Web Development

Security Release: Laravel 6.18.35, 7.24.0

**Note: This security patch only affects applications using the `$guarded` property on models. In addition, applications that set `$guarded` to `[]` or `['*']` are not affected by the bug described in this post.** Today we are releasi...

Security Release: Laravel 6.18.34, 7.23.2

Today we released a security patch for Laravel 6.x and 7.x. In previous releases of Laravel, it was possible to mass assign Eloquent attributes that included the model's table name: ``` $model->fill(['users.name' => 'Taylor']); ``` ...

Forge: Load Balancer Methods

Load balancers in Forge are used to distribute web traffic amongst two or more servers and are often used for websites which receive high volumes of traffic.Starting today, you may now choose one of three load balancing methods:Round R...

Forge: Password Protected Paths

We are excited to announce that you can now configure and manage password protected paths within the Forge dashboard.Previously, this had to be done manually by logging into the server and configuring the protection by hand within Ngin...

Laravel Cookie Security Releases

Today we released several fixes to address a security vulnerability in the framework that we were notified of during the weekend. Application's using the "cookie" session driver were the primary applications affected by this vulnerabi...

Security Release: Laravel 6.18.29, 7.22.2

Today we have released a security patch for Laravel versions 6.x and 7.x. These releases have been released as Laravel 6.18.29 and 7.22.2. All Laravel users are encouraged to upgrade to these versions as soon as possible. Upgrading to...

Laravel v7.19.0 released

Laravel v7.19.0 is released in 2020/07/07, here are the changes we`ve merged into this release. ## [v7.19.0 (2020-07-07)](https://github.com/laravel/framework/compare/v7.18.0...v7.19.0) ### Added - Added `everyTwoHours()` | `everyThr...

Forge: Multiple PHP Installations

Today we're pleased to announce that Laravel Forge now supports managing multiple versions of PHP on a single server! This new feature is available to all Forge subscription plans.Once installed, you may assign a specific PHP version t...

Forge: Custom Backup Providers

Forge now supports using a custom S3 compatible provider for your database backups. When using a custom provider, such as MinIO, you must provide the endpoint and bucket for your S3 compatible host:Configuring a custom MinIO host.Once ...

Forge: Automatic Bitbucket Deployment Keys

Beginning today, Forge will automatically add its deployment key to Bitbucket repositories.Previously, due to lack of support in Bitbucket's v2 API, we've asked that you manually add the deployment key to your Bitbucket repository befo...

Laravel v7.16.0 released

Laravel v7.16.0 is released in 2020/06/16, here are the changes we`ve merged into this release. ## [v7.16.0 (2020-06-16)](https://github.com/laravel/framework/compare/v7.15.0...v7.16.0) ### Added - Added `makeVisibleIf` and `makeHidd...

Forge: Deploy Script Environment Variables

We've super-charged custom deployment scripts in Laravel Forge with the addition of dynamic environment variables. When Forge deploys your website, we will now automatically inject several environment variables within the context of yo...

Laravel v7.15.0 released

Laravel v7.15.0 is released in 2020/06/09, here are the changes we`ve merged into this release. ## [v7.15.0 (2020-06-09)](https://github.com/laravel/framework/compare/v7.14.1...v7.15.0) ### Added - Added extendable relations for mode...

Vapor Tinker Command

Today we released version v1.7.0 of `laravel/vapor-cli`. This release includes a new `tinker` command. Using the new command, you can execute code on Vapor using Laravel Tinker: ``` vapor tinker --code="dump(App\User::find(1))" ``` I...

Laravel v7.14.0 released

Laravel v7.14.0 is released in 2020/06/02, here are the changes we`ve merged into this release.v7.14.0 (2020-06-02)AddedViews: make attributes available within render method (#32978)Added forceDeleted method to SoftDelet...

Laravel v7.13.0 released

v7.13.0 (2020-05-26)AddedAdded Illuminate\Pagination\AbstractPaginator::useTailwind() (2279b73, bf1eef4, 13a9ec3)FixedFixed route list command for excluded middleware (7ebd211)Fixed behavior of oneachside = 1 with p...

Envoyer: Healthchecker Upgrades

On Tuesday 26th May, we upgraded Envoyer's "health check" servers in NYC, London, and Singapore.Due to the upgrades, the service now operates from three new IP addresses. We have documented the new server IPs here: https://envoyer.io/d...

Vapor: Adding Imagick As Separate Lambda Layer

Starting today, you can add Imagick support to your projects by importing an external Lambda layer. This change decreases the size of the default Vapor runtime layer and allows customers that don't use Imagick to upload larger applicat...

Forge: Ubuntu 20.04 & New AWS Regions

Beginning today, Forge will provision all new servers with Ubuntu 20.04, the latest Ubuntu LTS release. If you would like to provision a new server using Forge's "Custom VPS" option, you should now ensure your server Ubuntu 20.04 insta...

Forge: Removing "beanstalkd"

Beginning today, Forge will no longer install beanstalkd on new servers. We have noted an increase in provisioning failures due to the beanstalkd service failing. In addition, beanstalkd usage among Laravel users has declined sharply w...

Laravel v7.12.0 released

Laravel v7.12.0 is released in 2020/05/19, here are the changes we`ve merged into this release. v7.12.0 (2020-05-19)AddedAdded Illuminate\Http\Middleware\TrustHosts (9229264)Added ability to skip middleware from resource rout...

Passport v9.1.0 Breaking Changes

After the v9.0.0 release for Passport on Tuesday, we discovered an incompatibility with Personal Access Clients and the new client secret hashing feature. The fix that required for this introduces a breaking change for anyone who has a...

Forge: Telegram Notifications

Forge can now send deployment notifications to your Telegram group chat.You can configure Telegram within the Notifications tab of your site. Check the documentation here.Like with Slack notifications, Forge will notify you on the succ...

Laravel v7.10.0 released

Laravel v7.10.0 is released in 2020/05/05, here are the changes we`ve merged into this release.v7.10.0 (2020-05-05)AddedAdded artisan make:cast command (#32594)Added Illuminate\Foundation\Testing\Concerns\InteractsWithDa...

Forge: Composer Update Times

At the beginning of April, we deployed a change to all new and existing Forge servers to randomize the composer self-update cron task.Previously, all Forge servers would attempt to update Composer at midnight which was unintentionally ...

Laracon Online 2020

Hey everyone!As many of you know, we had to cancel Laracon US 2020 due to the ongoing pandemic and travel restrictions. While unfortunate, it led me to step back and rethink the current Laracon landscape. Typically, I make the year's m...

Laravel 7.9.0 – Blade Component Improvements

Today I released Laravel 7.9.0. This release includes two improvements for Blade components.Blade Echo Within AttributesFirst, the release fixes a developer experience issue when using Blade components in combination with Laravel Livew...

Laravel v7.7.0 released

Laravel v7.7.0 is released in 2020/04/21, here are the changes we`ve merged into this release.AddedAdded ArrayAccess support for Http client get requests (#32401)Added Illuminate\Http\Client\Factory::assertSentCount() (#32407...

Forge: Metric Monitoring

Today we are launching an exciting new feature for Laravel Forge: metric monitoring! Laravel team member James Brooks has been working hard on this feature for two months.This feature allows you to monitor your server's CPU load, RAM, ...

Laravel v7.6.0 released

Laravel v7.6.0 is released in 2020/04/14, here are the changes we`ve merged into this release.AddedAdded Collection::until() method (#32262)Added HtmlString::isEmpty() method (#32289, #32300)Added Illumina...

Vapor: HTTP APIs / API Gateway 2.0

When you launch an application on Laravel Vapor, we use AWS API Gateway to point web traffic to the AWS Lambda function that is powering your application. Normally, this is all magic that happens behind the scenes when using Vapor.A fe...

Cashier v11

We're very excited to announce the immediate availability of Cashier v11. This release of Cashier introduces support for Multiplan Subscriptions as well as Stripe's new Tax Rates feature.Multiplan SubscriptionsMultiplan subscriptions a...

Laravel v7.5.0 released

Laravel v7.5.0 is released in 2020/04/07, here are the changes we`ve merged into this release.AddedAdded assertNotSent() and assertNothingSent() methods to Illuminate\Http\Client\Factory (#32197)Added enum...

Laravel v7.4.0 released

Laravel v7.4.0 is released in 2020/03/31, here are the changes we`ve merged into this release.AddedMakes the stubs used for make:policy customizable (#32040, 9d36a36)Implement HigherOrderWhenProxy for Collectio...

Airlock Renamed To Sanctum

Due to a trademark dispute regarding the name "Airlock", we have renamed Laravel Airlock to Laravel Sanctum (https://github.com/laravel/sanctum) and have tagged its initial release.You may install Sanctum using composer require laravel...

Laravel v7.2.0 released

Laravel v7.2.0 is released in 2020/03/17, here are the changes we`ve merged into this release.AddedAdded Illuminate\Testing\PendingCommand::expectsConfirmation() (#31965)Allowed configuring the timeout for the smtp mail drive...

Security: Laravel 7.1.2 Released

Today we released Laravel 7.1.2 to address a possible XSS related attack vector in the Laravel 7.x Blade Component tag attributes when users are allowed to dictate the value of attributes. All Laravel 7.x users are encouraged to upgrad...