)Implement HigherOrderWhenProxy for Collectio...

Airlock Renamed To Sanctum


Due to a trademark dispute regarding the name "Airlock", we have renamed Laravel Airlock to Laravel Sanctum (https://github.com/laravel/sanctum) and have tagged its initial release.You may install Sanctum using composer require laravel...

Laravel v7.2.0 released


Laravel v7.2.0 is released in 2020/03/17, here are the changes we`ve merged into this release.AddedAdded Illuminate\Testing\PendingCommand::expectsConfirmation() (#31965)Allowed configuring the timeout for the smtp mail drive...

Security: Laravel 7.1.2 Released


Today we released Laravel 7.1.2 to address a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrad...

Laravel v7.1.0 released


Laravel v7.1.0 is released in 2020/03/10, here are the changes we`ve merged into this release.AddedAdded Illuminate\Routing\RouteRegistrar::apiResource() method (#31857)Added optional $table parameter to ForeignIdColumnD...

Laravel v7.0.0 released


Laravel v7.0.0 is released in 2020/03/03.Check the upgrade guide in the Official Laravel Upgrade Documentation. Also you can see some release notes in the Official Laravel Release Documentation.GitHub: https://github.com/lara...

Forge: Revoking LetsEncrypt Certificates


On February 29 2020, Let's Encrypt discovered a bug affecting millions of issued SSL certificates. These certificates will be revoked on March 4th. You can read the announcement on LetsEncrypt website.In order to ensure your sites cert...

Vapor: Custom Lambda Events


Today we released laravel/vapor-core version v2.5.1 with the ability to handle custom Lambda events. To get started, implement a vapor:handle artisan command in your application with the following signature:vapor:handle {payload}To ext...

Laravel v6.17.0 released


Laravel v6.17.0 is released in 2020/02/25, here are the changes we`ve merged into this release.AddedAllowed private-encrypted pusher channels (#31559, ceabaef, 8215e0d)Added file permission config option for the Fil...

Laravel v6.16.0 released


Laravel v6.16.0 is released in 2020/02/18, here are the changes we`ve merged into this release.AddedAdded Guzzle 7 support (#31484)Added Illuminate\Database\Query\Builder::groupByRaw() (#31498)Added SQLite JSON update support...

Laracon US 2020 Coupon Contest


We've partnered with ContestKit to offer the chance to win a 20% coupon for Laracon US 2020 tickets!We will not be using the collected email addresses for anything other than notifying those who win and we will not be sharing or sellin...

Forge: Database Backups Now Supported


Yesterday we launched an exciting new feature for Laravel Forge: database backups! Laravel team member James Brooks has been working hard on this feature for several weeks. Forge now allows you to configure hourly, daily, or weekly bac...

Laravel v6.15.0 released


Laravel v6.15.0 is released in 2020/02/11, here are the changes we`ve merged into this release.AddedAdded Illuminate\Auth\Events\Validated event (#31357, 7ddac28)Make Blueprint support Grammar's macro&nbsp...

Vapor: Job Timeouts


On February 10th, we've released v2.4.1 of laravel/vapor-core. This release includes an important fix for long running queued jobs. Before this fix, long running jobs were left to be terminated by Lambda after reaching the timeout set ...

Laravel v6.14.0 released


Laravel v6.14.0 is released in 2020/02/04, here are the changes we`ve merged into this release.AddedAdded Illuminate\Bus\Dispatcher::dispatchAfterResponse() method (#31300, 8a3cdb0)Added Illuminate\Support\Testing\F...

Laravel v6.13.0 released


Laravel v6.13.0 is released in 2020/01/28, here are the changes we`ve merged into this release.AddedAdded --api option to the make:model command (#31197, #31222)Added PendingResourceRegistration::shallow()...

Laravel v6.12.0 released


Laravel v6.12.0 is released in 2020/01/21, here are the changes we`ve merged into this release.AddedAdded ServiceProvider::loadFactoriesFrom() method (#31133)Added TestResponse::dumpSession() method (#31131)Added&nb...

Vapor: Separate Queue Lambdas


Starting today, new Vapor deployments will ensure a separate AWS Lambda function exists for running your queued jobs.Before this change, queued jobs executed within the CLI Lambda. This Lambda is also used for running deployment comman...

Laravel v6.11.0 released


Laravel v6.11.0 is released in 2020/01/14, here are the changes we`ve merged into this release.AddedAdded Illuminate\Database\Eloquent\Builder::firstWhere() method (#31089)Redis Broadcaster: Broadcast to multiple channels at ...

Vapor: Rotating Your RDS SSL/TLS Certificates


Amazon RDS has published new SSL/TLS certificates for connecting to your RDS databases. The current certificates will expire on March 5th, 2020.All Vapor users using RDS databases in their projects should update their instances to the ...

Laravel v6.10.0 released


Laravel v6.10.0 is released in 2020/01/07, here are the changes we`ve merged into this release.AddedAdded withoutMix() and withMix() test helpers (#30900)Added validateWithBag() macro to Request ...

Laravel v6.8.0 released


Laravel v6.8.0 is released in 2019/12/17, here are the changes we`ve merged into this release.AddedAllowed packages to use custom markdown mail themes (#30814, 2206d52)Added more quotes to Inspiring (4a7d566, 9693ce...

Laravel v6.7.0 released


Laravel v6.7.0 is released in 2019/12/10, here are the changes we`ve merged into this release.AddedAdded getQualifiedCreatedAtColumn() and getQualifiedUpdatedAtColumn() methods to HasTimestamps concern (#3...